last executing test programs: 21m3.639662717s ago: executing program 1 (id=2229): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x8002) ioctl$KDENABIO(r0, 0x4b36) 21m3.529267662s ago: executing program 1 (id=2230): ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000cc0)) 21m3.469723355s ago: executing program 1 (id=2231): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"ed231fe9469812efd2c6bd7285948717a8a2cf0d5bd7e74124eef0d2b53c5e8c", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x10, 0x2, 0xfffffffffffffffd}) flock(r0, 0xa) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x63c401, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x2ce6f1, 0x85b9}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, 0x0, 0x0, r2}) r3 = epoll_create(0x9) r4 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x100001) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[{}], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x1, 0x3, 0x0, r6}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000480)={0x2, {0x401, 0x5, 0x8, 0x3, 0x9, 0x8e}}) r7 = openat$rfkill(0xffffff9c, &(0x7f00000004c0), 0x20002, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r7, 0x9c315000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0xeec3, 0x595c, 0xffc0, 0x1, 0x10}}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000000540)={{r7}, "1e4ae6eed86aa7eed05de4d6b9d5f0ef35dcc14e2df8c885e466cd2b2b0667c81ddf0255d9186db8b6656a5c8b307202dc168bc9960255dd7458cf95770556981aa727cda83fb2d3c2d9078816410482caa190432b9910af92f96164e3f4c7b535887ee911f8debb65bf6e141cd62bb87f1508817dcb712b93e1f405cc418785d924a235fa084a0f7c8a263180ad51b6b7b370ff2e7eeef20cd9a748246e4e284e785b1c9bd6d8e0b37efa9596810e61ee15f35b48ada6e48e5a3c002b8a8fda97d20be7dbb2b09b4d853207b2d633a7a30307924c98e2508b84ace70b30ef60c39321df0a8a41d0961738e34f61803b59961c0e0864394e9e08e45017a18a1b5f85068bbbcb04ea9a584470fb3372e3141c928bf36ae6a82256691269ef296c411dc93a79e44b4b4230b5342ab54aa1a366b900f4f690f14b6bc45771c7fe09db29c37a3089422e66fc55fef281cf2e95b2e01ef89e5ab16361c5a3a8f877493098f26e29bc7dc5dceb83252206906a508fa12efc2399fdbc5c85ab38c096a7b26a04f941a55790aebcd9dc669070d6c628a1eff284b0378b7f5f75c72a84a166b09e9bf3afa2527f7c5c0805f77b18cce5896eff6b893fe0940377181af267084ed7ca644a0c0ce35d655118ac5ce85ce6131658d83602e5adf3e44317f68a06fb2f1fc2227c89843485e9b30d88d205369134499c9be1e9264e5d09f3caa80b95f5821cda03c1c3e1c0e94b6920b48477535c636fd8652eb1386567434a11959ede4fd863b8e3aeeac9b8742f4455fd0859a008693b1c33b62fa0746adb80afa24c8920bae2882932c814ef7e7858f861922bd8c103cb45c48db4740739ed797ca0b988a08c2b0f48387e7998e7ac26f1e61f66f241612ba916ae2c8acead4952e47b4669dc4f6327b810dcaac273be3e339bfb9782cce87d5250e2bc298a7deef6492ea5577211920876b6cbac4f43f7f3ca35045e354ce0e040fdcdacb0a04bcf9a66de27eeff4fa9204e43d2717c11cf5596d5769fedd76331939f32350dff1b0d1ea2e7b38c0cdf739194cdae3d77fa5d9db01588622b7caa570136d64b60532d0a217c4e5fe3bce5de1755b9bdfff13d2fc2bf911cffe2ec73da44b886905f2e0f140a26ea60b9eb3b9bebed149c312be7bab444685bd2d5e9639007e81ee7632b493ad2336c9a7e02f5a63517cbb054ee5a0980900e82e0b57999d7ddffec4ef7dcac9d23893588e8e7eb4d0a0c0894246f48ae81785ba16ea20528caef2c6004b23d8391e0de4063762b71140353d971d75b27bb277e2ad8dab49e9d81b864243ec5e9c93e7c45d1b1ebbe3c5e0cefe78956bbd4d636b16e2d15dde735651c86b2c93b20cf0603468d37fc404179cbbe00dbe44b84fae2e0e5eb84db810a11faed65245bc7b4c9c10375f85eaeee0d91ceda7232ec81a69e1636345edc13ee0c40039504bf3481a1d21a02bcd4ce529993615de3635bd4ffd07f5d0794ca55883bcea2ef8151fa99d0c3a19e99a7b8074516f0d3dd45fc023226f2e843bcf34d64433878ee4485e27236953e7a523100c62a23f882c9a371cc9db2ca0d4ecc2ef11bcc6251f7ce4ad62d1e4f305b50bdcf41db4f5cee9dcc32f880ece95be0f8dd52f7994b31cfd1b2f70331239035c93fce713ac08153ab3ff7da13608c7394535f8459833c6da95032acff30ad912527090bad56f2f14c0b9f643bdd18958f74b465030c55b04a56da3bcfce55cc0fc713f4e5377e328d153b814f25bdbf349a503f0b0495d68da359a9c30f1c06a87cba4ea2ad179685eb8df3e655f81db2e941eb053b6237724b657a2c52a748f36b764f76e500314e4d83ba4d8b6f3530c08260ad8c83aa17d142fb6fd7e9602affdbbc7a52b3e499cb05d1a0b9a7c55aeef8a3fcb351d791d0e16469e3a05aa363eda664f5999c87194981f691a85d527d158a06b467a8bbc7855ab1bb4b7e8eed8238cb443d6ba98e8eb4aeae5f6b64c8f62c3c08472a38b7200c1d1d14439aac21bb536b201a3361bae0211987bc7e041101ddd53f834852740fa6c3b47acd9dd4f092dc64f2e742280facec7ea46dd2c52d94e3dedbd83758a97143713c04d72236de5eaec3524f7fa42bfb2e5a7e4c4ba5d5c378e2a9b8864f84a2fe2e968fc20b66892f6eb14142f62a7b7340446e66838d1ff2e84771a9ca51f244e0a709a515c23cecd16587284cb0926f2dfbbca7971f7ce847bf854ac4fcc7562e360ca4cde4a76f648f03561d7d79e8e44d902336832e1b74e70fc3647f8fc7399335612b907d5af0edc80540417dd2ad9aa7f9f26699763a6fa11b0556c5e441f1b3daf8ed628966793a248def7b10d3ba5d9072b91c3ed63b6d2f2d4e566666b07bb8c90982044a5d5fa90950d91162a7dde49aa997f1038d6af7f85b744a8782a9270a84a778b04fe5043f1cf490e36be96936428aaaaec815607740083d3b74afad14898380aa0ed1b84592cc23691957cfbc810f2e7f764a52b0c8bb30f8994cbd866656162422a0939ab010169382f6141b8fa2f7d8bee4ee4126d70d99684e7913d97f113ff4e7d6e4a76988d3545b6fa82217ec36273fc3f71a065e7ef50fb08cce9daf765cfa0799e9b9868ac8864bb0d27a7efc08e9ac192d9980906008dfc6e49ac5a1607502aab977ac7a23d5216766f2b5cc3b53423292e8c5c51911f66fd766cbc588f35b6990c6fa150274148885710ca038bb359465d9db3bd395190ac46d00d8a2413ecfe6f61bc154a91eb47d5b59961a3ec313ecf034b5c5948349904234791cd6ebed8a03d29d0497342ebfeb503377d540b6fa67721ed1ee21357a80f5533c57c90f259f73a2036adbea1cd0aeb9612eded562a70fbd153b122228a22a61e0302b74c94f78affcab4e9b5ba5d95f7696af395e658be33056e7a7f7f394de1ae6f49a2ea57b7b6b2e7b0df6b75bea774d90472818a68cab77924d07d0db3e86a6e4eef34860ddcb40b586504780582ee34a8b3be8e71d1a8a92b13901e8303d4adfd695a0dac5fec68b6ce6d7830d12093f549dfe585383c8ebe4a353c41a54649ff2c40216c181c0a816ecc0ad8a4ad3b75831e6f43121a741f830f4d59ca38ed9b30d4dbd29cbf7cc9d39e0e2e8e865a5bd5ead2faff7b6d4ae32d74b475e207e0490bf9ecf5cbe86e9e2067da41b38db42b26e45c350df9021914852c96e9c632f320a3b2c7c6161db51b95731c06b8418658c05241dbc34e56c211b0b180b372eaf7309b69afad6bcba19a5b7ccd72987e914d7fa5824b6d243d45629447bd5cc2dee48f7cd9a8c2a31a2a15df37b5e34a26be0f02a19420591776269bb2f9223134b82bfe37a33135d35505189d957acaa2340f92a89c71bdc676ba2f9c17dfa9c517b6a142ea6215431d9a7142b8c06aea239431477da64ecf71777f4e9eee7bd25d1acaff3700dfc8f8aec5a175cbaf823800bd0324d76b49b360a84526ca111b871bcb76c571473aef0de8550a8064c8ede1e31abbdb038ff81425deb0f5f350b275284181d3ba1e8a3879aa05210ec5685b7e0532e5d50adcb069777a26b08ad834837646715939de98a85a330c8090d460ec1966c25485292f972ff3b6b0e814e5acd3c71b140c6b73549dc1e241fe328cf4a1e4366ffee93c28db8c5b38abbb1db928d5275be9408ceff8531d033a00d1ae6eecf07aa27f6deb5bd8b84d4150ee45a06045fd53f30c4979905f4ca230997faf69d5bb688973182b44e21fc22d33da5782422c1b6c6e139a9fadc5f2735acc0fcd69e15e910f48e08c6baac2a1da5718f85d11c48e18ec58430160063b17c23414178ded7ce10933e064f0358004b4c85b99dbe34f465edcedda88af9d58c474a1e91155cde2e2865273da62753dde5bc18a388bb0c944b9d3fac5d8d5fab1b6ffcc18e6603f8eb3a9316130317077888691a1efe3716d94fcfd352fcdea5ef795d970968398d185e573e15c63712058d33a6052a3b7a5e18bc99183d304511a2eba4888b0d1556c7e1aee4bdb2858ed108256d7c93aefa69fa7722d07f02bb22aee3be105e766b62b463db6ecc897c47ca20c00158b7493ad5f110da392ca18eeb7080f04b49cfcfc7b468d4d9a491d1b257755b406309ab3b3835d31d2c615b4b68f618df0b5d0e7528caa81f02464d260740b6470470ec3d68268c1a48bfb39417487eb19cbe57a84362822395f757559fad2e2958eaeaebb17344522ad413a1950429d6ee276bc97afa0563eabbee6b73c2ef04f35ab46cd5e0e06a6755bf21049aa033007d3a85fdd22f3a0e9e8c7df85118525d1048f48b3a930ee83ac5ff1db65508bc6846f0e08bc3b99612468dd146fa46beddc164a3cdf4e469bdc33e6ba5876c98656e77f2a54090b55e2edd8d8c2c12a8b6a8d8ce04697592d8bc2f58d338832a259cd50325a618b66723374181a79be31a9c2abe71217c8e20e96c127352facab685a5e3725f35076812402b3637269425edf3e79891a324c2d537b246081dce1bce5fc6f3e7afafb9b4d10afcfee7de908fdfa9c8d8c305f11554d12f3694fcc1fb70127e3471754ec3126a5779424936c34c73666b1a1e8c94b20b27455fac0d380ce8d44681f7a3f936634ccb0b0f98224729a12fb224e7918c805cd3e393fc206e18fffe86dcf7da913d4c7c2ef885ad51856183ac5e50e0045cd02029e59c1697f7e43adf5a6ef362bd52abbbf58b46ef7ada614f01e030d8a32e25286f2404fe0bcb21d1ca26d566c727b21bb836a51bd58004ecab255af06bf38f24fee249bfebd11c71ed1b41d74d560a4f5d79f4702700044b0730c5bb41aabb34b44171db4084a933811c5390723daecc59e2731ebe21a3a446a954b6c8b7444d7d5c069cd7a44a1631f5cbfaa42ed9b618371646829773e96bd167978f1b5a75524045f2ba1795623f4cbc3615d387edde3697ed81ecb86013033a34935ba2c21118fe77b547400facef3feb276768a96858497042bbf172e253ef622c7b2cd6681e0e4b12d1c132f8710e99cc37a3d7547f398895a51a46468f8cf2dabcfe18ec502ef1b3088419a3b5a57fb28bfa7813d088c80b3c3665b46e0f8967e6289ae26055c0e9803d4c0aef4ca39a923218832390d9dfec3689268947da01675bb398f3bba2ed04ba128b37a353418446ed3446d6d5fa7fdf04abb21a5f8ea35fc7b7a36ad5fbebba9b5e4ebe97023cf17a1175a615a8346912f1445bbf36f9aa4732c85a65c4ffb259027586e142f4caec042635d4a04119ddefee2424cdddb103dcb50c196b28b02a518e09a91937b63d8fef6b0364dc93238229b9ceaa67ce52a463dc7a60e021bfc92543656bca8237e8ff0ce50f46ea65d28126f131308536c437b71064296ba12b9725f95e2b620b66f7fdb713ea95c6240ec6dfc803cca09850f04b07c9168f950aa2f74953fe474eaf9ca1581f22a3a63868b1a6f7eaa6854cdd709c52bd2e09aea472d532f1383204a77e62193262339c7bcd006e76c514a392a8d9dd731280011a85277d9654394644410371b018636b3c002361ad2b8a4bdeceb9355f3a729f15d7b13a5e5453fe92e5af5c3abb7b8e2661c52764609e1674b2e0c9063339c6ab23e7e814627ed7e330e5c8eb5e7f5d65f2d4d218c8cf4de620a6bcb206f830c5727bd82c0f7dd12534197074b85a164a4a54d46b6a7f00caab880e0f1540d6b92b0c5934273517829a9c038568681ddc0c1db0180093ef9be3895a5d1b5a9d7ccb200be69d6edb7d39a7d813d673932fb514"}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001540)={{r5}, 0x5, 0x200, 0xfffffffffffff179}) r8 = openat$cgroup_devices(r0, &(0x7f0000001580)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001680)={{r8}, 0x0, 0x8, @inherit={0x88, &(0x7f00000015c0)={0x1, 0x8, 0x0, 0x0, {0x0, 0xda8a, 0x30, 0x5, 0x4}, [0x6, 0x4, 0x4, 0x4, 0x61, 0xff, 0x5, 0x0]}}, @devid}) r9 = openat$hwrng(0xffffff9c, &(0x7f0000002680), 0x4000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r9, 0x40046205, &(0x7f00000026c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) r11 = fcntl$dupfd(r5, 0x0, r10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002740), r9) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r12, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x40091}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f0000002840)={{0x0, 0x0, 0x6, 0x2, 0xfff}, 0x9, 0x8, 0x46}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000002880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000002a80)={{r13, 0x3, 0xffffffff, 0x2, 0x8000000000000000, 0x1, 0x30, 0x3, 0x5, 0x2, 0x2a8, 0x7fff, 0xfffffffffffffbff, 0xee, 0xcc7e}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 21m3.360330091s ago: executing program 1 (id=2232): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x2, r0, 0x0, 0x0) r1 = openat$userio(0xffffff9c, &(0x7f0000000000), 0x428900, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5450, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5451, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) getsockname$l2tp6(r2, 0x0, &(0x7f0000000180)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0) 21m3.229051858s ago: executing program 1 (id=2233): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00'}) 21m2.99764411s ago: executing program 1 (id=2234): r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') dup3(r1, r2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000002900), 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xf, 0x4, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) r3 = openat$selinux_enforce(0xffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r3) r4 = socket(0x1d, 0x2, 0x406) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r5, 0x1, {0x2, 0x0, 0x4}}, 0x18) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0xc4d8, 0x2, 0x1}, 0xf, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x5452, &(0x7f0000000140)={0x73622a85, 0x0, 0x1}) landlock_restrict_self(r6, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_BUFINFO(r10, 0xc02c640e, 0x0) 21m2.9974175s ago: executing program 32 (id=2234): r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') dup3(r1, r2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000002900), 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xf, 0x4, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) r3 = openat$selinux_enforce(0xffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r3) r4 = socket(0x1d, 0x2, 0x406) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r5, 0x1, {0x2, 0x0, 0x4}}, 0x18) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0xc4d8, 0x2, 0x1}, 0xf, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x5452, &(0x7f0000000140)={0x73622a85, 0x0, 0x1}) landlock_restrict_self(r6, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_BUFINFO(r10, 0xc02c640e, 0x0) 15m31.450989853s ago: executing program 0 (id=3165): r0 = socket(0x1, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x541b, 0x20000000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0xa2000, 0x0) r8 = dup(r7) ioctl$BLKSECTGET(r8, 0x1267, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 15m31.289937601s ago: executing program 0 (id=3166): r0 = syz_open_dev$amidi(&(0x7f0000000dc0), 0x7, 0x40) flock(r0, 0x5) r1 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000003200), 0x0, 0x0) fstat(r1, &(0x7f0000005380)) 15m31.208646095s ago: executing program 0 (id=3167): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x50) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x4000054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x1, 0x8a, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x8065, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x7, 0x3a, [@dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x94, 0x7, "21b56c1dd9"}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) r4 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x6a0440, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) 15m30.946861259s ago: executing program 0 (id=3169): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5421, 0x20a073fe) ioctl$TCSBRKP(r1, 0x5450, 0xd) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 15m30.838881904s ago: executing program 0 (id=3171): syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x400) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x400) fgetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)=""/55, 0x37) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x6, 0x1, [0x7, 0x8, 0x2, 0x9, 0x7], [0x3, 0x2, 0x790, 0x5, 0x7, 0x2, 0xfffffffffffffffb, 0x5, 0x2, 0x8, 0x0, 0xfc1c, 0x7, 0x9, 0x9, 0x7ff, 0x3, 0x3, 0x81, 0xfff, 0x4, 0x4, 0x800, 0xc, 0x558c, 0x101, 0x6, 0x2, 0x8, 0x24, 0xc, 0x800, 0x7, 0x8, 0x4, 0x8, 0x9, 0x6, 0x3, 0x2, 0x4, 0x2a, 0x3ff, 0xffffffffffff0000, 0x6, 0x9, 0x1, 0x18f6d13f, 0x3, 0x2, 0xffffffffffffff01, 0x5, 0x5, 0x1, 0x5, 0xe9a, 0x7, 0x0, 0x8, 0x9ccf, 0x3, 0x7fffffffffffffff, 0x0, 0x4, 0x4, 0x1bce, 0x8, 0x5, 0x4, 0x101, 0xffffffffffffffff, 0x10001, 0x8, 0xfffffffffffffff9, 0x80000001, 0x7, 0x6b6, 0xd, 0x1, 0x2, 0x5, 0x400, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x474, 0x8, 0x80000000000, 0x0, 0x5, 0xb6ed, 0x80000001, 0x3, 0xffff, 0x0, 0x9f4, 0xfffffffffffffff8, 0x9, 0x0, 0xe3, 0x80000000, 0x0, 0x0, 0xe917, 0xffffffff, 0x8, 0x4, 0x0, 0x9d, 0x0, 0x3, 0x9, 0x1, 0xc5, 0x80000000, 0x6, 0x3, 0x7, 0x2, 0x6]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={r2, 0x5bc, 0xfff}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={r2, 0x5bc, 0xfff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b40)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8002094}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10880}, 0x4000004) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8002094}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10880}, 0x4000004) timer_create(0x2, &(0x7f0000000d80)={0x0, 0x13, 0x2, @thr={&(0x7f0000000c40)="e9484868f8f865f82413019fdef559a373c2a54460d58361a4120f906a70476ef00b1c9ef2a0f02d4fcd0bbc1bc48cf5fa765b8d0bc50dd5ed824945565e85cbbb0642f3b7a1fd14089405ae96af5bc4732135f06db92505bd319008588b1c0f30a15b1170375f365037e27e978d9f422cb17efbcbb38600a86080908b667f26f51529b867a5174a2898e6cda333", &(0x7f0000000d00)="2f5a3cf77ea2ac10a7622c7d817025f0f7a6c07628a4808c34f3ad050a7d5075d2a28c82f26be0e81714906b162fc167f0c6a0398bbe2f6da77ba5b42130af4a11183683bb9d0745adf088bba2ed2d75b5be6720f1df99140689e90a8c"}}, &(0x7f0000000dc0)=0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000e00)=0xc, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x45) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x45) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48850}, 0x20004010) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r8 = accept4$vsock_stream(r0, &(0x7f0000001040)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x20004801) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x20004801) shutdown(r3, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f00000011c0)={0x401, 0x3, 0xfffffff8, 0x4, 0x1, 0x400}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8054}, 0x20000805) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x15c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd2a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4050}, 0x40) timer_getoverrun(r6) r10 = openat$fb1(0xffffff9c, &(0x7f0000001540), 0x404040, 0x0) ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f0000001680)={0x1000, 0x3, &(0x7f0000001580)=[0x1ff, 0x632, 0x0], &(0x7f00000015c0)=[0x200, 0x5, 0x81, 0x0, 0x8000, 0x1, 0xdb3, 0x8, 0x6], &(0x7f0000001600)=[0x10, 0x4, 0xfffc, 0x27, 0x6, 0x4, 0x6, 0x19e3], &(0x7f0000001640)=[0x4, 0xc25, 0x4, 0x3, 0x8, 0x9, 0x81, 0x0, 0x5, 0x1]}) (async) ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f0000001680)={0x1000, 0x3, &(0x7f0000001580)=[0x1ff, 0x632, 0x0], &(0x7f00000015c0)=[0x200, 0x5, 0x81, 0x0, 0x8000, 0x1, 0xdb3, 0x8, 0x6], &(0x7f0000001600)=[0x10, 0x4, 0xfffc, 0x27, 0x6, 0x4, 0x6, 0x19e3], &(0x7f0000001640)=[0x4, 0xc25, 0x4, 0x3, 0x8, 0x9, 0x81, 0x0, 0x5, 0x1]}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000016c0)=0x6, 0x4) 15m30.499386552s ago: executing program 0 (id=3174): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/88, 0x58, 0x0, &(0x7f00000000c0)=""/22, 0x16}, &(0x7f0000000300)=0x40) r1 = fanotify_init(0x1, 0x20000) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="02eb060001c051507d0000200000000037e6cddafd"], 0xfffffffffffffcb9, 0x3) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000002b00), 0x0, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000200)={0xad1, 0x3}) readahead(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x40, 0x6, &(0x7f00000000c0)={0xb, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$unix(0x1, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$sysctl(r6, &(0x7f0000000240)='2\x00', 0x2) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x5450, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) r9 = memfd_create(&(0x7f0000000640)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5450, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x541b, 0x0) ioctl$IOMMU_GET_HW_INFO(r5, 0x40049409, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14m45.093479149s ago: executing program 33 (id=3174): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/88, 0x58, 0x0, &(0x7f00000000c0)=""/22, 0x16}, &(0x7f0000000300)=0x40) r1 = fanotify_init(0x1, 0x20000) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="02eb060001c051507d0000200000000037e6cddafd"], 0xfffffffffffffcb9, 0x3) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000002b00), 0x0, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000200)={0xad1, 0x3}) readahead(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x40, 0x6, &(0x7f00000000c0)={0xb, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$unix(0x1, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$sysctl(r6, &(0x7f0000000240)='2\x00', 0x2) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x5450, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) r9 = memfd_create(&(0x7f0000000640)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5450, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x541b, 0x0) ioctl$IOMMU_GET_HW_INFO(r5, 0x40049409, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m11.200611746s ago: executing program 2 (id=4359): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) dup3(r2, r1, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r4) ioctl$TIOCMBIC(r0, 0x5450, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0), 0xb82e336200000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) (async) dup3(r2, r1, 0x0) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000006c0), 0x0, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) close(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) recvmsg(r3, &(0x7f0000000000)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) close(r4) (async) ioctl$TIOCMBIC(r0, 0x5450, 0x0) (async) 7m8.430959561s ago: executing program 2 (id=4361): openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x44000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x6f) listen(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFQNL_MSG_VERDICT(r4, 0x0, 0x80) accept$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4084080}, 0x4000000) r5 = syz_create_resource$binfmt(&(0x7f0000000740)='./file0\x00') r6 = openat$binfmt(0xffffff9c, r5, 0x41, 0x1ff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000d00), 0x0, 0x0) dup3(r6, r7, 0x0) fsync(r7) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$TCSETSW(r8, 0x8906, 0x0) accept$unix(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000640), 0x0, 0x0) 7m7.309885s ago: executing program 2 (id=4362): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x28000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000140)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) getpeername(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x80000001}, 0xf) r5 = dup3(r1, r4, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x5451) 7m6.840762364s ago: executing program 2 (id=4363): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r3, r2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x30b542, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x20) 7m4.151020184s ago: executing program 2 (id=4367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 7m3.758915685s ago: executing program 2 (id=4368): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xda, 0x8, &(0x7f0000000040)={0x12, "f47ac51b4f1dcabc4ac2d6ba744c47a77c9cc7198a3c54fac406bf62b187e609eb"}}) 6m18.142207332s ago: executing program 34 (id=4368): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xda, 0x8, &(0x7f0000000040)={0x12, "f47ac51b4f1dcabc4ac2d6ba744c47a77c9cc7198a3c54fac406bf62b187e609eb"}}) 54.22857252s ago: executing program 4 (id=4510): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000900)=""/4096, 0x1000, 0x10062, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44) 33.69578731s ago: executing program 4 (id=4513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x811}]}]}, 0x50}}, 0x4014) 33.540528988s ago: executing program 4 (id=4514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) 17.870537867s ago: executing program 4 (id=4515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 5.019766901s ago: executing program 4 (id=4516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) 4.750812874s ago: executing program 4 (id=4517): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) 3.949837576s ago: executing program 3 (id=4518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 3.649791372s ago: executing program 3 (id=4519): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffdeffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c0000000200"], 0x23c}}, 0x0) 3.389542895s ago: executing program 3 (id=4520): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000180)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x33e6, 0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 3.09934117s ago: executing program 3 (id=4521): syz_io_uring_setup(0x11b6, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x5, 0x40000333}, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000278000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff0200000000000000000000000000010000000032"], 0x23c}}, 0x0) 2.769194287s ago: executing program 3 (id=4522): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x9) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0xfffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000180), &(0x7f00000002c0)}) 0s ago: executing program 3 (id=4523): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): Raw Gadget: couldn't find an available UDC or it's busy [ 1251.369214][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.644717][ T31] audit: type=1400 audit(2134218498.218:583): avc: denied { create } for pid=17174 comm="syz.3.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1252.595908][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1252.596126][ T31] audit: type=1400 audit(2134218499.168:586): avc: denied { read } for pid=17183 comm="syz.3.3355" path="socket:[40884]" dev="sockfs" ino=40884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1253.112465][T17185] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1253.420325][ T31] audit: type=1400 audit(2134218499.988:587): avc: denied { create } for pid=17197 comm="syz.3.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1253.491175][ T31] audit: type=1400 audit(2134218500.058:588): avc: denied { name_bind } for pid=17199 comm="syz.2.3359" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1253.493805][ T31] audit: type=1400 audit(2134218500.068:589): avc: denied { node_bind } for pid=17199 comm="syz.2.3359" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1253.909816][ T31] audit: type=1400 audit(2134218500.478:590): avc: denied { associate } for pid=17206 comm="syz.2.3361" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1253.930339][ T31] audit: type=1400 audit(2134218500.498:591): avc: denied { ioctl } for pid=17204 comm="syz.3.3360" path="socket:[41596]" dev="sockfs" ino=41596 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1253.943247][ T31] audit: type=1400 audit(2134218500.508:592): avc: denied { write } for pid=17204 comm="syz.3.3360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1253.946430][ T31] audit: type=1400 audit(2134218500.518:593): avc: denied { create } for pid=17206 comm="syz.2.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1253.959542][ T31] audit: type=1400 audit(2134218500.528:594): avc: denied { write } for pid=17206 comm="syz.2.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1253.963471][ T31] audit: type=1400 audit(2134218500.528:595): avc: denied { read } for pid=17206 comm="syz.2.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1254.082134][T17213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=17213 comm=syz.2.3363 [ 1254.175884][T17216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17216 comm=syz.2.3365 [ 1254.532631][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.535537][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.775112][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.776673][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.439861][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1260.444161][ T31] audit: type=1400 audit(2134218507.008:602): avc: denied { write } for pid=17259 comm="syz.2.3379" name="nbd2" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1264.707078][ T31] audit: type=1400 audit(2134218511.278:603): avc: denied { append } for pid=17276 comm="syz.2.3384" name="ttyS3" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 1264.896032][ T31] audit: type=1400 audit(2134218511.458:604): avc: granted { setsecparam } for pid=17281 comm="syz.2.3385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1267.162848][ T31] audit: type=1400 audit(2134218513.738:605): avc: denied { create } for pid=17289 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1270.256691][ T31] audit: type=1400 audit(2134218516.828:606): avc: denied { remount } for pid=17306 comm="syz.2.3394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1272.026126][T17317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=17317 comm=syz.2.3398 [ 1274.055041][ T31] audit: type=1400 audit(2134218520.618:607): avc: denied { setopt } for pid=17353 comm="syz.2.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1277.617816][ T31] audit: type=1400 audit(2134218524.188:608): avc: denied { map } for pid=17383 comm="syz.3.3417" path="socket:[41827]" dev="sockfs" ino=41827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1277.906365][T17392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17392 comm=syz.3.3420 [ 1278.733397][ T31] audit: type=1400 audit(2134218525.308:609): avc: denied { create } for pid=17406 comm="syz.2.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1278.817057][ T31] audit: type=1400 audit(2134218525.388:610): avc: denied { read } for pid=17407 comm="syz.3.3427" path="socket:[42345]" dev="sockfs" ino=42345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1279.156338][ T31] audit: type=1400 audit(2134218525.728:611): avc: denied { write } for pid=17407 comm="syz.3.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1280.287628][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.290237][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.532699][ T31] audit: type=1400 audit(2134218527.108:612): avc: denied { create } for pid=17423 comm="syz.3.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1280.537414][ T31] audit: type=1400 audit(2134218527.108:613): avc: denied { accept } for pid=17423 comm="syz.3.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1280.575434][ T31] audit: type=1400 audit(2134218527.148:614): avc: denied { listen } for pid=17423 comm="syz.3.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1280.594246][ T31] audit: type=1400 audit(2134218527.168:615): avc: denied { nlmsg_write } for pid=17423 comm="syz.3.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1281.147755][ T31] audit: type=1400 audit(2134218527.718:616): avc: denied { ioctl } for pid=17427 comm="syz.3.3434" path="socket:[41918]" dev="sockfs" ino=41918 ioctlcmd=0x54c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1281.157958][ T31] audit: type=1400 audit(2134218527.728:617): avc: denied { shutdown } for pid=17427 comm="syz.3.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1281.383105][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.392685][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.524722][ T31] audit: type=1400 audit(2134218528.098:618): avc: denied { getattr } for pid=17430 comm="syz.3.3435" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1281.558316][ T31] audit: type=1400 audit(2134218528.128:619): avc: denied { ioctl } for pid=17430 comm="syz.3.3435" path="net:[4026532789]" dev="nsfs" ino=4026532789 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1281.582605][ T31] audit: type=1400 audit(2134218528.148:620): avc: denied { setopt } for pid=17436 comm="syz.2.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1285.433180][ T31] audit: type=1400 audit(2134218532.008:621): avc: denied { create } for pid=17446 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1285.505256][ T31] audit: type=1400 audit(2134218532.078:622): avc: denied { ioctl } for pid=17446 comm="syz.3.3441" path="socket:[41936]" dev="sockfs" ino=41936 ioctlcmd=0x720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1285.586288][ T31] audit: type=1400 audit(2134218532.158:623): avc: denied { ioctl } for pid=17446 comm="syz.3.3441" path="socket:[41938]" dev="sockfs" ino=41938 ioctlcmd=0xaf23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1285.978383][T17455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17455 comm=syz.2.3445 [ 1289.934014][ T31] audit: type=1400 audit(2134218536.508:624): avc: denied { create } for pid=17480 comm="syz.2.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1290.344753][ T31] audit: type=1400 audit(2134218536.918:625): avc: denied { append } for pid=17486 comm="syz.2.3457" name="loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="+@.{/,$" [ 1290.349166][ T31] audit: type=1400 audit(2134218536.918:626): avc: denied { open } for pid=17486 comm="syz.2.3457" path="/dev/loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="+@.{/,$" [ 1290.773015][ T31] audit: type=1400 audit(2134218537.348:627): avc: denied { remount } for pid=17484 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1295.883599][ T31] audit: type=1400 audit(2134218542.458:628): avc: denied { setattr } for pid=17519 comm="syz.2.3470" name="NETLINK" dev="sockfs" ino=42613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.824290][ T31] audit: type=1400 audit(2134218546.398:629): avc: denied { connect } for pid=17557 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1301.675344][ T31] audit: type=1400 audit(2134218548.248:630): avc: denied { create } for pid=17583 comm="syz.2.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1301.684201][ T31] audit: type=1400 audit(2134218548.258:631): avc: denied { ioctl } for pid=17583 comm="syz.2.3488" path="socket:[42793]" dev="sockfs" ino=42793 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1301.864973][T17586] FAULT_INJECTION: forcing a failure. [ 1301.864973][T17586] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.866899][T17586] CPU: 0 UID: 0 PID: 17586 Comm: syz.2.3489 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1301.867021][T17586] Hardware name: ARM-Versatile Express [ 1301.867045][T17586] Call trace: [ 1301.867083][T17586] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1301.867195][T17586] r7:854f0000 r6:00000000 r5:60000013 r4:8225ff64 [ 1301.867215][T17586] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1301.867268][T17586] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1301.867325][T17586] r5:854f0000 r4:82917bc0 [ 1301.867341][T17586] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1301.867396][T17586] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1301.867465][T17586] r8:00000000 r7:854f0000 r6:00000cc0 r5:8291b140 r4:830a2cc0 [ 1301.867485][T17586] [<8051f3b4>] (should_failslab) from [<80503a30>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1301.867537][T17586] [<805039e4>] (kmem_cache_alloc_noprof) from [<80555d40>] (alloc_empty_file+0x54/0x13c) [ 1301.867604][T17586] r10:854f0000 r9:00000003 r8:82805cc0 r7:8419ad80 r6:00000000 r5:8291b140 [ 1301.867624][T17586] r4:82465838 [ 1301.867641][T17586] [<80555cec>] (alloc_empty_file) from [<80550050>] (dentry_open+0x28/0x68) [ 1301.867702][T17586] r8:8d1c5240 r7:85071900 r6:854f0000 r5:e06e1e84 r4:00000005 [ 1301.867719][T17586] [<80550028>] (dentry_open) from [<805a3008>] (open_namespace+0x6c/0xbc) [ 1301.867774][T17586] r5:00000000 r4:00000005 [ 1301.867793][T17586] [<805a2f9c>] (open_namespace) from [<805a3074>] (open_related_ns+0x1c/0x20) [ 1301.867852][T17586] r6:8d139d80 r5:00000000 r4:0000894c [ 1301.867871][T17586] [<805a3058>] (open_related_ns) from [<815431b4>] (sock_ioctl+0x37c/0x600) [ 1301.867939][T17586] [<81542e38>] (sock_ioctl) from [<8056ce1c>] (sys_ioctl+0x130/0xba0) [ 1301.868007][T17586] r9:00000003 r8:8d1c5240 r7:00000000 r6:8d1c5241 r5:00000000 r4:0000894c [ 1301.868026][T17586] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1301.868073][T17586] Exception stack(0xe06e1fa8 to 0xe06e1ff0) [ 1301.868112][T17586] 1fa0: 00000000 00000000 00000003 0000894c 00000000 00000000 [ 1301.868147][T17586] 1fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1301.868173][T17586] 1fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1301.868210][T17586] r10:00000036 r9:854f0000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1301.868230][T17586] r4:00000000 [ 1303.721381][ T31] audit: type=1400 audit(2134218550.288:632): avc: denied { nlmsg_read } for pid=17592 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1304.508685][T17603] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1304.509064][T17603] audit: out of memory in audit_log_start [ 1307.245880][T17635] FAULT_INJECTION: forcing a failure. [ 1307.245880][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.246235][T17635] CPU: 1 UID: 0 PID: 17635 Comm: syz.3.3507 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1307.246324][T17635] Hardware name: ARM-Versatile Express [ 1307.246350][T17635] Call trace: [ 1307.246394][T17635] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1307.246527][T17635] r7:00000c40 r6:00000000 r5:60000013 r4:8225ff64 [ 1307.246648][T17635] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1307.246803][T17635] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1307.246910][T17635] r5:838bb000 r4:82917bc0 [ 1307.246949][T17635] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1307.247085][T17635] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1307.247229][T17635] r8:838bb000 r7:00000c40 r6:856e3c28 r5:00001000 r4:830016c0 [ 1307.247307][T17635] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1307.247371][T17635] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1307.247541][T17635] r10:838bb000 r9:8309e400 r8:00000000 r7:834cf550 r6:856e3c28 r5:00001000 [ 1307.247844][T17635] r4:00000000 [ 1307.247942][T17635] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1307.248305][T17635] r10:838bb000 r9:00000000 r8:856e3c00 r7:80045104 r6:00000004 r5:81cd6504 [ 1307.248402][T17635] r4:856e3c28 r3:826c0200 [ 1307.248466][T17635] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1307.248536][T17635] r9:00000003 r8:856e3c00 r7:00000000 r6:00000000 r5:80045104 r4:856e3c00 [ 1307.248572][T17635] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1307.248682][T17635] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1307.248760][T17635] r7:00000000 r6:856e3c01 r5:00000000 r4:80045104 [ 1307.248913][T17635] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1307.249055][T17635] Exception stack(0xe077dfa8 to 0xe077dff0) [ 1307.249333][T17635] dfa0: 00000000 00000000 00000003 80045104 00000000 00000000 [ 1307.249371][T17635] dfc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76b6a0bc [ 1307.249490][T17635] dfe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1307.249533][T17635] r10:00000036 r9:838bb000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1307.249590][T17635] r4:00000000 [ 1307.261860][T17635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1307.669632][T17641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17641 comm=syz.3.3510 [ 1307.869494][ T31] audit: type=1400 audit(2134218554.438:633): avc: denied { write } for pid=17644 comm="syz.2.