last executing test programs: 56m26.580793848s ago: executing program 0 (id=476): kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r0, 0x0, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000680)="b907ef19edfff007049e0ff0888e5a8006363497b286d0022e80c5a956684a8f25e61791a2aea463d7c0363c5e1f7042e0cbf0", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 56m26.227541336s ago: executing program 0 (id=477): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78) 56m25.971840746s ago: executing program 0 (id=478): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000340)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 56m25.653850461s ago: executing program 0 (id=479): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x2002, 0x0) 56m25.187445608s ago: executing program 0 (id=481): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000013c0)=""/208, 0xd0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) 56m24.570618326s ago: executing program 0 (id=484): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, r5, 0x29, 0x28, 0x0, @void, @void, @void, @value=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) 55m39.406522772s ago: executing program 32 (id=484): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, r5, 0x29, 0x28, 0x0, @void, @void, @void, @value=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) 34m9.266780057s ago: executing program 1 (id=1924): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 34m9.015953817s ago: executing program 1 (id=1925): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0xb}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x4404c0e0) 34m8.717934181s ago: executing program 1 (id=1926): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x4c42bb4f92, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x52, 0x129, &(0x7f0000000480)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000003472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 34m7.653293615s ago: executing program 1 (id=1927): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 34m7.430786232s ago: executing program 1 (id=1929): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 34m7.21173536s ago: executing program 1 (id=1930): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x8a00) fsync(r2) 33m21.791793973s ago: executing program 33 (id=1930): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x8a00) fsync(r2) 7m14.533030241s ago: executing program 3 (id=4515): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 7m14.331975407s ago: executing program 3 (id=4516): r0 = openat$ttyS3(0xffffff9c, 0x0, 0xa100, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5451, 0x0) 7m14.150306531s ago: executing program 3 (id=4517): r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='&\r\xf8\xfd\x03;\xd6\x1c\xb2M\n#\xc9\x1b\xe9\x92e\xa6\x9f\x96[\xe9\xdc\x1d(\x1d=\xe9\"(\xc2\xca\xe8\xf033\xc2^\xaa\xa4\x18,\xd7\x8c\x1b\xeeVHG\f`W\x14\x1c\xd2\x039\xa4\x8d\t\x82\xb1I7-y\xdfT\x04N-\xf2Xr\x9c\xe0\x94\xc0`\xbc\x17sK\xd7\x82\xc2d\x06[l\x16\xbf\xca\xdf\xff\xb1\xd1\xb2\x91\xb4\xe45\xb1\x92\xe3\x13hZ~nc\xc6\xcb\x97<\xce\xa6|#\xb0\xae1PY\xafk\x10{\xf2@9\xc7\x84\xb1e\xd7\xfa\xba\xb0\xf4\x81\x96F\xc0\x89\xecq\xd4\x94|Zi\xa3]\x0f\x91\xeb\xd5\'\xec?\xcf\xa9', &(0x7f0000000200)='./file0\x00', r1) 7m13.733584294s ago: executing program 3 (id=4519): r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x81, 0x0) close(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$nl_generic(0x10, 0x3, 0x10) write$hidraw(r0, &(0x7f00000025c0)="489a557f0adf862ef2ec8acf19b64a41678169ab5afd494332dbf18c4dd8ab3a2fdac8904be4a2fc583cc6603a3d1a0f233176abc1767b4f206f9e3c2e5640219a73558b13cb0c53ccc6", 0x4a) 7m13.481198344s ago: executing program 3 (id=4520): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8000, 0x50}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 7m13.241061322s ago: executing program 3 (id=4522): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) dup3(r6, r5, 0x0) timerfd_gettime(r5, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x24000804) timer_settime(0x0, 0x0, &(0x7f0000000180)={{r3, r4+10000000}, {0x77359400}}, 0x0) 6m28.177765313s ago: executing program 34 (id=4522): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = epoll_create1(0x0) r6 = timerfd_create(0x0, 0x0) dup3(r6, r5, 0x0) timerfd_gettime(r5, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x24000804) timer_settime(0x0, 0x0, &(0x7f0000000180)={{r3, r4+10000000}, {0x77359400}}, 0x0) 5m13.561059253s ago: executing program 2 (id=4743): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (fail_nth: 1) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 5m13.140559015s ago: executing program 2 (id=4745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) 5m12.792109732s ago: executing program 2 (id=4748): r0 = inotify_init() ioctl$FS_IOC_SETFSLABEL(r0, 0x5451, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 5m11.860045155s ago: executing program 2 (id=4749): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) (fail_nth: 1) creat(0x0, 0xd931d3864d39ddd8) 5m11.380075603s ago: executing program 2 (id=4750): ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x8901, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5411, 0x0) r1 = userfaultfd(0x80001) fcntl$getflags(r1, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x8901, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5411, 0x0) (async) userfaultfd(0x80001) (async) fcntl$getflags(r1, 0x0) (async) 5m11.019637641s ago: executing program 2 (id=4751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 5m11.019414601s ago: executing program 35 (id=4751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1m41.941030616s ago: executing program 5 (id=5139): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0xd780, 0x3, 0x0, 0x5, 0x0}) lseek(0xffffffffffffffff, 0x8001, 0x4) 1m41.676255816s ago: executing program 5 (id=5140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, &(0x7f0000000000)=@framed={{0x18, 0xa, 0x0, 0x11}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1fffffff}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m41.400258548s ago: executing program 5 (id=5141): unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m40.210349321s ago: executing program 5 (id=5144): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10034) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m39.829289031s ago: executing program 5 (id=5145): r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1m38.719336167s ago: executing program 5 (id=5147): fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) 1m38.719145607s ago: executing program 36 (id=5147): fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) 38.347749154s ago: executing program 4 (id=5171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x400000, 0x143, 0x38}, 0x18) ioctl$TIOCMGET(r4, 0x5415, 0x0) 12.747489054s ago: executing program 4 (id=5188): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89a2, 0x0) 11.489633822s ago: executing program 4 (id=5190): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) fsopen(0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 4.444167473s ago: executing program 6 (id=5198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83a"], 0xffe) 4.031390285s ago: executing program 4 (id=5199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000440)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 3.697663671s ago: executing program 6 (id=5200): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 3.341007109s ago: executing program 6 (id=5201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.042882892s ago: executing program 6 (id=5202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25010000000800010074"], 0x1c}}, 0x4800) 2.583181468s ago: executing program 6 (id=5203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r2, 0x40081271, 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r3, 0x0, 0x0, 0x10020, 0x0) bind$l2tp(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r4, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 502.102531ms ago: executing program 4 (id=5204): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 377.55µs ago: executing program 6 (id=5205): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) kernel console output (not intermixed with test programs): 4][T16420] do_el0_svc_compat+0x40/0x68 [ 3469.071151][T16420] el0_svc_compat+0x4c/0x17c [ 3469.071297][T16420] el0t_32_sync_handler+0x98/0x13c [ 3469.071363][T16420] el0t_32_sync+0x19c/0x1a0 [ 3469.541154][ T30] audit: type=1400 audit(4495.238:1535): avc: denied { getopt } for pid=16423 comm="syz.2.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3470.413167][T16434] FAULT_INJECTION: forcing a failure. [ 3470.413167][T16434] name failslab, interval 1, probability 0, space 0, times 0 [ 3470.413653][T16434] CPU: 1 UID: 0 PID: 16434 Comm: syz.2.4496 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3470.413725][T16434] Hardware name: linux,dummy-virt (DT) [ 3470.413758][T16434] Call trace: [ 3470.413787][T16434] show_stack+0x18/0x24 (C) [ 3470.413915][T16434] dump_stack_lvl+0xdc/0xf4 [ 3470.413986][T16434] dump_stack+0x1c/0x28 [ 3470.414126][T16434] should_fail_ex+0x5a0/0x6ac [ 3470.414271][T16434] should_failslab+0xbc/0x11c [ 3470.414410][T16434] __kmalloc_noprof+0xd0/0x4d0 [ 3470.414500][T16434] tomoyo_realpath_from_path+0x90/0x534 [ 3470.414583][T16434] tomoyo_path_number_perm+0x200/0x438 [ 3470.414653][T16434] tomoyo_file_ioctl+0x1c/0x28 [ 3470.414706][T16434] security_file_ioctl_compat+0x8c/0x19c [ 3470.414756][T16434] __arm64_compat_sys_ioctl+0x98/0x214 [ 3470.414802][T16434] invoke_syscall+0x6c/0x258 [ 3470.414848][T16434] el0_svc_common.constprop.0+0xac/0x230 [ 3470.414889][T16434] do_el0_svc_compat+0x40/0x68 [ 3470.415009][T16434] el0_svc_compat+0x4c/0x17c [ 3470.415073][T16434] el0t_32_sync_handler+0x98/0x13c [ 3470.415134][T16434] el0t_32_sync+0x19c/0x1a0 [ 3470.441094][T16434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3471.215608][ T30] audit: type=1400 audit(4496.908:1536): avc: denied { append } for pid=16441 comm="syz.3.4500" name="loop6" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3471.596867][T16446] FAULT_INJECTION: forcing a failure. [ 3471.596867][T16446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3471.598519][T16446] CPU: 0 UID: 0 PID: 16446 Comm: syz.3.4501 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3471.598596][T16446] Hardware name: linux,dummy-virt (DT) [ 3471.598630][T16446] Call trace: [ 3471.598661][T16446] show_stack+0x18/0x24 (C) [ 3471.598784][T16446] dump_stack_lvl+0xdc/0xf4 [ 3471.598845][T16446] dump_stack+0x1c/0x28 [ 3471.598908][T16446] should_fail_ex+0x5a0/0x6ac [ 3471.598956][T16446] should_fail+0x14/0x20 [ 3471.598998][T16446] should_fail_usercopy+0x1c/0x28 [ 3471.599040][T16446] _inline_copy_from_user+0x34/0x134 [ 3471.599089][T16446] get_compat_msghdr+0x90/0x118 [ 3471.599176][T16446] ___sys_sendmsg+0x184/0x19c [ 3471.599232][T16446] __sys_sendmsg+0x114/0x198 [ 3471.599277][T16446] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3471.599323][T16446] invoke_syscall+0x6c/0x258 [ 3471.599365][T16446] el0_svc_common.constprop.0+0xac/0x230 [ 3471.599526][T16446] do_el0_svc_compat+0x40/0x68 [ 3471.599596][T16446] el0_svc_compat+0x4c/0x17c [ 3471.599645][T16446] el0t_32_sync_handler+0x98/0x13c [ 3471.599689][T16446] el0t_32_sync+0x19c/0x1a0 [ 3473.728102][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3473.734368][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3477.243676][T16463] FAULT_INJECTION: forcing a failure. [ 3477.243676][T16463] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.244242][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.2.4507 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3477.244357][T16463] Hardware name: linux,dummy-virt (DT) [ 3477.244395][T16463] Call trace: [ 3477.244515][T16463] show_stack+0x18/0x24 (C) [ 3477.244621][T16463] dump_stack_lvl+0xdc/0xf4 [ 3477.244737][T16463] dump_stack+0x1c/0x28 [ 3477.244822][T16463] should_fail_ex+0x5a0/0x6ac [ 3477.244939][T16463] should_failslab+0xbc/0x11c [ 3477.245048][T16463] __kmalloc_noprof+0xd0/0x4d0 [ 3477.245171][T16463] tomoyo_realpath_from_path+0x90/0x534 [ 3477.245231][T16463] tomoyo_path_number_perm+0x200/0x438 [ 3477.245354][T16463] tomoyo_file_ioctl+0x1c/0x28 [ 3477.245419][T16463] security_file_ioctl_compat+0x8c/0x19c [ 3477.245479][T16463] __arm64_compat_sys_ioctl+0x98/0x214 [ 3477.245527][T16463] invoke_syscall+0x6c/0x258 [ 3477.245593][T16463] el0_svc_common.constprop.0+0xac/0x230 [ 3477.245644][T16463] do_el0_svc_compat+0x40/0x68 [ 3477.245687][T16463] el0_svc_compat+0x4c/0x17c [ 3477.245748][T16463] el0t_32_sync_handler+0x98/0x13c [ 3477.245797][T16463] el0t_32_sync+0x19c/0x1a0 [ 3477.245870][T16463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3479.053497][ T30] audit: type=1400 audit(4504.748:1537): avc: denied { mounton } for pid=16469 comm="syz.2.4510" path="/570/file0" dev="tmpfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 3485.170786][T16502] nbd3: detected capacity change from 0 to 18 [ 3485.343447][T16506] FAULT_INJECTION: forcing a failure. [ 3485.343447][T16506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3485.343961][T16506] CPU: 1 UID: 0 PID: 16506 Comm: syz.2.4523 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3485.344017][T16506] Hardware name: linux,dummy-virt (DT) [ 3485.344050][T16506] Call trace: [ 3485.344078][T16506] show_stack+0x18/0x24 (C) [ 3485.344152][T16506] dump_stack_lvl+0xdc/0xf4 [ 3485.344207][T16506] dump_stack+0x1c/0x28 [ 3485.344251][T16506] should_fail_ex+0x5a0/0x6ac [ 3485.344299][T16506] should_fail+0x14/0x20 [ 3485.344342][T16506] should_fail_usercopy+0x1c/0x28 [ 3485.344386][T16506] _inline_copy_from_user+0x38/0x130 [ 3485.344522][T16506] __arm64_sys_epoll_ctl+0xf0/0x178 [ 3485.344581][T16506] invoke_syscall+0x6c/0x258 [ 3485.344666][T16506] el0_svc_common.constprop.0+0xac/0x230 [ 3485.344711][T16506] do_el0_svc_compat+0x40/0x68 [ 3485.344785][T16506] el0_svc_compat+0x4c/0x17c [ 3485.344842][T16506] el0t_32_sync_handler+0x98/0x13c [ 3485.344906][T16506] el0t_32_sync+0x19c/0x1a0 [ 3487.503839][ T52] block nbd3: Receive control failed (result -104) [ 3487.877152][ T30] audit: type=1400 audit(4513.568:1538): avc: denied { append } for pid=16527 comm="syz.2.4532" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3496.808895][T16584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16584 comm=syz.2.4546 [ 3498.527899][ T7690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3498.919165][ T7690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.130665][ T7690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.314548][ T7690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.965715][T16592] lo speed is unknown, defaulting to 1000 [ 3503.517552][ T7690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3503.576656][ T7690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3503.643979][ T7690] bond0 (unregistering): Released all slaves [ 3504.025298][ T7690] hsr_slave_0: left promiscuous mode [ 3504.038919][ T7690] hsr_slave_1: left promiscuous mode [ 3504.188320][ T7690] veth1_macvtap: left promiscuous mode [ 3504.202126][ T7690] veth0_macvtap: left promiscuous mode [ 3504.204343][ T7690] veth1_vlan: left promiscuous mode [ 3504.205866][ T7690] veth0_vlan: left promiscuous mode [ 3515.598268][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3515.618461][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3515.664583][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 30 seconds [ 3518.168843][T16592] hsr_slave_0: entered promiscuous mode [ 3518.177044][T16592] hsr_slave_1: entered promiscuous mode [ 3518.182446][T16592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3518.183424][T16592] Cannot create hsr debugfs directory [ 3520.672506][T16592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3520.693421][T16592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3520.717190][T16592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3520.749352][T16592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3522.270777][T16592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3529.111163][T16592] veth0_vlan: entered promiscuous mode [ 3529.144882][T16592] veth1_vlan: entered promiscuous mode [ 3529.297613][T16592] veth0_macvtap: entered promiscuous mode [ 3529.336743][T16592] veth1_macvtap: entered promiscuous mode [ 3529.482225][T16592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3529.482638][T16592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3529.482991][T16592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3529.483180][T16592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3531.992699][T16727] lo speed is unknown, defaulting to 1000 [ 3534.043308][T16763] FAULT_INJECTION: forcing a failure. [ 3534.043308][T16763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3534.045089][T16763] CPU: 