last executing test programs: 47.701057997s ago: executing program 0 (id=2375): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x4}, 0x18) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) recvmmsg$unix(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0, 0x0) close(r8) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r9, 0x790, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x49b, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, r9, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6603715e4f52562da29be1b3f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c03372fae95a6dd7a8cac22f5a"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "5f0cf9cd2ce05e"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x24992b75, 0x48}}}}}, 0x20}}, 0x20000000) sendmmsg$inet(r3, &(0x7f0000008f00), 0x0, 0x2008000) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 1.672206628s ago: executing program 0 (id=2413): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) lstat64(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) close(r0) 1.460276368s ago: executing program 0 (id=2427): r0 = openat$zero(0xffffff9c, 0x0, 0x2000, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "1a5037a4cfe4cd02eb149373e376ca2a5698be5cf29470adcf33ce58df15809b97a881a2dad66e87ff4b0549bf1b3e7c12556f8ef4e3de2c3e92edf3ab03cf72d8a730de83df9a595219"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) 1.282659531s ago: executing program 0 (id=2428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x9, 0xaa76, 0x8, 0x0, 0x401, 0x3}) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x10, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2274d334201fb8a81272fb87dc69368b1d73a2e034ca1636d0278bed5e0235d82b2a08d8abc9670bc536a2a12dc795b63b6efdefef64c10399d63bafe1b8aedf41713d515b059124f90303e1ebfa4952038b873c1b5d92bb0ccde1811133f0620873cd1891c51140affcd58acb0232ef58351fee53cc76f597be83530ed05f2217114a001c2b30086982d84bcc7e5bca9284c925d12c38759edd126ae8ae6f6aa6a7ced65fdd71a3a698d9568d1dfdc8d8281132396a", 0xb6}], 0x1, 0x8, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.091726067s ago: executing program 0 (id=2429): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 962.008961ms ago: executing program 0 (id=2430): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0xffffffffffffff70) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)) accept4(r0, 0x0, 0x0, 0x0) 678.564983ms ago: executing program 1 (id=2432): r0 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 559.982836ms ago: executing program 1 (id=2433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x9, 0xaa76, 0x8, 0x0, 0x401, 0x3}) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x10, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2274d334201fb8a81272fb87dc69368b1d73a2e034ca1636d0278bed5e0235d82b2a08d8abc9670bc536a2a12dc795b63b6efdefef64c10399d63bafe1b8aedf41713d515b059124f90303e1ebfa4952038b873c1b5d92bb0ccde1811133f0620873cd1891c51140affcd58acb0232ef58351fee53cc76f597be83530ed05f2217114a001c2b30086982d84bcc7e5bca9284c925d12c38759edd126ae8ae6f6aa6a7ced65fdd71a3a698d9568d1dfdc8d8281132396a", 0xb6}], 0x1, 0x8, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 428.59203ms ago: executing program 1 (id=2434): r0 = openat$zero(0xffffff9c, 0x0, 0x2000, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "1a5037a4cfe4cd02eb149373e376ca2a5698be5cf29470adcf33ce58df15809b97a881a2dad66e87ff4b0549bf1b3e7c12556f8ef4e3de2c3e92edf3ab03cf72d8a730de83df9a595219"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x24008000) 286.147647ms ago: executing program 1 (id=2435): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 142.969583ms ago: executing program 1 (id=2436): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@delqdisc={0x90, 0x25, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x8}}, [@q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 0s ago: executing program 1 (id=2437): r0 = fsmount(0xffffffffffffffff, 0x1, 0x79) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x48c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_BEACON_HEAD={0x46a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_a, @random="d7e358d5e508", {0x7, 0xd5c}}, 0x4, @default, 0x10, @void, @void, @void, @void, @val={0x6, 0x2, 0x7}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x7, 0x0, {0x7fff, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x6, 0x5}}, @void, @void, @val={0x76, 0x6, {0x40, 0x6, 0x3, 0xfffc}}, [{0xdd, 0xc9, "95fae88083c7d1a0ebb255625d79de925407d0f63aa68394a7dfc94beda5e2d22689268d811c88bde3dd241bf380a1f1649a2003538b58aea5e5573055909ad0d68c3bd83a158cf395a8937446b6ce3e3dadd7fc2acc485e12f9a99127ba489e2df17426a1fec6431b111b80f5ac7841c2d54c715cd1b5752832f1ab532ec64037d711a6546abf61181ace52f4599fa6f2f8510c31595f7b2b99ba04d3a5f7d89ca11d177e8f0a85834b7366a175829c4eb7222ca4e479ef2c1487aeccdbd61d05244eeb7d975201d2"}, {0xdd, 0x18, "dae25ff636630ae9adb6cde3b6e8813094eab2f69e6b232a"}, {0xdd, 0x83, "8baf61cb40e1b0098b0f280e64f48f5fab926195fc313c28afbda1e0ed973deca6a0015ff5a0ef7965db87bf720d6328017b3570161c4bebf88713b60f557a886ed9d9fa103415a889d5f28823bbed0213a7033dfb6c9ae298b441a04f5cd054aebb502543900d1f59d7173f03cb100143aeed0a6df15e53f05bf3c69f231b14331aa9"}, {0xdd, 0xed, "6d9e852483969e3bb634543e12f1d9f1ae4b348482bb6a1c9120a9f731cb6d0da5dd209399054188ec8d67497e5cb9afb8842f9b93d08d577c7f471ffef4be59bc198937f273c4ad555d292e4c01ac95f4925a7fa68c0834e98b0aed4fcaa326972879054fbd0cb54b6da6353956d5f5f8d4796fbae7284458e2e9eed6074c133cb484fd83de84a3a54116065b7a16b08ac2a3cea463bf7ea2f72d40a4d7d57c449907d70bf7133d208f1f1406fc1ec58a1bc2709929405cf932e039fbcb644501a0b4468f57885dd28ab8dc1ff56d978e4dee43f47dddabbe019e8b056c59c33d1c6fbadeffe395ba2ca38b97"}, {0xdd, 0x9, "bef0b554c098c3ca9d"}, {0xdd, 0xf8, "034f67e6cff1a8f82ce90146a7afbc13e4f48102e040c50e4a1017bbc4731732632de45a929fafcfa4850ff6753fc68f4e6121fda776b3accf71405615df2210dcf2a36f7df7c1dd728ffb5a9fda9240c9901c78a15a477aac1914c37498783b4accf7580e35552fcb18e9dae95eb33ddffa1dd2edd85f5016f6117675ad85c1048b4b2e959ec671c1c61881a4d40d83a8dadaf10a1551251b9b5d14ae2ac5627ac21c8b3326105bf1d008a4f7912341c853a4b052619f2c26f675ab8f22624bf964d701258152257b83d7f729dce8c8bb2c5f4ef7f73e1f69ba821bdb5d3a19a860d71ea1195d165158726c0a69930021029e95ebedda11"}, {0xdd, 0x3a, "218260cda4ea8c2d1bce23cc3d1332a526f29e2b22661a6bb2d2c878bbae3b3f7cce1689950df42997aa6a15b7966ecb04bdd71b1a6f5e9a7e3c"}, {0xdd, 0x51, "6ff4e2e04b23fa16b491f12f1d004dcbebd23d5057588d101a49e401c36e53b5a412b3166fd3f43bd5268e8916277fca104b54cbf7c8d78b2c23bea6a442bad7eb36347afa9355e4084c07c3af0e6bf855"}, {0xdd, 0x2b, "03dcf6041dbd3b03b2c5395a424f1d9500ebf40c776633970b934c4398e049b272d85911632758101e8da5"}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x140a, 0x20, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) kernel console output (not intermixed with test programs): 0x4c/0x344) [ 2072.576639][T14822] [<804cc63c>] (__kmalloc_cache_noprof) from [<8166ffd8>] (tcp_sendmsg_fastopen+0x94/0x188) [ 2072.577146][T14822] r10:20008000 r9:e07c1f38 r8:00000000 r7:e07c1d04 r6:00000000 r5:e07c1f38 [ 2072.577520][T14822] r4:83d32100 [ 2072.577780][T14822] [<8166ff44>] (tcp_sendmsg_fastopen) from [<81670994>] (tcp_sendmsg_locked+0x8c8/0xd34) [ 2072.578563][T14822] r8:83d32100 r7:20008000 r6:00000000 r5:e07c1f38 r4:00000000 [ 2072.579064][T14822] [<816700cc>] (tcp_sendmsg_locked) from [<81670e30>] (tcp_sendmsg+0x30/0x44) [ 2072.579563][T14822] r10:20008000 r9:e07c1dd4 r8:e07c1dd4 r7:00000000 r6:00000000 r5:e07c1f38 [ 2072.579940][T14822] r4:83d32100 [ 2072.580148][T14822] [<81670e00>] (tcp_sendmsg) from [<8174ba18>] (inet6_sendmsg+0x40/0x4c) [ 2072.580574][T14822] r7:00000000 r6:83d32100 r5:00000000 r4:e07c1f38 [ 2072.580891][T14822] [<8174b9d8>] (inet6_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2072.581323][T14822] r7:00000000 r6:84962780 r5:e07c1f38 r4:00000000 [ 2072.581660][T14822] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2072.582110][T14822] r7:00000000 r6:00000000 r5:84962780 r4:e07c1f38 [ 2072.582419][T14822] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2072.582881][T14822] r10:e07c1e34 r9:20000140 r8:20008000 r7:00000000 r6:84962780 r5:e07c1f38 [ 2072.583258][T14822] r4:00000000 [ 2072.583471][T14822] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2072.583913][T14822] r10:00000128 r9:83fa5400 r8:8020029c r7:20008000 r6:20000140 r5:84962780 [ 2072.584301][T14822] r4:00000000 [ 2072.584504][T14822] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2072.584952][T14822] Exception stack(0xe07c1fa8 to 0xe07c1ff0) [ 2072.585259][T14822] 1fa0: 00000000 00000000 00000004 20000140 20008000 00000000 [ 2072.585697][T14822] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bd50bc [ 2072.586095][T14822] 1fe0: 76bd4ec0 76bd4eb0 00018af8 00132ec0 [ 2072.586399][T14822] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2084.344646][T14832] serio: Serial port pts0 [ 2086.289238][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 2086.502143][T14848] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1124 sclass=netlink_xfrm_socket pid=14848 comm=syz.0.1658 [ 2089.536710][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 2089.753286][T14865] FAULT_INJECTION: forcing a failure. [ 2089.753286][T14865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.754033][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.0.1663 Not tainted 6.12.0-rc3-syzkaller #0 [ 2089.754389][T14865] Hardware name: ARM-Versatile Express [ 2089.754615][T14865] Call trace: [ 2089.754834][T14865] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2089.755246][T14865] r7:00000000 r6:00000000 r5:60000013 r4:8203d3f8 [ 2089.755508][T14865] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2089.755879][T14865] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2089.756241][T14865] r5:00000000 r4:8274e844 [ 2089.756451][T14865] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2089.756848][T14865] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2089.757213][T14865] r6:00000000 r5:e88f5f68 r4:00000002 [ 2089.757446][T14865] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2089.757879][T14865] [<808e551c>] (should_fail_usercopy) from [<8054e734>] (simple_read_from_buffer+0x8c/0x134) [ 2089.758594][T14865] [<8054e6a8>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 2089.759090][T14865] r10:00000001 r9:805c317c r8:00000002 r7:e88f5f68 r6:0000000f r5:76bd4f30 [ 2089.759436][T14865] r4:85258000 r3:e88f5e9f [ 2089.759644][T14865] [<805c317c>] (proc_fail_nth_read) from [<80515e94>] (vfs_read+0x98/0x324) [ 2089.760054][T14865] r8:76bd4f30 r7:e88f5f68 r6:85258000 r5:0000000f r4:85127540 [ 2089.760352][T14865] [<80515dfc>] (vfs_read) from [<80516b44>] (ksys_read+0x78/0xf8) [ 2089.760725][T14865] r10:00000003 r9:85258000 r8:8020029c r7:00000000 r6:00000000 r5:85127540 [ 2089.761076][T14865] r4:85127543 [ 2089.761254][T14865] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2089.761691][T14865] r7:00000003 r6:00000005 r5:76bd4f30 r4:0000000f [ 2089.761955][T14865] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2089.762326][T14865] Exception stack(0xe88f5fa8 to 0xe88f5ff0) [ 2089.762595][T14865] 5fa0: 0000000f 76bd4f30 00000005 76bd4f30 0000000f 00000000 [ 2089.762968][T14865] 5fc0: 0000000f 76bd4f30 00000005 00000003 00000000 00006364 003d0f00 76bd50bc [ 2089.763327][T14865] 5fe0: 00000158 76bd4ed0 000d8408 00130d94 [ 2090.401439][T14867] serio: Serial port pts0 [ 2114.171784][T14897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=14897 comm=syz.0.1674 [ 2139.050225][T14942] FAULT_INJECTION: forcing a failure. [ 2139.050225][T14942] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.052200][T14942] CPU: 1 UID: 0 PID: 14942 Comm: syz.0.1691 Not tainted 6.12.0-rc3-syzkaller #0 [ 2139.052643][T14942] Hardware name: ARM-Versatile Express [ 2139.052924][T14942] Call trace: [ 2139.053182][T14942] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2139.053699][T14942] r7:00000d40 r6:851279e8 r5:60000013 r4:8203d3f8 [ 2139.054008][T14942] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2139.054421][T14942] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2139.054841][T14942] r5:00000000 r4:8271925c [ 