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1307.874000][ T31] audit: type=1400 audit(2134218554.448:634): avc: denied { ioctl } for pid=17644 comm="syz.2.3513" path="socket:[42888]" dev="sockfs" ino=42888 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1308.193321][T17653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.198702][T17653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.261508][ T31] audit: type=1400 audit(2134218555.828:635): avc: denied { getopt } for pid=17664 comm="syz.3.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1309.815576][ T31] audit: type=1400 audit(2134218556.388:636): avc: denied { relabelto } for pid=17672 comm="syz.2.3523" name="audio7" dev="devtmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:nvram_device_t:s0" [ 1309.832868][ T31] audit: type=1400 audit(2134218556.408:637): avc: denied { associate } for pid=17672 comm="syz.2.3523" name="audio7" dev="devtmpfs" ino=810 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:nvram_device_t:s0" [ 1312.254749][T17697] FAULT_INJECTION: forcing a failure. [ 1312.254749][T17697] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.255133][T17697] CPU: 1 UID: 0 PID: 17697 Comm: syz.3.3533 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1312.255236][T17697] Hardware name: ARM-Versatile Express [ 1312.255262][T17697] Call trace: [ 1312.255305][T17697] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1312.255417][T17697] r7:00000d40 r6:00000000 r5:60000013 r4:8225ff64 [ 1312.255436][T17697] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1312.255523][T17697] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1312.255587][T17697] r5:83ac8000 r4:82917bc0 [ 1312.255623][T17697] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1312.255689][T17697] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1312.255756][T17697] r8:83ac8000 r7:00000d40 r6:856e34a8 r5:00000019 r4:83001240 [ 1312.255772][T17697] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1312.255816][T17697] [<80503d18>] (__kmalloc_noprof) from [<807c3244>] (tomoyo_encode2+0x64/0xf0) [ 1312.255931][T17697] r10:00000fff r9:8309f800 r8:00000000 r7:851f1110 r6:856e34a8 r5:84bcfffd [ 1312.255962][T17697] r4:84bcffef [ 1312.255976][T17697] [<807c31e0>] (tomoyo_encode2) from [<807c32f4>] (tomoyo_encode+0x24/0x30) [ 1312.256034][T17697] r9:8309f800 r8:00000000 r7:851f1110 r6:856e34a8 r5:00001000 r4:84bcfff0 [ 1312.256068][T17697] [<807c32d0>] (tomoyo_encode) from [<807c3380>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1312.256131][T17697] r5:00001000 r4:84bcf000 [ 1312.256190][T17697] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1312.256265][T17697] r10:83ac8000 r9:00000000 r8:856e3480 r7:40086424 r6:00000004 r5:81cd6504 [ 1312.256289][T17697] r4:856e34a8 r3:826c0200 [ 1312.256323][T17697] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1312.256425][T17697] r9:00000005 r8:856e3480 r7:00000000 r6:00000000 r5:40086424 r4:856e3480 [ 1312.256447][T17697] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1312.256506][T17697] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1312.256570][T17697] r7:00000000 r6:856e3481 r5:00000000 r4:40086424 [ 1312.256589][T17697] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1312.256653][T17697] Exception stack(0xe07d9fa8 to 0xe07d9ff0) [ 1312.256697][T17697] 9fa0: 00000000 00000000 00000005 40086424 00000000 00000000 [ 1312.256751][T17697] 9fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76b6a0bc [ 1312.256783][T17697] 9fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1312.256839][T17697] r10:00000036 r9:83ac8000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1312.256864][T17697] r4:00000000 [ 1312.256936][T17697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1314.127418][ T31] audit: type=1400 audit(2134218560.698:638): avc: denied { getopt } for pid=17706 comm="syz.2.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1314.531252][ T31] audit: type=1400 audit(2134218561.098:639): avc: denied { shutdown } for pid=17710 comm="syz.3.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1315.853981][T17718] veth1_macvtap: left promiscuous mode [ 1317.638201][T17733] FAULT_INJECTION: forcing a failure. [ 1317.638201][T17733] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.638574][T17733] CPU: 1 UID: 0 PID: 17733 Comm: syz.2.3548 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1317.638668][T17733] Hardware name: ARM-Versatile Express [ 1317.638689][T17733] Call trace: [ 1317.638723][T17733] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1317.638821][T17733] r7:854f5400 r6:00000000 r5:60000013 r4:8225ff64 [ 1317.638903][T17733] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1317.638964][T17733] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1317.639049][T17733] r5:854f5400 r4:82917bc0 [ 1317.639092][T17733] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1317.639208][T17733] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1317.639298][T17733] r8:00000000 r7:854f5400 r6:00000dc0 r5:854f3000 r4:83001240 [ 1317.639313][T17733] [<8051f3b4>] (should_failslab) from [<80502de4>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1317.639356][T17733] [<80502d98>] (__kmalloc_cache_noprof) from [<80237240>] (pgd_alloc+0x28/0x228) [ 1317.639591][T17733] r10:00000000 r9:84bad380 r8:82821598 r7:84baf0c0 r6:00000000 r5:854f3000 [ 1317.639724][T17733] r4:84baf0c0 [ 1317.639994][T17733] [<80237218>] (pgd_alloc) from [<80250e58>] (mm_init+0x11c/0x2c4) [ 1317.640122][T17733] r9:84bad380 r8:82821598 r7:e07f9ea4 r6:00000000 r5:854f3000 r4:84baf0c0 [ 1317.640198][T17733] [<80250d3c>] (mm_init) from [<80252c54>] (copy_process+0xd54/0x16f8) [ 1317.640355][T17733] r10:e07f9f30 r9:84bad380 r8:84baf0c0 r7:e07f9ea4 r6:854f5400 r5:08000200 [ 1317.640466][T17733] r4:854f3000 [ 1317.640571][T17733] [<80251f00>] (copy_process) from [<8025373c>] (kernel_clone+0xac/0x3ec) [ 1317.640649][T17733] r10:854f5400 r9:854f5400 r8:00000000 r7:00000000 r6:e07f9f30 r5:00000000 [ 1317.640665][T17733] r4:08000200 [ 1317.640678][T17733] [<80253690>] (kernel_clone) from [<80253e30>] (sys_clone+0x78/0x9c) [ 1317.640734][T17733] r10:00000078 r9:854f5400 r8:8020029c r7:00000000 r6:20000140 r5:00000000 [ 1317.640750][T17733] r4:00000000 [ 1317.640762][T17733] [<80253db8>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1317.640804][T17733] Exception stack(0xe07f9fa8 to 0xe07f9ff0) [ 1317.640834][T17733] 9fa0: 20000180 00000000 08000200 00000000 00000000 20000140 [ 1317.640862][T17733] 9fc0: 20000180 00000000 00000000 00000078 002e0000 00000000 00006364 76be30bc [ 1317.640883][T17733] 9fe0: 76be2e98 76be2e88 00019638 00132260 [ 1317.640908][T17733] r7:00000078 r6:00000000 r5:00000000 r4:20000180 [ 1320.114248][ T31] audit: type=1400 audit(2134218566.688:640): avc: denied { create } for pid=17776 comm="syz.2.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1320.577596][ T31] audit: type=1400 audit(2134218567.148:641): avc: denied { ioctl } for pid=17772 comm="syz.3.3565" path="socket:[44242]" dev="sockfs" ino=44242 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1323.153057][ T31] audit: type=1400 audit(2134218569.718:642): avc: denied { ioctl } for pid=17805 comm="syz.2.3570" path="socket:[44269]" dev="sockfs" ino=44269 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1323.809478][T17825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17825 comm=syz.2.3577 [ 1324.614142][ T31] audit: type=1400 audit(2134218571.188:643): avc: denied { sqpoll } for pid=17835 comm="syz.3.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1325.186879][T17842] FAULT_INJECTION: forcing a failure. [ 1325.186879][T17842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.187204][T17842] CPU: 1 UID: 0 PID: 17842 Comm: syz.3.3582 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1325.187297][T17842] Hardware name: ARM-Versatile Express [ 1325.187324][T17842] Call trace: [ 1325.187366][T17842] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1325.187481][T17842] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1325.187500][T17842] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1325.187629][T17842] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1325.187740][T17842] r5:84c7d400 r4:8294f150 [ 1325.187790][T17842] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1325.187893][T17842] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1325.187981][T17842] r8:76b69f30 r7:00000000 r6:00000000 r5:e88edf68 r4:00000002 [ 1325.188200][T17842] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1325.188465][T17842] [<80971e40>] (should_fail_usercopy) from [<8058e644>] (simple_read_from_buffer+0x80/0x13c) [ 1325.188537][T17842] [<8058e5c4>] (simple_read_from_buffer) from [<80608564>] (proc_fail_nth_read+0xb8/0x108) [ 1325.188739][T17842] r10:00000001 r9:806084ac r8:00000002 r7:e88edf68 r6:0000000f r5:76b69f30 [ 1325.188892][T17842] r4:84c7d400 r3:e88ede9f [ 1325.188949][T17842] [<806084ac>] (proc_fail_nth_read) from [<80553528>] (vfs_read+0x98/0x320) [ 1325.189193][T17842] r8:76b69f30 r7:e88edf68 r6:84c7d400 r5:0000000f r4:84c03780 [ 1325.189332][T17842] [<80553490>] (vfs_read) from [<805541d0>] (ksys_read+0x74/0xe8) [ 1325.189470][T17842] r10:00000003 r9:84c7d400 r8:8020029c r7:00000000 r6:00000000 r5:84c03780 [ 1325.189610][T17842] r4:84c03783 [ 1325.189669][T17842] [<8055415c>] (ksys_read) from [<80554254>] (sys_read+0x10/0x14) [ 1325.189785][T17842] r7:00000003 r6:00000003 r5:76b69f30 r4:0000000f [ 1325.189804][T17842] [<80554244>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1325.190022][T17842] Exception stack(0xe88edfa8 to 0xe88edff0) [ 1325.190143][T17842] dfa0: 0000000f 76b69f30 00000003 76b69f30 0000000f 00000000 [ 1325.190229][T17842] dfc0: 0000000f 76b69f30 00000003 00000003 002e0000 00000000 00006364 76b6a0bc [ 1325.190324][T17842] dfe0: 00000158 76b69ed0 000d808c 00130134 [ 1325.544160][ T31] audit: type=1400 audit(2134218572.118:644): avc: denied { getopt } for pid=17843 comm="syz.3.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1326.529933][T17851] FAULT_INJECTION: forcing a failure. [ 1326.529933][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.541350][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.2.3586 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1326.541507][T17851] Hardware name: ARM-Versatile Express [ 1326.541533][T17851] Call trace: [ 1326.541572][T17851] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1326.541700][T17851] r7:00000d40 r6:00000000 r5:60000113 r4:8225ff64 [ 1326.541722][T17851] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1326.541778][T17851] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1326.541833][T17851] r5:855f8000 r4:82917bc0 [ 1326.541847][T17851] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1326.541916][T17851] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1326.541988][T17851] r8:855f8000 r7:00000d40 r6:8d1c51a8 r5:00000019 r4:83001240 [ 1326.542010][T17851] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1326.542063][T17851] [<80503d18>] (__kmalloc_noprof) from [<807c3244>] (tomoyo_encode2+0x64/0xf0) [ 1326.542127][T17851] r10:00000fff r9:8309f800 r8:00000000 r7:850b4440 r6:8d1c51a8 r5:84eefffd [ 1326.542148][T17851] r4:84eeffef [ 1326.542164][T17851] [<807c31e0>] (tomoyo_encode2) from [<807c32f4>] (tomoyo_encode+0x24/0x30) [ 1326.542227][T17851] r9:8309f800 r8:00000000 r7:850b4440 r6:8d1c51a8 r5:00001000 r4:84eefff0 [ 1326.542245][T17851] [<807c32d0>] (tomoyo_encode) from [<807c3380>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1326.542300][T17851] r5:00001000 r4:84eef000 [ 1326.542316][T17851] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1326.542381][T17851] r10:855f8000 r9:00000000 r8:8d1c5180 r7:00005452 r6:00000004 r5:81cd6504 [ 1326.542403][T17851] r4:8d1c51a8 r3:826c0200 [ 1326.542421][T17851] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1326.542483][T17851] r9:00000003 r8:8d1c5180 r7:20000280 r6:20000280 r5:00005452 r4:8d1c5180 [ 1326.542502][T17851] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1326.542593][T17851] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1326.542659][T17851] r7:20000280 r6:8d1c5181 r5:00000000 r4:00005452 [ 1326.542676][T17851] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1326.542720][T17851] Exception stack(0xe88f5fa8 to 0xe88f5ff0) [ 1326.542758][T17851] 5fa0: 00000000 00000000 00000003 00005452 20000280 00000000 [ 1326.542791][T17851] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1326.542819][T17851] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1326.542856][T17851] r10:00000036 r9:855f8000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1326.542878][T17851] r4:00000000 [ 1326.543188][T17851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1327.982475][T17865] FAULT_INJECTION: forcing a failure. [ 1327.982475][T17865] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.982960][T17865] CPU: 1 UID: 0 PID: 17865 Comm: syz.2.3592 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1327.983060][T17865] Hardware name: ARM-Versatile Express [ 1327.983088][T17865] Call trace: [ 1327.983134][T17865] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1327.983291][T17865] r7:00000d40 r6:00000000 r5:60000013 r4:8225ff64 [ 1327.983481][T17865] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1327.983579][T17865] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1327.983732][T17865] r5:84a28c00 r4:82917bc0 [ 1327.983766][T17865] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1327.984299][T17865] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1327.984492][T17865] r8:84a28c00 r7:00000d40 r6:84c039e8 r5:0000001d r4:83001240 [ 1327.984513][T17865] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1327.984597][T17865] [<80503d18>] (__kmalloc_noprof) from [<807c3244>] (tomoyo_encode2+0x64/0xf0) [ 1327.984812][T17865] r10:00000fff r9:8309e400 r8:00000000 r7:835b7cc0 r6:84c039e8 r5:84bceffc [ 1327.984986][T17865] r4:84bcefea [ 1327.985130][T17865] [<807c31e0>] (tomoyo_encode2) from [<807c32f4>] (tomoyo_encode+0x24/0x30) [ 1327.985313][T17865] r9:8309e400 r8:00000000 r7:835b7cc0 r6:84c039e8 r5:00001000 r4:84bcefeb [ 1327.985374][T17865] [<807c32d0>] (tomoyo_encode) from [<807c3380>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1327.985548][T17865] r5:00001000 r4:84bce000 [ 1327.985681][T17865] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1327.985863][T17865] r10:84a28c00 r9:00000000 r8:84c039c0 r7:c25c4110 r6:00000004 r5:81cd6504 [ 1327.985905][T17865] r4:84c039e8 r3:826c0200 [ 1327.986066][T17865] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1327.986226][T17865] r9:00000003 r8:84c039c0 r7:20000300 r6:20000300 r5:c25c4110 r4:84c039c0 [ 1327.986281][T17865] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1327.986470][T17865] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1327.986922][T17865] r7:20000300 r6:84c039c1 r5:00000000 r4:c25c4110 [ 1327.988251][T17865] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1327.988468][T17865] Exception stack(0xea905fa8 to 0xea905ff0) [ 1327.988572][T17865] 5fa0: 00000000 00000000 00000003 c25c4110 20000300 00000000 [ 1327.988618][T17865] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1327.988862][T17865] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1327.988945][T17865] r10:00000036 r9:84a28c00 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1327.988976][T17865] r4:00000000 [ 1328.025432][T17865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1330.915855][ T31] audit: type=1400 audit(2134218577.488:645): avc: denied { execute } for pid=17894 comm="syz.2.3597" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.312791][ T31] audit: type=1400 audit(2134218579.878:646): avc: denied { read } for pid=17919 comm="syz.2.