0 UID: 0 PID: 16763 Comm: syz.2.4555 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3534.045171][T16763] Hardware name: linux,dummy-virt (DT) [ 3534.045207][T16763] Call trace: [ 3534.045236][T16763] show_stack+0x18/0x24 (C) [ 3534.045318][T16763] dump_stack_lvl+0xdc/0xf4 [ 3534.045374][T16763] dump_stack+0x1c/0x28 [ 3534.045418][T16763] should_fail_ex+0x5a0/0x6ac [ 3534.045466][T16763] should_fail_alloc_page+0x70/0xb8 [ 3534.045516][T16763] prepare_alloc_pages+0x1a8/0x560 [ 3534.045559][T16763] __alloc_frozen_pages_noprof+0x144/0x1f58 [ 3534.045603][T16763] alloc_pages_mpol+0xfc/0x400 [ 3534.045643][T16763] folio_alloc_mpol_noprof+0x18/0x190 [ 3534.045685][T16763] vma_alloc_folio_noprof+0x104/0x1bc [ 3534.045736][T16763] vma_alloc_zeroed_movable_folio+0x50/0x6c [ 3534.045833][T16763] __handle_mm_fault+0x1ff0/0x3670 [ 3534.045880][T16763] handle_mm_fault+0x334/0x7ac [ 3534.045923][T16763] do_page_fault+0x1f4/0xca0 [ 3534.045968][T16763] do_translation_fault+0x184/0x1e8 [ 3534.046015][T16763] do_mem_abort+0x68/0x1a4 [ 3534.046059][T16763] el0_da+0x5c/0x174 [ 3534.046107][T16763] el0t_32_sync_handler+0x110/0x13c [ 3534.046150][T16763] el0t_32_sync+0x19c/0x1a0 [ 3534.048933][T16763] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3534.557810][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 3535.588839][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3535.657858][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3535.765356][T16778] FAULT_INJECTION: forcing a failure. [ 3535.765356][T16778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3535.768504][T16778] CPU: 0 UID: 0 PID: 16778 Comm: syz.2.4558 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3535.768579][T16778] Hardware name: linux,dummy-virt (DT) [ 3535.768655][T16778] Call trace: [ 3535.768689][T16778] show_stack+0x18/0x24 (C) [ 3535.768812][T16778] dump_stack_lvl+0xdc/0xf4 [ 3535.768876][T16778] dump_stack+0x1c/0x28 [ 3535.768933][T16778] should_fail_ex+0x5a0/0x6ac [ 3535.769020][T16778] should_fail+0x14/0x20 [ 3535.769067][T16778] should_fail_usercopy+0x1c/0x28 [ 3535.769113][T16778] _inline_copy_from_user+0x38/0x130 [ 3535.769163][T16778] __arm64_sys_epoll_ctl+0xf0/0x178 [ 3535.769210][T16778] invoke_syscall+0x6c/0x258 [ 3535.769255][T16778] el0_svc_common.constprop.0+0xac/0x230 [ 3535.769299][T16778] do_el0_svc_compat+0x40/0x68 [ 3535.769341][T16778] el0_svc_compat+0x4c/0x17c [ 3535.769386][T16778] el0t_32_sync_handler+0x98/0x13c [ 3535.769489][T16778] el0t_32_sync+0x19c/0x1a0 [ 3537.452825][ T30] audit: type=1400 audit(4563.148:1539): avc: granted { setsecparam } for pid=16793 comm="syz.2.4562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3537.531959][ T30] audit: type=1400 audit(4563.228:1540): avc: granted { setsecparam } for pid=16793 comm="syz.2.4562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3537.850191][T16727] hsr_slave_0: entered promiscuous mode [ 3537.855793][T16727] hsr_slave_1: entered promiscuous mode [ 3537.867383][T16727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3537.869162][T16727] Cannot create hsr debugfs directory [ 3538.961148][T16809] FAULT_INJECTION: forcing a failure. [ 3538.961148][T16809] name failslab, interval 1, probability 0, space 0, times 0 [ 3538.961740][T16809] CPU: 1 UID: 0 PID: 16809 Comm: syz.2.4566 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3538.961845][T16809] Hardware name: linux,dummy-virt (DT) [ 3538.961884][T16809] Call trace: [ 3538.961919][T16809] show_stack+0x18/0x24 (C) [ 3538.961999][T16809] dump_stack_lvl+0xdc/0xf4 [ 3538.962070][T16809] dump_stack+0x1c/0x28 [ 3538.962117][T16809] should_fail_ex+0x5a0/0x6ac [ 3538.962174][T16809] should_failslab+0xbc/0x11c [ 3538.962224][T16809] __kmalloc_noprof+0xd0/0x4d0 [ 3538.962273][T16809] tomoyo_realpath_from_path+0x90/0x534 [ 3538.962327][T16809] tomoyo_path_number_perm+0x200/0x438 [ 3538.962374][T16809] tomoyo_file_ioctl+0x1c/0x28 [ 3538.962421][T16809] security_file_ioctl_compat+0x8c/0x19c [ 3538.962483][T16809] __arm64_compat_sys_ioctl+0x98/0x214 [ 3538.962534][T16809] invoke_syscall+0x6c/0x258 [ 3538.962578][T16809] el0_svc_common.constprop.0+0xac/0x230 [ 3538.962619][T16809] do_el0_svc_compat+0x40/0x68 [ 3538.962684][T16809] el0_svc_compat+0x4c/0x17c [ 3538.962737][T16809] el0t_32_sync_handler+0x98/0x13c [ 3538.962782][T16809] el0t_32_sync+0x19c/0x1a0 [ 3538.962873][T16809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3539.050997][T16727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3539.123152][T16727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3539.153247][T16727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3539.184855][T16727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3540.890097][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3545.334902][T16876] ucma_write: process 79 (syz.2.4584) changed security contexts after opening file descriptor, this is not allowed. [ 3545.336519][T16876] FAULT_INJECTION: forcing a failure. [ 3545.336519][T16876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3545.337976][T16876] CPU: 0 UID: 0 PID: 16876 Comm: syz.2.4584 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3545.338066][T16876] Hardware name: linux,dummy-virt (DT) [ 3545.338103][T16876] Call trace: [ 3545.338132][T16876] show_stack+0x18/0x24 (C) [ 3545.338209][T16876] dump_stack_lvl+0xdc/0xf4 [ 3545.338263][T16876] dump_stack+0x1c/0x28 [ 3545.338309][T16876] should_fail_ex+0x5a0/0x6ac [ 3545.338358][T16876] should_fail+0x14/0x20 [ 3545.338401][T16876] should_fail_usercopy+0x1c/0x28 [ 3545.338457][T16876] simple_read_from_buffer+0x84/0x214 [ 3545.338509][T16876] proc_fail_nth_read+0x160/0x248 [ 3545.338554][T16876] vfs_read+0x18c/0x97c [ 3545.338604][T16876] ksys_read+0xec/0x1d8 [ 3545.338648][T16876] __arm64_sys_read+0x6c/0x9c [ 3545.338694][T16876] invoke_syscall+0x6c/0x258 [ 3545.338738][T16876] el0_svc_common.constprop.0+0xac/0x230 [ 3545.338781][T16876] do_el0_svc_compat+0x40/0x68 [ 3545.338824][T16876] el0_svc_compat+0x4c/0x17c [ 3545.338870][T16876] el0t_32_sync_handler+0x98/0x13c [ 3545.338912][T16876] el0t_32_sync+0x19c/0x1a0 [ 3545.732227][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 60 seconds [ 3548.092402][ T3123] udevd[3123]: worker [16495] /devices/virtual/block/nbd3 is taking a long time [ 3548.715243][T16727] veth0_vlan: entered promiscuous mode [ 3548.795775][T16727] veth1_vlan: entered promiscuous mode [ 3549.104543][T16727] veth0_macvtap: entered promiscuous mode [ 3549.166294][T16727] veth1_macvtap: entered promiscuous mode [ 3549.403044][T16727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3549.405158][T16727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3549.406798][T16727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3549.408212][T16727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3551.603943][T16904] FAULT_INJECTION: forcing a failure. [ 3551.603943][T16904] name failslab, interval 1, probability 0, space 0, times 0 [ 3551.605733][T16904] CPU: 1 UID: 0 PID: 16904 Comm: syz.4.4588 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3551.605807][T16904] Hardware name: linux,dummy-virt (DT) [ 3551.605845][T16904] Call trace: [ 3551.605879][T16904] show_stack+0x18/0x24 (C) [ 3551.605958][T16904] dump_stack_lvl+0xdc/0xf4 [ 3551.606015][T16904] dump_stack+0x1c/0x28 [ 3551.606062][T16904] should_fail_ex+0x5a0/0x6ac [ 3551.606113][T16904] should_failslab+0xbc/0x11c [ 3551.606178][T16904] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3551.606232][T16904] getname_flags.part.0+0x48/0x3d4 [ 3551.606285][T16904] getname_flags+0x78/0xc4 [ 3551.606334][T16904] do_sys_openat2+0xa4/0x160 [ 3551.606386][T16904] __arm64_compat_sys_openat+0x128/0x1b8 [ 3551.606434][T16904] invoke_syscall+0x6c/0x258 [ 3551.606489][T16904] el0_svc_common.constprop.0+0xac/0x230 [ 3551.606537][T16904] do_el0_svc_compat+0x40/0x68 [ 3551.606583][T16904] el0_svc_compat+0x4c/0x17c [ 3551.606630][T16904] el0t_32_sync_handler+0x98/0x13c [ 3551.606675][T16904] el0t_32_sync+0x19c/0x1a0 [ 3551.998673][ T30] audit: type=1400 audit(4577.688:1541): avc: denied { ioctl } for pid=16905 comm="syz.4.4589" path="socket:[47502]" dev="sockfs" ino=47502 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3553.989054][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3553.994031][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.215899][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.222784][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.284935][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.294416][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.307921][T16920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.313755][T16920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.123026][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3556.147022][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.637361][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3556.657532][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.694506][T16932] FAULT_INJECTION: forcing a failure. [ 3556.694506][T16932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3556.698919][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.2.4600 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3556.699032][T16932] Hardware name: linux,dummy-virt (DT) [ 3556.699067][T16932] Call trace: [ 3556.699097][T16932] show_stack+0x18/0x24 (C) [ 3556.699174][T16932] dump_stack_lvl+0xdc/0xf4 [ 3556.699228][T16932] dump_stack+0x1c/0x28 [ 3556.699273][T16932] should_fail_ex+0x5a0/0x6ac [ 3556.699322][T16932] should_fail+0x14/0x20 [ 3556.699367][T16932] should_fail_usercopy+0x1c/0x28 [ 3556.699412][T16932] simple_read_from_buffer+0x84/0x214 [ 3556.699542][T16932] proc_fail_nth_read+0x160/0x248 [ 3556.699597][T16932] vfs_read+0x18c/0x97c [ 3556.699648][T16932] ksys_read+0xec/0x1d8 [ 3556.699692][T16932] __arm64_sys_read+0x6c/0x9c [ 3556.699737][T16932] invoke_syscall+0x6c/0x258 [ 3556.699781][T16932] el0_svc_common.constprop.0+0xac/0x230 [ 3556.699824][T16932] do_el0_svc_compat+0x40/0x68 [ 3556.699867][T16932] el0_svc_compat+0x4c/0x17c [ 3556.699910][T16932] el0t_32_sync_handler+0x98/0x13c [ 3556.699995][T16932] el0t_32_sync+0x19c/0x1a0 [ 3557.538099][T16943] FAULT_INJECTION: forcing a failure. [ 3557.538099][T16943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3557.551998][T16943] CPU: 1 UID: 0 PID: 16943 Comm: syz.2.4604 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3557.552107][T16943] Hardware name: linux,dummy-virt (DT) [ 3557.552142][T16943] Call trace: [ 3557.552172][T16943] show_stack+0x18/0x24 (C) [ 3557.552251][T16943] dump_stack_lvl+0xdc/0xf4 [ 3557.552313][T16943] dump_stack+0x1c/0x28 [ 3557.552358][T16943] should_fail_ex+0x5a0/0x6ac [ 3557.552407][T16943] should_fail+0x14/0x20 [ 3557.552450][T16943] should_fail_usercopy+0x1c/0x28 [ 3557.552505][T16943] _inline_copy_from_user+0x38/0x138 [ 3557.552559][T16943] sk_getsockopt+0x204/0x1a9c [ 3557.552657][T16943] do_sock_getsockopt+0x428/0x4e4 [ 3557.552724][T16943] __sys_getsockopt+0xc8/0x15c [ 3557.552770][T16943] __arm64_sys_getsockopt+0xa4/0x100 [ 3557.552815][T16943] invoke_syscall+0x6c/0x258 [ 3557.552910][T16943] el0_svc_common.constprop.0+0xac/0x230 [ 3557.552957][T16943] do_el0_svc_compat+0x40/0x68 [ 3557.553000][T16943] el0_svc_compat+0x4c/0x17c [ 3557.553044][T16943] el0t_32_sync_handler+0x98/0x13c [ 3557.553086][T16943] el0t_32_sync+0x19c/0x1a0 [ 3558.567545][T16952] FAULT_INJECTION: forcing a failure. [ 3558.567545][T16952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3558.568051][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.4.4608 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3558.568112][T16952] Hardware name: linux,dummy-virt (DT) [ 3558.568145][T16952] Call trace: [ 3558.568173][T16952] show_stack+0x18/0x24 (C) [ 3558.568246][T16952] dump_stack_lvl+0xdc/0xf4 [ 3558.568298][T16952] dump_stack+0x1c/0x28 [ 3558.568341][T16952] should_fail_ex+0x5a0/0x6ac [ 3558.568389][T16952] should_fail+0x14/0x20 [ 3558.568431][T16952] should_fail_usercopy+0x1c/0x28 [ 3558.568482][T16952] _inline_copy_from_user+0x34/0x134 [ 3558.568536][T16952] get_compat_msghdr+0x90/0x118 [ 3558.568580][T16952] ___sys_sendmsg+0x184/0x19c [ 3558.568645][T16952] __sys_sendmsg+0x114/0x198 [ 3558.568689][T16952] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3558.568734][T16952] invoke_syscall+0x6c/0x258 [ 3558.568776][T16952] el0_svc_common.constprop.0+0xac/0x230 [ 3558.568819][T16952] do_el0_svc_compat+0x40/0x68 [ 3558.568859][T16952] el0_svc_compat+0x4c/0x17c [ 3558.568901][T16952] el0t_32_sync_handler+0x98/0x13c [ 3558.568941][T16952] el0t_32_sync+0x19c/0x1a0 [ 3559.192521][T16953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3559.483914][T16953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3559.788251][T16953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3560.021694][T16953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3560.510906][ T30] audit: type=1400 audit(4586.198:1542): avc: denied { setattr } for pid=16964 comm="syz.4.4613" name="NETLINK" dev="sockfs" ino=47632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3560.717569][T16953] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3560.742590][T16967] FAULT_INJECTION: forcing a failure. [ 3560.742590][T16967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3560.744098][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.4.4614 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3560.744166][T16967] Hardware name: linux,dummy-virt (DT) [ 3560.744201][T16967] Call trace: [ 3560.744232][T16967] show_stack+0x18/0x24 (C) [ 3560.744305][T16967] dump_stack_lvl+0xdc/0xf4 [ 3560.744360][T16967] dump_stack+0x1c/0x28 [ 3560.744407][T16967] should_fail_ex+0x5a0/0x6ac [ 3560.744469][T16967] should_fail+0x14/0x20 [ 3560.744516][T16967] should_fail_usercopy+0x1c/0x28 [ 3560.744562][T16967] copy_from_sockptr_offset.constprop.0+0x130/0x268 [ 3560.744633][T16967] do_ip_getsockopt+0x1c8/0x12cc [ 3560.744679][T16967] ip_getsockopt+0x8c/0x290 [ 3560.744722][T16967] raw_getsockopt+0x1c/0x334 [ 3560.744768][T16967] sock_common_getsockopt+0x70/0xc8 [ 3560.744821][T16967] do_sock_getsockopt+0x2c8/0x4e4 [ 3560.744864][T16967] __sys_getsockopt+0xc8/0x15c [ 3560.744908][T16967] __arm64_sys_getsockopt+0xa4/0x100 [ 3560.744953][T16967] invoke_syscall+0x6c/0x258 [ 3560.744996][T16967] el0_svc_common.constprop.0+0xac/0x230 [ 3560.745039][T16967] do_el0_svc_compat+0x40/0x68 [ 3560.745082][T16967] el0_svc_compat+0x4c/0x17c [ 3560.745125][T16967] el0t_32_sync_handler+0x98/0x13c [ 3560.745167][T16967] el0t_32_sync+0x19c/0x1a0 [ 3560.847062][T16953] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3560.995791][T16953] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3561.259395][T16953] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3562.343197][T16984] FAULT_INJECTION: forcing a failure. [ 3562.343197][T16984] name failslab, interval 1, probability 0, space 0, times 0 [ 3562.343767][T16984] CPU: 1 UID: 0 PID: 16984 Comm: syz.2.4620 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3562.343839][T16984] Hardware name: linux,dummy-virt (DT) [ 3562.343874][T16984] Call trace: [ 3562.343903][T16984] show_stack+0x18/0x24 (C) [ 3562.343977][T16984] dump_stack_lvl+0xdc/0xf4 [ 3562.344030][T16984] dump_stack+0x1c/0x28 [ 3562.344074][T16984] should_fail_ex+0x5a0/0x6ac [ 3562.344125][T16984] should_failslab+0xbc/0x11c [ 3562.344173][T16984] __kmalloc_noprof+0xd0/0x4d0 [ 3562.344218][T16984] tomoyo_realpath_from_path+0x90/0x534 [ 3562.344270][T16984] tomoyo_path_number_perm+0x200/0x438 [ 3562.344316][T16984] tomoyo_file_ioctl+0x1c/0x28 [ 3562.344397][T16984] security_file_ioctl_compat+0x8c/0x19c [ 3562.344737][T16984] __arm64_compat_sys_ioctl+0x98/0x214 [ 3562.344902][T16984] invoke_syscall+0x6c/0x258 [ 3562.345225][T16984] el0_svc_common.constprop.0+0xac/0x230 [ 3562.345416][T16984] do_el0_svc_compat+0x40/0x68 [ 3562.345475][T16984] el0_svc_compat+0x4c/0x17c [ 3562.345609][T16984] el0t_32_sync_handler+0x98/0x13c [ 3562.345679][T16984] el0t_32_sync+0x19c/0x1a0 [ 3562.346856][T16984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3563.902328][ T30] audit: type=1400 audit(4589.588:1543): avc: denied { ioctl } for pid=16993 comm="syz.4.4625" path="socket:[47796]" dev="sockfs" ino=47796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3565.651331][ T30] audit: type=1400 audit(4591.338:1544): avc: denied { setattr } for pid=17000 comm="syz.2.4626" name="CAN_ISOTP" dev="sockfs" ino=47798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3566.935482][ T30] audit: type=1400 audit(4592.628:1545): avc: denied { map } for pid=17002 comm="syz.4.4627" path="socket:[47805]" dev="sockfs" ino=47805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3566.941068][ T30] audit: type=1400 audit(4592.628:1546): avc: denied { accept } for pid=17002 