2139.055078][T14942] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2139.055491][T14942] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2139.055920][T14942] r6:851279e8 r5:0000001c r4:82c01240 [ 2139.056181][T14942] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2139.056637][T14942] [<804cd5c4>] (__kmalloc_noprof) from [<80750f18>] (tomoyo_encode2+0x64/0xf0) [ 2139.057080][T14942] r10:00000fff r9:82c9e800 r8:00000000 r7:83005cc0 r6:851279e8 r5:856d3ffc [ 2139.057449][T14942] r4:856d3feb [ 2139.057677][T14942] [<80750eb4>] (tomoyo_encode2) from [<80750fc8>] (tomoyo_encode+0x24/0x30) [ 2139.058529][T14942] r9:82c9e800 r8:00000000 r7:83005cc0 r6:851279e8 r5:00001000 r4:856d3fec [ 2139.059197][T14942] [<80750fa4>] (tomoyo_encode) from [<80751054>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2139.059722][T14942] r5:00001000 r4:856d3000 [ 2139.059985][T14942] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2139.060540][T14942] r10:83494800 r9:00000000 r8:00000003 r7:00005451 r6:00000004 r5:81ad1828 [ 2139.060970][T14942] r4:851279e8 r3:824ba340 [ 2139.061227][T14942] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2139.061764][T14942] r9:851279c0 r8:00000003 r7:00000000 r6:00000000 r5:00005451 r4:851279c0 [ 2139.062169][T14942] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2139.062703][T14942] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2139.063171][T14942] r7:00000000 r6:851279c1 r5:00000000 r4:00005451 [ 2139.063513][T14942] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2139.063964][T14942] Exception stack(0xeb1b1fa8 to 0xeb1b1ff0) [ 2139.064261][T14942] 1fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 2139.064703][T14942] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bd50bc [ 2139.065144][T14942] 1fe0: 76bd4ec0 76bd4eb0 00018af8 00132ec0 [ 2139.065463][T14942] r10:00000036 r9:83494800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2139.065901][T14942] r4:00000000 [ 2139.108830][T14942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2139.570235][ T31] audit: type=1400 audit(2395.463:389): avc: denied { write } for pid=14945 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2140.499793][T14955] serio: Serial port pts0 [ 2146.341623][T15004] FAULT_INJECTION: forcing a failure. [ 2146.341623][T15004] name failslab, interval 1, probability 0, space 0, times 0 [ 2146.342284][T15004] CPU: 1 UID: 0 PID: 15004 Comm: syz.0.1712 Not tainted 6.12.0-rc3-syzkaller #0 [ 2146.342641][T15004] Hardware name: ARM-Versatile Express [ 2146.342852][T15004] Call trace: [ 2146.343047][T15004] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2146.343425][T15004] r7:82e43000 r6:00000cc0 r5:60000013 r4:8203d3f8 [ 2146.343674][T15004] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2146.344006][T15004] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2146.344324][T15004] r5:00000000 r4:8271925c [ 2146.344494][T15004] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2146.344836][T15004] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2146.345171][T15004] r6:00000cc0 r5:82f90000 r4:82ea1300 [ 2146.345376][T15004] [<804e81d4>] (should_failslab) from [<804ccfa8>] (kmem_cache_alloc_lru_noprof+0x50/0x338) [ 2146.345789][T15004] [<804ccf58>] (kmem_cache_alloc_lru_noprof) from [<81483104>] (sock_alloc_inode+0x24/0x74) [ 2146.346145][T15004] r10:00000119 r9:84face00 r8:8020029c r7:00000000 r6:81c4a240 r5:82f90000 [ 2146.346423][T15004] r4:0000000a [ 2146.346588][T15004] [<814830e0>] (sock_alloc_inode) from [<8053a2bc>] (alloc_inode+0x24/0xcc) [ 2146.346927][T15004] r5:82f90000 r4:0000000a [ 2146.347099][T15004] [<8053a298>] (alloc_inode) from [<8053c190>] (new_inode_pseudo+0x10/0x14) [ 2146.347414][T15004] r7:00000000 r6:00000000 r5:00000003 r4:0000000a [ 2146.347649][T15004] [<8053c180>] (new_inode_pseudo) from [<81482664>] (sock_alloc+0x20/0x70) [ 2146.347964][T15004] [<81482644>] (sock_alloc) from [<81482bac>] (__sock_create+0x80/0x1dc) [ 2146.348596][T15004] r5:00000003 r4:0000000a [ 2146.348856][T15004] [<81482b2c>] (__sock_create) from [<81485390>] (__sys_socket+0x94/0x10c) [ 2146.349329][T15004] r10:00000119 r9:82e43000 r8:8020029c r7:00000119 r6:82e43000 r5:0000000a [ 2146.349694][T15004] r4:00000003 [ 2146.349847][T15004] [<814852fc>] (__sys_socket) from [<81485418>] (sys_socket+0x10/0x14) [ 2146.350257][T15004] r6:00130e70 r5:00000000 r4:00000000 [ 2146.350478][T15004] [<81485408>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2146.350838][T15004] Exception stack(0xeb411fa8 to 0xeb411ff0) [ 2146.351083][T15004] 1fa0: 00000000 00000000 0000000a 00000003 00000000 00000000 [ 2146.351431][T15004] 1fc0: 00000000 00000000 00130e70 00000119 00000000 00006364 003d0f00 76bd50bc [ 2146.351801][T15004] 1fe0: 76bd4ec0 76bd4eb0 00018af8 00132ec0 [ 2146.548783][T15004] socket: no more sockets [ 2147.167322][ T31] audit: type=1400 audit(2403.053:390): avc: denied { map } for pid=15009 comm="syz.0.1716" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2147.199300][ T31] audit: type=1400 audit(2403.083:391): avc: denied { read write } for pid=15009 comm="syz.0.1716" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2148.302551][T15017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15017 comm=syz.1.1718 [ 2148.303340][T15017] FAULT_INJECTION: forcing a failure. [ 2148.303340][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.303903][T15017] CPU: 1 UID: 0 PID: 15017 Comm: syz.1.1718 Not tainted 6.12.0-rc3-syzkaller #0 [ 2148.304309][T15017] Hardware name: ARM-Versatile Express [ 2148.304575][T15017] Call trace: [ 2148.304830][T15017] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2148.305275][T15017] r7:82e44800 r6:00000820 r5:60000013 r4:8203d3f8 [ 2148.305551][T15017] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2148.305901][T15017] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2148.306255][T15017] r5:00000000 r4:8271925c [ 2148.306479][T15017] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2148.306884][T15017] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2148.307289][T15017] r6:00000820 r5:8512a600 r4:82ea1000 [ 2148.307552][T15017] [<804e81d4>] (should_failslab) from [<804cd2dc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2148.307989][T15017] [<804cd290>] (kmem_cache_alloc_noprof) from [<81497984>] (skb_clone+0x60/0x1c8) [ 2148.308824][T15017] r10:00000000 r9:000001a2 r8:85094c40 r7:85638000 r6:8512a600 r5:8512a600 [ 2148.309386][T15017] r4:00000820 [ 2148.309651][T15017] [<81497924>] (skb_clone) from [<815a3abc>] (__netlink_deliver_tap+0x1e8/0x24c) [ 2148.310251][T15017] r5:84556680 r4:84556000 [ 2148.310473][T15017] [<815a38d4>] (__netlink_deliver_tap) from [<815a6bb4>] (netlink_unicast+0x280/0x29c) [ 2148.311029][T15017] r10:00000000 r9:00000000 r8:84fae800 r7:8512a600 r6:85094c40 r5:00000014 [ 2148.311481][T15017] r4:85638000 [ 2148.311714][T15017] [<815a6934>] (netlink_unicast) from [<815a6dac>] (netlink_sendmsg+0x1dc/0x43c) [ 2148.312199][T15017] r9:00000000 r8:00000000 r7:85770000 r6:00000014 r5:8512a600 r4:eb4cdf38 [ 2148.312599][T15017] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2148.313059][T15017] r10:00000800 r9:eb4cddd4 r8:eb4cddd4 r7:00000000 r6:84964780 r5:eb4cdf38 [ 2148.313444][T15017] r4:00000000 [ 2148.313701][T15017] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2148.314178][T15017] r7:00000000 r6:00000000 r5:84964780 r4:eb4cdf38 [ 2148.314510][T15017] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2148.316217][T15017] r10:eb4cde34 r9:200000c0 r8:00000800 r7:00000000 r6:84964780 r5:eb4cdf38 [ 2148.316586][T15017] r4:00000000 [ 2148.316812][T15017] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2148.317256][T15017] r10:00000128 r9:82e44800 r8:8020029c r7:00000800 r6:200000c0 r5:84964780 [ 2148.317696][T15017] r4:00000000 [ 2148.317898][T15017] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2148.318905][T15017] Exception stack(0xeb4cdfa8 to 0xeb4cdff0) [ 2148.319238][T15017] dfa0: 00000000 00000000 00000003 200000c0 00000800 00000000 [ 2148.319637][T15017] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bb60bc [ 2148.320055][T15017] dfe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2148.320353][T15017] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2155.390709][T15048] FAULT_INJECTION: forcing a failure. [ 2155.390709][T15048] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.391579][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.0.1729 Not tainted 6.12.0-rc3-syzkaller #0 [ 2155.392000][T15048] Hardware name: ARM-Versatile Express [ 2155.395626][T15048] Call trace: [ 2155.398588][T15048] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2155.403661][T15048] r7:82e5a400 r6:00400dc0 r5:60000013 r4:8203d3f8 [ 2155.408877][T15048] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2155.411641][T15048] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2155.418798][T15048] r5:00000000 r4:8271925c [ 2155.419242][T15048] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2155.428335][T15048] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2155.433727][T15048] r6:00400dc0 r5:828cbc6c r4:82c02000 [ 2155.434155][T15048] [<804e81d4>] (should_failslab) from [<804cc688>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2155.434664][T15048] [<804cc63c>] (__kmalloc_cache_noprof) from [<806d0180>] (fuse_alloc_inode+0xa0/0xc8) [ 2155.435179][T15048] r10:eb621c8c r9:eb621cb8 r8:806cf124 r7:806cf154 r6:00000000 r5:828cbc6c [ 2155.435579][T15048] r4:8494b900 [ 2155.435790][T15048] [<806d00e0>] (fuse_alloc_inode) from [<8053a2bc>] (alloc_inode+0x24/0xcc) [ 2155.436356][T15048] r7:806cf154 r6:81ac9bf0 r5:85771000 r4:00000000 [ 2155.436534][T15048] [<8053a298>] (alloc_inode) from [<8053b84c>] (iget5_locked+0x44/0x84) [ 2155.436782][T15048] r7:806cf154 r6:00000404 r5:85771000 r4:00000000 [ 2155.436962][T15048] [<8053b808>] (iget5_locked) from [<806d1ab0>] (fuse_iget+0x60/0x254) [ 2155.437198][T15048] r8:00000000 r7:eb621b80 r6:806cf154 r5:806cf124 r4:85771000 [ 2155.437375][T15048] [<806d1a50>] (fuse_iget) from [<806c691c>] (fuse_lookup_name+0x148/0x260) [ 2155.438597][T15048] r10:eb621c8c r9:857269c0 r8:00000404 r7:00001000 r6:00000000 r5:85771000 [ 2155.438967][T15048] r4:eb621c90 [ 2155.439233][T15048] [<806c67d4>] (fuse_lookup_name) from [<806c6ab4>] (fuse_lookup+0x80/0x160) [ 2155.440337][T15048] r10:82ed901d r9:82ed901e r8:00000000 r7:00000000 r6:849874c8 r5:8494b680 [ 2155.441751][T15048] r4:849874c8 [ 2155.443981][T15048] [<806c6a34>] (fuse_lookup) from [<805251dc>] (__lookup_slow+0x8c/0x134) [ 2155.448202][T15048] r8:8494b680 r7:00000011 r6:eb621e60 r5:8337c4c8 r4:849874c8 [ 2155.448873][T15048] [<80525150>] (__lookup_slow) from [<805292bc>] (walk_component+0x104/0x170) [ 2155.449161][T15048] r8:00000011 r7:00000002 r6:eb621e58 r5:8494b700 r4:8337c4c8 [ 2155.449426][T15048] [<805291b8>] (walk_component) from [<80529564>] (link_path_walk.part.0.constprop.0+0x23c/0x3c0) [ 2155.449897][T15048] r9:82ed901e r8:80808080 r7:2f2f2f2f r6:d0d0d0d0 r5:eb621e58 r4:fefefeff [ 2155.450136][T15048] [<80529328>] (link_path_walk.part.0.constprop.0) from [<8052aad0>] (path_openat+0x98/0x11a4) [ 2155.450426][T15048] r10:00000008 r9:85127d80 r8:eb621e58 r7:eb621e58 r6:eb621f20 r5:82ed9010 [ 2155.450612][T15048] r4:82ed9000 [ 2155.450712][T15048] [<8052aa38>] (path_openat) from [<8052bc78>] (do_filp_open+0x9c/0x138) [ 2155.450979][T15048] r10:00000008 r9:82e5a400 r8:00000001 r7:eb621e58 r6:eb621f20 r5:82e5a400 [ 2155.451175][T15048] r4:82ed9000 [ 2155.451280][T15048] [<8052bbdc>] (do_filp_open) from [<80512f30>] (do_sys_openat2+0xbc/0xe4) [ 2155.451529][T15048] r8:8020029c r7:ffffff9c r6:00000005 r5:eb621f58 r4:82ed9000 [ 2155.451717][T15048] [<80512e74>] (do_sys_openat2) from [<8051352c>] (sys_creat+0x6c/0x90) [ 2155.451963][T15048] r7:00000008 r6:00130e70 r5:00000000 r4:200001c0 [ 2155.452133][T15048] [<805134c0>] (sys_creat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2155.452376][T15048] Exception stack(0xeb621fa8 to 0xeb621ff0) [ 2155.452539][T15048] 1fa0: 00000000 00000000 200001c0 00000000 00000000 00000000 [ 2155.452771][T15048] 1fc0: 00000000 00000000 00130e70 00000008 00000000 00006364 003d0f00 76b930bc [ 2155.452992][T15048] 1fe0: 76b92ec0 76b92eb0 00018af8 00132ec0 [ 2155.453148][T15048] r4:00000000 [ 2160.221675][ T31] audit: