last executing test programs: 9.961907766s ago: executing program 0 (id=713): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x1300) sendmsg$kcm(r0, &(0x7f0000007140)={&(0x7f0000002ac0)=@in6={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000700)="33ec4646303b97b5d6456ebfa22f0957c565b0f65f76b4e2e7e8a50be92b7a06860cf6b409b88498e862c7062ef1a68e76418dce800f41ce1937e985333120cf039a4aa98f616f865b7ab32244fc9fd498f055ca3abde5438c98984667cd1839cf745907a0f335446bcab97f79af23608a279c933f445095fb9daae8eeeca28a92aeb31edec2e4602e", 0xfdc3}, {&(0x7f0000000cc0)="ddcdbcf9979ee9fe9c8f3412311dec3167f06689964679d7194ae3266acae6a5a78b242b0d45b16d0f05f58899f162538179b4aab3b86cfffb22fd488730a461aa8b9ed7a7feec4c589936db24be4a02b4db6fb8732ba774dab15f565187f523b44caf67680f749cc3cc72b53cebfc4ce1625a338a2840b9ef8f9c29622bbdfba51849d8864f780d01644fc31bdf207ab8d53a8bea3127959e5b104f2e91b78be2354802c77c212e0bea452fad629d85cc31e7739860c5f0e56727a018e7866a3bf39a289e6b99d65428bb8bcf8453be6a3db19fadbc1cfcc184446bac105fd3c82c713a39469ac6ee43cbded9c55db0adcfc5aa999c2b9f", 0xf8}, {&(0x7f0000000dc0)="fa6be91192510d75dcaad9601eed42e8eaf9ade63209b6c9de8a7788390c58f8d68e4d14958d4f49cdb0668ce23c28266da2157aeceefcdd38360b0230cf5d646ce21a47a75eb0cea53eb938b1317e1a175122bff51f23e0be24fe2dae9b87411563cdba3376369f0970c6c3227d5f3768c2ce1fa818f2f87d75ee0ed2669cc09f6c7c28947e0f7181528f58daec966ee973e65a2036928d7ab30606e4be2d2cceef4686fba1eabd1eb19673149e81d8af8e8042117b7161", 0xb8}, {&(0x7f0000000e80)="15c9f16709dbaa0483e7f1a78f9acd0b3119aa242e265ca24f2d41a644bfbbcb99eea6d46775f32bdb9ef08e9b3112c156323fe1532122eca6af19bed165e6bc11ba65545e92fb6331cdb13c64f8332f8cdf206a91d131546e44c372dd7876f582f07f5cc84364acd02a2fa88b61cedf42c2f6f29b846e26937c63a68818410a6e2dd5726d91385c95f49b125d6860d29e427420f25f0a8d023694", 0x9b}, {&(0x7f00000008c0)="53f1d7167315de49c9d91b9dc3dc1c785d0dfdc93dcf99723250fe2223dcbf354fe99ddd6d6085a133a974c6333d1e05c2265c1dd75c255990ced0aa0d33ba2439bf8e53fce9dff619184704abd46a34799f525e7df408518c3a493bd710a3304a", 0x61}, {&(0x7f0000002980)="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"/301, 0x12d}, {&(0x7f0000001980)="a4aa830bf599e9fdfe99b0fc58f920727a4909fc6b08a896004f4262cc3460bfa11e0a8460606e556e9b559cc1a2a76f34312be21f3415d74741804e74f2b73df27f0b09bcd71b2bc91d04ff26bee3c8042d1a5d481c1f544309dee43ab410c5595bffd7f6af0c24548cbaa6f0e6470a2236a527bf47e58c716caa6f9cdcccda0693ce27b7ad9563c310755511c5572b7b3bc90874d8762f5adcd8f8dd7270bfd11700", 0xa3}], 0x7}, 0x0) 9.861101865s ago: executing program 0 (id=714): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 9.780008101s ago: executing program 0 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.68035899s ago: executing program 0 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x2004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) 2.278683857s ago: executing program 0 (id=717): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(0x0, 0x0, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 2.278199227s ago: executing program 1 (id=718): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.879572443s ago: executing program 1 (id=719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00', r0}, 0xf) 1.700865987s ago: executing program 1 (id=720): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000018110000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.700434767s ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x1225}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000400)=[@request_death, @increfs={0x40046304, 0xfffffffe}], 0xfffffffffffffcc0, 0x0, 0x0}) 1.399283724s ago: executing program 1 (id=722): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee00, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) close(0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) 218.404068ms ago: executing program 1 (id=723): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/13, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000fb00"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 0s ago: executing program 1 (id=724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x34, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): ] [<8166b3f4>] (udp_recvmsg) from [<8167b71c>] (inet_recvmsg+0x50/0x110) [ 119.864640][ T4068] r10:0000000a r9:00000000 r8:00000000 r7:00000000 r6:831ea000 r5:8166b3f4 [ 119.864964][ T4068] r4:e02f1e90 [ 119.865137][ T4068] [<8167b6cc>] (inet_recvmsg) from [<8144fd50>] (sock_recvmsg+0x50/0x78) [ 119.866093][ T4068] r6:831ea000 r5:e02f1e90 r4:8167b6cc [ 119.867111][ T4068] [<8144fd00>] (sock_recvmsg) from [<814527a4>] (__sys_recvfrom+0xc8/0x148) [ 119.867507][ T4068] r7:e02f1edc r6:831ea000 r5:00000000 r4:00000000 [ 119.867791][ T4068] [<814526dc>] (__sys_recvfrom) from [<81452840>] (sys_recvfrom+0x1c/0x24) [ 119.868174][ T4068] r10:00000124 r9:84ad6c00 r8:8020029c r7:00000124 r6:00130d50 r5:00000000 [ 119.868478][ T4068] r4:00000000 [ 119.868657][ T4068] [<81452824>] (sys_recvfrom) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 119.869008][ T4068] Exception stack(0xe02f1fa8 to 0xe02f1ff0) [ 119.869284][ T4068] 1fa0: 00000000 00000000 00000003 200000c0 0000000a 00000000 [ 119.869633][ T4068] 1fc0: 00000000 00000000 00130d50 00000124 00000000 00006364 003d0f00 76b710bc [ 119.870010][ T4068] 1fe0: 76b70ec0 76b70eb0 000189d0 00132da0 [ 122.548206][ T31] audit: type=1400 audit(122.490:165): avc: denied { getopt } for pid=4072 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.788770][ T4080] FAULT_INJECTION: forcing a failure. [ 122.788770][ T4080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.789117][ T4080] CPU: 0 UID: 0 PID: 4080 Comm: syz.0.80 Not tainted 6.11.0-rc7-syzkaller #0 [ 122.789306][ T4080] Hardware name: ARM-Versatile Express [ 122.789484][ T4080] Call trace: [ 122.789584][ T4080] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 122.789795][ T4080] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 122.790031][ T4080] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 122.793206][ T4080] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 122.794140][ T4080] r5:00000000 r4:8274a3d4 [ 122.794478][ T4080] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 122.794844][ T4080] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 122.795189][ T4080] r6:00000000 r5:e03b5f68 r4:00000002 [ 122.795410][ T4080] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 122.795770][ T4080] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 122.796141][ T4080] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 122.796535][ T4080] r10:00000001 r9:805b430c r8:00000002 r7:e03b5f68 r6:0000000f r5:76b70f30 [ 122.796832][ T4080] r4:83e1a400 r3:e03b5e9f [ 122.797004][ T4080] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 122.797329][ T4080] r8:76b70f30 r7:e03b5f68 r6:83e1a400 r5:0000000f r4:84598cc0 [ 122.797585][ T4080] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 122.797938][ T4080] r10:00000003 r9:83e1a400 r8:8020029c r7:00000000 r6:00000000 r5:84598cc0 [ 122.798307][ T4080] r4:84598cc3 [ 122.798481][ T4080] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 122.798813][ T4080] r7:00000003 r6:00000005 r5:76b70f30 r4:0000000f [ 122.799061][ T4080] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 122.799399][ T4080] Exception stack(0xe03b5fa8 to 0xe03b5ff0) [ 122.799660][ T4080] 5fa0: 0000000f 76b70f30 00000005 76b70f30 0000000f 00000000 [ 122.799978][ T4080] 5fc0: 0000000f 76b70f30 00000005 00000003 00000000 00006364 003d0f00 76b710bc [ 122.800368][ T4080] 5fe0: 00000158 76b70ed0 000d82e0 00130c74 [ 122.884723][ T4082] FAULT_INJECTION: forcing a failure. [ 122.884723][ T4082] name failslab, interval 1, probability 0, space 0, times 0 [ 122.885086][ T4082] CPU: 0 UID: 0 PID: 4082 Comm: syz.0.81 Not tainted 6.11.0-rc7-syzkaller #0 [ 122.885277][ T4082] Hardware name: ARM-Versatile Express [ 122.885404][ T4082] Call trace: [ 122.885596][ T4082] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 122.885979][ T4082] r7:00000d40 r6:84598bb0 r5:60000013 r4:8200ca20 [ 122.886463][ T4082] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 122.886813][ T4082] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 122.887097][ T4082] r5:00000000 r4:8271619c [ 122.887249][ T4082] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 122.887481][ T4082] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 122.887777][ T4082] r6:84598bb0 r5:00000018 r4:82c01240 [ 122.887960][ T4082] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 122.888180][ T4082] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 122.888472][ T4082] r10:00000fff r9:82c9bc00 r8:00000000 r7:83261660 r6:84598bb0 r5:8486affd [ 122.888709][ T4082] r4:8486aff0 [ 122.888831][ T4082] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 122.889044][ T4082] r9:82c9bc00 r8:00000000 r7:83261660 r6:84598bb0 r5:00001000 r4:8486aff1 [ 122.889306][ T4082] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 122.889571][ T4082] r5:00001000 r4:8486a000 [ 122.889688][ T4082] [<80728b0c>] (tomoyo_realpath_from_path) from [<80724c8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 122.889988][ T4082] r10:83e19800 r9:00000000 r8:84598b40 r7:00005451 r6:00000004 r5:81ad0e68 [ 122.890389][ T4082] r4:84598bb0 r3:824b7380 [ 122.890641][ T4082] [<80724bc0>] (tomoyo_path_number_perm) from [<80729558>] (tomoyo_file_ioctl+0x1c/0x20) [ 122.890940][ T4082] r9:00000003 r8:84598b40 r7:84598b40 r6:00005451 r5:00000000 r4:822071e4 [ 122.891221][ T4082] [<8072953c>] (tomoyo_file_ioctl) from [<806ec510>] (security_file_ioctl+0x40/0x5c) [ 122.891541][ T4082] [<806ec4d0>] (security_file_ioctl) from [<80520cd0>] (sys_ioctl+0x50/0xda4) [ 122.891850][ T4082] r7:00000000 r6:84598b41 r5:00000000 r4:00005451 [ 122.892044][ T4082] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 122.892307][ T4082] Exception stack(0xe0379fa8 to 0xe0379ff0) [ 122.892557][ T4082] 9fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 122.892812][ T4082] 9fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b710bc [ 122.893047][ T4082] 9fe0: 76b70ec0 76b70eb0 000189d0 00132da0 [ 122.893234][ T4082] r10:00000036 r9:83e19800 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 122.893461][ T4082] r4:00000000 [ 122.901054][ T4082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.182783][ T31] audit: type=1400 audit(123.130:166): avc: denied { map } for pid=4089 comm="syz.0.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.183720][ T31] audit: type=1400 audit(123.130:167): avc: denied { read write } for pid=4089 comm="syz.0.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.651094][ T4099] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 123.651822][ T4099] audit: out of memory in audit_log_start [ 123.730907][ T31] audit: type=1400 audit(123.670:168): avc: denied { connect } for pid=4100 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.244003][ T31] audit: type=1400 audit(124.190:169): avc: denied { connect } for pid=4113 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.727221][ T4126] FAULT_INJECTION: forcing a failure. [ 124.727221][ T4126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.727877][ T4126] CPU: 1 UID: 0 PID: 4126 Comm: syz.1.93 Not tainted 6.11.0-rc7-syzkaller #0 [ 124.728207][ T4126] Hardware name: ARM-Versatile Express [ 124.728510][ T4126] Call trace: [ 124.728666][ T4126] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 124.729085][ T4126] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 124.729381][ T4126] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 124.729659][ T4126] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 124.730022][ T4126] r5:00000000 r4:8274a3d4 [ 124.730344][ T4126] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 124.730824][ T4126] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 124.731390][ T4126] r6:00000000 r5:e0585f68 r4:00000002 [ 124.731608][ T4126] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 124.731992][ T4126] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 124.732527][ T4126] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 124.733692][ T4126] r10:00000001 r9:805b430c r8:00000002 r7:e0585f68 r6:0000000f r5:76b25f30 [ 124.734366][ T4126] r4:8495e000 r3:e0585e9f [ 124.734733][ T4126] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 124.735188][ T4126] r8:76b25f30 r7:e0585f68 r6:8495e000 r5:0000000f r4:84252780 [ 124.735595][ T4126] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 124.736037][ T4126] r10:00000003 r9:8495e000 r8:8020029c r7:00000000 r6:00000000 r5:84252780 [ 124.736470][ T4126] r4:84252783 [ 124.736646][ T4126] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 124.737073][ T4126] r7:00000003 r6:00000004 r5:76b25f30 r4:0000000f [ 124.737489][ T4126] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 124.737962][ T4126] Exception stack(0xe0585fa8 to 0xe0585ff0) [ 124.738293][ T4126] 5fa0: 0000000f 76b25f30 00000004 76b25f30 0000000f 00000000 [ 124.738661][ T4126] 5fc0: 0000000f 76b25f30 00000004 00000003 00000000 00006364 003d0f00 76b260bc [ 124.739172][ T4126] 5fe0: 00000158 76b25ed0 000d82e0 00130c74 [ 124.946491][ T31] audit: type=1400 audit(124.890:170): avc: denied { mounton } for pid=4130 comm="syz.1.95" path=2F33312FE91F7189591E9233614B dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.986842][ T31] audit: type=1400 audit(124.930:171): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.065272][ T31] audit: type=1400 audit(125.010:172): avc: denied { write } for pid=4133 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.445634][ T4145] FAULT_INJECTION: forcing a failure. [ 125.445634][ T4145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.446230][ T4145] CPU: 0 UID: 0 PID: 4145 Comm: syz.1.99 Not tainted 6.11.0-rc7-syzkaller #0 [ 125.446567][ T4145] Hardware name: ARM-Versatile Express [ 125.446845][ T4145] Call trace: [ 125.447192][ T4145] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 125.447601][ T4145] r7:20000180 r6:20000140 r5:60000013 r4:8200ca20 [ 125.447811][ T4145] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 125.448108][ T4145] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 125.448426][ T4145] r5:00000000 r4:8274a3d4 [ 125.448595][ T4145] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 125.448913][ T4145] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 125.449260][ T4145] r6:20000140 r5:20000140 r4:849f4000 [ 125.449461][ T4145] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 125.449758][ T4145] [<808be6e0>] (should_fail_usercopy) from [<8182b1ec>] (sctp_getsockopt_default_sndinfo+0x48/0x1c8) [ 125.450153][ T4145] [<8182b1a4>] (sctp_getsockopt_default_sndinfo) from [<81833844>] (sctp_getsockopt+0x6b4/0x1c90) [ 125.450687][ T4145] r8:20000180 r7:00000010 r6:20000140 r5:00000022 r4:849f4000 [ 125.451147][ T4145] [<81833190>] (sctp_getsockopt) from [<81453dd4>] (sock_common_getsockopt+0x28/0x30) [ 125.451537][ T4145] r10:00000127 r9:20000180 r8:00000000 r7:84c06500 r6:00000022 r5:00000084 [ 125.451842][ T4145] r4:81833190 [ 125.452058][ T4145] [<81453dac>] (sock_common_getsockopt) from [<81450bbc>] (do_sock_getsockopt+0x10c/0x298) [ 125.452529][ T4145] r4:81453dac [ 125.452625][ T4145] [<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (sys_getsockopt+0x90/0xd4) [ 125.452959][ T4145] r9:84ad5400 