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1333.485583][ T31] audit: type=1400 audit(2134218580.058:647): avc: denied { read } for pid=17922 comm="syz.2.3607" name="loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="+@.{/,$" [ 1333.505052][ T31] audit: type=1400 audit(2134218580.078:648): avc: denied { ioctl } for pid=17922 comm="syz.2.3607" path="/dev/loop-control" dev="devtmpfs" ino=632 ioctlcmd=0x5416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="+@.{/,$" [ 1335.743225][ T31] audit: type=1400 audit(2134218582.318:649): avc: denied { write } for pid=17938 comm="syz.3.3611" name="loop-control" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="+@.{/,$" [ 1336.953022][T17950] FAULT_INJECTION: forcing a failure. [ 1336.953022][T17950] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.953472][T17950] CPU: 1 UID: 0 PID: 17950 Comm: syz.2.3615 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1336.953570][T17950] Hardware name: ARM-Versatile Express [ 1336.953596][T17950] Call trace: [ 1336.953640][T17950] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1336.953830][T17950] r7:00000d40 r6:00000000 r5:60000013 r4:8225ff64 [ 1336.953965][T17950] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1336.954066][T17950] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1336.954161][T17950] r5:84a33000 r4:82917bc0 [ 1336.954216][T17950] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1336.954383][T17950] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1336.954498][T17950] r8:84a33000 r7:00000d40 r6:838e1e68 r5:0000001d r4:83001240 [ 1336.954693][T17950] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1336.954850][T17950] [<80503d18>] (__kmalloc_noprof) from [<807c3244>] (tomoyo_encode2+0x64/0xf0) [ 1336.954934][T17950] r10:00000fff r9:8309e400 r8:00000000 r7:835b7cc0 r6:838e1e68 r5:84bcfffc [ 1336.954958][T17950] r4:84bcffea [ 1336.954977][T17950] [<807c31e0>] (tomoyo_encode2) from [<807c32f4>] (tomoyo_encode+0x24/0x30) [ 1336.955097][T17950] r9:8309e400 r8:00000000 r7:835b7cc0 r6:838e1e68 r5:00001000 r4:84bcffeb [ 1336.955116][T17950] [<807c32d0>] (tomoyo_encode) from [<807c3380>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1336.955176][T17950] r5:00001000 r4:84bcf000 [ 1336.955278][T17950] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1336.955358][T17950] r10:84a33000 r9:00000000 r8:838e1e40 r7:c25c4110 r6:00000004 r5:81cd6504 [ 1336.955421][T17950] r4:838e1e68 r3:826c0200 [ 1336.955519][T17950] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1336.955730][T17950] r9:00000003 r8:838e1e40 r7:00000000 r6:00000000 r5:c25c4110 r4:838e1e40 [ 1336.955796][T17950] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1336.955855][T17950] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1336.956090][T17950] r7:00000000 r6:838e1e41 r5:00000000 r4:c25c4110 [ 1336.956140][T17950] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1336.956311][T17950] Exception stack(0xea965fa8 to 0xea965ff0) [ 1336.956407][T17950] 5fa0: 00000000 00000000 00000003 c25c4110 00000000 00000000 [ 1336.956510][T17950] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1336.956660][T17950] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1336.956702][T17950] r10:00000036 r9:84a33000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1336.956962][T17950] r4:00000000 [ 1336.991879][T17950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1344.875366][ T31] audit: type=1400 audit(2134218591.448:650): avc: denied { name_bind } for pid=17974 comm="syz.3.3624" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1346.441048][T17979] FAULT_INJECTION: forcing a failure. [ 1346.441048][T17979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.442460][T17979] CPU: 0 UID: 0 PID: 17979 Comm: syz.2.3626 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1346.442576][T17979] Hardware name: ARM-Versatile Express [ 1346.442604][T17979] Call trace: [ 1346.442641][T17979] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1346.442790][T17979] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1346.442810][T17979] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1346.442868][T17979] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1346.442922][T17979] r5:83a82400 r4:8294f150 [ 1346.442939][T17979] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1346.442998][T17979] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1346.443064][T17979] r8:76be2f30 r7:00000000 r6:00000000 r5:ea93df68 r4:00000002 [ 1346.443082][T17979] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1346.443133][T17979] [<80971e40>] (should_fail_usercopy) from [<8058e644>] (simple_read_from_buffer+0x80/0x13c) [ 1346.443197][T17979] [<8058e5c4>] (simple_read_from_buffer) from [<80608564>] (proc_fail_nth_read+0xb8/0x108) [ 1346.443270][T17979] r10:00000001 r9:806084ac r8:00000002 r7:ea93df68 r6:0000000f r5:76be2f30 [ 1346.443292][T17979] r4:83a82400 r3:ea93de9f [ 1346.443309][T17979] [<806084ac>] (proc_fail_nth_read) from [<80553528>] (vfs_read+0x98/0x320) [ 1346.443374][T17979] r8:76be2f30 r7:ea93df68 r6:83a82400 r5:0000000f r4:8566d3c0 [ 1346.443391][T17979] [<80553490>] (vfs_read) from [<805541d0>] (ksys_read+0x74/0xe8) [ 1346.443458][T17979] r10:00000003 r9:83a82400 r8:8020029c r7:00000000 r6:00000000 r5:8566d3c0 [ 1346.443507][T17979] r4:8566d3c3 [ 1346.443525][T17979] [<8055415c>] (ksys_read) from [<80554254>] (sys_read+0x10/0x14) [ 1346.443587][T17979] r7:00000003 r6:00000004 r5:76be2f30 r4:0000000f [ 1346.443604][T17979] [<80554244>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1346.443652][T17979] Exception stack(0xea93dfa8 to 0xea93dff0) [ 1346.443690][T17979] dfa0: 0000000f 76be2f30 00000004 76be2f30 0000000f 00000000 [ 1346.443724][T17979] dfc0: 0000000f 76be2f30 00000004 00000003 002e0000 00000000 00006364 76be30bc [ 1346.443750][T17979] dfe0: 00000158 76be2ed0 000d808c 00130134 [ 1348.589686][T17995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17995 comm=syz.3.3631 [ 1356.728744][ T31] audit: type=1400 audit(2134218603.298:651): avc: denied { ioctl } for pid=18035 comm="syz.3.3641" path="socket:[43962]" dev="sockfs" ino=43962 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1356.785789][ T31] audit: type=1400 audit(2134218603.358:652): avc: denied { listen } for pid=18035 comm="syz.3.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1358.325557][ T31] audit: type=1400 audit(2134218604.898:653): avc: denied { mounton } for pid=18044 comm="syz.2.3643" path="/195/file0" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1362.636343][ T31] audit: type=1400 audit(2134218609.208:654): avc: denied { create } for pid=18072 comm="syz.3.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1362.663816][ T31] audit: type=1400 audit(2134218609.238:655): avc: denied { write } for pid=18072 comm="syz.3.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1362.703892][ T31] audit: type=1400 audit(2134218609.268:656): avc: denied { read } for pid=18072 comm="syz.3.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1367.288977][ T31] audit: type=1400 audit(2134218613.858:657): avc: denied { accept } for pid=18152 comm="syz.2.3667" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1370.529251][T18186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18186 comm=syz.2.3676 [ 1370.639992][T18188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18188 comm=syz.2.3677 [ 1371.424249][T18188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18188 comm=syz.2.3677 [ 1377.172422][T18265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=18265 comm=syz.2.3696 [ 1377.877754][T18278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5138 sclass=netlink_tcpdiag_socket pid=18278 comm=syz.3.3702 [ 1378.368454][ T31] audit: type=1400 audit(2134218624.938:658): avc: denied { write } for pid=18280 comm="syz.2.3703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1378.542208][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.544151][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.271104][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.271680][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.643500][ T31] audit: type=1400 audit(2134218626.218:659): avc: denied { read } for pid=18326 comm="syz.2.3716" path="socket:[45358]" dev="sockfs" ino=45358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1379.657007][ T31] audit: type=1400 audit(2134218626.228:660): avc: denied { read } for pid=18326 comm="syz.2.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1380.389212][ T31] audit: type=1400 audit(2134218626.958:661): avc: denied { setopt } for pid=18337 comm="syz.2.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1382.425159][T18377] FAULT_INJECTION: forcing a failure. [ 1382.425159][T18377] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.425494][T18377] CPU: 0 UID: 0 PID: 18377 Comm: syz.3.3729 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1382.425575][T18377] Hardware name: ARM-Versatile Express [ 1382.425594][T18377] Call trace: [ 1382.425628][T18377] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1382.425718][T18377] r7:00000c40 r6:00000000 r5:60000013 r4:8225ff64 [ 1382.425733][T18377] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1382.425774][T18377] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1382.425819][T18377] r5:83f6bc00 r4:82917bc0 [ 1382.425831][T18377] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1382.425878][T18377] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1382.425936][T18377] r8:83f6bc00 r7:00000c40 r6:8566d3e8 r5:00001000 r4:830016c0 [ 1382.425950][T18377] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1382.425988][T18377] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1382.426044][T18377] r10:83f6bc00 r9:8309e400 r8:00000000 r7:834cfb28 r6:8566d3e8 r5:00001000 [ 1382.426061][T18377] r4:00000000 [ 1382.426073][T18377] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1382.426125][T18377] r10:83f6bc00 r9:00000000 r8:8566d3c0 r7:8004500f r6:00000004 r5:81cd6504 [ 1382.426151][T18377] r4:8566d3e8 r3:826c0200 [ 1382.426163][T18377] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1382.426215][T18377] r9:00000003 r8:8566d3c0 r7:20001cc0 r6:20001cc0 r5:8004500f r4:8566d3c0 [ 1382.426229][T18377] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1382.426271][T18377] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1382.426321][T18377] r7:20001cc0 r6:8566d3c1 r5:00000000 r4:8004500f [ 1382.426334][T18377] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1382.426371][T18377] Exception stack(0xeaf35fa8 to 0xeaf35ff0) [ 1382.426401][T18377] 5fa0: 00000000 00000000 00000003 8004500f 20001cc0 00000000 [ 1382.426428][T18377] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76b6a0bc [ 1382.426449][T18377] 5fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1382.426480][T18377] r10:00000036 r9:83f6bc00 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1382.426495][T18377] r4:00000000 [ 1382.431038][T18377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1385.361567][ T31] audit: type=1400 audit(2134218631.928:662): avc: denied { setattr } for pid=18399 comm="syz.3.3735" name="XDP" dev="sockfs" ino=45028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1386.714645][ T31] audit: type=1400 audit(2134218633.288:663): avc: denied { create } for pid=18405 comm="syz.3.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1388.723338][ T31] audit: type=1400 audit(2134218635.298:664): avc: denied { setattr } for pid=18413 comm="syz.3.3741" name="" dev="pipefs" ino=45524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1391.982374][T18419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18419 comm=syz.3.3743 [ 1392.987232][T18428] FAULT_INJECTION: forcing a failure. [ 1392.987232][T18428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.987617][T18428] CPU: 0 UID: 0 PID: 18428 Comm: syz.3.3744 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1392.987712][T18428] Hardware name: ARM-Versatile Express [ 1392.987738][T18428] Call trace: [ 1392.987793][T18428] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1392.987908][T18428] r7:df955e20 r6:00000000 r5:60000013 r4:8225ff64 [ 1392.987927][T18428] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1392.987978][T18428] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1392.988031][T18428] r5:83f6c800 r4:8294f150 [ 1392.988048][T18428] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1392.988104][T18428] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1392.988166][T18428] r8:00004014 r7:df955e20 r6:20000100 r5:00000000 r4:df955f20 [ 1392.988183][T18428] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1392.988315][T18428] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1392.988438][T18428] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1392.988612][T18428] r8:00004014 r7:00000000 r6:85065680 r5:df955f20 r4:df955e64 [ 1392.988655][T18428] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1392.988968][T18428] r10:00000128 r9:83f6c800 r8:8566d3c0 r7:00004014 r6:20000100 r5:8566d3c1 [ 1392.989105][T18428] r4:00000003 [ 1392.989181][T18428] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1392.989291][T18428] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1392.989564][T18428] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1392.989719][T18428] Exception stack(0xdf955fa8 to 0xdf955ff0) [ 1392.989765][T18428] 5fa0: 00000000 00000000 00000003 20000100 00004014 00000000 [ 1392.989966][T18428] 5fc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76b6a0bc [ 1392.990259][T18428] 5fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1395.063506][T18441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18441 comm=syz.2.3748 [ 1397.341650][ T31] audit: type=1400 audit(2134218643.908:665): avc: denied { setopt } for pid=18456 comm="syz.3.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1397.722094][T18459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18459 comm=syz.3.3753 [ 1397.853552][ T31] audit: type=1400 audit(2134218644.428:666): avc: denied { ioctl } for pid=18461 comm="syz.2.3754" path="socket:[45616]" dev="sockfs" ino=45616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1398.856341][T18473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=18473 comm=syz.3.3757 [ 1401.454345][ T31] audit: type=1400 audit(2134218648.028:667): avc: denied { read } for pid=18482 comm="syz.2.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1401.593976][T18485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18485 comm=syz.2.3762 [ 1405.961322][T18512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18512 comm=syz.3.3768 [ 1407.222420][T18530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18530 comm=syz.2.3773 [ 1408.799829][T18552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18552 comm=syz.3.3780 [ 1412.521783][T18580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18580 comm=syz.2.3789 [ 1414.274668][T18594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18594 comm=syz.3.3794 [ 1419.071602][T18608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18608 comm=syz.2.3799 [ 1421.614100][T18618] FAULT_INJECTION: forcing a failure. [ 1421.614100][T18618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.615343][T18618] CPU: 1 UID: 0 PID: 18618 Comm: syz.2.3803 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1421.615434][T18618] Hardware name: ARM-Versatile Express [ 1421.615455][T18618] Call trace: [ 1421.615488][T18618] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1421.615583][T18618] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1421.615598][T18618] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1421.615643][T18618] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1421.615691][T18618] r5:83ae6000 r4:8294f150 [ 1421.615704][T18618] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1421.615753][T18618] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1421.615809][T18618] r8:76be2f30 r7:00000000 r6:00000000 r5:dfa31f68 r4:00000002 [ 1421.615823][T18618] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1421.615869][T18618] [<80971e40>] (should_fail_usercopy) from [<8058e644>] (simple_read_from_buffer+0x80/0x13c) [ 1421.615929][T18618] [<8058e5c4>] (simple_read_from_buffer) from [<80608564>] (proc_fail_nth_read+0xb8/0x108) [ 1421.615994][T18618] r10:00000001 r9:806084ac r8:00000002 r7:dfa31f68 r6:0000000f r5:76be2f30 [ 1421.616014][T18618] r4:83ae6000 r3:dfa31e9f [ 1421.616028][T18618] [<806084ac>] (proc_fail_nth_read) from [<80553528>] (vfs_read+0x98/0x320) [ 1421.616087][T18618] r8:76be2f30 r7:dfa31f68 r6:83ae6000 r5:0000000f r4:8589fd80 [ 1421.616101][T18618] [<80553490>] (vfs_read) from [<805541d0>] (ksys_read+0x74/0xe8) [ 1421.616162][T18618] r10:00000003 r9:83ae6000 r8:8020029c r7:00000000 r6:00000000 r5:8589fd80 [ 1421.616179][T18618] r4:8589fd83 [ 1421.616191][T18618] [<8055415c>] (ksys_read) from [<80554254>] (sys_read+0x10/0x14) [ 1421.616247][T18618] r7:00000003 r6:00000004 r5:76be2f30 r4:0000000f [ 1421.616260][T18618] [<80554244>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1421.616300][T18618] Exception stack(0xdfa31fa8 to 0xdfa31ff0) [ 1421.616332][T18618] 1fa0: 0000000f 76be2f30 00000004 76be2f30 0000000f 00000000 [ 1421.616362][T18618] 1fc0: 0000000f 76be2f30 00000004 00000003 002e0000 00000000 00006364 76be30bc [ 1421.616385][T18618] 1fe0: 00000158 76be2ed0 000d808c 00130134 [ 1425.728530][ T31] audit: type=1400 audit(2134218672.298:668): avc: denied { connect } for pid=18655 comm="syz.2.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1426.114681][T18670] random: crng reseeded on system resumption [ 1427.421930][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1429.139354][ T31] audit: type=1400 audit(2134218675.708:669): avc: denied { bind } for pid=18691 comm="syz.3.