type=1400 audit(2416.113:392): avc: denied { mount } for pid=15072 comm="syz.0.1739" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2162.975034][T15095] FAULT_INJECTION: forcing a failure. [ 2162.975034][T15095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2162.975829][T15095] CPU: 1 UID: 0 PID: 15095 Comm: syz.0.1745 Not tainted 6.12.0-rc3-syzkaller #0 [ 2162.976219][T15095] Hardware name: ARM-Versatile Express [ 2162.976494][T15095] Call trace: [ 2162.976748][T15095] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2162.977203][T15095] r7:00000000 r6:00000000 r5:60000013 r4:8203d3f8 [ 2162.977479][T15095] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2162.977936][T15095] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2162.978962][T15095] r5:00000000 r4:8274e844 [ 2162.979315][T15095] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2162.979777][T15095] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2162.980226][T15095] r6:00000000 r5:eb7b1f68 r4:00000002 [ 2162.980514][T15095] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2162.981022][T15095] [<808e551c>] (should_fail_usercopy) from [<8054e734>] (simple_read_from_buffer+0x8c/0x134) [ 2162.981574][T15095] [<8054e6a8>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 2162.982104][T15095] r10:00000001 r9:805c317c r8:00000002 r7:eb7b1f68 r6:0000000f r5:76bd4f30 [ 2162.982497][T15095] r4:83491800 r3:eb7b1e9f [ 2162.982754][T15095] [<805c317c>] (proc_fail_nth_read) from [<80515e94>] (vfs_read+0x98/0x324) [ 2162.983241][T15095] r8:76bd4f30 r7:eb7b1f68 r6:83491800 r5:0000000f r4:8500a0c0 [ 2162.983593][T15095] [<80515dfc>] (vfs_read) from [<80516b44>] (ksys_read+0x78/0xf8) [ 2162.984099][T15095] r10:00000003 r9:83491800 r8:8020029c r7:00000000 r6:00000000 r5:8500a0c0 [ 2162.984522][T15095] r4:8500a0c3 [ 2162.984728][T15095] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2162.985136][T15095] r7:00000003 r6:00000004 r5:76bd4f30 r4:0000000f [ 2162.985436][T15095] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2162.985975][T15095] Exception stack(0xeb7b1fa8 to 0xeb7b1ff0) [ 2162.986311][T15095] 1fa0: 0000000f 76bd4f30 00000004 76bd4f30 0000000f 00000000 [ 2162.986746][T15095] 1fc0: 0000000f 76bd4f30 00000004 00000003 00000000 00006364 003d0f00 76bd50bc [ 2162.987162][T15095] 1fe0: 00000158 76bd4ed0 000d8408 00130d94 [ 2167.991144][T15121] FAULT_INJECTION: forcing a failure. [ 2167.991144][T15121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2167.991903][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.0.1753 Not tainted 6.12.0-rc3-syzkaller #0 [ 2167.992248][T15121] Hardware name: ARM-Versatile Express [ 2167.992460][T15121] Call trace: [ 2167.992660][T15121] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2167.993042][T15121] r7:20000080 r6:0000001c r5:60000013 r4:8203d3f8 [ 2167.993277][T15121] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2167.993664][T15121] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2167.993999][T15121] r5:00000000 r4:8274e844 [ 2167.994169][T15121] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2167.994506][T15121] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2167.994812][T15121] r6:0000001c r5:eb8a9ef4 r4:0000001c [ 2167.995012][T15121] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2167.995332][T15121] [<808e551c>] (should_fail_usercopy) from [<81484af0>] (move_addr_to_kernel+0x3c/0xe4) [ 2167.995684][T15121] [<81484ab4>] (move_addr_to_kernel) from [<81485d54>] (__sys_connect+0x58/0xc4) [ 2167.996052][T15121] r9:83493c00 r8:8020029c r7:0000011b r6:0000001c r5:8500a481 r4:20000080 [ 2167.996347][T15121] [<81485cfc>] (__sys_connect) from [<81485dd0>] (sys_connect+0x10/0x14) [ 2167.996654][T15121] r6:00130e70 r5:00000000 r4:00000000 [ 2167.996842][T15121] [<81485dc0>] (sys_connect) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2167.997159][T15121] Exception stack(0xeb8a9fa8 to 0xeb8a9ff0) [ 2167.997386][T15121] 9fa0: 00000000 00000000 00000003 20000080 0000001c 00000000 [ 2167.998250][T15121] 9fc0: 00000000 00000000 00130e70 0000011b 00000000 00006364 003d0f00 76bd50bc [ 2167.999229][T15121] 9fe0: 76bd4ec0 76bd4eb0 00018af8 00132ec0 [ 2170.172134][ T31] audit: type=1400 audit(2426.063:393): avc: denied { ioctl } for pid=15129 comm="syz.1.1756" path="socket:[26005]" dev="sockfs" ino=26005 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2170.881814][T15134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15134 comm=syz.0.1759 [ 2174.917046][T15145] serio: Serial port pts0 [ 2183.342118][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 2185.370755][T15176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15176 comm=syz.1.1777 [ 2185.371525][T15176] FAULT_INJECTION: forcing a failure. [ 2185.371525][T15176] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.372058][T15176] CPU: 1 UID: 0 PID: 15176 Comm: syz.1.1777 Not tainted 6.12.0-rc3-syzkaller #0 [ 2185.372428][T15176] Hardware name: ARM-Versatile Express [ 2185.372679][T15176] Call trace: [ 2185.372926][T15176] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2185.373357][T15176] r7:83493000 r6:00000820 r5:60000013 r4:8203d3f8 [ 2185.373679][T15176] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2185.374067][T15176] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2185.374445][T15176] r5:00000000 r4:8271925c [ 2185.374663][T15176] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2185.375052][T15176] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2185.375442][T15176] r6:00000820 r5:8527f300 r4:82ea1000 [ 2185.375668][T15176] [<804e81d4>] (should_failslab) from [<804cd2dc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2185.376140][T15176] [<804cd290>] (kmem_cache_alloc_noprof) from [<81497984>] (skb_clone+0x60/0x1c8) [ 2185.376537][T15176] r10:00000000 r9:000001a2 r8:85094c40 r7:85638000 r6:8527f300 r5:8527f300 [ 2185.376886][T15176] r4:00000820 [ 2185.377076][T15176] [<81497924>] (skb_clone) from [<815a3abc>] (__netlink_deliver_tap+0x1e8/0x24c) [ 2185.377472][T15176] r5:84556680 r4:84556000 [ 2185.377715][T15176] [<815a38d4>] (__netlink_deliver_tap) from [<815a6bb4>] (netlink_unicast+0x280/0x29c) [ 2185.378449][T15176] r10:00000000 r9:00000000 r8:84fae800 r7:8527f300 r6:85094c40 r5:00000014 [ 2185.379044][T15176] r4:85638000 [ 2185.379292][T15176] [<815a6934>] (netlink_unicast) from [<815a6dac>] (netlink_sendmsg+0x1dc/0x43c) [ 2185.379731][T15176] r9:00000000 r8:00000000 r7:8548cc00 r6:00000014 r5:8527f300 r4:ec48df38 [ 2185.380109][T15176] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2185.380566][T15176] r10:00000080 r9:ec48ddd4 r8:ec48ddd4 r7:00000000 r6:83392a00 r5:ec48df38 [ 2185.380966][T15176] r4:00000000 [ 2185.381168][T15176] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2185.381660][T15176] r7:00000000 r6:00000000 r5:83392a00 r4:ec48df38 [ 2185.381965][T15176] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2185.382379][T15176] r10:ec48de34 r9:20000500 r8:00000080 r7:00000000 r6:83392a00 r5:ec48df38 [ 2185.382694][T15176] r4:00000000 [ 2185.382881][T15176] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2185.383252][T15176] r10:00000128 r9:83493000 r8:8020029c r7:00000080 r6:20000500 r5:83392a00 [ 2185.383571][T15176] r4:00000000 [ 2185.383764][T15176] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2185.384131][T15176] Exception stack(0xec48dfa8 to 0xec48dff0) [ 2185.384398][T15176] dfa0: 00000000 00000000 00000003 20000500 00000080 00000000 [ 2185.384744][T15176] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bb60bc [ 2185.385089][T15176] dfe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2185.385348][T15176] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2186.572741][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 2189.652296][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 2191.251665][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 2193.650661][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 2195.572998][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 2196.823137][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 2200.194191][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 2202.580322][T15278] nbd0: detected capacity change from 0 to 22 [ 2204.889680][ T55] block nbd0: Receive control failed (result -104) [ 2211.280152][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 2234.040502][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 30 seconds [ 2237.099741][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.128081][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2239.190906][T15304] hsr_slave_0: entered promiscuous mode [ 2239.200321][T15304] hsr_slave_1: entered promiscuous mode [ 2239.752659][T15304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.836614][T15304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.923186][T15304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.010917][T15304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.193062][T15304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2240.220131][T15304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2240.236332][T15304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2240.270855][T15304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2241.434354][T15304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2241.623184][T15633] FAULT_INJECTION: forcing a failure. [ 2241.623184][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.623827][T15633] CPU: 1 UID: 0 PID: 15633 Comm: syz.1.1832 Not tainted 6.12.0-rc3-syzkaller #0 [ 2241.624143][T15633] Hardware name: ARM-Versatile Express [ 2241.624343][T15633] Call trace: [ 2241.624527][T15633] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2241.624897][T15633] r7:82e36000 r6:00000cc0 r5:60000013 r4:8203d3f8 [ 2241.625120][T15633] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2241.625433][T15633] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2241.625786][T15633] r5:00000000 r4:8271925c [ 2241.625957][T15633] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2241.626268][T15633] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2241.626586][T15633] r6:00000cc0 r5:20000040 r4:82ca8b40 [ 2241.626796][T15633] [<804e81d4>] (should_failslab) from [<804cd2dc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2241.627168][T15633] [<804cd290>] (kmem_cache_alloc_noprof) from [<80524fec>] (getname_flags.part.0+0x28/0x18c) [ 2241.627551][T15633] r10:00000142 r9:82e36000 r8:8020029c r7:00000000 r6:8223783c r5:20000040 [ 2241.629666][T15633] r4:20000040 [ 2241.629859][T15633] [<80524fc4>] (getname_flags.part.0) from [<8052a1e8>] (getname+0x38/0x4c) [ 2241.630389][T15633] r9:82e36000 r8:8020029c r7:ffffff9c r6:00000000 r5:dfaedf58 r4:20000040 [ 2241.630700][T15633] [<8052a1b0>] (getname) from [<80512ef4>] (do_sys_openat2+0x80/0xe4) [ 2241.631040][T15633] r5:dfaedf58 r4:20000040 [ 2241.631219][T15633] [<80512e74>] (do_sys_openat2) from [<80513338>] (sys_openat+0x98/0xd4) [ 2241.631577][T15633] r7:00000142 r6:00130e70 r5:20000040 r4:ffffff9c [ 2241.631830][T15633] [<805132a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2241.632154][T15633] Exception stack(0xdfaedfa8 to 0xdfaedff0) [ 2241.632413][T15633] dfa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 2241.632737][T15633] dfc0: 00000000 00000000 00130e70 00000142 00000000 00006364 003d0f00 76bb60bc [ 2241.633066][T15633] dfe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2241.633302][T15633] r5:00000000 r4:00000000 [ 2246.523081][T15304] veth0_vlan: entered promiscuous mode [ 2246.561455][T15304] veth1_vlan: entered promiscuous mode [ 2246.692618][T15304] veth0_macvtap: entered promiscuous mode [ 2246.731046][T15304] veth1_macvtap: entered promiscuous mode [ 2246.819764][T15304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.820212][T15304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.820542][T15304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.820851][T15304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.957677][ T31] audit: type=1400 audit(2503.843:394): avc: denied { mount } for pid=15304 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2247.959103][ T31] audit: type=1400 audit(2503.843:395): avc: denied { mounton } for pid=15304 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2248.142491][ T31] audit: type=1400 audit(2504.033:396): avc: denied { connect } for pid=15663 comm="syz.0.