last executing test programs: 26.631724607s ago: executing program 1 (id=312): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) fcntl$setstatus(r1, 0x4, 0x400) 26.500005716s ago: executing program 1 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000980)={0x1, 0xffffffff, 0x8001, 0x5, 0x1, 0x5}) 11.405415146s ago: executing program 1 (id=365): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x140) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x101140, 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, 0x0) r4 = dup(r1) write$P9_RUNLINKAT(r4, 0x0, 0x0) socket(0x29, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, &(0x7f0000000080)) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 11.180019432s ago: executing program 1 (id=366): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x200b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1f41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (fail_nth: 2) 10.973756125s ago: executing program 1 (id=368): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, 0x0, 0x4004010) 10.849899864s ago: executing program 1 (id=369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000980)={0x1, 0xffffffff, 0x8001, 0x5, 0x1, 0x5}) 5.770225974s ago: executing program 0 (id=384): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x8041) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f0000000040)) fsetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '.g,\'\x00'}, &(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x12, 0x1) r1 = openat$vnet(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000180)={0x3, 0x1}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000001c0)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000200)={0x0, "084df3080eceeaa637e1a0c1b6c26c85"}) r4 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'ip6tnl0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000001280)={0x1d, r5}, 0x10) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f00000012c0), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000001300)) recvmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)=""/68, 0x44}], 0x1, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x64}, 0x40000100) write$binfmt_script(r9, &(0x7f0000001500)={'#! ', './file0', [{0x20, '\x80'}, {0x20, '.}/!$%\xf1)V'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "b0c3a0df47e064665568b8c2251a267a9d378a9445e31f38398522f7b8846c"}, 0x46) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x5) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x440c5) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x534c, 0x64}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x1) getsockname$packet(r6, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14) r13 = dup2(r9, r1) io_uring_register$IORING_REGISTER_IOWQ_AFF(r13, 0x11, &(0x7f00000018c0)="de2156559ea0a6aaeeb7052c433b41f79b0e9f4d1cbc4e581073c0ee11533e28f45ba0b8e1e10af5122dcc6dace80dc422c6dd2e195c707d8ba12a60d6c60515eb3104d8feb3342b2dc0864dda2db710cbecc76509964751076771a4c4970b2ec14e9fa310e788f5a1b0008f8d4697b769e26365414442ffb73837ebec17639612c43cf6e0ef091bf7d45190d9b7ba2c14a6a7953b7c5037ba95fd2f47933075ce40791add2e77c5a8051f216363b2055470bbf9a1c88d1ac555af3812fa50fc2deabe6a7553470e7a5bfc1d898f850c84c6cd2a4736114bb4bd8b", 0xdb) r14 = openat$zero(0xffffff9c, &(0x7f00000019c0), 0x2, 0x0) r15 = openat$dir(0xffffff9c, &(0x7f0000001a00)='.\x00', 0x4000, 0xa) ioctl$BTRFS_IOC_RM_DEV(r14, 0x5000940b, &(0x7f0000001a40)={{r15}, "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"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEV_INFO(r16, 0xd000941e, &(0x7f0000002a40)={r3, "13fdee0394bf1b6fee55d0a63a1fef32"}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000003d00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003b00)={0x190, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x48040}, 0x404c090) 5.52924379s ago: executing program 0 (id=385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000cdf4fc7e6b4773f4a22c1509cb8657ad490b1697d83ad15ff36730b1fd7ed617c1d82fa3823a1d4566a27307b9c44857b3aff0e9a571b0550b28f6087c9a8c59964cd703b5e7e8731e1e7e73445cee9615d9f80689799cdf096af63b7f7b13f84d1af0abcb3c1976e5b3cfd8b048f6f203c640b511a92633c87682f0c3fec0577d4ab0b2619e1209124e191189af0ef7d7031eada04ea0719d500372a06a3d396939be2f0eb83b5d7c3a2ec417ee88c994e53d505a0f43de3c3f50ce1263d50beaaf4b8f9a7f11a59290e7389adf609b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800031200008b000000000000000b200000381100008bf5973f3e70b07ec53b9606c58a8c008c40db9ccf2df2151d40249504655ed3dcfa01cde71ed77d4757baa9cca49b427943d0b960a4abd45c128a78a1b7fc55af5557e536de344bf7fb928db8a91bb1bd929261d8aca346ff4a834f9510419b8b5c811ce46faa3c45258e62d9b18930411c75054d3052bdfe094a033a2417585dfabccc62337cac8583", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a0600000000007500f4ff1000000018000000ff01000000000000411f0000bf91000000000000b702000002000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18) r5 = syz_open_dev$vcsn(&(0x7f0000000880), 0x7fffffff, 0x200483) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xa, &(0x7f00000007c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f0000000840)='GPL\x00', 0xca8, 0x0, 0x0, 0x41000, 0x42, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000008c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000900)=[r0], &(0x7f0000000940)=[{0x4, 0x1, 0x7, 0x8}, {0x3, 0x1, 0xd, 0x8}, {0x4, 0x5, 0x5, 0xd}, {0x5, 0x5, 0xf, 0x7}, {0x2, 0x1, 0xb, 0xb}, {0x5, 0x2, 0x8, 0x3}, {0x2, 0x5, 0x7}, {0x4, 0x2, 0x6, 0x5}, {0x4, 0x4, 0x8, 0x2}], 0x10, 0xffff}, 0x94) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="acc37c769e590c1ab249db31249d75825391a3c36a6dabe7", 0x18}, {&(0x7f0000000200)="f710bd39cef82afd03ad61da3b47b8f4a69eca41ebbf3694265ce37697114be54c08fb4ec0b1e27a9dca8c47c0a44c7c003b2ec9863aa4a15e1b656453586e55abd6d703fd8482912f073f210594aa0588b44400682602a07f0119eb456ab405bae9d5e9372289c412b8", 0x6a}, {&(0x7f00000004c0)="6a4e7ddaea98c53a943a28e9c6819ade8082e89a067f25c28debd73f2cf85302827d03da5d27aa3d05cfa1c2a80e78adecee83b1dcdff6da9cf4f8084a3e42ec46ebe43bf79a0d", 0x47}, {&(0x7f0000000540)="2043b3fe343783746d466d00731a89ed56a1d197e65a028ba5f637e39652928ee503603aa3d283c3f6607d7f828e243310a27393e817f057bd7c62d46cf2d5aacdc779d87e23730f4498fe86d0f22fd9154d0438933d4fffc09064bdfba57791f9025c53dd47647dd9e68ee8cf3745565eab6a962c398428bcbe28d3c26bff82dcfcf6825d20d1afc50b1c", 0x8b}, {&(0x7f0000000600)="42f3188cf2298662209a7043a90422295e52768eae738695fa36d61a927fca58156f0db617d953bda45d1b356be654bf4fe362f3b53af4f08dd0f0f0e1a35d0e9148ea18d36bf24b338cabdea3821ab11c23386cff1e02a2858371dadd120e93b023ed2036ec6b664301c87cb7655892baa55eee44caba55e59406d4e7c2d6265a783ff01b63472a2a873aaefb7f0e98b532138a6a471ad61e004cfd73829348b330a1ef15af54b55b32d2ee37809e2f2f72d4823fc3975ab85b95f6e69b939c008ee52b43b406423b61980d2ce3c3", 0xcf}, {&(0x7f0000000080)="1cf48a43886250b3d5cb7b13098b40f6a29e94ed3a15e143dd74f972cfbd23586619e2f85642da8c8543fac7eb6e2f7cf87a55039c0f69ade0e9a891db86", 0x3e}], 0x6, 0x9) 5.429866137s ago: executing program 0 (id=386): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x0, 0x1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x4}, 0x20) r1 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x4800, 0x10) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x80, 0x80) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @private}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched_retired(r3, &(0x7f0000002740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002700)={&(0x7f0000000200)=@deltfilter={0x24e8, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6, 0xfff3}, {0xe, 0xe}, {0x8, 0xe}}, [@f_rsvp={{0x9}, {0x24b8, 0x2, [@TCA_RSVP_ACT={0x12c8, 0x6, [@m_csum={0x15c, 0x9, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x8, 0x401, 0x1}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9716, 0x66, 0x20000000, 0x6, 0x9}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x2, 0xff, 0x2}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xf, 0xffffffffffffffff, 0x80000001, 0x7fff}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x3, 0x4, 0xff}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xb09, 0x20000000, 0x56, 0x692a2c04}, 0x78}}]}, {0x85, 0x6, "0eb56613846224b1f449e8ae0a2744a9a63bf93b4c509fb2438adb34ba591aaad232db86726fe417492c059bbd4365928a853a9ca6bc88fe2eb9bb94dc7c6445af218eb84c87361d304d33fd5eb8b4f66fa7b8dc0ff5cdf52710a21598fda9d159d5db8a2eabf85fc48d34e35cff1e76e5aae62785b939a9bd2bb11d9dda3ca0bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x94, 0x17, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x63, 0x1, 0x4, 0x3}, 0x142}}]}, {0x45, 0x6, "76e9465a1b039dc02c326901a9aa60ac80ab29cab2a62722dc5817da19b608ea7e9891c23277a9536bd2b9f9f1bfd69d247395c269385ad808715df39c9bf3b8f5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x184, 0x3, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x46, 0x6, {0x7, 'mangle\x00', 0x6, 0x8, "8a86d0d713d1b57e498918ef91add338e8379867deb7e410c59d4b54"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xfc, 0x6, "e05e2fa107ae67eb39646fc14cfd67b7daecc57f190a6058d187bf5f0890fb9a78abc631736037184bf0d148969d5558201c70258aa3193cc3fa70db2fde17f1707755248ffa486f00d8a49420bd20c0fdb03ca73c49d0753d2ec130b9ced78866662829c6dca1651a902145d2d710878cd5f602cba5b8059ec4c783de05ea4356eef8794017544209e35514c026306f794394df866536be41bffce20fb9404c1ed52921b7ff9297d795c13e0db6e79b53759118a7bba0aab40efb963351b0f703d34d4eeb40a3941a6355f75b3e2a7cc8cdb2afaaf81f02d5d048b1d1136e7c0d18c9b78efa6be82140d7503b8deeab7a16e870dfa4c096"}, {0xc, 0x7, {0x6a7ebaec95c6c271}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf50, 0x19, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x6, 0x7, 0x10000004, 0x6, 0x8}, 0x4, 0x1, [{0x8, 0x4380, 0x1, 0x2, 0x80, 0xba4}, {0x200, 0x0, 0xa1, 0x10001, 0x4, 0x7ff}, {0x1, 0x6d035a57, 0x0, 0x6, 0x0, 0x8}]}, [{0x602, 0x9, 0x80000001, 0x7, 0x8, 0xb}, {0x1f, 0x40, 0x5, 0xf, 0x1, 0x2}, {0x0, 0x1, 0xf, 0x2, 0x9, 0x7ff}, {0x8b, 0x4, 0x3ff, 0x0, 0x800, 0x4}, {0x0, 0xfffffffb, 0x5, 0x9, 0xe}, {0x1, 0x0, 0x10001, 0x2, 0x8000, 0x3}, {0x5, 0xe7b6, 0x3, 0x1, 0x8, 0x2}, {0x1ef, 0x101, 0x8, 0x2, 0x401, 0x4}, {0x2, 0x3, 0x2c, 0x6, 0x80000000, 0x67c}, {0x35, 0x3, 0xd53f, 0x7, 0x80000001, 0x29}, {0x3e, 0x5, 0xe, 0x8000, 0x2, 0x1}, {0x8, 0x7, 0xffffffff, 0x5, 0xed2f, 0x5}, {0x3ff, 0x1, 0x9, 0x2, 0x1, 0x2}, {0x3ff, 0x7, 0x213, 0x10, 0x0, 0x3}, {0x92, 0x10000, 0x5, 0xffffffff, 0x9, 0x91b}, {0x5, 0x4, 0x1, 0xffffffff, 0xbf, 0x77}, {0x4, 0x7, 0x7, 0x6, 0x8001}, {0x3, 0x4, 0xffffffb3, 0xfffffff8, 0x4b1, 0x168c4ba}, {0xffffffff, 0x6, 0x4, 0xfffffffc, 0x5}, {0x8, 0x200, 0x1ff, 0xc0bf, 0x3, 0xb147}, {0x20, 0x40, 0x63ec, 0x3b, 0x0, 0x6}, {0x5, 0x40000000, 0x4000000, 0x4f0, 0x0, 0x1}, {0x1, 0x0, 0x119, 0x24afe4f5, 0x9, 0x1ff}, {0xfffffff7, 0x5, 0xb0, 0x9, 0x9, 0x6}, {0x15a0, 0x2, 0x4, 0x400, 0x1, 0x6}, {0xfffffffd, 0xc, 0x2, 0x9171, 0x10001, 0xfff}, {0x7f, 0xfff, 0x4, 0x4, 0x10001, 0xd}, {0xfffffff8, 0x8001, 0xa82, 0x13, 0x7, 0x2}, {0x9816, 0xe, 0x8, 0xcbc, 0xfffffc01, 0x401}, {0x1, 0xe8, 0x1, 0x2, 0xff, 0x8}, {0x0, 0x4, 0x1ff, 0x3ff, 0x101, 0xbab}, {0x4, 0xc, 0x3, 0x8000, 0x7f, 0x1}, {0x9, 0x80, 0x146, 0x2, 0x5}, {0xca5, 0xa4, 0x2, 0x4, 0x8, 0xef}, {0xfffffff8, 0x5, 0x9, 0x2, 0x924, 0x5}, {0x79c3, 0x3, 0x3, 0x7, 0x6, 0x5}, {0x7, 0x14, 0x3, 0x7, 0x1000000, 0x6}, {0xfffffffc, 0x8, 0x9, 0x2, 0x1, 0x3}, {0x3, 0x1, 0x5, 0x5, 0x4, 0x7}, {0x6, 0x5, 0x7, 0x1, 0x6, 0x80000000}, {0xffff, 0x3ff, 0x5, 0x9, 0xc0000000, 0xc}, {0x80000000, 0x3, 0x0, 0x6, 0xfffffff9, 0x44}, {0x1, 0x8, 0x40, 0x8, 0x7fffffff, 0x9}, {0x7, 0x0, 0x191a, 0x6, 0x45, 0x2}, {0x9, 0x5, 0x1000, 0x9, 0x100, 0x6}, {0x9, 0x8000, 0x3, 0x5, 0x6, 0x800}, {0x6, 0x7ff, 0xe1, 0x1, 0x8, 0x3}, {0x7, 0x1, 0x4, 0x6900, 0x7, 0x8}, {0x6, 0x1fc0000, 0x95b3, 0x6, 0xf7, 0xffff}, {0x579, 0x915, 0x400, 0x9, 0x401, 0x6a3b83c8}, {0x38aa, 0xb1, 0x4, 0xcd73, 0x8, 0x1}, {0x716, 0x2, 0x5, 0xfffffff4, 0x3, 0x3652}, {0xffffffff, 0xf5, 0x7, 0x9, 0x4371, 0xfffffffb}, {0x53af, 0x8, 0x7, 0x9, 0x9, 0x2}, {0x3296135b, 0x8, 0x8, 0xf, 0x6, 0xe3f4}, {0x3, 0xffff, 0x7, 0x4, 0x9, 0x10000}, {0xd, 0x7f, 0x3, 0x7, 0x2, 0x18}, {0x0, 0xfffffffc, 0x890, 0x1, 0x4, 0x9}, {0x1000, 0x23c3, 0xa, 0x3, 0x8d5f, 0x2}, {0x5, 0xfffffff9, 0x679, 0x9, 0x0, 0xdf}, {0x2, 0x3, 0x9, 0x9, 0x7, 0x1}, {0x7, 0x7, 0x0, 0x7, 0x7f, 0x8}, {0x47de45d8, 0x7, 0xa6, 0x9, 0x6, 0xfffffffb}, {0x2, 0x808, 0x6, 0x9, 0x6, 0x6}, {0x5, 0x1, 0x7, 0x100, 0x200, 0x10001}, {0x9, 0xffff5bf5, 0x5, 0xc91, 0x8, 0x1}, {0x22e0, 0x6, 0x93a, 0xa9, 0x8, 0x9}, {0x26, 0x8, 0x32bf, 0x5, 0x80, 0x1ff}, {0xffffffff, 0x9, 0x6, 0x3, 0x4f, 0xa}, {0xfffffffc, 0xfffffffc, 0x6, 0xffff9e72, 0x6, 0x8ac}, {0x1, 0x2, 0x8, 0x2, 0x0, 0x7}, {0x93a, 0x1, 0x4, 0x81, 0x1000, 0x800}, {0x1, 0x4, 0x1ff, 0x1, 0x7fffffff}, {0x0, 0x9, 0x2, 0x10001, 0x6, 0x3}, {0x6, 0x8000, 0x9, 0x6a, 0x0, 0x8}, {0x2, 0x7, 0xffffff1d, 0x3, 0x3, 0xffff}, {0xfff80000, 0x3, 0x4, 0x7, 0x14, 0x2}, {0x7fffffff, 0x5, 0x5, 0x4, 0x9ccb, 0x7fff}, {0x1ff, 0x0, 0x7, 0x8, 0x2, 0x83}, {0x7, 0x748886a4, 0x7, 0x0, 0x4}, {0x5, 0x0, 0x10000000, 0x80000000, 0x5, 0x5}, {0xfffff44e, 0x101, 0x7, 0x5, 0x9, 0x9}, {0xfe, 0x38d, 0x1ff, 0x8, 0x4, 0x7b04}, {0x3, 0x6, 0x400, 0x8001, 0x101, 0x3}, {0x80000001, 0x8000, 0xfff, 0x4, 0x3, 0x2}, {0xf, 0x4, 0x2, 0xe0000000, 0xfffffffc, 0x3}, {0xf, 0x7, 0x80000000, 0x2, 0x3, 0x4}, {0x3ff, 0x7, 0x3, 0x8, 0x5, 0xffffffff}, {0xfffffffd, 0xbf, 0x0, 0x3433ffa, 0x3, 0x8}, {0x9, 0x8cd0, 0x3, 0x1, 0x8, 0xf}, {0x1, 0x80000000, 0x1, 0x0, 0x67, 0x8}, {0x7fffffff, 0x1, 0x69ae239d, 0xb764, 0x200, 0x1}, {0x3, 0x8, 0x10000, 0x400, 0x40, 0xfff}, {0x4, 0x7fff, 0x1ff, 0x1, 0x3, 0x352d7aae}, {0x32, 0x4, 0x7, 0x9, 0x2, 0xa1a7}, {0x4, 0x0, 0xfff, 0x6, 0x1, 0x8}, {0xb722, 0x3, 0x400, 0x10000, 0xc, 0x7fff}, {0xffff7fff, 0x2, 0x7, 0x4c, 0x7, 0x3fe4}, {0x9, 0x6, 0x401, 0x80, 0x8, 0x7}, {0x2e3, 0x8, 0x7, 0x5, 0x7fff, 0xcaee}, {0x18, 0x3, 0xf68, 0x3, 0x7f, 0xf}, {0xc6d9, 0x7, 0x89, 0x40fe, 0x9, 0xfff}, {0x4, 0x3, 0x7, 0x5, 0x0, 0x9}, {0x2, 0x7fffffff, 0x1, 0x4, 0x1, 0x8}, {0x0, 0x9, 0x7, 0x0, 0x7, 0x3}, {0x8, 0x7, 0x8, 0x9, 0x7, 0x3}, {0xc45, 0x7a, 0x6, 0x90000, 0x8, 0x101}, {0x0, 0x5, 0x3, 0x5, 0x3938, 0x6}, {0x7fffffff, 0x10001, 0x9, 0x1, 0xfffffffc, 0xfffeffff}, {0x7, 0x8, 0x6, 0xfffffff9, 0x8, 0x6}, {0xd, 0xc34, 0x80000000, 0x7, 0x3, 0x10000}, {0x0, 0x1, 0x1, 0x6, 0x2, 0x4}, {0x3, 0xf, 0x9, 0xfff, 0x4, 0x1}, {0x28000, 0x5, 0x5, 0xfffffff5, 0x4acc, 0x4}, {0x2, 0x7, 0x9, 0x4, 0x4, 0x2}, {0x7, 0x1, 0x3, 0x1ff, 0x0, 0x9}, {0x2, 0x6, 0x400, 0x80000000, 0x80000000, 0x8}, {0x3ff, 0x2, 0xfffffffd, 0x3, 0xb, 0x81}, {0x0, 0x3, 0xeed5, 0x691, 0x7f, 0x7}, {0x8af, 0x8, 0x6, 0x2, 0x8, 0xe}, {0x200, 0x10000, 0x6, 0x0, 0x9, 0x401}, {0x1, 0x97f3, 0x6, 0x5, 0xd35, 0xe2}, {0x81, 0x1d, 0x8, 0x1, 0x2, 0x7}, {0x1, 0xeca1, 0x8, 0x7, 0x1, 0x1000}, {0x0, 0x406a, 0x1, 0x8, 0x3, 0x6}, {0x2, 0x4, 0x5, 0x24bce04f, 0x5, 0x7}, {0x3ca, 0x101, 0x1ff, 0x6, 0x0, 0x1}, {0x1, 0xffff, 0x8, 0x0, 0xfffff000, 0x7}], [{}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0xc}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0xd7c74874bdd45536}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0xf, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0xba, 0x6, "1405839422bc2eb8dacb3bb4fa905d8408871dd7afe7d8c306828140d0aba8f7d5e2cc89348b5cb3a1dd5ef2dce71599cbfdf256077c794c7f3eb2c3107a96f7c232bcdb49be5c05a9785383e7ca1652da525f7cd89659c5d6d127004560b2c8d73435a5ec9a22550148e662c7b4b9ae03243a33b27b78018c048e2fe51a95ff833c0c6c6c1ba7e0648da019afb45fccf22ab0fb81ec2e6a2dd13d464216ea6d15d8f8675a4b0e34c1e9c62ed900962e8dfdacbf0e01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_ACT={0x103c, 0x6, [@m_mpls={0x1038, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_ACT={0x1a8, 0x6, [@m_gact={0x1a4, 0x1f, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x23ec, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x3, 0x95, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xbe2, 0x2, 0x1, 0x6ed, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x6, 0x80000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ffe, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x8, 0x2, 0x6, 0x7}}]}, {0xf4, 0x6, "41f8eb89dd16b54321bc2809bb68e6c9e1cc1f9aa681086588bb9ab506fea6bfa606b84737f4db8d4146fb0edd93c40eab675a5275a8fd1c1fa636ca7b3965cbd4ee53cf8ce7b86fb6456c58b065bbb238284b35f78f7906bde0a17cc58ee03175a4ed0ea5fa95a858b0433c11577c7bafdcc04088974fd30407c0a6ed7bb85e549698001b661ed6ba234d08a54d0283611f2795f247e81bbbafe2aff638ca11f615af936b4d8b42bd8aba725211eaa32a4d947c1b5c456b61d4e32a2b7da30e00c047ec3e7581f0f377e2e695a7b33a18e786b604012a98f2385ecf3104b2d8135fe98460670ccd230342d2431ff94e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x24e8}, 0x1, 0x0, 0x0, 0x1}, 0x4801) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000002780)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0x2e, &(0x7f00000027c0)={@empty, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @broadcast}}}}, &(0x7f0000002800)={0x1, 0x4, [0x527, 0x43b, 0x39f, 0xbfd]}) r5 = openat$sequencer(0xffffff9c, &(0x7f0000002840), 0x840, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r5, 0x40285107) ioctl$RTC_AIE_OFF(r2, 0x7002) r6 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r6, &(0x7f0000002880)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x4, 0x6, 0x7, 0x2, 0x2, 0x6, 0xa, 0x26, 0x38, 0x12e, 0x4, 0x5, 0x20, 0x3, 0xc5, 0x3, 0x1}, [{0x1, 0x4, 0x7, 0xc00000, 0xaf, 0x9, 0x9, 0x7}, {0x1, 0x4f62f913, 0x0, 0x1, 0x10001, 0x41, 0x6, 0x80000000}, {0x0, 0xc8, 0x0, 0x308, 0x2de3000, 0x7, 0x5, 0x4}], "3fb11fb99749789a426c769a93f9d83440e878a2c0f97ea685c70c2fbbade78dd91c5f", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5bb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x18, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x4000000) fgetxattr(r2, &(0x7f0000002f40)=@random={'btrfs.', '!