r8:84c06500 r7:20000140 r6:00000022 r5:00000084 r4:00000000 [ 125.453232][ T4145] [<81452abc>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 125.453680][ T4145] Exception stack(0xdfb41fa8 to 0xdfb41ff0) [ 125.454033][ T4145] 1fa0: 20000180 00000000 00000003 00000084 00000022 20000140 [ 125.454337][ T4145] 1fc0: 20000180 00000000 00130d50 00000127 00000000 00006364 003d0f00 76b260bc [ 125.454634][ T4145] 1fe0: 76b25ec0 76b25eb0 000189d0 00132da0 [ 125.454878][ T4145] r8:8020029c r7:00000127 r6:00130d50 r5:00000000 r4:20000180 [ 126.197547][ T4167] FAULT_INJECTION: forcing a failure. [ 126.197547][ T4167] name failslab, interval 1, probability 0, space 0, times 0 [ 126.198157][ T4167] CPU: 0 UID: 0 PID: 4167 Comm: syz.1.102 Not tainted 6.11.0-rc7-syzkaller #0 [ 126.198559][ T4167] Hardware name: ARM-Versatile Express [ 126.198735][ T4167] Call trace: [ 126.198903][ T4167] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 126.199240][ T4167] r7:00000d40 r6:845981f0 r5:60000013 r4:8200ca20 [ 126.199410][ T4167] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 126.199648][ T4167] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 126.199890][ T4167] r5:00000000 r4:8271619c [ 126.200077][ T4167] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 126.200491][ T4167] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 126.200913][ T4167] r6:845981f0 r5:0000001d r4:82c01240 [ 126.201162][ T4167] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 126.201490][ T4167] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 126.201900][ T4167] r10:00000fff r9:82c9a800 r8:00000000 r7:83261bb0 r6:845981f0 r5:8486affc [ 126.202255][ T4167] r4:8486afea [ 126.202446][ T4167] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 126.202822][ T4167] r9:82c9a800 r8:00000000 r7:83261bb0 r6:845981f0 r5:00001000 r4:8486afeb [ 126.203189][ T4167] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 126.203619][ T4167] r5:00001000 r4:8486a000 [ 126.203860][ T4167] [<80728b0c>] (tomoyo_realpath_from_path) from [<80725090>] (tomoyo_path_perm+0xe4/0x200) [ 126.204387][ T4167] r10:83261bb0 r9:83ead258 r8:00000001 r7:00000000 r6:00000007 r5:00000000 [ 126.204740][ T4167] r4:00000000 r3:00000000 [ 126.204961][ T4167] [<80724fac>] (tomoyo_path_perm) from [<807294f0>] (tomoyo_file_truncate+0x1c/0x20) [ 126.205546][ T4167] r8:84ad5400 r7:00000000 r6:00000000 r5:84598180 r4:8220711c [ 126.205969][ T4167] [<807294d4>] (tomoyo_file_truncate) from [<806f01d8>] (security_file_truncate+0x30/0x4c) [ 126.206355][ T4167] [<806f01a8>] (security_file_truncate) from [<805030b8>] (do_ftruncate+0xdc/0x1e4) [ 126.206787][ T4167] r5:00000000 r4:84598180 [ 126.207015][ T4167] [<80502fdc>] (do_ftruncate) from [<8050328c>] (sys_ftruncate+0x48/0x84) [ 126.207333][ T4167] r10:0000005d r9:84ad5400 r8:8020029c r7:00000000 r6:84598180 r5:84598181 [ 126.207601][ T4167] r4:00000000 [ 126.207826][ T4167] [<80503244>] (sys_ftruncate) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 126.208208][ T4167] Exception stack(0xe46f1fa8 to 0xe46f1ff0) [ 126.208579][ T4167] 1fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 126.208968][ T4167] 1fc0: 00000000 00000000 00130d50 0000005d 00000000 00006364 003d0f00 76b260bc [ 126.209410][ T4167] 1fe0: 76b25ec0 76b25eb0 000189d0 00132da0 [ 126.209642][ T4167] r7:0000005d r6:00130d50 r5:00000000 r4:00000000 [ 126.218625][ T4167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.328839][ T31] audit: type=1400 audit(126.270:173): avc: denied { create } for pid=4169 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.333721][ T31] audit: type=1400 audit(126.280:174): avc: denied { write } for pid=4169 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.444659][ T4175] FAULT_INJECTION: forcing a failure. [ 126.444659][ T4175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.445340][ T4175] CPU: 0 UID: 0 PID: 4175 Comm: syz.1.105 Not tainted 6.11.0-rc7-syzkaller #0 [ 126.445760][ T4175] Hardware name: ARM-Versatile Express [ 126.446032][ T4175] Call trace: [ 126.446287][ T4175] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 126.446687][ T4175] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 126.447271][ T4175] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 126.447627][ T4175] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 126.448267][ T4175] r5:00000000 r4:8274a3d4 [ 126.448464][ T4175] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 126.448895][ T4175] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 126.449280][ T4175] r6:00000000 r5:ea799f68 r4:00000002 [ 126.449542][ T4175] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 126.449913][ T4175] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 126.451252][ T4175] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 126.452248][ T4175] r10:00000001 r9:805b430c r8:00000002 r7:ea799f68 r6:0000000f r5:76b25f30 [ 126.452554][ T4175] r4:84ad5400 r3:ea799e9f [ 126.452757][ T4175] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 126.453665][ T4175] r8:76b25f30 r7:ea799f68 r6:84ad5400 r5:0000000f r4:84598240 [ 126.454385][ T4175] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 126.454732][ T4175] r10:00000003 r9:84ad5400 r8:8020029c r7:00000000 r6:00000000 r5:84598240 [ 126.455462][ T4175] r4:84598243 [ 126.455641][ T4175] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 126.456224][ T4175] r7:00000003 r6:00000004 r5:76b25f30 r4:0000000f [ 126.456540][ T4175] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 126.456904][ T4175] Exception stack(0xea799fa8 to 0xea799ff0) [ 126.457182][ T4175] 9fa0: 0000000f 76b25f30 00000004 76b25f30 0000000f 00000000 [ 126.457533][ T4175] 9fc0: 0000000f 76b25f30 00000004 00000003 00000000 00006364 003d0f00 76b260bc [ 126.457927][ T4175] 9fe0: 00000158 76b25ed0 000d82e0 00130c74 [ 126.569498][ T31] audit: type=1400 audit(126.510:175): avc: denied { ioctl } for pid=4171 comm="syz.0.104" path="socket:[2615]" dev="sockfs" ino=2615 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.583436][ T31] audit: type=1400 audit(126.530:176): avc: denied { create } for pid=4177 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.588538][ T4172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4172 comm=syz.0.104 [ 126.591232][ T31] audit: type=1400 audit(126.540:177): avc: denied { read } for pid=4177 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.737523][ T31] audit: type=1400 audit(126.680:178): avc: denied { ioctl } for pid=4177 comm="syz.1.106" path="socket:[3746]" dev="sockfs" ino=3746 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.512473][ T31] audit: type=1400 audit(127.460:179): avc: denied { ioctl } for pid=4196 comm="syz.1.108" path="socket:[3758]" dev="sockfs" ino=3758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.175039][ T31] audit: type=1400 audit(130.120:180): avc: denied { create } for pid=4237 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.208006][ T31] audit: type=1400 audit(130.150:181): avc: denied { connect } for pid=4237 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.715374][ T31] audit: type=1400 audit(130.660:182): avc: denied { ioctl } for pid=4237 comm="syz.1.111" path="socket:[2653]" dev="sockfs" ino=2653 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.489516][ T31] audit: type=1400 audit(131.430:183): avc: denied { ioctl } for pid=4243 comm="syz.1.113" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3806 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.564007][ T31] audit: type=1400 audit(131.510:184): avc: denied { setattr } for pid=4246 comm="syz.1.114" name="CAN_J1939" dev="sockfs" ino=3807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.591091][ T4247] syz.1.114 uses obsolete (PF_INET,SOCK_PACKET) [ 131.601091][ T31] audit: type=1400 audit(131.550:185): avc: denied { getopt } for pid=4246 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.199195][ T4250] FAULT_INJECTION: forcing a failure. [ 132.199195][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 132.204491][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.1.115 Not tainted 6.11.0-rc7-syzkaller #0 [ 132.205101][ T4250] Hardware name: ARM-Versatile Express [ 132.205605][ T4250] Call trace: [ 132.206100][ T4250] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 132.207360][ T4250] r7:00000d40 r6:852981f0 r5:60000013 r4:8200ca20 [ 132.208475][ T4250] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 132.208870][ T4250] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 132.209207][ T4250] r5:00000000 r4:8271619c [ 132.209383][ T4250] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 132.209716][ T4250] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 132.210271][ T4250] r6:852981f0 r5:00000018 r4:82c01240 [ 132.211401][ T4250] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 132.211849][ T4250] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 132.212289][ T4250] r10:00000fff r9:82c9bc00 r8:00000000 r7:833fd990 r6:852981f0 r5:8486effd [ 132.212650][ T4250] r4:8486eff0 [ 132.212861][ T4250] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 132.213365][ T4250] r9:82c9bc00 r8:00000000 r7:833fd990 r6:852981f0 r5:00001000 r4:8486eff1 [ 132.215788][ T4250] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 132.216239][ T4250] r5:00001000 r4:8486e000 [ 132.216450][ T4250] [<80728b0c>] (tomoyo_realpath_from_path) from [<80724c8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 132.216911][ T4250] r10:84ad1800 r9:00000000 r8:85298180 r7:00005451 r6:00000004 r5:81ad0e68 [ 132.217247][ T4250] r4:852981f0 r3:824b7380 [ 132.217446][ T4250] [<80724bc0>] (tomoyo_path_number_perm) from [<80729558>] (tomoyo_file_ioctl+0x1c/0x20) [ 132.218012][ T4250] r9:00000003 r8:85298180 r7:85298180 r6:00005451 r5:00000000 r4:822071e4 [ 132.218330][ T4250] [<8072953c>] (tomoyo_file_ioctl) from [<806ec510>] (security_file_ioctl+0x40/0x5c) [ 132.218710][ T4250] [<806ec4d0>] (security_file_ioctl) from [<80520cd0>] (sys_ioctl+0x50/0xda4) [ 132.219231][ T4250] r7:00000000 r6:85298181 r5:00000000 r4:00005451 [ 132.219567][ T4250] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 132.220069][ T4250] Exception stack(0xea825fa8 to 0xea825ff0) [ 132.220999][ T4250] 5fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 132.221758][ T4250] 5fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b050bc [ 132.222165][ T4250] 5fe0: 76b04ec0 76b04eb0 000189d0 00132da0 [ 132.222535][ T4250] r10:00000036 r9:84ad1800 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 132.222972][ T4250] r4:00000000 [ 132.224580][ T4250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.965433][ T4256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4256 comm=syz.1.117 [ 137.059253][ T4260] FAULT_INJECTION: forcing a failure. [ 137.059253][ T4260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.059727][ T4260] CPU: 1 UID: 0 PID: 4260 Comm: syz.1.118 Not tainted 6.11.0-rc7-syzkaller #0 [ 137.060019][ T4260] Hardware name: ARM-Versatile Express [ 137.060511][ T4260] Call trace: [ 137.060772][ T4260] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 137.061160][ T4260] r7:fffffdfd r6:84618000 r5:60000013 r4:8200ca20 [ 137.061400][ T4260] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 137.061700][ T4260] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 137.062060][ T4260] r5:00000000 r4:8274a3d4 [ 137.062245][ T4260] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 137.062555][ T4260] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 137.062862][ T4260] r6:84618000 r5:20000700 r4:00008933 [ 137.063078][ T4260] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 137.063393][ T4260] [<808be6e0>] (should_fail_usercopy) from [<81451610>] (sock_ioctl+0x478/0x608) [ 137.063730][ T4260] [<81451198>] (sock_ioctl) from [<80520db4>] (sys_ioctl+0x134/0xda4) [ 137.064065][ T4260] r9:00000003 r8:85298540 r7:20000700 r6:85298541 r5:00000000 r4:00008933 [ 137.064379][ T4260] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 137.065233][ T4260] Exception stack(0xea9a5fa8 to 0xea9a5ff0) [ 137.065542][ T4260] 5fa0: 00000000 00000000 00000003 00008933 20000700 00000000 [ 137.065897][ T4260] 5fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b260bc [ 137.066154][ T4260] 5fe0: 76b25ec0 76b25eb0 000189d0 00132da0 [ 137.066337][ T4260] r10:00000036 r9:83712400 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 137.066613][ T4260] r4:00000000 [ 138.262566][ T31] audit: type=1400 audit(138.210:186): avc: denied { ioctl } for pid=4261 comm="syz.1.119" path="uts:[4026532657]" dev="nsfs" ino=4026532657 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.267461][ T31] audit: type=1400 audit(138.210:187): avc: denied { read } for pid=4261 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 139.980933][ T31] audit: type=1400 audit(139.920:188): avc: denied { read } for pid=4268 comm="syz.1.120" path="socket:[2820]" dev="sockfs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.623554][ T31] audit: type=1400 audit(143.570:189): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.885466][ T31] audit: type=1400 audit(160.830:190): avc: denied { ioctl } for pid=4300 comm="syz.1.131" path="socket:[2915]" dev="sockfs" ino=2915 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.888095][ T31] audit: type=1400 audit(160.830:191): avc: denied { write } for pid=4300 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 161.847645][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.858049][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.745353][ T4295] hsr_slave_0: entered promiscuous mode [ 162.747537][ T4295] hsr_slave_1: entered promiscuous mode [ 162.749134][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.749482][ T4295] Cannot create hsr debugfs directory [ 163.113553][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.182210][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.236898][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.293304][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.406428][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.416462][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.422761][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.432949][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.475227][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.085096][ T4295] veth0_vlan: entered promiscuous mode [ 167.101629][ T4295] veth1_vlan: entered promiscuous mode [ 167.161434][ T4295] veth0_macvtap: entered promiscuous mode [ 167.178131][ T4295] veth1_macvtap: entered promiscuous mode [ 167.244080][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.247078][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.248750][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.249080][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.412666][ T31] audit: type=1400 audit(168.360:192): avc: denied { write } for pid=4684 comm="syz.0.146" name="arp" dev="proc" ino=4026532981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 168.977002][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.987809][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.995916][ T11] bond0 (unregistering): Released all slaves [ 168.999053][ T31] audit: type=1400 audit(168.940:193): avc: denied { remove_name } for pid=2924 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.004730][ T31] audit: type=1400 audit(168.940:194): avc: denied { rename } for pid=2924 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.103642][ T11] hsr_slave_0: left promiscuous mode [ 169.107019][ T11] hsr_slave_1: left promiscuous mode [ 169.114333][ T11] veth1_macvtap: left promiscuous mode [ 169.114829][ T11] veth0_macvtap: left promiscuous mode [ 169.115316][ T11] veth1_vlan: left promiscuous mode [ 169.115832][ T11] veth0_vlan: left promiscuous mode [ 170.574086][ T31] audit: type=1400 audit(170.520:195): avc: denied { create } for pid=4692 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.828260][ T31] audit: type=1400 audit(170.770:196): avc: denied { create } for pid=4698 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 170.832709][ T31] audit: type=1400 audit(170.780:197): avc: denied { write } for pid=4698 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 171.969462][ T31] audit: type=1400 audit(171.910:198): avc: denied { read } for pid=4698 comm="syz.0.151" path="socket:[4243]" dev="sockfs" ino=4243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.239583][ T31] audit: type=1400 audit(173.180:199): avc: denied { setattr } for pid=4718 comm="syz.1.156" name="L2TP/IP" dev="sockfs" ino=4271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.595547][ T31] audit: type=1400 audit(173.540:200): avc: denied { connect } for pid=4728 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.481146][ T92] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.670954][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 175.690882][ T92] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 175.693943][ T92] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 175.696750][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 175.697185][ T92] usb 1-1: config 1 has no interface number 0 [ 175.697519][ T92] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.698011][ T92] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 175.698535][ T92] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 175.698866][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.930151][ T49] usb 1-1: USB disconnect, device number 3 [ 176.970740][ T50] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.150926][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 177.160845][ T50] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 177.161301][ T50] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 177.161650][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 177.162016][ T50] usb 1-1: config 1 has no interface number 0 [ 177.162421][ T50] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.162793][ T50] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 177.163318][ T50] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 177.163664][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.408173][ T50] usb 1-1: USB disconnect, device number 4 [ 178.242954][ T31] audit: type=1400 audit(178.190:201): avc: denied { read } for pid=4779 comm="syz.0.171" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.244496][ T31] audit: type=1400 audit(178.190:202): avc: denied { open } for pid=4779 comm="syz.0.171" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.211263][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.390979][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 181.408974][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.409490][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.409826][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 181.418338][ T9] usb 1-1: config 1 has no interface number 0 [ 181.418791][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.419178][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 181.419671][ T9] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 181.420040][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.655946][ T9] usb 1-1: USB disconnect, device number 5 [ 182.424307][ T31] audit: type=1400 audit(182.370:203): avc: denied { shutdown } for pid=4800 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.429046][ T31] audit: type=1400 audit(182.370:204): avc: denied { read } for pid=4800 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.504353][ T31] audit: type=1400 audit(182.450:205): avc: denied { setopt } for pid=4802 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.442218][ T31] audit: type=1400 audit(185.390:206): avc: denied { bind } for pid=4816 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.885342][ T31] audit: type=1400 audit(196.830:207): avc: denied { read } for pid=4848 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.912349][ T31] audit: type=1400 audit(198.860:208): avc: denied { name_bind } for pid=4848 comm="syz.0.196" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 204.203639][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.271292][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.344318][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.403447][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.605434][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.609368][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.614320][ T11] bond0 (unregistering): Released all slaves [ 204.731045][ T11] hsr_slave_0: left promiscuous mode [ 204.733674][ T11] hsr_slave_1: left promiscuous mode [ 204.741788][ T11] veth1_macvtap: left promiscuous mode [ 204.742167][ T11] veth0_macvtap: left promiscuous mode [ 204.742494][ T11] veth1_vlan: left promiscuous mode [ 204.742818][ T11] veth0_vlan: left promiscuous mode [ 205.904677][ T4871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.913133][ T4871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.695080][ T4871] hsr_slave_0: entered promiscuous mode [ 206.699611][ T4871] hsr_slave_1: entered promiscuous mode [ 207.267495][ T4871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.279741][ T4871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.288264][ T4871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.300021][ T4871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.894516][ T4871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.502392][ T4871] veth0_vlan: entered promiscuous mode [ 210.519176][ T4871] veth1_vlan: entered promiscuous mode [ 210.575296][ T4871] veth0_macvtap: entered promiscuous mode [ 210.582090][ T4871] veth1_macvtap: entered promiscuous mode [ 210.617760][ T4871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618110][ T4871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618294][ T4871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618473][ T4871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.779203][ T5283] ======================================================= [ 210.779203][ T5283] WARNING: The mand mount option has been deprecated and [ 210.779203][ T5283] and is ignored by this kernel. Remove the mand [ 210.779203][ T5283] option from the mount to silence this warning. [ 210.779203][ T5283] ======================================================= [ 210.779381][ T31] audit: type=1400 audit(210.720:209): avc: denied { remount } for pid=5282 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.232816][ T31] audit: type=1400 audit(212.180:210): avc: denied { create } for pid=5286 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.372403][ T31] audit: type=1400 audit(212.320:211): avc: denied { setopt } for pid=5286 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.800774][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.990666][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 212.996415][ T92] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 212.996940][ T92] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 212.997236][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 212.997557][ T92] usb 1-1: config 1 has no interface number 0 [ 212.997803][ T92] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.998139][ T92] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.998540][ T92] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 212.998839][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.219691][ T3067] usb 1-1: USB disconnect, device number 6 [ 213.535499][ T31] audit: type=1400 audit(213.480:212): avc: denied { create } for pid=5308 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 213.631932][ T31] audit: type=1400 audit(213.580:213): avc: denied { bind } for pid=5313 comm="syz.0.216" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.632848][ T31] audit: type=1400 audit(213.580:214): avc: denied { name_bind } for pid=5313 comm="syz.0.216" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 213.633732][ T31] audit: type=1400 audit(213.580:215): avc: denied { node_bind } for pid=5313 comm="syz.0.216" saddr=fe80::bb src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 213.634691][ T31] audit: type=1400 audit(213.580:216): avc: denied { create } for pid=5313 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 216.411099][ T92] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.610746][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 216.616391][ T92] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 216.618800][ T92] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 216.619666][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 216.620028][ T92] usb 2-1: config 1 has no interface number 0 [ 216.621477][ T92] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.622331][ T92] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 216.623049][ T92] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 216.623938][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.838960][ T3786] usb 2-1: USB disconnect, device number 2 [ 219.937940][ T5361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5361 comm=syz.0.227 [ 219.938157][ T31] audit: type=1400 audit(219.880:217): avc: denied { write } for pid=5360 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 220.881001][ T31] audit: type=1400 audit(220.820:218): avc: denied { map } for pid=5368 comm="syz.1.229" path="/dev/snd/pcmC1D0c" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.901034][ T3067] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 224.080729][ T3067] usb 2-1: Using ep0 maxpacket: 32 [ 224.088354][ T3067] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 224.088831][ T3067] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 224.089229][ T3067] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 224.089562][ T3067] usb 2-1: config 1 has no interface number 0 [ 224.089819][ T3067] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.090801][ T3067] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 224.091324][ T3067] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 224.091697][ T3067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.310002][ T92] usb 2-1: USB disconnect, device number 3 [ 225.471214][ T92] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.651355][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 225.663619][ T92] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 225.664506][ T92] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 225.664986][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 225.665392][ T92] usb 1-1: config 1 has no interface number 0 [ 225.666509][ T92] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.666981][ T92] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 225.667484][ T92] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 225.667903][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.889588][ T2903] usb 1-1: USB disconnect, device number 7 [ 226.077408][ T5405] FAULT_INJECTION: forcing a failure. [ 226.077408][ T5405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.078621][ T5405] CPU: 1 UID: 0 PID: 5405 Comm: syz.1.234 Not tainted 6.11.0-rc7-syzkaller #0 [ 226.078980][ T5405] Hardware name: ARM-Versatile Express [ 226.079203][ T5405] Call trace: [ 226.079398][ T5405] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 226.079760][ T5405] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 226.079992][ T5405] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 226.080355][ T5405] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 226.080723][ T5405] r5:00000000 r4:8274a3d4 [ 226.080929][ T5405] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 226.081281][ T5405] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 226.081626][ T5405] r6:00000000 r5:eb801f68 r4:00000002 [ 226.081904][ T5405] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 226.082260][ T5405] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 226.082656][ T5405] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 226.083185][ T5405] r10:00000001 r9:805b430c r8:00000002 r7:eb801f68 r6:0000000f r5:76b02f30 [ 226.083616][ T5405] r4:8495bc00 r3:eb801e9f [ 226.083846][ T5405] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 226.084323][ T5405] r8:76b02f30 r7:eb801f68 r6:8495bc00 r5:0000000f r4:85282180 [ 226.084616][ T5405] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 226.084979][ T5405] r10:00000003 r9:8495bc00 r8:8020029c r7:00000000 r6:00000000 r5:85282180 [ 226.085317][ T5405] r4:85282183 [ 226.085506][ T5405] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 226.085915][ T5405] r7:00000003 r6:00000004 r5:76b02f30 r4:0000000f [ 226.086275][ T5405] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 226.086642][ T5405] Exception stack(0xeb801fa8 to 0xeb801ff0) [ 226.086941][ T5405] 1fa0: 0000000f 76b02f30 00000004 76b02f30 0000000f 00000000 [ 226.087331][ T5405] 1fc0: 0000000f 76b02f30 00000004 00000003 00000000 00006364 003d0f00 76b030bc [ 226.087653][ T5405] 1fe0: 00000158 76b02ed0 000d82e0 00130c74 [ 226.471382][ T3067] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.650972][ T3067] usb 1-1: Using ep0 maxpacket: 32 [ 226.658130][ T3067] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 226.658531][ T3067] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 226.658942][ T3067] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 226.659256][ T3067] usb 1-1: config 1 has no interface number 0 [ 226.659523][ T3067] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.659971][ T3067] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 226.661538][ T3067] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 226.661965][ T3067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.881148][ T2903] usb 1-1: USB disconnect, device number 8 [ 228.903986][ T5442] FAULT_INJECTION: forcing a failure. [ 228.903986][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 228.904366][ T5442] CPU: 0 UID: 0 PID: 5442 Comm: syz.1.241 Not tainted 6.11.0-rc7-syzkaller #0 [ 228.904527][ T5442] Hardware name: ARM-Versatile Express [ 228.904680][ T5442] Call trace: [ 228.904802][ T5442] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 228.905104][ T5442] r7:00000c40 r6:85298730 r5:60000013 r4:8200ca20 [ 228.905237][ T5442] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 228.905394][ T5442] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 228.905651][ T5442] r5:00000000 r4:8271619c [ 228.905779][ T5442] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 228.906060][ T5442] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 228.906285][ T5442] r6:85298730 r5:00001000 