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2248.156119][ T31] audit: type=1400 audit(2504.043:397): avc: denied { accept } for pid=15663 comm="syz.0.1829" lport=45817 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2248.170014][ T31] audit: type=1400 audit(2504.053:398): avc: denied { getopt } for pid=15663 comm="syz.0.1829" lport=45817 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2250.375493][ T31] audit: type=1400 audit(2506.263:399): avc: denied { write } for pid=15677 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2251.068823][ T7714] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2251.218984][ T7714] usb 1-1: device descriptor read/64, error -71 [ 2251.478931][ T7714] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2251.610040][ T7714] usb 1-1: device descriptor read/64, error -71 [ 2251.720009][ T7714] usb usb1-port1: attempt power cycle [ 2252.071244][ T7714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2252.093958][ T7714] usb 1-1: device descriptor read/8, error -71 [ 2252.339723][ T7714] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2252.365802][ T7714] usb 1-1: device descriptor read/8, error -71 [ 2252.469890][ T7714] usb usb1-port1: unable to enumerate USB device [ 2254.920436][T15699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1540 sclass=netlink_audit_socket pid=15699 comm=syz.1.1845 [ 2264.652670][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 60 seconds [ 2280.519192][T15773] syz.0.1869(15773): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2286.937104][T15795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15795 comm=syz.0.1876 [ 2287.341957][ T31] audit: type=1400 audit(2543.233:400): avc: denied { bind } for pid=15798 comm="syz.0.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2287.342865][ T31] audit: type=1400 audit(2543.233:401): avc: denied { name_bind } for pid=15798 comm="syz.0.1878" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2287.366616][ T31] audit: type=1400 audit(2543.253:402): avc: denied { name_connect } for pid=15798 comm="syz.0.1878" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2290.802824][T15823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=15823 comm=syz.0.1888 [ 2291.299505][T15215] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2291.469239][T15215] usb 1-1: Using ep0 maxpacket: 8 [ 2291.556854][T15215] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2291.557510][T15215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.557960][T15215] usb 1-1: Product: syz [ 2291.562323][T15215] usb 1-1: Manufacturer: syz [ 2291.562702][T15215] usb 1-1: SerialNumber: syz [ 2291.576660][T15215] usb 1-1: config 0 descriptor?? [ 2291.868939][T15823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15823 comm=syz.0.1888 [ 2291.925067][T15215] usb 1-1: USB disconnect, device number 38 [ 2292.209087][ T31] audit: type=1400 audit(2548.083:403): avc: denied { nlmsg_read } for pid=15837 comm="syz.0.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2295.341149][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 90 seconds [ 2300.469050][T15215] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2300.652564][T15215] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2300.653241][T15215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2300.653729][T15215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2300.654166][T15215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2300.654708][T15215] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2300.655081][T15215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.661932][T15215] usb 1-1: config 0 descriptor?? [ 2300.672984][T15884] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2301.157165][T15215] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 2301.189426][T15215] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2301.460946][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2301.471388][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2303.031580][T15909] FAULT_INJECTION: forcing a failure. [ 2303.031580][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.032253][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.0.1914 Not tainted 6.12.0-rc3-syzkaller #0 [ 2303.032607][T15909] Hardware name: ARM-Versatile Express [ 2303.032828][T15909] Call trace: [ 2303.033035][T15909] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2303.033432][T15909] r7:8502a400 r6:00400cc0 r5:60000013 r4:8203d3f8 [ 2303.033704][T15909] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2303.034049][T15909] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2303.034387][T15909] r5:00000000 r4:8271925c [ 2303.034564][T15909] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2303.034900][T15909] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2303.035236][T15909] r6:00400cc0 r5:ffffffff r4:82ea1000 [ 2303.035419][T15909] [<804e81d4>] (should_failslab) from [<804ccc70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2303.035800][T15909] [<804ccc20>] (kmem_cache_alloc_node_noprof) from [<814912f8>] (__alloc_skb+0x138/0x160) [ 2303.036256][T15909] r10:eb089d2c r9:00000000 r8:00400cc0 r7:00000000 r6:82ea1000 r5:ffffffff [ 2303.036552][T15909] r4:82606000 [ 2303.036718][T15909] [<814911c0>] (__alloc_skb) from [<814994cc>] (alloc_skb_with_frags+0x44/0x1ec) [ 2303.037073][T15909] r8:802a6e50 r7:eb089ccc r6:00000000 r5:00001000 r4:00000003 [ 2303.037304][T15909] [<81499488>] (alloc_skb_with_frags) from [<8148abcc>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2303.037690][T15909] r10:eb089d2c r9:00000000 r8:802a6e50 r7:eb089ccc r6:8502a400 r5:00000000 [ 2303.037969][T15909] r4:844d3600 [ 2303.038299][T15909] [<8148a9d8>] (sock_alloc_send_pskb) from [<8174854c>] (unix_dgram_sendmsg+0x154/0x8b8) [ 2303.038841][T15909] r10:00000000 r9:844d3600 r8:8502a400 r7:00000000 r6:00000000 r5:84944500 [ 2303.039202][T15909] r4:eb089f38 [ 2303.039372][T15909] [<817483f8>] (unix_dgram_sendmsg) from [<81748cf4>] (unix_seqpacket_sendmsg+0x44/0x84) [ 2303.039781][T15909] r10:04000040 r9:eb089dd4 r8:eb089dd4 r7:00000000 r6:84944500 r5:eb089f38 [ 2303.040085][T15909] r4:00000000 [ 2303.040227][T15909] [<81748cb0>] (unix_seqpacket_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2303.040617][T15909] r5:eb089f38 r4:00000000 [ 2303.040800][T15909] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2303.041172][T15909] r7:00000000 r6:00000000 r5:84944500 r4:eb089f38 [ 2303.041421][T15909] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2303.041826][T15909] r10:eb089e34 r9:20000440 r8:04000040 r7:00000000 r6:84944500 r5:eb089f38 [ 2303.042143][T15909] r4:00000000 [ 2303.042322][T15909] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2303.042696][T15909] r10:00000128 r9:8502a400 r8:8020029c r7:04000040 r6:20000440 r5:84944500 [ 2303.043012][T15909] r4:00000000 [ 2303.043196][T15909] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2303.043571][T15909] Exception stack(0xeb089fa8 to 0xeb089ff0) [ 2303.043842][T15909] 9fa0: 00000000 00000000 00000000 20000440 04000040 00000000 [ 2303.044173][T15909] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b630bc [ 2303.044507][T15909] 9fe0: 76b62ec0 76b62eb0 00018af8 00132ec0 [ 2303.044768][T15909] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2303.241217][T15215] usb 1-1: USB disconnect, device number 39 [ 2304.194057][T15924] FAULT_INJECTION: forcing a failure. [ 2304.194057][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.194734][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.0.1918 Not tainted 6.12.0-rc3-syzkaller #0 [ 2304.195019][T15924] Hardware name: ARM-Versatile Express [ 2304.195199][T15924] Call trace: [ 2304.195364][T15924] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2304.195946][T15924] r7:20000040 r6:20000000 r5:60000013 r4:8203d3f8 [ 2304.196192][T15924] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2304.196521][T15924] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2304.196857][T15924] r5:00000000 r4:8274e844 [ 2304.197027][T15924] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2304.197423][T15924] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2304.197925][T15924] r6:20000000 r5:20000000 r4:83880f00 [ 2304.198252][T15924] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2304.199038][T15924] [<808e551c>] (should_fail_usercopy) from [<818666a4>] (sctp_getsockopt_context+0x40/0x194) [ 2304.199449][T15924] [<81866664>] (sctp_getsockopt_context) from [<8186f000>] (sctp_getsockopt+0x13a0/0x1c90) [ 2304.199856][T15924] r8:20000040 r7:00000008 r6:20000000 r5:00000011 r4:83880f00 [ 2304.200134][T15924] [<8186dc60>] (sctp_getsockopt) from [<8148786c>] (sock_common_getsockopt+0x28/0x30) [ 2304.200533][T15924] r10:00000127 r9:20000040 r8:00000000 r7:84945680 r6:00000011 r5:00000084 [ 2304.200853][T15924] r4:8186dc60 [ 2304.201013][T15924] [<81487844>] (sock_common_getsockopt) from [<8148465c>] (do_sock_getsockopt+0x10c/0x298) [ 2304.201406][T15924] r4:81487844 [ 2304.201600][T15924] [<81484550>] (do_sock_getsockopt) from [<814865e8>] (sys_getsockopt+0x90/0xd4) [ 2304.201993][T15924] r9:83dd9800 r8:84945680 r7:20000000 r6:00000011 r5:00000084 r4:00000000 [ 2304.202311][T15924] [<81486558>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2304.202637][T15924] Exception stack(0xecc71fa8 to 0xecc71ff0) [ 2304.202866][T15924] 1fa0: 20000040 00000000 00000003 00000084 00000011 20000000 [ 2304.203156][T15924] 1fc0: 20000040 00000000 00130e70 00000127 00000000 00006364 003d0f00 76b630bc [ 2304.203542][T15924] 1fe0: 76b62ec0 76b62eb0 00018af8 00132ec0 [ 2304.203919][T15924] r8:8020029c r7:00000127 r6:00130e70 r5:00000000 r4:20000040 [ 2308.754834][T15937] FAULT_INJECTION: forcing a failure. [ 2308.754834][T15937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.755379][T15937] CPU: 1 UID: 0 PID: 15937 Comm: syz.1.1923 Not tainted 6.12.0-rc3-syzkaller #0 [ 2308.755607][T15937] Hardware name: ARM-Versatile Express [ 2308.755740][T15937] Call trace: [ 2308.755878][T15937] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2308.756307][T15937] r7:eb0a5eb8 r6:00000000 r5:60000013 r4:8203d3f8 [ 2308.756597][T15937] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2308.757012][T15937] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2308.757385][T15937] r5:00000000 r4:8274e844 [ 2308.757632][T15937] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2308.758039][T15937] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2308.758953][T15937] r6:00000000 r5:00000001 r4:00000001 [ 2308.759100][T15937] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2308.759499][T15937] [<808e551c>] (should_fail_usercopy) from [<80842e9c>] (kstrtouint_from_user+0x60/0x128) [ 2308.759839][T15937] [<80842e3c>] (kstrtouint_from_user) from [<805c4740>] (proc_fail_nth_write+0x40/0xe8) [ 2308.760250][T15937] r8:eb0a5f68 r7:82e36000 r6:00000001 r5:8500af00 r4:00000001 [ 2308.760645][T15937] [<805c4700>] (proc_fail_nth_write) from [<8051672c>] (vfs_write+0xac/0x44c) [ 2308.761079][T15937] r5:8500af00 r4:805c4700 [ 2308.761321][T15937] [<80516680>] (vfs_write) from [<80516c50>] (ksys_write+0x78/0xf8) [ 2308.761812][T15937] r10:00000004 r9:82e36000 r8:8020029c r7:00000000 r6:00000002 r5:8500af00 [ 2308.762173][T15937] r4:8500af03 [ 2308.762383][T15937] [<80516bd8>] (ksys_write) from [<80516ce0>] (sys_write+0x10/0x14) [ 2308.762820][T15937] r7:00000004 r6:00000004 r5:76bb5f30 r4:00000001 [ 2308.763137][T15937] [<80516cd0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2308.763603][T15937] Exception stack(0xeb0a5fa8 to 0xeb0a5ff0) [ 2308.763915][T15937] 5fa0: 00000001 76bb5f30 00000004 76bb5f30 00000001 00000000 [ 2308.764129][T15937] 5fc0: 00000001 76bb5f30 00000004 00000004 00000000 00006364 003d0f00 76bb60bc [ 2308.764407][T15937] 5fe0: 00000158 76bb5ed0 000d8408 00130e5c [ 2325.307219][T15994] misc userio: Can't change port type on an already running userio instance [ 2325.950542][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 120 seconds [ 2326.003118][ T31] audit: type=1400 