-%%\\,]\x00'}, &(0x7f0000002f80)=""/131, 0x83) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) recvmsg$can_j1939(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/27, 0x1b}], 0x2, &(0x7f00000040c0)=""/242, 0xf2}, 0x40000101) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000004200)=0x0) timer_create(0x2, &(0x7f0000004240)={0x0, 0xb, 0x0, @tid=r9}, &(0x7f0000004280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000042c0)) write$P9_RREADDIR(r2, &(0x7f0000004300)={0x141, 0x29, 0x1, {0x10, [{{0x40, 0x1, 0x6284}, 0x4a5c, 0x9, 0x7, './file0'}, {{0x0, 0x3}, 0x3, 0x3, 0x7, './file0'}, {{0x20, 0x2, 0x6}, 0x80000001, 0x1, 0x7, './file0'}, {{0x2, 0x2, 0x8}, 0x3, 0x10, 0x7, './file0'}, {{0x10, 0x1}, 0x0, 0x4, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x9, 0x3, 0x7, './file0'}, {{0x2, 0x4, 0x1}, 0x4, 0x6, 0x7, './file0'}, {{0x28, 0x4, 0x8}, 0x100, 0x0, 0x7, './file0'}, {{0x2, 0x2, 0x6}, 0x4, 0x2, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x4, 0x3, 0x7, './file0'}]}}, 0x141) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000044c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000004500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000004e40)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004e00)={&(0x7f0000004540)={0x89c, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x874, 0x111, 0x0, 0x1, {0x870, 0x5, 0x0, 0x1, [{0x3f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x58}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xde}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x92}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x315}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dcfa182}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2fd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000004e80)={0x0, 0x100000001, 0x8}) 5.007132175s ago: executing program 0 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6(0xa, 0x3, 0xfff) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f00000002c0)={'binder1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf2543000000"], 0x14}, 0x1, 0x0, 0x0, 0x28861}, 0xc800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x4804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r3, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x5, 0x3a) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x20}}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1840246}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0xf00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x10) 77.943425ms ago: executing program 0 (id=388): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004010) 0s ago: executing program 0 (id=389): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) write$P9_RLERROR(r0, &(0x7f0000000080)={0x18, 0x7, 0x2, {0xf, '&,,}]#$$%^!/*&@'}}, 0x18) r2 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x24100, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000100)) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x756, 0x8c002) write$nbd(r3, &(0x7f0000000180)={0x67446698, 0x1, 0x4, 0x0, 0x4, "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"}, 0x1010) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000011c0)={0x2, 0x9}) write$P9_RLINK(r3, &(0x7f0000001200)={0x7, 0x47, 0x2}, 0x7) r5 = socket(0x1e, 0x5, 0x3) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x6}}]}, 0x60}}, 0x8000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r5, 0x30342000) r7 = syz_open_dev$audion(&(0x7f00000013c0), 0x3, 0x41) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) stat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r7, &(0x7f0000001540)={0xa0, 0x19, 0x2, {0x208b, {0x40, 0x0, 0x3}, 0x80, r8, r9, 0x3, 0xc, 0x2, 0x7fff, 0x100, 0x2, 0x2, 0x4f7000, 0x54, 0x6, 0x1, 0x6, 0x4265, 0x3, 0x100}}, 0xa0) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000001600)={0x1, 0x0, 0x0, 0x3, 0x8001, 0x40, 0x1, 0x23a3, 0x400}) pipe2$9p(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSYMLINK(r11, &(0x7f0000001680)={0x14, 0x11, 0x1, {0x74, 0x1, 0x5}}, 0x14) syz_genetlink_get_family_id$fou(&(0x7f00000016c0), r3) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000001700)="9ed8a5cc6fd38487b87c43131cd42fbbcaa96027f4e279b67e533d0b5dff30ab805736fb5feaa1d1c7f598f258791d5c74f69bc243d54f51c7a79c33c702761a0ed231438b2dcc5bb265c49ae8df6ee24de113114bd358800aa93cf12a8f7140b9b78515f427c9ea8066212e132f4973aa57f99ea1f4215caae14b5acd75317148b3db7b1d5a6f671a99c1cacef1dbed2d9f8c6c0e73db50ab8202511d43463a2e07287d0f70a18b858141030c998c91ac9597f42db82c389e898019555d2e747b22109500882f52cdfd6ddffe9b15dcd4f42d1e09239ef7045ebf93c05c6a2d4cc6ecced210f1") r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r12) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r3) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000002b00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000018c0)={0x11c0, r13, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0xa}, {0x9, 0x6}}}}, @NL80211_ATTR_FRAME={0x1154, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1}, {0xff}, @initial, @broadcast, @initial, {0xe, 0xf}}, @a_msdu=[{@broadcast, @device_b, 0x1, "0f"}, {@broadcast, @device_a, 0xe2, "3bce8b89739b9c68781bdf2c91605a0035a0e78fa056ac165888053f201c669653d68eb8801794d2709b6d836dc26a5ae98c5bec9c0493a0ea8f1b4bfb03ecc9c5e5ad23f1a4a77e8f5816838ba62d61f8d1e473548c14b73aa4dd122a266e19534012ffe7cf1f59edfd30986cf4681cc247bb105682ab679a2fcfff43fb97f1b3b1cb8a0afec017fca2d687fbe9e96b866c5008eddd62996b60cd621cff02e48c5bf2fb35f077d7e9111fb855530c5792f76726cc7c9212a74e402673bef3b9aae4f3491afc216a628be63abaac5b65927710d6dc97084720413c13f16cd6f58b92"}, {@device_a, @device_b, 0x1000, "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"}, {@device_b, @device_a, 0x8, "7aca62cd18cccb2a"}, {@device_b, @broadcast}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x60}]}, 0x11c0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, &(0x7f0000002b40)={{r3}, {@void, @actul_num={@void, 0x54, 0x6d}}}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000002b80)) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000002bc0)={0x2, 0xffffffffffffffff, 0x1}) kernel console output (not intermixed with test programs): [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 143.786720][ T4232] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 143.786831][ T4232] r7:20000180 r6:84cf30c1 r5:00000000 r4:c074510c [ 143.786851][ T4232] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 143.786991][ T4232] Exception stack(0xec855fa8 to 0xec855ff0) [ 143.787271][ T4232] 5fa0: 00000000 00000000 00000003 c074510c 20000180 00000000 [ 143.787339][ T4232] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76f5f0bc [ 143.787376][ T4232] 5fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 143.787462][ T4232] r10:00000036 r9:84eac800 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 143.787489][ T4232] r4:00000000 [ 143.790254][ T4232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.028263][ T29] audit: type=1400 audit(143.950:130): avc: denied { create } for pid=4237 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.032670][ T4238] FAULT_INJECTION: forcing a failure. [ 144.032670][ T4238] name failslab, interval 1, probability 0, space 0, times 0 [ 144.033958][ T4238] CPU: 1 UID: 0 PID: 4238 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT [ 144.034038][ T4238] Hardware name: ARM-Versatile Express [ 144.034054][ T4238] Call trace: [ 144.034079][ T4238] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 144.034144][ T4238] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 144.034154][ T4238] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 144.034228][ T4238] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 144.034480][ T4238] r5:84eac800 r4:82918c48 [ 144.034489][ T4238] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 144.034528][ T4238] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 144.034606][ T4238] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 144.034619][ T4238] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 144.034654][ T4238] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 144.034741][ T4238] r10:84eac800 r9:830a7000 r8:00000000 r7:85476aa0 r6:83ec4aa8 r5:00001000 [ 144.034752][ T4238] r4:00000000 [ 144.034761][ T4238] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 144.034858][ T4238] r10:84eac800 r9:00000000 r8:83ec4a80 r7:000089a0 r6:00000004 r5:81cd6ac0 [ 144.034871][ T4238] r4:83ec4aa8 r3:826c2240 [ 144.034898][ T4238] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 144.034943][ T4238] r9:00000003 r8:83ec4a80 r7:00000000 r6:00000000 r5:000089a0 r4:83ec4a80 [ 144.034952][ T4238] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 144.034990][ T4238] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 144.035031][ T4238] r7:00000000 r6:83ec4a81 r5:00000000 r4:000089a0 [ 144.035041][ T4238] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 144.035067][ T4238] Exception stack(0xec8a1fa8 to 0xec8a1ff0) [ 144.035090][ T4238] 1fa0: 00000000 00000000 00000003 000089a0 00000000 00000000 [ 144.035110][ T4238] 1fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76f5f0bc [ 144.035125][ T4238] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 144.035146][ T4238] r10:00000036 r9:84eac800 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 144.035156][ T4238] r4:00000000 [ 144.046862][ T4238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.049700][ T29] audit: type=1400 audit(143.970:131): avc: denied { ioctl } for pid=4237 comm="syz.1.166" path="socket:[3685]" dev="sockfs" ino=3685 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.165983][ T4241] fuse: Unknown parameter 'fd0x0000000000000003' [ 144.303591][ T29] audit: type=1400 audit(144.230:132): avc: denied { create } for pid=4242 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.306622][ T29] audit: type=1400 audit(144.230:133): avc: denied { setopt } for pid=4242 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.562808][ T4247] FAULT_INJECTION: forcing a failure. [ 144.562808][ T4247] name failslab, interval 1, probability 0, space 0, times 0 [ 144.564877][ T4247] CPU: 1 UID: 0 PID: 4247 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT [ 144.565095][ T4247] Hardware name: ARM-Versatile Express [ 144.565229][ T4247] Call trace: [ 144.565333][ T4247] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 144.565462][ T4247] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 144.565485][ T4247] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 144.565545][ T4247] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 144.565607][ T4247] r5:8500bc00 r4:82918c48 [ 144.565626][ T4247] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 144.565724][ T4247] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 144.565816][ T4247] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 144.565841][ T4247] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 144.565905][ T4247] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 144.565998][ T4247] r10:8500bc00 r9:830a6000 r8:00000000 r7:8341a660 r6:84cf3b68 r5:00001000 [ 144.566022][ T4247] r4:00000000 [ 144.566041][ T4247] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 144.566123][ T4247] r10:8500bc00 r9:00000000 r8:84cf3b40 r7:810c5701 r6:00000004 r5:81cd6ac0 [ 144.566151][ T4247] r4:84cf3b68 r3:826c2240 [ 144.566169][ T4247] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 144.566244][ T4247] r9:00000003 r8:84cf3b40 r7:00000000 r6:00000000 r5:810c5701 r4:84cf3b40 [ 144.566269][ T4247] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 144.566350][ T4247] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 144.566429][ T4247] r7:00000000 r6:84cf3b41 r5:00000000 r4:810c5701 [ 144.566452][ T4247] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 144.566508][ T4247] Exception stack(0xec9adfa8 to 0xec9adff0) [ 144.566557][ T4247] dfa0: 00000000 00000000 00000003 810c5701 00000000 00000000 [ 144.566604][ T4247] dfc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76f5f0bc [ 144.566634][ T4247] dfe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 144.566673][ T4247] r10:00000036 r9:8500bc00 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 144.566693][ T4247] r4:00000000 [ 144.588044][ T4247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.845229][ T4251] fuse: Unknown parameter 'fd0x0000000000000003' [ 145.223245][ T4257] FAULT_INJECTION: forcing a failure. [ 145.223245][ T4257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.224137][ T4257] CPU: 1 UID: 0 PID: 4257 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT [ 145.224295][ T4257] Hardware name: ARM-Versatile Express [ 145.224326][ T4257] Call trace: [ 145.224375][ T4257] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 145.224498][ T4257] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 145.224518][ T4257] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 145.224579][ T4257] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 145.224652][ T4257] r5:84eab000 r4:8294fc90 [ 145.224669][ T4257] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 145.224739][ T4257] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 145.224817][ T4257] r8:76f5ef30 r7:00000000 r6:00000000 r5:eca0df68 r4:00000002 [ 145.224838][ T4257] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 145.224894][ T4257] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 145.225007][ T4257] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 145.225084][ T4257] r10:00000001 r9:80624b04 r8:00000002 r7:eca0df68 r6:0000000f r5:76f5ef30 [ 145.225108][ T4257] r4:84eab000 r3:eca0de9f [ 145.225124][ T4257] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 145.225192][ T4257] r8:76f5ef30 r7:eca0df68 r6:84eab000 r5:0000000f r4:83ec4d80 [ 145.225209][ T4257] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 145.225272][ T4257] r10:00000003 r9:84eab000 r8:8020029c r7:00000000 r6:00000000 r5:83ec4d80 [ 145.225295][ T4257] r4:83ec4d83 [ 145.225313][ T4257] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 145.225372][ T4257] r7:00000003 r6:00000004 r5:76f5ef30 r4:0000000f [ 145.225390][ T4257] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 145.225432][ T4257] Exception stack(0xeca0dfa8 to 0xeca0dff0) [ 145.225476][ T4257] dfa0: 0000000f 76f5ef30 00000004 76f5ef30 0000000f 00000000 [ 145.225511][ T4257] dfc0: 0000000f 76f5ef30 00000004 00000003 00310000 00000000 00006364 76f5f0bc [ 145.225538][ T4257] dfe0: 00000158 76f5eed0 000d801c 0013022c [ 146.775954][ T4274] FAULT_INJECTION: forcing a failure. [ 146.775954][ T4274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.783455][ T4274] CPU: 0 UID: 0 PID: 4274 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT [ 146.783628][ T4274] Hardware name: ARM-Versatile Express [ 146.783657][ T4274] Call trace: [ 146.783705][ T4274] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 146.783829][ T4274] r7:ec8a1f58 r6:00000000 r5:60000013 r4:822958fc [ 146.783852][ T4274] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 146.783922][ T4274] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 146.783990][ T4274] r5:84ea9800 r4:8294fc90 [ 146.784007][ T4274] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 146.784071][ T4274] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 146.784144][ T4274] r8:00000000 r7:ec8a1f58 r6:00000001 r5:20000040 r4:ec8a1f38 [ 146.784163][ T4274] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 146.784233][ T4274] [<80999a68>] (should_fail_usercopy) from [<803237b4>] (get_old_itimerspec32+0x34/0x148) [ 146.784310][ T4274] [<80323780>] (get_old_itimerspec32) from [<80338ae8>] (sys_timer_settime32+0x74/0xf0) [ 146.784404][ T4274] r8:00000000 r7:ec8a1f58 r6:00000001 r5:20000040 r4:00000000 [ 146.784427][ T4274] [<80338a74>] (sys_timer_settime32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 146.784484][ T4274] Exception stack(0xec8a1fa8 to 0xec8a1ff0) [ 146.784528][ T4274] 1fa0: 00000000 00000000 00000000 00000001 20000040 00000000 [ 146.784567][ T4274] 1fc0: 00000000 00000000 00130308 00000102 00310000 00000000 00006364 76f5f0bc [ 146.784602][ T4274] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 146.784647][ T4274] r9:84ea9800 r8:8020029c r7:00000102 r6:00130308 r5:00000000 r4:00000000 [ 146.810389][ T29] audit: type=1400 audit(146.730:134): avc: denied { create } for pid=4273 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.828438][ T29] audit: type=1400 audit(146.750:135): avc: denied { read } for pid=4273 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.470384][ T29] audit: type=1400 audit(149.390:136): avc: denied { create } for pid=4282 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.481901][ T29] audit: type=1400 audit(149.400:137): avc: denied { getopt } for pid=4282 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.586957][ T29] audit: type=1400 audit(149.510:138): avc: denied { getopt } for pid=4284 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.609616][ T29] audit: type=1400 audit(149.530:139): avc: denied { ioctl } for pid=4284 comm="syz.1.184" path="socket:[4176]" dev="sockfs" ino=4176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.990070][ T29] audit: type=1400 audit(149.910:140): avc: denied { create } for pid=4288 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.044913][ T4291] FAULT_INJECTION: forcing a failure. [ 150.044913][ T4291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.047575][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT [ 150.047726][ T4291] Hardware name: ARM-Versatile Express [ 150.047757][ T4291] Call trace: [ 150.047808][ T4291] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 150.047961][ T4291] r7:ecbc5e20 r6:00000000 r5:60000013 r4:822958fc [ 150.048008][ T4291] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 150.048090][ T4291] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 150.048187][ T4291] r5:85008c00 r4:8294fc90 [ 150.048208][ T4291] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 150.048281][ T4291] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 150.048356][ T4291] r8:00000004 r7:ecbc5e20 r6:2000a380 r5:00000000 r4:ecbc5f20 [ 150.048380][ T4291] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 150.048443][ T4291] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 150.048517][ T4291] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 150.048595][ T4291] r8:00000004 r7:00000000 r6:837d7680 r5:ecbc5f20 r4:ecbc5e64 [ 150.048705][ T4291] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 150.048948][ T4291] r10:00000128 r9:85008c00 r8:83ec4cc0 r7:00000004 r6:2000a380 r5:83ec4cc1 [ 150.048978][ T4291] r4:00000004 [ 150.049005][ T4291] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 150.049076][ T4291] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 150.049093][ T4291] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 150.049145][ T4291] Exception stack(0xecbc5fa8 to 0xecbc5ff0) [ 150.049192][ T4291] 5fa0: 00000000 00000000 00000004 2000a380 00000004 00000000 [ 150.049239][ T4291] 5fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76f5f0bc [ 150.049273][ T4291] 5fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 150.378735][ T4297] FAULT_INJECTION: forcing a failure. [ 150.378735][ T4297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.379046][ T4297] CPU: 0 UID: 0 PID: 4297 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT [ 150.379138][ T4297] Hardware name: ARM-Versatile Express [ 150.379165][ T4297] Call trace: [ 150.379303][ T4297] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 150.379415][ T4297] r7:ecbc1e20 r6:00000000 r5:60000013 r4:822958fc [ 150.379436][ T4297] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 150.379490][ T4297] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 150.379613][ T4297] r5:8500e000 r4:8294fc90 [ 150.379804][ T4297] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 150.380032][ T4297] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 150.380141][ T4297] r8:0000c800 r7:ecbc1e20 r6:20003fc0 r5:00000000 r4:ecbc1f20 [ 150.380297][ T4297] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 150.380377][ T4297] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 150.380608][ T4297] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 150.380750][ T4297] r8:0000c800 r7:00000000 r6:85458000 r5:ecbc1f20 r4:ecbc1e64 [ 150.380891][ T4297] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 150.381019][ T4297] r10:00000128 r9:8500e000 r8:84cf3540 r7:0000c800 r6:20003fc0 r5:84cf3541 [ 150.381043][ T4297] r4:00000004 [ 150.381060][ T4297] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 150.381126][ T4297] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 150.381144][ T4297] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 150.381195][ T4297] Exception stack(0xecbc1fa8 to 0xecbc1ff0) [ 150.381236][ T4297] 1fa0: 00000000 00000000 00000004 20003fc0 0000c800 00000000 [ 150.381270][ T4297] 1fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76f5f0bc [ 150.381297][ T4297] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 150.613792][ T29] audit: type=1400 audit(150.540:141): avc: denied { ioctl } for pid=4301 comm="syz.1.191" path="socket:[3829]" dev="sockfs" ino=3829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.624826][ T29] audit: type=1400 audit(150.550:142): avc: denied { bind } for pid=4301 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.635051][ T4302] FAULT_INJECTION: forcing a failure. [ 150.635051][ T4302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.637050][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.1.191 Not tainted syzkaller #0 PREEMPT [ 150.637175][ T4302] Hardware name: ARM-Versatile Express [ 150.637204][ T4302] Call trace: [ 150.637247][ T4302] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 150.637381][ T4302] r7:76f5de1c r6:00000000 r5:60000013 r4:822958fc [ 150.637405][ T4302] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 150.637464][ T4302] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 150.637526][ T4302] r5:8500bc00 r4:8294fc90 [ 150.637543][ T4302] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 150.637611][ T4302] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 150.637683][ T4302] r8:83ec4001 r7:76f5de1c r6:eb155ee4 r5:0000000c r4:0000000c [ 150.637704][ T4302] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 150.637760][ T4302] [<80999a68>] (should_fail_usercopy) from [<81597e5c>] (move_addr_to_kernel+0x34/0xf8) [ 150.637834][ T4302] [<81597e28>] (move_addr_to_kernel) from [<815994cc>] (__sys_sendto+0xd0/0x160) [ 150.637904][ T4302] r7:76f5de1c r6:837d6280 r5:00000000 r4:00000000 [ 150.637923][ T4302] [<815993fc>] (__sys_sendto) from [<81599578>] (sys_sendto+0x1c/0x24) [ 150.638002][ T4302] r9:8500bc00 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76f5de1c [ 150.638022][ T4302] [<8159955c>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 150.638079][ T4302] Exception stack(0xeb155fa8 to 0xeb155ff0) [ 150.638121][ T4302] 5fa0: 76f5de1c 0000000c 00000004 76f5deb0 00000020 00000000 [ 150.638158][ T4302] 5fc0: 76f5de1c 0000000c 00000000 00000122 00000004 00000000 76f5deb0 76f5f0bc [ 150.638189][ T4302] 5fe0: 00000000 76f5ddf0 000d801c 001347f8 [ 150.687151][ T29] audit: type=1400 audit(150.610:143): avc: denied { getopt } for pid=4288 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.692308][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 151.138252][ T29] audit: type=1400 audit(151.060:144): avc: denied { ioctl } for pid=4313 comm="syz.1.193" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.341813][ T29] audit: type=1400 audit(151.260:145): avc: denied { setopt } for pid=4323 comm="syz.1.194" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.288848][ T4335] FAULT_INJECTION: forcing a failure. [ 152.288848][ T4335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.292899][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT [ 152.293089][ T4335] Hardware name: ARM-Versatile Express [ 152.293120][ T4335] Call trace: [ 152.293170][ T4335] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 152.293292][ T4335] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 152.293313][ T4335] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 152.293372][ T4335] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 152.293434][ T4335] r5:8500a400 r4:8294fc90 [ 152.293452][ T4335] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 152.293519][ T4335] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 152.293602][ T4335] r8:76f5ef30 r7:00000000 r6:00000000 r5:eccddf68 r4:00000002 [ 152.293622][ T4335] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 152.293680][ T4335] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 152.293738][ T4335] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 152.293814][ T4335] r10:00000001 r9:80624b04 r8:00000002 r7:eccddf68 r6:0000000f r5:76f5ef30 [ 152.293839][ T4335] r4:8500a400 r3:eccdde9f [ 152.293857][ T4335] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 152.293926][ T4335] r8:76f5ef30 r7:eccddf68 r6:8500a400 r5:0000000f r4:83ec4840 [ 152.293945][ T4335] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 152.294008][ T4335] r10:00000003 r9:8500a400 r8:8020029c r7:00000000 r6:00000000 r5:83ec4840 [ 152.294032][ T4335] r4:83ec4843 [ 152.294050][ T4335] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 152.294108][ T4335] r7:00000003 r6:00000004 r5:76f5ef30 r4:0000000f [ 152.294127][ T4335] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 152.294177][ T4335] Exception stack(0xeccddfa8 to 0xeccddff0) [ 152.294224][ T4335] dfa0: 0000000f 76f5ef30 00000004 76f5ef30 0000000f 00000000 [ 152.294263][ T4335] dfc0: 0000000f 76f5ef30 00000004 00000003 00310000 00000000 00006364 76f5f0bc [ 152.294295][ T4335] dfe0: 00000158 76f5eed0 000d801c 0013022c [ 152.571911][ T4342] FAULT_INJECTION: forcing a failure. [ 152.571911][ T4342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.572367][ T4342] CPU: 0 UID: 0 PID: 4342 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT [ 152.572470][ T4342] Hardware name: ARM-Versatile Express [ 152.572502][ T4342] Call trace: [ 152.572560][ T4342] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 152.572695][ T4342] r7:ecd49e20 r6:00000000 r5:60000013 r4:822958fc [ 152.572844][ T4342] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 152.572974][ T4342] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 152.573040][ T4342] r5:85008000 r4:8294fc90 [ 152.573059][ T4342] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 152.573127][ T4342] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 152.573238][ T4342] r8:00008000 r7:ecd49e20 r6:20000340 r5:00000000 r4:ecd49f20 [ 152.573264][ T4342] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 152.573325][ T4342] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 152.573396][ T4342] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 152.573459][ T4342] r8:00008000 r7:00000000 r6:85458f00 r5:ecd49f20 r4:ecd49e64 [ 152.573478][ T4342] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 152.573549][ T4342] r10:00000128 r9:85008000 r8:84cf3540 r7:00008000 r6:20000340 r5:84cf3541 [ 152.573572][ T4342] r4:00000003 [ 152.573592][ T4342] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 152.573677][ T4342] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 152.573696][ T4342] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 152.573749][ T4342] Exception stack(0xecd49fa8 to 0xecd49ff0) [ 152.573793][ T4342] 9fa0: 00000000 00000000 00000003 20000340 00008000 00000000 [ 152.573832][ T4342] 9fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76fde0bc [ 152.573864][ T4342] 9fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 152.683579][ T4344] FAULT_INJECTION: forcing a failure. [ 152.683579][ T4344] name failslab, interval 1, probability 0, space 0, times 0 [ 152.683820][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT [ 152.683872][ T4344] Hardware name: ARM-Versatile Express [ 152.683887][ T4344] Call trace: [ 152.683941][ T4344] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 152.684005][ T4344] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 152.684016][ T4344] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 152.684045][ T4344] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 152.684077][ T4344] r5:84fdc800 r4:82918c48 [ 152.684085][ T4344] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 152.684117][ T4344] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 152.684226][ T4344] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 152.684247][ T4344] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 152.684283][ T4344] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 152.684329][ T4344] r10:84fdc800 r9:830a6000 r8:00000000 r7:834f9440 r6:84cf3568 r5:00001000 [ 152.684340][ T4344] r4:00000000 [ 152.684350][ T4344] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 152.684406][ T4344] r10:84fdc800 r9:00000000 r8:84cf3540 r7:40046210 r6:00000004 r5:81cd6ac0 [ 152.684419][ T4344] r4:84cf3568 r3:826c2240 [ 152.684428][ T4344] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 152.684467][ T4344] r9:00000004 r8:84cf3540 r7:00000000 r6:00000000 r5:40046210 r4:84cf3540 [ 152.684477][ T4344] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 152.684511][ T4344] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 152.684549][ T4344] r7:00000000 r6:84cf3541 r5:00000000 r4:40046210 [ 152.684558][ T4344] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 152.684810][ T4344] Exception stack(0xeccbdfa8 to 0xeccbdff0) [ 152.684862][ T4344] dfa0: 00000000 00000000 00000004 40046210 00000000 00000000 [ 152.684884][ T4344] dfc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 152.684901][ T4344] dfe0: 76fddec0 76fddeb0 000192bc 00132360 [ 152.684976][ T4344] r10:00000036 r9:84fdc800 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 152.684993][ T4344] r4:00000000 [ 152.689624][ T4344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.731647][ T3717] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.892487][ T3717] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 153.892846][ T3717] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 153.895113][ T3717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.905974][ T3717] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.906297][ T3717] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.906856][ T3717] usb 1-1: Product: syz [ 153.906972][ T3717] usb 1-1: Manufacturer: syz [ 153.907107][ T3717] usb 1-1: SerialNumber: syz [ 153.919988][ T3717] usb 1-1: config 0 descriptor?? [ 153.929499][ T3717] hub 1-1:0.0: bad descriptor, ignoring hub [ 153.929893][ T3717] hub 1-1:0.0: probe with driver hub failed with error -5 [ 153.950529][ T3717] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 154.143199][ T4355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.145539][ T4355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.279446][ T3717] usb 1-1: USB disconnect, device number 9 [ 154.290259][ T4379] FAULT_INJECTION: forcing a failure. [ 154.290259][ T4379] name failslab, interval 1, probability 0, space 0, times 0 [ 154.303556][ T4379] CPU: 0 UID: 0 PID: 4379 Comm: syz.0.205 Not tainted syzkaller #0 PREEMPT [ 154.303707][ T4379] Hardware name: ARM-Versatile Express [ 154.303731][ T4379] Call trace: [ 154.303773][ T4379] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 154.303875][ T4379] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 154.303893][ T4379] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 154.303941][ T4379] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 154.303993][ T4379] r5:83976c00 r4:82918c48 [ 154.304008][ T4379] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 154.304062][ T4379] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 154.304126][ T4379] r8:0000003c r7:00000000 r6:00000cc0 r5:8293da28 r4:83001240 [ 154.304142][ T4379] [<8053a3f4>] (should_failslab) from [<8051a5dc>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 154.304194][ T4379] [<8051a590>] (__kmalloc_cache_noprof) from [<807803f8>] (key_user_lookup+0x84/0x170) [ 154.304296][ T4379] r10:84430840 r9:83976c00 r8:82ae400c r7:00000000 r6:2778b062 r5:8293da28 [ 154.304318][ T4379] r4:8293da24 [ 154.304334][ T4379] [<80780374>] (key_user_lookup) from [<807845c8>] (keyctl_chown_key+0x208/0x458) [ 154.304408][ T4379] r9:83976c00 r8:00000001 r7:2778b062 r6:2778b062 r5:84430841 r4:2778b062 [ 154.304424][ T4379] [<807843c0>] (keyctl_chown_key) from [<80785928>] (sys_keyctl+0x214/0x318) [ 154.304536][ T4379] r10:00000137 r9:83976c00 r8:8020029c r7:00000137 r6:00130308 r5:00000000 [ 154.304555][ T4379] r4:00000000 [ 154.304570][ T4379] [<80785714>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 154.304618][ T4379] Exception stack(0xece51fa8 to 0xece51ff0) [ 154.304657][ T4379] 1fa0: 00000000 00000000 00000004 2778b062 2778b062 2778b062 [ 154.304691][ T4379] 1fc0: 00000000 00000000 00130308 00000137 00310000 00000000 00006364 76fde0bc [ 154.304717][ T4379] 1fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 154.304740][ T4379] r5:00000000 r4:00000000 [ 154.811535][ T3702] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.969344][ T3702] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 