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1430.574766][T18708] fuse: Unknown parameter 'èž#ãjqФ6öŸ”åô(h0x0000000000000003' [ 1436.567860][T18750] FAULT_INJECTION: forcing a failure. [ 1436.567860][T18750] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.571225][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.3.3852 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1436.571361][T18750] Hardware name: ARM-Versatile Express [ 1436.571428][T18750] Call trace: [ 1436.571478][T18750] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1436.571594][T18750] r7:00000c40 r6:00000000 r5:60000013 r4:8225ff64 [ 1436.571612][T18750] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1436.571657][T18750] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1436.571703][T18750] r5:83f63000 r4:82917bc0 [ 1436.571717][T18750] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1436.571775][T18750] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1436.571842][T18750] r8:83f63000 r7:00000c40 r6:84e464a8 r5:00001000 r4:830016c0 [ 1436.571858][T18750] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1436.571923][T18750] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1436.571988][T18750] r10:0000006c r9:8309e400 r8:00000000 r7:83437bb0 r6:84e464a8 r5:00001000 [ 1436.572009][T18750] r4:00000000 [ 1436.572026][T18750] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf884>] (tomoyo_path_perm+0xe4/0x200) [ 1436.572085][T18750] r10:0000006c r9:83f63000 r8:00000001 r7:00000000 r6:00000005 r5:00000000 [ 1436.572106][T18750] r4:00000000 r3:00000000 [ 1436.572120][T18750] [<807bf7a0>] (tomoyo_path_perm) from [<807c3b8c>] (tomoyo_inode_getattr+0x1c/0x20) [ 1436.572185][T18750] r8:8020029c r7:84e46480 r6:84e464a8 r5:dfb81eb8 r4:84e464a8 [ 1436.572203][T18750] [<807c3b70>] (tomoyo_inode_getattr) from [<8077c860>] (security_inode_getattr+0x64/0x1ac) [ 1436.572254][T18750] [<8077c7fc>] (security_inode_getattr) from [<8055b9b0>] (vfs_fstat+0x30/0x8c) [ 1436.572312][T18750] r5:dfb81eb8 r4:84e46481 [ 1436.572328][T18750] [<8055b980>] (vfs_fstat) from [<8055ba50>] (__do_sys_newfstat+0x44/0x7c) [ 1436.572387][T18750] r7:0000006c r6:00130210 r5:20000440 r4:00000003 [ 1436.572405][T18750] [<8055ba0c>] (__do_sys_newfstat) from [<8055bf5c>] (sys_newfstat+0x10/0x14) [ 1436.572460][T18750] r5:00000000 r4:00000000 [ 1436.572477][T18750] [<8055bf4c>] (sys_newfstat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1436.572525][T18750] Exception stack(0xdfb81fa8 to 0xdfb81ff0) [ 1436.572563][T18750] 1fa0: 00000000 00000000 00000003 20000440 00000000 00000000 [ 1436.572600][T18750] 1fc0: 00000000 00000000 00130210 0000006c 002e0000 00000000 00006364 76b6a0bc [ 1436.572629][T18750] 1fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1436.594338][T18750] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1440.105069][ T31] audit: type=1400 audit(2134218686.678:670): avc: denied { bind } for pid=18767 comm="syz.2.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1444.729184][T18803] FAULT_INJECTION: forcing a failure. [ 1444.729184][T18803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.729580][T18803] CPU: 0 UID: 0 PID: 18803 Comm: syz.2.3872 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1444.729675][T18803] Hardware name: ARM-Versatile Express [ 1444.729700][T18803] Call trace: [ 1444.729741][T18803] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1444.729849][T18803] r7:dfbb5e20 r6:00000000 r5:60000013 r4:8225ff64 [ 1444.729870][T18803] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1444.730016][T18803] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1444.730361][T18803] r5:854f3000 r4:8294f150 [ 1444.730410][T18803] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1444.730621][T18803] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1444.730872][T18803] r8:00000000 r7:dfbb5e20 r6:20000340 r5:00000000 r4:dfbb5f20 [ 1444.731142][T18803] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1444.731221][T18803] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1444.731287][T18803] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1444.731352][T18803] r8:00000000 r7:00000000 r6:85064780 r5:dfbb5f20 r4:dfbb5e64 [ 1444.731371][T18803] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1444.731440][T18803] r10:00000128 r9:854f3000 r8:856e3600 r7:00000000 r6:20000340 r5:856e3601 [ 1444.731460][T18803] r4:00000003 [ 1444.731476][T18803] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1444.731540][T18803] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1444.731557][T18803] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1444.731602][T18803] Exception stack(0xdfbb5fa8 to 0xdfbb5ff0) [ 1444.731638][T18803] 5fa0: 00000000 00000000 00000003 20000340 00000000 00000000 [ 1444.731670][T18803] 5fc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76be30bc [ 1444.731697][T18803] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1449.962772][ T31] audit: type=1400 audit(2134218696.538:671): avc: denied { bind } for pid=18845 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1449.966793][ T31] audit: type=1400 audit(2134218696.538:672): avc: denied { listen } for pid=18845 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1449.989551][ T31] audit: type=1400 audit(2134218696.558:673): avc: denied { connect } for pid=18845 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1450.001883][ T31] audit: type=1400 audit(2134218696.578:674): avc: denied { write } for pid=18845 comm="syz.3.3888" path="socket:[46724]" dev="sockfs" ino=46724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1450.009313][ T31] audit: type=1400 audit(2134218696.578:675): avc: denied { accept } for pid=18845 comm="syz.3.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1454.824751][T18875] FAULT_INJECTION: forcing a failure. [ 1454.824751][T18875] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.826313][T18875] CPU: 0 UID: 0 PID: 18875 Comm: syz.2.3899 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1454.826392][T18875] Hardware name: ARM-Versatile Express [ 1454.826406][T18875] Call trace: [ 1454.826430][T18875] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1454.826497][T18875] r7:838bd400 r6:00000000 r5:60000013 r4:8225ff64 [ 1454.826509][T18875] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1454.826592][T18875] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1454.826666][T18875] r5:838bd400 r4:82917bc0 [ 1454.826682][T18875] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1454.826714][T18875] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1454.826751][T18875] r8:00000000 r7:838bd400 r6:00000cc0 r5:8291b140 r4:830a2cc0 [ 1454.826761][T18875] [<8051f3b4>] (should_failslab) from [<80503a30>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1454.826787][T18875] [<805039e4>] (kmem_cache_alloc_noprof) from [<80555d40>] (alloc_empty_file+0x54/0x13c) [ 1454.826823][T18875] r10:829ef430 r9:8309f800 r8:82805cc0 r7:85857000 r6:00000802 r5:8291b140 [ 1454.826835][T18875] r4:82465838 [ 1454.826843][T18875] [<80555cec>] (alloc_empty_file) from [<80555ec8>] (alloc_file_pseudo+0xa0/0x104) [ 1454.826914][T18875] r8:830b1610 r7:838bd400 r6:81e54c40 r5:85065700 r4:00000802 [ 1454.826933][T18875] [<80555e28>] (alloc_file_pseudo) from [<815406bc>] (sock_alloc_file+0x48/0xc4) [ 1454.827007][T18875] r10:81e78d44 r9:856e36c0 r8:00000000 r7:00000000 r6:85065700 r5:85065680 [ 1454.827029][T18875] r4:85064780 [ 1454.827045][T18875] [<81540674>] (sock_alloc_file) from [<81543bf4>] (do_accept+0xa0/0x174) [ 1454.827099][T18875] r6:dfc01f5c r5:85065680 r4:85064780 [ 1454.827116][T18875] [<81543b54>] (do_accept) from [<81543d50>] (__sys_accept4+0x88/0xf4) [ 1454.827197][T18875] r10:0000016e r9:856e36c0 r8:00000000 r7:00000000 r6:00000006 r5:00080800 [ 1454.827219][T18875] r4:856e36c1 [ 1454.827237][T18875] [<81543cc8>] (__sys_accept4) from [<81543dcc>] (sys_accept4+0x10/0x14) [ 1454.827302][T18875] r9:838bd400 r8:8020029c r7:0000016e r6:00130210 r5:00000000 r4:00000000 [ 1454.827322][T18875] [<81543dbc>] (sys_accept4) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1454.827373][T18875] Exception stack(0xdfc01fa8 to 0xdfc01ff0) [ 1454.827410][T18875] 1fa0: 00000000 00000000 00000003 00000000 00000000 00080800 [ 1454.827441][T18875] 1fc0: 00000000 00000000 00130210 0000016e 002e0000 00000000 00006364 76be30bc [ 1454.827469][T18875] 1fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1454.947748][T18871] FAULT_INJECTION: forcing a failure. [ 1454.947748][T18871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.948074][T18871] CPU: 1 UID: 0 PID: 18871 Comm: syz.3.3897 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1454.948167][T18871] Hardware name: ARM-Versatile Express [ 1454.948193][T18871] Call trace: [ 1454.948237][T18871] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1454.948339][T18871] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1454.948443][T18871] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1454.948634][T18871] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1454.949055][T18871] r5:838b8000 r4:8294f150 [ 1454.949153][T18871] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1454.949264][T18871] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1454.949505][T18871] r8:dfc1deb8 r7:00000000 r6:00000001 r5:76b48f30 r4:00000001 [ 1454.949526][T18871] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1454.949720][T18871] [<80971e40>] (should_fail_usercopy) from [<808be41c>] (kstrtouint_from_user+0x54/0x13c) [ 1454.949830][T18871] [<808be3c8>] (kstrtouint_from_user) from [<80609b2c>] (proc_fail_nth_write+0x40/0xf0) [ 1454.950090][T18871] r8:dfc1df68 r7:838b8000 r6:00000001 r5:838e1300 r4:00000001 [ 1454.950193][T18871] [<80609aec>] (proc_fail_nth_write) from [<80553dbc>] (vfs_write+0xac/0x44c) [ 1454.950311][T18871] r5:838e1300 r4:80609aec [ 1454.950331][T18871] [<80553d10>] (vfs_write) from [<805542cc>] (ksys_write+0x74/0xe8) [ 1454.950561][T18871] r10:00000004 r9:838b8000 r8:8020029c r7:00000000 r6:00000002 r5:838e1300 [ 1454.950808][T18871] r4:838e1303 [ 1454.950929][T18871] [<80554258>] (ksys_write) from [<80554350>] (sys_write+0x10/0x14) [ 1454.951006][T18871] r7:00000004 r6:00000005 r5:76b48f30 r4:00000001 [ 1454.951024][T18871] [<80554340>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1454.951076][T18871] Exception stack(0xdfc1dfa8 to 0xdfc1dff0) [ 1454.951139][T18871] dfa0: 00000001 76b48f30 00000005 76b48f30 00000001 00000000 [ 1454.951184][T18871] dfc0: 00000001 76b48f30 00000005 00000004 002e0000 00000000 00006364 76b490bc [ 1454.951214][T18871] dfe0: 00000158 76b48ed0 000d808c 001301fc [ 1455.035478][T18878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18878 comm=syz.2.3900 [ 1455.426393][ T31] audit: type=1400 audit(2134218701.998:676): avc: denied { write } for pid=18885 comm="syz.2.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1455.683108][ T31] audit: type=1400 audit(2134218702.258:677): avc: denied { getopt } for pid=18887 comm="syz.2.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1459.514866][T18916] block nbd3: NBD_DISCONNECT [ 1472.120867][T18971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.123868][T18971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.549484][T18992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18992 comm=syz.3.3940 [ 1474.572783][T18992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18992 comm=syz.3.3940 [ 1475.597316][ T31] audit: type=1400 audit(2134218722.168:678): avc: denied { unmount } for pid=16624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1480.148521][ T31] audit: type=1400 audit(2134218726.718:679): avc: denied { connect } for pid=19058 comm="syz.2.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1487.021069][ T31] audit: type=1400 audit(2134218733.588:680): avc: denied { setopt } for pid=19111 comm="syz.2.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1488.865716][T19142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19142 comm=syz.2.3989 [ 1490.367389][T19153] FAULT_INJECTION: forcing a failure. [ 1490.367389][T19153] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.383203][T19153] CPU: 1 UID: 0 PID: 19153 Comm: syz.3.3992 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1490.383367][T19153] Hardware name: ARM-Versatile Express [ 1490.383397][T19153] Call trace: [ 1490.383442][T19153] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1490.383561][T19153] r7:00000c40 r6:00000000 r5:60000113 r4:8225ff64 [ 1490.383582][T19153] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1490.383637][T19153] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1490.383694][T19153] r5:854f0000 r4:82917bc0 [ 1490.383710][T19153] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1490.383772][T19153] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1490.383844][T19153] r8:854f0000 r7:00000c40 r6:856e39e8 r5:00001000 r4:830016c0 [ 1490.383863][T19153] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1490.383916][T19153] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1490.383997][T19153] r10:856e39c0 r9:8309d800 r8:00000000 r7:851f2000 r6:856e39e8 r5:00001000 [ 1490.384019][T19153] r4:00000000 [ 1490.384036][T19153] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf730>] (tomoyo_check_open_permission+0x150/0x1c0) [ 1490.384106][T19153] r10:856e39c0 r9:00000004 r8:84bd6200 r7:00000000 r6:00000000 r5:856e39e8 [ 1490.384130][T19153] r4:00000001 r3:00000001 [ 1490.384148][T19153] [<807bf5e0>] (tomoyo_check_open_permission) from [<807c41e4>] (tomoyo_file_open+0x34/0x38) [ 1490.384216][T19153] r9:00000000 r8:856e39e8 r7:00000000 r6:850f81a8 r5:81c20f80 r4:856e39c0 [ 1490.384237][T19153] [<807c41b0>] (tomoyo_file_open) from [<807806b0>] (security_file_open+0x54/0x194) [ 1490.384299][T19153] r5:81c20f80 r4:856e39c0 [ 1490.384316][T19153] [<8078065c>] (security_file_open) from [<8054e028>] (do_dentry_open+0xe4/0x4d0) [ 1490.384379][T19153] r5:81c20f80 r4:856e39c0 [ 1490.384396][T19153] [<8054df44>] (do_dentry_open) from [<8054ff6c>] (vfs_open+0x2c/0xe8) [ 1490.384463][T19153] r9:00000000 r8:dfb15e58 r7:00000000 r6:856e39e8 r5:8291ed6c r4:856e39c0 [ 1490.384483][T19153] [<8054ff40>] (vfs_open) from [<8056898c>] (path_openat+0x30c/0x1150) [ 1490.384543][T19153] r6:dfb15f20 r5:8291ed6c r4:00000000 [ 1490.384562][T19153] [<80568680>] (path_openat) from [<8056987c>] (do_filp_open+0xac/0x148) [ 1490.384628][T19153] r10:00000142 r9:83807000 r8:00000001 r7:dfb15e58 r6:dfb15f20 r5:854f0000 [ 1490.384650][T19153] r4:ffffff9c [ 1490.384666][T19153] [<805697d0>] (do_filp_open) from [<805504cc>] (do_sys_openat2+0x90/0xe0) [ 1490.384735][T19153] r9:854f0000 r8:8020029c r7:ffffff9c r6:dfb15f58 r5:83807000 r4:00000004 [ 1490.384754][T19153] [<8055043c>] (do_sys_openat2) from [<805508f4>] (sys_openat+0x98/0xd4) [ 1490.384817][T19153] r7:00000142 r6:00000000 r5:001864ec r4:ffffff9c [ 1490.384835][T19153] [<8055085c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1490.384886][T19153] Exception stack(0xdfb15fa8 to 0xdfb15ff0) [ 1490.384933][T19153] 5fa0: 00000000 001864ec ffffff9c 001864ec 00000000 00000000 [ 1490.384970][T19153] 5fc0: 00000000 001864ec 00000000 00000142 00000000 00000000 00006364 76b6a0bc [ 1490.385000][T19153] 5fe0: 00000000 76b69e68 000d808c 00130058 [ 1490.385027][T19153] r5:001864ec r4:00000000 [ 1490.408534][T19153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1493.194779][ T31] audit: type=1400 audit(2134218739.768:681): avc: denied { getopt } for pid=19180 comm="syz.3.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1494.974990][T19196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1013 sclass=netlink_tcpdiag_socket pid=19196 comm=syz.3.4009 [ 1495.612497][T19204] input: syz1 as /devices/virtual/input/input26 [ 1495.953421][T19216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=19216 comm=syz.2.4014 [ 1497.458220][T19204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.608125][T19236] FAULT_INJECTION: forcing a failure. [ 1499.608125][T19236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.611336][T19236] CPU: 0 UID: 0 PID: 19236 Comm: syz.3.4020 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1499.611477][T19236] Hardware name: ARM-Versatile Express [ 1499.611504][T19236] Call trace: [ 1499.611547][T19236] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1499.611664][T19236] r7:dfb69e20 r6:00000000 r5:60000113 r4:8225ff64 [ 1499.611683][T19236] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1499.611732][T19236] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1499.611785][T19236] r5:854f3000 r4:8294f150 [ 1499.611800][T19236] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1499.611861][T19236] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1499.611930][T19236] r8:00000040 r7:dfb69e20 r6:200003c0 r5:00000000 r4:dfb69f20 [ 1499.611949][T19236] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1499.612003][T19236] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1499.612065][T19236] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1499.612134][T19236] r8:00000040 r7:00000000 r6:8506e000 r5:dfb69f20 r4:dfb69e64 [ 1499.612157][T19236] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1499.612226][T19236] r10:00000128 r9:854f3000 r8:84e46780 r7:00000040 r6:200003c0 r5:84e46781 [ 1499.612246][T19236] r4:00000004 [ 1499.612262][T19236] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1499.612329][T19236] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1499.612348][T19236] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1499.612397][T19236] Exception stack(0xdfb69fa8 to 0xdfb69ff0) [ 1499.612433][T19236] 9fa0: 00000000 00000000 00000004 200003c0 00000040 00000000 [ 1499.612465][T19236] 9fc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76b6a0bc [ 1499.612494][T19236] 9fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1504.042638][T19279] FAULT_INJECTION: forcing a failure. [ 1504.042638][T19279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.043544][T19279] CPU: 0 UID: 0 PID: 19279 Comm: syz.3.4035 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1504.043607][T19279] Hardware name: ARM-Versatile Express [ 1504.043620][T19279] Call trace: [ 1504.043639][T19279] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1504.043695][T19279] r7:dfbc9e20 r6:00000000 r5:60000013 r4:8225ff64 [ 1504.043704][T19279] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1504.043729][T19279] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1504.043756][T19279] r5:838bb000 r4:8294f150 [ 1504.043763][T19279] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1504.043792][T19279] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1504.043823][T19279] r8:04009804 r7:dfbc9e20 r6:20000180 r5:00000000 r4:dfbc9f20 [ 1504.043831][T19279] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1504.043856][T19279] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1504.043886][T19279] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1504.043918][T19279] r8:04009804 r7:00000000 r6:8506f900 r5:dfbc9f20 r4:dfbc9e64 [ 1504.043926][T19279] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1504.043961][T19279] r10:00000128 r9:838bb000 r8:84e460c0 r7:04009804 r6:20000180 r5:84e460c1 [ 1504.043970][T19279] r4:00000003 [ 1504.043977][T19279] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1504.044010][T19279] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1504.044017][T19279] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1504.044041][T19279] Exception stack(0xdfbc9fa8 to 0xdfbc9ff0) [ 1504.044058][T19279] 9fa0: 00000000 00000000 00000003 20000180 04009804 00000000 [ 1504.044075][T19279] 9fc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76b490bc [ 1504.044087][T19279] 9fe0: 76b48ec0 76b48eb0 0001945c 00132260 [ 1505.765525][ T31] audit: type=1400 audit(2134218752.338:682): avc: denied { setopt } for pid=19281 comm="syz.3.