audit(2581.893:404): avc: denied { map } for pid=15997 comm="syz.1.1938" path="/proc/1168/task/1169/stack" dev="proc" ino=27932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2326.004914][ T31] audit: type=1400 audit(2581.893:405): avc: denied { execute } for pid=15997 comm="syz.1.1938" path="/proc/1168/task/1169/stack" dev="proc" ino=27932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2327.700037][T16004] serio: Serial port pts0 [ 2329.249704][ T31] audit: type=1400 audit(2585.133:406): avc: denied { ioctl } for pid=16009 comm="syz.1.1942" path="socket:[27967]" dev="sockfs" ino=27967 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2334.022545][T16037] serio: Serial port pts0 [ 2334.542440][ T31] audit: type=1400 audit(2590.433:407): avc: denied { wake_alarm } for pid=16036 comm="syz.1.1945" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2338.971581][T16041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2338.976954][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2340.500489][T16041] hsr_slave_0: entered promiscuous mode [ 2340.510880][T16041] hsr_slave_1: entered promiscuous mode [ 2340.513951][T16041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2340.514393][T16041] Cannot create hsr debugfs directory [ 2340.872864][T16041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.917402][T16041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.987329][T16041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.062341][T16041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.226698][T16041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2341.250928][T16041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2341.255940][T16041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2341.263511][T16041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2343.005278][T16041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2348.191792][T16406] fuse: Unknown parameter 'fÿ' [ 2348.286568][ T31] audit: type=1400 audit(2604.173:408): avc: denied { setattr } for pid=16405 comm="syz.1.1955" name="RAW" dev="sockfs" ino=28436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2349.514643][T16041] veth0_vlan: entered promiscuous mode [ 2349.554216][T16041] veth1_vlan: entered promiscuous mode [ 2349.651940][T16041] veth0_macvtap: entered promiscuous mode [ 2349.660599][T16041] veth1_macvtap: entered promiscuous mode [ 2349.743566][T16041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.743943][T16041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.744174][T16041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.744388][T16041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.122337][T16421] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16421 comm=syz.1.1957 [ 2357.999135][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 150 seconds [ 2366.335165][T16458] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 2380.003105][T16472] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 2382.422740][ T31] audit: type=1400 audit(2638.313:409): avc: denied { open } for pid=16487 comm="syz.1.1975" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2382.565598][T16488] serio: Serial port pts0 [ 2385.302263][T16503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1978'. [ 2387.720586][T16522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1983'. [ 2387.871111][T16524] FAULT_INJECTION: forcing a failure. [ 2387.871111][T16524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.871542][T16524] CPU: 1 UID: 0 PID: 16524 Comm: syz.0.1984 Not tainted 6.12.0-rc3-syzkaller #0 [ 2387.871766][T16524] Hardware name: ARM-Versatile Express [ 2387.871910][T16524] Call trace: [ 2387.872027][T16524] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2387.872382][T16524] r7:20000100 r6:e0749e30 r5:60000013 r4:8203d3f8 [ 2387.872539][T16524] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2387.872749][T16524] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2387.872984][T16524] r5:00000000 r4:8274e844 [ 2387.873103][T16524] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2387.873317][T16524] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2387.873549][T16524] r6:e0749e30 r5:00000000 r4:e0749f38 [ 2387.873705][T16524] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2387.873928][T16524] [<808e551c>] (should_fail_usercopy) from [<81486880>] (copy_msghdr_from_user+0x50/0x130) [ 2387.874155][T16524] [<81486830>] (copy_msghdr_from_user) from [<814869d8>] (___sys_sendmsg+0x78/0xd0) [ 2387.874376][T16524] r8:00004880 r7:00000000 r6:84964780 r5:e0749f38 r4:e0749e74 [ 2387.874536][T16524] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2387.874751][T16524] r10:00000128 r9:8525bc00 r8:8020029c r7:00004880 r6:20000100 r5:84964780 [ 2387.874949][T16524] r4:00000000 [ 2387.875041][T16524] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2387.875282][T16524] Exception stack(0xe0749fa8 to 0xe0749ff0) [ 2387.875494][T16524] 9fa0: 00000000 00000000 00000003 20000100 00004880 00000000 [ 2387.875775][T16524] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8e0bc [ 2387.876061][T16524] 9fe0: 76b8dec0 76b8deb0 00018af8 00132ec0 [ 2387.876217][T16524] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2388.410858][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 180 seconds [ 2389.440846][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 2393.563099][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 2396.781030][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 2401.042305][T16595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16595 comm=syz.1.2005 [ 2401.089282][T16595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16595 comm=syz.1.2005 [ 2401.098718][T16595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=16595 comm=syz.1.2005 [ 2415.713133][T16634] FAULT_INJECTION: forcing a failure. [ 2415.713133][T16634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.714331][T16634] CPU: 1 UID: 0 PID: 16634 Comm: syz.1.2016 Not tainted 6.12.0-rc3-syzkaller #0 [ 2415.714770][T16634] Hardware name: ARM-Versatile Express [ 2415.714994][T16634] Call trace: [ 2415.715157][T16634] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2415.715483][T16634] r7:20000100 r6:200000c0 r5:60000013 r4:8203d3f8 [ 2415.715770][T16634] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2415.716116][T16634] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2415.716341][T16634] r5:00000000 r4:8274e844 [ 2415.716474][T16634] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2415.716698][T16634] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2415.716927][T16634] r6:200000c0 r5:b5003500 r4:00000000 [ 2415.717077][T16634] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2415.717304][T16634] [<808e551c>] (should_fail_usercopy) from [<81866108>] (sctp_getsockopt_rtoinfo+0x110/0x1cc) [ 2415.717596][T16634] [<81865ff8>] (sctp_getsockopt_rtoinfo) from [<8186eda8>] (sctp_getsockopt+0x1148/0x1c90) [ 2415.717846][T16634] r8:20000100 r7:00000010 r6:200000c0 r5:00000000 r4:83881e00 [ 2415.718016][T16634] [<8186dc60>] (sctp_getsockopt) from [<8148786c>] (sock_common_getsockopt+0x28/0x30) [ 2415.718631][T16634] r10:00000127 r9:20000100 r8:00000000 r7:84965180 r6:00000000 r5:00000084 [ 2415.718877][T16634] r4:8186dc60 [ 2415.719036][T16634] [<81487844>] (sock_common_getsockopt) from [<8148465c>] (do_sock_getsockopt+0x10c/0x298) [ 2415.719318][T16634] r4:81487844 [ 2415.719486][T16634] [<81484550>] (do_sock_getsockopt) from [<814865e8>] (sys_getsockopt+0x90/0xd4) [ 2415.719798][T16634] r9:836b2400 r8:84965180 r7:200000c0 r6:00000000 r5:00000084 r4:00000000 [ 2415.720003][T16634] [<81486558>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2415.720260][T16634] Exception stack(0xeba01fa8 to 0xeba01ff0) [ 2415.720448][T16634] 1fa0: 20000100 00000000 00000003 00000084 00000000 200000c0 [ 2415.720671][T16634] 1fc0: 20000100 00000000 00130e70 00000127 00000000 00006364 003d0f00 76bb60bc [ 2415.720878][T16634] 1fe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2415.721052][T16634] r8:8020029c r7:00000127 r6:00130e70 r5:00000000 r4:20000100 [ 2418.134510][T16653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16653 comm=syz.1.2021 [ 2418.143697][T16653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16653 comm=syz.1.2021 [ 2418.511891][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 210 seconds [ 2428.177673][T16740] FAULT_INJECTION: forcing a failure. [ 2428.177673][T16740] name failslab, interval 1, probability 0, space 0, times 0 [ 2428.181472][T16740] CPU: 1 UID: 0 PID: 16740 Comm: syz.0.2058 Not tainted 6.12.0-rc3-syzkaller #0 [ 2428.181878][T16740] Hardware name: ARM-Versatile Express [ 2428.182050][T16740] Call trace: [ 2428.182246][T16740] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2428.182605][T16740] r7:00000c40 r6:85054b68 r5:60000013 r4:8203d3f8 [ 2428.182807][T16740] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2428.183164][T16740] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2428.183429][T16740] r5:00000000 r4:8271925c [ 2428.183627][T16740] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2428.184019][T16740] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2428.184394][T16740] r6:85054b68 r5:00001000 r4:82c016c0 [ 2428.184624][T16740] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2428.185001][T16740] [<804cd5c4>] (__kmalloc_noprof) from [<80751010>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2428.185430][T16740] r10:84f58000 r9:82c9e800 r8:00000000 r7:83109110 r6:85054b68 r5:00001000 [ 2428.185796][T16740] r4:00000000 [ 2428.185969][T16740] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2428.186521][T16740] r10:84f58000 r9:00000000 r8:00000004 r7:80404525 r6:00000004 r5:81ad1828 [ 2428.186880][T16740] r4:85054b68 r3:824ba340 [ 2428.187103][T16740] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2428.187556][T16740] r9:85054b40 r8:00000004 r7:00000000 r6:00000000 r5:80404525 r4:85054b40 [ 2428.187846][T16740] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2428.188102][T16740] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2428.188607][T16740] r7:00000000 r6:85054b41 r5:00000000 r4:80404525 [ 2428.188905][T16740] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2428.189296][T16740] Exception stack(0xec731fa8 to 0xec731ff0) [ 2428.190244][T16740] 1fa0: 00000000 00000000 00000004 80404525 00000000 00000000 [ 2428.190978][T16740] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b8e0bc [ 2428.191662][T16740] 1fe0: 76b8dec0 76b8deb0 00018af8 00132ec0 [ 2428.192429][T16740] r10:00000036 r9:84f58000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2428.193766][T16740] r4:00000000 [ 2428.234774][T16740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2429.092859][T16748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16748 comm=syz.0.2062 [ 2429.863962][T16756] FAULT_INJECTION: forcing a failure. [ 2429.863962][T16756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.865392][T16756] CPU: 1 UID: 0 PID: 16756 Comm: syz.0.2066 Not tainted 6.12.0-rc3-syzkaller #0 [ 2429.865899][T16756] Hardware name: ARM-Versatile Express [ 2429.866111][T16756] Call trace: [ 2429.866312][T16756] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2429.866693][T16756] r7:20000040 r6:b5003500 r5:60000013 r4:8203d3f8 [ 2429.866925][T16756] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2429.867238][T16756] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2429.867555][T16756] r5:00000000 r4:8274e844 [ 2429.867723][T16756] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2429.868032][T16756] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2429.868725][T16756] r6:b5003500 r5:20000000 r4:00000000 [ 2429.868992][T16756] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2429.870562][T16756] [<808e551c>] (should_fail_usercopy) from [<81866748>] (sctp_getsockopt_context+0xe4/0x194) [ 2429.870988][T16756] [<81866664>] (sctp_getsockopt_context) from [<8186f000>] (sctp_getsockopt+0x13a0/0x1c90) [ 2429.871421][T16756] r8:20000040 r7:00000008 r6:20000000 r5:00000011 r4:83881e00 [ 2429.871743][T16756] [<8186dc60>] (sctp_getsockopt) from [<8148786c>] (sock_common_getsockopt+0x28/0x30) [ 2429.872147][T16756] r10:00000127 