last executing test programs: 7.6420593s ago: executing program 0 (id=1026): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0xa}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000180)={0x2, 0x0, r3}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x807, 0x8, 0x9, 0x9, 0x15, "0b07f5abe899f49e537ce42a6ced0d40e4760e"}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000200)={0x2800, 0xc7f3}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x5, 0xc10, 0x15, 0x1, 0x3b, 0x3, 0x7}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r4, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000380)={r2, 0x6, 0x1, 0x526, 0x2, [0x0], [0x5, 0x8001, 0x7f, 0x3], [0xffff, 0x8000, 0x5, 0x7f], [0x8c, 0xd, 0x3, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000400)={r5}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000480)={r4, 0x5}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001880)={0x3}) 6.630886617s ago: executing program 0 (id=1029): r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) ioctl$BLKBSZSET(r1, 0x40081271, 0x0) 5.94806015s ago: executing program 0 (id=1031): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x20004080) 5.682425402s ago: executing program 1 (id=1032): socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x67e, 0x5}, &(0x7f0000000280)=0x8) 5.236700669s ago: executing program 0 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), r0) 5.0766233s ago: executing program 1 (id=1034): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) (async, rerun: 64) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) (rerun: 64) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) (async) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000180)={0x8, 'veth1_to_batadv\x00', {'sit0\x00'}, 0x401}) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xf14155138b1d436a}, 0x448c4) (async, rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000340)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000400)={0x2, 0x3}) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000440)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000500)=@attr_arm64={0x0, 0x4, 0x3, &(0x7f00000004c0)=0x1}) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r7) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) (rerun: 32) connect$packet(r9, &(0x7f00000006c0)={0x11, 0xf6, r11, 0x1, 0x3, 0x6, @random="5b665e52024c"}, 0x14) write$P9_RAUTH(r9, &(0x7f0000000700)={0x14, 0x67, 0x1, {0x2, 0x3, 0x8}}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000780)={0x1d, r12, 0x2, {0x2, 0xff}}, 0x18) (async) pwritev(r6, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="34eb4960a172852bbb4fa1e553e06260c52c3296d537803f9e488d9c91bc4487afddcbfd85ea1c869d46b4bfaf8e2d640220572d5d394e3b98f8109fd789b90237efbf9a9cef9b66044ff7683e0546e48536c0a12ee899c34a0d5fc998084d2c1d917e4d5491be2602f72508111a67e6845127baee5cee6dc2418e3ed3faec14fb3f4458f90ea186eda05e42f593a64e4714432904543a41608518ad73e295ed5b6c6adbceac1d2f02ab5254e6027ac6c1f49198dba7b189bee4c82a3f83a5417164fb56bb570eed2a8c3d", 0xcb}, {&(0x7f00000008c0)="d0e89ae6b38cb63d1c65dcd6c7f65e0101bbc89c7c2dd164747f2fc45a4256f75a31fbf979043d7cc8e57167aee3ed9ca3bcca4c987608ca565278caa807035ae736eac1603beb2bae4780a7cf1d5bc9d86c94a393abcd3bcea25285819b6e5163a0affee5a619459f85e18f74968a2f879da70d147ed74422f1d5fbe9343dfa209ad0b609d2d2520534ee47c5429968c30bb4c90c003601a860e4baf1c0bb457bdb440a93aa36dd52c9fe048dbe8822c4c6e4150437c74f205b3975898a59ec24b75e04e96bd625de1ac983a6d50a254fd2e2131272a5069ead16d057e73a233eaab72e1397f5137f705b075afcdb", 0xef}, {&(0x7f00000009c0)="b6df7e90807b620a9b95023ae0440373585cef31ce40fa8e1e2b4898e43841d334a9469d4bb80adb089fef0b7b35e90d2c2e92378aedad6e873db8e97896d31b42043d11cb11202351b513d0c40b13e5a5", 0x51}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="d32d610b18b61e487e6e959aa3193299c1e7eade56f5148f89d48d35d1f038073c49e22db279e2c0760ac2919b73ed64faf5dd86eae10d80ab1ec50e6a94376d4f4d5b109d804cc554", 0x49}, {&(0x7f0000000b00)="ab45587dc1848f2d1923fcc88938e65fe138b64047a9", 0x16}, {&(0x7f0000000b40)="7d00cc2ab9100718945363f010b2c43c4db586c6e73c426170158bb9534914601313ef5ca71e9e865b718be26ac0ece4db500ad508a3b4415a3fc9e8bb7699efef88505b3b367b6729b3398267800f6c1643dea0a3dd9a6dec6ee9244c29d4d534cc58feb29cb4e94070c7e82e7d6d3d2c8a8789e778d34af186f96a61204c63ed1023", 0x83}, {&(0x7f0000000c00)="0a60e4a71daf19d9919eecf25d950fd39d19b97c9adf0819e05253694d854aa180d7197e1374606bdfe5088706e265222251e136977698afe13c57f7d0582650bb063664b83600a32484a9d314bb7083c6ce173cd3d661a4c1738684c94af7b63c1634eb8ae51af66314f86882af15e55602d6f39ffe6853ac88e3fb685c2ccb912c1c075993cc2b0dc5d4e0a17b299eb7215e34d9457f", 0x97}], 0x8, 0x6, 0x6) 4.670664739s ago: executing program 0 (id=1035): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0xc04a5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8540, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x5452, &(0x7f0000000100)={'veth1\x00'}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x8d5}, 0x20008000) io_uring_setup(0x6d3b, &(0x7f0000000040)) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r4) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) memfd_secret(0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close(r5) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 2.754860883s ago: executing program 1 (id=1036): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000001c40)=[0x9, 0x6, 0x6], &(0x7f0000001c80)=[0xd38, 0x0, 0x8, 0x4418, 0x9, 0x1000, 0x1], &(0x7f0000001cc0)=[0xae, 0xc, 0x4, 0x7, 0x100, 0x6, 0x35, 0x1]}) 1.268584783s ago: executing program 1 (id=1037): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x20004080) 610.418661ms ago: executing program 0 (id=1038): socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x67e, 0x5}, &(0x7f0000000280)=0x8) 609.964201ms ago: executing program 1 (id=1039): r0 = openat$selinux_mls(0xffffff9c, &(0x7f0000002680), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), 0xffffffffffffffff) 0s ago: executing program 1 (id=1040): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x4000015) kernel console output (not intermixed with test programs): 2] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.517747][ T3832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=3832 comm=syz.1.169 [ 431.292530][ T30] audit: type=1400 audit(430.750:173): avc: denied { read } for pid=3845 comm="syz.1.175" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.294118][ T30] audit: type=1400 audit(430.750:174): avc: denied { open } for pid=3845 comm="syz.1.175" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.347802][ T30] audit: type=1400 audit(430.800:175): avc: denied { ioctl } for pid=3845 comm="syz.1.175" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.350943][ T3847] binder: 3845:3847 ioctl d000943e 20000080 returned -22 [ 431.361609][ T3847] binder: 3845:3847 ioctl d0009411 20001080 returned -22 [ 432.212062][ T30] audit: type=1400 audit(431.630:176): avc: denied { setattr } for pid=3845 comm="syz.1.175" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 435.641899][ T30] audit: type=1400 audit(435.100:177): avc: denied { listen } for pid=3865 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.836903][ T30] audit: type=1400 audit(444.290:178): avc: denied { read } for pid=3897 comm="syz.0.194" path="socket:[5225]" dev="sockfs" ino=5225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 445.688724][ T30] audit: type=1400 audit(445.150:179): avc: denied { remount } for pid=3905 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 445.701320][ T3906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3906 comm=syz.1.197 [ 448.213514][ T3916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3916 comm=syz.0.202 [ 448.336624][ T30] audit: type=1400 audit(447.790:180): avc: denied { read } for pid=3915 comm="syz.0.202" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 448.338551][ T30] audit: type=1400 audit(447.790:181): avc: denied { open } for pid=3915 comm="syz.0.202" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 448.347639][ T30] audit: type=1400 audit(447.800:182): avc: denied { ioctl } for pid=3915 comm="syz.0.202" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 448.371830][ T30] audit: type=1400 audit(447.830:183): avc: denied { write } for pid=3915 comm="syz.0.202" path="socket:[5260]" dev="sockfs" ino=5260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 452.038222][ T30] audit: type=1400 audit(451.480:184): avc: denied { create } for pid=3928 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 452.039900][ T30] audit: type=1400 audit(451.500:185): avc: denied { write } for pid=3928 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.008238][ T3939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=3939 comm=syz.1.213 [ 462.070868][ T30] audit: type=1400 audit(461.530:186): avc: denied { create } for pid=3954 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 471.270018][ T3997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3997 comm=syz.1.233 [ 471.676407][ T30] audit: type=1400 audit(471.130:187): avc: denied { map } for pid=3993 comm="syz.0.234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 471.680394][ T30] audit: type=1400 audit(471.140:188): avc: denied { read write } for pid=3993 comm="syz.0.234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 475.210451][ T30] audit: type=1400 audit(474.660:189): avc: denied { write } for pid=4005 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 475.638171][ T30] audit: type=1400 audit(475.100:190): avc: denied { map } for pid=4005 comm="syz.0.237" path="socket:[6413]" dev="sockfs" ino=6413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 485.777139][ T4044] FAULT_INJECTION: forcing a failure. [ 485.777139][ T4044] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 485.778580][ T4044] CPU: 0 UID: 0 PID: 4044 Comm: syz.1.252 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 485.778980][ T4044] Hardware name: linux,dummy-virt (DT) [ 485.779311][ T4044] Call trace: [ 485.779941][ T4044] dump_backtrace+0x9c/0x11c [ 485.782143][ T4044] show_stack+0x18/0x24 [ 485.782697][ T4044] dump_stack_lvl+0xdc/0xf4 [ 485.783219][ T4044] dump_stack+0x1c/0x28 [ 485.785244][ T4044] should_fail_ex+0x510/0x5f4 [ 485.785926][ T4044] should_fail_alloc_page+0x70/0xb8 [ 485.786491][ T4044] prepare_alloc_pages+0x170/0x518 [ 485.786805][ T4044] __alloc_pages_noprof+0x144/0x2310 [ 485.787101][ T4044] alloc_pages_mpol_noprof+0x104/0x490 [ 485.787412][ T4044] folio_alloc_mpol_noprof+0x18/0xa0 [ 485.787755][ T4044] vma_alloc_folio_noprof+0x104/0x1bc [ 485.788030][ T4044] vma_alloc_zeroed_movable_folio+0x54/0x70 [ 485.788603][ T4044] do_pte_missing+0xbb4/0x2a2c [ 485.789394][ T4044] __handle_mm_fault+0xc18/0x1c18 [ 485.789764][ T4044] handle_mm_fault+0x330/0x6b8 [ 485.790121][ T4044] do_page_fault+0x1c0/0xb34 [ 485.790458][ T4044] do_translation_fault+0x184/0x1e8 [ 485.790754][ T4044] do_mem_abort+0x68/0x1a4 [ 485.791014][ T4044] el0_da+0x5c/0x174 [ 485.791285][ T4044] el0t_64_sync_handler+0xb8/0x12c [ 485.791558][ T4044] el0t_64_sync+0x190/0x194 [ 494.111685][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=4080 comm=syz.1.265 [ 494.193648][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=4080 comm=syz.1.265 [ 499.119910][ T4101] FAULT_INJECTION: forcing a failure. [ 499.119910][ T4101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.121496][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.0.274 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 499.122328][ T4101] Hardware name: linux,dummy-virt (DT) [ 499.122834][ T4101] Call trace: [ 499.123268][ T4101] dump_backtrace+0x9c/0x11c [ 499.123870][ T4101] show_stack+0x18/0x24 [ 499.124372][ T4101] dump_stack_lvl+0xdc/0xf4 [ 499.124968][ T4101] dump_stack+0x1c/0x28 [ 499.125619][ T4101] should_fail_ex+0x510/0x5f4 [ 499.126368][ T4101] should_fail+0x14/0x20 [ 499.127002][ T4101] should_fail_usercopy+0x1c/0x2c [ 499.127587][ T4101] simple_read_from_buffer+0x90/0x1ec [ 499.128174][ T4101] proc_fail_nth_read+0x160/0x248 [ 499.128736][ T4101] vfs_read+0x18c/0x974 [ 499.129257][ T4101] ksys_read+0xf0/0x1dc [ 499.129774][ T4101] __arm64_sys_read+0x6c/0x9c [ 499.130334][ T4101] invoke_syscall+0x6c/0x258 [ 499.130882][ T4101] el0_svc_common.constprop.0+0xac/0x230 [ 499.131453][ T4101] do_el0_svc+0x40/0x58 [ 499.131981][ T4101] el0_svc+0x50/0x180 [ 499.132503][ T4101] el0t_64_sync_handler+0x100/0x12c [ 499.133175][ T4101] el0t_64_sync+0x190/0x194 [ 505.438731][ T30] audit: type=1400 audit(504.900:191): avc: denied { read } for pid=4134 comm="syz.0.288" name="fb0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 505.450608][ T30] audit: type=1400 audit(504.910:192): avc: denied { open } for pid=4134 comm="syz.0.288" path="/dev/fb0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 505.481227][ T30] audit: type=1400 audit(504.940:193): avc: denied { ioctl } for pid=4134 comm="syz.0.288" path="/dev/fb0" dev="devtmpfs" ino=621 ioctlcmd=0x5522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 505.483820][ T4136] sctp: [Deprecated]: syz.0.288 (pid 4136) Use of int in max_burst socket option deprecated. [ 505.483820][ T4136] Use struct sctp_assoc_value instead [ 505.577672][ T4136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=73 sclass=netlink_audit_socket pid=4136 comm=syz.0.288 [ 506.017576][ T30] audit: type=1400 audit(505.480:194): avc: denied { setopt } for pid=4134 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.937310][ T30] audit: type=1400 audit(511.390:195): avc: denied { connect } for pid=4158 comm="syz.1.294" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 514.466279][ T30] audit: type=1400 audit(513.920:196): avc: denied { ioctl } for pid=4178 comm="syz.1.296" path="socket:[6653]" dev="sockfs" ino=6653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 516.266501][ T30] audit: type=1400 audit(515.720:197): avc: denied { create } for pid=4186 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.360670][ T946] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 519.676708][ T946] usb 2-1: Using ep0 maxpacket: 16 [ 519.757538][ T946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 519.781409][ T946] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 519.783221][ T946] usb 2-1: can't read configurations, error -71 [ 525.689726][ T4227] sctp: [Deprecated]: syz.0.314 (pid 4227) Use of int in max_burst socket option deprecated. [ 525.689726][ T4227] Use struct sctp_assoc_value instead [ 525.703849][ T3373] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 525.717348][ C0] hrtimer: interrupt took 1089088 ns [ 525.845801][ T4227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=73 sclass=netlink_audit_socket pid=4227 comm=syz.0.314 [ 525.958483][ T3373] usb 2-1: Using ep0 maxpacket: 16 [ 526.103420][ T3373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.127918][ T3373] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 526.128966][ T3373] usb 2-1: can't read configurations, error -71 [ 529.707885][ T30] audit: type=1400 audit(529.160:198): avc: denied { setopt } for pid=4237 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 