r4:82c016c0 [ 228.906415][ T5442] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 228.906629][ T5442] [<804c0d3c>] (__kmalloc_noprof) from [<80728b48>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 228.906878][ T5442] r10:000000c5 r9:82c9a800 r8:00000000 r7:83267110 r6:85298730 r5:00001000 [ 228.907050][ T5442] r4:00000000 [ 228.907160][ T5442] [<80728b0c>] (tomoyo_realpath_from_path) from [<80725090>] (tomoyo_path_perm+0xe4/0x200) [ 228.907406][ T5442] r10:000000c5 r9:8495e000 r8:00000001 r7:00000000 r6:00000005 r5:00000000 [ 228.907595][ T5442] r4:00000000 r3:00000000 [ 228.907730][ T5442] [<80724fac>] (tomoyo_path_perm) from [<80729384>] (tomoyo_inode_getattr+0x1c/0x20) [ 228.907976][ T5442] r8:8020029c r7:000007ff r6:eb139eb8 r5:85298730 r4:822071d0 [ 228.908133][ T5442] [<80729368>] (tomoyo_inode_getattr) from [<806ef360>] (security_inode_getattr+0x44/0x60) [ 228.908384][ T5442] [<806ef31c>] (security_inode_getattr) from [<8050e828>] (vfs_getattr+0x24/0x7c) [ 228.908594][ T5442] r5:85298730 r4:00000000 [ 228.908758][ T5442] [<8050e804>] (vfs_getattr) from [<8050f384>] (__do_sys_fstat64+0x64/0xc4) [ 228.909075][ T5442] r7:852986c0 r6:200002c0 r5:00000000 r4:852986c1 [ 228.909248][ T5442] [<8050f320>] (__do_sys_fstat64) from [<8050f8c8>] (sys_fstat64+0x10/0x14) [ 228.909483][ T5442] r7:000000c5 r6:00130d50 r5:00000000 r4:00000000 [ 228.909641][ T5442] [<8050f8b8>] (sys_fstat64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 228.909947][ T5442] Exception stack(0xeb139fa8 to 0xeb139ff0) [ 228.910461][ T5442] 9fa0: 00000000 00000000 00000003 200002c0 00000000 00000000 [ 228.911213][ T5442] 9fc0: 00000000 00000000 00130d50 000000c5 00000000 00006364 003d0f00 76b240bc [ 228.911851][ T5442] 9fe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 228.920825][ T5442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.649253][ T31] audit: type=1400 audit(229.590:219): avc: denied { setattr } for pid=5448 comm="syz.1.243" name="" dev="pipefs" ino=6015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 230.525663][ T31] audit: type=1400 audit(230.470:220): avc: denied { write } for pid=5467 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.881203][ T92] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.070858][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 231.078336][ T92] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 231.078758][ T92] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 231.079081][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 231.079399][ T92] usb 1-1: config 1 has no interface number 0 [ 231.079668][ T92] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.079992][ T92] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 231.081110][ T92] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 231.081465][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.292928][ T3067] usb 1-1: USB disconnect, device number 9 [ 232.193089][ T31] audit: type=1400 audit(232.140:221): avc: denied { ioctl } for pid=5485 comm="syz.0.253" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.194907][ T31] audit: type=1400 audit(232.140:222): avc: denied { set_context_mgr } for pid=5485 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 232.860566][ T3786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.040746][ T3786] usb 2-1: Using ep0 maxpacket: 32 [ 233.049459][ T3786] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.049909][ T3786] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 233.051119][ T3786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 233.051498][ T3786] usb 2-1: config 1 has no interface number 0 [ 233.054041][ T3786] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.054437][ T3786] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 233.055102][ T3786] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 233.055544][ T3786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.271309][ T3786] usb 2-1: USB disconnect, device number 4 [ 235.291351][ T3786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.471082][ T3786] usb 1-1: Using ep0 maxpacket: 32 [ 235.479405][ T3786] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 235.479935][ T3786] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 235.480806][ T3786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 235.481160][ T3786] usb 1-1: config 1 has no interface number 0 [ 235.481425][ T3786] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.481778][ T3786] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 235.482320][ T3786] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 235.482650][ T3786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.698233][ T92] usb 1-1: USB disconnect, device number 10 [ 237.007572][ T31] audit: type=1400 audit(236.950:223): avc: denied { setopt } for pid=5533 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.252452][ T3786] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 237.440919][ T3786] usb 2-1: Using ep0 maxpacket: 32 [ 237.454496][ T3786] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 237.455004][ T3786] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 237.455322][ T3786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 237.455660][ T3786] usb 2-1: config 1 has no interface number 0 [ 237.455921][ T3786] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.456257][ T3786] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 237.456688][ T3786] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 237.457015][ T3786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.497394][ T31] audit: type=1400 audit(241.440:224): avc: denied { create } for pid=5560 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 241.499846][ T31] audit: type=1400 audit(241.440:225): avc: denied { ioctl } for pid=5560 comm="syz.0.272" path="socket:[6144]" dev="sockfs" ino=6144 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.809922][ T5570] FAULT_INJECTION: forcing a failure. [ 246.809922][ T5570] name failslab, interval 1, probability 0, space 0, times 0 [ 246.811629][ T5570] CPU: 1 UID: 0 PID: 5570 Comm: syz.0.276 Not tainted 6.11.0-rc7-syzkaller #0 [ 246.812238][ T5570] Hardware name: ARM-Versatile Express [ 246.812585][ T5570] Call trace: [ 246.812764][ T5570] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 246.813163][ T5570] r7:00000d40 r6:85282970 r5:60000013 r4:8200ca20 [ 246.813442][ T5570] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 246.814044][ T5570] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 246.814525][ T5570] r5:00000000 r4:8271619c [ 246.814713][ T5570] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 246.815100][ T5570] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 246.815444][ T5570] r6:85282970 r5:0000001d r4:82c01240 [ 246.815653][ T5570] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 246.815993][ T5570] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 246.816346][ T5570] r10:00000fff r9:82c9a800 r8:00000000 r7:83267110 r6:85282970 r5:8486cffc [ 246.816637][ T5570] r4:8486cfea [ 246.816801][ T5570] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 246.817137][ T5570] r9:82c9a800 r8:00000000 r7:83267110 r6:85282970 r5:00001000 r4:8486cfeb [ 246.817422][ T5570] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 246.818122][ T5570] r5:00001000 r4:8486c000 [ 246.818520][ T5570] [<80728b0c>] (tomoyo_realpath_from_path) from [<80725090>] (tomoyo_path_perm+0xe4/0x200) [ 246.819025][ T5570] r10:000000c5 r9:84959800 r8:00000001 r7:00000000 r6:00000005 r5:00000000 [ 246.819344][ T5570] r4:00000000 r3:00000000 [ 246.819524][ T5570] [<80724fac>] (tomoyo_path_perm) from [<80729384>] (tomoyo_inode_getattr+0x1c/0x20) [ 246.819885][ T5570] r8:8020029c r7:000007ff r6:ec779eb8 r5:85282970 r4:822071d0 [ 246.820219][ T5570] [<80729368>] (tomoyo_inode_getattr) from [<806ef360>] (security_inode_getattr+0x44/0x60) [ 246.820796][ T5570] [<806ef31c>] (security_inode_getattr) from [<8050e828>] (vfs_getattr+0x24/0x7c) [ 246.821233][ T5570] r5:85282970 r4:00000000 [ 246.821412][ T5570] [<8050e804>] (vfs_getattr) from [<8050f384>] (__do_sys_fstat64+0x64/0xc4) [ 246.821754][ T5570] r7:85282900 r6:200002c0 r5:00000000 r4:85282901 [ 246.822025][ T5570] [<8050f320>] (__do_sys_fstat64) from [<8050f8c8>] (sys_fstat64+0x10/0x14) [ 246.822366][ T5570] r7:000000c5 r6:00130d50 r5:00000000 r4:00000000 [ 246.822600][ T5570] [<8050f8b8>] (sys_fstat64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 246.822939][ T5570] Exception stack(0xec779fa8 to 0xec779ff0) [ 246.823189][ T5570] 9fa0: 00000000 00000000 00000003 200002c0 00000000 00000000 [ 246.823505][ T5570] 9fc0: 00000000 00000000 00130d50 000000c5 00000000 00006364 003d0f00 76b1f0bc [ 246.823821][ T5570] 9fe0: 76b1eec0 76b1eeb0 000189d0 00132da0 [ 246.825657][ T5570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.697373][ T3067] usb 2-1: USB disconnect, device number 5 [ 247.787226][ T31] audit: type=1400 audit(247.730:226): avc: denied { write } for pid=5581 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 247.909584][ T5586] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.270677][ T2903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.451748][ T2903] usb 1-1: Using ep0 maxpacket: 32 [ 250.469050][ T2903] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 250.469562][ T2903] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 250.469910][ T2903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 250.473543][ T2903] usb 1-1: config 1 has no interface number 0 [ 250.474006][ T2903] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.474352][ T2903] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 250.474825][ T2903] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 250.475266][ T2903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.535778][ T31] audit: type=1400 audit(250.480:227): avc: denied { write } for pid=5598 comm="syz.1.284" path="socket:[6223]" dev="sockfs" ino=6223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.984785][ T5607] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 255.613159][ T5612] FAULT_INJECTION: forcing a failure. [ 255.613159][ T5612] name failslab, interval 1, probability 0, space 0, times 0 [ 255.613793][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz.1.287 Not tainted 6.11.0-rc7-syzkaller #0 [ 255.614180][ T5612] Hardware name: ARM-Versatile Express [ 255.614405][ T5612] Call trace: [ 255.614595][ T5612] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 255.615009][ T5612] r7:84958000 r6:00000dc0 r5:60000013 r4:8200ca20 [ 255.615248][ T5612] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 255.615572][ T5612] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 255.615939][ T5612] r5:00000000 r4:8271619c [ 255.616165][ T5612] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 255.616489][ T5612] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 255.616866][ T5612] r6:00000dc0 r5:826f3178 r4:82c01240 [ 255.617102][ T5612] [<804dafcc>] (should_failslab) from [<804bfe00>] (__kmalloc_cache_noprof+0x4c/0x344) [ 255.617456][ T5612] [<804bfdb4>] (__kmalloc_cache_noprof) from [<80260200>] (call_usermodehelper_setup+0x48/0xb8) [ 255.617888][ T5612] r10:00000000 r9:eca01ecb r8:826f304c r7:826f304c r6:8529c980 r5:826f3178 [ 255.618180][ T5612] r4:8529c980 [ 255.618389][ T5612] [<802601b8>] (call_usermodehelper_setup) from [<802f1b6c>] (__request_module+0x150/0x2c0) [ 255.618765][ T5612] r7:84958000 r6:8529c640 r5:00000002 r4:8529c980 [ 255.619051][ T5612] [<802f1a1c>] (__request_module) from [<814badf0>] (dev_load+0x80/0x8c) [ 255.619419][ T5612] r3:00400140 r2:eca01ecc r1:821c8660 [ 255.619663][ T5612] r8:00000000 r7:84618d00 r6:eca01ecc r5:00000000 r4:eca01ecc [ 255.619958][ T5612] [<814bad70>] (dev_load) from [<814bc33c>] (dev_ioctl+0x568/0x678) [ 255.620796][ T5612] r5:0000000c r4:000089fc [ 255.621162][ T5612] [<814bbdd4>] (dev_ioctl) from [<8145171c>] (sock_ioctl+0x584/0x608) [ 255.621631][ T5612] r10:84958000 r9:00000004 r8:85298300 r7:b5403587 r6:84618d00 r5:20000040 [ 255.621959][ T5612] r4:000089fc r3:00000000 [ 255.622148][ T5612] [<81451198>] (sock_ioctl) from [<80520db4>] (sys_ioctl+0x134/0xda4) [ 255.622498][ T5612] r9:00000004 r8:85298300 r7:20000040 r6:85298301 r5:00000000 r4:000089fc [ 255.622804][ T5612] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 255.623151][ T5612] Exception stack(0xeca01fa8 to 0xeca01ff0) [ 255.623418][ T5612] 1fa0: 00000000 00000000 00000004 000089fc 20000040 00000000 [ 255.623760][ T5612] 1fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b240bc [ 255.624077][ T5612] 1fe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 255.624328][ T5612] r10:00000036 r9:84958000 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 255.624633][ T5612] r4:00000000 [ 260.731008][ T92] usb 1-1: USB disconnect, device number 11 [ 263.734128][ T5650] fuse: Bad value for 'fd' [ 264.317208][ T31] audit: type=1400 audit(264.260:228): avc: denied { listen } for pid=5651 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.498344][ T31] audit: type=1400 audit(264.440:229): avc: denied { ioctl } for pid=5651 comm="syz.1.300" path="socket:[7311]" dev="sockfs" ino=7311 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.021764][ T5664] fuse: Bad value for 'fd' [ 265.493512][ T5674] fuse: Bad value for 'fd' [ 266.051596][ T5686] FAULT_INJECTION: forcing a failure. [ 266.051596][ T5686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.052245][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: syz.1.315 Not tainted 6.11.0-rc7-syzkaller #0 [ 266.052561][ T5686] Hardware name: ARM-Versatile Express [ 266.052779][ T5686] Call trace: [ 266.052982][ T5686] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 266.053363][ T5686] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 266.053679][ T5686] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 266.054044][ T5686] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 266.054351][ T5686] r5:00000000 r4:8274a3d4 [ 266.054526][ T5686] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 266.054851][ T5686] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 266.055152][ T5686] r6:00000000 r5:200002c0 r4:ecbb1eb8 [ 266.055358][ T5686] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 266.055678][ T5686] [<808be6e0>] (should_fail_usercopy) from [<8050ee1c>] (cp_new_stat64+0x114/0x18c) [ 266.056014][ T5686] [<8050ed08>] (cp_new_stat64) from [<8050f3a4>] (__do_sys_fstat64+0x84/0xc4) [ 266.056349][ T5686] r7:852983c0 r6:200002c0 r5:00000000 r4:852983c1 [ 266.056994][ T5686] [<8050f320>] (__do_sys_fstat64) from [<8050f8c8>] (sys_fstat64+0x10/0x14) [ 266.057691][ T5686] r7:000000c5 r6:00130d50 r5:00000000 r4:00000000 [ 266.058001][ T5686] [<8050f8b8>] (sys_fstat64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 266.058533][ T5686] Exception stack(0xecbb1fa8 to 0xecbb1ff0) [ 266.059168][ T5686] 1fa0: 00000000 00000000 00000003 200002c0 00000000 00000000 [ 266.059692][ T5686] 1fc0: 00000000 00000000 00130d50 000000c5 00000000 00006364 003d0f00 76b240bc [ 266.060209][ T5686] 1fe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 266.961859][ T31] audit: type=1400 audit(266.910:230): avc: denied { setopt } for pid=5695 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.711244][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 