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1506.198986][T19293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19293 comm=syz.2.4041 [ 1506.209490][T19293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19293 comm=syz.2.4041 [ 1512.414150][T19337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19337 comm=syz.3.4057 [ 1512.439307][T19337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19337 comm=syz.3.4057 [ 1514.041093][ T31] audit: type=1400 audit(2134218760.608:683): avc: denied { setopt } for pid=19334 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1514.041483][ T31] audit: type=1400 audit(2134218760.608:684): avc: denied { bind } for pid=19334 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1515.966499][ T31] audit: type=1400 audit(2134218762.538:685): avc: denied { setattr } for pid=19363 comm="syz.2.4067" name="CAN_J1939" dev="sockfs" ino=49174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1516.632639][T19370] 8021q: VLANs not supported on lo [ 1517.176958][ T31] audit: type=1400 audit(2134218763.748:686): avc: denied { setattr } for pid=19373 comm="syz.3.4070" name="NETLINK" dev="sockfs" ino=48644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1519.022759][T19395] FAULT_INJECTION: forcing a failure. [ 1519.022759][T19395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.023155][T19395] CPU: 0 UID: 0 PID: 19395 Comm: syz.2.4076 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1519.023257][T19395] Hardware name: ARM-Versatile Express [ 1519.023285][T19395] Call trace: [ 1519.023336][T19395] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1519.023435][T19395] r7:dfca1e20 r6:00000000 r5:60000013 r4:8225ff64 [ 1519.023454][T19395] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1519.023503][T19395] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1519.023581][T19395] r5:84b58c00 r4:8294f150 [ 1519.024030][T19395] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1519.024301][T19395] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1519.024685][T19395] r8:00008011 r7:dfca1e20 r6:20000380 r5:00000000 r4:dfca1f20 [ 1519.025170][T19395] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1519.025626][T19395] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1519.025743][T19395] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1519.025838][T19395] r8:00008011 r7:00000000 r6:85065680 r5:dfca1f20 r4:dfca1e64 [ 1519.025989][T19395] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1519.026157][T19395] r10:00000128 r9:84b58c00 r8:856e3600 r7:00008011 r6:20000380 r5:856e3601 [ 1519.026187][T19395] r4:00000004 [ 1519.026203][T19395] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1519.026303][T19395] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1519.026455][T19395] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1519.026617][T19395] Exception stack(0xdfca1fa8 to 0xdfca1ff0) [ 1519.026792][T19395] 1fa0: 00000000 00000000 00000004 20000380 00008011 00000000 [ 1519.026867][T19395] 1fc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76be30bc [ 1519.026938][T19395] 1fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1519.151522][T19397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19397 comm=syz.2.4077 [ 1519.166254][T19398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19398 comm=syz.2.4077 [ 1520.315736][T19404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19404 comm=syz.3.4080 [ 1520.323447][T19404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19404 comm=syz.3.4080 [ 1522.109018][T19420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19420 comm=syz.2.4087 [ 1522.124296][T19420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19420 comm=syz.2.4087 [ 1524.275345][ T31] audit: type=1400 audit(2134218770.848:687): avc: denied { read } for pid=19431 comm="syz.3.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1524.323169][ T31] audit: type=1400 audit(2134218770.898:688): avc: denied { append } for pid=19431 comm="syz.3.4093" name="pfkey" dev="proc" ino=4026533000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1524.354277][ T31] audit: type=1400 audit(2134218770.928:689): avc: denied { getopt } for pid=19431 comm="syz.3.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1525.055993][ T31] audit: type=1400 audit(2134218771.628:690): avc: denied { nlmsg_read } for pid=19439 comm="syz.3.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1525.189930][ T31] audit: type=1400 audit(2134218771.758:691): avc: denied { setopt } for pid=19441 comm="syz.2.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1526.174165][ T31] audit: type=1400 audit(2134218772.748:692): avc: denied { read } for pid=19455 comm="syz.3.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1531.161614][T19489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.163762][T19489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.656694][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.661581][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.916267][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.917177][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.926766][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.927638][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.120025][T19523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.123507][T19523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.765282][T19537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19537 comm=syz.3.4126 [ 1533.768137][T19537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19537 comm=syz.3.4126 [ 1534.566445][T19549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19549 comm=syz.2.4132 [ 1534.585471][T19549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19549 comm=syz.2.4132 [ 1538.152036][T19578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19578 comm=syz.3.4142 [ 1543.453159][T19622] FAULT_INJECTION: forcing a failure. [ 1543.453159][T19622] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.453509][T19622] CPU: 0 UID: 0 PID: 19622 Comm: syz.2.4155 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1543.453603][T19622] Hardware name: ARM-Versatile Express [ 1543.453627][T19622] Call trace: [ 1543.453666][T19622] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1543.453777][T19622] r7:00000c40 r6:00000000 r5:60000013 r4:8225ff64 [ 1543.453796][T19622] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1543.453846][T19622] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1543.454002][T19622] r5:83f63c00 r4:82917bc0 [ 1543.454085][T19622] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1543.454254][T19622] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1543.454417][T19622] r8:83f63c00 r7:00000c40 r6:8689d028 r5:00001000 r4:830016c0 [ 1543.454623][T19622] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1543.454734][T19622] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1543.454956][T19622] r10:83f63c00 r9:8309e400 r8:00000000 r7:834cf990 r6:8689d028 r5:00001000 [ 1543.454995][T19622] r4:00000000 [ 1543.455013][T19622] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1543.455102][T19622] r10:83f63c00 r9:00000000 r8:8689d000 r7:00005451 r6:00000004 r5:81cd6504 [ 1543.455236][T19622] r4:8689d028 r3:826c0200 [ 1543.455397][T19622] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1543.455523][T19622] r9:00000003 r8:8689d000 r7:00000000 r6:00000000 r5:00005451 r4:8689d000 [ 1543.455579][T19622] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1543.455738][T19622] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1543.455809][T19622] r7:00000000 r6:8689d001 r5:00000000 r4:00005451 [ 1543.455880][T19622] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1543.456085][T19622] Exception stack(0xdfd75fa8 to 0xdfd75ff0) [ 1543.456196][T19622] 5fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 1543.456312][T19622] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1543.456370][T19622] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1543.456509][T19622] r10:00000036 r9:83f63c00 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1543.456634][T19622] r4:00000000 [ 1543.497452][T19622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1543.636119][T19624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19624 comm=syz.2.4157 [ 1546.601107][T19647] FAULT_INJECTION: forcing a failure. [ 1546.601107][T19647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.601465][T19647] CPU: 0 UID: 0 PID: 19647 Comm: syz.2.4166 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1546.601563][T19647] Hardware name: ARM-Versatile Express [ 1546.601594][T19647] Call trace: [ 1546.601644][T19647] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1546.601752][T19647] r7:dfd5de20 r6:00000000 r5:60000013 r4:8225ff64 [ 1546.601772][T19647] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1546.601827][T19647] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1546.601886][T19647] r5:84c79800 r4:8294f150 [ 1546.601903][T19647] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1546.601978][T19647] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1546.602045][T19647] r8:00000000 r7:dfd5de20 r6:20000140 r5:00000000 r4:dfd5df20 [ 1546.602126][T19647] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1546.602236][T19647] [<80971e40>] (should_fail_usercopy) from [<81544914>] (copy_msghdr_from_user+0x50/0x130) [ 1546.602368][T19647] [<815448c4>] (copy_msghdr_from_user) from [<81544a6c>] (___sys_sendmsg+0x78/0xd0) [ 1546.602459][T19647] r8:00000000 r7:00000000 r6:85064780 r5:dfd5df20 r4:dfd5de64 [ 1546.602619][T19647] [<815449f4>] (___sys_sendmsg) from [<81544f28>] (__sys_sendmsg+0x8c/0xe0) [ 1546.602736][T19647] r10:00000128 r9:84c79800 r8:8689dd80 r7:00000000 r6:20000140 r5:8689dd81 [ 1546.602832][T19647] r4:00000003 [ 1546.602885][T19647] [<81544e9c>] (__sys_sendmsg) from [<81544f90>] (sys_sendmsg+0x14/0x18) [ 1546.602999][T19647] r8:8020029c r7:00000128 r6:00130210 r5:00000000 r4:00000000 [ 1546.603097][T19647] [<81544f7c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1546.603287][T19647] Exception stack(0xdfd5dfa8 to 0xdfd5dff0) [ 1546.603431][T19647] dfa0: 00000000 00000000 00000003 20000140 00000000 00000000 [ 1546.603544][T19647] dfc0: 00000000 00000000 00130210 00000128 002e0000 00000000 00006364 76be30bc [ 1546.603677][T19647] dfe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1549.323004][ T31] audit: type=1400 audit(2134218795.898:693): avc: denied { mount } for pid=19675 comm="syz.2.4175" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1567.836389][ T31] audit: type=1400 audit(2134218814.408:694): avc: denied { map } for pid=19776 comm="syz.3.4211" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1567.839286][ T31] audit: type=1400 audit(2134218814.408:695): avc: denied { execute } for pid=19776 comm="syz.3.4211" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1568.057848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.144554][ T31] audit: type=1400 audit(2134218814.718:696): avc: denied { read } for pid=19776 comm="syz.3.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1569.995003][T19794] could not allocate digest TFM handle sha1_mb [ 1571.522320][ T31] audit: type=1400 audit(2134218818.098:697): avc: denied { listen } for pid=19810 comm="syz.2.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1571.828511][ T31] audit: type=1400 audit(2134218818.398:698): avc: denied { mount } for pid=19814 comm="syz.2.4227" name="/" dev="ramfs" ino=50410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1571.845234][T19815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19815 comm=syz.2.4227 [ 1582.401198][ T31] audit: type=1400 audit(2134218828.948:699): avc: denied { setopt } for pid=19853 comm="syz.3.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1584.808337][T19857] FAULT_INJECTION: forcing a failure. [ 1584.808337][T19857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.811781][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.2.4244 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1584.811912][T19857] Hardware name: ARM-Versatile Express [ 1584.811941][T19857] Call trace: [ 1584.811985][T19857] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1584.812102][T19857] r7:00006364 r6:00000000 r5:60000013 r4:8225ff64 [ 1584.812123][T19857] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1584.812193][T19857] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1584.812252][T19857] r5:84c79800 r4:8294f150 [ 1584.812269][T19857] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1584.812333][T19857] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1584.812400][T19857] r8:00000000 r7:00006364 r6:76be30bc r5:84c7a030 r4:76be2bd8 [ 1584.812420][T19857] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1584.812472][T19857] [<80971e40>] (should_fail_usercopy) from [<8022b624>] (setup_sigframe+0xe4/0x1c4) [ 1584.812532][T19857] [<8022b540>] (setup_sigframe) from [<8022bacc>] (do_work_pending+0x2f4/0x4f8) [ 1584.812601][T19857] r10:00000004 r9:b5403587 r8:00000000 r7:84c7a030 r6:76be2bd8 r5:dfa75fb0 [ 1584.812625][T19857] r4:84c79800 [ 1584.812642][T19857] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1584.812692][T19857] Exception stack(0xdfa75fb0 to 0xdfa75ff8) [ 1584.812728][T19857] 5fa0: 00000001 76be2f20 00000001 00000000 [ 1584.812764][T19857] 5fc0: 00000001 76be2f20 00000005 00000004 002e0000 00000000 00006364 76be30bc [ 1584.812796][T19857] 5fe0: 00000158 76be2ed0 000d808c 001301fc 40000010 00000005 [ 1584.812835][T19857] r10:00000004 r9:84c79800 r8:8020029c r7:00000004 r6:00000005 r5:76be2f20 [ 1584.812857][T19857] r4:00000001 [ 1594.953413][T19930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19930 comm=syz.2.4270 [ 1595.683202][ T31] audit: type=1400 audit(2134218842.258:700): avc: denied { unmount } for pid=16055 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1597.113707][T19943] FAULT_INJECTION: forcing a failure. [ 1597.113707][T19943] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.114309][T19943] CPU: 0 UID: 0 PID: 19943 Comm: syz.2.4277 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1597.114425][T19943] Hardware name: ARM-Versatile Express [ 1597.114451][T19943] Call trace: [ 1597.114502][T19943] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1597.114663][T19943] r7:00000d40 r6:00000000 r5:60000013 r4:8225ff64 [ 1597.114693][T19943] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1597.114800][T19943] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1597.114884][T19943] r5:84c7a400 r4:82917bc0 [ 1597.114911][T19943] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1597.115063][T19943] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1597.115325][T19943] r8:84c7a400 r7:00000d40 r6:85908628 r5:00000022 r4:83001240 [ 1597.115500][T19943] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1597.115606][T19943] [<80503d18>] (__kmalloc_noprof) from [<807c3244>] (tomoyo_encode2+0x64/0xf0) [ 1597.115711][T19943] r10:00000fff r9:8309e400 r8:00000000 r7:834cf550 r6:85908628 r5:84eeeffc [ 1597.115835][T19943] r4:84eeefe5 [ 1597.115964][T19943] [<807c31e0>] (tomoyo_encode2) from [<807c32f4>] (tomoyo_encode+0x24/0x30) [ 1597.116136][T19943] r9:8309e400 r8:00000000 r7:834cf550 r6:85908628 r5:00001000 r4:84eeefe6 [ 1597.116186][T19943] [<807c32d0>] (tomoyo_encode) from [<807c3380>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1597.116247][T19943] r5:00001000 r4:84eee000 [ 1597.116265][T19943] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1597.116422][T19943] r10:84c7a400 r9:00000000 r8:85908600 r7:80045104 r6:00000004 r5:81cd6504 [ 1597.116571][T19943] r4:85908628 r3:826c0200 [ 1597.116711][T19943] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1597.116787][T19943] r9:00000003 r8:85908600 r7:00000000 r6:00000000 r5:80045104 r4:85908600 [ 1597.116966][T19943] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1597.117148][T19943] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1597.117245][T19943] r7:00000000 r6:85908601 r5:00000000 r4:80045104 [ 1597.117404][T19943] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1597.117503][T19943] Exception stack(0xdfb1dfa8 to 0xdfb1dff0) [ 1597.117722][T19943] dfa0: 00000000 00000000 00000003 80045104 00000000 00000000 [ 1597.117764][T19943] dfc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1597.117922][T19943] dfe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1597.118030][T19943] r10:00000036 r9:84c7a400 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1597.118060][T19943] r4:00000000 [ 1597.179338][T19943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1597.956846][ T31] audit: type=1400 audit(2134218844.528:701): avc: denied { setattr } for pid=19947 comm="syz.2.4280" name="KCM" dev="sockfs" ino=51548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1598.984850][ T31] audit: type=1400 audit(2134218845.558:702): avc: denied { accept } for pid=19953 comm="syz.2.