comm="syz.4.4627" path="socket:[47805]" dev="sockfs" ino=47805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3570.198406][T17025] FAULT_INJECTION: forcing a failure. [ 3570.198406][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3570.204479][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.4.4635 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3570.204583][T17025] Hardware name: linux,dummy-virt (DT) [ 3570.204677][T17025] Call trace: [ 3570.204743][T17025] show_stack+0x18/0x24 (C) [ 3570.204848][T17025] dump_stack_lvl+0xdc/0xf4 [ 3570.204904][T17025] dump_stack+0x1c/0x28 [ 3570.204948][T17025] should_fail_ex+0x5a0/0x6ac [ 3570.204996][T17025] should_fail+0x14/0x20 [ 3570.205039][T17025] should_fail_usercopy+0x1c/0x28 [ 3570.205081][T17025] _inline_copy_from_user+0x34/0x134 [ 3570.205134][T17025] get_compat_msghdr+0x90/0x118 [ 3570.205178][T17025] ___sys_sendmsg+0x184/0x19c [ 3570.205225][T17025] __sys_sendmsg+0x114/0x198 [ 3570.205268][T17025] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3570.205313][T17025] invoke_syscall+0x6c/0x258 [ 3570.205355][T17025] el0_svc_common.constprop.0+0xac/0x230 [ 3570.205397][T17025] do_el0_svc_compat+0x40/0x68 [ 3570.205439][T17025] el0_svc_compat+0x4c/0x17c [ 3570.205488][T17025] el0t_32_sync_handler+0x98/0x13c [ 3570.205530][T17025] el0t_32_sync+0x19c/0x1a0 [ 3570.722870][ T30] audit: type=1400 audit(4596.418:1547): avc: denied { map } for pid=17027 comm="syz.4.4636" path="/dev/vcs1" dev="devtmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 3570.724952][ T30] audit: type=1400 audit(4596.418:1548): avc: denied { execute } for pid=17027 comm="syz.4.4636" path="/dev/vcs1" dev="devtmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 3571.875918][T17034] FAULT_INJECTION: forcing a failure. [ 3571.875918][T17034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3571.876455][T17034] CPU: 0 UID: 0 PID: 17034 Comm: syz.4.4639 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3571.876511][T17034] Hardware name: linux,dummy-virt (DT) [ 3571.876618][T17034] Call trace: [ 3571.876682][T17034] show_stack+0x18/0x24 (C) [ 3571.876819][T17034] dump_stack_lvl+0xdc/0xf4 [ 3571.876906][T17034] dump_stack+0x1c/0x28 [ 3571.876969][T17034] should_fail_ex+0x5a0/0x6ac [ 3571.877057][T17034] should_fail+0x14/0x20 [ 3571.877151][T17034] should_fail_usercopy+0x1c/0x28 [ 3571.877236][T17034] _inline_copy_from_user+0x34/0x134 [ 3571.877336][T17034] get_compat_msghdr+0x90/0x118 [ 3571.877474][T17034] ___sys_sendmsg+0x184/0x19c [ 3571.877583][T17034] __sys_sendmsg+0x114/0x198 [ 3571.877676][T17034] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3571.877761][T17034] invoke_syscall+0x6c/0x258 [ 3571.877844][T17034] el0_svc_common.constprop.0+0xac/0x230 [ 3571.877931][T17034] do_el0_svc_compat+0x40/0x68 [ 3571.878030][T17034] el0_svc_compat+0x4c/0x17c [ 3571.878151][T17034] el0t_32_sync_handler+0x98/0x13c [ 3571.878242][T17034] el0t_32_sync+0x19c/0x1a0 [ 3573.368835][T17048] FAULT_INJECTION: forcing a failure. [ 3573.368835][T17048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3573.374465][T17048] CPU: 0 UID: 0 PID: 17048 Comm: syz.4.4646 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3573.374597][T17048] Hardware name: linux,dummy-virt (DT) [ 3573.374632][T17048] Call trace: [ 3573.374661][T17048] show_stack+0x18/0x24 (C) [ 3573.374739][T17048] dump_stack_lvl+0xdc/0xf4 [ 3573.374793][T17048] dump_stack+0x1c/0x28 [ 3573.374837][T17048] should_fail_ex+0x5a0/0x6ac [ 3573.374888][T17048] should_fail+0x14/0x20 [ 3573.374930][T17048] should_fail_usercopy+0x1c/0x28 [ 3573.374974][T17048] _inline_copy_from_user+0x38/0x130 [ 3573.375023][T17048] kcm_setsockopt+0x1a8/0x4f8 [ 3573.375068][T17048] do_sock_setsockopt+0x17c/0x354 [ 3573.375117][T17048] __sys_setsockopt+0xcc/0x144 [ 3573.375162][T17048] __arm64_sys_setsockopt+0xa4/0x100 [ 3573.375209][T17048] invoke_syscall+0x6c/0x258 [ 3573.375252][T17048] el0_svc_common.constprop.0+0xac/0x230 [ 3573.375294][T17048] do_el0_svc_compat+0x40/0x68 [ 3573.375335][T17048] el0_svc_compat+0x4c/0x17c [ 3573.375379][T17048] el0t_32_sync_handler+0x98/0x13c [ 3573.375422][T17048] el0t_32_sync+0x19c/0x1a0 [ 3573.893062][T17047] FAULT_INJECTION: forcing a failure. [ 3573.893062][T17047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3573.901568][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.2.4645 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3573.901680][T17047] Hardware name: linux,dummy-virt (DT) [ 3573.901716][T17047] Call trace: [ 3573.901748][T17047] show_stack+0x18/0x24 (C) [ 3573.901828][T17047] dump_stack_lvl+0xdc/0xf4 [ 3573.901882][T17047] dump_stack+0x1c/0x28 [ 3573.901926][T17047] should_fail_ex+0x5a0/0x6ac [ 3573.901974][T17047] should_fail+0x14/0x20 [ 3573.902016][T17047] should_fail_usercopy+0x1c/0x28 [ 3573.902060][T17047] _inline_copy_from_user+0x34/0x134 [ 3573.902110][T17047] get_compat_msghdr+0x90/0x118 [ 3573.902154][T17047] ___sys_sendmsg+0x184/0x19c [ 3573.902203][T17047] __sys_sendmsg+0x114/0x198 [ 3573.902246][T17047] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3573.902292][T17047] invoke_syscall+0x6c/0x258 [ 3573.902336][T17047] el0_svc_common.constprop.0+0xac/0x230 [ 3573.902377][T17047] do_el0_svc_compat+0x40/0x68 [ 3573.902420][T17047] el0_svc_compat+0x4c/0x17c [ 3573.902473][T17047] el0t_32_sync_handler+0x98/0x13c [ 3573.902516][T17047] el0t_32_sync+0x19c/0x1a0 [ 3573.951665][T17053] fuse: Unknown parameter 'grou00000000000000000000' [ 3575.063043][T17065] FAULT_INJECTION: forcing a failure. [ 3575.063043][T17065] name failslab, interval 1, probability 0, space 0, times 0 [ 3575.063593][T17065] CPU: 0 UID: 0 PID: 17065 Comm: syz.2.4654 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3575.063651][T17065] Hardware name: linux,dummy-virt (DT) [ 3575.063685][T17065] Call trace: [ 3575.063721][T17065] show_stack+0x18/0x24 (C) [ 3575.063817][T17065] dump_stack_lvl+0xdc/0xf4 [ 3575.063875][T17065] dump_stack+0x1c/0x28 [ 3575.063919][T17065] should_fail_ex+0x5a0/0x6ac [ 3575.063969][T17065] should_failslab+0xbc/0x11c [ 3575.064062][T17065] kmem_cache_alloc_lru_noprof+0x7c/0x3b8 [ 3575.064409][T17065] sock_alloc_inode+0x24/0x170 [ 3575.064522][T17065] alloc_inode+0x58/0x1b4 [ 3575.064642][T17065] sock_alloc+0x3c/0x238 [ 3575.064734][T17065] do_accept+0xdc/0x3e4 [ 3575.064824][T17065] __sys_accept4+0xc8/0x14c [ 3575.064911][T17065] __arm64_sys_accept4+0x88/0xcc [ 3575.064996][T17065] invoke_syscall+0x6c/0x258 [ 3575.065085][T17065] el0_svc_common.constprop.0+0xac/0x230 [ 3575.065171][T17065] do_el0_svc_compat+0x40/0x68 [ 3575.065264][T17065] el0_svc_compat+0x4c/0x17c [ 3575.065351][T17065] el0t_32_sync_handler+0x98/0x13c [ 3575.065439][T17065] el0t_32_sync+0x19c/0x1a0 [ 3575.538928][ T30] audit: type=1400 audit(4601.228:1549): avc: denied { setattr } for pid=17070 comm="syz.2.4656" name="PACKET" dev="sockfs" ino=48676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3575.814701][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 90 seconds [ 3576.062270][T17079] FAULT_INJECTION: forcing a failure. [ 3576.062270][T17079] name failslab, interval 1, probability 0, space 0, times 0 [ 3576.065108][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.2.4661 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3576.065206][T17079] Hardware name: linux,dummy-virt (DT) [ 3576.065241][T17079] Call trace: [ 3576.065271][T17079] show_stack+0x18/0x24 (C) [ 3576.065354][T17079] dump_stack_lvl+0xdc/0xf4 [ 3576.065410][T17079] dump_stack+0x1c/0x28 [ 3576.065459][T17079] should_fail_ex+0x5a0/0x6ac [ 3576.065512][T17079] should_failslab+0xbc/0x11c [ 3576.065560][T17079] __kmalloc_noprof+0xd0/0x4d0 [ 3576.065608][T17079] tomoyo_realpath_from_path+0x90/0x534 [ 3576.065661][T17079] tomoyo_path_number_perm+0x200/0x438 [ 3576.065706][T17079] tomoyo_file_ioctl+0x1c/0x28 [ 3576.065762][T17079] security_file_ioctl_compat+0x8c/0x19c [ 3576.065813][T17079] __arm64_compat_sys_ioctl+0x98/0x214 [ 3576.065860][T17079] invoke_syscall+0x6c/0x258 [ 3576.065902][T17079] el0_svc_common.constprop.0+0xac/0x230 [ 3576.065946][T17079] do_el0_svc_compat+0x40/0x68 [ 3576.065987][T17079] el0_svc_compat+0x4c/0x17c [ 3576.066030][T17079] el0t_32_sync_handler+0x98/0x13c [ 3576.066071][T17079] el0t_32_sync+0x19c/0x1a0 [ 3576.076333][T17079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3577.658666][T17090] FAULT_INJECTION: forcing a failure. [ 3577.658666][T17090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3577.659176][T17090] CPU: 0 UID: 0 PID: 17090 Comm: syz.2.4665 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3577.659244][T17090] Hardware name: linux,dummy-virt (DT) [ 3577.659278][T17090] Call trace: [ 3577.659306][T17090] show_stack+0x18/0x24 (C) [ 3577.659378][T17090] dump_stack_lvl+0xdc/0xf4 [ 3577.659479][T17090] dump_stack+0x1c/0x28 [ 3577.659550][T17090] should_fail_ex+0x5a0/0x6ac [ 3577.659603][T17090] should_fail+0x14/0x20 [ 3577.659647][T17090] should_fail_usercopy+0x1c/0x28 [ 3577.659691][T17090] _inline_copy_from_user+0x34/0x134 [ 3577.659742][T17090] get_compat_msghdr+0x90/0x118 [ 3577.659786][T17090] ___sys_sendmsg+0x184/0x19c [ 3577.659833][T17090] __sys_sendmsg+0x114/0x198 [ 3577.659875][T17090] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3577.659922][T17090] invoke_syscall+0x6c/0x258 [ 3577.659964][T17090] el0_svc_common.constprop.0+0xac/0x230 [ 3577.660072][T17090] do_el0_svc_compat+0x40/0x68 [ 3577.660120][T17090] el0_svc_compat+0x4c/0x17c [ 3577.660163][T17090] el0t_32_sync_handler+0x98/0x13c [ 3577.660207][T17090] el0t_32_sync+0x19c/0x1a0 [ 3578.822790][T17095] FAULT_INJECTION: forcing a failure. [ 3578.822790][T17095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3578.823325][T17095] CPU: 0 UID: 0 PID: 17095 Comm: syz.4.4667 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3578.823392][T17095] Hardware name: linux,dummy-virt (DT) [ 3578.823425][T17095] Call trace: [ 3578.823453][T17095] show_stack+0x18/0x24 (C) [ 3578.823525][T17095] dump_stack_lvl+0xdc/0xf4 [ 3578.823577][T17095] dump_stack+0x1c/0x28 [ 3578.823629][T17095] should_fail_ex+0x5a0/0x6ac [ 3578.823749][T17095] should_fail+0x14/0x20 [ 3578.823798][T17095] should_fail_usercopy+0x1c/0x28 [ 3578.823994][T17095] _inline_copy_from_user+0x34/0x134 [ 3578.824065][T17095] get_compat_msghdr+0x90/0x118 [ 3578.824208][T17095] ___sys_sendmsg+0x184/0x19c [ 3578.824343][T17095] __sys_sendmsg+0x114/0x198 [ 3578.824436][T17095] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3578.824580][T17095] invoke_syscall+0x6c/0x258 [ 3578.824804][T17095] el0_svc_common.constprop.0+0xac/0x230 [ 3578.824896][T17095] do_el0_svc_compat+0x40/0x68 [ 3578.824997][T17095] el0_svc_compat+0x4c/0x17c [ 3578.825118][T17095] el0t_32_sync_handler+0x98/0x13c [ 3578.825200][T17095] el0t_32_sync+0x19c/0x1a0 [ 3579.431711][T17099] FAULT_INJECTION: forcing a failure. [ 3579.431711][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3579.432183][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.4.4669 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3579.432247][T17099] Hardware name: linux,dummy-virt (DT) [ 3579.432287][T17099] Call trace: [ 3579.432316][T17099] show_stack+0x18/0x24 (C) [ 3579.432390][T17099] dump_stack_lvl+0xdc/0xf4 [ 3579.432442][T17099] dump_stack+0x1c/0x28 [ 3579.432531][T17099] should_fail_ex+0x5a0/0x6ac [ 3579.432669][T17099] should_fail+0x14/0x20 [ 3579.432769][T17099] should_fail_usercopy+0x1c/0x28 [ 3579.432819][T17099] _inline_copy_from_user+0x34/0x134 [ 3579.432872][T17099] get_compat_msghdr+0x90/0x118 [ 3579.433058][T17099] ___sys_sendmsg+0x184/0x19c [ 3579.433222][T17099] __sys_sendmsg+0x114/0x198 [ 3579.433271][T17099] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3579.433317][T17099] invoke_syscall+0x6c/0x258 [ 3579.433448][T17099] el0_svc_common.constprop.0+0xac/0x230 [ 3579.433524][T17099] do_el0_svc_compat+0x40/0x68 [ 3579.433637][T17099] el0_svc_compat+0x4c/0x17c [ 3579.433775][T17099] el0t_32_sync_handler+0x98/0x13c [ 3579.433931][T17099] el0t_32_sync+0x19c/0x1a0 [ 3582.702533][T17124] FAULT_INJECTION: forcing a failure. [ 3582.702533][T17124] name failslab, interval 1, probability 0, space 0, times 0 [ 3582.703118][T17124] CPU: 1 UID: 0 PID: 17124 Comm: syz.4.4680 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3582.703182][T17124] Hardware name: linux,dummy-virt (DT) [ 3582.703217][T17124] Call trace: [ 3582.703246][T17124] show_stack+0x18/0x24 (C) [ 3582.703323][T17124] dump_stack_lvl+0xdc/0xf4 [ 3582.703377][T17124] dump_stack+0x1c/0x28 [ 3582.703421][T17124] should_fail_ex+0x5a0/0x6ac [ 3582.703469][T17124] should_failslab+0xbc/0x11c [ 3582.703517][T17124] __kmalloc_noprof+0xd0/0x4d0 [ 3582.703562][T17124] tomoyo_realpath_from_path+0x90/0x534 [ 3582.703612][T17124] tomoyo_path_number_perm+0x200/0x438 [ 3582.703659][T17124] tomoyo_file_ioctl+0x1c/0x28 [ 3582.703705][T17124] security_file_ioctl_compat+0x8c/0x19c [ 3582.703764][T17124] __arm64_compat_sys_ioctl+0x98/0x214 [ 3582.703811][T17124] invoke_syscall+0x6c/0x258 [ 3582.703854][T17124] el0_svc_common.constprop.0+0xac/0x230 [ 3582.703898][T17124] do_el0_svc_compat+0x40/0x68 [ 3582.703939][T17124] el0_svc_compat+0x4c/0x17c [ 3582.703981][T17124] el0t_32_sync_handler+0x98/0x13c [ 3582.704023][T17124] el0t_32_sync+0x19c/0x1a0 [ 3582.722712][T17124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3590.784414][T17190] FAULT_INJECTION: forcing a failure. [ 3590.784414][T17190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3590.786850][T17190] CPU: 1 UID: 0 PID: 17190 Comm: syz.4.4697 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3590.786932][T17190] Hardware name: linux,dummy-virt (DT) [ 3590.786968][T17190] Call trace: [ 3590.786999][T17190] show_stack+0x18/0x24 (C) [ 3590.787080][T17190] dump_stack_lvl+0xdc/0xf4 [ 3590.787134][T17190] dump_stack+0x1c/0x28 [ 3590.787179][T17190] should_fail_ex+0x5a0/0x6ac [ 3590.787227][T17190] should_fail+0x14/0x20 [ 3590.787270][T17190] should_fail_usercopy+0x1c/0x28 [ 3590.787315][T17190] _inline_copy_from_user+0x38/0x130 [ 3590.787364][T17190] __sys_bpf+0x1a0/0x2588 [ 3590.787410][T17190] __arm64_sys_bpf+0x70/0xa4 [ 3590.787456][T17190] invoke_syscall+0x6c/0x258 [ 3590.787508][T17190] el0_svc_common.constprop.0+0xac/0x230 [ 3590.787550][T17190] do_el0_svc_compat+0x40/0x68 [ 3590.787593][T17190] el0_svc_compat+0x4c/0x17c [ 3590.787641][T17190] el0t_32_sync_handler+0x98/0x13c [ 3590.787686][T17190] el0t_32_sync+0x19c/0x1a0 [ 3591.878936][T17201] random: crng reseeded on system resumption [ 3591.953517][T17201] FAULT_INJECTION: forcing a failure. [ 3591.953517][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 3591.954140][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.4.4702 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3591.954202][T17201] Hardware name: linux,dummy-virt (DT) [ 3591.954235][T17201] Call trace: [ 3591.954262][T17201] show_stack+0x18/0x24 (C) [ 3591.954334][T17201] dump_stack_lvl+0xdc/0xf4 [ 3591.954458][T17201] dump_stack+0x1c/0x28 [ 3591.954557][T17201] should_fail_ex+0x5a0/0x6ac [ 3591.954613][T17201] should_failslab+0xbc/0x11c [ 3591.954685][T17201] __kmalloc_noprof+0xd0/0x4d0 [ 3591.954739][T17201] tomoyo_realpath_from_path+0x90/0x534 [ 3591.954790][T17201] tomoyo_path_number_perm+0x200/0x438 [ 3591.954835][T17201] tomoyo_file_ioctl+0x1c/0x28 [ 3591.954881][T17201] security_file_ioctl_compat+0x8c/0x19c [ 3591.954989][T17201] __arm64_compat_sys_ioctl+0x98/0x214 [ 3591.955210][T17201] invoke_syscall+0x6c/0x258 [ 3591.955312][T17201] el0_svc_common.constprop.0+0xac/0x230 [ 3591.955400][T17201] do_el0_svc_compat+0x40/0x68 [ 3591.955450][T17201] el0_svc_compat+0x4c/0x17c [ 3591.955494][T17201] el0t_32_sync_handler+0x98/0x13c [ 3591.955558][T17201] el0t_32_sync+0x19c/0x1a0 [ 3591.972136][T17201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3592.876970][ T30] audit: type=1400 audit(4618.568:1550): avc: denied { setattr } for pid=17207 comm="syz.4.4705" name="ptyqc" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3593.613929][T17216] fuse: Bad value for 'user_id' [ 3593.615326][T17216] fuse: Bad value for 'user_id' [ 3594.253838][T17220] FAULT_INJECTION: forcing a failure. [ 3594.253838][T17220] name failslab, interval 1, probability 0, space 0, times 0 [ 3594.254276][T17220] CPU: 0 UID: 0 PID: 17220 Comm: syz.4.4707 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3594.254353][T17220] Hardware name: linux,dummy-virt (DT) [ 3594.254411][T17220] Call trace: [ 3594.254441][T17220] show_stack+0x18/0x24 (C) [ 3594.254515][T17220] dump_stack_lvl+0xdc/0xf4 [ 3594.254568][T17220] dump_stack+0x1c/0x28 [ 3594.254611][T17220] should_fail_ex+0x5a0/0x6ac [ 3594.254659][T17220] should_failslab+0xbc/0x11c [ 3594.254709][T17220] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3594.254864][T17220] getname_flags.part.0+0x48/0x3d4 [ 3594.254995][T17220] getname_flags+0x78/0xc4 [ 3594.255104][T17220] user_path_at+0x2c/0x70 [ 3594.255182][T17220] do_fchownat+0xb8/0x164 [ 