273.890723][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 273.896628][ T49] usb 2-1: config 0 has no interfaces? [ 273.897038][ T49] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 273.897392][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.907211][ T49] usb 2-1: config 0 descriptor?? [ 274.113777][ T92] usb 2-1: USB disconnect, device number 6 [ 275.426949][ T5765] FAULT_INJECTION: forcing a failure. [ 275.426949][ T5765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.427577][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: syz.0.341 Not tainted 6.11.0-rc7-syzkaller #0 [ 275.428050][ T5765] Hardware name: ARM-Versatile Express [ 275.428414][ T5765] Call trace: [ 275.428602][ T5765] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 275.428983][ T5765] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 275.429198][ T5765] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 275.429820][ T5765] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 275.430258][ T5765] r5:00000000 r4:8274a3d4 [ 275.430594][ T5765] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 275.431029][ T5765] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 275.431381][ T5765] r6:00000000 r5:ed22df68 r4:00000002 [ 275.431646][ T5765] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 275.432141][ T5765] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 275.433045][ T5765] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 275.433485][ T5765] r10:00000001 r9:805b430c r8:00000002 r7:ed22df68 r6:0000000f r5:76b1ef30 [ 275.434019][ T5765] r4:84ad6c00 r3:ed22de9f [ 275.434197][ T5765] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 275.434545][ T5765] r8:76b1ef30 r7:ed22df68 r6:84ad6c00 r5:0000000f r4:852986c0 [ 275.434824][ T5765] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 275.435160][ T5765] r10:00000003 r9:84ad6c00 r8:8020029c r7:00000000 r6:00000000 r5:852986c0 [ 275.435430][ T5765] r4:852986c3 [ 275.435750][ T5765] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 275.436096][ T5765] r7:00000003 r6:00000004 r5:76b1ef30 r4:0000000f [ 275.436385][ T5765] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 275.436743][ T5765] Exception stack(0xed22dfa8 to 0xed22dff0) [ 275.437569][ T5765] dfa0: 0000000f 76b1ef30 00000004 76b1ef30 0000000f 00000000 [ 275.437971][ T5765] dfc0: 0000000f 76b1ef30 00000004 00000003 00000000 00006364 003d0f00 76b1f0bc [ 275.438599][ T5765] dfe0: 00000158 76b1eed0 000d82e0 00130c74 [ 275.864237][ T5778] fuse: Bad value for 'fd' [ 275.916424][ T31] audit: type=1400 audit(275.860:231): avc: denied { listen } for pid=5777 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.935300][ T31] audit: type=1400 audit(275.870:232): avc: denied { create } for pid=5777 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.292452][ T5793] fuse: Bad value for 'fd' [ 276.540831][ T92] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.720852][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 276.735849][ T92] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.736379][ T92] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.737029][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.737399][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.737891][ T92] usb 2-1: config 1 has no interface number 0 [ 276.738269][ T92] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 276.738727][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.964483][ T3786] usb 2-1: USB disconnect, device number 7 [ 277.139874][ T5812] fuse: Bad value for 'fd' [ 278.382039][ T5835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5835 comm=syz.1.369 [ 286.885441][ T5906] FAULT_INJECTION: forcing a failure. [ 286.885441][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.886122][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.1.395 Not tainted 6.11.0-rc7-syzkaller #0 [ 286.886438][ T5906] Hardware name: ARM-Versatile Express [ 286.886661][ T5906] Call trace: [ 286.886884][ T5906] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 286.887268][ T5906] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 286.887525][ T5906] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 286.887872][ T5906] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 286.888197][ T5906] r5:00000000 r4:8274a3d4 [ 286.888379][ T5906] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 286.888695][ T5906] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 286.889052][ T5906] r6:00000000 r5:ed3d9f68 r4:00000002 [ 286.889276][ T5906] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 286.889633][ T5906] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 286.891093][ T5906] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 286.892590][ T5906] r10:00000001 r9:805b430c r8:00000002 r7:ed3d9f68 r6:0000000f r5:76b23f30 [ 286.893181][ T5906] r4:84958000 r3:ed3d9e9f [ 286.893775][ T5906] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 286.894365][ T5906] r8:76b23f30 r7:ed3d9f68 r6:84958000 r5:0000000f r4:85298f00 [ 286.894669][ T5906] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 286.895702][ T5906] r10:00000003 r9:84958000 r8:8020029c r7:00000000 r6:00000000 r5:85298f00 [ 286.896247][ T5906] r4:85298f03 [ 286.896431][ T5906] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 286.896791][ T5906] r7:00000003 r6:00000004 r5:76b23f30 r4:0000000f [ 286.897058][ T5906] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 286.897438][ T5906] Exception stack(0xed3d9fa8 to 0xed3d9ff0) [ 286.897727][ T5906] 9fa0: 0000000f 76b23f30 00000004 76b23f30 0000000f 00000000 [ 286.898120][ T5906] 9fc0: 0000000f 76b23f30 00000004 00000003 00000000 00006364 003d0f00 76b240bc [ 286.898464][ T5906] 9fe0: 00000158 76b23ed0 000d82e0 00130c74 [ 287.700228][ T31] audit: type=1400 audit(287.640:233): avc: denied { nlmsg_read } for pid=5928 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 288.680744][ C0] hrtimer: interrupt took 17409568 ns [ 288.772273][ T31] audit: type=1400 audit(288.720:234): avc: denied { shutdown } for pid=5939 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.999035][ T31] audit: type=1400 audit(288.940:235): avc: denied { create } for pid=5939 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 289.740822][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 289.925813][ T9] usb 1-1: device descriptor read/64, error -71 [ 290.259281][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 290.490826][ T9] usb 1-1: device descriptor read/64, error -71 [ 290.612952][ T9] usb usb1-port1: attempt power cycle [ 291.046824][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 291.092701][ T9] usb 1-1: device descriptor read/8, error -71 [ 291.386360][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 291.438199][ T9] usb 1-1: device descriptor read/8, error -71 [ 291.552575][ T9] usb usb1-port1: unable to enumerate USB device [ 296.245198][ T31] audit: type=1400 audit(296.190:236): avc: denied { getopt } for pid=5980 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.070711][ T92] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 301.171605][ T2904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 301.271597][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 301.284803][ T92] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 301.285177][ T92] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 301.285336][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 301.285595][ T92] usb 1-1: config 1 has no interface number 0 [ 301.286016][ T92] usb 1-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.286454][ T92] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 301.286950][ T92] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 301.287308][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.321269][ T2904] usb 2-1: device descriptor read/64, error -71 [ 301.514573][ T92] usb 1-1: USB disconnect, device number 16 [ 301.611319][ T2904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 301.761609][ T2904] usb 2-1: device descriptor read/64, error -71 [ 301.882448][ T2904] usb usb2-port1: attempt power cycle [ 302.312326][ T2904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 302.354241][ T2904] usb 2-1: device descriptor read/8, error -71 [ 302.630694][ T2904] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 302.663343][ T2904] usb 2-1: device descriptor read/8, error -71 [ 302.784395][ T2904] usb usb2-port1: unable to enumerate USB device [ 304.642771][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 304.820896][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 304.826977][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 304.827521][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 304.827827][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 304.828180][ T9] usb 1-1: config 1 has no interface number 0 [ 304.828448][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.828806][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 304.829288][ T9] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 304.829640][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.054037][ T92] usb 1-1: USB disconnect, device number 17 [ 306.474650][ T31] audit: type=1400 audit(306.420:237): avc: denied { write } for pid=6124 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.960787][ T3067] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 311.141352][ T3067] usb 1-1: Using ep0 maxpacket: 32 [ 311.155289][ T3067] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 311.155619][ T3067] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 311.155887][ T3067] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 311.156186][ T3067] usb 1-1: config 1 has no interface number 0 [ 311.156421][ T3067] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.156719][ T3067] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 311.157112][ T3067] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 311.157382][ T3067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.382530][ T9] usb 1-1: USB disconnect, device number 18 [ 313.851346][ T3067] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 314.001428][ T3067] usb 2-1: device descriptor read/64, error -71 [ 314.270843][ T3067] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 314.430968][ T3067] usb 2-1: device descriptor read/64, error -71 [ 314.551990][ T3067] usb usb2-port1: attempt power cycle [ 314.660849][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 314.860843][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 314.868977][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 314.869440][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 314.869777][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 314.871413][ T9] usb 1-1: config 1 has no interface number 0 [ 314.871766][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.872122][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 314.872554][ T9] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 314.872895][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.972023][ T3067] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.004427][ T3067] usb 2-1: device descriptor read/8, error -71 [ 315.099729][ T9] usb 1-1: USB disconnect, device number 19 [ 315.271254][ T3067] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.311984][ T3067] usb 2-1: device descriptor read/8, error -71 [ 315.431433][ T3067] usb usb2-port1: unable to enumerate USB device [ 320.401345][ T2904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 320.592619][ T2904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.593171][ T2904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.593592][ T2904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.617295][ T2904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.617818][ T2904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.618186][ T2904] usb 1-1: Product: syz [ 320.618404][ T2904] usb 1-1: Manufacturer: syz [ 320.618633][ T2904] usb 1-1: SerialNumber: syz [ 321.844176][ T2904] usb 1-1: 0:2 : does not exist [ 321.875103][ T2904] usb 1-1: USB disconnect, device number 20 [ 323.888179][ T6242] FAULT_INJECTION: forcing a failure. [ 323.888179][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 323.888815][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.1.470 Not tainted 6.11.0-rc7-syzkaller #0 [ 323.889138][ T6242] Hardware name: ARM-Versatile Express [ 323.889365][ T6242] Call trace: [ 323.889560][ T6242] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 323.889974][ T6242] r7:00000d40 r6:85298f70 r5:60000013 r4:8200ca20 [ 323.890414][ T6242] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 323.890799][ T6242] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 323.891123][ T6242] r5:00000000 r4:8271619c [ 323.891318][ T6242] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 323.891653][ T6242] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 323.892035][ T6242] r6:85298f70 r5:0000001d r4:82c01240 [ 323.892275][ T6242] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 323.892699][ T6242] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 323.893151][ T6242] r10:00000fff r9:82c9a800 r8:00000000 r7:830df550 r6:85298f70 r5:83e8fffc [ 323.893484][ T6242] r4:83e8ffea [ 323.893666][ T6242] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 323.894107][ T6242] r9:82c9a800 r8:00000000 r7:830df550 r6:85298f70 r5:00001000 r4:83e8ffeb [ 323.894453][ T6242] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 323.894842][ T6242] r5:00001000 r4:83e8f000 [ 323.895073][ T6242] [<80728b0c>] (tomoyo_realpath_from_path) from [<80724c8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 323.895519][ T6242] r10:83e19800 r9:00000000 r8:85298f00 r7:c0404806 r6:00000004 r5:81ad0e68 [ 323.895863][ T6242] r4:85298f70 r3:824b7380 [ 323.896074][ T6242] [<80724bc0>] (tomoyo_path_number_perm) from [<80729558>] (tomoyo_file_ioctl+0x1c/0x20) [ 323.896532][ T6242] r9:00000004 r8:85298f00 r7:85298f00 r6:c0404806 r5:200000c0 r4:822071e4 [ 323.896847][ T6242] [<8072953c>] (tomoyo_file_ioctl) from [<806ec510>] (security_file_ioctl+0x40/0x5c) [ 323.897271][ T6242] [<806ec4d0>] (security_file_ioctl) from [<80520cd0>] (sys_ioctl+0x50/0xda4) [ 323.897679][ T6242] r7:200000c0 r6:85298f01 r5:00000000 r4:c0404806 [ 323.898419][ T6242] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 323.899068][ T6242] Exception stack(0xe039dfa8 to 0xe039dff0) [ 323.899550][ T6242] dfa0: 00000000 00000000 00000004 c0404806 200000c0 00000000 [ 323.899905][ T6242] dfc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b240bc [ 323.900459][ T6242] dfe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 323.900877][ T6242] r10:00000036 r9:83e19800 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 323.901282][ T6242] r4:00000000 [ 323.903387][ T6242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.251422][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 324.401048][ T9] usb 2-1: device descriptor read/64, error -71 [ 324.691205][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 324.840968][ T9] usb 2-1: device descriptor read/64, error -71 [ 324.961153][ T9] usb usb2-port1: attempt power cycle [ 325.371113][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 325.405219][ T9] usb 2-1: device