r9:20000040 r8:00000000 r7:84963680 r6:00000011 r5:00000084 [ 2429.872480][T16756] r4:8186dc60 [ 2429.872670][T16756] [<81487844>] (sock_common_getsockopt) from [<8148465c>] (do_sock_getsockopt+0x10c/0x298) [ 2429.873075][T16756] r4:81487844 [ 2429.873257][T16756] [<81484550>] (do_sock_getsockopt) from [<814865e8>] (sys_getsockopt+0x90/0xd4) [ 2429.873678][T16756] r9:836b3c00 r8:84963680 r7:20000000 r6:00000011 r5:00000084 r4:00000000 [ 2429.874006][T16756] [<81486558>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2429.874377][T16756] Exception stack(0xec9a5fa8 to 0xec9a5ff0) [ 2429.874652][T16756] 5fa0: 20000040 00000000 00000003 00000084 00000011 20000000 [ 2429.875004][T16756] 5fc0: 20000040 00000000 00130e70 00000127 00000000 00006364 003d0f00 76b8e0bc [ 2429.875341][T16756] 5fe0: 76b8dec0 76b8deb0 00018af8 00132ec0 [ 2429.875617][T16756] r8:8020029c r7:00000127 r6:00130e70 r5:00000000 r4:20000040 [ 2441.095395][T16853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65534 sclass=netlink_audit_socket pid=16853 comm=syz.0.2102 [ 2441.280377][T16857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16857 comm=syz.0.2103 [ 2445.730580][T16873] ucma_write: process 1350 (syz.1.2109) changed security contexts after opening file descriptor, this is not allowed. [ 2448.732218][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 240 seconds [ 2455.611948][T16900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16900 comm=syz.1.2116 [ 2463.539209][T16932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16932 comm=syz.1.2127 [ 2464.491384][T16938] fuse: Bad value for 'fd' [ 2464.915899][T16942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16942 comm=syz.1.2132 [ 2467.105623][T16954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16954 comm=syz.1.2137 [ 2467.881130][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 2469.862270][T16968] fuse: Bad value for 'fd' [ 2470.122273][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 2471.552391][T16979] fuse: Bad value for 'fd' [ 2471.909600][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 2474.036520][T16989] fuse: Bad value for 'fd' [ 2478.416878][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2478.446941][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2480.220422][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 270 seconds [ 2481.363288][T16991] hsr_slave_0: entered promiscuous mode [ 2481.370030][T16991] hsr_slave_1: entered promiscuous mode [ 2481.371742][T16991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2481.372139][T16991] Cannot create hsr debugfs directory [ 2482.234090][T16991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.352667][T16991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.553381][T16991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.649729][T16991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.896528][T16991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2482.932681][T16991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2482.971321][T16991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2482.983083][T16991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2485.077201][T16991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2486.873346][T17334] FAULT_INJECTION: forcing a failure. [ 2486.873346][T17334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2486.876368][T17334] CPU: 1 UID: 0 PID: 17334 Comm: syz.1.2162 Not tainted 6.12.0-rc3-syzkaller #0 [ 2486.878309][T17334] Hardware name: ARM-Versatile Express [ 2486.878927][T17334] Call trace: [ 2486.879395][T17334] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2486.879892][T17334] r7:00000000 r6:00000000 r5:60000013 r4:8203d3f8 [ 2486.880205][T17334] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2486.880627][T17334] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2486.881047][T17334] r5:00000000 r4:8274e844 [ 2486.881285][T17334] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2486.881728][T17334] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2486.882171][T17334] r6:00000000 r5:ed705f68 r4:00000002 [ 2486.882418][T17334] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2486.883173][T17334] [<808e551c>] (should_fail_usercopy) from [<8054e734>] (simple_read_from_buffer+0x8c/0x134) [ 2486.884331][T17334] [<8054e6a8>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 2486.884838][T17334] r10:00000001 r9:805c317c r8:00000002 r7:ed705f68 r6:0000000f r5:76bb5f30 [ 2486.885250][T17334] r4:846d9800 r3:ed705e9f [ 2486.885509][T17334] [<805c317c>] (proc_fail_nth_read) from [<80515e94>] (vfs_read+0x98/0x324) [ 2486.886029][T17334] r8:76bb5f30 r7:ed705f68 r6:846d9800 r5:0000000f r4:8500a840 [ 2486.886416][T17334] [<80515dfc>] (vfs_read) from [<80516b44>] (ksys_read+0x78/0xf8) [ 2486.886870][T17334] r10:00000003 r9:846d9800 r8:8020029c r7:00000000 r6:00000000 r5:8500a840 [ 2486.887250][T17334] r4:8500a843 [ 2486.887967][T17334] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2486.889331][T17334] r7:00000003 r6:00000006 r5:76bb5f30 r4:0000000f [ 2486.889889][T17334] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2486.890319][T17334] Exception stack(0xed705fa8 to 0xed705ff0) [ 2486.890640][T17334] 5fa0: 0000000f 76bb5f30 00000006 76bb5f30 0000000f 00000000 [ 2486.891066][T17334] 5fc0: 0000000f 76bb5f30 00000006 00000003 00000000 00006364 003d0f00 76bb60bc [ 2486.891526][T17334] 5fe0: 00000158 76bb5ed0 000d8408 00130d94 [ 2502.060274][T16991] veth0_vlan: entered promiscuous mode [ 2502.099538][T16991] veth1_vlan: entered promiscuous mode [ 2502.251451][T16991] veth0_macvtap: entered promiscuous mode [ 2502.273520][T16991] veth1_macvtap: entered promiscuous mode [ 2502.394787][T16991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2502.395359][T16991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2502.395688][T16991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2502.396039][T16991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.543905][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 300 seconds [ 2515.626681][T17397] FAULT_INJECTION: forcing a failure. [ 2515.626681][T17397] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.627461][T17397] CPU: 1 UID: 0 PID: 17397 Comm: syz.0.2177 Not tainted 6.12.0-rc3-syzkaller #0 [ 2515.627855][T17397] Hardware name: ARM-Versatile Express [ 2515.628166][T17397] Call trace: [ 2515.628564][T17397] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2515.629164][T17397] r7:836d4800 r6:00000cc0 r5:60000013 r4:8203d3f8 [ 2515.629487][T17397] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2515.629951][T17397] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2515.630397][T17397] r5:00000000 r4:8271925c [ 2515.630634][T17397] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2515.631085][T17397] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2515.631574][T17397] r6:00000cc0 r5:ffffffff r4:82ea1000 [ 2515.631857][T17397] [<804e81d4>] (should_failslab) from [<804ccc70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2515.632352][T17397] [<804ccc20>] (kmem_cache_alloc_node_noprof) from [<814912f8>] (__alloc_skb+0x138/0x160) [ 2515.632860][T17397] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82ea1000 r5:ffffffff [ 2515.633260][T17397] r4:82606000 [ 2515.633477][T17397] [<814911c0>] (__alloc_skb) from [<815a66fc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2515.633989][T17397] r8:00000000 r7:85db9000 r6:00000024 r5:84962000 r4:00000140 [ 2515.634334][T17397] [<815a6674>] (netlink_alloc_large_skb) from [<815a6d04>] (netlink_sendmsg+0x134/0x43c) [ 2515.634810][T17397] r5:84962000 r4:dfa99f38 [ 2515.635037][T17397] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2515.635476][T17397] r10:00004880 r9:dfa99dd4 r8:dfa99dd4 r7:00000000 r6:84962000 r5:dfa99f38 [ 2515.635932][T17397] r4:00000000 [ 2515.636128][T17397] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2515.636584][T17397] r7:00000000 r6:00000000 r5:84962000 r4:dfa99f38 [ 2515.636906][T17397] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2515.637374][T17397] r10:dfa99e34 r9:20000100 r8:00004880 r7:00000000 r6:84962000 r5:dfa99f38 [ 2515.637799][T17397] r4:00000000 [ 2515.638023][T17397] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2515.638710][T17397] r10:00000128 r9:836d4800 r8:8020029c r7:00004880 r6:20000100 r5:84962000 [ 2515.639174][T17397] r4:00000000 [ 2515.639385][T17397] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2515.639815][T17397] Exception stack(0xdfa99fa8 to 0xdfa99ff0) [ 2515.640136][T17397] 9fa0: 00000000 00000000 00000003 20000100 00004880 00000000 [ 2515.640583][T17397] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b410bc [ 2515.641003][T17397] 9fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2515.641319][T17397] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2516.255343][T17404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17404 comm=syz.0.2179 [ 2516.864411][T17410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17410 comm=syz.0.2182 [ 2518.951317][T17412] fuse: Unknown parameter 'grou00000000000000000000' [ 2526.759728][ T31] audit: type=1400 audit(2782.623:410): avc: denied { create } for pid=17417 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2527.204248][T17418] SELinux: Context system_u:object_r:var_log_t:s0 is not valid (left unmapped). [ 2527.210086][ T31] audit: type=1400 audit(2783.093:411): avc: denied { relabelto } for pid=17417 comm="syz.0.2186" name="rdma_cm" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_log_t:s0" [ 2527.213628][ T31] audit: type=1400 audit(2783.103:412): avc: denied { read } for pid=2927 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2527.220839][ T31] audit: type=1400 audit(2783.103:413): avc: denied { associate } for pid=17417 comm="syz.0.2186" name="rdma_cm" dev="devtmpfs" ino=721 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_log_t:s0" [ 2527.426478][T17426] fuse: Unknown parameter 'grou00000000000000000000' [ 2527.878769][T17430] FAULT_INJECTION: forcing a failure. [ 2527.878769][T17430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2527.879351][T17430] CPU: 1 UID: 0 PID: 17430 Comm: syz.1.2190 Not tainted 6.12.0-rc3-syzkaller #0 [ 2527.879699][T17430] Hardware name: ARM-Versatile Express [ 2527.879922][T17430] Call trace: [ 2527.880136][T17430] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2527.880566][T17430] r7:00000000 r6:00000000 r5:60000013 r4:8203d3f8 [ 2527.880846][T17430] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2527.881191][T17430] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2527.881560][T17430] r5:00000000 r4:8274e844 [ 2527.881777][T17430] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2527.882129][T17430] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2527.882473][T17430] r6:00000000 r5:dfb01f68 r4:00000002 [ 2527.882697][T17430] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2527.883039][T17430] [<808e551c>] (should_fail_usercopy) from [<8054e734>] (simple_read_from_buffer+0x8c/0x134) [ 2527.883427][T17430] [<8054e6a8>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 2527.883842][T17430] r10:00000001 r9:805c317c r8:00000002 r7:dfb01f68 r6:0000000f r5:76bb5f30 [ 2527.884157][T17430] r4:85258000 r3:dfb01e9f [ 2527.884353][T17430] [<805c317c>] (proc_fail_nth_read) from [<80515e94>] (vfs_read+0x98/0x324) [ 2527.884745][T17430] r8:76bb5f30 r7:dfb01f68 r6:85258000 r5:0000000f r4:8500a0c0 [ 2527.885018][T17430] [<80515dfc>] (vfs_read) from [<80516b44>] (ksys_read+0x78/0xf8) [ 2527.885356][T17430] r10:00000003 r9:85258000 r8:8020029c r7:00000000 r6:00000000 r5:8500a0c0 [ 2527.885697][T17430] r4:8500a0c3 [ 2527.885867][T17430] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2527.886203][T17430] r7:00000003 r6:00000005 r5:76bb5f30 r4:0000000f [ 2527.886457][T17430] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2527.886825][T17430] Exception stack(0xdfb01fa8 to 0xdfb01ff0) [ 2527.887082][T17430] 1fa0: 0000000f 76bb5f30 00000005 76bb5f30 0000000f 00000000 [ 2527.887403][T17430] 1fc0: 0000000f 76bb5f30 00000005 00000003 00000000 00006364 003d0f00 76bb60bc [ 2527.887748][T17430] 1fe0: 00000158 76bb5ed0 000d8408 00130d94 [ 2528.822698][T17436] fuse: Unknown