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1603.526723][T20002] FAULT_INJECTION: forcing a failure. [ 1603.526723][T20002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.527118][T20002] CPU: 0 UID: 0 PID: 20002 Comm: syz.2.4294 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1603.527176][T20002] Hardware name: ARM-Versatile Express [ 1603.527189][T20002] Call trace: [ 1603.527218][T20002] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1603.527285][T20002] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1603.527307][T20002] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1603.527335][T20002] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1603.527362][T20002] r5:84c78000 r4:8294f150 [ 1603.527369][T20002] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1603.527399][T20002] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1603.527430][T20002] r8:76be2f30 r7:00000000 r6:00000000 r5:dfbe1f68 r4:00000002 [ 1603.527437][T20002] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1603.527463][T20002] [<80971e40>] (should_fail_usercopy) from [<8058e644>] (simple_read_from_buffer+0x80/0x13c) [ 1603.527493][T20002] [<8058e5c4>] (simple_read_from_buffer) from [<80608564>] (proc_fail_nth_read+0xb8/0x108) [ 1603.527530][T20002] r10:00000001 r9:806084ac r8:00000002 r7:dfbe1f68 r6:0000000f r5:76be2f30 [ 1603.527540][T20002] r4:84c78000 r3:dfbe1e9f [ 1603.527548][T20002] [<806084ac>] (proc_fail_nth_read) from [<80553528>] (vfs_read+0x98/0x320) [ 1603.527581][T20002] r8:76be2f30 r7:dfbe1f68 r6:84c78000 r5:0000000f r4:8689d540 [ 1603.527588][T20002] [<80553490>] (vfs_read) from [<805541d0>] (ksys_read+0x74/0xe8) [ 1603.527621][T20002] r10:00000003 r9:84c78000 r8:8020029c r7:00000000 r6:00000000 r5:8689d540 [ 1603.527631][T20002] r4:8689d543 [ 1603.527638][T20002] [<8055415c>] (ksys_read) from [<80554254>] (sys_read+0x10/0x14) [ 1603.527668][T20002] r7:00000003 r6:00000006 r5:76be2f30 r4:0000000f [ 1603.527675][T20002] [<80554244>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1603.527700][T20002] Exception stack(0xdfbe1fa8 to 0xdfbe1ff0) [ 1603.527719][T20002] 1fa0: 0000000f 76be2f30 00000006 76be2f30 0000000f 00000000 [ 1603.527831][T20002] 1fc0: 0000000f 76be2f30 00000006 00000003 002e0000 00000000 00006364 76be30bc [ 1603.527942][T20002] 1fe0: 00000158 76be2ed0 000d808c 00130134 [ 1604.482146][T20018] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20018 comm=syz.3.4300 [ 1604.676118][ T31] audit: type=1400 audit(2134218851.248:703): avc: denied { validate_trans } for pid=20017 comm="syz.3.4300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1605.017414][T20024] FAULT_INJECTION: forcing a failure. [ 1605.017414][T20024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.041699][T20024] CPU: 1 UID: 0 PID: 20024 Comm: syz.3.4303 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1605.041911][T20024] Hardware name: ARM-Versatile Express [ 1605.041966][T20024] Call trace: [ 1605.042018][T20024] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1605.042143][T20024] r7:00000000 r6:00000000 r5:60000113 r4:8225ff64 [ 1605.042165][T20024] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1605.042225][T20024] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1605.042284][T20024] r5:84c7bc00 r4:8294f150 [ 1605.042302][T20024] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1605.042368][T20024] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1605.042434][T20024] r8:dfb31eb8 r7:00000000 r6:00000001 r5:76b69f30 r4:00000001 [ 1605.042454][T20024] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1605.042594][T20024] [<80971e40>] (should_fail_usercopy) from [<808be41c>] (kstrtouint_from_user+0x54/0x13c) [ 1605.042658][T20024] [<808be3c8>] (kstrtouint_from_user) from [<80609b2c>] (proc_fail_nth_write+0x40/0xf0) [ 1605.042740][T20024] r8:dfb31f68 r7:84c7bc00 r6:00000001 r5:856e3e40 r4:00000001 [ 1605.042765][T20024] [<80609aec>] (proc_fail_nth_write) from [<80553dbc>] (vfs_write+0xac/0x44c) [ 1605.042828][T20024] r5:856e3e40 r4:80609aec [ 1605.042848][T20024] [<80553d10>] (vfs_write) from [<805542cc>] (ksys_write+0x74/0xe8) [ 1605.042920][T20024] r10:00000004 r9:84c7bc00 r8:8020029c r7:00000000 r6:00000002 r5:856e3e40 [ 1605.042942][T20024] r4:856e3e43 [ 1605.042967][T20024] [<80554258>] (ksys_write) from [<80554350>] (sys_write+0x10/0x14) [ 1605.043032][T20024] r7:00000004 r6:00000004 r5:76b69f30 r4:00000001 [ 1605.043051][T20024] [<80554340>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1605.043122][T20024] Exception stack(0xdfb31fa8 to 0xdfb31ff0) [ 1605.043165][T20024] 1fa0: 00000001 76b69f30 00000004 76b69f30 00000001 00000000 [ 1605.043205][T20024] 1fc0: 00000001 76b69f30 00000004 00000004 002e0000 00000000 00006364 76b6a0bc [ 1605.043234][T20024] 1fe0: 00000158 76b69ed0 000d808c 001301fc [ 1607.854094][T20045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1541 sclass=netlink_audit_socket pid=20045 comm=syz.3.4308 [ 1607.914673][T20048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20048 comm=syz.2.4309 [ 1610.098437][T20066] FAULT_INJECTION: forcing a failure. [ 1610.098437][T20066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.100035][T20066] CPU: 1 UID: 0 PID: 20066 Comm: syz.2.4318 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1610.100152][T20066] Hardware name: ARM-Versatile Express [ 1610.100174][T20066] Call trace: [ 1610.100210][T20066] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1610.100302][T20066] r7:00000000 r6:00000000 r5:60000013 r4:8225ff64 [ 1610.100319][T20066] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1610.100423][T20066] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1610.100479][T20066] r5:83210000 r4:8294f150 [ 1610.100494][T20066] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1610.100550][T20066] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1610.100608][T20066] r8:dfc01eb8 r7:00000000 r6:00000001 r5:76be2f30 r4:00000001 [ 1610.100624][T20066] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1610.100672][T20066] [<80971e40>] (should_fail_usercopy) from [<808be41c>] (kstrtouint_from_user+0x54/0x13c) [ 1610.100735][T20066] [<808be3c8>] (kstrtouint_from_user) from [<80609b2c>] (proc_fail_nth_write+0x40/0xf0) [ 1610.100795][T20066] r8:dfc01f68 r7:83210000 r6:00000001 r5:8566d180 r4:00000001 [ 1610.100875][T20066] [<80609aec>] (proc_fail_nth_write) from [<80553dbc>] (vfs_write+0xac/0x44c) [ 1610.100943][T20066] r5:8566d180 r4:80609aec [ 1610.100959][T20066] [<80553d10>] (vfs_write) from [<805542cc>] (ksys_write+0x74/0xe8) [ 1610.101028][T20066] r10:00000004 r9:83210000 r8:8020029c r7:00000000 r6:00000002 r5:8566d180 [ 1610.101047][T20066] r4:8566d183 [ 1610.101061][T20066] [<80554258>] (ksys_write) from [<80554350>] (sys_write+0x10/0x14) [ 1610.101117][T20066] r7:00000004 r6:00000004 r5:76be2f30 r4:00000001 [ 1610.101131][T20066] [<80554340>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1610.101176][T20066] Exception stack(0xdfc01fa8 to 0xdfc01ff0) [ 1610.101212][T20066] 1fa0: 00000001 76be2f30 00000004 76be2f30 00000001 00000000 [ 1610.101243][T20066] 1fc0: 00000001 76be2f30 00000004 00000004 002e0000 00000000 00006364 76be30bc [ 1610.101268][T20066] 1fe0: 00000158 76be2ed0 000d808c 001301fc [ 1612.614144][T20088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=20088 comm=syz.2.4324 [ 1612.865498][T20092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20092 comm=syz.3.4326 [ 1613.773630][T20103] FAULT_INJECTION: forcing a failure. [ 1613.773630][T20103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.801987][T20103] CPU: 0 UID: 0 PID: 20103 Comm: syz.2.4330 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1613.802075][T20103] Hardware name: ARM-Versatile Express [ 1613.802088][T20103] Call trace: [ 1613.802108][T20103] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1613.802174][T20103] r7:00000000 r6:00000000 r5:60000113 r4:8225ff64 [ 1613.802184][T20103] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1613.802210][T20103] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1613.802237][T20103] r5:84c78000 r4:8294f150 [ 1613.802244][T20103] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1613.802272][T20103] [<80971c00>] (should_fail_ex) from [<80971e3c>] (should_fail+0x14/0x18) [ 1613.802302][T20103] r8:76be2f30 r7:00000000 r6:00000000 r5:dfc8df68 r4:00000002 [ 1613.802310][T20103] [<80971e28>] (should_fail) from [<80971e5c>] (should_fail_usercopy+0x1c/0x20) [ 1613.802335][T20103] [<80971e40>] (should_fail_usercopy) from [<8058e644>] (simple_read_from_buffer+0x80/0x13c) [ 1613.802365][T20103] [<8058e5c4>] (simple_read_from_buffer) from [<80608564>] (proc_fail_nth_read+0xb8/0x108) [ 1613.802399][T20103] r10:00000001 r9:806084ac r8:00000002 r7:dfc8df68 r6:0000000f r5:76be2f30 [ 1613.802410][T20103] r4:84c78000 r3:dfc8de9f [ 1613.802417][T20103] [<806084ac>] (proc_fail_nth_read) from [<80553528>] (vfs_read+0x98/0x320) [ 1613.802448][T20103] r8:76be2f30 r7:dfc8df68 r6:84c78000 r5:0000000f r4:8566d780 [ 1613.802456][T20103] [<80553490>] (vfs_read) from [<805541d0>] (ksys_read+0x74/0xe8) [ 1613.802489][T20103] r10:00000003 r9:84c78000 r8:8020029c r7:00000000 r6:00000000 r5:8566d780 [ 1613.802498][T20103] r4:8566d783 [ 1613.802505][T20103] [<8055415c>] (ksys_read) from [<80554254>] (sys_read+0x10/0x14) [ 1613.802567][T20103] r7:00000003 r6:00000004 r5:76be2f30 r4:0000000f [ 1613.802575][T20103] [<80554244>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1613.802599][T20103] Exception stack(0xdfc8dfa8 to 0xdfc8dff0) [ 1613.802617][T20103] dfa0: 0000000f 76be2f30 00000004 76be2f30 0000000f 00000000 [ 1613.802633][T20103] dfc0: 0000000f 76be2f30 00000004 00000003 002e0000 00000000 00006364 76be30bc [ 1613.802645][T20103] dfe0: 00000158 76be2ed0 000d808c 00130134 [ 1613.920270][T20106] FAULT_INJECTION: forcing a failure. [ 1613.920270][T20106] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.931048][T20106] CPU: 0 UID: 0 PID: 20106 Comm: syz.3.4331 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1613.931193][T20106] Hardware name: ARM-Versatile Express [ 1613.931218][T20106] Call trace: [ 1613.931253][T20106] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1613.931348][T20106] r7:00000c40 r6:00000000 r5:60000113 r4:8225ff64 [ 1613.931364][T20106] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1613.931411][T20106] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1613.931458][T20106] r5:838be000 r4:82917bc0 [ 1613.931471][T20106] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1613.931521][T20106] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1613.931581][T20106] r8:838be000 r7:00000c40 r6:8689d328 r5:00001000 r4:830016c0 [ 1613.931596][T20106] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1613.931637][T20106] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1613.931697][T20106] r10:838be000 r9:8309e400 r8:00000000 r7:83438330 r6:8689d328 r5:00001000 [ 1613.931714][T20106] r4:00000000 [ 1613.931728][T20106] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1613.931785][T20106] r10:838be000 r9:00000000 r8:8689d300 r7:c004510e r6:00000004 r5:81cd6504 [ 1613.931807][T20106] r4:8689d328 r3:826c0200 [ 1613.931821][T20106] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1613.931876][T20106] r9:00000004 r8:8689d300 r7:00000000 r6:00000000 r5:c004510e r4:8689d300 [ 1613.931892][T20106] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1613.931937][T20106] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1613.931995][T20106] r7:00000000 r6:8689d301 r5:00000000 r4:c004510e [ 1613.932010][T20106] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1613.932051][T20106] Exception stack(0xdfc89fa8 to 0xdfc89ff0) [ 1613.932083][T20106] 9fa0: 00000000 00000000 00000004 c004510e 00000000 00000000 [ 1613.932112][T20106] 9fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76b6a0bc [ 1613.932135][T20106] 9fe0: 76b69ec0 76b69eb0 0001945c 00132260 [ 1613.932167][T20106] r10:00000036 r9:838be000 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1613.932184][T20106] r4:00000000 [ 1613.958934][T20106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1614.273830][ T31] audit: type=1400 audit(2134218860.848:704): avc: denied { mount } for pid=20108 comm="syz.3.4333" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1614.283822][ T31] audit: type=1400 audit(2134218860.858:705): avc: denied { remount } for pid=20108 comm="syz.3.4333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1614.291228][T20110] ======================================================= [ 1614.291228][T20110] WARNING: The mand mount option has been deprecated and [ 1614.291228][T20110] and is ignored by this kernel. Remove the mand [ 1614.291228][T20110] option from the mount to silence this warning. [ 1614.291228][T20110] ======================================================= [ 1614.331179][ T31] audit: type=1400 audit(2134218860.878:706): avc: denied { create } for pid=20109 comm="syz.2.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1614.647815][ T31] audit: type=1400 audit(2134218861.218:707): avc: denied { unmount } for pid=16055 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1621.524386][ T31] audit: type=1400 audit(2134218868.098:708): avc: denied { map } for pid=20157 comm="syz.2.4347" path="socket:[51924]" dev="sockfs" ino=51924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1622.051016][T20160] FAULT_INJECTION: forcing a failure. [ 1622.051016][T20160] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.051484][T20160] CPU: 1 UID: 0 PID: 20160 Comm: syz.2.4348 Not tainted 6.16.0-syzkaller #0 PREEMPT [ 1622.051649][T20160] Hardware name: ARM-Versatile Express [ 1622.051684][T20160] Call trace: [ 1622.051749][T20160] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 1622.051858][T20160] r7:00000c40 r6:00000000 r5:60000013 r4:8225ff64 [ 1622.051879][T20160] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 1622.051935][T20160] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 1622.052007][T20160] r5:84a28c00 r4:82917bc0 [ 1622.052026][T20160] [<8021fb9c>] (dump_stack) from [<80971dc4>] (should_fail_ex+0x1c4/0x228) [ 1622.052098][T20160] [<80971c00>] (should_fail_ex) from [<8051f420>] (should_failslab+0x6c/0x94) [ 1622.052170][T20160] r8:84a28c00 r7:00000c40 r6:8596c9e8 r5:00001000 r4:830016c0 [ 1622.052191][T20160] [<8051f3b4>] (should_failslab) from [<80503db4>] (__kmalloc_noprof+0x9c/0x458) [ 1622.052243][T20160] [<80503d18>] (__kmalloc_noprof) from [<807c333c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1622.052312][T20160] r10:84a28c00 r9:8309e400 r8:00000000 r7:83408bb0 r6:8596c9e8 r5:00001000 [ 1622.052334][T20160] r4:00000000 [ 1622.052352][T20160] [<807c3300>] (tomoyo_realpath_from_path) from [<807bf480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1622.052419][T20160] r10:84a28c00 r9:00000000 r8:8596c9c0 r7:00005451 r6:00000004 r5:81cd6504 [ 1622.052441][T20160] r4:8596c9e8 r3:826c0200 [ 1622.052459][T20160] [<807bf3b4>] (tomoyo_path_number_perm) from [<807c3d60>] (tomoyo_file_ioctl+0x1c/0x20) [ 1622.052525][T20160] r9:00000003 r8:8596c9c0 r7:00000000 r6:00000000 r5:00005451 r4:8596c9c0 [ 1622.052545][T20160] [<807c3d44>] (tomoyo_file_ioctl) from [<807705b4>] (security_file_ioctl+0x64/0x1e4) [ 1622.052598][T20160] [<80770550>] (security_file_ioctl) from [<8056cd38>] (sys_ioctl+0x4c/0xba0) [ 1622.052660][T20160] r7:00000000 r6:8596c9c1 r5:00000000 r4:00005451 [ 1622.052678][T20160] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1622.052747][T20160] Exception stack(0xdfd25fa8 to 0xdfd25ff0) [ 1622.052791][T20160] 5fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 1622.052830][T20160] 5fc0: 00000000 00000000 00130210 00000036 002e0000 00000000 00006364 76be30bc [ 1622.052862][T20160] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 1622.052898][T20160] r10:00000036 r9:84a28c00 r8:8020029c r7:00000036 r6:00130210 r5:00000000 [ 1622.052919][T20160] r4:00000000 [ 1622.081043][T20160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1622.252011][T20162] fuse: Bad value for 'fd' [ 1624.829305][T20170] fuse: Bad value for 'fd' [ 1626.770416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.021212][ T31] audit: type=1400 audit(2134218873.578:709): avc: denied { write } for pid=20173 comm="syz.2.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1631.161290][ T31] audit: type=1400 audit(2134218877.688:710): avc: denied { getopt } for pid=20189 comm="syz.3.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1638.045338][ T31] audit: type=1400 audit(2134218884.618:711): avc: denied { nlmsg_write } for pid=20226 comm="syz.2.