descriptor read/8, error -71 [ 325.700743][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.734578][ T9] usb 2-1: device descriptor read/8, error -71 [ 325.861672][ T9] usb usb2-port1: unable to enumerate USB device [ 326.192358][ T6263] dlm: non-version read from control device 8224 [ 326.284689][ T6265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6265 comm=syz.0.479 [ 326.307029][ T31] audit: type=1400 audit(326.250:238): avc: denied { connect } for pid=6264 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.910656][ T31] audit: type=1400 audit(326.850:239): avc: denied { getopt } for pid=6273 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 326.987603][ T31] audit: type=1400 audit(326.930:240): avc: denied { name_connect } for pid=6275 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 334.473123][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 335.052616][ T6318] fuse: Bad value for 'user_id' [ 335.053134][ T6318] fuse: Bad value for 'user_id' [ 335.084273][ T31] audit: type=1400 audit(335.030:241): avc: denied { setattr } for pid=6319 comm="syz.1.500" name="SMC" dev="sockfs" ino=8127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.291292][ T6335] fuse: Bad value for 'user_id' [ 336.291915][ T6335] fuse: Bad value for 'user_id' [ 338.132659][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 338.310732][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 338.335774][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 338.336084][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 338.336274][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 338.336456][ T9] usb 1-1: config 1 has no interface number 0 [ 338.336619][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 338.336857][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 338.337153][ T9] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 338.337339][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.568434][ T9] usb 1-1: USB disconnect, device number 21 [ 338.788009][ T6343] FAULT_INJECTION: forcing a failure. [ 338.788009][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 338.788759][ T6343] CPU: 0 UID: 0 PID: 6343 Comm: syz.0.508 Not tainted 6.11.0-rc7-syzkaller #0 [ 338.789164][ T6343] Hardware name: ARM-Versatile Express [ 338.789415][ T6343] Call trace: [ 338.789641][ T6343] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 338.790267][ T6343] r7:00000c40 r6:85298430 r5:60000013 r4:8200ca20 [ 338.790710][ T6343] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 338.791844][ T6343] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 338.792298][ T6343] r5:00000000 r4:8271619c [ 338.792583][ T6343] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 338.793042][ T6343] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 338.793470][ T6343] r6:85298430 r5:00001000 r4:82c016c0 [ 338.793718][ T6343] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 338.794135][ T6343] [<804c0d3c>] (__kmalloc_noprof) from [<80728b48>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 338.794551][ T6343] r10:84206c00 r9:82c9bc00 r8:00000000 r7:83266550 r6:85298430 r5:00001000 [ 338.794892][ T6343] r4:00000000 [ 338.795080][ T6343] [<80728b0c>] (tomoyo_realpath_from_path) from [<80724c8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 338.795530][ T6343] r10:84206c00 r9:00000000 r8:852983c0 r7:40085507 r6:00000004 r5:81ad0e68 [ 338.795866][ T6343] r4:85298430 r3:824b7380 [ 338.796089][ T6343] [<80724bc0>] (tomoyo_path_number_perm) from [<80729558>] (tomoyo_file_ioctl+0x1c/0x20) [ 338.796529][ T6343] r9:00000003 r8:852983c0 r7:852983c0 r6:40085507 r5:76b1dea0 r4:822071e4 [ 338.796869][ T6343] [<8072953c>] (tomoyo_file_ioctl) from [<806ec510>] (security_file_ioctl+0x40/0x5c) [ 338.797306][ T6343] [<806ec4d0>] (security_file_ioctl) from [<80520cd0>] (sys_ioctl+0x50/0xda4) [ 338.797731][ T6343] r7:76b1dea0 r6:852983c1 r5:00000000 r4:40085507 [ 338.798060][ T6343] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 338.798458][ T6343] Exception stack(0xdfef1fa8 to 0xdfef1ff0) [ 338.798758][ T6343] 1fa0: 76b1dea8 00000000 00000003 40085507 76b1dea0 76b1de88 [ 338.799156][ T6343] 1fc0: 76b1dea8 00000000 76b1dea0 00000036 00000000 00006364 003d0f00 76b1f0bc [ 338.799532][ T6343] 1fe0: 00000000 76b1de70 00258000 0013276c [ 338.799832][ T6343] r10:00000036 r9:84206c00 r8:8020029c r7:00000036 r6:76b1dea0 r5:00000000 [ 338.800210][ T6343] r4:76b1dea8 [ 338.801456][ T6343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.129293][ T6360] fuse: Bad value for 'user_id' [ 339.129719][ T6360] fuse: Bad value for 'user_id' [ 339.295294][ T6364] FAULT_INJECTION: forcing a failure. [ 339.295294][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 339.295680][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.1.512 Not tainted 6.11.0-rc7-syzkaller #0 [ 339.295884][ T6364] Hardware name: ARM-Versatile Express [ 339.296008][ T6364] Call trace: [ 339.296257][ T6364] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 339.296578][ T6364] r7:00000d40 r6:85285370 r5:60000013 r4:8200ca20 [ 339.296851][ T6364] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 339.297098][ T6364] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 339.297297][ T6364] r5:00000000 r4:8271619c [ 339.297427][ T6364] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 339.297718][ T6364] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 339.298041][ T6364] r6:85285370 r5:00000018 r4:82c01240 [ 339.298164][ T6364] [<804dafcc>] (should_failslab) from [<804c0dd8>] (__kmalloc_noprof+0x9c/0x458) [ 339.298479][ T6364] [<804c0d3c>] (__kmalloc_noprof) from [<80728a50>] (tomoyo_encode2+0x64/0xf0) [ 339.299200][ T6364] r10:00000fff r9:82c9bc00 r8:00000000 r7:830adbb0 r6:85285370 r5:8486fffd [ 339.299839][ T6364] r4:8486fff0 [ 339.300028][ T6364] [<807289ec>] (tomoyo_encode2) from [<80728b00>] (tomoyo_encode+0x24/0x30) [ 339.300477][ T6364] r9:82c9bc00 r8:00000000 r7:830adbb0 r6:85285370 r5:00001000 r4:8486fff1 [ 339.300703][ T6364] [<80728adc>] (tomoyo_encode) from [<80728b8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 339.301151][ T6364] r5:00001000 r4:8486f000 [ 339.301649][ T6364] [<80728b0c>] (tomoyo_realpath_from_path) from [<80724c8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 339.302203][ T6364] r10:847a2400 r9:00000000 r8:85285300 r7:000089f1 r6:00000004 r5:81ad0e68 [ 339.302490][ T6364] r4:85285370 r3:824b7380 [ 339.302610][ T6364] [<80724bc0>] (tomoyo_path_number_perm) from [<80729558>] (tomoyo_file_ioctl+0x1c/0x20) [ 339.302859][ T6364] r9:00000003 r8:85285300 r7:85285300 r6:000089f1 r5:200004c0 r4:822071e4 [ 339.303071][ T6364] [<8072953c>] (tomoyo_file_ioctl) from [<806ec510>] (security_file_ioctl+0x40/0x5c) [ 339.303386][ T6364] [<806ec4d0>] (security_file_ioctl) from [<80520cd0>] (sys_ioctl+0x50/0xda4) [ 339.303653][ T6364] r7:200004c0 r6:85285301 r5:00000000 r4:000089f1 [ 339.303852][ T6364] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 339.304111][ T6364] Exception stack(0xea9adfa8 to 0xea9adff0) [ 339.304330][ T6364] dfa0: 00000000 00000000 00000003 000089f1 200004c0 00000000 [ 339.304694][ T6364] dfc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b240bc [ 339.305678][ T6364] dfe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 339.306015][ T6364] r10:00000036 r9:847a2400 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 339.306453][ T6364] r4:00000000 [ 339.307868][ T6364] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.906287][ T6374] fuse: Bad value for 'fd' [ 340.338040][ T6387] fuse: Bad value for 'fd' [ 340.562883][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 340.731223][ T9] usb 2-1: device descriptor read/64, error -71 [ 340.856153][ T6401] FAULT_INJECTION: forcing a failure. [ 340.856153][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.856525][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.523 Not tainted 6.11.0-rc7-syzkaller #0 [ 340.856729][ T6401] Hardware name: ARM-Versatile Express [ 340.856859][ T6401] Call trace: [ 340.856952][ T6401] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 340.857179][ T6401] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 340.857321][ T6401] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 340.857514][ T6401] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 340.857704][ T6401] r5:00000000 r4:8274a3d4 [ 340.857816][ T6401] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 340.858019][ T6401] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 340.858192][ T6401] r6:00000000 r5:eaac9f68 r4:00000002 [ 340.858343][ T6401] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 340.858538][ T6401] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 340.858735][ T6401] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 340.858935][ T6401] r10:00000001 r9:805b430c r8:00000002 r7:eaac9f68 r6:0000000f r5:76b1ef30 [ 340.859088][ T6401] r4:84203000 r3:eaac9e9f [ 340.859182][ T6401] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 340.859365][ T6401] r8:76b1ef30 r7:eaac9f68 r6:84203000 r5:0000000f r4:85298000 [ 340.859502][ T6401] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 340.859661][ T6401] r10:00000003 r9:84203000 r8:8020029c r7:00000000 r6:00000000 r5:85298000 [ 340.859863][ T6401] r4:85298003 [ 340.860028][ T6401] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 340.860585][ T6401] r7:00000003 r6:00000005 r5:76b1ef30 r4:0000000f [ 340.861057][ T6401] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 340.861549][ T6401] Exception stack(0xeaac9fa8 to 0xeaac9ff0) [ 340.861894][ T6401] 9fa0: 0000000f 76b1ef30 00000005 76b1ef30 0000000f 00000000 [ 340.862219][ T6401] 9fc0: 0000000f 76b1ef30 00000005 00000003 00000000 00006364 003d0f00 76b1f0bc [ 340.862396][ T6401] 9fe0: 00000158 76b1eed0 000d82e0 00130c74 [ 341.021635][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 341.127286][ T6407] fuse: Bad value for 'fd' [ 341.171178][ T9] usb 2-1: device descriptor read/64, error -71 [ 341.291711][ T9] usb usb2-port1: attempt power cycle [ 341.701041][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 341.734677][ T9] usb 2-1: device descriptor read/8, error -71 [ 341.995287][ T6421] fuse: Bad value for 'fd' [ 342.001529][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 342.033128][ T9] usb 2-1: device descriptor read/8, error -71 [ 342.151735][ T9] usb usb2-port1: unable to enumerate USB device [ 342.274695][ T6427] FAULT_INJECTION: forcing a failure. [ 342.274695][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 342.275096][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.533 Not tainted 6.11.0-rc7-syzkaller #0 [ 342.275295][ T6427] Hardware name: ARM-Versatile Express [ 342.275421][ T6427] Call trace: [ 342.275535][ T6427] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 342.275762][ T6427] r7:847a2400 r6:00000dc0 r5:60000013 r4:8200ca20 [ 342.275907][ T6427] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 342.276114][ T6427] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 342.276315][ T6427] r5:00000000 r4:8271619c [ 342.276416][ T6427] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 342.276621][ T6427] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 342.276831][ T6427] r6:00000dc0 r5:00000005 r4:82c01480 [ 342.276986][ T6427] [<804dafcc>] (should_failslab) from [<804bfe00>] (__kmalloc_cache_noprof+0x4c/0x344) [ 342.277249][ T6427] [<804bfdb4>] (__kmalloc_cache_noprof) from [<81373ba4>] (snd_mixer_oss_put_volume1_vol.constprop.0+0x5c/0x1e0) [ 342.277540][ T6427] r10:83ecad00 r9:834929e0 r8:83492840 r7:00000000 r6:822056ac r5:00000005 [ 342.277720][ T6427] r4:00000000 [ 342.278002][ T6427] [<81373b48>] (snd_mixer_oss_put_volume1_vol.constprop.0) from [<81373f6c>] (snd_mixer_oss_put_volume1+0x244/0x29c) [ 342.278338][ T6427] r10:81373d28 r9:837505c8 r8:83750000 r7:84bdb900 r6:83ecb800 r5:00000000 [ 342.278532][ T6427] r4:00000000 r3:00000000 [ 342.278644][ T6427] [<81373d28>] (snd_mixer_oss_put_volume1) from [<81372560>] (snd_mixer_oss_ioctl1+0x250/0xae4) [ 342.278819][ T6427] r7:00000000 r6:200000c0 r5:84bdb900 r4:00000006 [ 342.278954][ T6427] [<81372310>] (snd_mixer_oss_ioctl1) from [<81372e98>] (snd_mixer_oss_ioctl+0x14/0x18) [ 342.279195][ T6427] r10:847a2400 r9:00000004 r8:845980c0 r7:200000c0 r6:845980c1 r5:00000000 [ 342.279382][ T6427] r4:c0404806 [ 342.279459][ T6427] [<81372e84>] (snd_mixer_oss_ioctl) from [<80520db4>] (sys_ioctl+0x134/0xda4) [ 342.280104][ T6427] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 342.280579][ T6427] Exception stack(0xeaba1fa8 to 0xeaba1ff0) [ 342.280799][ T6427] 1fa0: 00000000 00000000 00000004 c0404806 200000c0 00000000 [ 342.281180][ T6427] 1fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b1f0bc [ 342.281545][ T6427] 1fe0: 76b1eec0 76b1eeb0 000189d0 00132da0 [ 342.282016][ T6427] r10:00000036 r9:847a2400 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 342.282465][ T6427] r4:00000000 [ 342.482300][ T6431] fuse: Bad value for 'fd' [ 342.646848][ T6435] fuse: Bad value for 'fd' [ 348.535065][ T6447] fuse: Bad value for 'fd' [ 351.893068][ T6464] FAULT_INJECTION: forcing a failure. [ 351.893068][ T6464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.893820][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.0.548 Not tainted 6.11.0-rc7-syzkaller #0 [ 351.894203][ T6464] Hardware name: ARM-Versatile Express [ 351.894418][ T6464] Call trace: [ 351.894602][ T6464] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 351.894966][ T6464] r7:003d0f00 r6:76b1f0bc r5:60000113 r4:8200ca20 [ 351.895260][ T6464] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 351.895601][ T6464] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 351.895951][ T6464] r5:00000000 r4:8274a3d4 [ 351.896154][ T6464] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 351.896509][ T6464] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 351.896903][ T6464] r6:76b1f0bc r5:847a2020 r4:76b1ebf0 [ 351.897136][ T6464] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 351.897503][ T6464] [<808be6e0>] (should_fail_usercopy) from [<8020b7c4>] (setup_sigframe+0xe4/0x1c4) [ 351.897940][ T6464] [<8020b6e0>] (setup_sigframe) from [<8020bd6c>] (do_work_pending+0x3f4/0x4f8) [ 351.898342][ T6464] r10:b5403587 r9:76b1ebf0 r8:00000000 r7:847a2020 r6:76b1eb70 r5:ead9dfb0 [ 351.898656][ T6464] r4:847a1800 [ 351.898815][ T6464] [<8020b978>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 351.899171][ T6464] Exception stack(0xead9dfb0 to 0xead9dff8) [ 351.899429][ T6464] dfa0: 76b1fb10 00000000 0fffb0d6 00db9828 [ 351.899768][ T6464] dfc0: 00000001 00000006 00188a5c 00188a64 00000000 00006364 003d0f00 76b1f0bc [ 351.900109][ T6464] dfe0: 76b1fb38 76b1eee8 0001c9b4 0014d300 20000010 ffffffff [ 351.900698][ T6464] r10:003d0f00 r9:847a1800 r8:00000000 r7:847a1800 r6:ffffffff r5:20000010 [ 351.901232][ T6464] r4:0014d300 [ 352.895531][ T50] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 353.101323][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 353.125319][ T50] usb 1-1: config 0 has no interfaces? [ 353.125802][ T50] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 353.126175][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.136329][ T50] usb 1-1: config 0 descriptor?? [ 353.242843][ T31] audit: type=1400 audit(353.190:242): avc: denied { setopt } for pid=6474 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.362910][ T50] usb 1-1: USB disconnect, device number 22 [ 353.474166][ T31] audit: type=1400 audit(353.420:243): avc: denied { lock } for pid=6486 comm="syz.1.554" path="/dev/sequencer2" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.263595][ T31] audit: type=1400 audit(354.210:244): avc: denied { setopt } for pid=6490 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.581149][ T50] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 357.781761][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 357.795616][ T50] usb 2-1: no configurations [ 357.796024][ T50] usb 2-1: can't read configurations, error -22 [ 357.950741][ T50] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 358.130916][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 358.140990][ T50] usb 2-1: no configurations [ 358.141268][ T50] usb 2-1: can't read configurations, error -22 [ 358.142169][ T50] usb usb2-port1: attempt power cycle [ 358.550980][ T50] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 358.585905][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 358.588553][ T50] usb 2-1: no configurations [ 358.588841][ T50] usb 2-1: can't read configurations, error -22 [ 358.741066][ T50] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 358.783041][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 358.785006][ T50] usb 2-1: no configurations [ 358.785359][ T50] usb 2-1: can't read configurations, error -22 [ 358.786300][ T50] usb usb2-port1: unable to enumerate USB device [ 367.731795][ T6560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6560 comm=syz.0.579 [ 368.150701][ T31] audit: type=1400 audit(368.090:245): avc: denied { write } for pid=6567 comm="syz.1.