3594.255286][T17220] __arm64_sys_chown16+0x8c/0xc8 [ 3594.255349][T17220] invoke_syscall+0x6c/0x258 [ 3594.255417][T17220] el0_svc_common.constprop.0+0xac/0x230 [ 3594.255480][T17220] do_el0_svc_compat+0x40/0x68 [ 3594.255547][T17220] el0_svc_compat+0x4c/0x17c [ 3594.255617][T17220] el0t_32_sync_handler+0x98/0x13c [ 3594.255675][T17220] el0t_32_sync+0x19c/0x1a0 [ 3595.891474][T17223] FAULT_INJECTION: forcing a failure. [ 3595.891474][T17223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3595.892895][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.4.4711 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3595.892961][T17223] Hardware name: linux,dummy-virt (DT) [ 3595.892994][T17223] Call trace: [ 3595.893024][T17223] show_stack+0x18/0x24 (C) [ 3595.893100][T17223] dump_stack_lvl+0xdc/0xf4 [ 3595.893154][T17223] dump_stack+0x1c/0x28 [ 3595.893198][T17223] should_fail_ex+0x5a0/0x6ac [ 3595.893247][T17223] should_fail+0x14/0x20 [ 3595.893290][T17223] should_fail_usercopy+0x1c/0x28 [ 3595.893335][T17223] _inline_copy_from_user+0x38/0x130 [ 3595.893385][T17223] ucma_write+0xf4/0x2a0 [ 3595.893426][T17223] vfs_write+0x1d8/0xad4 [ 3595.893474][T17223] ksys_write+0x18c/0x1d8 [ 3595.893543][T17223] __arm64_sys_write+0x6c/0x9c [ 3595.893589][T17223] invoke_syscall+0x6c/0x258 [ 3595.893632][T17223] el0_svc_common.constprop.0+0xac/0x230 [ 3595.893677][T17223] do_el0_svc_compat+0x40/0x68 [ 3595.893725][T17223] el0_svc_compat+0x4c/0x17c [ 3595.893770][T17223] el0t_32_sync_handler+0x98/0x13c [ 3595.893812][T17223] el0t_32_sync+0x19c/0x1a0 [ 3596.144183][T17225] FAULT_INJECTION: forcing a failure. [ 3596.144183][T17225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3596.145682][T17225] CPU: 1 UID: 0 PID: 17225 Comm: syz.4.4712 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3596.145759][T17225] Hardware name: linux,dummy-virt (DT) [ 3596.145794][T17225] Call trace: [ 3596.145825][T17225] show_stack+0x18/0x24 (C) [ 3596.145898][T17225] dump_stack_lvl+0xdc/0xf4 [ 3596.145953][T17225] dump_stack+0x1c/0x28 [ 3596.145998][T17225] should_fail_ex+0x5a0/0x6ac [ 3596.146046][T17225] should_fail+0x14/0x20 [ 3596.146092][T17225] should_fail_usercopy+0x1c/0x28 [ 3596.146136][T17225] _inline_copy_from_user+0x34/0x12c [ 3596.146186][T17225] do_quotactl+0x900/0xd90 [ 3596.146231][T17225] __arm64_sys_quotactl_fd+0x230/0x384 [ 3596.146276][T17225] invoke_syscall+0x6c/0x258 [ 3596.146321][T17225] el0_svc_common.constprop.0+0xac/0x230 [ 3596.146363][T17225] do_el0_svc_compat+0x40/0x68 [ 3596.146407][T17225] el0_svc_compat+0x4c/0x17c [ 3596.146450][T17225] el0t_32_sync_handler+0x98/0x13c [ 3596.146493][T17225] el0t_32_sync+0x19c/0x1a0 [ 3596.565972][T17228] fuse: Bad value for 'user_id' [ 3596.567266][T17228] fuse: Bad value for 'user_id' [ 3597.408008][T17229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17229 comm=syz.4.4713 [ 3598.298971][T17241] FAULT_INJECTION: forcing a failure. [ 3598.298971][T17241] name failslab, interval 1, probability 0, space 0, times 0 [ 3598.302795][T17241] CPU: 1 UID: 0 PID: 17241 Comm: syz.4.4717 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3598.302879][T17241] Hardware name: linux,dummy-virt (DT) [ 3598.302916][T17241] Call trace: [ 3598.302946][T17241] show_stack+0x18/0x24 (C) [ 3598.303031][T17241] dump_stack_lvl+0xdc/0xf4 [ 3598.303087][T17241] dump_stack+0x1c/0x28 [ 3598.303131][T17241] should_fail_ex+0x5a0/0x6ac [ 3598.303180][T17241] should_failslab+0xbc/0x11c [ 3598.303227][T17241] __kmalloc_noprof+0xd0/0x4d0 [ 3598.303272][T17241] tomoyo_realpath_from_path+0x90/0x534 [ 3598.303322][T17241] tomoyo_path_number_perm+0x200/0x438 [ 3598.303370][T17241] tomoyo_file_ioctl+0x1c/0x28 [ 3598.303416][T17241] security_file_ioctl_compat+0x8c/0x19c [ 3598.303476][T17241] __arm64_compat_sys_ioctl+0x98/0x214 [ 3598.303524][T17241] invoke_syscall+0x6c/0x258 [ 3598.303569][T17241] el0_svc_common.constprop.0+0xac/0x230 [ 3598.303613][T17241] do_el0_svc_compat+0x40/0x68 [ 3598.303656][T17241] el0_svc_compat+0x4c/0x17c [ 3598.303699][T17241] el0t_32_sync_handler+0x98/0x13c [ 3598.303742][T17241] el0t_32_sync+0x19c/0x1a0 [ 3598.324025][T17241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3598.529264][T17245] FAULT_INJECTION: forcing a failure. [ 3598.529264][T17245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3598.542150][T17245] CPU: 0 UID: 0 PID: 17245 Comm: syz.2.4719 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3598.542250][T17245] Hardware name: linux,dummy-virt (DT) [ 3598.542284][T17245] Call trace: [ 3598.542312][T17245] show_stack+0x18/0x24 (C) [ 3598.542386][T17245] dump_stack_lvl+0xdc/0xf4 [ 3598.542439][T17245] dump_stack+0x1c/0x28 [ 3598.542493][T17245] should_fail_ex+0x5a0/0x6ac [ 3598.542544][T17245] should_fail+0x14/0x20 [ 3598.542587][T17245] should_fail_usercopy+0x1c/0x28 [ 3598.542630][T17245] strncpy_from_user+0x34/0x2d8 [ 3598.542679][T17245] setxattr_copy+0x6c/0x174 [ 3598.542726][T17245] path_setxattrat+0xe4/0x204 [ 3598.542768][T17245] __arm64_sys_lsetxattr+0xa8/0x114 [ 3598.542813][T17245] invoke_syscall+0x6c/0x258 [ 3598.542856][T17245] el0_svc_common.constprop.0+0xac/0x230 [ 3598.542897][T17245] do_el0_svc_compat+0x40/0x68 [ 3598.542938][T17245] el0_svc_compat+0x4c/0x17c [ 3598.542981][T17245] el0t_32_sync_handler+0x98/0x13c [ 3598.543024][T17245] el0t_32_sync+0x19c/0x1a0 [ 3598.594282][T17249] fuse: Bad value for 'fd' [ 3599.166199][T17257] FAULT_INJECTION: forcing a failure. [ 3599.166199][T17257] name failslab, interval 1, probability 0, space 0, times 0 [ 3599.175534][T17257] CPU: 0 UID: 0 PID: 17257 Comm: syz.4.4723 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3599.175640][T17257] Hardware name: linux,dummy-virt (DT) [ 3599.175673][T17257] Call trace: [ 3599.175701][T17257] show_stack+0x18/0x24 (C) [ 3599.175776][T17257] dump_stack_lvl+0xdc/0xf4 [ 3599.175828][T17257] dump_stack+0x1c/0x28 [ 3599.175873][T17257] should_fail_ex+0x5a0/0x6ac [ 3599.175921][T17257] should_failslab+0xbc/0x11c [ 3599.175968][T17257] kmem_cache_alloc_lru_noprof+0x7c/0x3b8 [ 3599.176013][T17257] sock_alloc_inode+0x24/0x170 [ 3599.176060][T17257] alloc_inode+0x58/0x1b4 [ 3599.176118][T17257] sock_alloc+0x3c/0x238 [ 3599.176162][T17257] __sock_create+0xb8/0x634 [ 3599.176204][T17257] sock_create_kern+0x14/0x20 [ 3599.176245][T17257] mptcp_subflow_create_socket+0xd4/0xb94 [ 3599.176293][T17257] __mptcp_nmpc_sk+0x13c/0x63c [ 3599.176335][T17257] mptcp_setsockopt+0x824/0x1fec [ 3599.176377][T17257] sock_common_setsockopt+0x70/0xe0 [ 3599.176424][T17257] do_sock_setsockopt+0x17c/0x354 [ 3599.176499][T17257] __sys_setsockopt+0xcc/0x144 [ 3599.176548][T17257] __arm64_sys_setsockopt+0xa4/0x100 [ 3599.176592][T17257] invoke_syscall+0x6c/0x258 [ 3599.176658][T17257] el0_svc_common.constprop.0+0xac/0x230 [ 3599.176703][T17257] do_el0_svc_compat+0x40/0x68 [ 3599.176744][T17257] el0_svc_compat+0x4c/0x17c [ 3599.176788][T17257] el0t_32_sync_handler+0x98/0x13c [ 3599.176829][T17257] el0t_32_sync+0x19c/0x1a0 [ 3599.178359][T17257] socket: no more sockets [ 3603.709167][ T30] audit: type=1400 audit(4629.398:1551): avc: denied { connect } for pid=17311 comm="syz.4.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3603.788402][ T30] audit: type=1400 audit(4629.478:1552): avc: denied { write } for pid=17311 comm="syz.4.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3604.715500][T17321] FAULT_INJECTION: forcing a failure. [ 3604.715500][T17321] name failslab, interval 1, probability 0, space 0, times 0 [ 3604.717799][T17321] CPU: 1 UID: 0 PID: 17321 Comm: syz.2.4743 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3604.717875][T17321] Hardware name: linux,dummy-virt (DT) [ 3604.717913][T17321] Call trace: [ 3604.717945][T17321] show_stack+0x18/0x24 (C) [ 3604.718024][T17321] dump_stack_lvl+0xdc/0xf4 [ 3604.718081][T17321] dump_stack+0x1c/0x28 [ 3604.718129][T17321] should_fail_ex+0x5a0/0x6ac [ 3604.718182][T17321] should_failslab+0xbc/0x11c [ 3604.718231][T17321] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3604.718284][T17321] getname_flags.part.0+0x48/0x3d4 [ 3604.718335][T17321] getname_flags+0x78/0xc4 [ 3604.718389][T17321] user_path_at+0x2c/0x70 [ 3604.718432][T17321] do_fchownat+0xb8/0x164 [ 3604.718483][T17321] __arm64_sys_lchown16+0x8c/0xc8 [ 3604.718539][T17321] invoke_syscall+0x6c/0x258 [ 3604.718587][T17321] el0_svc_common.constprop.0+0xac/0x230 [ 3604.718632][T17321] do_el0_svc_compat+0x40/0x68 [ 3604.718677][T17321] el0_svc_compat+0x4c/0x17c [ 3604.718777][T17321] el0t_32_sync_handler+0x98/0x13c [ 3604.718829][T17321] el0t_32_sync+0x19c/0x1a0 [ 3605.914161][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 120 seconds [ 3606.568306][T17339] FAULT_INJECTION: forcing a failure. [ 3606.568306][T17339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3606.568856][T17339] CPU: 0 UID: 0 PID: 17339 Comm: syz.2.4749 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3606.568926][T17339] Hardware name: linux,dummy-virt (DT) [ 3606.568962][T17339] Call trace: [ 3606.568990][T17339] show_stack+0x18/0x24 (C) [ 3606.569064][T17339] dump_stack_lvl+0xdc/0xf4 [ 3606.569117][T17339] dump_stack+0x1c/0x28 [ 3606.569160][T17339] should_fail_ex+0x5a0/0x6ac [ 3606.569209][T17339] should_fail+0x14/0x20 [ 3606.569324][T17339] should_fail_usercopy+0x1c/0x28 [ 3606.569378][T17339] _inline_copy_from_user+0x38/0x130 [ 3606.569637][T17339] __sys_bpf+0x1a0/0x2588 [ 3606.569755][T17339] __arm64_sys_bpf+0x70/0xa4 [ 3606.569865][T17339] invoke_syscall+0x6c/0x258 [ 3606.569962][T17339] el0_svc_common.constprop.0+0xac/0x230 [ 3606.570008][T17339] do_el0_svc_compat+0x40/0x68 [ 3606.570155][T17339] el0_svc_compat+0x4c/0x17c [ 3606.570308][T17339] el0t_32_sync_handler+0x98/0x13c [ 3606.570477][T17339] el0t_32_sync+0x19c/0x1a0 [ 3607.424877][ T7724] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3607.633810][ T7724] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3607.823980][ T7724] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3608.023106][ T7724] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3611.958655][ T7724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3612.045047][ T7724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3612.104324][ T7724] bond0 (unregistering): Released all slaves [ 3612.554716][ T7724] hsr_slave_0: left promiscuous mode [ 3612.566422][ T7724] hsr_slave_1: left promiscuous mode [ 3612.779157][ T7724] veth1_macvtap: left promiscuous mode [ 3612.802267][ T7724] veth0_macvtap: left promiscuous mode [ 3612.803644][ T7724] veth1_vlan: left promiscuous mode [ 3612.814587][ T7724] veth0_vlan: left promiscuous mode [ 3620.809057][T17346] lo speed is unknown, defaulting to 1000 [ 3622.266672][ T7724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3622.521876][ T7724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3622.858161][ T7724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3623.297023][ T7724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3628.025401][ T7724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3628.099308][ T7724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3628.165551][ T7724] bond0 (unregistering): Released all slaves [ 3628.487959][ T7724] hsr_slave_0: left promiscuous mode [ 3628.496055][ T7724] hsr_slave_1: left promiscuous mode [ 3628.552869][ T7724] veth1_macvtap: left promiscuous mode [ 3628.553685][ T7724] veth0_macvtap: left promiscuous mode [ 3628.554480][ T7724] veth1_vlan: left promiscuous mode [ 3628.554851][ T7724] veth0_vlan: left promiscuous mode [ 3635.437521][T17394] lo speed is unknown, defaulting to 1000 [ 3635.974409][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 150 seconds [ 3637.161579][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3637.254457][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3640.053982][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3640.165297][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3640.366187][T17346] hsr_slave_0: entered promiscuous mode [ 3640.376038][T17346] hsr_slave_1: entered promiscuous mode [ 3640.379223][T17346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3640.383064][T17346] Cannot create hsr debugfs directory [ 3642.392546][T17346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3642.426911][T17346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3642.491238][T17346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3642.526081][T17346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3643.337870][T17394] hsr_slave_0: entered promiscuous mode [ 3643.362668][T17394] hsr_slave_1: entered promiscuous mode [ 3643.366393][T17394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3643.367642][T17394] Cannot create hsr debugfs directory [ 3645.881921][T17346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3646.741559][T17394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3646.767848][T17394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3646.814530][T17394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3646.876533][T17394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3650.241525][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3660.304412][T17346] veth0_vlan: entered promiscuous mode [ 3660.356816][T17346] veth1_vlan: entered promiscuous mode [ 3660.586525][T17346] veth0_macvtap: entered promiscuous mode [ 3660.616494][T17346] veth1_macvtap: entered promiscuous mode [ 3660.907270][T17346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3660.908700][T17346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3660.916038][T17346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3660.918236][T17346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3662.358198][T17585] fuse: Invalid rootmode [ 3662.637960][T17588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17588 comm=syz.5.4764 [ 3663.827569][T17597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17597 comm=syz.5.4766 [ 3666.054069][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 180 seconds [ 3666.812104][T17394] veth0_vlan: entered promiscuous mode [ 3666.868554][T17394] veth1_vlan: entered promiscuous mode [ 3667.285627][T17394] veth0_macvtap: entered promiscuous mode [ 3667.318955][T17394] veth1_macvtap: entered promiscuous mode [ 3667.408146][ T3123] udevd[3123]: worker [16495] /devices/virtual/block/nbd3 timeout; kill it [ 3667.431736][ T3123] udevd[3123]: seq 12621 '/devices/virtual/block/nbd3' killed [ 3667.616782][T17394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3667.632854][T17394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3667.633493][T17394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3667.633735][T17394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3670.004191][ T30] audit: type=1400 audit(4695.698:1553): avc: denied { getopt } for pid=17620 comm="syz.5.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3673.196447][T17641] fuse: Unknown parameter 'use00000000000000000000' [ 3674.683161][T17654] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17654 comm=syz.5.4782 [ 3674.799058][T17654] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17654 comm=syz.5.4782 [ 3675.486591][T17664] fuse: Unknown parameter 'use00000000000000000000' [ 3677.967249][T17681] fuse: Unknown parameter 'user_i00000000000000000000' [ 3678.842657][T17688] misc userio: The device must be registered before sending interrupts [ 3679.555686][T17694] FAULT_INJECTION: forcing a failure. [ 3679.555686][T17694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3679.556214][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.5.4793 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3679.556284][T17694] Hardware name: linux,dummy-virt (DT) [ 3679.556321][T17694] Call trace: [ 3679.556352][T17694] show_stack+0x18/0x24 (C) [ 3679.556443][T17694] dump_stack_lvl+0xdc/0xf4 [ 3679.556509][T17694] dump_stack+0x1c/0x28 [ 3679.556555][T17694] should_fail_ex+0x5a0/0x6ac [ 3679.556629][T17694] should_fail+0x14/0x20 [ 3679.556720][T17694] should_fail_usercopy+0x1c/0x28 [ 3679.556768][T17694] _inline_copy_from_user+0x34/0x134 [ 3679.556917][T17694] get_compat_msghdr+0x90/0x118 [ 3679.557046][T17694] ___sys_sendmsg+0x184/0x19c [ 3679.557208][T17694] __sys_sendmsg+0x114/0x198 [ 3679.557434][T17694] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3679.557598][T17694] invoke_syscall+0x6c/0x258 [ 3679.557731][T17694] el0_svc_common.constprop.0+0xac/0x230 [ 3679.557925][T17694] do_el0_svc_compat+0x40/0x68 [ 3679.558041][T17694] el0_svc_compat+0x4c/0x17c [ 3679.558202][T17694] el0t_32_sync_handler+0x98/0x13c [ 3679.558250][T17694] el0t_32_sync+0x19c/0x1a0 [ 3681.391782][ T30] audit: type=1400 audit(4707.068:1554): avc: denied { write } for pid=17710 comm="syz.5.4801" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3681.421813][ T30] audit: type=1400 audit(4707.108:1555): avc: denied { remove_name } for pid=17710 comm="syz.5.4801" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3681.428089][ T30] audit: type=1400 audit(4707.118:1556): avc: denied { unlink } for pid=17710 comm="syz.5.4801" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3681.465941][ T30] audit: type=1400 audit(4707.158:1557): avc: denied { create } for pid=17710 comm="syz.5.