154.969714][ T3702] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 154.970221][ T3702] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.985946][ T3702] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.986305][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.986544][ T3702] usb 1-1: Product: syz [ 154.986693][ T3702] usb 1-1: Manufacturer: syz [ 154.986819][ T3702] usb 1-1: SerialNumber: syz [ 154.996632][ T3702] usb 1-1: config 0 descriptor?? [ 155.008313][ T3702] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.008586][ T3702] hub 1-1:0.0: probe with driver hub failed with error -5 [ 155.038480][ T3702] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 155.219275][ T4391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.222765][ T4391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.335934][ T4411] FAULT_INJECTION: forcing a failure. [ 155.335934][ T4411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.336381][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT [ 155.336486][ T4411] Hardware name: ARM-Versatile Express [ 155.336514][ T4411] Call trace: [ 155.336564][ T4411] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 155.336680][ T4411] r7:ecec9e20 r6:00000000 r5:60000013 r4:822958fc [ 155.336702][ T4411] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 155.336847][ T4411] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 155.337155][ T4411] r5:84fd8000 r4:8294fc90 [ 155.337182][ T4411] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 155.337276][ T4411] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 155.337372][ T4411] r8:04048040 r7:ecec9e20 r6:20000080 r5:00000000 r4:ecec9f20 [ 155.337448][ T4411] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 155.337574][ T4411] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 155.337657][ T4411] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 155.337799][ T4411] r8:04048040 r7:00000000 r6:837d7680 r5:ecec9f20 r4:ecec9e64 [ 155.337822][ T4411] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 155.337907][ T4411] r10:00000128 r9:84fd8000 r8:83ec4f00 r7:04048040 r6:20000080 r5:83ec4f01 [ 155.337931][ T4411] r4:00000003 [ 155.338096][ T4411] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 155.338440][ T4411] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 155.338468][ T4411] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 155.338529][ T4411] Exception stack(0xecec9fa8 to 0xecec9ff0) [ 155.338572][ T4411] 9fa0: 00000000 00000000 00000003 20000080 04048040 00000000 [ 155.338612][ T4411] 9fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76fde0bc [ 155.338685][ T4411] 9fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 155.346853][ T3702] usb 1-1: USB disconnect, device number 10 [ 155.588987][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 155.591287][ T29] audit: type=1400 audit(155.510:149): avc: denied { ioctl } for pid=4415 comm="syz.0.211" path="socket:[4279]" dev="sockfs" ino=4279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.868387][ T29] audit: type=1400 audit(155.790:150): avc: denied { create } for pid=4421 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.311381][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.469711][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 156.470065][ T9] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 156.473497][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.494396][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.494761][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.496479][ T9] usb 1-1: Product: syz [ 156.496877][ T9] usb 1-1: Manufacturer: syz [ 156.497150][ T9] usb 1-1: SerialNumber: syz [ 156.505499][ T9] usb 1-1: config 0 descriptor?? [ 156.515095][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 156.515619][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 156.536564][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 156.843060][ T9] usb 1-1: USB disconnect, device number 11 [ 157.181759][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 157.343041][ T45] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 157.343396][ T45] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 157.345106][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.373208][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.373448][ T45] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.375352][ T45] usb 1-1: Product: syz [ 157.375419][ T45] usb 1-1: Manufacturer: syz [ 157.375436][ T45] usb 1-1: SerialNumber: syz [ 157.380267][ T45] usb 1-1: config 0 descriptor?? [ 157.389803][ T45] hub 1-1:0.0: bad descriptor, ignoring hub [ 157.390169][ T45] hub 1-1:0.0: probe with driver hub failed with error -5 [ 157.409908][ T45] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 157.706529][ T45] usb 1-1: USB disconnect, device number 12 [ 159.231900][ T3717] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.361986][ T3717] usb 2-1: device descriptor read/64, error -71 [ 159.603381][ T3717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.741791][ T3717] usb 2-1: device descriptor read/64, error -71 [ 159.789531][ T4496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.851597][ T3717] usb usb2-port1: attempt power cycle [ 160.191931][ T3717] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.214765][ T3717] usb 2-1: device descriptor read/8, error -71 [ 160.453057][ T3717] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.473758][ T3717] usb 2-1: device descriptor read/8, error -71 [ 160.585937][ T3717] usb usb2-port1: unable to enumerate USB device [ 161.115993][ C0] vcan0: j1939_tp_rxtimer: 0x85c0a100: rx timeout, send abort [ 161.119746][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85c0a100: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.127534][ T4498] FAULT_INJECTION: forcing a failure. [ 161.127534][ T4498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.130015][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT [ 161.130209][ T4498] Hardware name: ARM-Versatile Express [ 161.130239][ T4498] Call trace: [ 161.130289][ T4498] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 161.130416][ T4498] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 161.130439][ T4498] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 161.130502][ T4498] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 161.130634][ T4498] r5:85009800 r4:8294fc90 [ 161.130659][ T4498] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 161.130728][ T4498] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 161.130794][ T4498] r8:76fddf30 r7:00000000 r6:00000000 r5:ecf79f68 r4:00000002 [ 161.130810][ T4498] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 161.130890][ T4498] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 161.130948][ T4498] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 161.131017][ T4498] r10:00000001 r9:80624b04 r8:00000002 r7:ecf79f68 r6:0000000f r5:76fddf30 [ 161.131043][ T4498] r4:85009800 r3:ecf79e9f [ 161.131063][ T4498] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 161.131130][ T4498] r8:76fddf30 r7:ecf79f68 r6:85009800 r5:0000000f r4:83ec4c00 [ 161.131148][ T4498] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 161.131209][ T4498] r10:00000003 r9:85009800 r8:8020029c r7:00000000 r6:00000000 r5:83ec4c00 [ 161.131229][ T4498] r4:83ec4c03 [ 161.131247][ T4498] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 161.131305][ T4498] r7:00000003 r6:00000004 r5:76fddf30 r4:0000000f [ 161.131322][ T4498] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 161.131374][ T4498] Exception stack(0xecf79fa8 to 0xecf79ff0) [ 161.131417][ T4498] 9fa0: 0000000f 76fddf30 00000004 76fddf30 0000000f 00000000 [ 161.131457][ T4498] 9fc0: 0000000f 76fddf30 00000004 00000003 00310000 00000000 00006364 76fde0bc [ 161.131487][ T4498] 9fe0: 00000158 76fdded0 000d801c 0013022c [ 161.143762][ T29] audit: type=1400 audit(161.070:151): avc: denied { read } for pid=2903 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 161.143965][ T29] audit: type=1400 audit(161.070:152): avc: denied { search } for pid=2903 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.144038][ T29] audit: type=1400 audit(161.070:153): avc: denied { search } for pid=2903 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.144091][ T29] audit: type=1400 audit(161.070:154): avc: denied { add_name } for pid=2903 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.145013][ T29] audit: type=1400 audit(161.070:155): avc: denied { create } for pid=2903 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.146500][ T29] audit: type=1400 audit(161.070:156): avc: denied { append open } for pid=2903 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.148388][ T29] audit: type=1400 audit(161.070:157): avc: denied { getattr } for pid=2903 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.851647][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.021710][ T9] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 163.022127][ T9] usb 1-1: config 1 has no interface number 0 [ 163.023831][ T9] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.024164][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 251, changing to 11 [ 163.024353][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 163.038887][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 163.039500][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.039614][ T9] usb 1-1: Product: syz [ 163.039657][ T9] usb 1-1: Manufacturer: syz [ 163.039734][ T9] usb 1-1: SerialNumber: syz [ 163.054025][ T4510] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.063338][ T9] usb 1-1: Expected 3 endpoints, found: 2 [ 163.264782][ T3702] usb 1-1: USB disconnect, device number 13 [ 164.647878][ C0] vcan0: j1939_tp_rxtimer: 0x85b63e00: rx timeout, send abort [ 164.649512][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85b63e00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.902302][ T4531] FAULT_INJECTION: forcing a failure. [ 165.902302][ T4531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.902788][ T4531] CPU: 1 UID: 0 PID: 4531 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT [ 165.902883][ T4531] Hardware name: ARM-Versatile Express [ 165.902912][ T4531] Call trace: [ 165.902963][ T4531] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 165.903075][ T4531] r7:ed18de20 r6:00000000 r5:60000013 r4:822958fc [ 165.903097][ T4531] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 165.903150][ T4531] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 165.903376][ T4531] r5:84ea8000 r4:8294fc90 [ 165.903472][ T4531] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 165.903768][ T4531] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 165.903849][ T4531] r8:000400c4 r7:ed18de20 r6:200008c0 r5:00000000 r4:ed18df20 [ 165.903959][ T4531] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 165.904233][ T4531] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 165.904385][ T4531] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 165.904467][ T4531] r8:000400c4 r7:00000000 r6:837d6c80 r5:ed18df20 r4:ed18de64 [ 165.904545][ T4531] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 165.904632][ T4531] r10:00000128 r9:84ea8000 r8:83ec4780 r7:000400c4 r6:200008c0 r5:83ec4781 [ 165.904874][ T4531] r4:00000004 [ 165.905009][ T4531] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 165.905145][ T4531] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 165.905234][ T4531] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 165.905417][ T4531] Exception stack(0xed18dfa8 to 0xed18dff0) [ 165.905471][ T4531] dfa0: 00000000 00000000 00000004 200008c0 000400c4 00000000 [ 165.905514][ T4531] dfc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76fde0bc [ 165.905599][ T4531] dfe0: 76fddec0 76fddeb0 000192bc 00132360 [ 166.411479][ T3717] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 166.579276][ T3717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.590354][ T3717] usb 1-1: not running at top speed; connect to a high speed hub [ 166.604734][ T3717] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.605187][ T3717] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.645312][ T3717] usb 1-1: string descriptor 0 read error: -22 [ 166.645752][ T3717] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.645823][ T3717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.667829][ T3717] usb 1-1: 0:2 : does not exist [ 166.883020][ T4537] FAULT_INJECTION: forcing a failure. [ 166.883020][ T4537] name failslab, interval 1, probability 0, space 0, times 0 [ 166.883470][ T4537] CPU: 0 UID: 0 PID: 4537 Comm: syz.0.234 Not tainted syzkaller #0 PREEMPT [ 166.883524][ T4537] Hardware name: ARM-Versatile Express [ 166.883538][ T4537] Call trace: [ 166.883595][ T4537] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 166.883656][ T4537] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 166.883668][ T4537] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 166.883699][ T4537] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 166.883729][ T4537] r5:8500ec00 r4:82918c48 [ 166.883737][ T4537] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 166.883792][ T4537] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 166.883932][ T4537] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 166.884011][ T4537] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 166.884133][ T4537] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 166.884303][ T4537] r10:8500ec00 r9:830a6000 r8:00000000 r7:83416880 r6:83ec4568 r5:00001000 [ 166.884425][ T4537] r4:00000000 [ 166.884785][ T4537] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 166.885067][ T4537] r10:8500ec00 r9:00000000 r8:83ec4540 r7:80085502 r6:00000004 r5:81cd6ac0 [ 166.885133][ T4537] r4:83ec4568 r3:826c2240 [ 166.885248][ T4537] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 166.885319][ T4537] r9:00000003 r8:83ec4540 r7:76fdce88 r6:76fdce88 r5:80085502 r4:83ec4540 [ 166.885330][ T4537] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 166.885366][ T4537] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 166.885406][ T4537] r7:76fdce88 r6:83ec4541 r5:00000003 r4:80085502 [ 166.885416][ T4537] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 166.885443][ T4537] Exception stack(0xed18dfa8 to 0xed18dff0) [ 166.885466][ T4537] dfa0: 76fdce98 00000003 00000003 80085502 76fdce88 76fdbe50 [ 166.885484][ T4537] dfc0: 76fdce98 00000003 00000003 00000036 200008c0 00000000 00006364 76fde0bc [ 166.885500][ T4537] dfe0: 00000000 76fdbe38 002f7000 00131d2c [ 166.885545][ T4537] r10:00000036 r9:8500ec00 r8:8020029c r7:00000036 r6:00000003 r5:00000003 [ 166.885595][ T4537] r4:76fdce98 [ 166.887264][ T4537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.120097][ T3717] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 167.142901][ T3717] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 167.153296][ T3717] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 167.178986][ T3717] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 167.196692][ T3717] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 167.208010][ T3717] usb 1-1: USB disconnect, device number 14 [ 169.474706][ T4566] fuse: root generation should be zero [ 169.486799][ T29] audit: type=1400 audit(169.410:158): avc: denied { getopt } for pid=4563 comm="syz.0.236" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.717529][ T29] audit: type=1400 audit(169.640:159): avc: denied { create } for pid=4585 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.744262][ T29] audit: type=1400 audit(169.670:160): avc: denied { create } for pid=4585 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.972355][ T3717] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 169.976364][ T3717] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.202398][ T29] audit: type=1400 audit(171.130:161): avc: denied { setopt } for pid=4604 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.342668][ T29] audit: type=1400 audit(171.270:162): avc: denied { setopt } for pid=4606 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.122372][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.304071][ T45] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 172.304383][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.312644][ T45] usb 2-1: config 0 descriptor?? [ 172.553844][ T45] kaweth 2-1:0.0: Firmware present in device. [ 172.754132][ T45] kaweth 2-1:0.0: Statistics collection: 0 [ 172.754470][ T45] kaweth 2-1:0.0: Multicast filter limit: 0 [ 172.754604][ T45] kaweth 2-1:0.0: MTU: 0 [ 172.754662][ T45] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 172.957507][ T4620] FAULT_INJECTION: forcing a failure. [ 172.957507][ T4620] name failslab, interval 1, probability 0, space 0, times 0 [ 172.959505][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT [ 172.959581][ T4620] Hardware name: ARM-Versatile Express [ 172.959700][ T4620] Call trace: [ 172.959783][ T4620] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 172.959858][ T4620] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 172.959870][ T4620] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 172.959898][ T4620] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 172.959931][ T4620] r5:8500ec00 r4:82918c48 [ 172.959940][ T4620] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 172.959973][ T4620] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 172.960081][ T4620] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 172.960095][ T4620] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 172.960143][ T4620] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 172.960227][ T4620] r10:8500ec00 r9:830a6000 r8:00000000 r7:83416880 r6:84a08f28 r5:00001000 [ 172.960254][ T4620] r4:00000000 [ 172.960266][ T4620] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 172.960308][ T4620] r10:8500ec00 r9:00000000 r8:84a08f00 r7:80085502 r6:00000004 r5:81cd6ac0 [ 172.960321][ T4620] r4:84a08f28 r3:826c2240 [ 172.960330][ T4620] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 172.960422][ T4620] r9:00000003 r8:84a08f00 r7:76f5de88 r6:76f5de88 r5:80085502 r4:84a08f00 [ 172.960434][ T4620] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 172.960536][ T4620] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 172.960580][ T4620] r7:76f5de88 r6:84a08f01 r5:00000003 r4:80085502 [ 172.960594][ T4620] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 172.960642][ T4620] Exception stack(0xed2e1fa8 to 0xed2e1ff0) [ 172.960670][ T4620] 1fa0: 76f5de98 00000003 00000003 80085502 76f5de88 76f5ce50 [ 172.960690][ T4620] 1fc0: 76f5de98 00000003 00000003 00000036 00000000 00000000 00006364 76f5f0bc [ 172.960705][ T4620] 1fe0: 00000000 76f5ce38 002f7000 00131d2c [ 172.960896][ T4620] r10:00000036 r9:8500ec00 r8:8020029c r7:00000036 r6:00000003 r5:00000003 [ 172.960950][ T4620] r4:76f5de98 [ 172.982044][ T4620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.061750][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.192111][ T45] kaweth 2-1:0.0: Error setting SOFS wait [ 173.192851][ T45] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 173.203407][ T45] usb 2-1: USB disconnect, device number 13 [ 173.259062][ T9] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 173.262258][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.269078][ T9] usb 1-1: config 0 descriptor?? [ 173.560171][ T9] kaweth 1-1:0.0: Firmware present in device. [ 173.767280][ T9] kaweth 1-1:0.0: Statistics collection: 0 [ 173.768210][ T9] kaweth 1-1:0.0: Multicast filter limit: 0 [ 173.771508][ T9] kaweth 1-1:0.0: MTU: 0 [ 173.772838][ T9] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 174.193570][ T9] kaweth 1-1:0.0: Error setting SOFS wait [ 174.195494][ T9] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 174.209540][ T29] audit: type=1400 audit(174.130:163): avc: denied { ioctl } for pid=4645 comm="syz.1.253" path="socket:[5158]" dev="sockfs" ino=5158 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.215200][ T9] usb 1-1: USB disconnect, device number 15 [ 174.244626][ T29] audit: type=1400 audit(174.170:164): avc: denied { write } for pid=4645 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.347480][ T4660] FAULT_INJECTION: forcing a failure. [ 174.347480][ T4660] name failslab, interval 1, probability 0, space 0, times 0 [ 174.353206][ T4660] CPU: 0 UID: 0 PID: 4660 Comm: syz.0.254 Not tainted syzkaller #0 PREEMPT [ 174.353369][ T4660] Hardware name: ARM-Versatile Express [ 174.353399][ T4660] Call trace: [ 174.353445][ T4660] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 174.353560][ T4660] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 174.353583][ T4660] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 174.353644][ T4660] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 174.353707][ T4660] r5:85008c00 r4:82918c48 [ 174.353724][ T4660] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 174.353791][ T4660] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 174.353869][ T4660] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 174.353888][ T4660] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 174.353951][ T4660] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 174.354038][ T4660] r10:85008c00 r9:830a6000 r8:00000000 r7:834e0880 r6:84a08928 r5:00001000 [ 174.354060][ T4660] r4:00000000 [ 174.354081][ T4660] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 174.354242][ T4660] r10:85008c00 r9:00000000 r8:84a08900 r7:80045440 r6:00000004 r5:81cd6ac0 [ 174.354269][ T4660] r4:84a08928 r3:826c2240 [ 174.354327][ T4660] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 174.354415][ T4660] r9:00000003 r8:84a08900 r7:20000140 r6:20000140 r5:80045440 r4:84a08900 [ 174.354437][ T4660] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 174.354505][ T4660] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 174.354582][ T4660] r7:20000140 r6:84a08901 r5:00000000 r4:80045440 [ 174.354618][ T4660] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 174.354675][ T4660] Exception stack(0xed425fa8 to 0xed425ff0) [ 174.354720][ T4660] 5fa0: 00000000 00000000 00000003 80045440 20000140 00000000 [ 174.354763][ T4660] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 174.354794][ T4660] 5fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 174.354834][ T4660] r10:00000036 r9:85008c00 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 174.354855][ T4660] r4:00000000 [ 174.362612][ T4660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.693108][ T4669] FAULT_INJECTION: forcing a failure. [ 174.693108][ T4669] name failslab, interval 1, probability 0, space 0, times 0 [ 174.696909][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT [ 174.697095][ T4669] Hardware name: ARM-Versatile Express [ 174.697123][ T4669] Call trace: [ 174.697170][ T4669] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 174.697289][ T4669] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 174.697312][ T4669] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 174.697370][ T4669] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 174.697428][ T4669] r5:85009800 r4:82918c48 [ 174.697446][ T4669] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 174.697509][ T4669] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 174.697590][ T4669] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 174.697610][ T4669] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 174.697668][ T4669] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 174.697749][ T4669] r10:85009800 r9:830a7000 r8:00000000 r7:83625a18 r6:84a089e8 r5:00001000 [ 174.697770][ T4669] r4:00000000 [ 174.697791][ T4669] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 174.697866][ T4669] r10:85009800 r9:00000000 r8:84a089c0 r7:00008933 r6:00000004 r5:81cd6ac0 [ 174.697890][ T4669] r4:84a089e8 r3:826c2240 [ 174.697909][ T4669] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 174.697986][ T4669] r9:00000003 r8:84a089c0 r7:20000000 r6:20000000 r5:00008933 r4:84a089c0 [ 174.698006][ T4669] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 174.698074][ T4669] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 174.698146][ T4669] r7:20000000 r6:84a089c1 r5:00000000 r4:00008933 [ 174.698165][ T4669] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 174.698216][ T4669] Exception stack(0xed425fa8 to 0xed425ff0) [ 174.698260][ T4669] 5fa0: 00000000 00000000 00000003 00008933 20000000 00000000 [ 174.698301][ T4669] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 174.698333][ T4669] 5fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 174.698371][ T4669] r10:00000036 r9:85009800 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 174.698392][ T4669] r4:00000000 [ 174.722097][ T4669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.839030][ T4671] capability: warning: `syz.0.259' uses deprecated v2 capabilities in a way that may be insecure [ 174.909357][ T29] audit: type=1400 audit(174.830:165): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.026541][ T29] audit: type=1400 audit(174.950:166): avc: denied { accept } for pid=4673 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.546698][ T4687] FAULT_INJECTION: forcing a failure. [ 175.546698][ T4687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.547819][ T4687] CPU: 1 UID: 0 PID: 4687 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT [ 175.547905][ T4687] Hardware name: ARM-Versatile Express [ 175.547922][ T4687] Call trace: [ 175.547954][ T4687] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 175.548032][ T4687] r7:ed581e20 r6:00000000 r5:60000013 r4:822958fc [ 175.548091][ T4687] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 175.548145][ T4687] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 175.548184][ T4687] r5:85008c00 r4:8294fc90 [ 175.548193][ T4687] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 175.548469][ T4687] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 175.548515][ T4687] r8:00040000 r7:ed581e20 r6:20001380 r5:00000000 r4:ed581f20 [ 175.548525][ T4687] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 175.548562][ T4687] [<80999a68>] (should_fail_usercopy) from [<81599b9c>] (copy_msghdr_from_user+0x50/0x130) [ 175.548602][ T4687] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 175.548645][ T4687] r8:00040000 r7:00000000 r6:837d7b80 r5:ed581f20 r4:ed581e64 [ 175.548719][ T4687] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 175.548765][ T4687] r10:00000128 r9:85008c00 r8:83ec4a80 r7:00040000 r6:20001380 r5:83ec4a81 [ 175.548776][ T4687] r4:00000003 [ 175.548784][ T4687] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 175.548824][ T4687] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 175.548974][ T4687] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 175.549027][ T4687] Exception stack(0xed581fa8 to 0xed581ff0) [ 175.549212][ T4687] 1fa0: 00000000 00000000 00000003 20001380 00040000 00000000 [ 175.549235][ T4687] 1fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76f5f0bc [ 175.549251][ T4687] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 176.139530][ T29] audit: type=1400 audit(176.060:167): avc: denied { setopt } for pid=4703 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.177036][ T29] audit: type=1400 audit(176.100:168): avc: denied { ioctl } for pid=4703 comm="syz.0.272" path="socket:[4587]" dev="sockfs" ino=4587 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.949193][ T4720] FAULT_INJECTION: forcing a failure. [ 176.949193][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 176.953136][ T4720] CPU: 0 UID: 0 PID: 4720 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT [ 176.953281][ T4720] Hardware name: ARM-Versatile Express [ 176.953310][ T4720] Call trace: [ 176.953358][ T4720] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 176.953472][ T4720] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 176.953493][ T4720] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 176.953548][ T4720] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 176.953723][ T4720] r5:84ea8000 r4:82918c48 [ 176.953745][ T4720] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 176.953825][ T4720] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 176.953898][ T4720] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 176.953918][ T4720] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 176.953976][ T4720] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 176.954055][ T4720] r10:84ea8000 r9:830a6000 r8:00000000 r7:83418550 r6:85ca94a8 r5:00001000 [ 176.954077][ T4720] r4:00000000 [ 176.954094][ T4720] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 176.954317][ T4720] r10:84ea8000 r9:00000000 r8:85ca9480 r7:4004556d r6:00000004 r5:81cd6ac0 [ 176.954354][ T4720] r4:85ca94a8 r3:826c2240 [ 176.954374][ T4720] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 176.954451][ T4720] r9:00000004 r8:85ca9480 r7:00000010 r6:00000010 r5:4004556d r4:85ca9480 [ 176.954470][ T4720] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 176.954533][ T4720] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 176.954605][ T4720] r7:00000010 r6:85ca9481 r5:00000000 r4:4004556d [ 176.954625][ T4720] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 176.954678][ T4720] Exception stack(0xed9c5fa8 to 0xed9c5ff0) [ 176.954721][ T4720] 5fa0: 00000000 00000000 00000004 4004556d 00000010 00000000 [ 176.954760][ T4720] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 176.954789][ T4720] 5fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 176.954830][ T4720] r10:00000036 r9:84ea8000 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 176.954851][ T4720] r4:00000000 [ 176.973501][ T4720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.102582][ T4724] FAULT_INJECTION: forcing a failure. [ 177.102582][ T4724] name failslab, interval 1, probability 0, space 0, times 0 [ 177.106116][ T4724] CPU: 0 UID: 0 PID: 4724 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT [ 177.106258][ T4724] Hardware name: ARM-Versatile Express [ 177.106286][ T4724] Call trace: [ 177.106349][ T4724] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 177.106462][ T4724] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 177.106482][ T4724] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 177.106534][ T4724] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 177.106593][ T4724] r5:84ea8000 r4:82918c48 [ 177.106613][ T4724] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 177.106674][ T4724] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 177.106748][ T4724] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 177.106767][ T4724] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 177.106824][ T4724] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 177.106904][ T4724] r10:84ea8000 r9:830a6000 r8:00000000 r7:834f9440 r6:85ca96e8 r5:00001000 [ 177.106926][ T4724] r4:00000000 [ 177.106943][ T4724] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 177.107019][ T4724] r10:84ea8000 r9:00000000 r8:85ca96c0 r7:40085112 r6:00000004 r5:81cd6ac0 [ 177.107041][ T4724] r4:85ca96e8 r3:826c2240 [ 177.107059][ T4724] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 177.107135][ T4724] r9:00000003 r8:85ca96c0 r7:20000440 r6:20000440 r5:40085112 r4:85ca96c0 [ 177.107154][ T4724] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 177.107218][ T4724] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 177.107293][ T4724] r7:20000440 r6:85ca96c1 r5:00000000 r4:40085112 [ 177.107312][ T4724] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 177.107377][ T4724] Exception stack(0xeda05fa8 to 0xeda05ff0) [ 177.107421][ T4724] 5fa0: 00000000 00000000 00000003 40085112 20000440 00000000 [ 177.107456][ T4724] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 177.107484][ T4724] 5fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 177.107523][ T4724] r10:00000036 r9:84ea8000 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 177.107543][ T4724] r4:00000000 [ 177.134530][ T4724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.272214][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.431145][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.431601][ T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.433377][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.433614][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.444694][ T45] usb 1-1: config 0 descriptor?? [ 180.756962][ T29] audit: type=1400 audit(180.680:169): avc: denied { setopt } for pid=4749 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.789657][ T29] audit: type=1400 audit(180.710:170): avc: denied { prog_run } for pid=4749 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 186.348658][ T4761] FAULT_INJECTION: forcing a failure. [ 186.348658][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.363534][ T4761] CPU: 0 UID: 0 PID: 4761 Comm: syz.1.292 Not tainted syzkaller #0 PREEMPT [ 186.364268][ T4761] Hardware name: ARM-Versatile Express [ 186.364325][ T4761] Call trace: [ 186.366170][ T4761] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 186.370272][ T4761] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 186.370673][ T4761] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 186.370796][ T4761] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 186.370864][ T4761] r5:84eaec00 r4:8294fc90 [ 186.370884][ T4761] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 186.370955][ T4761] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 186.371030][ T4761] r8:76f5ef30 r7:00000000 r6:00000000 r5:edc95f68 r4:00000002 [ 186.371052][ T4761] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 186.371142][ T4761] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 186.371207][ T4761] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 186.371288][ T4761] r10:00000001 r9:80624b04 r8:00000002 r7:edc95f68 r6:0000000f r5:76f5ef30 [ 186.371315][ T4761] r4:84eaec00 r3:edc95e9f [ 186.371332][ T4761] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 186.373625][ T4761] r8:76f5ef30 r7:edc95f68 r6:84eaec00 r5:0000000f r4:83ec4180 [ 186.373679][ T4761] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 186.373771][ T4761] r10:00000003 r9:84eaec00 r8:8020029c r7:00000000 r6:00000000 r5:83ec4180 [ 186.373793][ T4761] r4:83ec4183 [ 186.373810][ T4761] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 186.373873][ T4761] r7:00000003 r6:00000003 r5:76f5ef30 r4:0000000f [ 186.373975][ T4761] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 186.374041][ T4761] Exception stack(0xedc95fa8 to 0xedc95ff0) [ 186.374089][ T4761] 5fa0: 0000000f 76f5ef30 00000003 76f5ef30 0000000f 00000000 [ 186.374134][ T4761] 5fc0: 0000000f 76f5ef30 00000003 00000003 00310000 00000000 00006364 76f5f0bc [ 186.374166][ T4761] 5fe0: 00000158 76f5eed0 000d801c 0013022c [ 188.044596][ T29] audit: type=1400 audit(187.970:171): avc: denied { setopt } for pid=4771 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.105269][ T29] audit: type=1400 audit(188.030:172): avc: denied { accept } for pid=4771 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.613931][ T29] audit: type=1400 audit(190.540:173): avc: denied { write } for pid=4773 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.754128][ T29] audit: type=1400 audit(190.680:174): avc: denied { ioctl } for pid=4773 comm="syz.1.296" path="socket:[4797]" dev="sockfs" ino=4797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.852177][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 192.002469][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 192.017265][ T45] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.018327][ T45] usb 2-1: config 0 has no interface number 0 [ 192.020318][ T45] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.035052][ T45] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.035306][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.035434][ T45] usb 2-1: Product: syz [ 192.035519][ T45] usb 2-1: Manufacturer: syz [ 192.035610][ T45] usb 2-1: SerialNumber: syz [ 192.044105][ T45] usb 2-1: config 0 descriptor?? [ 192.072042][ T45] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.332703][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.337550][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.375189][ T45] usb 2-1: qt2_attach - failed to power on unit: -71 [ 192.376460][ T45] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 192.399732][ T45] usb 2-1: USB disconnect, device number 14 [ 192.530035][ T4803] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.211522][ T29] audit: type=1400 audit(193.130:175): avc: denied { sqpoll } for pid=4814 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.224069][ T29] audit: type=1400 audit(193.150:176): avc: denied { map } for pid=4814 comm="syz.1.305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.227143][ T29] audit: type=1400 audit(193.150:177): avc: denied { read write } for pid=4814 comm="syz.1.305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.647559][ T4818] FAULT_INJECTION: forcing a failure. [ 193.647559][ T4818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.648046][ T4818] CPU: 1 UID: 0 PID: 4818 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT [ 193.648148][ T4818] Hardware name: ARM-Versatile Express [ 193.648177][ T4818] Call trace: [ 193.648232][ T4818] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 193.648358][ T4818] r7:200000c0 r6:00000000 r5:60000013 r4:822958fc [ 193.648468][ T4818] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 193.648588][ T4818] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 193.648801][ T4818] r5:8500bc00 r4:8294fc90 [ 193.649110][ T4818] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 193.649399][ T4818] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 193.649618][ T4818] r8:8020029c r7:200000c0 r6:00000000 r5:00000000 r4:20000000 [ 193.649659][ T4818] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 193.649718][ T4818] [<80999a68>] (should_fail_usercopy) from [<80789aa0>] (keyctl_dh_compute+0x4c/0x118) [ 193.649781][ T4818] [<80789a54>] (keyctl_dh_compute) from [<80785810>] (sys_keyctl+0xfc/0x318) [ 193.649887][ T4818] r8:8020029c r7:00000137 r6:00130308 r5:00000000 r4:20000000 [ 193.650007][ T4818] [<80785714>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 193.650441][ T4818] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 193.650511][ T4818] 1fa0: 20000000 00000000 00000017 200000c0 00000000 00000000 [ 193.650656][ T4818] 1fc0: 20000000 00000000 00130308 00000137 00310000 00000000 00006364 76f5f0bc [ 193.650812][ T4818] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 193.651110][ T4818] r5:00000000 r4:20000000 [ 193.922027][ T4823] FAULT_INJECTION: forcing a failure. [ 193.922027][ T4823] name failslab, interval 1, probability 0, space 0, times 0 [ 193.922440][ T4823] CPU: 1 UID: 0 PID: 4823 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT [ 193.922551][ T4823] Hardware name: ARM-Versatile Express [ 193.922580][ T4823] Call trace: [ 193.922627][ T4823] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 193.922745][ T4823] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 193.922769][ T4823] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 193.922938][ T4823] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 193.923395][ T4823] r5:8500ec00 r4:82918c48 [ 193.923669][ T4823] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 193.924020][ T4823] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 193.924223][ T4823] r8:8500ec00 r7:00000000 r6:00000cc0 r5:200002c0 r4:830a1a80 [ 193.924551][ T4823] [<8053a3f4>] (should_failslab) from [<80519908>] (kmem_cache_alloc_noprof+0x4c/0x444) [ 193.924709][ T4823] [<805198bc>] (kmem_cache_alloc_noprof) from [<80579b5c>] (getname_flags.part.0+0x28/0x18c) [ 193.924976][ T4823] r10:0000000e r9:8500ec00 r8:8020029c r7:00000000 r6:82498930 r5:200002c0 [ 193.925042][ T4823] r4:200002c0 [ 193.925065][ T4823] [<80579b34>] (getname_flags.part.0) from [<8057f610>] (getname_flags+0x3c/0x50) [ 193.925230][ T4823] r9:8500ec00 r8:8020029c r7:0000000e r6:00130308 r5:00000000 r4:200002c0 [ 193.925254][ T4823] [<8057f5d4>] (getname_flags) from [<805821a4>] (sys_mknod+0x1c/0x34) [ 193.925326][ T4823] r5:00000702 r4:00001000 [ 193.925355][ T4823] [<80582188>] (sys_mknod) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 193.925416][ T4823] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 193.925465][ T4823] 1fa0: 00000000 00000000 200002c0 00001000 00000702 00000000 [ 193.925504][ T4823] 1fc0: 00000000 00000000 00130308 0000000e 00310000 00000000 00006364 76f5f0bc [ 193.925535][ T4823] 1fe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 193.925565][ T4823] r5:00000000 r4:00000000 [ 194.001980][ T45] usb 1-1: USB disconnect, device number 16 [ 194.157967][ T29] audit: type=1400 audit(194.080:178): avc: denied { remount } for pid=4830 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.287938][ T4833] FAULT_INJECTION: forcing a failure. [ 194.287938][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 194.290177][ T4833] CPU: 0 UID: 0 PID: 4833 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT [ 194.290303][ T4833] Hardware name: ARM-Versatile Express [ 194.290332][ T4833] Call trace: [ 194.290381][ T4833] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 194.290495][ T4833] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 194.290625][ T4833] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 194.290692][ T4833] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 194.290756][ T4833] r5:85008000 r4:82918c48 [ 194.290775][ T4833] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 194.290840][ T4833] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 194.290914][ T4833] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 194.290998][ T4833] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 194.291070][ T4833] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 194.291156][ T4833] r10:85008000 r9:830a7000 r8:00000000 r7:83629440 r6:85ca9328 r5:00001000 [ 194.291178][ T4833] r4:00000000 [ 194.291197][ T4833] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 194.291276][ T4833] r10:85008000 r9:00000000 r8:85ca9300 r7:00008946 r6:00000004 r5:81cd6ac0 [ 194.291304][ T4833] r4:85ca9328 r3:826c2240 [ 194.291329][ T4833] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 194.291415][ T4833] r9:00000003 r8:85ca9300 r7:20000040 r6:20000040 r5:00008946 r4:85ca9300 [ 194.291435][ T4833] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 194.291498][ T4833] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 194.291586][ T4833] r7:20000040 r6:85ca9301 r5:00000000 r4:00008946 [ 194.291608][ T4833] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 194.291662][ T4833] Exception stack(0xdfc55fa8 to 0xdfc55ff0) [ 194.291708][ T4833] 5fa0: 00000000 00000000 00000003 00008946 20000040 00000000 [ 194.291751][ T4833] 5fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 194.291780][ T4833] 5fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 194.291820][ T4833] r10:00000036 r9:85008000 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 194.291839][ T4833] r4:00000000 [ 194.317765][ T4833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.901658][ T714] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 197.062307][ T714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.063056][ T714] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 197.063216][ T714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.063261][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.069214][ T714] usb 2-1: config 0 descriptor?? [ 197.079235][ T714] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 197.229886][ T4852] FAULT_INJECTION: forcing a failure. [ 197.229886][ T4852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.230310][ T4852] CPU: 1 UID: 0 PID: 4852 Comm: syz.0.314 Not tainted syzkaller #0 PREEMPT [ 197.230412][ T4852] Hardware name: ARM-Versatile Express [ 197.230441][ T4852] Call trace: [ 197.230491][ T4852] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 197.230725][ T4852] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 197.230849][ T4852] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 197.231005][ T4852] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 197.231140][ T4852] r5:85009800 r4:8294fc90 [ 197.231165][ T4852] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 197.231235][ T4852] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 197.231452][ T4852] r8:20000180 r7:00000000 r6:854ac780 r5:00000002 r4:00000000 [ 197.231573][ T4852] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 197.231735][ T4852] [<80999a68>] (should_fail_usercopy) from [<81597a9c>] (do_sock_getsockopt+0x12c/0x1ec) [ 197.231828][ T4852] [<81597970>] (do_sock_getsockopt) from [<815998dc>] (__sys_getsockopt+0x94/0xdc) [ 197.231937][ T4852] r8:85ca9540 r7:dfa1df50 r6:00000002 r5:dfa1df58 r4:85ca9541 [ 197.231962][ T4852] [<81599848>] (__sys_getsockopt) from [<81599940>] (sys_getsockopt+0x1c/0x24) [ 197.232042][ T4852] r8:8020029c r7:00000127 r6:00130308 r5:00000000 r4:20000180 [ 197.232064][ T4852] [<81599924>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 197.232124][ T4852] Exception stack(0xdfa1dfa8 to 0xdfa1dff0) [ 197.232262][ T4852] dfa0: 20000180 00000000 00000003 00000000 00000002 00000000 [ 197.232312][ T4852] dfc0: 20000180 00000000 00130308 00000127 00310000 00000000 00006364 76fde0bc [ 197.232346][ T4852] dfe0: 76fddec0 76fddeb0 000192bc 00132360 [ 197.552802][ T4856] FAULT_INJECTION: forcing a failure. [ 197.552802][ T4856] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 197.554771][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT [ 197.554892][ T4856] Hardware name: ARM-Versatile Express [ 197.554924][ T4856] Call trace: [ 197.554973][ T4856] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 197.555105][ T4856] r7:00000000 r6:00000000 r5:60000113 r4:822958fc [ 197.555131][ T4856] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 197.555193][ T4856] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 197.555258][ T4856] r5:8500b000 r4:82918c9c [ 197.555275][ T4856] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 197.555359][ T4856] [<80999828>] (should_fail_ex) from [<8053a4f0>] (should_fail_alloc_page+0x68/0x74) [ 197.555441][ T4856] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:dfd5ddb8 [ 197.555463][ T4856] [<8053a488>] (should_fail_alloc_page) from [<80501de4>] (prepare_alloc_pages.constprop.0+0x94/0x1b0) [ 197.555529][ T4856] [<80501d50>] (prepare_alloc_pages.constprop.0) from [<8050a128>] (__alloc_frozen_pages_noprof+0xac/0x10b8) [ 197.555613][ T4856] r10:76fdc000 r9:00000000 r8:8500b000 r7:00000001 r6:00140cca r5:00000000 [ 197.555641][ T4856] r4:00000000 r3:dfd5ddb8 [ 197.555662][ T4856] [<8050a07c>] (__alloc_frozen_pages_noprof) from [<8050b1a8>] (__folio_alloc_noprof+0x14/0x6c) [ 197.555736][ T4856] r10:76fdc000 r9:84e9c000 r8:00000000 r7:00000001 r6:85cb7a80 r5:00000000 [ 197.555761][ T4856] r4:dfd5deb0 [ 197.555780][ T4856] [<8050b194>] (__folio_alloc_noprof) from [<804d6618>] (do_anonymous_page+0xf4/0x5c4) [ 197.555846][ T4856] r5:00000000 r4:dfd5deb0 [ 197.555866][ T4856] [<804d6524>] (do_anonymous_page) from [<804dacf0>] (handle_mm_fault+0x584/0x6a4) [ 197.555941][ T4856] r10:00000040 r9:00000000 r8:00000000 r7:dfd5dfb0 r6:76fdce84 r5:8500b000 [ 197.555966][ T4856] r4:00001255 [ 197.555986][ T4856] [<804da76c>] (handle_mm_fault) from [<8023384c>] (do_page_fault+0x238/0x4b4) [ 197.556064][ T4856] r10:00000002 r9:84e9c000 r8:00000255 r7:8500b000 r6:00000a07 r5:76fdce84 [ 197.556088][ T4856] r4:dfd5dfb0 [ 197.556107][ T4856] [<80233614>] (do_page_fault) from [<80233c9c>] (do_DataAbort+0x38/0xa8) [ 197.556181][ T4856] r10:00006364 r9:00000000 r8:80233614 r7:dfd5dfb0 r6:76fdce84 r5:00000a07 [ 197.556205][ T4856] r4:8281d290 [ 197.556225][ T4856] [<80233c64>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 197.556280][ T4856] Exception stack(0xdfd5dfb0 to 0xdfd5dff8) [ 197.556328][ T4856] dfa0: 20000040 ffffffff 00000000 00000000 [ 197.556380][ T4856] dfc0: 0001bce8 20000040 00000000 001892b0 00310000 00000000 00006364 76fde0bc [ 197.556416][ T4856] dfe0: 00000000 76fdce80 0001929c 0001bcf4 20000010 ffffffff [ 197.556456][ T4856] r8:826b9044 r7:8500b000 r6:ffffffff r5:20000010 r4:0001bcf4 [ 197.586755][ T4856] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 198.307892][ T4865] FAULT_INJECTION: forcing a failure. [ 198.307892][ T4865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.310144][ T4865] CPU: 0 UID: 0 PID: 4865 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT [ 198.310282][ T4865] Hardware name: ARM-Versatile Express [ 198.310312][ T4865] Call trace: [ 198.310379][ T4865] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 198.310505][ T4865] r7:20000280 r6:00000000 r5:60000013 r4:822958fc [ 198.310529][ T4865] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 198.310589][ T4865] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 198.310811][ T4865] r5:84eab000 r4:8294fc90 [ 198.310834][ T4865] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 198.310892][ T4865] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 198.310967][ T4865] r8:837d7400 r7:20000280 r6:dfd91eec r5:00000010 r4:00000010 [ 198.310989][ T4865] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 198.311042][ T4865] [<80999a68>] (should_fail_usercopy) from [<81597e5c>] (move_addr_to_kernel+0x34/0xf8) [ 198.311085][ T4865] [<81597e28>] (move_addr_to_kernel) from [<81598cc0>] (__sys_bind+0x80/0x110) [ 198.311475][ T4865] r7:83ec4540 r6:00000010 r5:83ec4541 r4:00000003 [ 198.311598][ T4865] [<81598c40>] (__sys_bind) from [<81598d60>] (sys_bind+0x10/0x14) [ 198.311706][ T4865] r9:84eab000 r8:8020029c r7:0000011a r6:00130308 r5:00000000 r4:00000000 [ 198.311732][ T4865] [<81598d50>] (sys_bind) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 198.311790][ T4865] Exception stack(0xdfd91fa8 to 0xdfd91ff0) [ 198.311832][ T4865] 1fa0: 00000000 00000000 00000003 20000280 00000010 00000000 [ 198.311860][ T4865] 1fc0: 00000000 00000000 00130308 0000011a 00310000 00000000 00006364 76fde0bc [ 198.311896][ T4865] 1fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 198.651120][ T29] audit: type=1400 audit(198.570:179): avc: denied { connect } for pid=4868 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 199.155690][ T29] audit: type=1400 audit(199.080:180): avc: denied { write } for pid=4868 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 199.837881][ T4875] FAULT_INJECTION: forcing a failure. [ 199.837881][ T4875] name failslab, interval 1, probability 0, space 0, times 0 [ 199.840340][ T4875] CPU: 1 UID: 0 PID: 4875 Comm: syz.0.323 Not tainted syzkaller #0 PREEMPT [ 199.840484][ T4875] Hardware name: ARM-Versatile Express [ 199.840512][ T4875] Call trace: [ 199.840647][ T4875] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 199.840763][ T4875] r7:00000c40 r6:00000000 r5:60000013 r4:822958fc [ 199.840782][ T4875] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 199.840853][ T4875] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 199.840914][ T4875] r5:84ea9800 r4:82918c48 [ 199.840972][ T4875] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 199.841042][ T4875] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 199.841119][ T4875] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 199.841142][ T4875] [<8053a3f4>] (should_failslab) from [<8051505c>] (__kmalloc_noprof+0x9c/0x568) [ 199.841196][ T4875] [<80514fc0>] (__kmalloc_noprof) from [<807e3f90>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 199.841288][ T4875] r10:84ea9800 r9:830a6000 r8:00000000 r7:834f9110 r6:83ec4ce8 r5:00001000 [ 199.841315][ T4875] r4:00000000 [ 199.841335][ T4875] [<807e3f54>] (tomoyo_realpath_from_path) from [<807e00d4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 199.841421][ T4875] r10:84ea9800 r9:00000000 r8:83ec4cc0 r7:c00455d0 r6:00000004 r5:81cd6ac0 [ 199.841443][ T4875] r4:83ec4ce8 r3:826c2240 [ 199.841461][ T4875] [<807e0008>] (tomoyo_path_number_perm) from [<807e49b4>] (tomoyo_file_ioctl+0x1c/0x20) [ 199.841545][ T4875] r9:00000003 r8:83ec4cc0 r7:00000000 r6:00000000 r5:c00455d0 r4:83ec4cc0 [ 199.841569][ T4875] [<807e4998>] (tomoyo_file_ioctl) from [<80790c20>] (security_file_ioctl+0x64/0x1e4) [ 199.841657][ T4875] [<80790bbc>] (security_file_ioctl) from [<80585524>] (sys_ioctl+0x4c/0xba0) [ 199.841733][ T4875] r7:00000000 r6:83ec4cc1 r5:00000000 r4:c00455d0 [ 199.841753][ T4875] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 199.841801][ T4875] Exception stack(0xdfd91fa8 to 0xdfd91ff0) [ 199.841847][ T4875] 1fa0: 00000000 00000000 00000003 c00455d0 00000000 00000000 [ 199.841890][ T4875] 1fc0: 00000000 00000000 00130308 00000036 00310000 00000000 00006364 76fde0bc [ 199.841923][ T4875] 1fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 199.841965][ T4875] r10:00000036 r9:84ea9800 r8:8020029c r7:00000036 r6:00130308 r5:00000000 [ 199.841987][ T4875] r4:00000000 [ 199.866543][ T4875] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.320471][ T29] audit: type=1400 audit(200.240:181): avc: denied { mounton } for pid=4878 comm="syz.0.325" path="/119/file0" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 200.701965][ T714] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 200.851939][ T714] usb 1-1: Using ep0 maxpacket: 32 [ 200.872858][ T714] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 64 [ 200.873234][ T714] usb 1-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.874348][ T714] usb 1-1: config 1 interface 0 has no altsetting 0 [ 200.900289][ T714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.900956][ T714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.904290][ T714] usb 1-1: Product: ᐄ [ 200.904671][ T714] usb 1-1: Manufacturer: Ц [ 200.904850][ T714] usb 1-1: SerialNumber: ꃿ輌⫐ѡ㭆퉘ᑵ矒㠊၁멺⧄㉣䉱⁶奯ड़쩘廉鄡눻렻䦄䭯藓ﳻ꼁俺ꖫꕖ庇͸ᆯ덫ꦂԸЍ⌀臼匫㧬췴㭀搥睻 [ 200.916554][ T4883] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 200.919682][ T4883] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.149712][ T714] usb 1-1: USB disconnect, device number 17 [ 201.738931][ T4902] FAULT_INJECTION: forcing a failure. [ 201.738931][ T4902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.739246][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT [ 201.739334][ T4902] Hardware name: ARM-Versatile Express [ 201.739349][ T4902] Call trace: [ 201.739376][ T4902] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 201.739440][ T4902] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 201.739452][ T4902] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 201.739481][ T4902] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 201.739511][ T4902] r5:84eab000 r4:8294fc90 [ 201.739519][ T4902] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 201.739554][ T4902] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 201.739589][ T4902] r8:76fddf30 r7:00000000 r6:00000000 r5:dfbd1f68 r4:00000002 [ 201.739693][ T4902] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 201.739897][ T4902] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 201.740086][ T4902] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 201.740283][ T4902] r10:00000001 r9:80624b04 r8:00000002 r7:dfbd1f68 r6:0000000f r5:76fddf30 [ 201.740324][ T4902] r4:84eab000 r3:dfbd1e9f [ 201.740361][ T4902] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 201.740555][ T4902] r8:76fddf30 r7:dfbd1f68 r6:84eab000 r5:0000000f r4:85ca9780 [ 201.740993][ T4902] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 201.741174][ T4902] r10:00000003 r9:84eab000 r8:8020029c r7:00000000 r6:00000000 r5:85ca9780 [ 201.741229][ T4902] r4:85ca9783 [ 201.741265][ T4902] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 201.741307][ T4902] r7:00000003 r6:00000004 r5:76fddf30 r4:0000000f [ 201.741315][ T4902] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 201.741341][ T4902] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 201.741367][ T4902] 1fa0: 0000000f 76fddf30 00000004 76fddf30 0000000f 00000000 [ 201.741387][ T4902] 1fc0: 0000000f 76fddf30 00000004 00000003 00310000 00000000 00006364 76fde0bc [ 201.741402][ T4902] 1fe0: 00000158 76fdded0 000d801c 0013022c [ 202.793647][ T4930] FAULT_INJECTION: forcing a failure. [ 202.793647][ T4930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.795306][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT [ 202.795464][ T4930] Hardware name: ARM-Versatile Express [ 202.795659][ T4930] Call trace: [ 202.795716][ T4930] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 202.795846][ T4930] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 202.795870][ T4930] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 202.795938][ T4930] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 202.795997][ T4930] r5:8500b000 r4:8294fc90 [ 202.796013][ T4930] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 202.796069][ T4930] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 202.796131][ T4930] r8:76fddf30 r7:00000000 r6:00000000 r5:e0221f68 r4:00000002 [ 202.796146][ T4930] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 202.796195][ T4930] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 202.796249][ T4930] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 202.796335][ T4930] r10:00000001 r9:80624b04 r8:00000002 r7:e0221f68 r6:0000000f r5:76fddf30 [ 202.796363][ T4930] r4:8500b000 r3:e0221e9f [ 202.796419][ T4930] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 202.796485][ T4930] r8:76fddf30 r7:e0221f68 r6:8500b000 r5:0000000f r4:85ca9d80 [ 202.796501][ T4930] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 202.796558][ T4930] r10:00000003 r9:8500b000 r8:8020029c r7:00000000 r6:00000000 r5:85ca9d80 [ 202.796583][ T4930] r4:85ca9d83 [ 202.796598][ T4930] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 202.796651][ T4930] r7:00000003 r6:00000003 r5:76fddf30 r4:0000000f [ 202.796666][ T4930] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 202.796708][ T4930] Exception stack(0xe0221fa8 to 0xe0221ff0) [ 202.796746][ T4930] 1fa0: 0000000f 76fddf30 00000003 76fddf30 0000000f 00000000 [ 202.796780][ T4930] 1fc0: 0000000f 76fddf30 00000003 00000003 00310000 00000000 00006364 76fde0bc [ 202.796827][ T4930] 1fe0: 00000158 76fdded0 000d801c 0013022c [ 203.378930][ T29] audit: type=1400 audit(203.300:182): avc: denied { setopt } for pid=4933 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.518297][ T29] audit: type=1400 audit(203.440:183): avc: denied { getopt } for pid=4933 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.667437][ T4944] FAULT_INJECTION: forcing a failure. [ 203.667437][ T4944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.668522][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 203.669461][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT [ 203.669561][ T4944] Hardware name: ARM-Versatile Express [ 203.669577][ T4944] Call trace: [ 203.669602][ T4944] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 203.669672][ T4944] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 203.669683][ T4944] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 203.669716][ T4944] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 203.669750][ T4944] r5:85008000 r4:8294fc90 [ 203.669759][ T4944] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 203.669903][ T4944] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 203.669949][ T4944] r8:76fddf30 r7:00000000 r6:00000000 r5:e0349f68 r4:00000002 [ 203.669961][ T4944] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 203.669992][ T4944] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 203.670028][ T4944] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 203.670071][ T4944] r10:00000001 r9:80624b04 r8:00000002 r7:e0349f68 r6:0000000f r5:76fddf30 [ 203.670085][ T4944] r4:85008000 r3:e0349e9f [ 203.670094][ T4944] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 203.670133][ T4944] r8:76fddf30 r7:e0349f68 r6:85008000 r5:0000000f r4:84cf3f00 [ 203.670143][ T4944] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 203.670179][ T4944] r10:00000003 r9:85008000 r8:8020029c r7:00000000 r6:00000000 r5:84cf3f00 [ 203.670190][ T4944] r4:84cf3f03 [ 203.670199][ T4944] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 203.670233][ T4944] r7:00000003 r6:00000004 r5:76fddf30 r4:0000000f [ 203.670242][ T4944] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 203.670295][ T4944] Exception stack(0xe0349fa8 to 0xe0349ff0) [ 203.670323][ T4944] 9fa0: 0000000f 76fddf30 00000004 76fddf30 0000000f 00000000 [ 203.670345][ T4944] 9fc0: 0000000f 76fddf30 00000004 00000003 00310000 00000000 00006364 76fde0bc [ 203.670362][ T4944] 9fe0: 00000158 76fdded0 000d801c 0013022c [ 203.682424][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.803537][ T29] audit: type=1400 audit(203.730:184): avc: denied { getopt } for pid=4951 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.320191][ T4959] fuse: Bad value for 'user_id' [ 204.320285][ T29] audit: type=1400 audit(204.240:185): avc: denied { mounton } for pid=4958 comm="syz.0.340" path="/134/file0" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 204.325175][ T4959] fuse: Bad value for 'user_id' [ 204.585823][ T29] audit: type=1400 audit(204.500:186): avc: denied { read write } for pid=4970 comm="syz.0.342" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.586285][ T29] audit: type=1400 audit(204.510:187): avc: denied { open } for pid=4970 comm="syz.0.342" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.597742][ T29] audit: type=1400 audit(204.520:188): avc: denied { ioctl } for pid=4970 comm="syz.0.342" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.599688][ T4971] binder: 4970:4971 ioctl 400c620e 20000040 returned -22 [ 206.169222][ T29] audit: type=1400 audit(206.090:189): avc: granted { setsecparam } for pid=4984 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 206.178723][ T29] audit: type=1400 audit(206.100:190): avc: denied { nlmsg_tty_audit } for pid=4984 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 208.393532][ T29] audit: type=1400 audit(208.320:191): avc: denied { ioctl } for pid=4989 comm="syz.0.348" path="socket:[5045]" dev="sockfs" ino=5045 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.405133][ T29] audit: type=1400 audit(208.330:192): avc: denied { write } for pid=4989 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 208.602737][ T4997] fuse: Bad value for 'fd' [ 208.941972][ T3701] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.091314][ T3701] usb 1-1: Using ep0 maxpacket: 32 [ 209.107033][ T3701] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 64 [ 209.107267][ T3701] usb 1-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.109161][ T3701] usb 1-1: config 1 interface 0 has no altsetting 0 [ 209.137793][ T3701] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.138280][ T3701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.138339][ T3701] usb 1-1: Product: ᐄ [ 209.138367][ T3701] usb 1-1: Manufacturer: Ц [ 209.138394][ T3701] usb 1-1: SerialNumber: ꃿ輌⫐ѡ㭆퉘ᑵ矒㠊၁멺⧄㉣䉱⁶奯ड़쩘廉鄡눻렻䦄䭯藓ﳻ꼁俺ꖫꕖ庇͸ᆯ덫ꦂԸЍ⌀臼匫㧬췴㭀搥睻 [ 209.153697][ T4999] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.154466][ T4999] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.384997][ T3701] usb 1-1: USB disconnect, device number 18 [ 209.805650][ T29] audit: type=1400 audit(209.730:193): avc: denied { create } for pid=5019 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 210.258132][ T5031] FAULT_INJECTION: forcing a failure. [ 210.258132][ T5031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.258427][ T5031] CPU: 1 UID: 0 PID: 5031 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT [ 210.258485][ T5031] Hardware name: ARM-Versatile Express [ 210.258500][ T5031] Call trace: [ 210.258525][ T5031] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 210.258587][ T5031] r7:20000380 r6:00000000 r5:60000013 r4:822958fc [ 210.258608][ T5031] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 210.258638][ T5031] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 210.258669][ T5031] r5:8500ec00 r4:8294fc90 [ 210.258677][ T5031] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 210.258711][ T5031] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 210.258748][ T5031] r8:b5403587 r7:20000380 r6:ea899e64 r5:00000080 r4:00000080 [ 210.258756][ T5031] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 210.258786][ T5031] [<80999a68>] (should_fail_usercopy) from [<81597e5c>] (move_addr_to_kernel+0x34/0xf8) [ 210.258820][ T5031] [<81597e28>] (move_addr_to_kernel) from [<81599b20>] (__copy_msghdr+0xe4/0x110) [ 210.258856][ T5031] r7:ea899e20 r6:20000280 r5:ea899dd0 r4:ea899f20 [ 210.258865][ T5031] [<81599a3c>] (__copy_msghdr) from [<81599bf8>] (copy_msghdr_from_user+0xac/0x130) [ 210.258973][ T5031] r5:00000000 r4:ea899f20 [ 210.259003][ T5031] [<81599b4c>] (copy_msghdr_from_user) from [<81599cf4>] (___sys_sendmsg+0x78/0xd0) [ 210.259111][ T5031] r8:00000005 r7:00000000 r6:837d8a00 r5:ea899f20 r4:ea899e64 [ 210.259175][ T5031] [<81599c7c>] (___sys_sendmsg) from [<8159a1b0>] (__sys_sendmsg+0x8c/0xe0) [ 210.259226][ T5031] r10:00000128 r9:8500ec00 r8:84cf30c0 r7:00000005 r6:20000280 r5:84cf30c1 [ 210.259239][ T5031] r4:00000005 [ 210.259481][ T5031] [<8159a124>] (__sys_sendmsg) from [<8159a218>] (sys_sendmsg+0x14/0x18) [ 210.259814][ T5031] r8:8020029c r7:00000128 r6:00130308 r5:00000000 r4:00000000 [ 210.259995][ T5031] [<8159a204>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 210.260099][ T5031] Exception stack(0xea899fa8 to 0xea899ff0) [ 210.260204][ T5031] 9fa0: 00000000 00000000 00000005 20000280 00000005 00000000 [ 210.260242][ T5031] 9fc0: 00000000 00000000 00130308 00000128 00310000 00000000 00006364 76fde0bc [ 210.260280][ T5031] 9fe0: 76fddec0 76fddeb0 000192bc 00132360 [ 210.414162][ T29] audit: type=1400 audit(210.340:194): avc: denied { write } for pid=5036 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.234835][ T5053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=5053 comm=syz.0.364 [ 211.542221][ T714] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 211.634203][ T9] usb 2-1: USB disconnect, device number 15 [ 211.691657][ T714] usb 1-1: Using ep0 maxpacket: 8 [ 211.707421][ T714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.707792][ T714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.707972][ T714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.708062][ T714] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.708166][ T714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.708221][ T714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.947457][ T714] usb 1-1: usb_control_msg returned -32 [ 211.947894][ T714] usbtmc 1-1:16.0: can't read capabilities [ 211.964521][ T714] usb 1-1: USB disconnect, device number 19 [ 212.025320][ T5081] FAULT_INJECTION: forcing a failure. [ 212.025320][ T5081] name failslab, interval 1, probability 0, space 0, times 0 [ 212.026816][ T5081] CPU: 0 UID: 0 PID: 5081 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT [ 212.026914][ T5081] Hardware name: ARM-Versatile Express [ 212.026942][ T5081] Call trace: [ 212.026989][ T5081] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 212.027095][ T5081] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 212.027117][ T5081] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 212.027169][ T5081] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 212.027224][ T5081] r5:84eaec00 r4:82918c48 [ 212.027240][ T5081] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 212.027383][ T5081] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 212.027579][ T5081] r8:00000028 r7:00000000 r6:00000dc0 r5:00000001 r4:83001240 [ 212.027756][ T5081] [<8053a3f4>] (should_failslab) from [<8051b0bc>] (__kmalloc_cache_node_noprof+0x50/0x458) [ 212.027906][ T5081] [<8051b06c>] (__kmalloc_cache_node_noprof) from [<804f7b88>] (__get_vm_area_node+0x84/0x120) [ 212.028017][ T5081] r10:df800000 r9:00500dc0 r8:ffffffff r7:00001000 r6:00000022 r5:00000001 [ 212.028050][ T5081] r4:00001000 [ 212.028173][ T5081] [<804f7b04>] (__get_vm_area_node) from [<804f84a4>] (__vmalloc_node_range_noprof+0x8c/0x654) [ 212.028497][ T5081] r10:df800000 r9:00001000 r8:00000000 r7:ffffffff r6:00500dc0 r5:822b184c [ 212.029094][ T5081] r4:ff800000 [ 212.029123][ T5081] [<804f8418>] (__vmalloc_node_range_noprof) from [<804f8eb8>] (__vmalloc_noprof+0x88/0xa0) [ 212.029209][ T5081] r10:00000000 r9:84eaec00 r8:00000018 r7:00100cc0 r6:00001000 r5:00001000 [ 212.029233][ T5081] r4:00000000 [ 212.029253][ T5081] [<804f8e30>] (__vmalloc_noprof) from [<803ca13c>] (bpf_prog_alloc_no_stats+0x38/0x1bc) [ 212.029325][ T5081] r5:00100dc0 r4:ea89deb0 [ 212.029345][ T5081] [<803ca104>] (bpf_prog_alloc_no_stats) from [<803ca2d8>] (bpf_prog_alloc+0x18/0xc4) [ 212.029535][ T5081] r9:84eaec00 r8:00000018 r7:ea89dd50 r6:00000000 r5:00500cc0 r4:ea89deb0 [ 212.029557][ T5081] [<803ca2c0>] (bpf_prog_alloc) from [<803d69c0>] (bpf_prog_load+0x6f8/0xdf4) [ 212.029643][ T5081] r7:ea89dd50 r6:00000000 r5:00000000 r4:ea89deb0 [ 212.029757][ T5081] [<803d62c8>] (bpf_prog_load) from [<803d86e4>] (__sys_bpf+0x9ac/0x2228) [ 212.029957][ T5081] r10:84eaec00 r9:ea89dea8 r8:00000000 r7:00000005 r6:ea89de88 r5:00000094 [ 212.029988][ T5081] r4:00000000 [ 212.030144][ T5081] [<803d7d38>] (__sys_bpf) from [<803da510>] (sys_bpf+0x2c/0x48) [ 212.030228][ T5081] r10:00000182 r9:84eaec00 r8:8020029c r7:00000182 r6:00130308 r5:00000000 [ 212.030408][ T5081] r4:00000000 [ 212.030495][ T5081] [<803da4e4>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 212.030587][ T5081] Exception stack(0xea89dfa8 to 0xea89dff0) [ 212.030739][ T5081] dfa0: 00000000 00000000 00000005 200002c0 00000094 00000000 [ 212.030979][ T5081] dfc0: 00000000 00000000 00130308 00000182 00310000 00000000 00006364 76f5f0bc [ 212.031061][ T5081] dfe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 212.036526][ T5081] syz.1.366: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 212.037749][ T5081] CPU: 0 UID: 0 PID: 5081 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT [ 212.037804][ T5081] Hardware name: ARM-Versatile Express [ 212.037825][ T5081] Call trace: [ 212.037902][ T5081] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 212.038013][ T5081] r7:ffffffff r6:822b1814 r5:60000013 r4:822958fc [ 212.038031][ T5081] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 212.038090][ T5081] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 212.038153][ T5081] r5:84eaec00 r4:00000000 [ 212.038170][ T5081] [<8021eec0>] (dump_stack) from [<80509fd4>] (warn_alloc+0xd8/0x180) [ 212.038223][ T5081] [<80509efc>] (warn_alloc) from [<804f84d8>] (__vmalloc_node_range_noprof+0xc0/0x654) [ 212.038287][ T5081] r3:00001000 r2:822b1814 [ 212.038316][ T5081] r6:00500dc0 r5:822b184c r4:ff800000 [ 212.038411][ T5081] [<804f8418>] (__vmalloc_node_range_noprof) from [<804f8eb8>] (__vmalloc_noprof+0x88/0xa0) [ 212.038497][ T5081] r10:00000000 r9:84eaec00 r8:00000018 r7:00100cc0 r6:00001000 r5:00001000 [ 212.038520][ T5081] r4:00000000 [ 212.038536][ T5081] [<804f8e30>] (__vmalloc_noprof) from [<803ca13c>] (bpf_prog_alloc_no_stats+0x38/0x1bc) [ 212.038911][ T5081] r5:00100dc0 r4:ea89deb0 [ 212.038940][ T5081] [<803ca104>] (bpf_prog_alloc_no_stats) from [<803ca2d8>] (bpf_prog_alloc+0x18/0xc4) [ 212.039105][ T5081] r9:84eaec00 r8:00000018 r7:ea89dd50 r6:00000000 r5:00500cc0 r4:ea89deb0 [ 212.039197][ T5081] [<803ca2c0>] (bpf_prog_alloc) from [<803d69c0>] (bpf_prog_load+0x6f8/0xdf4) [ 212.039304][ T5081] r7:ea89dd50 r6:00000000 r5:00000000 r4:ea89deb0 [ 212.039324][ T5081] [<803d62c8>] (bpf_prog_load) from [<803d86e4>] (__sys_bpf+0x9ac/0x2228) [ 212.039401][ T5081] r10:84eaec00 r9:ea89dea8 r8:00000000 r7:00000005 r6:ea89de88 r5:00000094 [ 212.039425][ T5081] r4:00000000 [ 212.039442][ T5081] [<803d7d38>] (__sys_bpf) from [<803da510>] (sys_bpf+0x2c/0x48) [ 212.039585][ T5081] r10:00000182 r9:84eaec00 r8:8020029c r7:00000182 r6:00130308 r5:00000000 [ 212.039620][ T5081] r4:00000000 [ 212.039638][ T5081] [<803da4e4>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 212.039695][ T5081] Exception stack(0xea89dfa8 to 0xea89dff0) [ 212.039763][ T5081] dfa0: 00000000 00000000 00000005 200002c0 00000094 00000000 [ 212.039810][ T5081] dfc0: 00000000 00000000 00130308 00000182 00310000 00000000 00006364 76f5f0bc [ 212.039841][ T5081] dfe0: 76f5eec0 76f5eeb0 000192bc 00132360 [ 212.040040][ T5081] Mem-Info: [ 212.040532][ T5081] active_anon:1320 inactive_anon:0 isolated_anon:0 [ 212.040532][ T5081] active_file:6144 inactive_file:35343 isolated_file:0 [ 212.040532][ T5081] unevictable:768 dirty:33 writeback:0 [ 212.040532][ T5081] slab_reclaimable:1074 slab_unreclaimable:5431 [ 212.040532][ T5081] mapped:2293 shmem:778 pagetables:336 [ 212.040532][ T5081] sec_pagetables:0 bounce:0 [ 212.040532][ T5081] kernel_misc_reclaimable:0 [ 212.040532][ T5081] free:435527 free_pcp:1131 free_cma:4032 [ 212.055571][ T5081] Node 0 active_anon:5280kB inactive_anon:0kB active_file:24576kB inactive_file:141372kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:9172kB dirty:132kB writeback:0kB shmem:3112kB kernel_stack:1536kB pagetables:1344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.056178][ T5081] Normal free:1380040kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1032kB unevictable:0kB writepending:32kB zspages:0kB present:1556480kB managed:1426900kB mlocked:0kB bounce:0kB free_pcp:4524kB local_pcp:1632kB free_cma:0kB [ 212.056333][ T5081] lowmem_reserve[]: 0 4224 4224 [ 212.056804][ T5081] Normal: 6*4kB (ME) 4*8kB (ME) 3*16kB (M) 5*32kB (UM) 3*64kB (UM) 2*128kB (ME) 2*256kB (M) 5*512kB (M) 6*1024kB (UME) 3*2048kB (ME) 333*4096kB (UM) = 1380040kB [ 212.057777][ T5081] 42265 total pagecache pages [ 212.057851][ T5081] 0 pages in swap cache [ 212.057887][ T5081] Free swap = 124996kB [ 212.057918][ T5081] Total swap = 124996kB [ 212.058020][ T5081] 524288 pages RAM [ 212.058090][ T5081] 135168 pages HighMem/MovableOnly [ 212.058191][ T5081] 32395 pages reserved [ 212.058234][ T5081] 4096 pages cma reserved [ 212.293733][ T5092] FAULT_INJECTION: forcing a failure. [ 212.293733][ T5092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.294277][ T5092] CPU: 0 UID: 0 PID: 5092 Comm: syz.0.370 Not tainted syzkaller #0 PREEMPT [ 212.294362][ T5092] Hardware name: ARM-Versatile Express [ 212.294386][ T5092] Call trace: [ 212.294429][ T5092] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 212.294539][ T5092] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 212.294585][ T5092] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 212.294647][ T5092] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 212.294700][ T5092] r5:838eb000 r4:8294fc90 [ 212.294716][ T5092] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 212.294784][ T5092] [<80999828>] (should_fail_ex) from [<80999a64>] (should_fail+0x14/0x18) [ 212.294856][ T5092] r8:76fddf30 r7:00000000 r6:00000000 r5:ea995f68 r4:00000002 [ 212.294876][ T5092] [<80999a50>] (should_fail) from [<80999a84>] (should_fail_usercopy+0x1c/0x20) [ 212.294935][ T5092] [<80999a68>] (should_fail_usercopy) from [<805a6e74>] (simple_read_from_buffer+0x80/0x13c) [ 212.294995][ T5092] [<805a6df4>] (simple_read_from_buffer) from [<80624bbc>] (proc_fail_nth_read+0xb8/0x108) [ 212.295084][ T5092] r10:00000001 r9:80624b04 r8:00000002 r7:ea995f68 r6:0000000f r5:76fddf30 [ 212.295111][ T5092] r4:838eb000 r3:ea995e9f [ 212.295127][ T5092] [<80624b04>] (proc_fail_nth_read) from [<8056a650>] (vfs_read+0x98/0x324) [ 212.295192][ T5092] r8:76fddf30 r7:ea995f68 r6:838eb000 r5:0000000f r4:85d3ed80 [ 212.295210][ T5092] [<8056a5b8>] (vfs_read) from [<8056b360>] (ksys_read+0x74/0xe8) [ 212.295273][ T5092] r10:00000003 r9:838eb000 r8:8020029c r7:00000000 r6:00000000 r5:85d3ed80 [ 212.295295][ T5092] r4:85d3ed83 [ 212.295311][ T5092] [<8056b2ec>] (ksys_read) from [<8056b3e4>] (sys_read+0x10/0x14) [ 212.295371][ T5092] r7:00000003 r6:00000004 r5:76fddf30 r4:0000000f [ 212.295388][ T5092] [<8056b3d4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 212.295432][ T5092] Exception stack(0xea995fa8 to 0xea995ff0) [ 212.295472][ T5092] 5fa0: 0000000f 76fddf30 00000004 76fddf30 0000000f 00000000 [ 212.295584][ T5092] 5fc0: 0000000f 76fddf30 00000004 00000003 00310000 00000000 00006364 76fde0bc [ 212.295639][ T5092] 5fe0: 00000158 76fdded0 000d801c 0013022c [ 212.491510][ T714] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 212.678821][ T714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.679185][ T714] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 212.681760][ T714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.681831][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.688043][ T714] usb 2-1: config 0 descriptor?? [ 212.725958][ T714] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 213.113662][ T29] audit: type=1400 audit(213.040:195): avc: denied { map } for pid=5106 comm="syz.0.374" path="socket:[6189]" dev="sockfs" ino=6189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.114325][ T29] audit: type=1400 audit(213.040:196): avc: denied { read } for pid=5106 comm="syz.0.374" path="socket:[6189]" dev="sockfs" ino=6189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.234335][ T5116] FAULT_INJECTION: forcing a failure. [ 213.234335][ T5116] name failslab, interval 1, probability 0, space 0, times 0 [ 213.235745][ T5116] CPU: 1 UID: 0 PID: 5116 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT [ 213.235856][ T5116] Hardware name: ARM-Versatile Express [ 213.235880][ T5116] Call trace: [ 213.235917][ T5116] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 213.236015][ T5116] r7:00000000 r6:00000000 r5:60000013 r4:822958fc [ 213.236032][ T5116] [<80201b58>] (show_stack) from [<8021eeb4>] (dump_stack_lvl+0x70/0x7c) [ 213.236082][ T5116] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 213.236135][ T5116] r5:838eb000 r4:82918c48 [ 213.236150][ T5116] [<8021eec0>] (dump_stack) from [<809999ec>] (should_fail_ex+0x1c4/0x228) [ 213.236204][ T5116] [<80999828>] (should_fail_ex) from [<8053a460>] (should_failslab+0x6c/0x94) [ 213.236277][ T5116] r8:838eb000 r7:00000000 r6:00000d40 r5:837d8800 r4:830a1600 [ 213.236297][ T5116] [<8053a3f4>] (should_failslab) from [<80519908>] (kmem_cache_alloc_noprof+0x4c/0x444) [ 213.236352][ T5116] [<805198bc>] (kmem_cache_alloc_noprof) from [<8079a31c>] (security_inode_alloc+0x30/0x1e8) [ 213.236422][ T5116] r10:837d8908 r9:00000000 r8:00000000 r7:00000c40 r6:830a7000 r5:837d8800 [ 213.236442][ T5116] r4:837d8800 [ 213.236456][ T5116] [<8079a2ec>] (security_inode_alloc) from [<8058f084>] (inode_init_always_gfp+0x188/0x1dc) [ 213.236511][ T5116] r5:00000000 r4:837d8800 [ 213.236526][ T5116] [<8058eefc>] (inode_init_always_gfp) from [<805926b8>] (alloc_inode+0x40/0xcc) [ 213.236589][ T5116] r10:00000119 r9:85a18000 r8:8020029c r7:00000084 r6:81e4b380 r5:830a7000 [ 213.236612][ T5116] r4:837d8800 r3:00000000 [ 213.236629][ T5116] [<80592678>] (alloc_inode) from [<81595d54>] (sock_alloc+0x20/0x70) [ 213.236696][ T5116] r7:00000084 r6:00000000 r5:00000001 r4:0000000a [ 213.236712][ T5116] [<81595d34>] (sock_alloc) from [<8159601c>] (__sock_create+0x80/0x228) [ 213.236763][ T5116] r5:00000001 r4:0000000a [ 213.236777][ T5116] [<81595f9c>] (__sock_create) from [<815988b4>] (__sys_socket+0x94/0x10c) [ 213.236841][ T5116] r10:00000119 r9:838eb000 r8:8020029c r7:00000119 r6:838eb000 r5:0000000a [ 213.236859][ T5116] r4:00000001 [ 213.236874][ T5116] [<81598820>] (__sys_socket) from [<8159893c>] (sys_socket+0x10/0x14) [ 213.236948][ T5116] r6:00130308 r5:00000000 r4:00000000 [ 213.236964][ T5116] [<8159892c>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 213.237012][ T5116] Exception stack(0xeab4dfa8 to 0xeab4dff0) [ 213.237049][ T5116] dfa0: 00000000 00000000 0000000a 00000001 00000084 00000000 [ 213.237082][ T5116] dfc0: 00000000 00000000 00130308 00000119 00310000 00000000 00006364 76fde0bc [ 213.237107][ T5116] dfe0: 76fddec0 76fddeb0 000192bc 00132360 [ 213.258971][ T5116] socket: no more sockets [ 213.700247][ T29] audit: type=1400 audit(213.620:197): avc: denied { accept } for pid=5117 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 213.713084][ T29] audit: type=1400 audit(213.640:198): avc: denied { lock } for pid=5117 comm="syz.0.376" path="socket:[6197]" dev="sockfs" ino=6197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 217.704005][ T29] audit: type=1400 audit(217.630:199): avc: denied { bind } for pid=5151 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.704564][ T29] audit: type=1400 audit(217.630:200): avc: denied { node_bind } for pid=5151 comm="syz.0.386" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 223.158720][ T29] audit: type=1400 audit(223.080:201): avc: denied { create } for pid=5167 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.231863][ T29] audit: type=1400 audit(223.160:202): avc: denied { getopt } for pid=5167 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1334:(snd_func_refer) error evaluating name ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5703:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2666:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1334:(snd_func_refer) error evaluating name ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5703:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2666:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 224.711898][ T3701] ------------[ cut here ]------------ [ 224.712576][ T3701] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x198/0x258, CPU#1: kworker/1:5/3701 [ 224.716301][ T3701] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 224.717559][ T3701] Modules linked in: [ 224.718803][ T3701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.720074][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT [ 224.721039][ T3701] Hardware name: ARM-Versatile Express [ 224.721932][ T3701] Workqueue: events drm_fb_helper_damage_work [ 224.722779][ T3701] Call trace: [ 224.723269][ T3701] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 224.724425][ T3701] r7:82283b48 r6:84eb8c00 r5:00000000 r4:822958fc [ 224.725133][ T3701] [<80201b58>] (show_stack) from [<8021ee98>] (dump_stack_lvl+0x54/0x7c) [ 224.726279][ T3701] [<8021ee44>] (dump_stack_lvl) from [<8021eed8>] (dump_stack+0x18/0x1c) [ 224.727364][ T3701] r5:00000000 r4:82a7bd14 [ 224.727885][ T3701] [<8021eec0>] (dump_stack) from [<80202648>] (vpanic+0xe0/0x2e8) [ 224.728693][ T3701] [<80202568>] (vpanic) from [<80202884>] (trace_suspend_resume+0x0/0xd8) [ 224.729747][ T3701] r7:80b12324 [ 224.730157][ T3701] [<80202850>] (panic) from [<802520b0>] (get_taint+0x0/0x1c) [ 224.730958][ T3701] r3:8280c704 r2:00000001 r1:8227c0b0 r0:82283b48 [ 224.731682][ T3701] [<80252038>] (check_panic_on_warn) from [<80252228>] (__warn+0x94/0x1a4) [ 224.732856][ T3701] [<80252194>] (__warn) from [<80252520>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 224.733757][ T3701] r8:00000009 r7:82311730 r6:dfcc5dd4 r5:84eb8c00 r4:00000000 [ 224.734642][ T3701] [<8025233c>] (warn_slowpath_fmt) from [<80b12324>] (drm_wait_one_vblank+0x198/0x258) [ 224.736156][ T3701] r10:83016170 r9:83296c44 r8:00000000 r7:0000339f r6:00000000 r5:00000000 [ 224.737238][ T3701] r4:838c5c00 [ 224.737647][ T3701] [<80b1218c>] (drm_wait_one_vblank) from [<80b123fc>] (drm_crtc_wait_one_vblank+0x18/0x1c) [ 224.738832][ T3701] r9:83018605 r8:838c5c00 r7:83297e00 r6:838c5c00 r5:00000000 r4:838e1040 [ 224.739612][ T3701] [<80b123e4>] (drm_crtc_wait_one_vblank) from [<80b15fac>] (drm_client_modeset_wait_for_vblank+0x60/0x74) [ 224.741077][ T3701] [<80b15f4c>] (drm_client_modeset_wait_for_vblank) from [<80b2f268>] (drm_fb_helper_damage_work+0x50/0x1c8) [ 224.742897][ T3701] r7:83297e00 r6:83297eb8 r5:00000000 r4:83297e98 [ 224.743955][ T3701] [<80b2f218>] (drm_fb_helper_damage_work) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 224.745111][ T3701] r8:84eb8c00 r7:ddde3b40 r6:83018600 r5:83297e98 r4:85c20e80 [ 224.745857][ T3701] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 224.747079][ T3701] r10:61c88647 r9:84eb8c00 r8:85c20eac r7:82804d80 r6:ddde3b40 r5:ddde3b60 [ 224.747831][ T3701] r4:85c20e80 [ 224.748284][ T3701] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 224.749194][ T3701] r10:00000000 r9:85c20e80 r8:802762fc r7:df879e60 r6:85c20f00 r5:84eb8c00 [ 224.750470][ T3701] r4:00000001 [ 224.750843][ T3701] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 224.751631][ T3701] Exception stack(0xdfcc5fb0 to 0xdfcc5ff8) [ 224.752351][ T3701] 5fa0: 00000000 00000000 00000000 00000000 [ 224.753496][ T3701] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 224.754467][ T3701] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 224.755535][ T3701] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 224.756751][ T3701] r4:85c24fc0 [ 229.192078][ T3701] SMP: failed to stop secondary CPUs [ 229.194245][ T3701] Rebooting in 86400 seconds..