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.152290][ T6568] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6568 comm=syz.1.582 [ 369.454654][ T6580] FAULT_INJECTION: forcing a failure. [ 369.454654][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 369.455292][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.0.587 Not tainted 6.11.0-rc7-syzkaller #0 [ 369.455493][ T6580] Hardware name: ARM-Versatile Express [ 369.455670][ T6580] Call trace: [ 369.455787][ T6580] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 369.456011][ T6580] r7:84200c00 r6:00400dc0 r5:60000013 r4:8200ca20 [ 369.456147][ T6580] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 369.456338][ T6580] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 369.456531][ T6580] r5:00000000 r4:8271619c [ 369.456632][ T6580] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 369.456838][ T6580] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 369.457044][ T6580] r6:00400dc0 r5:82624ce0 r4:82c020c0 [ 369.457227][ T6580] [<804dafcc>] (should_failslab) from [<804bfe00>] (__kmalloc_cache_noprof+0x4c/0x344) [ 369.457461][ T6580] [<804bfdb4>] (__kmalloc_cache_noprof) from [<80514388>] (alloc_pipe_info+0x6c/0x238) [ 369.457692][ T6580] r10:00000167 r9:82718df4 r8:84200c00 r7:00100000 r6:00000000 r5:82624ce0 [ 369.457974][ T6580] r4:832184f8 [ 369.458073][ T6580] [<8051431c>] (alloc_pipe_info) from [<80514aac>] (create_pipe_files+0x50/0x1f4) [ 369.458291][ T6580] r9:84200c00 r8:84200c00 r7:82205818 r6:00000000 r5:eb0c5f64 r4:832184f8 [ 369.458462][ T6580] [<80514a5c>] (create_pipe_files) from [<80514ca0>] (do_pipe2+0x50/0x134) [ 369.458668][ T6580] r9:84200c00 r8:8020029c r7:00000167 r6:00000000 r5:00000000 r4:00000000 [ 369.458920][ T6580] [<80514c50>] (do_pipe2) from [<80514e4c>] (sys_pipe2+0x10/0x14) [ 369.459131][ T6580] r6:00130d50 r5:00000000 r4:00000000 [ 369.459266][ T6580] [<80514e3c>] (sys_pipe2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 369.459473][ T6580] Exception stack(0xeb0c5fa8 to 0xeb0c5ff0) [ 369.459647][ T6580] 5fa0: 00000000 00000000 00000000 00000000 00000000 00000000 [ 369.459859][ T6580] 5fc0: 00000000 00000000 00130d50 00000167 00000000 00006364 003d0f00 76b1f0bc [ 369.460061][ T6580] 5fe0: 76b1eec0 76b1eeb0 000189d0 00132da0 [ 373.977781][ T6599] fuse: Bad value for 'group_id' [ 373.978377][ T6599] fuse: Bad value for 'group_id' [ 374.085648][ T6601] fuse: Bad value for 'fd' [ 375.102372][ T6612] fuse: Bad value for 'group_id' [ 375.102797][ T6612] fuse: Bad value for 'group_id' [ 375.221781][ T31] audit: type=1400 audit(375.170:246): avc: denied { accept } for pid=6613 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 375.369506][ T31] audit: type=1400 audit(375.310:247): avc: denied { listen } for pid=6615 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 375.781413][ T3786] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 375.971032][ T3786] usb 1-1: Using ep0 maxpacket: 32 [ 375.985473][ T3786] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 375.986237][ T3786] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 375.987528][ T3786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 375.987913][ T3786] usb 1-1: config 1 has no interface number 0 [ 375.988171][ T3786] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.988503][ T3786] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 375.988956][ T3786] usb 1-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 375.989271][ T3786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.214453][ T3786] usb 1-1: USB disconnect, device number 23 [ 376.435783][ T6620] FAULT_INJECTION: forcing a failure. [ 376.435783][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.437246][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.603 Not tainted 6.11.0-rc7-syzkaller #0 [ 376.437649][ T6620] Hardware name: ARM-Versatile Express [ 376.437906][ T6620] Call trace: [ 376.438104][ T6620] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 376.438483][ T6620] r7:00000000 r6:00000000 r5:60000013 r4:8200ca20 [ 376.438824][ T6620] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 376.439243][ T6620] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 376.439896][ T6620] r5:00000000 r4:8274a3d4 [ 376.440427][ T6620] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 376.441071][ T6620] [<808be4ec>] (should_fail_ex) from [<808be6dc>] (should_fail+0x14/0x18) [ 376.441883][ T6620] r6:00000000 r5:eb0c5f68 r4:00000002 [ 376.442208][ T6620] [<808be6c8>] (should_fail) from [<808be6fc>] (should_fail_usercopy+0x1c/0x20) [ 376.442597][ T6620] [<808be6e0>] (should_fail_usercopy) from [<8053f5d4>] (simple_read_from_buffer+0x8c/0x134) [ 376.443036][ T6620] [<8053f548>] (simple_read_from_buffer) from [<805b43c4>] (proc_fail_nth_read+0xb8/0x100) [ 376.443476][ T6620] r10:00000001 r9:805b430c r8:00000002 r7:eb0c5f68 r6:0000000f r5:76b1ef30 [ 376.443822][ T6620] r4:84206c00 r3:eb0c5e9f [ 376.444030][ T6620] [<805b430c>] (proc_fail_nth_read) from [<805074fc>] (vfs_read+0x98/0x324) [ 376.444410][ T6620] r8:76b1ef30 r7:eb0c5f68 r6:84206c00 r5:0000000f r4:85298000 [ 376.444695][ T6620] [<80507464>] (vfs_read) from [<805081ac>] (ksys_read+0x78/0xf8) [ 376.445039][ T6620] r10:00000003 r9:84206c00 r8:8020029c r7:00000000 r6:00000000 r5:85298000 [ 376.445352][ T6620] r4:85298003 [ 376.445514][ T6620] [<80508134>] (ksys_read) from [<8050823c>] (sys_read+0x10/0x14) [ 376.445874][ T6620] r7:00000003 r6:00000005 r5:76b1ef30 r4:0000000f [ 376.446127][ T6620] [<8050822c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 376.446460][ T6620] Exception stack(0xeb0c5fa8 to 0xeb0c5ff0) [ 376.446726][ T6620] 5fa0: 0000000f 76b1ef30 00000005 76b1ef30 0000000f 00000000 [ 376.447111][ T6620] 5fc0: 0000000f 76b1ef30 00000005 00000003 00000000 00006364 003d0f00 76b1f0bc [ 376.447427][ T6620] 5fe0: 00000158 76b1eed0 000d82e0 00130c74 [ 376.724626][ T6641] FAULT_INJECTION: forcing a failure. [ 376.724626][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 376.725069][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.1.607 Not tainted 6.11.0-rc7-syzkaller #0 [ 376.725265][ T6641] Hardware name: ARM-Versatile Express [ 376.725391][ T6641] Call trace: [ 376.725491][ T6641] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 376.725708][ T6641] r7:84ad0c00 r6:00000dc0 r5:60000013 r4:8200ca20 [ 376.725908][ T6641] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 376.726119][ T6641] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 376.726287][ T6641] r5:00000000 r4:8271619c [ 376.726383][ T6641] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 376.726574][ T6641] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 376.726766][ T6641] r6:00000dc0 r5:00000000 r4:82c01480 [ 376.726888][ T6641] [<804dafcc>] (should_failslab) from [<804bfe00>] (__kmalloc_cache_noprof+0x4c/0x344) [ 376.727104][ T6641] [<804bfdb4>] (__kmalloc_cache_noprof) from [<81373704>] (snd_mixer_oss_put_volume1_sw.constprop.0+0x5c/0x19c) [ 376.727403][ T6641] r10:83ecad80 r9:834929e0 r8:83492840 r7:00000000 r6:00000000 r5:00000000 [ 376.727593][ T6641] r4:822056ac [ 376.727689][ T6641] [<813736a8>] (snd_mixer_oss_put_volume1_sw.constprop.0) from [<81373f8c>] (snd_mixer_oss_put_volume1+0x264/0x29c) [ 376.728104][ T6641] r10:81373d28 r9:837505c8 r8:83750000 r7:85155ec0 r6:83ecb800 r5:00000000 [ 376.728307][ T6641] r4:00000000 r3:00000000 [ 376.728478][ T6641] [<81373d28>] (snd_mixer_oss_put_volume1) from [<81372560>] (snd_mixer_oss_ioctl1+0x250/0xae4) [ 376.728787][ T6641] r7:00000000 r6:200000c0 r5:85155ec0 r4:00000006 [ 376.729312][ T6641] [<81372310>] (snd_mixer_oss_ioctl1) from [<81372e98>] (snd_mixer_oss_ioctl+0x14/0x18) [ 376.729802][ T6641] r10:84ad0c00 r9:00000004 r8:85298840 r7:200000c0 r6:85298841 r5:00000000 [ 376.730086][ T6641] r4:c0404806 [ 376.730359][ T6641] [<81372e84>] (snd_mixer_oss_ioctl) from [<80520db4>] (sys_ioctl+0x134/0xda4) [ 376.730760][ T6641] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 376.730989][ T6641] Exception stack(0xeb699fa8 to 0xeb699ff0) [ 376.731235][ T6641] 9fa0: 00000000 00000000 00000004 c0404806 200000c0 00000000 [ 376.731487][ T6641] 9fc0: 00000000 00000000 00130d50 00000036 00000000 00006364 003d0f00 76b240bc [ 376.731719][ T6641] 9fe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 376.731918][ T6641] r10:00000036 r9:84ad0c00 r8:8020029c r7:00000036 r6:00130d50 r5:00000000 [ 376.732180][ T6641] r4:00000000 [ 377.268068][ T6648] TCP: TCP_TX_DELAY enabled [ 379.140651][ T6653] FAULT_INJECTION: forcing a failure. [ 379.140651][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 379.141309][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.1.612 Not tainted 6.11.0-rc7-syzkaller #0 [ 379.141608][ T6653] Hardware name: ARM-Versatile Express [ 379.141814][ T6653] Call trace: [ 379.142043][ T6653] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 379.142381][ T6653] r7:847fbc00 r6:00000820 r5:60000013 r4:8200ca20 [ 379.142601][ T6653] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 379.142942][ T6653] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 379.143258][ T6653] r5:00000000 r4:8271619c [ 379.143415][ T6653] [<8197afbc>] (dump_stack) from [<808be678>] (should_fail_ex+0x18c/0x1dc) [ 379.143720][ T6653] [<808be4ec>] (should_fail_ex) from [<804db038>] (should_failslab+0x6c/0x94) [ 379.144063][ T6653] r6:00000820 r5:851e1840 r4:82cab780 [ 379.144253][ T6653] [<804dafcc>] (should_failslab) from [<804c0a54>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 379.144578][ T6653] [<804c0a08>] (kmem_cache_alloc_noprof) from [<81462df8>] (skb_clone+0x60/0x1c8) [ 379.144915][ T6653] r10:00000000 r9:000001a2 r8:84bad640 r7:8401bc00 r6:851e1840 r5:851e1840 [ 379.145203][ T6653] r4:00000820 [ 379.145362][ T6653] [<81462d98>] (skb_clone) from [<8156c860>] (__netlink_deliver_tap+0x1e8/0x24c) [ 379.145675][ T6653] r5:84a8e680 r4:84a8e000 [ 379.145873][ T6653] [<8156c678>] (__netlink_deliver_tap) from [<8156f958>] (netlink_unicast+0x280/0x29c) [ 379.146341][ T6653] r10:00000000 r9:00000000 r8:84618d00 r7:851e1840 r6:84bad640 r5:00000020 [ 379.146639][ T6653] r4:8401bc00 [ 379.146797][ T6653] [<8156f6d8>] (netlink_unicast) from [<8156fb50>] (netlink_sendmsg+0x1dc/0x43c) [ 379.147160][ T6653] r9:00000000 r8:00000000 r7:8500f400 r6:00000020 r5:851e1840 r4:eb931f38 [ 379.147455][ T6653] [<8156f974>] (netlink_sendmsg) from [<8145008c>] (__sock_sendmsg+0x44/0x78) [ 379.147818][ T6653] r10:00000800 r9:eb931dd4 r8:eb931dd4 r7:00000000 r6:84c17180 r5:eb931f38 [ 379.148130][ T6653] r4:00000000 [ 379.148292][ T6653] [<81450048>] (__sock_sendmsg) from [<81450ff4>] (____sys_sendmsg+0x2ac/0x2cc) [ 379.148636][ T6653] r7:00000000 r6:00000000 r5:84c17180 r4:eb931f38 [ 379.148880][ T6653] [<81450d48>] (____sys_sendmsg) from [<81452f60>] (___sys_sendmsg+0x9c/0xd0) [ 379.149241][ T6653] r10:eb931e34 r9:200002c0 r8:00000800 r7:00000000 r6:84c17180 r5:eb931f38 [ 379.149537][ T6653] r4:00000000 [ 379.149694][ T6653] [<81452ec4>] (___sys_sendmsg) from [<81453478>] (sys_sendmsg+0x78/0xbc) [ 379.150084][ T6653] r10:00000128 r9:847fbc00 r8:8020029c r7:00000800 r6:200002c0 r5:84c17180 [ 379.150635][ T6653] r4:00000000 [ 379.150954][ T6653] [<81453400>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 379.151450][ T6653] Exception stack(0xeb931fa8 to 0xeb931ff0) [ 379.151724][ T6653] 1fa0: 00000000 00000000 00000005 200002c0 00000800 00000000 [ 379.152054][ T6653] 1fc0: 00000000 00000000 00130d50 00000128 00000000 00006364 003d0f00 76b240bc [ 379.152370][ T6653] 1fe0: 76b23ec0 76b23eb0 000189d0 00132da0 [ 379.152609][ T6653] r7:00000128 r6:00130d50 r5:00000000 r4:00000000 [ 379.242883][ T6655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6655 comm=syz.1.613 [ 381.110832][ T6678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6678 comm=syz.0.622 [ 381.228755][ T31] audit: type=1400 audit(381.170:248): avc: denied { accept } for pid=6679 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 383.607033][ T31] audit: type=1400 audit(383.550:249): avc: denied { setopt } for pid=6686 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.696294][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 383.863019][ T6689] fuse: Unknown parameter '00000000000000000003' [ 390.208855][ T6718] Illegal XDP return value 3602943360 on prog (id 5) dev N/A, expect packet loss! [ 392.951914][ T6725] netlink: 56 bytes leftover after parsing attributes in process `syz.1.632'. [ 392.960487][ T31] audit: type=1400 audit(392.900:250): avc: denied { nlmsg_read } for pid=6709 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.965713][ T3067] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 395.186089][ T3067] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 395.186595][ T3067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.186854][ T3067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.187097][ T3067] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 395.187414][ T3067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.189404][ T3067] usb 1-1: config 0 descriptor?? [ 395.708213][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.708601][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.708809][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.709023][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.709234][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.709440][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.709639][ T3067] wacom 0003:056A:00BB.0001: unknown main item tag 0x0 [ 395.721582][ T3067] wacom 