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 3682.419065][T17715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17715 comm=syz.5.4802 [ 3685.324532][T17743] FAULT_INJECTION: forcing a failure. [ 3685.324532][T17743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3685.326183][T17743] CPU: 1 UID: 0 PID: 17743 Comm: syz.4.4813 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3685.326256][T17743] Hardware name: linux,dummy-virt (DT) [ 3685.326290][T17743] Call trace: [ 3685.326319][T17743] show_stack+0x18/0x24 (C) [ 3685.326394][T17743] dump_stack_lvl+0xdc/0xf4 [ 3685.326447][T17743] dump_stack+0x1c/0x28 [ 3685.326501][T17743] should_fail_ex+0x5a0/0x6ac [ 3685.326551][T17743] should_fail+0x14/0x20 [ 3685.326596][T17743] should_fail_usercopy+0x1c/0x28 [ 3685.326642][T17743] simple_read_from_buffer+0x84/0x214 [ 3685.326691][T17743] proc_fail_nth_read+0x160/0x248 [ 3685.326737][T17743] vfs_read+0x18c/0x97c [ 3685.326786][T17743] ksys_read+0xec/0x1d8 [ 3685.326829][T17743] __arm64_sys_read+0x6c/0x9c [ 3685.326874][T17743] invoke_syscall+0x6c/0x258 [ 3685.326918][T17743] el0_svc_common.constprop.0+0xac/0x230 [ 3685.326962][T17743] do_el0_svc_compat+0x40/0x68 [ 3685.327003][T17743] el0_svc_compat+0x4c/0x17c [ 3685.327046][T17743] el0t_32_sync_handler+0x98/0x13c [ 3685.327090][T17743] el0t_32_sync+0x19c/0x1a0 [ 3686.020635][T17751] fuse: Bad value for 'fd' [ 3686.823955][T17758] FAULT_INJECTION: forcing a failure. [ 3686.823955][T17758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3686.825886][T17758] CPU: 1 UID: 0 PID: 17758 Comm: syz.5.4820 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3686.825958][T17758] Hardware name: linux,dummy-virt (DT) [ 3686.825994][T17758] Call trace: [ 3686.826025][T17758] show_stack+0x18/0x24 (C) [ 3686.826099][T17758] dump_stack_lvl+0xdc/0xf4 [ 3686.826157][T17758] dump_stack+0x1c/0x28 [ 3686.826200][T17758] should_fail_ex+0x5a0/0x6ac [ 3686.826248][T17758] should_fail+0x14/0x20 [ 3686.826292][T17758] should_fail_usercopy+0x1c/0x28 [ 3686.826336][T17758] _inline_copy_from_user+0x34/0x134 [ 3686.826390][T17758] get_compat_msghdr+0x90/0x118 [ 3686.826436][T17758] ___sys_sendmsg+0x184/0x19c [ 3686.826508][T17758] __sys_sendmsg+0x114/0x198 [ 3686.826572][T17758] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3686.826621][T17758] invoke_syscall+0x6c/0x258 [ 3686.826666][T17758] el0_svc_common.constprop.0+0xac/0x230 [ 3686.826710][T17758] do_el0_svc_compat+0x40/0x68 [ 3686.826751][T17758] el0_svc_compat+0x4c/0x17c [ 3686.826794][T17758] el0t_32_sync_handler+0x98/0x13c [ 3686.826836][T17758] el0t_32_sync+0x19c/0x1a0 [ 3687.277266][T17763] fuse: Bad value for 'fd' [ 3687.628827][T17767] FAULT_INJECTION: forcing a failure. [ 3687.628827][T17767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3687.632698][T17767] CPU: 1 UID: 0 PID: 17767 Comm: syz.4.4825 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3687.632775][T17767] Hardware name: linux,dummy-virt (DT) [ 3687.632809][T17767] Call trace: [ 3687.632841][T17767] show_stack+0x18/0x24 (C) [ 3687.632916][T17767] dump_stack_lvl+0xdc/0xf4 [ 3687.632971][T17767] dump_stack+0x1c/0x28 [ 3687.633015][T17767] should_fail_ex+0x5a0/0x6ac [ 3687.633064][T17767] should_fail+0x14/0x20 [ 3687.633108][T17767] should_fail_usercopy+0x1c/0x28 [ 3687.633151][T17767] _inline_copy_from_user+0x34/0x134 [ 3687.633204][T17767] get_compat_msghdr+0x90/0x118 [ 3687.633251][T17767] ___sys_sendmsg+0x184/0x19c [ 3687.633299][T17767] __sys_sendmsg+0x114/0x198 [ 3687.633344][T17767] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3687.633389][T17767] invoke_syscall+0x6c/0x258 [ 3687.633432][T17767] el0_svc_common.constprop.0+0xac/0x230 [ 3687.633485][T17767] do_el0_svc_compat+0x40/0x68 [ 3687.633530][T17767] el0_svc_compat+0x4c/0x17c [ 3687.633573][T17767] el0t_32_sync_handler+0x98/0x13c [ 3687.633616][T17767] el0t_32_sync+0x19c/0x1a0 [ 3688.048366][T17771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17771 comm=syz.5.4826 [ 3688.077157][T17771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17771 comm=syz.5.4826 [ 3688.672703][T17775] fuse: Unknown parameter '0x0000000000000003' [ 3690.163016][T17789] fuse: Unknown parameter '0x0000000000000003' [ 3692.261313][T17802] FAULT_INJECTION: forcing a failure. [ 3692.261313][T17802] name failslab, interval 1, probability 0, space 0, times 0 [ 3692.262935][T17802] CPU: 1 UID: 0 PID: 17802 Comm: syz.5.4841 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3692.263007][T17802] Hardware name: linux,dummy-virt (DT) [ 3692.263052][T17802] Call trace: [ 3692.263083][T17802] show_stack+0x18/0x24 (C) [ 3692.263166][T17802] dump_stack_lvl+0xdc/0xf4 [ 3692.263222][T17802] dump_stack+0x1c/0x28 [ 3692.263266][T17802] should_fail_ex+0x5a0/0x6ac [ 3692.263315][T17802] should_failslab+0xbc/0x11c [ 3692.263362][T17802] __kmalloc_noprof+0xd0/0x4d0 [ 3692.263410][T17802] tomoyo_realpath_from_path+0x90/0x534 [ 3692.263472][T17802] tomoyo_path_number_perm+0x200/0x438 [ 3692.263520][T17802] tomoyo_file_ioctl+0x1c/0x28 [ 3692.263566][T17802] security_file_ioctl_compat+0x8c/0x19c [ 3692.263617][T17802] __arm64_compat_sys_ioctl+0x98/0x214 [ 3692.263663][T17802] invoke_syscall+0x6c/0x258 [ 3692.263706][T17802] el0_svc_common.constprop.0+0xac/0x230 [ 3692.263748][T17802] do_el0_svc_compat+0x40/0x68 [ 3692.263789][T17802] el0_svc_compat+0x4c/0x17c [ 3692.263833][T17802] el0t_32_sync_handler+0x98/0x13c [ 3692.263897][T17802] el0t_32_sync+0x19c/0x1a0 [ 3692.286234][T17802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3696.134699][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 210 seconds [ 3696.233481][T17829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17829 comm=syz.5.4850 [ 3697.043401][T17835] FAULT_INJECTION: forcing a failure. [ 3697.043401][T17835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3697.047883][T17835] CPU: 1 UID: 0 PID: 17835 Comm: syz.5.4853 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3697.048006][T17835] Hardware name: linux,dummy-virt (DT) [ 3697.048047][T17835] Call trace: [ 3697.048078][T17835] show_stack+0x18/0x24 (C) [ 3697.048225][T17835] dump_stack_lvl+0xdc/0xf4 [ 3697.048291][T17835] dump_stack+0x1c/0x28 [ 3697.048338][T17835] should_fail_ex+0x5a0/0x6ac [ 3697.048387][T17835] should_fail+0x14/0x20 [ 3697.048431][T17835] should_fail_usercopy+0x1c/0x28 [ 3697.048485][T17835] io_register_file_alloc_range+0x88/0x2e0 [ 3697.048537][T17835] __arm64_sys_io_uring_register+0x6fc/0x1f9c [ 3697.048585][T17835] invoke_syscall+0x6c/0x258 [ 3697.048707][T17835] el0_svc_common.constprop.0+0xac/0x230 [ 3697.048759][T17835] do_el0_svc_compat+0x40/0x68 [ 3697.048801][T17835] el0_svc_compat+0x4c/0x17c [ 3697.048847][T17835] el0t_32_sync_handler+0x98/0x13c [ 3697.048891][T17835] el0t_32_sync+0x19c/0x1a0 [ 3701.913720][T17875] fuse: Unknown parameter 'fd0x0000000000000003' [ 3702.544274][ T30] audit: type=1400 audit(4728.228:1558): avc: denied { getopt } for pid=17878 comm="syz.4.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3703.607672][T17889] 8021q: VLANs not supported on lo [ 3704.243411][T17892] FAULT_INJECTION: forcing a failure. [ 3704.243411][T17892] name failslab, interval 1, probability 0, space 0, times 0 [ 3704.253176][T17892] CPU: 1 UID: 0 PID: 17892 Comm: syz.5.4870 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3704.253309][T17892] Hardware name: linux,dummy-virt (DT) [ 3704.253344][T17892] Call trace: [ 3704.253373][T17892] show_stack+0x18/0x24 (C) [ 3704.253462][T17892] dump_stack_lvl+0xdc/0xf4 [ 3704.253518][T17892] dump_stack+0x1c/0x28 [ 3704.253565][T17892] should_fail_ex+0x5a0/0x6ac [ 3704.253617][T17892] should_failslab+0xbc/0x11c [ 3704.253667][T17892] __kmalloc_noprof+0xd0/0x4d0 [ 3704.253716][T17892] tomoyo_realpath_from_path+0x90/0x534 [ 3704.253768][T17892] tomoyo_path_number_perm+0x200/0x438 [ 3704.253818][T17892] tomoyo_file_ioctl+0x1c/0x28 [ 3704.253868][T17892] security_file_ioctl_compat+0x8c/0x19c [ 3704.253922][T17892] __arm64_compat_sys_ioctl+0x98/0x214 [ 3704.253970][T17892] invoke_syscall+0x6c/0x258 [ 3704.254016][T17892] el0_svc_common.constprop.0+0xac/0x230 [ 3704.254061][T17892] do_el0_svc_compat+0x40/0x68 [ 3704.254106][T17892] el0_svc_compat+0x4c/0x17c [ 3704.254151][T17892] el0t_32_sync_handler+0x98/0x13c [ 3704.254198][T17892] el0t_32_sync+0x19c/0x1a0 [ 3704.271121][T17892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3704.607992][T17896] FAULT_INJECTION: forcing a failure. [ 3704.607992][T17896] name failslab, interval 1, probability 0, space 0, times 0 [ 3704.615106][T17896] CPU: 1 UID: 0 PID: 17896 Comm: syz.5.4871 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3704.615218][T17896] Hardware name: linux,dummy-virt (DT) [ 3704.615256][T17896] Call trace: [ 3704.615284][T17896] show_stack+0x18/0x24 (C) [ 3704.615362][T17896] dump_stack_lvl+0xdc/0xf4 [ 3704.615416][T17896] dump_stack+0x1c/0x28 [ 3704.615471][T17896] should_fail_ex+0x5a0/0x6ac [ 3704.615522][T17896] should_failslab+0xbc/0x11c [ 3704.615570][T17896] __kmalloc_noprof+0xd0/0x4d0 [ 3704.615617][T17896] tomoyo_realpath_from_path+0x90/0x534 [ 3704.615670][T17896] tomoyo_path_number_perm+0x200/0x438 [ 3704.615717][T17896] tomoyo_file_ioctl+0x1c/0x28 [ 3704.615764][T17896] security_file_ioctl_compat+0x8c/0x19c [ 3704.615814][T17896] __arm64_compat_sys_ioctl+0x98/0x214 [ 3704.615862][T17896] invoke_syscall+0x6c/0x258 [ 3704.615905][T17896] el0_svc_common.constprop.0+0xac/0x230 [ 3704.615950][T17896] do_el0_svc_compat+0x40/0x68 [ 3704.615993][T17896] el0_svc_compat+0x4c/0x17c [ 3704.616037][T17896] el0t_32_sync_handler+0x98/0x13c [ 3704.616080][T17896] el0t_32_sync+0x19c/0x1a0 [ 3704.626555][T17896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3708.559023][ T30] audit: type=1400 audit(4734.248:1559): avc: denied { setopt } for pid=17917 comm="syz.5.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3708.656124][T17918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=17918 comm=syz.5.4880 [ 3711.324985][T17934] FAULT_INJECTION: forcing a failure. [ 3711.324985][T17934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3711.327914][T17934] CPU: 1 UID: 0 PID: 17934 Comm: syz.5.4886 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3711.328010][T17934] Hardware name: linux,dummy-virt (DT) [ 3711.328048][T17934] Call trace: [ 3711.328078][T17934] show_stack+0x18/0x24 (C) [ 3711.328156][T17934] dump_stack_lvl+0xdc/0xf4 [ 3711.328212][T17934] dump_stack+0x1c/0x28 [ 3711.328258][T17934] should_fail_ex+0x5a0/0x6ac [ 3711.328311][T17934] should_fail+0x14/0x20 [ 3711.328358][T17934] should_fail_usercopy+0x1c/0x28 [ 3711.328403][T17934] simple_read_from_buffer+0x84/0x214 [ 3711.328467][T17934] proc_fail_nth_read+0x160/0x248 [ 3711.328517][T17934] vfs_read+0x18c/0x97c [ 3711.328567][T17934] ksys_read+0xec/0x1d8 [ 3711.328671][T17934] __arm64_sys_read+0x6c/0x9c [ 3711.328729][T17934] invoke_syscall+0x6c/0x258 [ 3711.328778][T17934] el0_svc_common.constprop.0+0xac/0x230 [ 3711.328825][T17934] do_el0_svc_compat+0x40/0x68 [ 3711.328868][T17934] el0_svc_compat+0x4c/0x17c [ 3711.328913][T17934] el0t_32_sync_handler+0x98/0x13c [ 3711.328959][T17934] el0t_32_sync+0x19c/0x1a0 [ 3714.288334][T17957] FAULT_INJECTION: forcing a failure. [ 3714.288334][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3714.290841][T17957] CPU: 1 UID: 0 PID: 17957 Comm: syz.5.4892 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3714.290913][T17957] Hardware name: linux,dummy-virt (DT) [ 3714.290948][T17957] Call trace: [ 3714.290977][T17957] show_stack+0x18/0x24 (C) [ 3714.291052][T17957] dump_stack_lvl+0xdc/0xf4 [ 3714.291105][T17957] dump_stack+0x1c/0x28 [ 3714.291149][T17957] should_fail_ex+0x5a0/0x6ac [ 3714.291197][T17957] should_fail+0x14/0x20 [ 3714.291242][T17957] should_fail_usercopy+0x1c/0x28 [ 3714.291290][T17957] _inline_copy_from_user+0x34/0x134 [ 3714.291343][T17957] get_compat_msghdr+0x90/0x118 [ 3714.291388][T17957] ___sys_sendmsg+0x184/0x19c [ 3714.291439][T17957] __sys_sendmmsg+0x2d0/0x420 [ 3714.291494][T17957] __arm64_compat_sys_sendmmsg+0x90/0xd4 [ 3714.291543][T17957] invoke_syscall+0x6c/0x258 [ 3714.291587][T17957] el0_svc_common.constprop.0+0xac/0x230 [ 3714.291629][T17957] do_el0_svc_compat+0x40/0x68 [ 3714.291672][T17957] el0_svc_compat+0x4c/0x17c [ 3714.291714][T17957] el0t_32_sync_handler+0x98/0x13c [ 3714.291755][T17957] el0t_32_sync+0x19c/0x1a0 [ 3715.275300][T17968] FAULT_INJECTION: forcing a failure. [ 3715.275300][T17968] name failslab, interval 1, probability 0, space 0, times 0 [ 3715.287872][T17968] CPU: 1 UID: 0 PID: 17968 Comm: syz.4.4897 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3715.287973][T17968] Hardware name: linux,dummy-virt (DT) [ 3715.288010][T17968] Call trace: [ 3715.288038][T17968] show_stack+0x18/0x24 (C) [ 3715.288116][T17968] dump_stack_lvl+0xdc/0xf4 [ 3715.288171][T17968] dump_stack+0x1c/0x28 [ 3715.288216][T17968] should_fail_ex+0x5a0/0x6ac [ 3715.288265][T17968] should_failslab+0xbc/0x11c [ 3715.288314][T17968] __kmalloc_noprof+0xd0/0x4d0 [ 3715.288360][T17968] tomoyo_realpath_from_path+0x90/0x534 [ 3715.288412][T17968] tomoyo_path_number_perm+0x200/0x438 [ 3715.288473][T17968] tomoyo_file_ioctl+0x1c/0x28 [ 3715.288522][T17968] security_file_ioctl_compat+0x8c/0x19c [ 3715.288573][T17968] __arm64_compat_sys_ioctl+0x98/0x214 [ 3715.288650][T17968] invoke_syscall+0x6c/0x258 [ 3715.288696][T17968] el0_svc_common.constprop.0+0xac/0x230 [ 3715.288741][T17968] do_el0_svc_compat+0x40/0x68 [ 3715.288782][T17968] el0_svc_compat+0x4c/0x17c [ 3715.288826][T17968] el0t_32_sync_handler+0x98/0x13c [ 3715.288867][T17968] el0t_32_sync+0x19c/0x1a0 [ 3715.315445][T17968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3717.083026][T17981] FAULT_INJECTION: forcing a failure. [ 3717.083026][T17981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3717.084019][T17981] CPU: 0 UID: 0 PID: 17981 Comm: syz.5.4902 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3717.084139][T17981] Hardware name: linux,dummy-virt (DT) [ 3717.084249][T17981] Call trace: [ 3717.084331][T17981] show_stack+0x18/0x24 (C) [ 3717.084506][T17981] dump_stack_lvl+0xdc/0xf4 [ 3717.084661][T17981] dump_stack+0x1c/0x28 [ 3717.084811][T17981] should_fail_ex+0x5a0/0x6ac [ 3717.084933][T17981] should_fail+0x14/0x20 [ 3717.085033][T17981] should_fail_usercopy+0x1c/0x28 [ 3717.085150][T17981] simple_read_from_buffer+0x84/0x214 [ 3717.085260][T17981] proc_fail_nth_read+0x160/0x248 [ 3717.085353][T17981] vfs_read+0x18c/0x97c [ 3717.085461][T17981] ksys_read+0xec/0x1d8 [ 3717.085557][T17981] __arm64_sys_read+0x6c/0x9c [ 3717.085671][T17981] invoke_syscall+0x6c/0x258 [ 3717.085779][T17981] el0_svc_common.constprop.0+0xac/0x230 [ 3717.085869][T17981] do_el0_svc_compat+0x40/0x68 [ 3717.085954][T17981] el0_svc_compat+0x4c/0x17c [ 3717.086056][T17981] el0t_32_sync_handler+0x98/0x13c [ 3717.086147][T17981] el0t_32_sync+0x19c/0x1a0 [ 3719.179323][T17998] FAULT_INJECTION: forcing a failure. [ 3719.179323][T17998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3719.180282][T17998] CPU: 0 UID: 0 PID: 17998 Comm: syz.4.4908 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3719.180350][T17998] Hardware name: linux,dummy-virt (DT) [ 3719.180385][T17998] Call trace: [ 3719.180414][T17998] show_stack+0x18/0x24 (C) [ 3719.180495][T17998] dump_stack_lvl+0xdc/0xf4 [ 3719.180548][T17998] dump_stack+0x1c/0x28 [ 3719.180592][T17998] should_fail_ex+0x5a0/0x6ac [ 3719.180718][T17998] should_fail+0x14/0x20 [ 3719.180765][T17998] should_fail_usercopy+0x1c/0x28 [ 3719.180829][T17998] _inline_copy_from_user+0x34/0x134 [ 3719.180886][T17998] get_compat_msghdr+0x90/0x118 [ 3719.180933][T17998] ___sys_sendmsg+0x184/0x19c [ 3719.180981][T17998] __sys_sendmsg+0x114/0x198 [ 3719.181024][T17998] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3719.181070][T17998] invoke_syscall+0x6c/0x258 [ 3719.181113][T17998] el0_svc_common.constprop.0+0xac/0x230 [ 3719.181217][T17998] do_el0_svc_compat+0x40/0x68 [ 3719.181301][T17998] el0_svc_compat+0x4c/0x17c [ 3719.181405][T17998] el0t_32_sync_handler+0x98/0x13c [ 3719.181537][T17998] el0t_32_sync+0x19c/0x1a0 [ 3719.968391][ T30] audit: type=1400 audit(4745.658:1560): avc: denied { create } for pid=17999 comm="syz.4.