530.877100][ T30] audit: type=1400 audit(530.330:199): avc: denied { write } for pid=4240 comm="syz.0.321" name="uinput" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 531.110177][ T30] audit: type=1400 audit(530.570:200): avc: denied { ioctl } for pid=4240 comm="syz.0.321" path="/dev/rtc0" dev="devtmpfs" ino=712 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 534.746325][ T30] audit: type=1400 audit(534.200:201): avc: denied { create } for pid=4254 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.356660][ T30] audit: type=1400 audit(536.790:202): avc: denied { write } for pid=4266 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.890617][ T30] audit: type=1400 audit(537.350:203): avc: denied { ioctl } for pid=4266 comm="syz.0.333" path="socket:[6800]" dev="sockfs" ino=6800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.148261][ T30] audit: type=1400 audit(537.610:204): avc: denied { read } for pid=4266 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.177346][ T30] audit: type=1400 audit(542.640:205): avc: denied { write } for pid=4302 comm="syz.1.344" path="socket:[6858]" dev="sockfs" ino=6858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.006849][ T3358] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 555.276128][ T3358] usb 1-1: Using ep0 maxpacket: 8 [ 555.304018][ T3358] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 555.306170][ T3358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.306701][ T3358] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.308191][ T3358] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 555.352048][ T3358] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.352611][ T3358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.352972][ T3358] usb 1-1: Product: ఇ [ 555.353250][ T3358] usb 1-1: Manufacturer: ఁ [ 555.353542][ T3358] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 555.788346][ T3358] usb 1-1: 0:2 : does not exist [ 556.142019][ T3358] usb 1-1: USB disconnect, device number 2 [ 557.235539][ T3427] udevd[3427]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.543452][ T4376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4376 comm=syz.1.366 [ 558.598370][ T30] audit: type=1400 audit(558.060:206): avc: denied { setopt } for pid=4375 comm="syz.1.366" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 558.647554][ T30] audit: type=1400 audit(558.100:207): avc: denied { append } for pid=4375 comm="syz.1.366" name="001" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 559.171588][ T4378] FAULT_INJECTION: forcing a failure. [ 559.171588][ T4378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.173826][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.1.367 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 559.174825][ T4378] Hardware name: linux,dummy-virt (DT) [ 559.175555][ T4378] Call trace: [ 559.177226][ T4378] dump_backtrace+0x9c/0x11c [ 559.178686][ T4378] show_stack+0x18/0x24 [ 559.179203][ T4378] dump_stack_lvl+0xdc/0xf4 [ 559.179748][ T4378] dump_stack+0x1c/0x28 [ 559.180261][ T4378] should_fail_ex+0x510/0x5f4 [ 559.180795][ T4378] should_fail+0x14/0x20 [ 559.181315][ T4378] should_fail_usercopy+0x1c/0x2c [ 559.181862][ T4378] simple_read_from_buffer+0x90/0x1ec [ 559.182447][ T4378] proc_fail_nth_read+0x160/0x248 [ 559.183018][ T4378] vfs_read+0x18c/0x974 [ 559.183578][ T4378] ksys_read+0xf0/0x1dc [ 559.184094][ T4378] __arm64_sys_read+0x6c/0x9c [ 559.184786][ T4378] invoke_syscall+0x6c/0x258 [ 559.185526][ T4378] el0_svc_common.constprop.0+0xac/0x230 [ 559.186030][ T4378] do_el0_svc+0x40/0x58 [ 559.186582][ T4378] el0_svc+0x50/0x180 [ 559.187094][ T4378] el0t_64_sync_handler+0x100/0x12c [ 559.187642][ T4378] el0t_64_sync+0x190/0x194 [ 559.937602][ T30] audit: type=1400 audit(559.400:208): avc: denied { ioctl } for pid=4382 comm="syz.0.369" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 559.980548][ T30] audit: type=1400 audit(559.430:209): avc: denied { execute } for pid=4382 comm="syz.0.369" path=2F6D656D66643AC0873A2A18C16BA7875BA06F38AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA936147D4FD1E42DC6062CEBB4865299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 560.023803][ T30] audit: type=1400 audit(559.480:210): avc: denied { setopt } for pid=4382 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 560.043659][ T30] audit: type=1400 audit(559.500:211): avc: denied { ioctl } for pid=4382 comm="syz.0.369" path="socket:[5986]" dev="sockfs" ino=5986 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 563.181943][ T30] audit: type=1400 audit(562.630:212): avc: denied { setopt } for pid=4389 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 564.071435][ T4398] FAULT_INJECTION: forcing a failure. [ 564.071435][ T4398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.072865][ T4398] CPU: 1 UID: 0 PID: 4398 Comm: syz.0.374 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 564.073595][ T4398] Hardware name: linux,dummy-virt (DT) [ 564.074100][ T4398] Call trace: [ 564.074795][ T4398] dump_backtrace+0x9c/0x11c [ 564.075529][ T4398] show_stack+0x18/0x24 [ 564.076099][ T4398] dump_stack_lvl+0xdc/0xf4 [ 564.076612][ T4398] dump_stack+0x1c/0x28 [ 564.077121][ T4398] should_fail_ex+0x510/0x5f4 [ 564.077643][ T4398] should_fail+0x14/0x20 [ 564.078166][ T4398] should_fail_usercopy+0x1c/0x2c [ 564.078715][ T4398] copy_msghdr_from_user+0xa8/0x1fc [ 564.079636][ T4398] ___sys_sendmsg+0xfc/0x19c [ 564.080424][ T4398] __sys_sendmsg+0xe0/0x174 [ 564.080981][ T4398] __arm64_sys_sendmsg+0x70/0xa0 [ 564.081533][ T4398] invoke_syscall+0x6c/0x258 [ 564.082040][ T4398] el0_svc_common.constprop.0+0xac/0x230 [ 564.082646][ T4398] do_el0_svc+0x40/0x58 [ 564.083290][ T4398] el0_svc+0x50/0x180 [ 564.083815][ T4398] el0t_64_sync_handler+0x100/0x12c [ 564.084368][ T4398] el0t_64_sync+0x190/0x194 [ 566.071276][ T30] audit: type=1400 audit(565.510:213): avc: denied { ioctl } for pid=4409 comm="syz.0.380" path="socket:[6061]" dev="sockfs" ino=6061 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 566.082252][ T30] audit: type=1400 audit(565.540:214): avc: denied { write } for pid=4409 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 567.736350][ T30] audit: type=1400 audit(567.190:215): avc: denied { create } for pid=4417 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 569.104315][ T30] audit: type=1400 audit(568.540:216): avc: denied { create } for pid=4425 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 569.195959][ T30] audit: type=1400 audit(568.650:217): avc: denied { setopt } for pid=4425 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.636914][ T4428] FAULT_INJECTION: forcing a failure. [ 569.636914][ T4428] name failslab, interval 1, probability 0, space 0, times 0 [ 569.638210][ T4428] CPU: 1 UID: 0 PID: 4428 Comm: syz.1.387 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 569.638959][ T4428] Hardware name: linux,dummy-virt (DT) [ 569.639496][ T4428] Call trace: [ 569.639944][ T4428] dump_backtrace+0x9c/0x11c [ 569.640559][ T4428] show_stack+0x18/0x24 [ 569.641056][ T4428] dump_stack_lvl+0xdc/0xf4 [ 569.641595][ T4428] dump_stack+0x1c/0x28 [ 569.642161][ T4428] should_fail_ex+0x510/0x5f4 [ 569.642776][ T4428] should_failslab+0xbc/0x11c [ 569.643292][ T4428] __kmalloc_noprof+0xd0/0x3d0 [ 569.643930][ T4428] tomoyo_realpath_from_path+0x90/0x54c [ 569.644607][ T4428] tomoyo_path_number_perm+0x200/0x458 [ 569.645348][ T4428] tomoyo_file_ioctl+0x1c/0x28 [ 569.645988][ T4428] security_file_ioctl+0x70/0xc4 [ 569.646697][ T4428] __arm64_sys_ioctl+0x94/0x190 [ 569.647370][ T4428] invoke_syscall+0x6c/0x258 [ 569.647918][ T4428] el0_svc_common.constprop.0+0xac/0x230 [ 569.648622][ T4428] do_el0_svc+0x40/0x58 [ 569.649160][ T4428] el0_svc+0x50/0x180 [ 569.649688][ T4428] el0t_64_sync_handler+0x100/0x12c [ 569.650345][ T4428] el0t_64_sync+0x190/0x194 [ 569.699455][ T4428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.404313][ T4442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=4442 comm=syz.1.393 [ 573.432293][ T4446] FAULT_INJECTION: forcing a failure. [ 573.432293][ T4446] name failslab, interval 1, probability 0, space 0, times 0 [ 573.433454][ T4446] CPU: 1 UID: 0 PID: 4446 Comm: syz.1.395 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 573.434177][ T4446] Hardware name: linux,dummy-virt (DT) [ 573.434938][ T4446] Call trace: [ 573.435353][ T4446] dump_backtrace+0x9c/0x11c [ 573.435971][ T4446] show_stack+0x18/0x24 [ 573.436449][ T4446] dump_stack_lvl+0xdc/0xf4 [ 573.436853][ T4446] dump_stack+0x1c/0x28 [ 573.437231][ T4446] should_fail_ex+0x510/0x5f4 [ 573.437636][ T4446] should_failslab+0xbc/0x11c [ 573.438028][ T4446] __kmalloc_noprof+0xd0/0x3d0 [ 573.438447][ T4446] tomoyo_realpath_from_path+0x90/0x54c [ 573.438863][ T4446] tomoyo_path_number_perm+0x200/0x458 [ 573.439278][ T4446] tomoyo_file_ioctl+0x1c/0x28 [ 573.439701][ T4446] security_file_ioctl+0x70/0xc4 [ 573.440097][ T4446] __arm64_sys_ioctl+0x94/0x190 [ 573.440503][ T4446] invoke_syscall+0x6c/0x258 [ 573.440879][ T4446] el0_svc_common.constprop.0+0xac/0x230 [ 573.441319][ T4446] do_el0_svc+0x40/0x58 [ 573.441871][ T4446] el0_svc+0x50/0x180 [ 573.442354][ T4446] el0t_64_sync_handler+0x100/0x12c [ 573.442972][ T4446] el0t_64_sync+0x190/0x194 [ 573.458732][ T4446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.783821][ T4451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=4451 comm=syz.1.398 [ 575.535805][ T4456] nbd0: detected capacity change from 0 to 43 [ 577.235966][ T50] block nbd0: Receive control failed (result -104) [ 579.027591][ T4469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=4469 comm=syz.1.403 [ 582.076171][ T4483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=4483 comm=syz.1.408 [ 588.907874][ T4514] FAULT_INJECTION: forcing a failure. [ 588.907874][ T4514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.910022][ T4514] CPU: 0 UID: 0 PID: 4514 Comm: syz.1.418 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 588.910767][ T4514] Hardware name: linux,dummy-virt (DT) [ 588.911331][ T4514] Call trace: [ 588.911772][ T4514] dump_backtrace+0x9c/0x11c [ 588.912344][ T4514] show_stack+0x18/0x24 [ 588.912849][ T4514] dump_stack_lvl+0xdc/0xf4 [ 588.913361][ T4514] dump_stack+0x1c/0x28 [ 588.913846][ T4514] should_fail_ex+0x510/0x5f4 [ 588.914495][ T4514] should_fail+0x14/0x20 [ 588.915065][ T4514] should_fail_usercopy+0x1c/0x2c [ 588.915713][ T4514] kstrtouint_from_user+0xc8/0x248 [ 588.916350][ T4514] proc_fail_nth_write+0x8c/0x220 [ 588.916896][ T4514] vfs_write+0x1d8/0xacc [ 588.917432][ T4514] ksys_write+0xf0/0x1dc [ 588.917969][ T4514] __arm64_sys_write+0x6c/0x9c [ 588.918569][ T4514] invoke_syscall+0x6c/0x258 [ 588.919092][ T4514] el0_svc_common.constprop.0+0xac/0x230 [ 588.919638][ T4514] do_el0_svc+0x40/0x58 [ 588.920130][ T4514] el0_svc+0x50/0x180 [ 588.920669][ T4514] el0t_64_sync_handler+0x100/0x12c [ 588.921188][ T4514] el0t_64_sync+0x190/0x194 [ 594.882358][ T30] audit: type=1400 audit(594.340:218): avc: denied { getopt } for pid=4531 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 605.839992][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 30 seconds [ 607.046441][ T3417] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 607.386497][ T3417] usb 2-1: Using ep0 maxpacket: 8 [ 607.501990][ T3417] usb 2-1: config 1 interface 0 altsetting 114 bulk endpoint 0x1 has invalid maxpacket 16 [ 607.503357][ T3417] usb 2-1: config 1 interface 0 altsetting 114 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.504344][ T3417] usb 2-1: config 1 interface 0 has no altsetting 0 [ 607.670687][ T3417] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 607.671737][ T3417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.672443][ T3417] usb 2-1: Product: ᰉ [ 607.673016][ T3417] usb 2-1: Manufacturer: Л [ 607.673602][ T3417] usb 2-1: SerialNumber: ఉ [ 607.741080][ T4566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.743913][ T4566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.027103][ T30] audit: type=1400 audit(607.470:219): avc: denied { write } for pid=4556 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 608.177135][ T3417] usb 2-1: USB disconnect, device number 6 [ 616.221604][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.263315][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.949122][ T4616] FAULT_INJECTION: forcing a failure. [ 617.949122][ T4616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.949750][ T4616] CPU: 1 UID: 0 PID: 4616 Comm: syz.1.449 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 617.950093][ T4616] Hardware name: linux,dummy-virt (DT) [ 617.950396][ T4616] Call trace: [ 617.950592][ T4616] dump_backtrace+0x9c/0x11c [ 617.950905][ T4616] show_stack+0x18/0x24 [ 617.951130][ T4616] dump_stack_lvl+0xdc/0xf4 [ 617.951368][ T4616] dump_stack+0x1c/0x28 [ 617.951591][ T4616] should_fail_ex+0x510/0x5f4 [ 617.951884][ T4616] should_fail+0x14/0x20 [ 617.952111][ T4616] should_fail_usercopy+0x1c/0x2c [ 617.952354][ T4616] simple_read_from_buffer+0x90/0x1ec [ 617.952615][ T4616] proc_fail_nth_read+0x160/0x248 [ 617.952860][ T4616] vfs_read+0x18c/0x974 [ 617.953090][ T4616] ksys_read+0xf0/0x1dc [ 617.953317][ T4616] __arm64_sys_read+0x6c/0x9c [ 617.953557][ T4616] invoke_syscall+0x6c/0x258 [ 617.953789][ T4616] el0_svc_common.constprop.0+0xac/0x230 [ 617.954037][ T4616] do_el0_svc+0x40/0x58 [ 617.954310][ T4616] el0_svc+0x50/0x180 [ 617.954616][ T4616] el0t_64_sync_handler+0x100/0x12c [ 617.955328][ T4616] el0t_64_sync+0x190/0x194 [ 620.676495][ T4559] hsr_slave_0: entered promiscuous mode [ 620.683478][ T4559] hsr_slave_1: entered promiscuous mode [ 620.716417][ T4559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.717646][ T4559] Cannot create hsr debugfs directory [ 622.899273][ T4559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.209714][ T4559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.433828][ T4559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.703310][ T4559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.809450][ T4559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 624.857323][ T4559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 624.946428][ T4559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 624.972127][ T4559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.656801][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.670484][ T4660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4660 comm=syz.1.461 [ 635.453121][ T4676] FAULT_INJECTION: forcing a failure. [ 635.453121][ T4676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.454000][ T4676] CPU: 0 UID: 0 PID: 4676 Comm: syz.1.465 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 635.454957][ T4676] Hardware name: linux,dummy-virt (DT) [ 635.455591][ T4676] Call trace: [ 635.455991][ T4676] dump_backtrace+0x9c/0x11c [ 635.456637][ T4676] show_stack+0x18/0x24 [ 635.457113][ T4676] dump_stack_lvl+0xdc/0xf4 [ 635.457626][ T4676] dump_stack+0x1c/0x28 [ 635.458088][ T4676] should_fail_ex+0x510/0x5f4 [ 635.458718][ T4676] should_fail+0x14/0x20 [ 635.459201][ T4676] should_fail_usercopy+0x1c/0x2c [ 635.459758][ T4676] copy_msghdr_from_user+0xa8/0x1fc [ 635.460291][ T4676] ___sys_sendmsg+0xfc/0x19c [ 635.460794][ T4676] __sys_sendmsg+0xe0/0x174 [ 635.461195][ T4676] __arm64_sys_sendmsg+0x70/0xa0 [ 635.461531][ T4676] invoke_syscall+0x6c/0x258 [ 635.461917][ T4676] el0_svc_common.constprop.0+0xac/0x230 [ 635.462348][ T4676] do_el0_svc+0x40/0x58 [ 635.462728][ T4676] el0_svc+0x50/0x180 [ 635.463088][ T4676] el0t_64_sync_handler+0x100/0x12c [ 635.463517][ T4676] el0t_64_sync+0x190/0x194 [ 635.897026][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 60 seconds [ 638.149972][ T30] audit: type=1400 audit(637.610:220): avc: denied { nlmsg_write } for pid=4687 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 638.328832][ T4688] serio: Serial port pts0 [ 641.397726][ T3103] udevd[3103]: worker [3427] /devices/virtual/block/nbd0 is taking a long time [ 642.972294][ T4559] veth0_vlan: entered promiscuous mode [ 643.102430][ T4559] veth1_vlan: entered promiscuous mode [ 643.493946][ T4559] veth0_macvtap: entered promiscuous mode [ 643.593167][ T4559] veth1_macvtap: entered promiscuous mode [ 644.013588][ T4559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.019471][ T4559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.023078][ T4559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.024168][ T4559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.666358][ T30] audit: type=1400 audit(644.120:221): avc: denied { mounton } for pid=4559 comm="syz-executor" path="/syzkaller.YLZ3ah/syz-tmp" dev="vda" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 644.746383][ T30] audit: type=1400 audit(644.180:222): avc: denied { mounton } for pid=4559 comm="syz-executor" path="/syzkaller.YLZ3ah/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 644.772408][ T30] audit: type=1400 audit(644.220:223): avc: denied { mount } for pid=4559 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 644.931552][ T30] audit: type=1400 audit(644.390:224): avc: denied { mounton } for pid=4559 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 650.557089][ T3373] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 650.837958][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 650.952922][ T3373] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 650.957582][ T3373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.958990][ T3373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.959995][ T3373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 651.011964][ T3373] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.012944][ T3373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.013651][ T3373] usb 1-1: Product: ఇ [ 651.016445][ T3373] usb 1-1: Manufacturer: ఁ [ 651.016996][ T3373] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 651.416446][ T3373] usb 1-1: 0:2 : does not exist [ 651.632764][ T3373] usb 1-1: USB disconnect, device number 3 [ 652.937897][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.486489][ T3373] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 654.691482][ T3373] usb 2-1: Using ep0 maxpacket: 8 [ 654.747814][ T3373] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 654.748576][ T3373] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.748979][ T3373] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.749469][ T3373] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 654.829812][ T3373] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.830433][ T3373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.830794][ T3373] usb 2-1: Product: ఇ [ 654.831086][ T3373] usb 2-1: Manufacturer: ఁ [ 654.834390][ T3373] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 655.276985][ T3373] usb 2-1: 0:2 : does not exist [ 655.567212][ T3373] usb 2-1: USB disconnect, device number 7 [ 658.079373][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.272021][ T4755] FAULT_INJECTION: forcing a failure. [ 659.272021][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 659.272741][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.0.486 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 659.273155][ T4755] Hardware name: linux,dummy-virt (DT) [ 659.273419][ T4755] Call trace: [ 659.273620][ T4755] dump_backtrace+0x9c/0x11c [ 659.273888][ T4755] show_stack+0x18/0x24 [ 659.274135][ T4755] dump_stack_lvl+0xdc/0xf4 [ 659.274782][ T4755] dump_stack+0x1c/0x28 [ 659.275176][ T4755] should_fail_ex+0x510/0x5f4 [ 659.275464][ T4755] should_failslab+0xbc/0x11c [ 659.275756][ T4755] __kmalloc_noprof+0xd0/0x3d0 [ 659.276144][ T4755] tomoyo_encode2+0xa8/0x2c0 [ 659.276440][ T4755] tomoyo_realpath_from_path+0x124/0x54c [ 659.276739][ T4755] tomoyo_path_number_perm+0x200/0x458 [ 659.277043][ T4755] tomoyo_file_ioctl+0x1c/0x28 [ 659.277330][ T4755] security_file_ioctl+0x70/0xc4 [ 659.277630][ T4755] __arm64_sys_ioctl+0x94/0x190 [ 659.277922][ T4755] invoke_syscall+0x6c/0x258 [ 659.278314][ T4755] el0_svc_common.constprop.0+0xac/0x230 [ 659.278697][ T4755] do_el0_svc+0x40/0x58 [ 659.279080][ T4755] el0_svc+0x50/0x180 [ 659.279527][ T4755] el0t_64_sync_handler+0x100/0x12c [ 659.279982][ T4755] el0t_64_sync+0x190/0x194 [ 659.330705][ T4755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 659.918376][ T4759] sctp: [Deprecated]: syz.1.487 (pid 4759) Use of int in maxseg socket option. [ 659.918376][ T4759] Use struct sctp_assoc_value instead [ 661.881192][ T4770] FAULT_INJECTION: forcing a failure. [ 661.881192][ T4770] name failslab, interval 1, probability 0, space 0, times 0 [ 661.881946][ T4770] CPU: 1 UID: 0 PID: 4770 Comm: syz.1.492 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 661.882661][ T4770] Hardware name: linux,dummy-virt (DT) [ 661.882981][ T4770] Call trace: [ 661.883416][ T4770] dump_backtrace+0x9c/0x11c [ 661.883943][ T4770] show_stack+0x18/0x24 [ 661.884477][ T4770] dump_stack_lvl+0xdc/0xf4 [ 661.885089][ T4770] dump_stack+0x1c/0x28 [ 661.885613][ T4770] should_fail_ex+0x510/0x5f4 [ 661.886181][ T4770] should_failslab+0xbc/0x11c [ 661.886519][ T4770] __kmalloc_noprof+0xd0/0x3d0 [ 661.886802][ T4770] tomoyo_realpath_from_path+0x90/0x54c [ 661.887167][ T4770] tomoyo_path_number_perm+0x200/0x458 [ 661.887728][ T4770] tomoyo_file_ioctl+0x1c/0x28 [ 661.888178][ T4770] security_file_ioctl+0x70/0xc4 [ 661.888469][ T4770] __arm64_sys_ioctl+0x94/0x190 [ 661.889045][ T4770] invoke_syscall+0x6c/0x258 [ 661.889611][ T4770] el0_svc_common.constprop.0+0xac/0x230 [ 661.890204][ T4770] do_el0_svc+0x40/0x58 [ 661.890663][ T4770] el0_svc+0x50/0x180 [ 661.890915][ T4770] el0t_64_sync_handler+0x100/0x12c [ 661.891180][ T4770] el0t_64_sync+0x190/0x194 [ 661.957590][ T4770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 661.995240][ T30] audit: type=1400 audit(661.440:225): avc: denied { remove_name } for pid=3088 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.004971][ T30] audit: type=1400 audit(661.460:226): avc: denied { rename } for pid=3088 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.037460][ T30] audit: type=1400 audit(661.490:227): avc: denied { create } for pid=3088 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.282023][ T4763] "syz.0.490" (4763) uses obsolete ecb(arc4) skcipher [ 663.043022][ T4778] FAULT_INJECTION: forcing a failure. [ 663.043022][ T4778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.043919][ T4778] CPU: 1 UID: 0 PID: 4778 Comm: syz.1.495 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 663.044864][ T4778] Hardware name: linux,dummy-virt (DT) [ 663.045452][ T4778] Call trace: [ 663.046033][ T4778] dump_backtrace+0x9c/0x11c [ 663.046512][ T4778] show_stack+0x18/0x24 [ 663.046777][ T4778] dump_stack_lvl+0xdc/0xf4 [ 663.047027][ T4778] dump_stack+0x1c/0x28 [ 663.047318][ T4778] should_fail_ex+0x510/0x5f4 [ 663.047598][ T4778] should_fail+0x14/0x20 [ 663.047914][ T4778] should_fail_usercopy+0x1c/0x2c [ 663.048193][ T4778] simple_read_from_buffer+0x90/0x1ec [ 663.048470][ T4778] proc_fail_nth_read+0x160/0x248 [ 663.048725][ T4778] vfs_read+0x18c/0x974 [ 663.049118][ T4778] ksys_read+0xf0/0x1dc [ 663.049622][ T4778] __arm64_sys_read+0x6c/0x9c [ 663.050139][ T4778] invoke_syscall+0x6c/0x258 [ 663.050683][ T4778] el0_svc_common.constprop.0+0xac/0x230 [ 663.051234][ T4778] do_el0_svc+0x40/0x58 [ 663.051710][ T4778] el0_svc+0x50/0x180 [ 663.052034][ T4778] el0t_64_sync_handler+0x100/0x12c [ 663.052289][ T4778] el0t_64_sync+0x190/0x194 [ 663.961487][ T4782] FAULT_INJECTION: forcing a failure. [ 663.961487][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 663.962444][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.1.497 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 663.962938][ T4782] Hardware name: linux,dummy-virt (DT) [ 663.963258][ T4782] Call trace: [ 663.963593][ T4782] dump_backtrace+0x9c/0x11c [ 663.964004][ T4782] show_stack+0x18/0x24 [ 663.964462][ T4782] dump_stack_lvl+0xdc/0xf4 [ 663.964859][ T4782] dump_stack+0x1c/0x28 [ 663.965404][ T4782] should_fail_ex+0x510/0x5f4 [ 663.965841][ T4782] should_failslab+0xbc/0x11c [ 663.966280][ T4782] __kmalloc_noprof+0xd0/0x3d0 [ 663.966693][ T4782] tomoyo_encode2+0xa8/0x2c0 [ 663.967089][ T4782] tomoyo_realpath_from_path+0x124/0x54c [ 663.967526][ T4782] tomoyo_path_number_perm+0x200/0x458 [ 663.967947][ T4782] tomoyo_file_ioctl+0x1c/0x28 [ 663.968464][ T4782] security_file_ioctl+0x70/0xc4 [ 663.968995][ T4782] __arm64_sys_ioctl+0x94/0x190 [ 663.969411][ T4782] invoke_syscall+0x6c/0x258 [ 663.969820][ T4782] el0_svc_common.constprop.0+0xac/0x230 [ 663.970344][ T4782] do_el0_svc+0x40/0x58 [ 663.970720][ T4782] el0_svc+0x50/0x180 [ 663.971169][ T4782] el0t_64_sync_handler+0x100/0x12c [ 663.971594][ T4782] el0t_64_sync+0x190/0x194 [ 663.979030][ T4782] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.260412][ T4784] serio: Serial port pts0 [ 665.988828][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 90 seconds [ 669.829655][ T30] audit: type=1400 audit(669.290:228): avc: denied { ioctl } for pid=4796 comm="syz.0.502" path="socket:[7853]" dev="sockfs" ino=7853 ioctlcmd=0xae99 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 669.951692][ T30] audit: type=1400 audit(669.410:229): avc: denied { read } for pid=4783 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 671.370058][ T4805] FAULT_INJECTION: forcing a failure. [ 671.370058][ T4805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.371241][ T4805] CPU: 0 UID: 0 PID: 4805 Comm: syz.0.505 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 671.371871][ T4805] Hardware name: linux,dummy-virt (DT) [ 671.372363][ T4805] Call trace: [ 671.372734][ T4805] dump_backtrace+0x9c/0x11c [ 671.373206][ T4805] show_stack+0x18/0x24 [ 671.373624][ T4805] dump_stack_lvl+0xdc/0xf4 [ 671.374055][ T4805] dump_stack+0x1c/0x28 [ 671.374578][ T4805] should_fail_ex+0x510/0x5f4 [ 671.375076][ T4805] should_fail+0x14/0x20 [ 671.375816][ T4805] should_fail_usercopy+0x1c/0x2c [ 671.376319][ T4805] copy_msghdr_from_user+0xa8/0x1fc [ 671.376843][ T4805] ___sys_sendmsg+0xfc/0x19c [ 671.377292][ T4805] __sys_sendmsg+0xe0/0x174 [ 671.377738][ T4805] __arm64_sys_sendmsg+0x70/0xa0 [ 671.378199][ T4805] invoke_syscall+0x6c/0x258 [ 671.378723][ T4805] el0_svc_common.constprop.0+0xac/0x230 [ 671.379288][ T4805] do_el0_svc+0x40/0x58 [ 671.379741][ T4805] el0_svc+0x50/0x180 [ 671.380208][ T4805] el0t_64_sync_handler+0x100/0x12c [ 671.380706][ T4805] el0t_64_sync+0x190/0x194 [ 672.266740][ T3373] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 674.008349][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 674.042954][ T3373] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 674.043999][ T3373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.065781][ T3373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.066882][ T3373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 674.215608][ T3373] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 674.216539][ T3373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.217150][ T3373] usb 1-1: Product: ఇ [ 674.217665][ T3373] usb 1-1: Manufacturer: ఁ [ 674.218251][ T3373] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 674.567459][ T3373] usb 1-1: 0:2 : does not exist [ 674.693937][ T3373] usb 1-1: USB disconnect, device number 4 [ 676.122991][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.610914][ T4823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4823 comm=syz.0.511 [ 677.612261][ T30] audit: type=1400 audit(677.070:230): avc: denied { write } for pid=4818 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 677.698457][ T3358] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 677.921846][ T30] audit: type=1400 audit(677.380:231): avc: denied { ioctl } for pid=4818 comm="syz.0.511" path="socket:[7908]" dev="sockfs" ino=7908 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 678.036713][ T3358] usb 2-1: Using ep0 maxpacket: 8 [ 678.070716][ T3358] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 678.071681][ T3358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.072430][ T3358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.073299][ T3358] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 678.193902][ T3358] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.199629][ T3358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.200426][ T3358] usb 2-1: Product: ఇ [ 678.201055][ T3358] usb 2-1: Manufacturer: ఁ [ 678.201668][ T3358] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 678.657391][ T3358] usb 2-1: 0:2 : does not exist [ 678.855545][ T3358] usb 2-1: USB disconnect, device number 8 [ 679.910697][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.886952][ T4808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 682.148604][ T4808] usb 1-1: Using ep0 maxpacket: 8 [ 682.352361][ T4808] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 682.353123][ T4808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.353643][ T4808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.354309][ T4808] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 682.435943][ T4808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.437202][ T4808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.438064][ T4808] usb 1-1: Product: ఇ [ 682.438830][ T4808] usb 1-1: Manufacturer: ఁ [ 682.439498][ T4808] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 682.876651][ T4808] usb 1-1: 0:2 : does not exist [ 683.536797][ T4808] usb 1-1: USB disconnect, device number 5 [ 683.667975][ T30] audit: type=1400 audit(683.130:232): avc: denied { create } for pid=4839 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 683.823824][ T30] audit: type=1400 audit(683.270:233): avc: denied { getopt } for pid=4839 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 685.349867][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.566973][ T4861] FAULT_INJECTION: forcing a failure. [ 688.566973][ T4861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.568955][ T4861] CPU: 1 UID: 0 PID: 4861 Comm: syz.1.524 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 688.569611][ T4861] Hardware name: linux,dummy-virt (DT) [ 688.570187][ T4861] Call trace: [ 688.570636][ T4861] dump_backtrace+0x9c/0x11c [ 688.571201][ T4861] show_stack+0x18/0x24 [ 688.571692][ T4861] dump_stack_lvl+0xdc/0xf4 [ 688.572192][ T4861] dump_stack+0x1c/0x28 [ 688.572664][ T4861] should_fail_ex+0x510/0x5f4 [ 688.573164][ T4861] should_fail+0x14/0x20 [ 688.573632][ T4861] should_fail_usercopy+0x1c/0x2c [ 688.574106][ T4861] copy_msghdr_from_user+0xa8/0x1fc [ 688.574883][ T4861] ___sys_sendmsg+0xfc/0x19c [ 688.575626][ T4861] __sys_sendmsg+0xe0/0x174 [ 688.576166][ T4861] __arm64_sys_sendmsg+0x70/0xa0 [ 688.576702][ T4861] invoke_syscall+0x6c/0x258 [ 688.577219][ T4861] el0_svc_common.constprop.0+0xac/0x230 [ 688.577779][ T4861] do_el0_svc+0x40/0x58 [ 688.578347][ T4861] el0_svc+0x50/0x180 [ 688.578890][ T4861] el0t_64_sync_handler+0x100/0x12c [ 688.579577][ T4861] el0t_64_sync+0x190/0x194 [ 689.457220][ T4864] serio: Serial port pts0 [ 693.031935][ T4881] capability: warning: `syz.0.531' uses 32-bit capabilities (legacy support in use) [ 696.126995][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 120 seconds [ 699.528825][ T4905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4905 comm=syz.0.541 [ 708.148220][ T4945] FAULT_INJECTION: forcing a failure. [ 708.148220][ T4945] name failslab, interval 1, probability 0, space 0, times 0 [ 708.151770][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.0.556 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 708.152733][ T4945] Hardware name: linux,dummy-virt (DT) [ 708.153389][ T4945] Call trace: [ 708.153883][ T4945] dump_backtrace+0x9c/0x11c [ 708.154765][ T4945] show_stack+0x18/0x24 [ 708.155495][ T4945] dump_stack_lvl+0xdc/0xf4 [ 708.156889][ T4945] dump_stack+0x1c/0x28 [ 708.157656][ T4945] should_fail_ex+0x510/0x5f4 [ 708.158307][ T4945] should_failslab+0xbc/0x11c [ 708.158930][ T4945] __kmalloc_noprof+0xd0/0x3d0 [ 708.159546][ T4945] tomoyo_realpath_from_path+0x90/0x54c [ 708.160148][ T4945] tomoyo_path_number_perm+0x200/0x458 [ 708.160750][ T4945] tomoyo_file_ioctl+0x1c/0x28 [ 708.161317][ T4945] security_file_ioctl+0x70/0xc4 [ 708.162097][ T4945] __arm64_sys_ioctl+0x94/0x190 [ 708.163561][ T4945] invoke_syscall+0x6c/0x258 [ 708.164457][ T4945] el0_svc_common.constprop.0+0xac/0x230 [ 708.165278][ T4945] do_el0_svc+0x40/0x58 [ 708.165985][ T4945] el0_svc+0x50/0x180 [ 708.167013][ T4945] el0t_64_sync_handler+0x100/0x12c [ 708.168360][ T4945] el0t_64_sync+0x190/0x194 [ 708.199152][ T4945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 709.753085][ T4953] FAULT_INJECTION: forcing a failure. [ 709.753085][ T4953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 709.768957][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: syz.0.560 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 709.769633][ T4953] Hardware name: linux,dummy-virt (DT) [ 709.770272][ T4953] Call trace: [ 709.770651][ T4953] dump_backtrace+0x9c/0x11c [ 709.771166][ T4953] show_stack+0x18/0x24 [ 709.771605][ T4953] dump_stack_lvl+0xdc/0xf4 [ 709.772048][ T4953] dump_stack+0x1c/0x28 [ 709.772483][ T4953] should_fail_ex+0x510/0x5f4 [ 709.772918][ T4953] should_fail_alloc_page+0x70/0xb8 [ 709.773379][ T4953] prepare_alloc_pages+0x170/0x518 [ 709.773844][ T4953] __alloc_pages_noprof+0x144/0x2310 [ 709.774330][ T4953] alloc_pages_mpol_noprof+0x104/0x490 [ 709.774956][ T4953] folio_alloc_mpol_noprof+0x18/0xa0 [ 709.775508][ T4953] vma_alloc_folio_noprof+0x104/0x1bc [ 709.776241][ T4953] vma_alloc_zeroed_movable_folio+0x54/0x70 [ 709.776768][ T4953] do_pte_missing+0xbb4/0x2a2c [ 709.777263][ T4953] __handle_mm_fault+0xc18/0x1c18 [ 709.777904][ T4953] handle_mm_fault+0x330/0x6b8 [ 709.778625][ T4953] do_page_fault+0x1c0/0xb34 [ 709.779246][ T4953] do_translation_fault+0x184/0x1e8 [ 709.779755][ T4953] do_mem_abort+0x68/0x1a4 [ 709.780243][ T4953] el0_da+0x5c/0x174 [ 709.781177][ T4953] el0t_64_sync_handler+0xb8/0x12c [ 709.782175][ T4953] el0t_64_sync+0x190/0x194 [ 709.817202][ T4953] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 710.178135][ T4808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 710.506321][ T4808] usb 1-1: Using ep0 maxpacket: 16 [ 710.535608][ T4808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 710.566985][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 710.866708][ T4808] usb 1-1: config 3 has an invalid interface number: 225 but max is 0 [ 710.867804][ T4808] usb 1-1: config 3 has no interface number 0 [ 710.868783][ T4808] usb 1-1: config 3 interface 225 has no altsetting 0 [ 710.962003][ T4808] usb 1-1: New USB device found, idVendor=0b05, idProduct=1761, bcdDevice=91.63 [ 710.963074][ T4808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.963806][ T4808] usb 1-1: Product: syz [ 710.971285][ T4808] usb 1-1: Manufacturer: syz [ 710.972098][ T4808] usb 1-1: SerialNumber: syz [ 711.039645][ T24] usb 2-1: device descriptor read/64, error -71 [ 711.346342][ T4808] usb 1-1: USB disconnect, device number 6 [ 711.350343][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 711.542733][ T24] usb 2-1: device descriptor read/64, error -71 [ 711.667207][ T24] usb usb2-port1: attempt power cycle [ 712.278062][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 712.358716][ T24] usb 2-1: device descriptor read/8, error -71 [ 712.419254][ T4956] FAULT_INJECTION: forcing a failure. [ 712.419254][ T4956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.420344][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.0.562 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 712.420980][ T4956] Hardware name: linux,dummy-virt (DT) [ 712.421417][ T4956] Call trace: [ 712.421772][ T4956] dump_backtrace+0x9c/0x11c [ 712.422258][ T4956] show_stack+0x18/0x24 [ 712.422790][ T4956] dump_stack_lvl+0xdc/0xf4 [ 712.423246][ T4956] dump_stack+0x1c/0x28 [ 712.423723][ T4956] should_fail_ex+0x510/0x5f4 [ 712.424180][ T4956] should_fail+0x14/0x20 [ 712.424793][ T4956] should_fail_usercopy+0x1c/0x2c [ 712.425345][ T4956] simple_read_from_buffer+0x90/0x1ec [ 712.425961][ T4956] proc_fail_nth_read+0x160/0x248 [ 712.426491][ T4956] vfs_read+0x18c/0x974 [ 712.426951][ T4956] ksys_read+0xf0/0x1dc [ 712.427379][ T4956] __arm64_sys_read+0x6c/0x9c [ 712.427851][ T4956] invoke_syscall+0x6c/0x258 [ 712.428292][ T4956] el0_svc_common.constprop.0+0xac/0x230 [ 712.428781][ T4956] do_el0_svc+0x40/0x58 [ 712.429215][ T4956] el0_svc+0x50/0x180 [ 712.429654][ T4956] el0t_64_sync_handler+0x100/0x12c [ 712.430140][ T4956] el0t_64_sync+0x190/0x194 [ 712.671196][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 712.737863][ T24] usb 2-1: device descriptor read/8, error -71 [ 712.858554][ T24] usb usb2-port1: unable to enumerate USB device [ 712.962013][ T30] audit: type=1400 audit(712.420:234): avc: denied { read } for pid=4957 comm="syz.0.563" name="loop-control" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 712.963138][ T30] audit: type=1400 audit(712.420:235): avc: denied { open } for pid=4957 comm="syz.0.563" path="/dev/loop-control" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 712.985851][ T30] audit: type=1400 audit(712.440:236): avc: denied { ioctl } for pid=4957 comm="syz.0.563" path="/dev/loop-control" dev="devtmpfs" ino=638 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 714.944241][ T4967] FAULT_INJECTION: forcing a failure. [ 714.944241][ T4967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.950161][ T4967] CPU: 1 UID: 0 PID: 4967 Comm: syz.0.567 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 714.951038][ T4967] Hardware name: linux,dummy-virt (DT) [ 714.951516][ T4967] Call trace: [ 714.951949][ T4967] dump_backtrace+0x9c/0x11c [ 714.952462][ T4967] show_stack+0x18/0x24 [ 714.952882][ T4967] dump_stack_lvl+0xdc/0xf4 [ 714.953354][ T4967] dump_stack+0x1c/0x28 [ 714.953787][ T4967] should_fail_ex+0x510/0x5f4 [ 714.954267][ T4967] should_fail+0x14/0x20 [ 714.954893][ T4967] should_fail_usercopy+0x1c/0x2c [ 714.955398][ T4967] copy_msghdr_from_user+0xa8/0x1fc [ 714.956050][ T4967] ___sys_sendmsg+0xfc/0x19c [ 714.956541][ T4967] __sys_sendmsg+0xe0/0x174 [ 714.957006][ T4967] __arm64_sys_sendmsg+0x70/0xa0 [ 714.957667][ T4967] invoke_syscall+0x6c/0x258 [ 714.958337][ T4967] el0_svc_common.constprop.0+0xac/0x230 [ 714.958975][ T4967] do_el0_svc+0x40/0x58 [ 714.959447][ T4967] el0_svc+0x50/0x180 [ 714.959911][ T4967] el0t_64_sync_handler+0x100/0x12c [ 714.960413][ T4967] el0t_64_sync+0x190/0x194 [ 717.141931][ T4975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4975 comm=syz.0.571 [ 717.928459][ T30] audit: type=1400 audit(717.390:237): avc: denied { ioctl } for pid=4976 comm="syz.0.572" path="socket:[9052]" dev="sockfs" ino=9052 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 718.546344][ T4980] FAULT_INJECTION: forcing a failure. [ 718.546344][ T4980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.547467][ T4980] CPU: 0 UID: 0 PID: 4980 Comm: syz.0.573 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 718.548102][ T4980] Hardware name: linux,dummy-virt (DT) [ 718.548551][ T4980] Call trace: [ 718.548951][ T4980] dump_backtrace+0x9c/0x11c [ 718.549452][ T4980] show_stack+0x18/0x24 [ 718.549876][ T4980] dump_stack_lvl+0xdc/0xf4 [ 718.550502][ T4980] dump_stack+0x1c/0x28 [ 718.550953][ T4980] should_fail_ex+0x510/0x5f4 [ 718.551426][ T4980] should_fail+0x14/0x20 [ 718.551857][ T4980] should_fail_usercopy+0x1c/0x2c [ 718.552321][ T4980] simple_read_from_buffer+0x90/0x1ec [ 718.552797][ T4980] proc_fail_nth_read+0x160/0x248 [ 718.553334][ T4980] vfs_read+0x18c/0x974 [ 718.553801][ T4980] ksys_read+0xf0/0x1dc [ 718.554295][ T4980] __arm64_sys_read+0x6c/0x9c [ 718.555025][ T4980] invoke_syscall+0x6c/0x258 [ 718.555583][ T4980] el0_svc_common.constprop.0+0xac/0x230 [ 718.556203][ T4980] do_el0_svc+0x40/0x58 [ 718.556646][ T4980] el0_svc+0x50/0x180 [ 718.557085][ T4980] el0t_64_sync_handler+0x100/0x12c [ 718.557577][ T4980] el0t_64_sync+0x190/0x194 [ 721.233163][ T30] audit: type=1400 audit(720.690:238): avc: denied { getopt } for pid=4989 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 721.976899][ T30] audit: type=1400 audit(721.430:239): avc: denied { setattr } for pid=4989 comm="syz.1.577" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 722.080026][ T30] audit: type=1400 audit(721.530:240): avc: denied { ioctl } for pid=4998 comm="syz.0.580" path="/dev/vhost-net" dev="devtmpfs" ino=718 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.639800][ T3416] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 726.789657][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 150 seconds [ 726.957565][ T3416] usb 1-1: Using ep0 maxpacket: 8 [ 727.047900][ T3416] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 727.049202][ T3416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.050053][ T3416] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.052147][ T3416] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 727.122156][ T3416] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.123535][ T3416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.124319][ T3416] usb 1-1: Product: ఇ [ 727.137721][ T3416] usb 1-1: Manufacturer: ఁ [ 727.138498][ T3416] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 727.643615][ T3416] usb 1-1: 0:2 : does not exist [ 727.939104][ T3416] usb 1-1: USB disconnect, device number 7 [ 728.589866][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.794384][ T5035] FAULT_INJECTION: forcing a failure. [ 728.794384][ T5035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.798448][ T5035] CPU: 1 UID: 0 PID: 5035 Comm: syz.0.595 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 728.799251][ T5035] Hardware name: linux,dummy-virt (DT) [ 728.800214][ T5035] Call trace: [ 728.800664][ T5035] dump_backtrace+0x9c/0x11c [ 728.802114][ T5035] show_stack+0x18/0x24 [ 728.802558][ T5035] dump_stack_lvl+0xdc/0xf4 [ 728.802873][ T5035] dump_stack+0x1c/0x28 [ 728.803236][ T5035] should_fail_ex+0x510/0x5f4 [ 728.803546][ T5035] should_fail+0x14/0x20 [ 728.803856][ T5035] should_fail_usercopy+0x1c/0x2c [ 728.804177][ T5035] strncpy_from_user+0x34/0x2c8 [ 728.804822][ T5035] setxattr_copy+0x6c/0x174 [ 728.805405][ T5035] path_setxattr+0xdc/0x1c0 [ 728.805902][ T5035] __arm64_sys_lsetxattr+0xa8/0x104 [ 728.806193][ T5035] invoke_syscall+0x6c/0x258 [ 728.806502][ T5035] el0_svc_common.constprop.0+0xac/0x230 [ 728.806774][ T5035] do_el0_svc+0x40/0x58 [ 728.807022][ T5035] el0_svc+0x50/0x180 [ 728.807278][ T5035] el0t_64_sync_handler+0x100/0x12c [ 728.807545][ T5035] el0t_64_sync+0x190/0x194 [ 743.908451][ T5114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5114 comm=syz.1.623 [ 748.839173][ T5139] FAULT_INJECTION: forcing a failure. [ 748.839173][ T5139] name failslab, interval 1, probability 0, space 0, times 0 [ 748.840460][ T5139] CPU: 0 UID: 0 PID: 5139 Comm: syz.0.633 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 748.841182][ T5139] Hardware name: linux,dummy-virt (DT) [ 748.841779][ T5139] Call trace: [ 748.842262][ T5139] dump_backtrace+0x9c/0x11c [ 748.842862][ T5139] show_stack+0x18/0x24 [ 748.843418][ T5139] dump_stack_lvl+0xdc/0xf4 [ 748.843969][ T5139] dump_stack+0x1c/0x28 [ 748.844585][ T5139] should_fail_ex+0x510/0x5f4 [ 748.845172][ T5139] should_failslab+0xbc/0x11c [ 748.845829][ T5139] __kmalloc_noprof+0xd0/0x3d0 [ 748.846406][ T5139] tomoyo_realpath_from_path+0x90/0x54c [ 748.846980][ T5139] tomoyo_path_number_perm+0x200/0x458 [ 748.847558][ T5139] tomoyo_file_ioctl+0x1c/0x28 [ 748.848338][ T5139] security_file_ioctl+0x70/0xc4 [ 748.848928][ T5139] __arm64_sys_ioctl+0x94/0x190 [ 748.849545][ T5139] invoke_syscall+0x6c/0x258 [ 748.850378][ T5139] el0_svc_common.constprop.0+0xac/0x230 [ 748.851046][ T5139] do_el0_svc+0x40/0x58 [ 748.851584][ T5139] el0_svc+0x50/0x180 [ 748.852210][ T5139] el0t_64_sync_handler+0x100/0x12c [ 748.852803][ T5139] el0t_64_sync+0x190/0x194 [ 748.870079][ T5139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.542413][ T30] audit: type=1400 audit(753.990:241): avc: denied { setattr } for pid=5157 comm="syz.1.641" name="ptmx" dev="devtmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 755.941292][ T5168] FAULT_INJECTION: forcing a failure. [ 755.941292][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.942100][ T5168] CPU: 0 UID: 0 PID: 5168 Comm: syz.0.645 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 755.942583][ T5168] Hardware name: linux,dummy-virt (DT) [ 755.942834][ T5168] Call trace: [ 755.943030][ T5168] dump_backtrace+0x9c/0x11c [ 755.943384][ T5168] show_stack+0x18/0x24 [ 755.943745][ T5168] dump_stack_lvl+0xdc/0xf4 [ 755.944008][ T5168] dump_stack+0x1c/0x28 [ 755.944241][ T5168] should_fail_ex+0x510/0x5f4 [ 755.944649][ T5168] should_fail+0x14/0x20 [ 755.945065][ T5168] should_fail_usercopy+0x1c/0x2c [ 755.945511][ T5168] copy_msghdr_from_user+0xa8/0x1fc [ 755.945849][ T5168] ___sys_sendmsg+0xfc/0x19c [ 755.946312][ T5168] __sys_sendmmsg+0x160/0x48c [ 755.946745][ T5168] __arm64_sys_sendmmsg+0x8c/0xd0 [ 755.947091][ T5168] invoke_syscall+0x6c/0x258 [ 755.947468][ T5168] el0_svc_common.constprop.0+0xac/0x230 [ 755.947827][ T5168] do_el0_svc+0x40/0x58 [ 755.948290][ T5168] el0_svc+0x50/0x180 [ 755.948623][ T5168] el0t_64_sync_handler+0x100/0x12c [ 755.949023][ T5168] el0t_64_sync+0x190/0x194 [ 756.563273][ T5173] FAULT_INJECTION: forcing a failure. [ 756.563273][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 756.565950][ T5173] CPU: 1 UID: 0 PID: 5173 Comm: syz.0.647 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 756.568387][ T5173] Hardware name: linux,dummy-virt (DT) [ 756.569780][ T5173] Call trace: [ 756.570768][ T5173] dump_backtrace+0x9c/0x11c [ 756.572015][ T5173] show_stack+0x18/0x24 [ 756.573131][ T5173] dump_stack_lvl+0xdc/0xf4 [ 756.574411][ T5173] dump_stack+0x1c/0x28 [ 756.575896][ T5173] should_fail_ex+0x510/0x5f4 [ 756.577224][ T5173] should_failslab+0xbc/0x11c [ 756.578473][ T5173] __kmalloc_noprof+0xd0/0x3d0 [ 756.580284][ T5173] tomoyo_encode2+0xa8/0x2c0 [ 756.581720][ T5173] tomoyo_realpath_from_path+0x124/0x54c [ 756.582780][ T5173] tomoyo_path_number_perm+0x200/0x458 [ 756.583338][ T5173] tomoyo_file_ioctl+0x1c/0x28 [ 756.583820][ T5173] security_file_ioctl+0x70/0xc4 [ 756.584325][ T5173] __arm64_sys_ioctl+0x94/0x190 [ 756.585827][ T5173] invoke_syscall+0x6c/0x258 [ 756.586460][ T5173] el0_svc_common.constprop.0+0xac/0x230 [ 756.588646][ T5173] do_el0_svc+0x40/0x58 [ 756.590376][ T5173] el0_svc+0x50/0x180 [ 756.591528][ T5173] el0t_64_sync_handler+0x100/0x12c [ 756.593147][ T5173] el0t_64_sync+0x190/0x194 [ 756.617218][ T5173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.849102][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 180 seconds [ 757.793067][ T30] audit: type=1400 audit(757.250:242): avc: denied { ioctl } for pid=5179 comm="syz.0.650" path="socket:[10409]" dev="sockfs" ino=10409 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 763.407282][ T3417] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 763.627425][ T3417] usb 2-1: Using ep0 maxpacket: 8 [ 763.693333][ T3417] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 763.695979][ T3417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.697603][ T3417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 763.698475][ T3417] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 763.741673][ T3417] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 763.743511][ T3417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.744283][ T3417] usb 2-1: Product: ఇ [ 763.755658][ T3417] usb 2-1: Manufacturer: ఁ [ 763.756703][ T3417] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 764.103568][ T3417] usb 2-1: 0:2 : does not exist [ 764.301791][ T3417] usb 2-1: USB disconnect, device number 13 [ 765.280926][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.469046][ T4808] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 767.817078][ T4808] usb 2-1: Using ep0 maxpacket: 8 [ 767.980105][ T4808] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 767.981344][ T4808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.982340][ T4808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.983760][ T4808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 768.057617][ T4808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.058848][ T4808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.059745][ T4808] usb 2-1: Product: ఇ [ 768.060388][ T4808] usb 2-1: Manufacturer: ఁ [ 768.061049][ T4808] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 768.532140][ T4808] usb 2-1: 0:2 : does not exist [ 768.838031][ T4808] usb 2-1: USB disconnect, device number 14 [ 770.094206][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.380560][ T30] audit: type=1400 audit(769.840:243): avc: denied { nlmsg_tty_audit } for pid=5230 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 773.257976][ T5244] FAULT_INJECTION: forcing a failure. [ 773.257976][ T5244] name failslab, interval 1, probability 0, space 0, times 0 [ 773.258766][ T5244] CPU: 1 UID: 0 PID: 5244 Comm: syz.1.672 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 773.259145][ T5244] Hardware name: linux,dummy-virt (DT) [ 773.259409][ T5244] Call trace: [ 773.259606][ T5244] dump_backtrace+0x9c/0x11c [ 773.259885][ T5244] show_stack+0x18/0x24 [ 773.260109][ T5244] dump_stack_lvl+0xdc/0xf4 [ 773.260371][ T5244] dump_stack+0x1c/0x28 [ 773.260662][ T5244] should_fail_ex+0x510/0x5f4 [ 773.260925][ T5244] should_failslab+0xbc/0x11c [ 773.261197][ T5244] kmem_cache_alloc_noprof+0x74/0x2e0 [ 773.261477][ T5244] security_file_alloc+0x3c/0x1bc [ 773.261740][ T5244] init_file+0x8c/0x238 [ 773.261996][ T5244] alloc_empty_file+0x7c/0x174 [ 773.262415][ T5244] path_openat+0xd0/0x2380 [ 773.262728][ T5244] do_filp_open+0x16c/0x330 [ 773.262983][ T5244] do_sys_openat2+0x12c/0x160 [ 773.263251][ T5244] __arm64_sys_openat+0x12c/0x1b8 [ 773.263648][ T5244] invoke_syscall+0x6c/0x258 [ 773.264197][ T5244] el0_svc_common.constprop.0+0xac/0x230 [ 773.265058][ T5244] do_el0_svc+0x40/0x58 [ 773.265632][ T5244] el0_svc+0x50/0x180 [ 773.265994][ T5244] el0t_64_sync_handler+0x100/0x12c [ 773.266286][ T5244] el0t_64_sync+0x190/0x194 [ 774.913936][ T5256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5256 comm=syz.0.676 [ 778.896260][ T30] audit: type=1400 audit(778.350:244): avc: denied { write } for pid=5275 comm="syz.1.683" path="socket:[10579]" dev="sockfs" ino=10579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 785.093785][ T3373] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 785.297552][ T30] audit: type=1400 audit(784.750:245): avc: denied { create } for pid=5299 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 785.326208][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 785.446220][ T3373] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 785.447307][ T3373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.448199][ T3373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.449093][ T3373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 785.511249][ T3373] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.512340][ T3373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.513073][ T3373] usb 1-1: Product: ఇ [ 785.513707][ T3373] usb 1-1: Manufacturer: ఁ [ 785.514436][ T3373] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 786.456994][ T3373] usb 1-1: 0:2 : does not exist [ 786.701424][ T3373] usb 1-1: USB disconnect, device number 8 [ 787.016187][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 210 seconds [ 788.349218][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.342906][ T30] audit: type=1400 audit(788.800:246): avc: denied { create } for pid=5316 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 789.411105][ T30] audit: type=1400 audit(788.870:247): avc: denied { setopt } for pid=5316 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 789.501323][ T30] audit: type=1400 audit(788.950:248): avc: denied { write } for pid=5316 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 789.590511][ T4808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 789.814077][ T4808] usb 1-1: Using ep0 maxpacket: 8 [ 789.886911][ T4808] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 789.888091][ T4808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.888993][ T4808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.890025][ T4808] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 789.956782][ T4808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.958678][ T4808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.959587][ T4808] usb 1-1: Product: ఇ [ 789.960287][ T4808] usb 1-1: Manufacturer: ఁ [ 789.961032][ T4808] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 790.310041][ T4808] usb 1-1: 0:2 : does not exist [ 790.507680][ T4808] usb 1-1: USB disconnect, device number 9 [ 790.967095][ T30] audit: type=1400 audit(790.420:249): avc: denied { read } for pid=5322 comm="syz.0.701" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 790.973506][ T30] audit: type=1400 audit(790.430:250): avc: denied { open } for pid=5322 comm="syz.0.701" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 791.176495][ T30] audit: type=1400 audit(790.620:251): avc: denied { ioctl } for pid=5322 comm="syz.0.701" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 791.182165][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.218817][ T30] audit: type=1400 audit(790.680:252): avc: denied { write } for pid=5322 comm="syz.0.701" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 793.440869][ T5338] fuse: Bad value for 'user_id' [ 793.441494][ T5338] fuse: Bad value for 'user_id' [ 802.066414][ T5378] FAULT_INJECTION: forcing a failure. [ 802.066414][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.067379][ T5378] CPU: 1 UID: 0 PID: 5378 Comm: syz.0.727 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 802.067796][ T5378] Hardware name: linux,dummy-virt (DT) [ 802.068098][ T5378] Call trace: [ 802.068347][ T5378] dump_backtrace+0x9c/0x11c [ 802.068748][ T5378] show_stack+0x18/0x24 [ 802.069032][ T5378] dump_stack_lvl+0xdc/0xf4 [ 802.069342][ T5378] dump_stack+0x1c/0x28 [ 802.069717][ T5378] should_fail_ex+0x510/0x5f4 [ 802.070098][ T5378] should_fail+0x14/0x20 [ 802.070522][ T5378] should_fail_usercopy+0x1c/0x2c [ 802.070892][ T5378] copy_msghdr_from_user+0xa8/0x1fc [ 802.071418][ T5378] ___sys_sendmsg+0xfc/0x19c [ 802.071820][ T5378] __sys_sendmsg+0xe0/0x174 [ 802.072253][ T5378] __arm64_sys_sendmsg+0x70/0xa0 [ 802.072635][ T5378] invoke_syscall+0x6c/0x258 [ 802.073013][ T5378] el0_svc_common.constprop.0+0xac/0x230 [ 802.073408][ T5378] do_el0_svc+0x40/0x58 [ 802.073782][ T5378] el0_svc+0x50/0x180 [ 802.074191][ T5378] el0t_64_sync_handler+0x100/0x12c [ 802.074933][ T5378] el0t_64_sync+0x190/0x194 [ 802.319163][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 802.627998][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 802.677898][ T5381] serio: Serial port pts0 [ 802.882566][ T29] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 802.883938][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.885951][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.886480][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 802.940096][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.940797][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.941192][ T29] usb 2-1: Product: ఇ [ 802.941537][ T29] usb 2-1: Manufacturer: ఁ [ 802.941856][ T29] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 803.246835][ T29] usb 2-1: 0:2 : does not exist [ 803.330905][ T29] usb 2-1: USB disconnect, device number 15 [ 804.003778][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.066415][ T30] audit: type=1400 audit(807.520:253): avc: denied { read } for pid=5389 comm="syz.1.731" path="socket:[9960]" dev="sockfs" ino=9960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 808.673483][ T5393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 810.482927][ T4808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 810.848649][ T4808] usb 2-1: Using ep0 maxpacket: 8 [ 810.890433][ T4808] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 810.891122][ T4808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.891616][ T4808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.892142][ T4808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 811.022850][ T4808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.023733][ T4808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.024176][ T4808] usb 2-1: Product: ఇ [ 811.026943][ T4808] usb 2-1: Manufacturer: ఁ [ 811.027399][ T4808] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 811.365819][ T4808] usb 2-1: 0:2 : does not exist [ 811.676903][ T4808] usb 2-1: USB disconnect, device number 16 [ 812.185565][ T30] audit: type=1400 audit(811.640:254): avc: denied { sqpoll } for pid=5402 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 812.517748][ T5404] x_tables: duplicate underflow at hook 1 [ 812.940739][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.852471][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 815.175870][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 815.215620][ T29] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 815.216653][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.217645][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.218553][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 815.298453][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 815.299370][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.299969][ T29] usb 2-1: Product: ఇ [ 815.300626][ T29] usb 2-1: Manufacturer: ఁ [ 815.301118][ T29] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 815.638560][ T29] usb 2-1: 0:2 : does not exist [ 815.897926][ T29] usb 2-1: USB disconnect, device number 17 [ 816.627886][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.520986][ T5436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5436 comm=syz.1.749 [ 817.658402][ T3417] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 817.771265][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 240 seconds [ 817.979081][ T3417] usb 1-1: Using ep0 maxpacket: 8 [ 818.002700][ T3417] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 818.003494][ T3417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.004245][ T3417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.005613][ T3417] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 818.102105][ T3417] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.103132][ T3417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.115445][ T3417] usb 1-1: Product: ఇ [ 818.117177][ T3417] usb 1-1: Manufacturer: ఁ [ 818.118003][ T3417] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 818.647634][ T3417] usb 1-1: 0:2 : does not exist [ 818.968672][ T3417] usb 1-1: USB disconnect, device number 10 [ 820.226908][ T30] audit: type=1400 audit(819.680:255): avc: denied { connect } for pid=5443 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 820.251765][ T30] audit: type=1400 audit(819.710:256): avc: denied { name_connect } for pid=5443 comm="syz.1.753" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 820.747934][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.221835][ T5450] FAULT_INJECTION: forcing a failure. [ 821.221835][ T5450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.223141][ T5450] CPU: 1 UID: 0 PID: 5450 Comm: syz.1.756 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 821.223844][ T5450] Hardware name: linux,dummy-virt (DT) [ 821.224413][ T5450] Call trace: [ 821.224907][ T5450] dump_backtrace+0x9c/0x11c [ 821.225738][ T5450] show_stack+0x18/0x24 [ 821.226311][ T5450] dump_stack_lvl+0xdc/0xf4 [ 821.226920][ T5450] dump_stack+0x1c/0x28 [ 821.227453][ T5450] should_fail_ex+0x510/0x5f4 [ 821.228039][ T5450] should_fail+0x14/0x20 [ 821.228572][ T5450] should_fail_usercopy+0x1c/0x2c [ 821.229176][ T5450] do_sock_getsockopt+0x21c/0x61c [ 821.229783][ T5450] __sys_getsockopt+0xdc/0x178 [ 821.230361][ T5450] __arm64_sys_getsockopt+0xa4/0x100 [ 821.230930][ T5450] invoke_syscall+0x6c/0x258 [ 821.231427][ T5450] el0_svc_common.constprop.0+0xac/0x230 [ 821.231960][ T5450] do_el0_svc+0x40/0x58 [ 821.232491][ T5450] el0_svc+0x50/0x180 [ 821.233041][ T5450] el0t_64_sync_handler+0x100/0x12c [ 821.233605][ T5450] el0t_64_sync+0x190/0x194 [ 822.190271][ T30] audit: type=1400 audit(821.630:257): avc: denied { connect } for pid=5452 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 823.759939][ T5465] FAULT_INJECTION: forcing a failure. [ 823.759939][ T5465] name failslab, interval 1, probability 0, space 0, times 0 [ 823.760666][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.1.758 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 823.761078][ T5465] Hardware name: linux,dummy-virt (DT) [ 823.761623][ T5465] Call trace: [ 823.762118][ T5465] dump_backtrace+0x9c/0x11c [ 823.762531][ T5465] show_stack+0x18/0x24 [ 823.762797][ T5465] dump_stack_lvl+0xdc/0xf4 [ 823.763045][ T5465] dump_stack+0x1c/0x28 [ 823.763443][ T5465] should_fail_ex+0x510/0x5f4 [ 823.763885][ T5465] should_failslab+0xbc/0x11c [ 823.764228][ T5465] __kmalloc_noprof+0xd0/0x3d0 [ 823.764890][ T5465] tomoyo_realpath_from_path+0x90/0x54c [ 823.765237][ T5465] tomoyo_path_number_perm+0x200/0x458 [ 823.765577][ T5465] tomoyo_file_ioctl+0x1c/0x28 [ 823.766039][ T5465] security_file_ioctl+0x70/0xc4 [ 823.766459][ T5465] __arm64_sys_ioctl+0x94/0x190 [ 823.766787][ T5465] invoke_syscall+0x6c/0x258 [ 823.767095][ T5465] el0_svc_common.constprop.0+0xac/0x230 [ 823.767512][ T5465] do_el0_svc+0x40/0x58 [ 823.767851][ T5465] el0_svc+0x50/0x180 [ 823.768242][ T5465] el0t_64_sync_handler+0x100/0x12c [ 823.768653][ T5465] el0t_64_sync+0x190/0x194 [ 823.773653][ T5465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 823.783825][ T30] audit: type=1400 audit(823.240:258): avc: denied { ioctl } for pid=5452 comm="syz.1.758" path="socket:[10083]" dev="sockfs" ino=10083 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 825.348711][ T3103] udevd[3103]: worker [3427] /devices/virtual/block/nbd0 timeout; kill it [ 825.351613][ T3103] udevd[3103]: seq 6602 '/devices/virtual/block/nbd0' killed [ 825.709439][ T5478] fuse: Bad value for 'rootmode' [ 828.756345][ T5494] FAULT_INJECTION: forcing a failure. [ 828.756345][ T5494] name failslab, interval 1, probability 0, space 0, times 0 [ 828.757351][ T5494] CPU: 1 UID: 0 PID: 5494 Comm: syz.1.772 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 828.757747][ T5494] Hardware name: linux,dummy-virt (DT) [ 828.758074][ T5494] Call trace: [ 828.758333][ T5494] dump_backtrace+0x9c/0x11c [ 828.758621][ T5494] show_stack+0x18/0x24 [ 828.758915][ T5494] dump_stack_lvl+0xdc/0xf4 [ 828.759250][ T5494] dump_stack+0x1c/0x28 [ 828.759489][ T5494] should_fail_ex+0x510/0x5f4 [ 828.759888][ T5494] should_failslab+0xbc/0x11c [ 828.760240][ T5494] kmem_cache_alloc_node_noprof+0x7c/0x308 [ 828.760594][ T5494] __alloc_skb+0x208/0x2f0 [ 828.760960][ T5494] netlink_alloc_large_skb+0xac/0xd8 [ 828.761329][ T5494] netlink_sendmsg+0x4ac/0xa4c [ 828.761664][ T5494] __sock_sendmsg+0xc8/0x168 [ 828.761989][ T5494] ____sys_sendmsg+0x550/0x6e0 [ 828.762359][ T5494] ___sys_sendmsg+0x11c/0x19c [ 828.762684][ T5494] __sys_sendmsg+0xe0/0x174 [ 828.763008][ T5494] __arm64_sys_sendmsg+0x70/0xa0 [ 828.763357][ T5494] invoke_syscall+0x6c/0x258 [ 828.763713][ T5494] el0_svc_common.constprop.0+0xac/0x230 [ 828.764092][ T5494] do_el0_svc+0x40/0x58 [ 828.764522][ T5494] el0_svc+0x50/0x180 [ 828.765022][ T5494] el0t_64_sync_handler+0x100/0x12c [ 828.765509][ T5494] el0t_64_sync+0x190/0x194 [ 829.319106][ T5497] fuse: Bad value for 'rootmode' [ 832.856587][ T5518] fuse: Unknown parameter 'use00000000000000000000' [ 833.671457][ T5525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=5525 comm=syz.1.781 [ 833.739017][ T5525] FAULT_INJECTION: forcing a failure. [ 833.739017][ T5525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.742895][ T5525] CPU: 0 UID: 0 PID: 5525 Comm: syz.1.781 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 833.743778][ T5525] Hardware name: linux,dummy-virt (DT) [ 833.744196][ T5525] Call trace: [ 833.744612][ T5525] dump_backtrace+0x9c/0x11c [ 833.744989][ T5525] show_stack+0x18/0x24 [ 833.745253][ T5525] dump_stack_lvl+0xdc/0xf4 [ 833.745511][ T5525] dump_stack+0x1c/0x28 [ 833.746063][ T5525] should_fail_ex+0x510/0x5f4 [ 833.746635][ T5525] should_fail+0x14/0x20 [ 833.747169][ T5525] should_fail_usercopy+0x1c/0x2c [ 833.747715][ T5525] copy_msghdr_from_user+0xa8/0x1fc [ 833.748283][ T5525] ___sys_sendmsg+0xfc/0x19c [ 833.748818][ T5525] __sys_sendmsg+0xe0/0x174 [ 833.749356][ T5525] __arm64_sys_sendmsg+0x70/0xa0 [ 833.749901][ T5525] invoke_syscall+0x6c/0x258 [ 833.750483][ T5525] el0_svc_common.constprop.0+0xac/0x230 [ 833.750983][ T5525] do_el0_svc+0x40/0x58 [ 833.751215][ T5525] el0_svc+0x50/0x180 [ 833.751467][ T5525] el0t_64_sync_handler+0x100/0x12c [ 833.751722][ T5525] el0t_64_sync+0x190/0x194 [ 836.973026][ T30] audit: type=1400 audit(836.430:259): avc: denied { create } for pid=5542 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 837.878696][ T5548] FAULT_INJECTION: forcing a failure. [ 837.878696][ T5548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.879433][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.1.789 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 837.880010][ T5548] Hardware name: linux,dummy-virt (DT) [ 837.880501][ T5548] Call trace: [ 837.880920][ T5548] dump_backtrace+0x9c/0x11c [ 837.881459][ T5548] show_stack+0x18/0x24 [ 837.881726][ T5548] dump_stack_lvl+0xdc/0xf4 [ 837.881971][ T5548] dump_stack+0x1c/0x28 [ 837.882199][ T5548] should_fail_ex+0x510/0x5f4 [ 837.882514][ T5548] should_fail+0x14/0x20 [ 837.882751][ T5548] should_fail_usercopy+0x1c/0x2c [ 837.882994][ T5548] copy_msghdr_from_user+0xa8/0x1fc [ 837.883442][ T5548] ___sys_sendmsg+0xfc/0x19c [ 837.883837][ T5548] __sys_sendmsg+0xe0/0x174 [ 837.884075][ T5548] __arm64_sys_sendmsg+0x70/0xa0 [ 837.884325][ T5548] invoke_syscall+0x6c/0x258 [ 837.884784][ T5548] el0_svc_common.constprop.0+0xac/0x230 [ 837.885074][ T5548] do_el0_svc+0x40/0x58 [ 837.885489][ T5548] el0_svc+0x50/0x180 [ 837.885741][ T5548] el0t_64_sync_handler+0x100/0x12c [ 837.885993][ T5548] el0t_64_sync+0x190/0x194 [ 841.562972][ T5561] FAULT_INJECTION: forcing a failure. [ 841.562972][ T5561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.564082][ T5561] CPU: 1 UID: 0 PID: 5561 Comm: syz.1.794 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 841.565109][ T5561] Hardware name: linux,dummy-virt (DT) [ 841.565686][ T5561] Call trace: [ 841.566071][ T5561] dump_backtrace+0x9c/0x11c [ 841.566639][ T5561] show_stack+0x18/0x24 [ 841.567076][ T5561] dump_stack_lvl+0xdc/0xf4 [ 841.567602][ T5561] dump_stack+0x1c/0x28 [ 841.568036][ T5561] should_fail_ex+0x510/0x5f4 [ 841.568516][ T5561] should_fail+0x14/0x20 [ 841.568953][ T5561] should_fail_usercopy+0x1c/0x2c [ 841.569445][ T5561] copy_msghdr_from_user+0xa8/0x1fc [ 841.569935][ T5561] ___sys_sendmsg+0xfc/0x19c [ 841.570428][ T5561] __sys_sendmsg+0xe0/0x174 [ 841.570914][ T5561] __arm64_sys_sendmsg+0x70/0xa0 [ 841.571392][ T5561] invoke_syscall+0x6c/0x258 [ 841.571858][ T5561] el0_svc_common.constprop.0+0xac/0x230 [ 841.572338][ T5561] do_el0_svc+0x40/0x58 [ 841.572790][ T5561] el0_svc+0x50/0x180 [ 841.573263][ T5561] el0t_64_sync_handler+0x100/0x12c [ 841.573747][ T5561] el0t_64_sync+0x190/0x194 [ 842.437387][ T5564] fuse: Unknown parameter 'use00000000000000000000' [ 844.909853][ T5578] fuse: Unknown parameter 'user_i00000000000000000000' [ 845.513586][ T30] audit: type=1400 audit(844.960:260): avc: denied { create } for pid=5574 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 845.593577][ T30] audit: type=1400 audit(845.050:261): avc: denied { write } for pid=5574 comm="syz.0.799" path="socket:[11354]" dev="sockfs" ino=11354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 847.000533][ T30] audit: type=1400 audit(846.460:262): avc: denied { read } for pid=5588 comm="syz.1.805" dev="nsfs" ino=4026532721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 847.011808][ T30] audit: type=1400 audit(846.460:263): avc: denied { open } for pid=5588 comm="syz.1.805" path="net:[4026532721]" dev="nsfs" ino=4026532721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 848.402885][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 270 seconds [ 848.470364][ T30] audit: type=1400 audit(847.930:264): avc: denied { ioctl } for pid=5595 comm="syz.0.807" path="socket:[11101]" dev="sockfs" ino=11101 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 848.500863][ T30] audit: type=1400 audit(847.940:265): avc: denied { getopt } for pid=5595 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 852.279621][ T5620] FAULT_INJECTION: forcing a failure. [ 852.279621][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 852.280415][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz.0.814 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 852.280770][ T5620] Hardware name: linux,dummy-virt (DT) [ 852.281049][ T5620] Call trace: [ 852.281308][ T5620] dump_backtrace+0x9c/0x11c [ 852.281909][ T5620] show_stack+0x18/0x24 [ 852.282405][ T5620] dump_stack_lvl+0xdc/0xf4 [ 852.283269][ T5620] dump_stack+0x1c/0x28 [ 852.283771][ T5620] should_fail_ex+0x510/0x5f4 [ 852.284296][ T5620] should_failslab+0xbc/0x11c [ 852.285009][ T5620] kmem_cache_alloc_noprof+0x74/0x2e0 [ 852.285589][ T5620] getname_flags.part.0+0x48/0x3d4 [ 852.286104][ T5620] getname_flags+0x78/0xc4 [ 852.286696][ T5620] user_path_at+0x2c/0x70 [ 852.287300][ T5620] __arm64_sys_name_to_handle_at+0x138/0x6b8 [ 852.287938][ T5620] invoke_syscall+0x6c/0x258 [ 852.288750][ T5620] el0_svc_common.constprop.0+0xac/0x230 [ 852.289607][ T5620] do_el0_svc+0x40/0x58 [ 852.290114][ T5620] el0_svc+0x50/0x180 [ 852.290725][ T5620] el0t_64_sync_handler+0x100/0x12c [ 852.291232][ T5620] el0t_64_sync+0x190/0x194 [ 854.141568][ T30] audit: type=1400 audit(853.600:266): avc: denied { read } for pid=5627 comm="syz.1.818" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 855.907367][ T5640] FAULT_INJECTION: forcing a failure. [ 855.907367][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 855.908723][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz.0.822 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 855.909646][ T5640] Hardware name: linux,dummy-virt (DT) [ 855.910140][ T5640] Call trace: [ 855.910628][ T5640] dump_backtrace+0x9c/0x11c [ 855.911228][ T5640] show_stack+0x18/0x24 [ 855.911727][ T5640] dump_stack_lvl+0xdc/0xf4 [ 855.912225][ T5640] dump_stack+0x1c/0x28 [ 855.912703][ T5640] should_fail_ex+0x510/0x5f4 [ 855.913234][ T5640] should_failslab+0xbc/0x11c [ 855.913728][ T5640] __kmalloc_node_track_caller_noprof+0xd0/0x428 [ 855.914333][ T5640] kstrdup+0x48/0x90 [ 855.915027][ T5640] __request_module+0x234/0x580 [ 855.915687][ T5640] ctrl_getfamily+0x19c/0x430 [ 855.916264][ T5640] genl_family_rcv_msg_doit+0x1b8/0x280 [ 855.916832][ T5640] genl_rcv_msg+0x3ec/0x5bc [ 855.917470][ T5640] netlink_rcv_skb+0x18c/0x330 [ 855.918056][ T5640] genl_rcv+0x38/0x50 [ 855.918686][ T5640] netlink_unicast+0x3c0/0x670 [ 855.919331][ T5640] netlink_sendmsg+0x654/0xa4c [ 855.920114][ T5640] __sock_sendmsg+0xc8/0x168 [ 855.920754][ T5640] __sys_sendto+0x1a8/0x254 [ 855.921312][ T5640] __arm64_sys_sendto+0xc0/0x134 [ 855.921832][ T5640] invoke_syscall+0x6c/0x258 [ 855.922418][ T5640] el0_svc_common.constprop.0+0xac/0x230 [ 855.922950][ T5640] do_el0_svc+0x40/0x58 [ 855.923443][ T5640] el0_svc+0x50/0x180 [ 855.923930][ T5640] el0t_64_sync_handler+0x100/0x12c [ 855.924581][ T5640] el0t_64_sync+0x190/0x194 [ 858.016032][ T30] audit: type=1400 audit(857.470:267): avc: denied { execute } for pid=5651 comm="syz.0.829" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 860.319978][ T5670] fuse: Unknown parameter 'user_id00000000000000000000' [ 863.469804][ T5684] fuse: Unknown parameter 'user_id00000000000000000000' [ 866.826303][ T3373] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 867.007834][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 867.043432][ T3373] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 867.046455][ T3373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.047478][ T3373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.048428][ T3373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 867.091274][ T3373] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.092334][ T3373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.093033][ T3373] usb 1-1: Product: ఇ [ 867.093623][ T3373] usb 1-1: Manufacturer: ఁ [ 867.094220][ T3373] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 867.409385][ T3373] usb 1-1: 0:2 : does not exist [ 867.709034][ T3373] usb 1-1: USB disconnect, device number 11 [ 868.946637][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.321906][ T5717] serio: Serial port pts0 [ 877.398203][ T5750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5750 comm=syz.1.867 [ 878.450077][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 300 seconds [ 885.519074][ T5782] serio: Serial port pts0 [ 889.153458][ T5790] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5790 comm=syz.1.881 [ 889.227618][ T5790] lo: entered promiscuous mode [ 889.269661][ T5789] lo: left promiscuous mode [ 894.797781][ T30] audit: type=1400 audit(894.250:268): avc: denied { accept } for pid=5800 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 899.269898][ T5810] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5810 comm=syz.0.886 [ 899.337301][ T5810] lo: entered promiscuous mode [ 899.351110][ T5809] lo: left promiscuous mode [ 902.142444][ T5820] serio: Serial port pts0 [ 908.529186][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 330 seconds [ 914.378717][ T5847] FAULT_INJECTION: forcing a failure. [ 914.378717][ T5847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.379913][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.1.900 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 914.380593][ T5847] Hardware name: linux,dummy-virt (DT) [ 914.381073][ T5847] Call trace: [ 914.381482][ T5847] dump_backtrace+0x9c/0x11c [ 914.382007][ T5847] show_stack+0x18/0x24 [ 914.382493][ T5847] dump_stack_lvl+0xdc/0xf4 [ 914.382957][ T5847] dump_stack+0x1c/0x28 [ 914.383428][ T5847] should_fail_ex+0x510/0x5f4 [ 914.383983][ T5847] should_fail+0x14/0x20 [ 914.384546][ T5847] should_fail_usercopy+0x1c/0x2c [ 914.385212][ T5847] simple_read_from_buffer+0x90/0x1ec [ 914.385773][ T5847] proc_fail_nth_read+0x160/0x248 [ 914.387003][ T5847] vfs_read+0x18c/0x974 [ 914.387507][ T5847] ksys_read+0xf0/0x1dc [ 914.387978][ T5847] __arm64_sys_read+0x6c/0x9c [ 914.388484][ T5847] invoke_syscall+0x6c/0x258 [ 914.389213][ T5847] el0_svc_common.constprop.0+0xac/0x230 [ 914.389960][ T5847] do_el0_svc+0x40/0x58 [ 914.390573][ T5847] el0_svc+0x50/0x180 [ 914.391110][ T5847] el0t_64_sync_handler+0x100/0x12c [ 914.391671][ T5847] el0t_64_sync+0x190/0x194 [ 915.006444][ T30] audit: type=1400 audit(914.440:269): avc: denied { read } for pid=5849 comm="syz.1.902" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.009691][ T30] audit: type=1400 audit(914.470:270): avc: denied { open } for pid=5849 comm="syz.1.902" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.073538][ T30] audit: type=1400 audit(914.530:271): avc: denied { ioctl } for pid=5849 comm="syz.1.902" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.547473][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 