parameter 'group_i00000000000000000000' [ 2531.222809][T17451] FAULT_INJECTION: forcing a failure. [ 2531.222809][T17451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2531.223471][T17451] CPU: 1 UID: 0 PID: 17451 Comm: syz.1.2199 Not tainted 6.12.0-rc3-syzkaller #0 [ 2531.223816][T17451] Hardware name: ARM-Versatile Express [ 2531.224020][T17451] Call trace: [ 2531.224224][T17451] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2531.224612][T17451] r7:84664fc0 r6:00000000 r5:60000013 r4:8203d3f8 [ 2531.224871][T17451] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2531.225203][T17451] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2531.225556][T17451] r5:00000000 r4:8274e844 [ 2531.225758][T17451] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2531.226079][T17451] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2531.226572][T17451] r6:00000000 r5:dfa99f48 r4:00000028 [ 2531.226797][T17451] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2531.227129][T17451] [<808e551c>] (should_fail_usercopy) from [<8083a364>] (_copy_from_iter+0x68/0x7c8) [ 2531.227476][T17451] [<8083a2fc>] (_copy_from_iter) from [<815a6d6c>] (netlink_sendmsg+0x19c/0x43c) [ 2531.227844][T17451] r10:00000000 r9:00000000 r8:dfa99f48 r7:85dbbc00 r6:00000028 r5:8512a0c0 [ 2531.228131][T17451] r4:dfa99f38 [ 2531.228520][T17451] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2531.229148][T17451] r10:00000000 r9:dfa99dd4 r8:dfa99dd4 r7:00000000 r6:849f4000 r5:dfa99f38 [ 2531.229473][T17451] r4:00000000 [ 2531.229677][T17451] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2531.230059][T17451] r7:00000000 r6:00000000 r5:849f4000 r4:dfa99f38 [ 2531.230300][T17451] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2531.230657][T17451] r10:dfa99e34 r9:20002180 r8:00000000 r7:00000000 r6:849f4000 r5:dfa99f38 [ 2531.230953][T17451] r4:00000000 [ 2531.231106][T17451] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2531.231474][T17451] r10:00000128 r9:85258c00 r8:8020029c r7:00000000 r6:20002180 r5:849f4000 [ 2531.231776][T17451] r4:00000000 [ 2531.231933][T17451] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2531.232264][T17451] Exception stack(0xdfa99fa8 to 0xdfa99ff0) [ 2531.232506][T17451] 9fa0: 00000000 00000000 00000003 20002180 00000000 00000000 [ 2531.232829][T17451] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bb60bc [ 2531.233133][T17451] 9fe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2531.233366][T17451] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2534.955884][T17470] FAULT_INJECTION: forcing a failure. [ 2534.955884][T17470] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.956581][T17470] CPU: 1 UID: 0 PID: 17470 Comm: syz.0.2205 Not tainted 6.12.0-rc3-syzkaller #0 [ 2534.956910][T17470] Hardware name: ARM-Versatile Express [ 2534.958176][T17470] Call trace: [ 2534.959497][T17470] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2534.959988][T17470] r7:00000c40 r6:8500a0e8 r5:60000013 r4:8203d3f8 [ 2534.960218][T17470] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2534.960580][T17470] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2534.960931][T17470] r5:00000000 r4:8271925c [ 2534.961121][T17470] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2534.961476][T17470] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2534.963261][T17470] r6:8500a0e8 r5:00001000 r4:82c016c0 [ 2534.964396][T17470] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2534.965388][T17470] [<804cd5c4>] (__kmalloc_noprof) from [<80751010>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2534.967258][T17470] r10:85258000 r9:82f90000 r8:00000000 r7:8337f880 r6:8500a0e8 r5:00001000 [ 2534.969259][T17470] r4:00000000 [ 2534.970011][T17470] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2534.972178][T17470] r10:85258000 r9:00000000 r8:00000004 r7:00005451 r6:00000004 r5:81ad1828 [ 2534.973622][T17470] r4:8500a0e8 r3:824ba340 [ 2534.974552][T17470] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2534.976382][T17470] r9:8500a0c0 r8:00000004 r7:00000000 r6:00000000 r5:00005451 r4:8500a0c0 [ 2534.977938][T17470] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2534.980684][T17470] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2534.982682][T17470] r7:00000000 r6:8500a0c1 r5:00000000 r4:00005451 [ 2534.984011][T17470] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2534.985629][T17470] Exception stack(0xdff11fa8 to 0xdff11ff0) [ 2534.986698][T17470] 1fa0: 00000000 00000000 00000004 00005451 00000000 00000000 [ 2534.988452][T17470] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b410bc [ 2534.991138][T17470] 1fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2534.992133][T17470] r10:00000036 r9:85258000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2534.993637][T17470] r4:00000000 [ 2535.069797][T17470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2535.237946][ T31] audit: type=1400 audit(2791.123:414): avc: denied { create } for pid=17471 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2535.252249][ T31] audit: type=1400 audit(2791.133:415): avc: denied { setopt } for pid=17471 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2535.555125][ T31] audit: type=1400 audit(2791.443:416): avc: denied { write } for pid=17473 comm="syz.0.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2536.425818][T17484] FAULT_INJECTION: forcing a failure. [ 2536.425818][T17484] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.426451][T17484] CPU: 1 UID: 0 PID: 17484 Comm: syz.0.2210 Not tainted 6.12.0-rc3-syzkaller #0 [ 2536.426768][T17484] Hardware name: ARM-Versatile Express [ 2536.426974][T17484] Call trace: [ 2536.427147][T17484] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2536.427521][T17484] r7:00000d40 r6:8500a4a8 r5:60000013 r4:8203d3f8 [ 2536.427746][T17484] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2536.428063][T17484] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2536.428795][T17484] r5:00000000 r4:8271925c [ 2536.429184][T17484] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2536.429567][T17484] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2536.429937][T17484] r6:8500a4a8 r5:00000024 r4:82c01240 [ 2536.430154][T17484] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2536.430535][T17484] [<804cd5c4>] (__kmalloc_noprof) from [<80750f18>] (tomoyo_encode2+0x64/0xf0) [ 2536.430908][T17484] r10:00000fff r9:82c9e800 r8:00000000 r7:83109110 r6:8500a4a8 r5:846c0ffc [ 2536.431213][T17484] r4:846c0fe3 [ 2536.431370][T17484] [<80750eb4>] (tomoyo_encode2) from [<80750fc8>] (tomoyo_encode+0x24/0x30) [ 2536.431763][T17484] r9:82c9e800 r8:00000000 r7:83109110 r6:8500a4a8 r5:00001000 r4:846c0fe4 [ 2536.432056][T17484] [<80750fa4>] (tomoyo_encode) from [<80751054>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2536.432444][T17484] r5:00001000 r4:846c0000 [ 2536.432624][T17484] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2536.433030][T17484] r10:8525b000 r9:00000000 r8:00000004 r7:80404525 r6:00000004 r5:81ad1828 [ 2536.433335][T17484] r4:8500a4a8 r3:824ba340 [ 2536.433562][T17484] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2536.433991][T17484] r9:8500a480 r8:00000004 r7:00000000 r6:00000000 r5:80404525 r4:8500a480 [ 2536.434325][T17484] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2536.434795][T17484] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2536.435236][T17484] r7:00000000 r6:8500a481 r5:00000000 r4:80404525 [ 2536.435554][T17484] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2536.435845][T17484] Exception stack(0xdffe1fa8 to 0xdffe1ff0) [ 2536.436073][T17484] 1fa0: 00000000 00000000 00000004 80404525 00000000 00000000 [ 2536.436393][T17484] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b410bc [ 2536.436703][T17484] 1fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2536.436934][T17484] r10:00000036 r9:8525b000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2536.437232][T17484] r4:00000000 [ 2536.469584][T17484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2538.468977][ T7670] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2538.666295][ T7670] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2538.667200][ T7670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2538.668009][ T7670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2538.681245][ T7670] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2538.681827][ T7670] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2538.682138][ T7670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.692867][ T7670] usb 1-1: config 0 descriptor?? [ 2538.750958][T17491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2539.231379][ T7670] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 2539.250519][ T7670] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2541.249915][ T7670] usb 1-1: USB disconnect, device number 40 [ 2542.259434][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 330 seconds [ 2546.218903][ T31] audit: type=1400 audit(2802.103:417): avc: denied { setopt } for pid=17532 comm="syz.0.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2550.831237][T17561] FAULT_INJECTION: forcing a failure. [ 2550.831237][T17561] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.831976][T17561] CPU: 1 UID: 0 PID: 17561 Comm: syz.1.2223 Not tainted 6.12.0-rc3-syzkaller #0 [ 2550.832339][T17561] Hardware name: ARM-Versatile Express [ 2550.832586][T17561] Call trace: [ 2550.832804][T17561] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2550.833208][T17561] r7:00000c40 r6:85054328 r5:60000013 r4:8203d3f8 [ 2550.833470][T17561] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2550.833852][T17561] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2550.834204][T17561] r5:00000000 r4:8271925c [ 2550.834397][T17561] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2550.834755][T17561] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2550.835118][T17561] r6:85054328 r5:00001000 r4:82c016c0 [ 2550.835355][T17561] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2550.835743][T17561] [<804cd5c4>] (__kmalloc_noprof) from [<80751010>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2550.836152][T17561] r10:846c9800 r9:82f90000 r8:00000000 r7:849dd880 r6:85054328 r5:00001000 [ 2550.836461][T17561] r4:00000000 [ 2550.836630][T17561] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2550.837043][T17561] r10:846c9800 r9:00000000 r8:00000003 r7:0000891c r6:00000004 r5:81ad1828 [ 2550.837383][T17561] r4:85054328 r3:824ba340 [ 2550.837642][T17561] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2550.838066][T17561] r9:85054300 r8:00000003 r7:200000c0 r6:200000c0 r5:0000891c r4:85054300 [ 2550.838767][T17561] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2550.839195][T17561] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2550.839653][T17561] r7:200000c0 r6:85054301 r5:00000000 r4:0000891c [ 2550.839945][T17561] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2550.840335][T17561] Exception stack(0xe05ddfa8 to 0xe05ddff0) [ 2550.840649][T17561] dfa0: 00000000 00000000 00000003 0000891c 200000c0 00000000 [ 2550.841041][T17561] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bb60bc [ 2550.841434][T17561] dfe0: 76bb5ec0 76bb5eb0 00018af8 00132ec0 [ 2550.841770][T17561] r10:00000036 r9:846c9800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2550.842157][T17561] r4:00000000 [ 2551.017444][T17561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2559.131840][T17585] FAULT_INJECTION: forcing a failure. [ 2559.131840][T17585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2559.132487][T17585] CPU: 1 UID: 0 PID: 17585 Comm: syz.0.2232 Not tainted 6.12.0-rc3-syzkaller #0 [ 2559.132804][T17585] Hardware name: ARM-Versatile Express [ 2559.132999][T17585] Call trace: [ 2559.133171][T17585] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2559.133573][T17585] r7:00000000 r6:00000000 r5:60000013 r4:8203d3f8 [ 2559.133805][T17585] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2559.134113][T17585] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2559.134438][T17585] r5:00000000 r4:8274e844 [ 