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3722.358636][T18015] FAULT_INJECTION: forcing a failure. [ 3722.358636][T18015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3722.362514][T18015] CPU: 1 UID: 0 PID: 18015 Comm: syz.4.4914 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3722.362614][T18015] Hardware name: linux,dummy-virt (DT) [ 3722.362649][T18015] Call trace: [ 3722.362678][T18015] show_stack+0x18/0x24 (C) [ 3722.362753][T18015] dump_stack_lvl+0xdc/0xf4 [ 3722.362805][T18015] dump_stack+0x1c/0x28 [ 3722.362852][T18015] should_fail_ex+0x5a0/0x6ac [ 3722.362900][T18015] should_fail+0x14/0x20 [ 3722.362943][T18015] should_fail_usercopy+0x1c/0x28 [ 3722.362989][T18015] _inline_copy_from_user+0x34/0x134 [ 3722.363041][T18015] get_compat_msghdr+0x90/0x118 [ 3722.363086][T18015] ___sys_sendmsg+0x184/0x19c [ 3722.363135][T18015] __sys_sendmsg+0x114/0x198 [ 3722.363178][T18015] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3722.363227][T18015] invoke_syscall+0x6c/0x258 [ 3722.363270][T18015] el0_svc_common.constprop.0+0xac/0x230 [ 3722.363315][T18015] do_el0_svc_compat+0x40/0x68 [ 3722.363356][T18015] el0_svc_compat+0x4c/0x17c [ 3722.363401][T18015] el0t_32_sync_handler+0x98/0x13c [ 3722.363442][T18015] el0t_32_sync+0x19c/0x1a0 [ 3723.605479][T18030] FAULT_INJECTION: forcing a failure. [ 3723.605479][T18030] name failslab, interval 1, probability 0, space 0, times 0 [ 3723.606082][T18030] CPU: 0 UID: 0 PID: 18030 Comm: syz.5.4920 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3723.606149][T18030] Hardware name: linux,dummy-virt (DT) [ 3723.606186][T18030] Call trace: [ 3723.606222][T18030] show_stack+0x18/0x24 (C) [ 3723.606300][T18030] dump_stack_lvl+0xdc/0xf4 [ 3723.606406][T18030] dump_stack+0x1c/0x28 [ 3723.606634][T18030] should_fail_ex+0x5a0/0x6ac [ 3723.607049][T18030] should_failslab+0xbc/0x11c [ 3723.607141][T18030] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3723.607340][T18030] getname_flags.part.0+0x48/0x3d4 [ 3723.607696][T18030] getname_flags+0x78/0xc4 [ 3723.608019][T18030] do_sys_openat2+0xa4/0x160 [ 3723.608266][T18030] __arm64_compat_sys_openat+0x128/0x1b8 [ 3723.608371][T18030] invoke_syscall+0x6c/0x258 [ 3723.608418][T18030] el0_svc_common.constprop.0+0xac/0x230 [ 3723.608468][T18030] do_el0_svc_compat+0x40/0x68 [ 3723.608511][T18030] el0_svc_compat+0x4c/0x17c [ 3723.608694][T18030] el0t_32_sync_handler+0x98/0x13c [ 3723.608928][T18030] el0t_32_sync+0x19c/0x1a0 [ 3726.213488][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 240 seconds [ 3727.183401][T18043] FAULT_INJECTION: forcing a failure. [ 3727.183401][T18043] name failslab, interval 1, probability 0, space 0, times 0 [ 3727.190723][T18043] CPU: 1 UID: 0 PID: 18043 Comm: syz.4.4925 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3727.190805][T18043] Hardware name: linux,dummy-virt (DT) [ 3727.190845][T18043] Call trace: [ 3727.190875][T18043] show_stack+0x18/0x24 (C) [ 3727.190980][T18043] dump_stack_lvl+0xdc/0xf4 [ 3727.191036][T18043] dump_stack+0x1c/0x28 [ 3727.191080][T18043] should_fail_ex+0x5a0/0x6ac [ 3727.191129][T18043] should_failslab+0xbc/0x11c [ 3727.191177][T18043] __kmalloc_noprof+0xd0/0x4d0 [ 3727.191222][T18043] tomoyo_realpath_from_path+0x90/0x534 [ 3727.191272][T18043] tomoyo_path_number_perm+0x200/0x438 [ 3727.191318][T18043] tomoyo_file_ioctl+0x1c/0x28 [ 3727.191364][T18043] security_file_ioctl_compat+0x8c/0x19c [ 3727.191414][T18043] __arm64_compat_sys_ioctl+0x98/0x214 [ 3727.191461][T18043] invoke_syscall+0x6c/0x258 [ 3727.191511][T18043] el0_svc_common.constprop.0+0xac/0x230 [ 3727.191555][T18043] do_el0_svc_compat+0x40/0x68 [ 3727.191597][T18043] el0_svc_compat+0x4c/0x17c [ 3727.191640][T18043] el0t_32_sync_handler+0x98/0x13c [ 3727.191684][T18043] el0t_32_sync+0x19c/0x1a0 [ 3727.216813][T18043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3728.545289][T18053] FAULT_INJECTION: forcing a failure. [ 3728.545289][T18053] name failslab, interval 1, probability 0, space 0, times 0 [ 3728.549167][T18053] CPU: 1 UID: 0 PID: 18053 Comm: syz.5.4929 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3728.549318][T18053] Hardware name: linux,dummy-virt (DT) [ 3728.549392][T18053] Call trace: [ 3728.549558][T18053] show_stack+0x18/0x24 (C) [ 3728.549724][T18053] dump_stack_lvl+0xdc/0xf4 [ 3728.549842][T18053] dump_stack+0x1c/0x28 [ 3728.549939][T18053] should_fail_ex+0x5a0/0x6ac [ 3728.550045][T18053] should_failslab+0xbc/0x11c [ 3728.550150][T18053] __kmalloc_noprof+0xd0/0x4d0 [ 3728.550249][T18053] tomoyo_realpath_from_path+0x90/0x534 [ 3728.550357][T18053] tomoyo_path_number_perm+0x200/0x438 [ 3728.550464][T18053] tomoyo_file_ioctl+0x1c/0x28 [ 3728.550566][T18053] security_file_ioctl_compat+0x8c/0x19c [ 3728.550676][T18053] __arm64_compat_sys_ioctl+0x98/0x214 [ 3728.550790][T18053] invoke_syscall+0x6c/0x258 [ 3728.550887][T18053] el0_svc_common.constprop.0+0xac/0x230 [ 3728.550983][T18053] do_el0_svc_compat+0x40/0x68 [ 3728.551080][T18053] el0_svc_compat+0x4c/0x17c [ 3728.551175][T18053] el0t_32_sync_handler+0x98/0x13c [ 3728.551269][T18053] el0t_32_sync+0x19c/0x1a0 [ 3728.574556][T18053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3730.551782][T18061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3730.591543][T18061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3731.963566][T18073] FAULT_INJECTION: forcing a failure. [ 3731.963566][T18073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3731.965245][T18073] CPU: 1 UID: 0 PID: 18073 Comm: syz.5.4938 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3731.965318][T18073] Hardware name: linux,dummy-virt (DT) [ 3731.965355][T18073] Call trace: [ 3731.965387][T18073] show_stack+0x18/0x24 (C) [ 3731.965471][T18073] dump_stack_lvl+0xdc/0xf4 [ 3731.965529][T18073] dump_stack+0x1c/0x28 [ 3731.965573][T18073] should_fail_ex+0x5a0/0x6ac [ 3731.965622][T18073] should_fail+0x14/0x20 [ 3731.965666][T18073] should_fail_usercopy+0x1c/0x28 [ 3731.965710][T18073] _inline_copy_from_user+0x34/0x134 [ 3731.965776][T18073] get_compat_msghdr+0x90/0x118 [ 3731.965824][T18073] ___sys_sendmsg+0x184/0x19c [ 3731.965872][T18073] __sys_sendmsg+0x114/0x198 [ 3731.965915][T18073] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3731.965962][T18073] invoke_syscall+0x6c/0x258 [ 3731.966007][T18073] el0_svc_common.constprop.0+0xac/0x230 [ 3731.966059][T18073] do_el0_svc_compat+0x40/0x68 [ 3731.966101][T18073] el0_svc_compat+0x4c/0x17c [ 3731.966144][T18073] el0t_32_sync_handler+0x98/0x13c [ 3731.966187][T18073] el0t_32_sync+0x19c/0x1a0 [ 3732.665367][T18081] FAULT_INJECTION: forcing a failure. [ 3732.665367][T18081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3732.667285][T18081] CPU: 1 UID: 0 PID: 18081 Comm: syz.5.4942 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3732.667411][T18081] Hardware name: linux,dummy-virt (DT) [ 3732.667448][T18081] Call trace: [ 3732.667482][T18081] show_stack+0x18/0x24 (C) [ 3732.667561][T18081] dump_stack_lvl+0xdc/0xf4 [ 3732.667617][T18081] dump_stack+0x1c/0x28 [ 3732.667662][T18081] should_fail_ex+0x5a0/0x6ac [ 3732.667712][T18081] should_fail+0x14/0x20 [ 3732.667766][T18081] should_fail_usercopy+0x1c/0x28 [ 3732.667810][T18081] _inline_copy_from_user+0x38/0x130 [ 3732.667859][T18081] move_addr_to_kernel+0x44/0x10c [ 3732.667904][T18081] __sys_connect+0xa8/0x12c [ 3732.667949][T18081] __arm64_sys_connect+0x6c/0xa0 [ 3732.667993][T18081] invoke_syscall+0x6c/0x258 [ 3732.668036][T18081] el0_svc_common.constprop.0+0xac/0x230 [ 3732.668079][T18081] do_el0_svc_compat+0x40/0x68 [ 3732.668120][T18081] el0_svc_compat+0x4c/0x17c [ 3732.668164][T18081] el0t_32_sync_handler+0x98/0x13c [ 3732.668206][T18081] el0t_32_sync+0x19c/0x1a0 [ 3734.497791][T18099] FAULT_INJECTION: forcing a failure. [ 3734.497791][T18099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3734.498363][T18099] CPU: 0 UID: 0 PID: 18099 Comm: syz.5.4950 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3734.498426][T18099] Hardware name: linux,dummy-virt (DT) [ 3734.498460][T18099] Call trace: [ 3734.498489][T18099] show_stack+0x18/0x24 (C) [ 3734.498564][T18099] dump_stack_lvl+0xdc/0xf4 [ 3734.498617][T18099] dump_stack+0x1c/0x28 [ 3734.498731][T18099] should_fail_ex+0x5a0/0x6ac [ 3734.498830][T18099] should_fail+0x14/0x20 [ 3734.498944][T18099] should_fail_usercopy+0x1c/0x28 [ 3734.499028][T18099] simple_read_from_buffer+0x84/0x214 [ 3734.499117][T18099] proc_fail_nth_read+0x160/0x248 [ 3734.499246][T18099] vfs_read+0x18c/0x97c [ 3734.499334][T18099] ksys_read+0xec/0x1d8 [ 3734.499478][T18099] __arm64_sys_read+0x6c/0x9c [ 3734.499565][T18099] invoke_syscall+0x6c/0x258 [ 3734.499642][T18099] el0_svc_common.constprop.0+0xac/0x230 [ 3734.499685][T18099] do_el0_svc_compat+0x40/0x68 [ 3734.499731][T18099] el0_svc_compat+0x4c/0x17c [ 3734.499777][T18099] el0t_32_sync_handler+0x98/0x13c [ 3734.499818][T18099] el0t_32_sync+0x19c/0x1a0 [ 3736.212849][T18114] FAULT_INJECTION: forcing a failure. [ 3736.212849][T18114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3736.213367][T18114] CPU: 0 UID: 0 PID: 18114 Comm: syz.5.4956 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3736.213455][T18114] Hardware name: linux,dummy-virt (DT) [ 3736.213534][T18114] Call trace: [ 3736.213569][T18114] show_stack+0x18/0x24 (C) [ 3736.213656][T18114] dump_stack_lvl+0xdc/0xf4 [ 3736.213714][T18114] dump_stack+0x1c/0x28 [ 3736.213762][T18114] should_fail_ex+0x5a0/0x6ac [ 3736.213810][T18114] should_fail+0x14/0x20 [ 3736.213852][T18114] should_fail_usercopy+0x1c/0x28 [ 3736.213894][T18114] _inline_copy_from_user+0x34/0x134 [ 3736.213945][T18114] get_compat_msghdr+0x90/0x118 [ 3736.213988][T18114] ___sys_sendmsg+0x184/0x19c [ 3736.214057][T18114] __sys_sendmsg+0x114/0x198 [ 3736.214108][T18114] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3736.214180][T18114] invoke_syscall+0x6c/0x258 [ 3736.214228][T18114] el0_svc_common.constprop.0+0xac/0x230 [ 3736.214271][T18114] do_el0_svc_compat+0x40/0x68 [ 3736.214312][T18114] el0_svc_compat+0x4c/0x17c [ 3736.214399][T18114] el0t_32_sync_handler+0x98/0x13c [ 3736.214475][T18114] el0t_32_sync+0x19c/0x1a0 [ 3737.017928][T18121] raw_sendmsg: syz.4.4958 forgot to set AF_INET. Fix it! [ 3738.249274][T18129] FAULT_INJECTION: forcing a failure. [ 3738.249274][T18129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3738.250900][T18129] CPU: 0 UID: 0 PID: 18129 Comm: syz.5.4960 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3738.250972][T18129] Hardware name: linux,dummy-virt (DT) [ 3738.251007][T18129] Call trace: [ 3738.251036][T18129] show_stack+0x18/0x24 (C) [ 3738.251113][T18129] dump_stack_lvl+0xdc/0xf4 [ 3738.251166][T18129] dump_stack+0x1c/0x28 [ 3738.251210][T18129] should_fail_ex+0x5a0/0x6ac [ 3738.251257][T18129] should_fail+0x14/0x20 [ 3738.251300][T18129] should_fail_usercopy+0x1c/0x28 [ 3738.251343][T18129] strncpy_from_user+0x34/0x2d8 [ 3738.251390][T18129] path_getxattrat+0xe8/0x204 [ 3738.251436][T18129] __arm64_sys_lgetxattr+0x8c/0xdc [ 3738.251492][T18129] invoke_syscall+0x6c/0x258 [ 3738.251535][T18129] el0_svc_common.constprop.0+0xac/0x230 [ 3738.251578][T18129] do_el0_svc_compat+0x40/0x68 [ 3738.251620][T18129] el0_svc_compat+0x4c/0x17c [ 3738.251662][T18129] el0t_32_sync_handler+0x98/0x13c [ 3738.251705][T18129] el0t_32_sync+0x19c/0x1a0 [ 3740.117211][T18148] FAULT_INJECTION: forcing a failure. [ 3740.117211][T18148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3740.124800][T18148] CPU: 1 UID: 0 PID: 18148 Comm: syz.5.4967 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3740.124914][T18148] Hardware name: linux,dummy-virt (DT) [ 3740.124958][T18148] Call trace: [ 3740.124996][T18148] show_stack+0x18/0x24 (C) [ 3740.125087][T18148] dump_stack_lvl+0xdc/0xf4 [ 3740.125156][T18148] dump_stack+0x1c/0x28 [ 3740.125217][T18148] should_fail_ex+0x5a0/0x6ac [ 3740.125282][T18148] should_fail+0x14/0x20 [ 3740.125342][T18148] should_fail_usercopy+0x1c/0x28 [ 3740.125406][T18148] _inline_copy_from_user+0x38/0x138 [ 3740.125489][T18148] sk_setsockopt+0x1d8/0x218c [ 3740.125550][T18148] sock_setsockopt+0x34/0x64 [ 3740.125609][T18148] do_sock_setsockopt+0x2cc/0x354 [ 3740.125669][T18148] __sys_setsockopt+0xcc/0x144 [ 3740.125797][T18148] __arm64_sys_setsockopt+0xa4/0x100 [ 3740.125880][T18148] invoke_syscall+0x6c/0x258 [ 3740.125945][T18148] el0_svc_common.constprop.0+0xac/0x230 [ 3740.126005][T18148] do_el0_svc_compat+0x40/0x68 [ 3740.126064][T18148] el0_svc_compat+0x4c/0x17c [ 3740.126124][T18148] el0t_32_sync_handler+0x98/0x13c [ 3740.126185][T18148] el0t_32_sync+0x19c/0x1a0 [ 3743.037763][T18167] FAULT_INJECTION: forcing a failure. [ 3743.037763][T18167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3743.046338][T18167] CPU: 1 UID: 0 PID: 18167 Comm: syz.4.4974 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3743.046507][T18167] Hardware name: linux,dummy-virt (DT) [ 3743.046548][T18167] Call trace: [ 3743.046578][T18167] show_stack+0x18/0x24 (C) [ 3743.046658][T18167] dump_stack_lvl+0xdc/0xf4 [ 3743.046738][T18167] dump_stack+0x1c/0x28 [ 3743.046786][T18167] should_fail_ex+0x5a0/0x6ac [ 3743.046837][T18167] should_fail+0x14/0x20 [ 3743.046880][T18167] should_fail_usercopy+0x1c/0x28 [ 3743.046926][T18167] _inline_copy_from_user+0x34/0x134 [ 3743.046977][T18167] get_compat_msghdr+0x90/0x118 [ 3743.047024][T18167] ___sys_sendmsg+0x184/0x19c [ 3743.047073][T18167] __sys_sendmsg+0x114/0x198 [ 3743.047117][T18167] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3743.047163][T18167] invoke_syscall+0x6c/0x258 [ 3743.047206][T18167] el0_svc_common.constprop.0+0xac/0x230 [ 3743.047248][T18167] do_el0_svc_compat+0x40/0x68 [ 3743.047291][T18167] el0_svc_compat+0x4c/0x17c [ 3743.047334][T18167] el0t_32_sync_handler+0x98/0x13c [ 3743.047376][T18167] el0t_32_sync+0x19c/0x1a0 [ 3744.646669][ T30] audit: type=1400 audit(4770.338:1561): avc: denied { setattr } for pid=18175 comm="syz.4.4978" name="nbd4" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3746.586798][T18192] FAULT_INJECTION: forcing a failure. [ 3746.586798][T18192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3746.590716][T18192] CPU: 0 UID: 0 PID: 18192 Comm: syz.4.4983 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3746.590821][T18192] Hardware name: linux,dummy-virt (DT) [ 3746.590858][T18192] Call trace: [ 3746.590890][T18192] show_stack+0x18/0x24 (C) [ 3746.590970][T18192] dump_stack_lvl+0xdc/0xf4 [ 3746.591024][T18192] dump_stack+0x1c/0x28 [ 3746.591067][T18192] should_fail_ex+0x5a0/0x6ac [ 3746.591114][T18192] should_fail+0x14/0x20 [ 3746.591157][T18192] should_fail_usercopy+0x1c/0x28 [ 3746.591199][T18192] raw_getsockopt+0x170/0x90c [ 3746.591251][T18192] do_sock_getsockopt+0x2c8/0x4e4 [ 3746.591299][T18192] __sys_getsockopt+0xc8/0x15c [ 3746.591343][T18192] __arm64_sys_getsockopt+0xa4/0x100 [ 3746.591386][T18192] invoke_syscall+0x6c/0x258 [ 3746.591429][T18192] el0_svc_common.constprop.0+0xac/0x230 [ 3746.591478][T18192] do_el0_svc_compat+0x40/0x68 [ 3746.591522][T18192] el0_svc_compat+0x4c/0x17c [ 3746.591564][T18192] el0t_32_sync_handler+0x98/0x13c [ 3746.591604][T18192] el0t_32_sync+0x19c/0x1a0 [ 3748.078685][T18202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18202 comm=syz.4.4985 [ 3748.534907][T18206] FAULT_INJECTION: forcing a failure. [ 3748.534907][T18206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3748.535535][T18206] CPU: 0 UID: 0 PID: 18206 Comm: syz.4.4986 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3748.535627][T18206] Hardware name: linux,dummy-virt (DT) [ 3748.535666][T18206] Call trace: [ 3748.535712][T18206] show_stack+0x18/0x24 (C) [ 3748.535788][T18206] dump_stack_lvl+0xdc/0xf4 [ 3748.535843][T18206] dump_stack+0x1c/0x28 [ 3748.535886][T18206] should_fail_ex+0x5a0/0x6ac [ 3748.535933][T18206] should_fail+0x14/0x20 [ 3748.535976][T18206] should_fail_usercopy+0x1c/0x28 [ 3748.536020][T18206] _inline_copy_from_user+0x34/0x134 [ 3748.536279][T18206] get_compat_msghdr+0x90/0x118 [ 3748.536331][T18206] ___sys_sendmsg+0x184/0x19c [ 3748.536379][T18206] __sys_sendmsg+0x114/0x198 [ 3748.536424][T18206] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3748.536484][T18206] invoke_syscall+0x6c/0x258 [ 3748.536526][T18206] el0_svc_common.constprop.0+0xac/0x230 [ 3748.536570][T18206] do_el0_svc_compat+0x40/0x68 [ 3748.536649][T18206] el0_svc_compat+0x4c/0x17c [ 3748.536695][T18206] el0t_32_sync_handler+0x98/0x13c [ 3748.536736][T18206] el0t_32_sync+0x19c/0x1a0 [ 3750.407768][T18222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3750.424772][T18222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3750.430189][T18223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3750.433099][T18223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3750.525654][T18222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3750.537674][T18222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3752.022242][T18234] FAULT_INJECTION: forcing a failure. [ 3752.022242][T18234] name failslab, interval 1, probability 0, space 0, times 0 [ 3752.022742][T18234] CPU: 0 UID: 0 PID: 18234 Comm: syz.4.4995 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3752.022801][T18234] Hardware name: linux,dummy-virt (DT) [ 3752.022833][T18234] Call trace: [ 3752.022862][T18234] show_stack+0x18/0x24 (C) [ 3752.022977][T18234] dump_stack_lvl+0xdc/0xf4 [ 3752.023060][T18234] dump_stack+0x1c/0x28 [ 