915.796847][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 915.819079][ T29] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 915.820124][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.823059][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 915.824014][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 915.871222][ T29] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 915.872410][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.872950][ T29] usb 1-1: Product: ఇ [ 915.873233][ T29] usb 1-1: Manufacturer: ఁ [ 915.873584][ T29] usb 1-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 916.323272][ T29] usb 1-1: 0:2 : does not exist [ 916.380452][ T29] usb 1-1: USB disconnect, device number 12 [ 917.084033][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.596809][ T30] audit: type=1400 audit(918.050:272): avc: denied { accept } for pid=5855 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 920.282730][ T5863] serio: Serial port pts0 [ 925.727380][ T5884] FAULT_INJECTION: forcing a failure. [ 925.727380][ T5884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.728491][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.1.912 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 925.729099][ T5884] Hardware name: linux,dummy-virt (DT) [ 925.729547][ T5884] Call trace: [ 925.729946][ T5884] dump_backtrace+0x9c/0x11c [ 925.730527][ T5884] show_stack+0x18/0x24 [ 925.730971][ T5884] dump_stack_lvl+0xdc/0xf4 [ 925.731430][ T5884] dump_stack+0x1c/0x28 [ 925.731846][ T5884] should_fail_ex+0x510/0x5f4 [ 925.732353][ T5884] should_fail+0x14/0x20 [ 925.732783][ T5884] should_fail_usercopy+0x1c/0x2c [ 925.733236][ T5884] simple_read_from_buffer+0x90/0x1ec [ 925.733759][ T5884] proc_fail_nth_read+0x160/0x248 [ 925.734309][ T5884] vfs_read+0x18c/0x974 [ 925.734849][ T5884] ksys_read+0xf0/0x1dc [ 925.735437][ T5884] __arm64_sys_read+0x6c/0x9c [ 925.735934][ T5884] invoke_syscall+0x6c/0x258 [ 925.736518][ T5884] el0_svc_common.constprop.0+0xac/0x230 [ 925.737085][ T5884] do_el0_svc+0x40/0x58 [ 925.737566][ T5884] el0_svc+0x50/0x180 [ 925.738048][ T5884] el0t_64_sync_handler+0x100/0x12c [ 925.738604][ T5884] el0t_64_sync+0x190/0x194 [ 926.543557][ T5886] FAULT_INJECTION: forcing a failure. [ 926.543557][ T5886] name failslab, interval 1, probability 0, space 0, times 0 [ 926.548521][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.1.913 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 926.549275][ T5886] Hardware name: linux,dummy-virt (DT) [ 926.549805][ T5886] Call trace: [ 926.550263][ T5886] dump_backtrace+0x9c/0x11c [ 926.550854][ T5886] show_stack+0x18/0x24 [ 926.551346][ T5886] dump_stack_lvl+0xdc/0xf4 [ 926.551855][ T5886] dump_stack+0x1c/0x28 [ 926.552332][ T5886] should_fail_ex+0x510/0x5f4 [ 926.552837][ T5886] should_failslab+0xbc/0x11c [ 926.553370][ T5886] __kmalloc_cache_noprof+0x74/0x2f8 [ 926.553863][ T5886] tcp_sendmsg_fastopen+0x1b0/0x5a8 [ 926.554474][ T5886] tcp_sendmsg_locked+0x143c/0x2c6c [ 926.555144][ T5886] tcp_sendmsg+0x38/0x60 [ 926.555686][ T5886] inet6_sendmsg+0x90/0xd4 [ 926.556251][ T5886] __sock_sendmsg+0xc8/0x168 [ 926.557008][ T5886] ____sys_sendmsg+0x550/0x6e0 [ 926.557933][ T5886] ___sys_sendmsg+0x11c/0x19c [ 926.558841][ T5886] __sys_sendmsg+0xe0/0x174 [ 926.559443][ T5886] __arm64_sys_sendmsg+0x70/0xa0 [ 926.559979][ T5886] invoke_syscall+0x6c/0x258 [ 926.560528][ T5886] el0_svc_common.constprop.0+0xac/0x230 [ 926.561092][ T5886] do_el0_svc+0x40/0x58 [ 926.561612][ T5886] el0_svc+0x50/0x180 [ 926.562194][ T5886] el0t_64_sync_handler+0x100/0x12c [ 926.562784][ T5886] el0t_64_sync+0x190/0x194 [ 928.450405][ T5892] FAULT_INJECTION: forcing a failure. [ 928.450405][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.451647][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: syz.1.915 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 928.452160][ T5892] Hardware name: linux,dummy-virt (DT) [ 928.452515][ T5892] Call trace: [ 928.452818][ T5892] dump_backtrace+0x9c/0x11c [ 928.453170][ T5892] show_stack+0x18/0x24 [ 928.453518][ T5892] dump_stack_lvl+0xdc/0xf4 [ 928.453856][ T5892] dump_stack+0x1c/0x28 [ 928.454195][ T5892] should_fail_ex+0x510/0x5f4 [ 928.454840][ T5892] should_fail+0x14/0x20 [ 928.455180][ T5892] should_fail_usercopy+0x1c/0x2c [ 928.455588][ T5892] simple_read_from_buffer+0x90/0x1ec [ 928.456111][ T5892] proc_fail_nth_read+0x160/0x248 [ 928.456498][ T5892] vfs_read+0x18c/0x974 [ 928.456972][ T5892] ksys_read+0xf0/0x1dc [ 928.457343][ T5892] __arm64_sys_read+0x6c/0x9c [ 928.457681][ T5892] invoke_syscall+0x6c/0x258 [ 928.458012][ T5892] el0_svc_common.constprop.0+0xac/0x230 [ 928.458404][ T5892] do_el0_svc+0x40/0x58 [ 928.458850][ T5892] el0_svc+0x50/0x180 [ 928.459214][ T5892] el0t_64_sync_handler+0x100/0x12c [ 928.459569][ T5892] el0t_64_sync+0x190/0x194 [ 931.836248][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 932.107169][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 932.132820][ T29] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 932.133339][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.133781][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.134212][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 932.268863][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.270030][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.270812][ T29] usb 2-1: Product: syz [ 932.271418][ T29] usb 2-1: Manufacturer: syz [ 932.271987][ T29] usb 2-1: SerialNumber: syz [ 932.640278][ T29] usb 2-1: 0:2 : does not exist [ 932.929725][ T29] usb 2-1: USB disconnect, device number 18 [ 934.000392][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.000083][ T5910] FAULT_INJECTION: forcing a failure. [ 935.000083][ T5910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.001224][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: syz.1.923 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 935.001863][ T5910] Hardware name: linux,dummy-virt (DT) [ 935.002423][ T5910] Call trace: [ 935.002797][ T5910] dump_backtrace+0x9c/0x11c [ 935.003322][ T5910] show_stack+0x18/0x24 [ 935.003854][ T5910] dump_stack_lvl+0xdc/0xf4 [ 935.004337][ T5910] dump_stack+0x1c/0x28 [ 935.004885][ T5910] should_fail_ex+0x510/0x5f4 [ 935.005504][ T5910] should_fail+0x14/0x20 [ 935.005967][ T5910] should_fail_usercopy+0x1c/0x2c [ 935.006475][ T5910] strncpy_from_user+0x34/0x2c8 [ 935.006943][ T5910] getname_flags.part.0+0x7c/0x3d4 [ 935.007429][ T5910] getname+0x70/0xb4 [ 935.007860][ T5910] do_sys_openat2+0xe4/0x160 [ 935.008334][ T5910] __arm64_sys_openat+0x12c/0x1b8 [ 935.008815][ T5910] invoke_syscall+0x6c/0x258 [ 935.009263][ T5910] el0_svc_common.constprop.0+0xac/0x230 [ 935.009847][ T5910] do_el0_svc+0x40/0x58 [ 935.010322][ T5910] el0_svc+0x50/0x180 [ 935.010785][ T5910] el0t_64_sync_handler+0x100/0x12c [ 935.011283][ T5910] el0t_64_sync+0x190/0x194 [ 936.419169][ T3358] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 936.667463][ T3358] usb 1-1: Using ep0 maxpacket: 8 [ 936.699778][ T3358] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 936.700438][ T3358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.700799][ T3358] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.701205][ T3358] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.816221][ T3358] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.816836][ T3358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.817228][ T3358] usb 1-1: Product: syz [ 936.817505][ T3358] usb 1-1: Manufacturer: syz [ 936.817867][ T3358] usb 1-1: SerialNumber: syz [ 937.148857][ T3358] usb 1-1: 0:2 : does not exist [ 937.422715][ T3358] usb 1-1: USB disconnect, device number 13 [ 938.233940][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.636641][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 360 seconds [ 947.433705][ T5960] FAULT_INJECTION: forcing a failure. [ 947.433705][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 947.457296][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.0.941 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 947.458284][ T5960] Hardware name: linux,dummy-virt (DT) [ 947.458765][ T5960] Call trace: [ 947.459157][ T5960] dump_backtrace+0x9c/0x11c [ 947.459716][ T5960] show_stack+0x18/0x24 [ 947.460192][ T5960] dump_stack_lvl+0xdc/0xf4 [ 947.460705][ T5960] dump_stack+0x1c/0x28 [ 947.461186][ T5960] should_fail_ex+0x510/0x5f4 [ 947.461694][ T5960] should_failslab+0xbc/0x11c [ 947.462200][ T5960] __kmalloc_noprof+0xd0/0x3d0 [ 947.462733][ T5960] tomoyo_realpath_from_path+0x90/0x54c [ 947.463280][ T5960] tomoyo_path_number_perm+0x200/0x458 [ 947.463859][ T5960] tomoyo_file_ioctl+0x1c/0x28 [ 947.464671][ T5960] security_file_ioctl+0x70/0xc4 [ 947.466829][ T5960] __arm64_sys_ioctl+0x94/0x190 [ 947.468821][ T5960] invoke_syscall+0x6c/0x258 [ 947.469405][ T5960] el0_svc_common.constprop.0+0xac/0x230 [ 947.470034][ T5960] do_el0_svc+0x40/0x58 [ 947.470601][ T5960] el0_svc+0x50/0x180 [ 947.471132][ T5960] el0t_64_sync_handler+0x100/0x12c [ 947.471771][ T5960] el0t_64_sync+0x190/0x194 [ 947.515761][ T5960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.545616][ T6012] serio: Serial port pts0 [ 957.081935][ T6020] FAULT_INJECTION: forcing a failure. [ 957.081935][ T6020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.083296][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.0.955 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 957.084016][ T6020] Hardware name: linux,dummy-virt (DT) [ 957.084561][ T6020] Call trace: [ 957.085147][ T6020] dump_backtrace+0x9c/0x11c [ 957.085709][ T6020] show_stack+0x18/0x24 [ 957.086299][ T6020] dump_stack_lvl+0xdc/0xf4 [ 957.086891][ T6020] dump_stack+0x1c/0x28 [ 957.087400][ T6020] should_fail_ex+0x510/0x5f4 [ 957.087810][ T6020] should_fail+0x14/0x20 [ 957.088196][ T6020] should_fail_usercopy+0x1c/0x2c [ 957.088614][ T6020] copy_msghdr_from_user+0xa8/0x1fc [ 957.089032][ T6020] ___sys_sendmsg+0xfc/0x19c [ 957.089433][ T6020] __sys_sendmsg+0xe0/0x174 [ 957.089826][ T6020] __arm64_sys_sendmsg+0x70/0xa0 [ 957.090273][ T6020] invoke_syscall+0x6c/0x258 [ 957.090706][ T6020] el0_svc_common.constprop.0+0xac/0x230 [ 957.091141][ T6020] do_el0_svc+0x40/0x58 [ 957.091532][ T6020] el0_svc+0x50/0x180 [ 957.091908][ T6020] el0t_64_sync_handler+0x100/0x12c [ 957.092324][ T6020] el0t_64_sync+0x190/0x194 [ 962.891622][ T6040] FAULT_INJECTION: forcing a failure. [ 962.891622][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 962.892479][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.0.963 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 962.892899][ T6040] Hardware name: linux,dummy-virt (DT) [ 962.893223][ T6040] Call trace: [ 962.893541][ T6040] dump_backtrace+0x9c/0x11c [ 962.893919][ T6040] show_stack+0x18/0x24 [ 962.894208][ T6040] dump_stack_lvl+0xdc/0xf4 [ 962.894851][ T6040] dump_stack+0x1c/0x28 [ 962.895317][ T6040] should_fail_ex+0x510/0x5f4 [ 962.895783][ T6040] should_failslab+0xbc/0x11c [ 962.896154][ T6040] __kmalloc_noprof+0xd0/0x3d0 [ 962.896467][ T6040] tomoyo_realpath_from_path+0x90/0x54c [ 962.896752][ T6040] tomoyo_path_number_perm+0x200/0x458 [ 962.897161][ T6040] tomoyo_file_ioctl+0x1c/0x28 [ 962.897452][ T6040] security_file_ioctl+0x70/0xc4 [ 962.897718][ T6040] __arm64_sys_ioctl+0x94/0x190 [ 962.897984][ T6040] invoke_syscall+0x6c/0x258 [ 962.898303][ T6040] el0_svc_common.constprop.0+0xac/0x230 [ 962.898702][ T6040] do_el0_svc+0x40/0x58 [ 962.899084][ T6040] el0_svc+0x50/0x180 [ 962.899340][ T6040] el0t_64_sync_handler+0x100/0x12c [ 962.899654][ T6040] el0t_64_sync+0x190/0x194 [ 962.903561][ T6040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 968.736214][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 390 seconds [ 969.226638][ T6052] FAULT_INJECTION: forcing a failure. [ 969.226638][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.228222][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.968 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 969.228922][ T6052] Hardware name: linux,dummy-virt (DT) [ 969.230168][ T6052] Call trace: [ 969.230680][ T6052] dump_backtrace+0x9c/0x11c [ 969.231262][ T6052] show_stack+0x18/0x24 [ 969.231787][ T6052] dump_stack_lvl+0xdc/0xf4 [ 969.232322][ T6052] dump_stack+0x1c/0x28 [ 969.232842][ T6052] should_fail_ex+0x510/0x5f4 [ 969.233381][ T6052] should_fail+0x14/0x20 [ 969.233960][ T6052] should_fail_usercopy+0x1c/0x2c [ 969.234572][ T6052] copy_msghdr_from_user+0xa8/0x1fc [ 969.235236][ T6052] ___sys_sendmsg+0xfc/0x19c [ 969.235772][ T6052] __sys_sendmsg+0xe0/0x174 [ 969.236361][ T6052] __arm64_sys_sendmsg+0x70/0xa0 [ 969.236915][ T6052] invoke_syscall+0x6c/0x258 [ 969.237447][ T6052] el0_svc_common.constprop.0+0xac/0x230 [ 969.237995][ T6052] do_el0_svc+0x40/0x58 [ 969.238503][ T6052] el0_svc+0x50/0x180 [ 969.238986][ T6052] el0t_64_sync_handler+0x100/0x12c [ 969.239527][ T6052] el0t_64_sync+0x190/0x194 [ 972.046772][ T6064] FAULT_INJECTION: forcing a failure. [ 972.046772][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 972.047632][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.1.974 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 972.048057][ T6064] Hardware name: linux,dummy-virt (DT) [ 972.048501][ T6064] Call trace: [ 972.048766][ T6064] dump_backtrace+0x9c/0x11c [ 972.049142][ T6064] show_stack+0x18/0x24 [ 972.049439][ T6064] dump_stack_lvl+0xdc/0xf4 [ 972.049760][ T6064] dump_stack+0x1c/0x28 [ 972.050074][ T6064] should_fail_ex+0x510/0x5f4 [ 972.050432][ T6064] should_failslab+0xbc/0x11c [ 972.050859][ T6064] kmem_cache_alloc_node_noprof+0x7c/0x308 [ 972.051453][ T6064] __alloc_skb+0x208/0x2f0 [ 972.051964][ T6064] netlink_alloc_large_skb+0xac/0xd8 [ 972.052419][ T6064] netlink_sendmsg+0x4ac/0xa4c [ 972.052723][ T6064] __sock_sendmsg+0xc8/0x168 [ 972.052974][ T6064] ____sys_sendmsg+0x550/0x6e0 [ 972.053282][ T6064] ___sys_sendmsg+0x11c/0x19c [ 972.053538][ T6064] __sys_sendmsg+0xe0/0x174 [ 972.053779][ T6064] __arm64_sys_sendmsg+0x70/0xa0 [ 972.054024][ T6064] invoke_syscall+0x6c/0x258 [ 972.054408][ T6064] el0_svc_common.constprop.0+0xac/0x230 [ 972.054857][ T6064] do_el0_svc+0x40/0x58 [ 972.055145][ T6064] el0_svc+0x50/0x180 [ 972.055492][ T6064] el0t_64_sync_handler+0x100/0x12c [ 972.055776][ T6064] el0t_64_sync+0x190/0x194 [ 973.408105][ T6068] serio: Serial port pts0 [ 980.888788][ T6097] serio: Serial port pts0 [ 988.703981][ T6119] FAULT_INJECTION: forcing a failure. [ 988.703981][ T6119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.707594][ T6119] CPU: 1 UID: 0 PID: 6119 Comm: syz.0.998 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 988.708248][ T6119] Hardware name: linux,dummy-virt (DT) [ 988.708713][ T6119] Call trace: [ 988.709117][ T6119] dump_backtrace+0x9c/0x11c [ 988.709719][ T6119] show_stack+0x18/0x24 [ 988.710301][ T6119] dump_stack_lvl+0xdc/0xf4 [ 988.710849][ T6119] dump_stack+0x1c/0x28 [ 988.711308][ T6119] should_fail_ex+0x510/0x5f4 [ 988.711840][ T6119] should_fail+0x14/0x20 [ 988.712308][ T6119] should_fail_usercopy+0x1c/0x2c [ 988.712809][ T6119] copy_from_sockptr_offset.constprop.0+0xe4/0x244 [ 988.713349][ T6119] sk_setsockopt+0xf0/0x216c [ 988.713822][ T6119] sock_setsockopt+0x34/0x64 [ 988.714323][ T6119] do_sock_setsockopt+0x2cc/0x354 [ 988.715221][ T6119] __sys_setsockopt+0xdc/0x178 [ 988.715782][ T6119] __arm64_sys_setsockopt+0xa4/0x100 [ 988.716585][ T6119] invoke_syscall+0x6c/0x258 [ 988.717061][ T6119] el0_svc_common.constprop.0+0xac/0x230 [ 988.717632][ T6119] do_el0_svc+0x40/0x58 [ 988.718094][ T6119] el0_svc+0x50/0x180 [ 988.718673][ T6119] el0t_64_sync_handler+0x100/0x12c [ 988.719152][ T6119] el0t_64_sync+0x190/0x194 [ 988.877162][ T4808] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 989.106179][ T4808] usb 2-1: Using ep0 maxpacket: 8 [ 989.237101][ T4808] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 989.238280][ T4808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.239178][ T4808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.240123][ T4808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 989.301660][ T4808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.302830][ T4808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.303790][ T4808] usb 2-1: Product: ఇ [ 989.305484][ T4808] usb 2-1: Manufacturer: ఁ [ 989.306295][ T4808] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 989.807419][ T4808] usb 2-1: 0:2 : does not exist [ 990.015600][ T4808] usb 2-1: USB disconnect, device number 19 [ 990.710415][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.287306][ T3417] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 992.667282][ T3417] usb 2-1: Using ep0 maxpacket: 8 [ 992.922840][ T3417] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 992.923884][ T3417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.927962][ T3417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.928850][ T3417] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 992.985723][ T3417] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 992.986779][ T3417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.987437][ T3417] usb 2-1: Product: ఇ [ 992.988014][ T3417] usb 2-1: Manufacturer: ఁ [ 992.988572][ T3417] usb 2-1: SerialNumber: 㓁㡮덲⊿鈘⭃詥ꈐğ㻻ꦄꥍ碤뻎爕苔긡︌團䑉黵퓋룀躣뱎暾ɗ邧⟎은櫣冄⋍롑널铞휻鍫镱珹쁗磳켼ዙ⫍䜱퇨ᴊ抒䵻녷Ⲅ俰䨕돫疇圳뢶䑿㕑췡ꖇ찴鞹靬ᑻ잦㜵ᾼ쐸쉧ତꉼ땈袆Ἐ紮觠ﬗ柦㟛謡붟況黔꡿돝췶뽹嵢෋ዐ敃켛仆켵ᣒ붠䱝篋苗훌 [ 993.346806][ T3417] usb 2-1: 0:2 : does not exist [ 993.494203][ T3417] usb 2-1: USB disconnect, device number 20 [ 994.134296][ T6143] FAULT_INJECTION: forcing a failure. [ 994.134296][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 994.143090][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.0.1010 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 994.143837][ T6143] Hardware name: linux,dummy-virt (DT) [ 994.144417][ T6143] Call trace: [ 994.144934][ T6143] dump_backtrace+0x9c/0x11c [ 994.145619][ T6143] show_stack+0x18/0x24 [ 994.146189][ T6143] dump_stack_lvl+0xdc/0xf4 [ 994.146802][ T6143] dump_stack+0x1c/0x28 [ 994.147370][ T6143] should_fail_ex+0x510/0x5f4 [ 994.147935][ T6143] should_failslab+0xbc/0x11c [ 994.148554][ T6143] kmem_cache_alloc_noprof+0x74/0x2e0 [ 994.149121][ T6143] getname_flags.part.0+0x48/0x3d4 [ 994.149673][ T6143] getname_flags+0x78/0xc4 [ 994.150449][ T6143] user_path_at+0x2c/0x70 [ 994.151105][ T6143] path_setxattr+0xf8/0x1c0 [ 994.151797][ T6143] __arm64_sys_lsetxattr+0xa8/0x104 [ 994.152490][ T6143] invoke_syscall+0x6c/0x258 [ 994.153166][ T6143] el0_svc_common.constprop.0+0xac/0x230 [ 994.153941][ T6143] do_el0_svc+0x40/0x58 [ 994.154658][ T6143] el0_svc+0x50/0x180 [ 994.155346][ T6143] el0t_64_sync_handler+0x100/0x12c [ 994.155920][ T6143] el0t_64_sync+0x190/0x194 [ 994.392508][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.021497][ T30] audit: type=1400 audit(994.460:273): avc: denied { ioctl } for pid=6144 comm="syz.0.1011" path="net:[4026532944]" dev="nsfs" ino=4026532944 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 998.777988][ T1764] block nbd0: Possible stuck request ffff000016360000: control (read@0,4096B). Runtime 420 seconds [ 1000.792024][ T6185] ======================================================= [ 1000.792024][ T6185] WARNING: The mand mount option has been deprecated and [ 1000.792024][ T6185] and is ignored by this kernel. Remove the mand [ 1000.792024][ T6185] option from the mount to silence this warning. [ 1000.792024][ T6185] ======================================================= [ 1002.716273][ T30] audit: type=1400 audit(1002.170:274): avc: denied { getopt } for pid=6195 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1004.869776][ T30] audit: type=1400 audit(1004.330:275): avc: denied { shutdown } for pid=6201 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1004.949914][ T30] audit: type=1400 audit(1004.380:276): avc: denied { name_connect } for pid=6201 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1007.739790][ T31] INFO: task udevd:3427 blocked for more than 430 seconds. [ 1007.787039][ T31] Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1007.788183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1007.789266][ T31] task:udevd state:D stack:0 pid:3427 tgid:3427 ppid:3103 flags:0x0000000d [ 1007.821450][ T31] Call trace: [ 1007.822743][ T31] __switch_to+0x1c8/0x2a4 [ 1007.824179][ T31] __schedule+0xacc/0x2920 [ 1007.865409][ T31] schedule+0xd0/0x304 [ 1007.866366][ T31] schedule_preempt_disabled+0x18/0x2c [ 1007.866980][ T31] __mutex_lock+0x4e8/0x840 [ 1007.867575][ T31] mutex_lock_nested+0x24/0x30 [ 1007.868165][ T31] bdev_open+0x2c4/0xa84 [ 1007.868732][ T31] blkdev_open+0x24c/0x37c [ 1007.869294][ T31] do_dentry_open+0x50c/0x1068 [ 1007.869871][ T31] vfs_open+0x5c/0x2fc [ 1007.870477][ T31] path_openat+0x16dc/0x2380 [ 1007.871063][ T31] do_filp_open+0x16c/0x330 [ 1007.871636][ T31] do_sys_openat2+0x12c/0x160 [ 1007.872212][ T31] __arm64_sys_openat+0x12c/0x1b8 [ 1007.872822][ T31] invoke_syscall+0x6c/0x258 [ 1007.873403][ T31] el0_svc_common.constprop.0+0xac/0x230 [ 1007.874010][ T31] do_el0_svc+0x40/0x58 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1007.916199][ T31] el0_svc+0x50/0x180 [ 1007.917081][ T31] el0t_64_sync_handler+0x100/0x12c [ 1007.917652][ T31] el0t_64_sync+0x190/0x194 [ 1007.919259][ T31] INFO: task syz.0.397:4449 blocked for more than 430 seconds. [ 1007.919895][ T31] Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1007.920519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1007.921141][ T31] task:syz.0.397 state:D stack:0 pid:4449 tgid:4449 ppid:3282 flags:0x00000005 [ 1007.922031][ T31] Call trace: [ 1007.922538][ T31] __switch_to+0x1c8/0x2a4 [ 1007.923085][ T31] __schedule+0xacc/0x2920 [ 1007.923632][ T31] schedule+0xd0/0x304 [ 1007.924150][ T31] schedule_preempt_disabled+0x18/0x2c [ 1007.949756][ T31] __mutex_lock+0x4e8/0x840 [ 1007.950691][ T31] mutex_lock_nested+0x24/0x30 [ 1007.951284][ T31] bdev_release+0x104/0x510 [ 1007.951838][ T31] blkdev_release+0x14/0x24 [ 1007.955901][ T31] __fput+0x2c4/0x964 [ 1007.956695][ T31] ____fput+0x10/0x1c [ 1007.957255][ T31] task_work_run+0x128/0x210 [ 1007.957814][ T31] do_notify_resume+0x1d4/0x25c [ 1007.958430][ T31] el0_svc+0x100/0x180 [ 1007.959007][ T31] el0t_64_sync_handler+0x100/0x12c [ 1007.959613][ T31] el0t_64_sync+0x190/0x194 [ 1007.960286][ T31] INFO: task syz.0.397:4452 blocked for more than 430 seconds. [ 1007.960929][ T31] Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1007.961554][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1007.962182][ T31] task:syz.0.397 state:D stack:0 pid:4452 tgid:4449 ppid:3282 flags:0x00000009 [ 1007.963116][ T31] Call trace: [ 1007.963616][ T31] __switch_to+0x1c8/0x2a4 [ 1007.964187][ T31] __schedule+0xacc/0x2920 [ 1008.006958][ T31] schedule+0xd0/0x304 [ 1008.008712][ T31] schedule_preempt_disabled+0x18/0x2c [ 1008.009368][ T31] __mutex_lock+0x4e8/0x840 [ 1008.009931][ T31] mutex_lock_nested+0x24/0x30 [ 1008.010590][ T31] bdev_release+0x104/0x510 [ 1008.011280][ T31] blkdev_release+0x14/0x24 [ 1008.011873][ T31] __fput+0x2c4/0x964 [ 1008.012428][ T31] ____fput+0x10/0x1c [ 1008.013035][ T31] task_work_run+0x128/0x210 [ 1008.013684][ T31] do_notify_resume+0x1d4/0x25c [ 1008.014360][ T31] el0_svc+0x100/0x180 [ 1008.025814][ T31] el0t_64_sync_handler+0x100/0x12c [ 1008.026710][ T31] el0t_64_sync+0x190/0x194 [ 1008.036680][ T31] [ 1008.036680][ T31] Showing all locks held in the system: [ 1008.037990][ T31] 1 lock held by khungtaskd/31: [ 1008.038690][ T31] #0: ffff800086c62ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x44/0x2d4 [ 1008.049232][ T31] 2 locks held by syslogd/3088: [ 1008.049928][ T31] 2 locks held by getty/3223: [ 1008.050526][ T31] #0: ffff000019aeb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1008.073193][ T31] #1: ffff80008cc2b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x93c/0xe9c [ 1008.095710][ T31] 2 locks held by syz-executor/3277: [ 1008.096700][ T31] 1 lock held by udevd/3427: [ 1008.097300][ T31] #0: ffff000015eaf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2c4/0xa84 [ 1008.098889][ T31] 1 lock held by syz.0.397/4449: [ 1008.099470][ T31] #0: ffff000015eaf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x104/0x510 [ 1008.100977][ T31] 1 lock held by syz.0.397/4452: [ 1008.101526][ T31] #0: ffff000015eaf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x104/0x510 [ 1008.103003][ T31] 1 lock held by syz.0.397/4456: [ 1008.103575][ T31] #0: ffff000015eaf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0x2c4/0xa84 [ 1008.129057][ T31] 1 lock held by syz-executor/4559: [ 1008.129693][ T31] 1 lock held by udevd/4740: [ 1008.130294][ T31] 4 locks held by syz.1.1040/6215: [ 1008.157433][ T31] [ 1008.158206][ T31] ============================================= [ 1008.158206][ T31] [ 1008.159437][ T31] NMI backtrace for cpu 1 [ 1008.160000][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1008.160654][ T31] Hardware name: linux,dummy-virt (DT) [ 1008.161119][ T31] Call trace: [ 1008.161537][ T31] dump_backtrace+0x9c/0x11c [ 1008.162043][ T31] show_stack+0x18/0x24 [ 1008.162540][ T31] dump_stack_lvl+0xa4/0xf4 [ 1008.163016][ T31] dump_stack+0x1c/0x28 [ 1008.163463][ T31] nmi_cpu_backtrace+0x1b0/0x274 [ 1008.163915][ T31] nmi_trigger_cpumask_backtrace+0x25c/0x300 [ 1008.164502][ T31] arch_trigger_cpumask_backtrace+0x18/0x24 [ 1008.165080][ T31] watchdog+0xa74/0xd40 [ 1008.165795][ T31] kthread+0x27c/0x300 [ 1008.166264][ T31] ret_from_fork+0x10/0x20 [ 1008.168487][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1008.169680][ C0] NMI backtrace for cpu 0 [ 1008.170792][ C0] CPU: 0 UID: 0 PID: 3092 Comm: klogd Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1008.171729][ C0] Hardware name: linux,dummy-virt (DT) [ 1008.172723][ C0] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1008.173425][ C0] pc : __memset+0x124/0x188 [ 1008.174062][ C0] lr : memset+0x4c/0x78 [ 1008.174712][ C0] sp : ffff8000a00f76f0 [ 1008.175334][ C0] x29: ffff8000a00f76f0 x28: ffff000018e44000 x27: 0000000000000000 [ 1008.176602][ C0] x26: ffff000018e44000 x25: 00000000ffffffff x24: ffff00000eac38c0 [ 1008.177495][ C0] x23: 0000000000000000 x22: 0000000000000200 x21: 0000000000000000 [ 1008.178509][ C0] x20: ffff00002969da00 x19: 00000000000000bc x18: 00000000e40456c1 [ 1008.180352][ C0] x17: 0000000000000000 x16: 0000000000000000 x15: ffff00001427a880 [ 1008.182388][ C0] x14: 1fffe0000284f50f x13: 0000000000000000 x12: ffff6000052d3b58 [ 1008.184255][ C0] x11: 1fffe000052d3b57 x10: ffff6000052d3b57 x9 : 0000000000000000 [ 1008.185398][ C0] x8 : ffff00002969da00 x7 : 0000000000000000 x6 : 0000000000000000 [ 1008.186381][ C0] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 1008.188580][ C0] x2 : 00000000000000bc x1 : 0000000000000000 x0 : ffff00002969da00 [ 1008.190922][ C0] Call trace: [ 1008.191732][ C0] __memset+0x124/0x188 [ 1008.192879][ C0] __alloc_skb+0x148/0x2f0 [ 1008.194172][ C0] alloc_skb_with_frags+0xb4/0x524 [ 1008.194923][ C0] sock_alloc_send_pskb+0x5e4/0x704 [ 1008.195545][ C0] unix_dgram_sendmsg+0x2d4/0x12a4 [ 1008.196679][ C0] __sock_sendmsg+0xc8/0x168 [ 1008.197707][ C0] __sys_sendto+0x1a8/0x254 [ 1008.198583][ C0] __arm64_sys_sendto+0xc0/0x134 [ 1008.199604][ C0] invoke_syscall+0x6c/0x258 [ 1008.200687][ C0] el0_svc_common.constprop.0+0xac/0x230 [ 1008.201745][ C0] do_el0_svc+0x40/0x58 [ 1008.202661][ C0] el0_svc+0x50/0x180 [ 1008.203597][ C0] el0t_64_sync_handler+0x100/0x12c [ 1008.204739][ C0] el0t_64_sync+0x190/0x194 [ 1008.387424][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1008.388720][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1008.389381][ T31] Hardware name: linux,dummy-virt (DT) [ 1008.389850][ T31] Call trace: [ 1008.390222][ T31] dump_backtrace+0x9c/0x11c [ 1008.390762][ T31] show_stack+0x18/0x24 [ 1008.391200][ T31] dump_stack_lvl+0x38/0xf4 [ 1008.391675][ T31] dump_stack+0x1c/0x28 [ 1008.392129][ T31] panic+0x5a0/0x654 [ 1008.392591][ T31] watchdog+0x4bc/0xd40 [ 1008.393655][ T31] kthread+0x27c/0x300 [ 1008.394084][ T31] ret_from_fork+0x10/0x20 [ 1008.395614][ T31] SMP: stopping secondary CPUs [ 1008.397261][ T31] Kernel Offset: disabled [ 1008.397772][ T31] CPU features: 0x04,40001001,a0100000,0200421b [ 1008.398809][ T31] Memory Limit: none [ 1008.400078][ T31] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:02 Registers: info registers vcpu 0 CPU#0 PC=ffff8000802d2090 X00=00000000000000c0 X01=0000000000000000 X02=0000000000000000 X03=1fffe00001a2a3c1 X04=0000000000000000 X05=1fffe00001a2a3c2 X06=ffff700010000f66 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700010000f66 X11=1ffff00010000f66 X12=ffff700010000f67 X13=1fffe00001a2a523 X14=1fffe00001a2a50f X15=ffff00000d152880 X16=0000000000000000 X17=ffff7fffe35cf000 X18=00000000ffffffff X19=0000000000000001 X20=ffff00000d1528f8 X21=ffff000069ff4d18 X22=0000000000000028 X23=ffff00000d152880 X24=ffff800086a10fc8 X25=ffff8000851683e0 X26=00000000ffffffff X27=00000000000000c0 X28=ffff00000d151e00 X29=ffff800080007ab0 X30=ffff8000850be780 SP=ffff800080007ab0 PSTATE=000000c5 ---- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=00524f5252450040:0000000000000000 Q05=00524f5252450040:0000000000000000 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe2b37e20:0000ffffe2b37e20 Q17=ffffff80ffffffd0:0000ffffe2b37df0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000850be288 X00=ffff00001700e520 X01=fffffdffbf79bbc8 X02=0000000000000005 X03=ffff80008cb27ad0 X04=00000000f204f1f1 X05=ffff700011964f52 X06=dfff800000000000 X07=00000000f1f1f1f1 X08=4479805e027ae831 X09=1ffff000111ce3ec X10=1ffff0001106a78e X11=0000000000000000 X12=0000000000000007 X13=1fffe00002e01ca8 X14=1fffe00002e01c8f X15=ffff00001700e480 X16=0000000000000000 X17=ffff7fffe35f2000 X18=000000005719242d X19=ffff00001700e520 X20=0000000000000005 X21=0000000000000004 X22=ffff80008023c448 X23=fffffdffbf79bbc8 X24=ffff80008cb27ad0 X25=ffff800086a10fc8 X26=0000000000000005 X27=ffff00001700da00 X28=1fffe00002e01c8f X29=ffff80008cb279d0 X30=ffff8000802d264c SP=ffff80008cb279d0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=00524f5252450040:0000000000000000 Q05=00524f5252450040:0000000000000000 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe2b37e20:0000ffffe2b37e20 Q17=ffffff80ffffffd0:0000ffffe2b37df0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000