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1638.046327][T20227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1638.251133][T20229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.255829][T20229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.281837][T20229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.286948][T20229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.706394][ T31] audit: type=1400 audit(2134218892.278:712): avc: denied { mount } for pid=20241 comm="syz.3.4370" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1645.715541][ T31] audit: type=1400 audit(2134218892.288:713): avc: denied { search } for pid=20241 comm="syz.3.4370" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1645.754853][ T31] audit: type=1400 audit(2134218892.328:714): avc: denied { search } for pid=20241 comm="syz.3.4370" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1645.755289][ T31] audit: type=1400 audit(2134218892.328:715): avc: denied { read open } for pid=20241 comm="syz.3.4370" path="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1650.235016][T20253] netlink: 'syz.3.4374': attribute type 4 has an invalid length. [ 1650.322309][T20253] netlink: 'syz.3.4374': attribute type 4 has an invalid length. [ 1685.959560][T20267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.973809][T20267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.104763][T20267] hsr_slave_0: entered promiscuous mode [ 1687.107211][T20267] hsr_slave_1: entered promiscuous mode [ 1687.108313][T20267] debugfs: 'hsr0' already exists in 'hsr' [ 1687.108540][T20267] Cannot create hsr debugfs directory [ 1687.399403][T20267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1687.406185][T20267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1687.415632][T20267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1687.419802][T20267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1688.235056][T20267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.612284][T20267] veth0_vlan: entered promiscuous mode [ 1692.639009][T20267] veth1_vlan: entered promiscuous mode [ 1692.687765][T20267] veth0_macvtap: entered promiscuous mode [ 1692.702672][T20267] veth1_macvtap: entered promiscuous mode [ 1692.736011][ T8891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.736382][ T8891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.736487][ T8891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.736572][ T8891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.082907][ T31] audit: type=1400 audit(2134218961.658:716): avc: denied { bind } for pid=20640 comm="syz.4.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1727.107402][T20665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4392'. [ 1727.634967][ T31] audit: type=1400 audit(2134218974.208:717): avc: denied { create } for pid=20667 comm="syz.3.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1728.131143][T20671] input: syz1 as /devices/virtual/input/input28 [ 1735.127127][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.129211][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.568808][ T31] audit: type=1400 audit(2134219012.118:718): avc: denied { bind } for pid=20719 comm="syz.4.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1765.569077][ T31] audit: type=1400 audit(2134219012.128:719): avc: denied { read } for pid=20719 comm="syz.4.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1766.071378][ T31] audit: type=1400 audit(2134219012.628:720): avc: denied { write } for pid=20719 comm="syz.4.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1776.267509][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4410'. [ 1776.268292][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4410'. [ 1776.515092][ T31] audit: type=1400 audit(2134219023.088:721): avc: denied { bind } for pid=20726 comm="syz.3.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1777.511763][T20733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.514157][T20733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.454831][ T31] audit: type=1400 audit(2134219025.028:722): avc: denied { setopt } for pid=20740 comm="syz.4.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1778.680475][ T31] audit: type=1400 audit(2134219025.248:723): avc: denied { bind } for pid=20744 comm="syz.4.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1801.457153][T20771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.459464][T20771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.086848][T20779] netlink: 'syz.4.4426': attribute type 4 has an invalid length. [ 1815.973896][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4427'. [ 1823.632900][ T31] audit: type=1400 audit(2134219070.208:724): avc: denied { cmd } for pid=20809 comm="syz.4.4436" path="socket:[52751]" dev="sockfs" ino=52751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1824.327162][ T31] audit: type=1400 audit(2134219070.898:725): avc: denied { read } for pid=20813 comm="syz.4.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1845.653324][ T31] audit: type=1326 audit(2134219092.228:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.4.4446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132260 code=0x7ffc0000 [ 1845.657404][ T31] audit: type=1326 audit(2134219092.228:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.4.4446" exe="/syz-executor" sig=0 arch=40000028 syscall=432 compat=0 ip=0x132260 code=0x7ffc0000 [ 1845.676402][ T31] audit: type=1326 audit(2134219092.248:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.4.4446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132260 code=0x7ffc0000 [ 1845.683238][ T31] audit: type=1326 audit(2134219092.258:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.4.4446" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132260 code=0x7ffc0000 [ 1850.896915][ T31] audit: type=1107 audit(2134219097.468:730): pid=20839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 1859.774929][ T31] audit: type=1400 audit(2134219106.348:731): avc: denied { name_bind } for pid=20843 comm="syz.3.4448" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1865.006638][ T31] audit: type=1400 audit(2134219111.578:732): avc: denied { setopt } for pid=20858 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1866.609248][T20863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.615178][T20863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.344212][T20909] comedi: valid board names for 8255 driver are: [ 1906.351280][T20909] 8255 [ 1906.352118][T20909] comedi: valid board names for vmk80xx driver are: [ 1906.353470][T20909] vmk80xx [ 1906.354119][T20909] comedi: valid board names for usbduxsigma driver are: [ 1906.354998][T20909] usbduxsigma [ 1906.355671][T20909] comedi: valid board names for usbduxfast driver are: [ 1906.356554][T20909] usbduxfast [ 1906.357153][T20909] comedi: valid board names for usbdux driver are: [ 1906.358014][T20909] usbdux [ 1906.358702][T20909] comedi: valid board names for ni6501 driver are: [ 1906.359475][T20909] ni6501 [ 1906.360088][T20909] comedi: valid board names for dt9812 driver are: [ 1906.361484][T20909] dt9812 [ 1906.362034][T20909] comedi: valid board names for ni_labpc_cs driver are: [ 1906.363081][T20909] ni_labpc_cs [ 1906.364399][T20909] comedi: valid board names for ni_daq_700 driver are: [ 1906.365250][T20909] ni_daq_700 [ 1906.365828][T20909] comedi: valid board names for labpc_pci driver are: [ 1906.366590][T20909] labpc_pci [ 1906.367164][T20909] comedi: valid board names for adl_pci9118 driver are: [ 1906.368006][T20909] pci9118dg [ 1906.368619][T20909] pci9118hg [ 1906.369175][T20909] pci9118hr [ 1906.369746][T20909] comedi: valid board names for 8255_pci driver are: [ 1906.371083][T20909] 8255_pci [ 1906.371953][T20909] comedi: valid board names for comedi_parport driver are: [ 1906.373490][T20909] comedi_parport [ 1906.375135][T20909] comedi: valid board names for comedi_test driver are: [ 1906.376558][T20909] comedi_test [ 1906.377434][T20909] comedi: valid board names for comedi_bond driver are: [ 1906.378826][T20909] comedi_bond [ 1907.685337][ T31] audit: type=1400 audit(2134219154.258:733): avc: denied { create } for pid=20914 comm="syz.3.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1943.589935][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.591001][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.293617][ T31] audit: type=1400 audit(2134219193.858:734): avc: denied { block_suspend } for pid=21038 comm="syz.3.4486" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1966.193368][T21063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.195076][T21063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.779524][ T31] audit: type=1400 audit(2134219235.348:735): avc: denied { watch } for pid=21096 comm="syz.4.4500" path="/86" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2004.075225][ C0] vkms_vblank_simulate: vblank timer overrun [ 2069.702510][ T32] INFO: task syz.2.4368:20229 blocked for more than 430 seconds. [ 2069.702969][ T32] Not tainted 6.16.0-syzkaller #0 [ 2069.703294][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2069.703508][ T32] task:syz.2.4368 state:D stack:0 pid:20229 tgid:20228 ppid:16624 task_flags:0x400040 flags:0x00000005 [ 2069.703736][ T32] Call trace: [ 2069.703817][ T32] [<81a3a4bc>] (__schedule) from [<80297314>] (rt_mutex_schedule+0x20/0x38) [ 2069.703966][ T32] r10:855fbc00 r9:00000002 r8:00000000 r7:df9e5d98 r6:df9e5da0 r5:838bd400 [ 2069.703991][ T32] r4:838bd400 [ 2069.704006][ T32] [<802972f4>] (rt_mutex_schedule) from [<81a4158c>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4) [ 2069.704065][ T32] r5:838bd400 r4:8325d854 [ 2069.704081][ T32] [<81a4154c>] (rt_mutex_slowlock_block.constprop.0) from [<81a428e4>] (rt_mutex_slowlock.constprop.0+0xd4/0x364) [ 2069.704463][ T32] r10:60000013 r9:df9e5da0 r8:00000002 r7:df9e5d98 r6:8325d854 r5:00000000 [ 2069.704508][ T32] r4:838bd400 [ 2069.704527][ T32] [<81a42810>] (rt_mutex_slowlock.constprop.0) from [<81a42c58>] (rt_mutex_lock+0x44/0x48) [ 2069.704593][ T32] r10:00000022 r9:000000da r8:00000000 r7:000000da r6:00000000 r5:00000001 [ 2069.704611][ T32] r4:8325d840 [ 2069.704627][ T32] [<81a42c14>] (rt_mutex_lock) from [<810ca608>] (i2c_adapter_lock_bus+0x14/0x18) [ 2069.704683][ T32] [<810ca5f4>] (i2c_adapter_lock_bus) from [<810cfe18>] (i2c_smbus_xfer+0xa4/0x12c) [ 2069.704730][ T32] [<810cfd74>] (i2c_smbus_xfer) from [<810d1c94>] (i2cdev_ioctl_smbus+0xf4/0x384) [ 2069.704785][ T32] r8:00000022 r7:20000040 r6:00000001 r5:86cb3800 r4:00000008 [ 2069.704801][ T32] [<810d1ba0>] (i2cdev_ioctl_smbus) from [<810d222c>] (i2cdev_ioctl+0x308/0x404) [ 2069.704862][ T32] r10:838bd400 r9:00000004 r8:8594cb40 r7:200000c0 r6:b5403587 r5:86cb3800 [ 2069.704880][ T32] r4:200000c0 [ 2069.704893][ T32] [<810d1f24>] (i2cdev_ioctl) from [<8056ce1c>] (sys_ioctl+0x130/0xba0) [ 2069.704963][ T32] r6:8594cb41 r5:00000000 r4:00000720 [ 2069.704981][ T32] [<8056ccec>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2069.705025][ T32] Exception stack(0xdf9e5fa8 to 0xdf9e5ff0) [ 2069.705061][ T32] 5fa0: 00000000 00000000 00000004 00000720 200000c0 00000000 [ 2069.705093][ T32] 5fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76be30bc [ 2069.705117][ T32] 5fe0: 76be2ec0 76be2eb0 0001945c 00132260 [ 2069.705147][ T32] r10:00000036 r9:838bd400 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 2069.705167][ T32] r4:00000000 [ 2069.705962][ T32] NMI backtrace for cpu 1 [ 2069.706087][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT [ 2069.706138][ T32] Hardware name: ARM-Versatile Express [ 2069.706155][ T32] Call trace: [ 2069.706435][ T32] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2069.706507][ T32] r7:00000000 r6:00000113 r5:60000193 r4:8225ff64 [ 2069.706551][ T32] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2069.706604][ T32] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2069.706653][ T32] r5:00000001 r4:00000001 [ 2069.706665][ T32] [<8021fb9c>] (dump_stack) from [<81a240d0>] (nmi_cpu_backtrace+0x160/0x17c) [ 2069.706715][ T32] [<81a23f70>] (nmi_cpu_backtrace) from [<81a2421c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 2069.706769][ T32] r7:00000001 r6:8280c690 r5:8281ac94 r4:ffffffff [ 2069.706786][ T32] [<81a240ec>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 2069.707778][ T32] r9:82abd564 r8:82804d40 r7:0002b341 r6:00007f0b r5:8281b248 r4:8383020c [ 2069.707825][ T32] [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da10>] (watchdog+0x4d4/0x81c) [ 2069.707886][ T32] [<8037d53c>] (watchdog) from [<80281fec>] (kthread+0x12c/0x280) [ 2069.707961][ T32] r10:00000000 r9:00000000 r8:8037d53c r7:8334c700 r6:8334c700 r5:833d8000 [ 2069.707982][ T32] r4:00000001 [ 2069.707996][ T32] [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2069.708037][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2069.708063][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2069.708090][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2069.708116][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2069.708149][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 [ 2069.708167][ T32] r4:8334bb00 [ 2069.708334][ T32] Sending NMI from CPU 1 to CPUs 0: [ 2069.709351][ C0] NMI backtrace for cpu 0 [ 2069.709625][ C0] CPU: 0 UID: 0 PID: 2931 Comm: klogd Not tainted 6.16.0-syzkaller #0 PREEMPT [ 2069.709692][ C0] Hardware name: ARM-Versatile Express [ 2069.709750][ C0] PC is at vector_swi+0x6c/0x80 [ 2069.709896][ C0] LR is at vector_swi+0x5c/0x80 [ 2069.709946][ C0] pc : [<802001ec>] lr : [<802001dc>] psr: 600f0013 [ 2069.709995][ C0] sp : ec285fb0 ip : ec285fb0 fp : 00000000 [ 2069.710031][ C0] r10: 30c5387d r9 : 76d79590 r8 : b5403587 [ 2069.710070][ C0] r7 : 00000121 r6 : 7edf7858 r5 : 00000000 r4 : 00000000 [ 2069.710108][ C0] r3 : 00004000 r2 : 00000070 r1 : 7edf7858 r0 : 00000003 [ 2069.710223][ C0] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 2069.710295][ C0] Control: 30c5387d Table: 848715c0 DAC: fffffffd [ 2069.710356][ C0] Call trace: no frame pointer [ 2069.722762][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2069.744667][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT [ 2069.745359][ T32] Hardware name: ARM-Versatile Express [ 2069.745702][ T32] Call trace: [ 2069.746035][ T32] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2069.746540][ T32] r7:00000000 r6:8281f77c r5:00000000 r4:8225ff64 [ 2069.746903][ T32] [<80201b08>] (show_stack) from [<8021fb74>] (dump_stack_lvl+0x54/0x7c) [ 2069.747331][ T32] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2069.747768][ T32] r5:00000000 r4:82a77d18 [ 2069.747965][ T32] [<8021fb9c>] (dump_stack) from [<80202624>] (vpanic+0x10c/0x30c) [ 2069.748342][ T32] [<80202518>] (vpanic) from [<80202858>] (trace_suspend_resume+0x0/0xd8) [ 2069.748790][ T32] r7:0002b341 [ 2069.748962][ T32] [<80202824>] (panic) from [<8037d870>] (watchdog+0x334/0x81c) [ 2069.749367][ T32] r3:00000001 r2:00000000 r1:00000000 r0:82260c50 [ 2069.749591][ T32] [<8037d53c>] (watchdog) from [<80281fec>] (kthread+0x12c/0x280) [ 2069.750000][ T32] r10:00000000 r9:00000000 r8:8037d53c r7:8334c700 r6:8334c700 r5:833d8000 [ 2069.750359][ T32] r4:00000001 [ 2069.750773][ T32] [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2069.751232][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2069.751513][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2069.752020][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2069.752402][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2069.752719][ T32] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 [ 2069.753044][ T32] r4:8334bb00 [ 2069.755223][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:05:48 Registers: info registers vcpu 0 CPU#0 R00=76f4e43c R01=8d1f607e R02=00000000 R03=b5403587 R04=0000029c R05=82a7a4d0 R06=76f4e3dc R07=00000163 R08=00000000 R09=0000007e R10=82a7a270 R11=ec285efc R12=ec285e38 R13=ec285da8 R14=00000000 R15=802e5640 PSR=60000113 -ZC- A S svc32 s00=0c000000 s01=00000000 d00=000000000c000000 s02=40000000 s03=00024ae9 d01=00024ae940000000 s04=fc000000 s05=ffffffff d02=fffffffffc000000 s06=fc000000 s07=ffffffff d03=fffffffffc000000 s08=ff6e89bc s09=ffc0ba29 d04=ffc0ba29ff6e89bc s10=ffffffff s11=ffffffff d05=ffffffffffffffff s12=ff2777db s13=ffa441fc d06=ffa441fcff2777db s14=ffffffff s15=ffffffff d07=ffffffffffffffff s16=fe000000 s17=fdbf82c3 d08=fdbf82c3fe000000 s18=26000000 s19=00015e06 d09=00015e0626000000 s20=00eb75f3 s21=ffa44201 d10=ffa4420100eb75f3 s22=00000000 s23=ffffffff d11=ffffffff00000000 s24=0d6e89bc s25=00000000 d12=000000000d6e89bc s26=40000000 s27=00024ae9 d13=00024ae940000000 s28=02000000 s29=00000000 d14=0000000002000000 s30=02000000 s31=00000000 d15=0000000002000000 s32=009a647b s33=00841596 d16=00841596009a647b s34=00000000 s35=00000000 d17=0000000000000000 s36=fea8ed3a s37=ff2052a1 d18=ff2052a1fea8ed3a s38=ffffffff s39=ffffffff d19=ffffffffffffffff s40=01000000 s41=00000000 d20=0000000001000000 s42=020d0939 s43=00000000 d21=00000000020d0939 s44=00000003 s45=00000000 d22=0000000000000003 s46=00af0313 s47=00000000 d23=0000000000af0313 s48=fe3024d9 s49=fdbf82c3 d24=fdbf82c3fe3024d9 s50=0cfd3a69 s51=00000000 d25=000000000cfd3a69 s52=01a67f37 s53=01d111da d26=01d111da01a67f37 s54=fe80e645 s55=014b1ca2 d27=014b1ca2fe80e645 s56=fe4e0f0b s57=ff6be1c6 d28=ff6be1c6fe4e0f0b s58=ffb5f0e3 s59=fe80e645 d29=fe80e645ffb5f0e3 s60=2ebd5647 s61=00024ae9 d30=00024ae92ebd5647 s62=3a714f53 s63=0021a614 d31=0021a6143a714f53 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000002 R02=00000000 R03=00000000 R04=df8e1e05 R05=00000001 R06=00000000 R07=00000002 R08=df8e1dec R09=00000001 R10=00000000 R11=df8e1ce4 R12=00000001 R13=df8e1ca8 R14=81a2e824 R15=81a2e79c PSR=20000193 --C- A S svc32 s00=f8000000 s01=ffffffff d00=fffffffff8000000 s02=fc000000 s03=ffe463b6 d01=ffe463b6fc000000 s04=fc000000 s05=ffffffff d02=fffffffffc000000 s06=fc000000 s07=ffffffff d03=fffffffffc000000 s08=fe232f59 s09=00c79acb d04=00c79acbfe232f59 s10=ffffffff s11=00000000 d05=00000000ffffffff s12=00bce5e7 s13=ff05f44c d06=ff05f44c00bce5e7 s14=00000000 s15=ffffffff d07=ffffffff00000000 s16=fe000000 s17=0e1ffd82 d08=0e1ffd82fe000000 s18=94000000 s19=fffed87f d09=fffed87f94000000 s20=01be26d5 s21=ff05f451 d10=ff05f45101be26d5 s22=00000000 s23=ffffffff d11=ffffffff00000000 s24=f8232f59 s25=ffffffff d12=fffffffff8232f59 s26=fc000000 s27=ffe463b6 d13=ffe463b6fc000000 s28=02000000 s29=00000000 d14=0000000002000000 s30=02000000 s31=00000000 d15=0000000002000000 s32=0097a889 s33=00409e09 d16=00409e090097a889 s34=00000000 s35=00000000 d17=0000000000000000 s36=00d889ec s37=ff1ba817 d18=ff1ba81700d889ec s38=00000000 s39=ffffffff d19=ffffffff00000000 s40=01000000 s41=00000000 d20=0000000001000000 s42=fe44bf5e s43=ffffffff d21=fffffffffe44bf5e s44=fffffffe s45=ffffffff d22=fffffffffffffffe s46=ff6c3fca s47=ffffffff d23=ffffffffff6c3fca s48=fe90b066 s49=0e1ffd82 d24=0e1ffd82fe90b066 s50=f508bbfe s51=ffffffff d25=fffffffff508bbfe s52=00b262f2 s53=011fd9e2 d26=011fd9e200b262f2 s54=fe2899f4 s55=00704b62 d27=00704b62fe2899f4 s56=fe1e6fc9 s57=fe2d0a8a d28=fe2d0a8afe1e6fc9 s58=ff168545 s59=fe2899f4 d29=fe2899f4ff168545 s60=f8d66c9f s61=ffe463b6 d30=ffe463b6f8d66c9f s62=ad1a735b s63=006a1af6 d31=006a1af6ad1a735b FPSCR: 00000000