3752.023109][T18234] should_fail_ex+0x5a0/0x6ac [ 3752.023191][T18234] should_failslab+0xbc/0x11c [ 3752.023243][T18234] __kmalloc_noprof+0xd0/0x4d0 [ 3752.023289][T18234] tomoyo_realpath_from_path+0x90/0x534 [ 3752.023373][T18234] tomoyo_path_number_perm+0x200/0x438 [ 3752.023465][T18234] tomoyo_file_ioctl+0x1c/0x28 [ 3752.023568][T18234] security_file_ioctl_compat+0x8c/0x19c [ 3752.023679][T18234] __arm64_compat_sys_ioctl+0x98/0x214 [ 3752.023781][T18234] invoke_syscall+0x6c/0x258 [ 3752.023871][T18234] el0_svc_common.constprop.0+0xac/0x230 [ 3752.023957][T18234] do_el0_svc_compat+0x40/0x68 [ 3752.024045][T18234] el0_svc_compat+0x4c/0x17c [ 3752.024129][T18234] el0t_32_sync_handler+0x98/0x13c [ 3752.024174][T18234] el0t_32_sync+0x19c/0x1a0 [ 3752.024238][T18234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3753.722012][T18245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3753.725893][T18245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3755.765141][T18253] FAULT_INJECTION: forcing a failure. [ 3755.765141][T18253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3755.765701][T18253] CPU: 0 UID: 0 PID: 18253 Comm: syz.5.5003 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3755.765759][T18253] Hardware name: linux,dummy-virt (DT) [ 3755.765790][T18253] Call trace: [ 3755.765873][T18253] show_stack+0x18/0x24 (C) [ 3755.766009][T18253] dump_stack_lvl+0xdc/0xf4 [ 3755.766133][T18253] dump_stack+0x1c/0x28 [ 3755.766228][T18253] should_fail_ex+0x5a0/0x6ac [ 3755.766338][T18253] should_fail+0x14/0x20 [ 3755.766442][T18253] should_fail_usercopy+0x1c/0x28 [ 3755.766553][T18253] simple_read_from_buffer+0x84/0x214 [ 3755.766679][T18253] proc_fail_nth_read+0x160/0x248 [ 3755.766782][T18253] vfs_read+0x18c/0x97c [ 3755.766872][T18253] ksys_read+0xec/0x1d8 [ 3755.766970][T18253] __arm64_sys_read+0x6c/0x9c [ 3755.767034][T18253] invoke_syscall+0x6c/0x258 [ 3755.767126][T18253] el0_svc_common.constprop.0+0xac/0x230 [ 3755.767212][T18253] do_el0_svc_compat+0x40/0x68 [ 3755.767441][T18253] el0_svc_compat+0x4c/0x17c [ 3755.767551][T18253] el0t_32_sync_handler+0x98/0x13c [ 3755.767620][T18253] el0t_32_sync+0x19c/0x1a0 [ 3756.188135][T18259] FAULT_INJECTION: forcing a failure. [ 3756.188135][T18259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3756.197073][T18259] CPU: 1 UID: 0 PID: 18259 Comm: syz.5.5005 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3756.197180][T18259] Hardware name: linux,dummy-virt (DT) [ 3756.197216][T18259] Call trace: [ 3756.197246][T18259] show_stack+0x18/0x24 (C) [ 3756.197331][T18259] dump_stack_lvl+0xdc/0xf4 [ 3756.197385][T18259] dump_stack+0x1c/0x28 [ 3756.197430][T18259] should_fail_ex+0x5a0/0x6ac [ 3756.197493][T18259] should_fail+0x14/0x20 [ 3756.197537][T18259] should_fail_usercopy+0x1c/0x28 [ 3756.197589][T18259] simple_read_from_buffer+0x84/0x214 [ 3756.197641][T18259] proc_fail_nth_read+0x160/0x248 [ 3756.197687][T18259] vfs_read+0x18c/0x97c [ 3756.197736][T18259] ksys_read+0xec/0x1d8 [ 3756.197780][T18259] __arm64_sys_read+0x6c/0x9c [ 3756.197827][T18259] invoke_syscall+0x6c/0x258 [ 3756.197872][T18259] el0_svc_common.constprop.0+0xac/0x230 [ 3756.197921][T18259] do_el0_svc_compat+0x40/0x68 [ 3756.197967][T18259] el0_svc_compat+0x4c/0x17c [ 3756.198013][T18259] el0t_32_sync_handler+0x98/0x13c [ 3756.198057][T18259] el0t_32_sync+0x19c/0x1a0 [ 3756.306728][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 270 seconds [ 3758.138375][T18275] FAULT_INJECTION: forcing a failure. [ 3758.138375][T18275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3758.139085][T18275] CPU: 0 UID: 0 PID: 18275 Comm: syz.4.5009 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3758.139151][T18275] Hardware name: linux,dummy-virt (DT) [ 3758.139185][T18275] Call trace: [ 3758.139212][T18275] show_stack+0x18/0x24 (C) [ 3758.139285][T18275] dump_stack_lvl+0xdc/0xf4 [ 3758.139385][T18275] dump_stack+0x1c/0x28 [ 3758.139599][T18275] should_fail_ex+0x5a0/0x6ac [ 3758.139775][T18275] should_fail+0x14/0x20 [ 3758.139910][T18275] should_fail_usercopy+0x1c/0x28 [ 3758.140130][T18275] _inline_copy_from_user+0x34/0x134 [ 3758.140263][T18275] get_compat_msghdr+0x90/0x118 [ 3758.140313][T18275] ___sys_sendmsg+0x184/0x19c [ 3758.140364][T18275] __sys_sendmsg+0x114/0x198 [ 3758.140407][T18275] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3758.140453][T18275] invoke_syscall+0x6c/0x258 [ 3758.140506][T18275] el0_svc_common.constprop.0+0xac/0x230 [ 3758.140549][T18275] do_el0_svc_compat+0x40/0x68 [ 3758.140590][T18275] el0_svc_compat+0x4c/0x17c [ 3758.140677][T18275] el0t_32_sync_handler+0x98/0x13c [ 3758.140807][T18275] el0t_32_sync+0x19c/0x1a0 [ 3761.216168][T18290] FAULT_INJECTION: forcing a failure. [ 3761.216168][T18290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3761.251063][T18290] CPU: 1 UID: 0 PID: 18290 Comm: syz.4.5013 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3761.251172][T18290] Hardware name: linux,dummy-virt (DT) [ 3761.251209][T18290] Call trace: [ 3761.251238][T18290] show_stack+0x18/0x24 (C) [ 3761.251318][T18290] dump_stack_lvl+0xdc/0xf4 [ 3761.251372][T18290] dump_stack+0x1c/0x28 [ 3761.251419][T18290] should_fail_ex+0x5a0/0x6ac [ 3761.251476][T18290] should_fail+0x14/0x20 [ 3761.251521][T18290] should_fail_usercopy+0x1c/0x28 [ 3761.251567][T18290] _inline_copy_from_user+0x34/0x134 [ 3761.251619][T18290] get_compat_msghdr+0x90/0x118 [ 3761.251665][T18290] ___sys_sendmsg+0x184/0x19c [ 3761.251713][T18290] __sys_sendmsg+0x114/0x198 [ 3761.251757][T18290] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3761.251803][T18290] invoke_syscall+0x6c/0x258 [ 3761.251847][T18290] el0_svc_common.constprop.0+0xac/0x230 [ 3761.251891][T18290] do_el0_svc_compat+0x40/0x68 [ 3761.251934][T18290] el0_svc_compat+0x4c/0x17c [ 3761.251977][T18290] el0t_32_sync_handler+0x98/0x13c [ 3761.252019][T18290] el0t_32_sync+0x19c/0x1a0 [ 3762.355543][T18296] FAULT_INJECTION: forcing a failure. [ 3762.355543][T18296] name failslab, interval 1, probability 0, space 0, times 0 [ 3762.371987][T18296] CPU: 0 UID: 0 PID: 18296 Comm: syz.4.5017 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3762.372113][T18296] Hardware name: linux,dummy-virt (DT) [ 3762.372153][T18296] Call trace: [ 3762.372182][T18296] show_stack+0x18/0x24 (C) [ 3762.372265][T18296] dump_stack_lvl+0xdc/0xf4 [ 3762.372318][T18296] dump_stack+0x1c/0x28 [ 3762.372361][T18296] should_fail_ex+0x5a0/0x6ac [ 3762.372409][T18296] should_failslab+0xbc/0x11c [ 3762.372466][T18296] __kmalloc_noprof+0xd0/0x4d0 [ 3762.372512][T18296] tomoyo_realpath_from_path+0x90/0x534 [ 3762.372564][T18296] tomoyo_path_perm+0x210/0x338 [ 3762.372656][T18296] tomoyo_inode_getattr+0x1c/0x28 [ 3762.372714][T18296] security_inode_getattr+0xc4/0x1cc [ 3762.372763][T18296] vfs_fstat+0x38/0xbc [ 3762.372807][T18296] __do_compat_sys_newfstat+0x94/0xf4 [ 3762.372849][T18296] __arm64_compat_sys_newfstat+0x50/0x70 [ 3762.372895][T18296] invoke_syscall+0x6c/0x258 [ 3762.372938][T18296] el0_svc_common.constprop.0+0xac/0x230 [ 3762.372980][T18296] do_el0_svc_compat+0x40/0x68 [ 3762.373021][T18296] el0_svc_compat+0x4c/0x17c [ 3762.373064][T18296] el0t_32_sync_handler+0x98/0x13c [ 3762.373108][T18296] el0t_32_sync+0x19c/0x1a0 [ 3762.468179][T18296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3767.651386][ T30] audit: type=1400 audit(4793.338:1562): avc: denied { create } for pid=18328 comm="syz.5.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 3770.258421][T18347] FAULT_INJECTION: forcing a failure. [ 3770.258421][T18347] name failslab, interval 1, probability 0, space 0, times 0 [ 3770.265157][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.4.5035 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3770.265293][T18347] Hardware name: linux,dummy-virt (DT) [ 3770.265333][T18347] Call trace: [ 3770.265368][T18347] show_stack+0x18/0x24 (C) [ 3770.265458][T18347] dump_stack_lvl+0xdc/0xf4 [ 3770.265516][T18347] dump_stack+0x1c/0x28 [ 3770.265560][T18347] should_fail_ex+0x5a0/0x6ac [ 3770.265611][T18347] should_failslab+0xbc/0x11c [ 3770.265659][T18347] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3770.265704][T18347] getname_flags.part.0+0x48/0x3d4 [ 3770.265753][T18347] getname_flags+0x78/0xc4 [ 3770.265799][T18347] __arm64_sys_mknodat+0x90/0xdc [ 3770.265842][T18347] invoke_syscall+0x6c/0x258 [ 3770.265885][T18347] el0_svc_common.constprop.0+0xac/0x230 [ 3770.265929][T18347] do_el0_svc_compat+0x40/0x68 [ 3770.265970][T18347] el0_svc_compat+0x4c/0x17c [ 3770.266013][T18347] el0t_32_sync_handler+0x98/0x13c [ 3770.266055][T18347] el0t_32_sync+0x19c/0x1a0 [ 3772.928955][T18360] FAULT_INJECTION: forcing a failure. [ 3772.928955][T18360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3772.931426][T18360] CPU: 0 UID: 0 PID: 18360 Comm: syz.5.5042 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3772.931508][T18360] Hardware name: linux,dummy-virt (DT) [ 3772.931544][T18360] Call trace: [ 3772.931572][T18360] show_stack+0x18/0x24 (C) [ 3772.931649][T18360] dump_stack_lvl+0xdc/0xf4 [ 3772.931702][T18360] dump_stack+0x1c/0x28 [ 3772.931746][T18360] should_fail_ex+0x5a0/0x6ac [ 3772.931795][T18360] should_fail+0x14/0x20 [ 3772.931838][T18360] should_fail_usercopy+0x1c/0x28 [ 3772.931883][T18360] _inline_copy_from_user+0x34/0x134 [ 3772.931938][T18360] get_compat_msghdr+0x90/0x118 [ 3772.931984][T18360] ___sys_sendmsg+0x184/0x19c [ 3772.932031][T18360] __sys_sendmsg+0x114/0x198 [ 3772.932089][T18360] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3772.932139][T18360] invoke_syscall+0x6c/0x258 [ 3772.932182][T18360] el0_svc_common.constprop.0+0xac/0x230 [ 3772.932224][T18360] do_el0_svc_compat+0x40/0x68 [ 3772.932265][T18360] el0_svc_compat+0x4c/0x17c [ 3772.932307][T18360] el0t_32_sync_handler+0x98/0x13c [ 3772.932348][T18360] el0t_32_sync+0x19c/0x1a0 [ 3773.942393][T18367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=18367 comm=syz.5.5044 [ 3775.697032][T18377] FAULT_INJECTION: forcing a failure. [ 3775.697032][T18377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3775.697595][T18377] CPU: 0 UID: 0 PID: 18377 Comm: syz.4.5048 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3775.697652][T18377] Hardware name: linux,dummy-virt (DT) [ 3775.697685][T18377] Call trace: [ 3775.697712][T18377] show_stack+0x18/0x24 (C) [ 3775.697838][T18377] dump_stack_lvl+0xdc/0xf4 [ 3775.697898][T18377] dump_stack+0x1c/0x28 [ 3775.697972][T18377] should_fail_ex+0x5a0/0x6ac [ 3775.698026][T18377] should_fail+0x14/0x20 [ 3775.698069][T18377] should_fail_usercopy+0x1c/0x28 [ 3775.698139][T18377] _inline_copy_from_user+0x34/0x134 [ 3775.698194][T18377] get_compat_msghdr+0x90/0x118 [ 3775.698276][T18377] ___sys_sendmsg+0x184/0x19c [ 3775.698329][T18377] __sys_sendmsg+0x114/0x198 [ 3775.698374][T18377] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3775.698420][T18377] invoke_syscall+0x6c/0x258 [ 3775.698462][T18377] el0_svc_common.constprop.0+0xac/0x230 [ 3775.698522][T18377] do_el0_svc_compat+0x40/0x68 [ 3775.698562][T18377] el0_svc_compat+0x4c/0x17c [ 3775.698605][T18377] el0t_32_sync_handler+0x98/0x13c [ 3775.698645][T18377] el0t_32_sync+0x19c/0x1a0 [ 3777.605816][T18392] fuse: Unknown parameter 'ƒ$.Zd' [ 3778.502381][T18400] FAULT_INJECTION: forcing a failure. [ 3778.502381][T18400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3778.502913][T18400] CPU: 0 UID: 0 PID: 18400 Comm: syz.5.5058 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3778.502970][T18400] Hardware name: linux,dummy-virt (DT) [ 3778.503002][T18400] Call trace: [ 3778.503031][T18400] show_stack+0x18/0x24 (C) [ 3778.503144][T18400] dump_stack_lvl+0xdc/0xf4 [ 3778.503202][T18400] dump_stack+0x1c/0x28 [ 3778.503248][T18400] should_fail_ex+0x5a0/0x6ac [ 3778.503295][T18400] should_fail+0x14/0x20 [ 3778.503338][T18400] should_fail_usercopy+0x1c/0x28 [ 3778.503399][T18400] _inline_copy_from_user+0x34/0x134 [ 3778.503455][T18400] get_compat_msghdr+0x90/0x118 [ 3778.503533][T18400] ___sys_sendmsg+0x184/0x19c [ 3778.503595][T18400] __sys_sendmsg+0x114/0x198 [ 3778.503641][T18400] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3778.503686][T18400] invoke_syscall+0x6c/0x258 [ 3778.503748][T18400] el0_svc_common.constprop.0+0xac/0x230 [ 3778.503821][T18400] do_el0_svc_compat+0x40/0x68 [ 3778.503869][T18400] el0_svc_compat+0x4c/0x17c [ 3778.503912][T18400] el0t_32_sync_handler+0x98/0x13c [ 3778.503979][T18400] el0t_32_sync+0x19c/0x1a0 [ 3779.360904][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.363657][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3779.428096][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.465260][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3779.475692][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.494762][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3779.527835][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.555231][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3779.656118][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.663752][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3779.711662][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3779.714871][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3781.667336][T18416] FAULT_INJECTION: forcing a failure. [ 3781.667336][T18416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3781.673203][T18416] CPU: 0 UID: 0 PID: 18416 Comm: syz.5.5063 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3781.673292][T18416] Hardware name: linux,dummy-virt (DT) [ 3781.673332][T18416] Call trace: [ 3781.673362][T18416] show_stack+0x18/0x24 (C) [ 3781.673439][T18416] dump_stack_lvl+0xdc/0xf4 [ 3781.673494][T18416] dump_stack+0x1c/0x28 [ 3781.673539][T18416] should_fail_ex+0x5a0/0x6ac [ 3781.673587][T18416] should_fail+0x14/0x20 [ 3781.673630][T18416] should_fail_usercopy+0x1c/0x28 [ 3781.673674][T18416] simple_read_from_buffer+0x84/0x214 [ 3781.673738][T18416] proc_fail_nth_read+0x160/0x248 [ 3781.673782][T18416] vfs_read+0x18c/0x97c [ 3781.673829][T18416] ksys_read+0xec/0x1d8 [ 3781.673871][T18416] __arm64_sys_read+0x6c/0x9c [ 3781.673914][T18416] invoke_syscall+0x6c/0x258 [ 3781.673957][T18416] el0_svc_common.constprop.0+0xac/0x230 [ 3781.674001][T18416] do_el0_svc_compat+0x40/0x68 [ 3781.674041][T18416] el0_svc_compat+0x4c/0x17c [ 3781.674084][T18416] el0t_32_sync_handler+0x98/0x13c [ 3781.674126][T18416] el0t_32_sync+0x19c/0x1a0 [ 3782.575277][T18420] FAULT_INJECTION: forcing a failure. [ 3782.575277][T18420] name failslab, interval 1, probability 0, space 0, times 0 [ 3782.575951][T18420] CPU: 1 UID: 0 PID: 18420 Comm: syz.5.5065 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3782.576018][T18420] Hardware name: linux,dummy-virt (DT) [ 3782.576054][T18420] Call trace: [ 3782.576084][T18420] show_stack+0x18/0x24 (C) [ 3782.576160][T18420] dump_stack_lvl+0xdc/0xf4 [ 3782.576263][T18420] dump_stack+0x1c/0x28 [ 3782.576328][T18420] should_fail_ex+0x5a0/0x6ac [ 3782.576413][T18420] should_failslab+0xbc/0x11c [ 3782.576491][T18420] kmem_cache_alloc_node_noprof+0x7c/0x3b8 [ 3782.576661][T18420] __alloc_skb+0x208/0x2f0 [ 3782.576786][T18420] netlink_alloc_large_skb+0xac/0xd8 [ 3782.576938][T18420] netlink_sendmsg+0x4ac/0xa54 [ 3782.577115][T18420] __sock_sendmsg+0xc8/0x168 [ 3782.577261][T18420] ____sys_sendmsg+0x504/0x768 [ 3782.577399][T18420] ___sys_sendmsg+0x11c/0x19c [ 3782.577500][T18420] __sys_sendmsg+0x114/0x198 [ 3782.577552][T18420] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 3782.577605][T18420] invoke_syscall+0x6c/0x258 [ 3782.577651][T18420] el0_svc_common.constprop.0+0xac/0x230 [ 3782.577696][T18420] do_el0_svc_compat+0x40/0x68 [ 3782.577749][T18420] el0_svc_compat+0x4c/0x17c [ 3782.577796][T18420] el0t_32_sync_handler+0x98/0x13c [ 3782.577842][T18420] el0t_32_sync+0x19c/0x1a0 [ 3784.046355][T18431] FAULT_INJECTION: forcing a failure. [ 3784.046355][T18431] name failslab, interval 1, probability 0, space 0, times 0 [ 3784.046880][T18431] CPU: 1 UID: 0 PID: 18431 Comm: syz.5.5070 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3784.046936][T18431] Hardware name: linux,dummy-virt (DT) [ 3784.046969][T18431] Call trace: [ 3784.046998][T18431] show_stack+0x18/0x24 (C) [ 3784.047074][T18431] dump_stack_lvl+0xdc/0xf4 [ 3784.047127][T18431] dump_stack+0x1c/0x28 [ 3784.047170][T18431] should_fail_ex+0x5a0/0x6ac [ 3784.047217][T18431] should_failslab+0xbc/0x11c [ 3784.047269][T18431] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3784.047368][T18431] getname_flags.part.0+0x48/0x3d4 [ 3784.047431][T18431] getname_flags+0x78/0xc4 [ 3784.047488][T18431] __arm64_sys_mknod+0x74/0xb8 [ 3784.047576][T18431] invoke_syscall+0x6c/0x258 [ 3784.047632][T18431] el0_svc_common.constprop.0+0xac/0x230 [ 3784.047674][T18431] do_el0_svc_compat+0x40/0x68 [ 3784.047714][T18431] el0_svc_compat+0x4c/0x17c [ 3784.047758][T18431] el0t_32_sync_handler+0x98/0x13c [ 3784.047800][T18431] el0t_32_sync+0x19c/0x1a0 [ 3786.023325][T18438] FAULT_INJECTION: forcing a failure. [ 3786.023325][T18438] name failslab, interval 1, probability 0, space 0, times 0 [ 3786.035760][T18438] CPU: 0 UID: 0 PID: 18438 Comm: syz.4.5073 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3786.035876][T18438] Hardware name: linux,dummy-virt (DT) [ 3786.035912][T18438] Call trace: [ 3786.035940][T18438] show_stack+0x18/0x24 (C) [ 3786.036018][T18438] dump_stack_lvl+0xdc/0xf4 [ 3786.036070][T18438] dump_stack+0x1c/0x28 [ 3786.036115][T18438] should_fail_ex+0x5a0/0x6ac [ 3786.036163][T18438] should_failslab+0xbc/0x11c [ 3786.036211][T18438] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3786.036259][T18438] getname_flags.part.0+0x48/0x3d4 [ 3786.036307][T18438] getname_flags+0x78/0xc4 [ 3786.036355][T18438] user_path_at+0x2c/0x70 [ 3786.036394][T18438] do_utimes+0xc0/0x18c [ 3786.036450][T18438] __arm64_sys_utimensat_time32+0x128/0x1bc [ 3786.036497][T18438] invoke_syscall+0x6c/0x258 [ 3786.036540][T18438] el0_svc_common.constprop.0+0xac/0x230 [ 3786.036581][T18438] do_el0_svc_compat+0x40/0x68 [ 3786.036662][T18438] el0_svc_compat+0x4c/0x17c [ 3786.036706][T18438] el0t_32_sync_handler+0x98/0x13c [ 3786.036750][T18438] el0t_32_sync+0x19c/0x1a0 [ 3786.377501][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 300 seconds [ 3787.298051][T18444] FAULT_INJECTION: forcing a failure. [ 3787.298051][T18444] name failslab, interval 1, probability 0, space 0, times 0 [ 3787.298766][T18444] CPU: 1 UID: 0 PID: 18444 Comm: syz.4.5076 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3787.298826][T18444] Hardware name: linux,dummy-virt (DT) [ 3787.298860][T18444] Call trace: [ 3787.298889][T18444] show_stack+0x18/0x24 (C) [ 3787.299013][T18444] dump_stack_lvl+0xdc/0xf4 [ 3787.299125][T18444] dump_stack+0x1c/0x28 [ 3787.299237][T18444] should_fail_ex+0x5a0/0x6ac [ 3787.299342][T18444] should_failslab+0xbc/0x11c [ 3787.299473][T18444] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3787.299588][T18444] getname_flags.part.0+0x48/0x3d4 [ 3787.299670][T18444] __arm64_sys_rmdir+0x8c/0xfc [ 3787.299720][T18444] invoke_syscall+0x6c/0x258 [ 3787.299766][T18444] el0_svc_common.constprop.0+0xac/0x230 [ 3787.299811][T18444] do_el0_svc_compat+0x40/0x68 [ 3787.299856][T18444] el0_svc_compat+0x4c/0x17c [ 3787.299901][T18444] el0t_32_sync_handler+0x98/0x13c [ 3787.299943][T18444] el0t_32_sync+0x19c/0x1a0 [ 3788.549210][T18451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.573265][T18451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3798.117382][ T30] audit: type=1400 audit(4823.808:1563): avc: denied { append } for pid=18496 comm="syz.5.5098" name="rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3805.844028][T18534] FAULT_INJECTION: forcing a failure. [ 3805.844028][T18534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3805.844742][T18534] CPU: 1 UID: 0 PID: 18534 Comm: syz.5.5115 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3805.844817][T18534] Hardware name: linux,dummy-virt (DT) [ 3805.844854][T18534] Call trace: [ 3805.844883][T18534] show_stack+0x18/0x24 (C) [ 3805.844958][T18534] dump_stack_lvl+0xdc/0xf4 [ 3805.845010][T18534] dump_stack+0x1c/0x28 [ 3805.845055][T18534] should_fail_ex+0x5a0/0x6ac [ 3805.845103][T18534] should_fail+0x14/0x20 [ 3805.845147][T18534] should_fail_usercopy+0x1c/0x28 [ 3805.845192][T18534] strncpy_from_user+0x34/0x2d8 [ 3805.845243][T18534] path_getxattrat+0xe8/0x204 [ 3805.845293][T18534] __arm64_sys_lgetxattr+0x8c/0xdc [ 3805.845338][T18534] invoke_syscall+0x6c/0x258 [ 3805.845383][T18534] el0_svc_common.constprop.0+0xac/0x230 [ 3805.845426][T18534] do_el0_svc_compat+0x40/0x68 [ 3805.845531][T18534] el0_svc_compat+0x4c/0x17c [ 3805.845604][T18534] el0t_32_sync_handler+0x98/0x13c [ 3805.845700][T18534] el0t_32_sync+0x19c/0x1a0 [ 3808.038518][T18548] FAULT_INJECTION: forcing a failure. [ 3808.038518][T18548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3808.039082][T18548] CPU: 0 UID: 0 PID: 18548 Comm: syz.5.5122 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3808.039151][T18548] Hardware name: linux,dummy-virt (DT) [ 3808.039207][T18548] Call trace: [ 3808.039244][T18548] show_stack+0x18/0x24 (C) [ 3808.039319][T18548] dump_stack_lvl+0xdc/0xf4 [ 3808.039372][T18548] dump_stack+0x1c/0x28 [ 3808.039476][T18548] should_fail_ex+0x5a0/0x6ac [ 3808.039528][T18548] should_fail+0x14/0x20 [ 3808.039574][T18548] should_fail_usercopy+0x1c/0x28 [ 3808.039618][T18548] simple_read_from_buffer+0x84/0x214 [ 3808.039667][T18548] proc_fail_nth_read+0x160/0x248 [ 3808.039712][T18548] vfs_read+0x18c/0x97c [ 3808.039760][T18548] ksys_read+0xec/0x1d8 [ 3808.039836][T18548] __arm64_sys_read+0x6c/0x9c [ 3808.039885][T18548] invoke_syscall+0x6c/0x258 [ 3808.039929][T18548] el0_svc_common.constprop.0+0xac/0x230 [ 3808.039971][T18548] do_el0_svc_compat+0x40/0x68 [ 3808.040013][T18548] el0_svc_compat+0x4c/0x17c [ 3808.040057][T18548] el0t_32_sync_handler+0x98/0x13c [ 3808.040099][T18548] el0t_32_sync+0x19c/0x1a0 [ 3812.833852][T18570] FAULT_INJECTION: forcing a failure. [ 3812.833852][T18570] name failslab, interval 1, probability 0, space 0, times 0 [ 3812.834514][T18570] CPU: 1 UID: 0 PID: 18570 Comm: syz.5.5132 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3812.834584][T18570] Hardware name: linux,dummy-virt (DT) [ 3812.834619][T18570] Call trace: [ 3812.834649][T18570] show_stack+0x18/0x24 (C) [ 3812.834722][T18570] dump_stack_lvl+0xdc/0xf4 [ 3812.834776][T18570] dump_stack+0x1c/0x28 [ 3812.834820][T18570] should_fail_ex+0x5a0/0x6ac [ 3812.834870][T18570] should_failslab+0xbc/0x11c [ 3812.834919][T18570] kmem_cache_alloc_noprof+0x74/0x3b8 [ 3812.834965][T18570] getname_flags.part.0+0x48/0x3d4 [ 3812.835018][T18570] getname_flags+0x78/0xc4 [ 3812.835118][T18570] __arm64_sys_mknodat+0x90/0xdc [ 3812.835168][T18570] invoke_syscall+0x6c/0x258 [ 3812.835212][T18570] el0_svc_common.constprop.0+0xac/0x230 [ 3812.835256][T18570] do_el0_svc_compat+0x40/0x68 [ 3812.835297][T18570] el0_svc_compat+0x4c/0x17c [ 3812.835341][T18570] el0t_32_sync_handler+0x98/0x13c [ 3812.835383][T18570] el0t_32_sync+0x19c/0x1a0 [ 3815.671496][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5136'. [ 3816.474484][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 330 seconds [ 3817.184178][T18590] lo speed is unknown, defaulting to 1000 [ 3818.492285][T18597] netlink: 'syz.4.5143': attribute type 11 has an invalid length. [ 3818.494366][T18597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5143'. [ 3819.816211][T17174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.209310][T17174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.511407][T17174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.798842][T17174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3825.483580][T17174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3825.580506][T17174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3825.632327][T17174] bond0 (unregistering): Released all slaves [ 3826.284942][T17174] hsr_slave_0: left promiscuous mode [ 3826.320495][T17174] hsr_slave_1: left promiscuous mode [ 3826.421950][T17174] veth1_macvtap: left promiscuous mode [ 3826.423531][T17174] veth0_macvtap: left promiscuous mode [ 3826.425276][T17174] veth1_vlan: left promiscuous mode [ 3826.426631][T17174] veth0_vlan: left promiscuous mode [ 3834.707564][T18600] lo speed is unknown, defaulting to 1000 [ 3840.435760][T18600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3840.536581][T18600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3844.914574][T18600] hsr_slave_0: entered promiscuous mode [ 3844.918259][T18600] hsr_slave_1: entered promiscuous mode [ 3844.962895][T18600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3844.987283][T18600] Cannot create hsr debugfs directory [ 3846.547768][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 360 seconds [ 3847.124183][T18600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3847.185462][T18600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3847.223356][T18600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3847.256932][T18600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3849.907122][T18600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3861.349116][T18600] veth0_vlan: entered promiscuous mode [ 3861.494746][T18600] veth1_vlan: entered promiscuous mode [ 3861.829945][T18600] veth0_macvtap: entered promiscuous mode [ 3861.878248][T18600] veth1_macvtap: entered promiscuous mode [ 3862.283412][T18600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.283941][T18600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.302825][T18600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.303417][T18600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3867.261869][T18773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3867.286074][T18773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3876.622316][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 390 seconds [ 3900.716692][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3900.724895][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3901.402206][ T30] audit: type=1326 audit(4933.098:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3901.402790][ T30] audit: type=1326 audit(4933.098:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3901.408880][ T30] audit: type=1326 audit(4933.098:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3901.424696][ T30] audit: type=1326 audit(4933.118:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=305 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3901.431422][ T30] audit: type=1326 audit(4933.118:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3901.435937][ T30] audit: type=1326 audit(4933.128:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3901.445056][ T30] audit: type=1326 audit(4933.128:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.6.5182" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3902.907542][T18840] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5186'. [ 3906.692085][ T56] block nbd3: Possible stuck request 0000000088ea8161: control (read@0,4096B). Runtime 420 seconds [ 3912.493268][ T30] audit: type=1326 audit(4944.178:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3912.495062][ T30] audit: type=1326 audit(4944.188:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3912.496652][ T30] audit: type=1326 audit(4944.188:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3912.505784][ T30] audit: type=1326 audit(4944.198:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3912.507558][ T30] audit: type=1326 audit(4944.198:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=357 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3912.509042][ T30] audit: type=1326 audit(4944.198:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3912.513567][ T30] audit: type=1326 audit(4944.198:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3912.515122][ T30] audit: type=1326 audit(4944.198:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3912.516725][ T30] audit: type=1326 audit(4944.198:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x1258d4 code=0x7ffc0000 [ 3912.518826][ T30] audit: type=1326 audit(4944.198:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.6.5196" exe="/syz-executor" sig=0 arch=40000028 syscall=441 compat=1 ip=0x131f30 code=0x7ffc0000 [ 3918.221441][ T32] INFO: task syz.3.4522:16502 blocked for more than 430 seconds. [ 3918.221914][ T32] Not tainted 6.15.0-rc7-syzkaller #0 [ 3918.222271][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3918.222710][ T32] task:syz.3.4522 state:D stack:0 pid:16502 tgid:16501 ppid:16028 task_flags:0x400140 flags:0x0040000d [ 3918.223356][ T32] Call trace: [ 3918.223588][ T32] __switch_to+0x204/0x4bc (T) [ 3918.223841][ T32] __schedule+0xd34/0x3188 [ 3918.224038][ T32] schedule+0xd0/0x344 [ 3918.224234][ T32] schedule_preempt_disabled+0x18/0x2c [ 3918.224437][ T32] __mutex_lock+0x5d8/0x9d8 [ 3918.224663][ T32] mutex_lock_nested+0x24/0x30 [ 3918.224866][ T32] bdev_release+0x104/0x510 [ 3918.225069][ T32] blkdev_release+0x14/0x24 [ 3918.225266][ T32] __fput+0x2c8/0x954 [ 3918.225470][ T32] ____fput+0x14/0x20 [ 3918.225664][ T32] task_work_run+0x128/0x210 [ 3918.225861][ T32] get_signal+0x174/0x1ba8 [ 3918.226056][ T32] do_signal+0x1f4/0x620 [ 3918.226251][ T32] do_notify_resume+0x18c/0x258 [ 3918.226454][ T32] el0_svc_compat+0xfc/0x17c [ 3918.226649][ T32] el0t_32_sync_handler+0x98/0x13c [ 3918.226839][ T32] el0t_32_sync+0x19c/0x1a0 [ 3918.227194][ T32] [ 3918.227194][ T32] Showing all locks held in the system: [ 3918.227528][ T32] 1 lock held by khungtaskd/32: [ 3918.227744][ T32] #0: ffff8000872bd920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 3918.229214][ T32] 1 lock held by syslogd/3108: [ 3918.229418][ T32] #0: ffff00006a0d4fd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x318/0x3188 [ 3918.244363][ T32] 2 locks held by getty/3248: [ 3918.245126][ T32] #0: ffff0000168030a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 3918.247742][ T32] #1: ffff80008d54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0xdb4 [ 3918.251048][ T32] 3 locks held by sshd-session/3302: [ 3918.251820][ T32] 1 lock held by syz-executor/3303: [ 3918.256062][ T32] 1 lock held by udevd/16495: [ 3918.256879][ T32] #0: ffff000014928358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 3918.261356][ T32] 1 lock held by syz.3.4522/16502: [ 3918.262123][ T32] #0: ffff000014928358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x104/0x510 [ 3918.270277][ T32] 1 lock held by udevd/18616: [ 3918.271328][ T32] [ 3918.271972][ T32] ============================================= [ 3918.271972][ T32] [ 3918.276908][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3918.277509][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT [ 3918.277792][ T32] Hardware name: linux,dummy-virt (DT) [ 3918.277972][ T32] Call trace: [ 3918.278103][ T32] show_stack+0x18/0x24 (C) [ 3918.278291][ T32] dump_stack_lvl+0x38/0xf4 [ 3918.278473][ T32] dump_stack+0x1c/0x28 [ 3918.278634][ T32] panic+0x5b0/0x664 [ 3918.278789][ T32] watchdog+0x4d8/0xdf8 [ 3918.278957][ T32] kthread+0x348/0x5fc [ 3918.279116][ T32] ret_from_fork+0x10/0x20 [ 3918.279809][ T32] SMP: stopping secondary CPUs [ 3918.281247][ T32] Kernel Offset: disabled [ 3918.281509][ T32] CPU features: 0x0410,00040068,01000400,0200421b [ 3918.281823][ T32] Memory Limit: none [ 3918.282794][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:58:07 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b68e38 X00=0000000000000002 X01=0000000000000000 X02=0000000000000002 X03=dfff800000000000 X04=0000000000000018 X05=ffff80008d9479e0 X06=ffff700011b28f3c X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b28f3c X11=1ffff00011b28f3c X12=ffff700011b28f3d X13=0000000000008000 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff00000f56b080 X20=ffff80008d43b018 X21=ffff800087a92720 X22=0000000000000033 X23=dfff800000000000 X24=ffff00000e88c00a X25=0000000000000001 X26=0000000000000f01 X27=1fffe00001ead65a X28=ffff00000f56b2d0 X29=ffff80008d947990 X30=ffff800081b690c4 SP=ffff80008d947990 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=7269762f73656369:7665642f7379732f Q01=34706f6f6c2f6b63:6f6c622f6c617574 Q02=2f6c617574726976:2f73656369766564 Q03=302f716d2f34706f:6f6c2f6b636f6c62 Q04=3303330333033303:3303330333033303 Q05=bcbcbc00bcc03003:bcbcbc00bcc03003 Q06=0000000000000073:0000aaaad68253e0 Q07=0000000000000074:0000aaaad6822620 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe4ebf920:0000ffffe4ebf920 Q17=ffffff80ffffffd0:0000ffffe4ebf8f0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080340468 X00=0000000000000000 X01=0000000000000003 X02=0000000000000000 X03=1fffe00002a6c3c9 X04=0000000000000001 X05=0000000000000040 X06=ffff000015361e40 X07=0000000041b58ab3 X08=0000000000000003 X09=dfff800000000000 X10=ffff800084ab58c4 X11=ffff80008001159c X12=ffff800084b46e74 X13=ffff80008444230c X14=ffff80008444230c X15=ffff8000844423e8 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff000015361e40 X20=ffff000015361e40 X21=ffff00001f4e6200 X22=ffff800085800a40 X23=ffff800085463964 X24=ffff000068fb4ca0 X25=ffff000068b93000 X26=ffff80008d348780 X27=00000000163421ca X28=0000000000000011 X29=ffff8000a1a17aa0 X30=ffff80008090cae0 SP=ffff8000a1a17af0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=5baa33882831615e:64e1f6d246d58924 Q19=cca06fae4526e72b:05a23081a607bb05 Q20=b8031404000bb403:2004000bb0030000 Q21=0e04000bc0030004:000bbc030004000b Q22=cc031404000bc803:07ffe404000bc403 Q23=fffffffffffffff3:080bd0030204000b Q24=e4031804000be003:006574756f7201ff Q25=0404000bec031004:000be8030404000b Q26=8198037808000388:0303d208000bf003 Q27=000381a803000800:0381a00302080003 Q28=cc363700f1953fc7:7f4416c4902744ef Q29=764110be9ade10ae:a56d1d5290f72845 Q30=87fd830e8c658ee9:6fa9d82325104cd9 Q31=0fc5f2ce46b5f09e:842f79222a9b8532