0003:056A:00BB.0001: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 395.726853][ T3067] wacom 0003:056A:00BB.0001: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0 [ 395.727835][ T3067] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.0001/input/input4 [ 396.091483][ T3067] usb 1-1: USB disconnect, device number 24 [ 396.460752][ T3067] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 396.663154][ T3067] usb 1-1: not running at top speed; connect to a high speed hub [ 396.705344][ T3067] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.705825][ T3067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.706156][ T3067] usb 1-1: Product: syz [ 396.706370][ T3067] usb 1-1: Manufacturer: syz [ 396.706645][ T3067] usb 1-1: SerialNumber: syz [ 396.934854][ T3067] cdc_ncm 1-1:1.0: bind() failure [ 396.942467][ T3067] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 396.942751][ T3067] cdc_ncm 1-1:1.1: bind() failure [ 396.960946][ T3067] usb 1-1: USB disconnect, device number 25 [ 399.894316][ T6787] capability: warning: `syz.0.645' uses deprecated v2 capabilities in a way that may be insecure [ 400.323710][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.500890][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 400.516006][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.516340][ T49] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 400.516600][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.516808][ T49] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 400.517045][ T49] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 400.561699][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.562348][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.562609][ T49] usb 1-1: SerialNumber: syz [ 400.583984][ T6789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.587944][ T49] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 400.807451][ T6731] usb 1-1: USB disconnect, device number 26 [ 415.129227][ T31] audit: type=1326 audit(415.070:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.652" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 415.132478][ T31] audit: type=1326 audit(415.080:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.652" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 415.137977][ T31] audit: type=1326 audit(415.080:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.652" exe="/syz-executor" sig=0 arch=40000028 syscall=252 compat=0 ip=0x132da0 code=0x7ffc0000 [ 415.141942][ T31] audit: type=1326 audit(415.080:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.652" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 415.142942][ T31] audit: type=1326 audit(415.080:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.652" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 415.652922][ T31] audit: type=1400 audit(415.600:256): avc: denied { connect } for pid=6823 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.862351][ T31] audit: type=1400 audit(415.810:257): avc: denied { read } for pid=6823 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 435.312681][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.658'. [ 435.312855][ T31] audit: type=1400 audit(435.260:258): avc: denied { nlmsg_write } for pid=6833 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.940831][ T31] audit: type=1400 audit(443.880:259): avc: denied { create } for pid=6877 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 444.260685][ T31] audit: type=1400 audit(444.200:260): avc: denied { create } for pid=6877 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 445.456380][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 446.845372][ T31] audit: type=1400 audit(446.790:261): avc: denied { setopt } for pid=6893 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 449.540616][ T3067] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 449.738007][ T3067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.738562][ T3067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.738937][ T3067] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 449.739196][ T3067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.743028][ T3067] usb 1-1: config 0 descriptor?? [ 450.404791][ T3067] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 450.421387][ T3067] usb 1-1: USB disconnect, device number 27 [ 451.685344][ T6924] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 506.037913][ T6882] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 506.240686][ T6882] usb 2-1: Using ep0 maxpacket: 32 [ 506.287790][ T6882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 506.343325][ T6882] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 506.343831][ T6882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.344156][ T6882] usb 2-1: Product: syz [ 506.344358][ T6882] usb 2-1: Manufacturer: syz [ 506.344567][ T6882] usb 2-1: SerialNumber: syz [ 506.391346][ T6882] usb 2-1: config 0 descriptor?? [ 506.406619][ T7027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.424400][ T6882] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.634441][ T6882] usb 2-1: USB disconnect, device number 28 [ 507.983027][ T7062] binder: 7022:7062 ioctl c0306201 20000080 returned -14 [ 941.981536][ T32] INFO: task syz.1.724:7063 blocked for more than 430 seconds. [ 941.982221][ T32] Not tainted 6.11.0-rc7-syzkaller #0 [ 941.982660][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.983213][ T32] task:syz.1.724 state:D stack:0 pid:7063 tgid:7060 ppid:4871 flags:0x00400001 [ 941.984858][ T32] Call trace: [ 941.985114][ T32] [<8197ed48>] (__schedule) from [<8197f8e0>] (schedule+0x2c/0xfc) [ 941.986295][ T32] r10:dfa15e64 r9:dfa15d90 r8:00000000 r7:845ddd00 r6:845dddf4 r5:845ddd00 [ 941.987335][ T32] r4:82ff8000 [ 941.987494][ T32] [<8197f8b4>] (schedule) from [<81457c8c>] (__lock_sock+0x68/0xac) [ 941.987882][ T32] r5:845ddd00 r4:845dddec [ 941.988215][ T32] [<81457c24>] (__lock_sock) from [<81457db4>] (sockopt_lock_sock+0x54/0x58) [ 941.988552][ T32] r6:00000000 r5:845dddec r4:845ddd00 [ 941.988914][ T32] [<81457d60>] (sockopt_lock_sock) from [<8162bfd4>] (do_ip_getsockopt+0x204/0xbb0) [ 941.989302][ T32] r5:00000000 r4:00000034 [ 941.989796][ T32] [<8162bdd4>] (do_ip_getsockopt) from [<8162c9e4>] (ip_getsockopt+0x64/0x134) [ 942.040766][ T32] r10:00000127 r9:20000180 r8:00000000 r7:20000180 r6:00000000 r5:845ddd00 [ 942.041327][ T32] r4:00000034 [ 942.041506][ T32] [<8162c980>] (ip_getsockopt) from [<8163ce10>] (tcp_getsockopt+0x34/0x6c) [ 942.042038][ T32] r9:20000180 r8:00000000 r7:83212780 r6:00000034 r5:00000000 r4:8162c980 [ 942.043097][ T32] [<8163cddc>] (tcp_getsockopt) from [<81453dd4>] (sock_common_getsockopt+0x28/0x30) [ 942.043508][ T32] r4:8163cddc [ 942.043826][ T32] [<81453dac>] (sock_common_getsockopt) from [<81450bbc>] (do_sock_getsockopt+0x10c/0x298) [ 942.044257][ T32] r4:81453dac [ 942.044461][ T32] [<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (sys_getsockopt+0x90/0xd4) [ 942.044871][ T32] r9:82ff8000 r8:83212780 r7:00000000 r6:00000034 r5:00000000 r4:00000000 [ 942.045361][ T32] [<81452abc>] (sys_getsockopt) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 942.045763][ T32] Exception stack(0xdfa15fa8 to 0xdfa15ff0) [ 942.046079][ T32] 5fa0: 20000180 00000000 00000003 00000000 00000034 00000000 [ 942.046452][ T32] 5fc0: 20000180 00000000 00286388 00000127 00000000 00006364 003d0f00 76b030bc [ 942.046758][ T32] 5fe0: 76b02ec0 76b02eb0 000189d0 00132da0 [ 942.047016][ T32] r8:8020029c r7:00000127 r6:00286388 r5:00000000 r4:20000180 [ 942.047862][ T32] NMI backtrace for cpu 1 [ 942.048224][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 942.048599][ T32] Hardware name: ARM-Versatile Express [ 942.048934][ T32] Call trace: [ 942.049223][ T32] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 942.049617][ T32] r7:00000000 r6:00000113 r5:60000193 r4:8200ca20 [ 942.049952][ T32] [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c) [ 942.050542][ T32] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 942.051044][ T32] r5:00000001 r4:00000001 [ 942.051253][ T32] [<8197afbc>] (dump_stack) from [<8194a468>] (nmi_cpu_backtrace+0x160/0x17c) [ 942.051817][ T32] [<8194a308>] (nmi_cpu_backtrace) from [<8194a5b4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 942.052254][ T32] r7:00000001 r6:8260c5d0 r5:8261a88c r4:ffffffff [ 942.052613][ T32] [<8194a484>] (nmi_trigger_cpumask_backtrace) from [<802103c8>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 942.053090][ T32] r9:0000fac2 r8:828b3130 r7:8260c734 r6:00007f55 r5:8261ae48 r4:84a6ce1c [ 942.053539][ T32] [<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (watchdog+0x498/0x5b8) [ 942.054161][ T32] [<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134) [ 942.054528][ T32] r10:00000000 r9:df819e58 r8:82e9e340 r7:00000000 r6:80350998 r5:82ee8c00 [ 942.054946][ T32] r4:82f44e00 [ 942.055125][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 942.055476][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 942.055867][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 942.056222][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 942.056685][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 942.057007][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82f44e00 [ 942.058103][ T32] Sending NMI from CPU 1 to CPUs 0: [ 942.058978][ C0] NMI backtrace for cpu 0 [ 942.059193][ C0] CPU: 0 UID: 100 PID: 2973 Comm: dhcpcd Not tainted 6.11.0-rc7-syzkaller #0 [ 942.059260][ C0] Hardware name: ARM-Versatile Express [ 942.059300][ C0] PC is at bpf_trace_run2+0xbc/0x184 [ 942.059379][ C0] LR is at bpf_trace_run2+0x98/0x184 [ 942.059419][ C0] pc : [<80380b44>] lr : [<80380b20>] psr: 60000013 [ 942.059451][ C0] sp : eb971f18 ip : eb971f18 fp : eb971f64 [ 942.059481][ C0] r10: 00c00000 r9 : 84215400 r8 : 8020029c [ 942.059515][ C0] r7 : 00000000 r6 : 000000ad r5 : 84215400 r4 : dfa17000 [ 942.059548][ C0] r3 : a3e49040 r2 : 00000000 r1 : 5b917000 r0 : 60000013 [ 942.059658][ C0] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 942.059717][ C0] Control: 30c5387d Table: 844b9140 DAC: fffffffd [ 942.059770][ C0] Call trace: [ 942.059805][ C0] [<80380a88>] (bpf_trace_run2) from [<8020943c>] (__bpf_trace_sys_enter+0x28/0x30) [ 942.059879][ C0] r8:8020029c r7:850a1a08 r6:000000ad r5:eb971fb0 r4:84215400 [ 942.059893][ C0] [<80209414>] (__bpf_trace_sys_enter) from [<8020a62c>] (syscall_trace_enter+0x100/0x1d0) [ 942.059937][ C0] [<8020a52c>] (syscall_trace_enter) from [<80200248>] (__sys_trace+0x8/0x3c) [ 942.059977][ C0] Exception stack(0xeb971fa8 to 0xeb971ff0) [ 942.060019][ C0] 1fa0: 00000008 76f66260 00000011 00000001 00000000 004a358c [ 942.060049][ C0] 1fc0: 00000008 76f66260 7eb43af0 000000ad 008f2180 7eb43af0 004a0d24 00000000 [ 942.060071][ C0] 1fe0: 004a0e58 7eb434f8 76e10cb0 76e10cb8 [ 942.060147][ C0] r7:000000ad r6:7eb43af0 r5:76f66260 r4:00000008 [ 942.180998][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 942.181656][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 942.182031][ T32] Hardware name: ARM-Versatile Express [ 942.182245][ T32] Call trace: [ 942.182422][ T32] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 942.182780][ T32] r7:00000000 r6:826228c4 r5:00000000 r4:8200ca20 [ 942.182997][ T32] [<8195d25c>] (show_stack) from [<8197af94>] (dump_stack_lvl+0x54/0x7c) [ 942.183278][ T32] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 942.183625][ T32] r5:00000000 r4:8286dd18 [ 942.183785][ T32] [<8197afbc>] (dump_stack) from [<8195dd1c>] (panic+0x120/0x368) [ 942.184084][ T32] [<8195dbfc>] (panic) from [<80350cb0>] (watchdog+0x318/0x5b8) [ 942.184385][ T32] r3:00400000 r2:00000000 r1:00000001 r0:8200d520 [ 942.184590][ T32] r7:8260c734 [ 942.184726][ T32] [<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134) [ 942.185066][ T32] r10:00000000 r9:df819e58 r8:82e9e340 r7:00000000 r6:80350998 r5:82ee8c00 [ 942.185322][ T32] r4:82f44e00 [ 942.185463][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 942.185808][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 942.186075][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 942.186351][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 942.186702][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 942.186946][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82f44e00 [ 942.188545][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:40:36 Registers: info registers vcpu 0 CPU#0 R00=7eb435e0 R01=83775038 R02=00000000 R03=00000000 R04=7eb43578 R05=83775030 R06=00000000 R07=b5403587 R08=7eb43af0 R09=008f2f58 R10=0000019e R11=ec2f1d24 R12=ec2f1d00 R13=ec2f1d00 R14=80202ffc R15=8197c4d0 PSR=20000013 --C- A S svc32 s00=08000000 s01=00000000 d00=0000000008000000 s02=d0000000 s03=000f6ea3 d01=000f6ea3d0000000 s04=fc000000 s05=ffffffff d02=fffffffffc000000 s06=fc000000 s07=ffffffff d03=fffffffffc000000 s08=fe8ba0b0 s09=ffddaccf d04=ffddaccffe8ba0b0 s10=ffffffff s11=ffffffff d05=ffffffffffffffff s12=ffc1bb3d s13=00ff9211 d06=00ff9211ffc1bb3d s14=ffffffff s15=00000000 d07=00000000ffffffff s16=fe000000 s17=070f3fdd d08=070f3fddfe000000 s18=52000000 s19=0000c427 d09=0000c42752000000 s20=ff332f94 s21=00ff920d d10=00ff920dff332f94 s22=ffffffff s23=00000000 d11=00000000ffffffff s24=088ba0b0 s25=00000000 d12=00000000088ba0b0 s26=d0000000 s27=000f6ea3 d13=000f6ea3d0000000 s28=02000000 s29=00000000 d14=0000000002000000 s30=02000000 s31=00000000 d15=0000000002000000 s32=fe89bedb s33=ffd668de d16=ffd668defe89bedb s34=ffffffff s35=ffffffff d17=ffffffffffffffff s36=ffd410f8 s37=00b0c943 d18=00b0c943ffd410f8 s38=ffffffff s39=00000000 d19=00000000ffffffff s40=01000000 s41=00000000 d20=0000000001000000 s42=01263afb s43=00000000 d21=0000000001263afb s44=00000002 s45=00000000 d22=0000000000000002 s46=006213a9 s47=00000000 d23=00000000006213a9 s48=ff6d7a3f s49=070f3fdd d24=070f3fddff6d7a3f s50=0747758b s51=00000000 d25=000000000747758b s52=01ef8499 s53=00e68a78 d26=00e68a7801ef8499 s54=00e1761d s55=01c20434 d27=01c2043400e1761d s56=015e701f s57=01f5a712 d28=01f5a712015e701f s58=00fad389 s59=00e1761d d29=00e1761d00fad389 s60=d6c6e2d5 s61=000f6ea3 d30=000f6ea3d6c6e2d5 s62=07442b25 s63=fff8e306 d31=fff8e30607442b25 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=83e69840 R01=0000002e R02=eaef5000 R03=eaef5018 R04=8287045e R05=83e69840 R06=809bab08 R07=828704b8 R08=82870458 R09=00000061 R10=60000113 R11=df8e1c88 R12=00000002 R13=df8e1c7c R14=82753ddc R15=809bab18 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=004d27e9 s17=00000000 d08=00000000004d27e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00018003 s33=88030608 d16=8803060800018003 s34=00080001 s35=02019003 d17=0201900300080001 s36=80030d80 s37=0e80020d d18=0e80020d80030d80 s38=000e8003 s39=82030402 d19=82030402000e8003 s40=0a02000e s41=000e8403 d20=000e84030a02000e s42=86030002 s43=0e02000e d21=0e02000e86030002 s44=000e8803 s45=8c030a04 d22=8c030a04000e8803 s46=0004000e s47=000e9003 d23=000e90030004000e s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=cc98303c s53=9c104d08 d26=9c104d08cc98303c s54=232469c1 s55=a30cfbc0 d27=a30cfbc0232469c1 s56=ffc8b94a s57=918b0955 d28=918b0955ffc8b94a s58=13d2a19f s59=9bd5a085 d29=9bd5a08513d2a19f s60=b3a700a8 s61=5986213f d30=5986213fb3a700a8 s62=73a0e469 s63=bc6ba083 d31=bc6ba08373a0e469 FPSCR: 00000000