2559.134604][T17585] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2559.134935][T17585] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2559.135242][T17585] r6:00000000 r5:e06f1f68 r4:00000002 [ 2559.135461][T17585] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2559.135788][T17585] [<808e551c>] (should_fail_usercopy) from [<8054e734>] (simple_read_from_buffer+0x8c/0x134) [ 2559.136136][T17585] [<8054e6a8>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 2559.136519][T17585] r10:00000001 r9:805c317c r8:00000002 r7:e06f1f68 r6:0000000f r5:76b1ff30 [ 2559.136811][T17585] r4:846ca400 r3:e06f1e9f [ 2559.136977][T17585] [<805c317c>] (proc_fail_nth_read) from [<80515e94>] (vfs_read+0x98/0x324) [ 2559.137301][T17585] r8:76b1ff30 r7:e06f1f68 r6:846ca400 r5:0000000f r4:8500a540 [ 2559.137571][T17585] [<80515dfc>] (vfs_read) from [<80516b44>] (ksys_read+0x78/0xf8) [ 2559.137901][T17585] r10:00000003 r9:846ca400 r8:8020029c r7:00000000 r6:00000000 r5:8500a540 [ 2559.138233][T17585] r4:8500a543 [ 2559.138526][T17585] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2559.139030][T17585] r7:00000003 r6:00000005 r5:76b1ff30 r4:0000000f [ 2559.139279][T17585] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2559.139639][T17585] Exception stack(0xe06f1fa8 to 0xe06f1ff0) [ 2559.139906][T17585] 1fa0: 0000000f 76b1ff30 00000005 76b1ff30 0000000f 00000000 [ 2559.140322][T17585] 1fc0: 0000000f 76b1ff30 00000005 00000003 00000000 00006364 003d0f00 76b200bc [ 2559.142010][T17585] 1fe0: 00000158 76b1fed0 000d8408 00130d94 [ 2565.163041][T15517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.215749][T15517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.263311][T15517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.313259][T15517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.789565][T15517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2565.790379][T17635] FAULT_INJECTION: forcing a failure. [ 2565.790379][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.790954][T17635] CPU: 0 UID: 0 PID: 17635 Comm: syz.0.2245 Not tainted 6.12.0-rc3-syzkaller #0 [ 2565.791462][T17635] Hardware name: ARM-Versatile Express [ 2565.791795][T17635] Call trace: [ 2565.791991][T17635] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2565.792391][T17635] r7:84f5e000 r6:00000cc0 r5:60000113 r4:8203d3f8 [ 2565.792612][T17635] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2565.792915][T17635] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2565.793264][T17635] r5:00000000 r4:8271925c [ 2565.793561][T17635] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2565.794060][T17635] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2565.794421][T17635] r6:00000cc0 r5:ffffffff r4:82ea1000 [ 2565.794823][T17635] [<804e81d4>] (should_failslab) from [<804ccc70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2565.795165][T17635] [<804ccc20>] (kmem_cache_alloc_node_noprof) from [<814912f8>] (__alloc_skb+0x138/0x160) [ 2565.795577][T17635] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82ea1000 r5:ffffffff [ 2565.795802][T17635] r4:82606000 [ 2565.795998][T17635] [<814911c0>] (__alloc_skb) from [<815a66fc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2565.796332][T17635] r8:00000000 r7:85530000 r6:00000014 r5:84994280 r4:00000140 [ 2565.796721][T17635] [<815a6674>] (netlink_alloc_large_skb) from [<815a6d04>] (netlink_sendmsg+0x134/0x43c) [ 2565.797055][T17635] r5:84994280 r4:e07b1f38 [ 2565.797242][T17635] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2565.797962][T17635] r10:00040000 r9:e07b1dd4 r8:e07b1dd4 r7:00000000 r6:84994280 r5:e07b1f38 [ 2565.798855][T17635] r4:00000000 [ 2565.799475][T17635] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2565.800035][T17635] r7:00000000 r6:00000000 r5:84994280 r4:e07b1f38 [ 2565.800325][T17635] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2565.800699][T17635] r10:e07b1e34 r9:20002940 r8:00040000 r7:00000000 r6:84994280 r5:e07b1f38 [ 2565.800995][T17635] r4:00000000 [ 2565.801147][T17635] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2565.801484][T17635] r10:00000128 r9:84f5e000 r8:8020029c r7:00040000 r6:20002940 r5:84994280 [ 2565.801807][T17635] r4:00000000 [ 2565.801965][T17635] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2565.802379][T17635] Exception stack(0xe07b1fa8 to 0xe07b1ff0) [ 2565.802633][T17635] 1fa0: 00000000 00000000 00000003 20002940 00040000 00000000 [ 2565.802996][T17635] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b410bc [ 2565.803672][T17635] 1fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2565.803936][T17635] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2565.826847][T15517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2565.836247][T15517] bond0 (unregistering): Released all slaves [ 2565.984550][T15517] hsr_slave_0: left promiscuous mode [ 2565.991967][T15517] hsr_slave_1: left promiscuous mode [ 2566.006193][T15517] veth1_macvtap: left promiscuous mode [ 2566.006635][T15517] veth0_macvtap: left promiscuous mode [ 2566.006988][T15517] veth1_vlan: left promiscuous mode [ 2566.007428][T15517] veth0_vlan: left promiscuous mode [ 2566.300866][T17642] FAULT_INJECTION: forcing a failure. [ 2566.300866][T17642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2566.301632][T17642] CPU: 1 UID: 0 PID: 17642 Comm: syz.0.2247 Not tainted 6.12.0-rc3-syzkaller #0 [ 2566.302158][T17642] Hardware name: ARM-Versatile Express [ 2566.302455][T17642] Call trace: [ 2566.302712][T17642] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2566.303194][T17642] r7:20000200 r6:ea941e30 r5:60000013 r4:8203d3f8 [ 2566.303537][T17642] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2566.304034][T17642] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2566.304474][T17642] r5:00000000 r4:8274e844 [ 2566.304722][T17642] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2566.305265][T17642] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2566.305763][T17642] r6:ea941e30 r5:00000000 r4:ea941f38 [ 2566.306061][T17642] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2566.306530][T17642] [<808e551c>] (should_fail_usercopy) from [<81486880>] (copy_msghdr_from_user+0x50/0x130) [ 2566.307022][T17642] [<81486830>] (copy_msghdr_from_user) from [<814869d8>] (___sys_sendmsg+0x78/0xd0) [ 2566.307514][T17642] r8:0004c000 r7:00000000 r6:8494ec80 r5:ea941f38 r4:ea941e74 [ 2566.307857][T17642] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2566.308653][T17642] r10:00000128 r9:84f5e000 r8:8020029c r7:0004c000 r6:20000200 r5:8494ec80 [ 2566.309270][T17642] r4:00000000 [ 2566.309501][T17642] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2566.309970][T17642] Exception stack(0xea941fa8 to 0xea941ff0) [ 2566.310298][T17642] 1fa0: 00000000 00000000 00000003 20000200 0004c000 00000000 [ 2566.310842][T17642] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b410bc [ 2566.311294][T17642] 1fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2566.311641][T17642] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2568.526556][T17610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2568.542189][T17610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2569.694539][T17610] hsr_slave_0: entered promiscuous mode [ 2569.698018][T17610] hsr_slave_1: entered promiscuous mode [ 2569.711386][T17610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2569.711869][T17610] Cannot create hsr debugfs directory [ 2570.489229][T17610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2570.495983][T17610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2570.504588][T17610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2570.520683][T17610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2571.643187][T17610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2572.732831][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 360 seconds [ 2572.806814][T17610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2575.620040][T18066] FAULT_INJECTION: forcing a failure. [ 2575.620040][T18066] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.620891][T18066] CPU: 0 UID: 0 PID: 18066 Comm: syz.0.2260 Not tainted 6.12.0-rc3-syzkaller #0 [ 2575.621694][T18066] Hardware name: ARM-Versatile Express [ 2575.622260][T18066] Call trace: [ 2575.622579][T18066] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2575.623054][T18066] r7:846db000 r6:00000dc0 r5:60000013 r4:8203d3f8 [ 2575.623330][T18066] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2575.623857][T18066] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2575.624531][T18066] r5:00000000 r4:8271925c [ 2575.624994][T18066] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2575.625414][T18066] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2575.625859][T18066] r6:00000dc0 r5:826f6690 r4:82c01240 [ 2575.626338][T18066] [<804e81d4>] (should_failslab) from [<804cc688>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2575.626833][T18066] [<804cc63c>] (__kmalloc_cache_noprof) from [<80260330>] (call_usermodehelper_setup+0x48/0xb8) [ 2575.627392][T18066] r10:00000001 r9:84fac100 r8:826f6564 r7:826f6564 r6:854da980 r5:826f6690 [ 2575.627764][T18066] r4:854da980 [ 2575.628019][T18066] [<802602e8>] (call_usermodehelper_setup) from [<802f9754>] (__request_module+0x150/0x2c0) [ 2575.628886][T18066] r7:846db000 r6:85726000 r5:00000002 r4:854da980 [ 2575.629219][T18066] [<802f9604>] (__request_module) from [<8174c000>] (inet6_create+0x31c/0x3d0) [ 2575.629818][T18066] r3:00000000 r2:0000000a r1:821f77ac [ 2575.630099][T18066] r8:8292cc20 r7:831ad180 r6:00000000 r5:00000000 r4:ffffffa3 [ 2575.630767][T18066] [<8174bce4>] (inet6_create) from [<81482c28>] (__sock_create+0xfc/0x1dc) [ 2575.631359][T18066] r10:81c6d020 r9:84fac100 r8:831ad180 r7:00000000 r6:8174bce4 r5:00000003 [ 2575.631780][T18066] r4:0000000a [ 2575.631987][T18066] [<81482b2c>] (__sock_create) from [<81485390>] (__sys_socket+0x94/0x10c) [ 2575.632491][T18066] r10:00000119 r9:846db000 r8:8020029c r7:00000119 r6:846db000 r5:0000000a [ 2575.632865][T18066] r4:00000003 [ 2575.633062][T18066] [<814852fc>] (__sys_socket) from [<81485418>] (sys_socket+0x10/0x14) [ 2575.633566][T18066] r6:00130e70 r5:00000000 r4:00000000 [ 2575.633882][T18066] [<81485408>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2575.634346][T18066] Exception stack(0xeb1a5fa8 to 0xeb1a5ff0) [ 2575.634708][T18066] 5fa0: 00000000 00000000 0000000a 00000003 00000000 00000000 [ 2575.635167][T18066] 5fc0: 00000000 00000000 00130e70 00000119 00000000 00006364 003d0f00 76b410bc [ 2575.635597][T18066] 5fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2576.517343][T17610] veth0_vlan: entered promiscuous mode [ 2576.557003][T17610] veth1_vlan: entered promiscuous mode [ 2576.683515][T17610] veth0_macvtap: entered promiscuous mode [ 2576.705709][T17610] veth1_macvtap: entered promiscuous mode [ 2576.796079][T17610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.796643][T17610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.796996][T17610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.797345][T17610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2577.250318][T18087] nbd1: detected capacity change from 0 to 22 [ 2577.723927][T18095] block nbd1: shutting down sockets [ 2577.770818][T18087] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 2577.771879][T18087] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2577.772377][T18087] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2578.111026][T18101] fuse: Bad value for 'group_id' [ 2578.113029][T18101] fuse: Bad value for 'group_id' [ 2578.710961][ T31] audit: type=1400 audit(2834.603:418): avc: denied { write } for pid=18106 comm="syz.0.2266" path="socket:[22396]" dev="sockfs" ino=22396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2579.310063][ T31] audit: type=1400 audit(2835.163:419): avc: denied { getopt } for pid=18108 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2579.815192][T18113] fuse: Bad value for 'group_id' [ 2579.815706][T18113] fuse: Bad value for 'group_id' [ 2580.431889][T18121] fuse: Bad value for 'fd' [ 2581.959799][T18132] fuse: Bad value for 'group_id' [ 2581.960581][T18132] fuse: Bad value for 'group_id' [ 2581.969884][ T31] audit: type=1400 audit(2837.853:420): avc: denied { ioctl } for pid=18131 comm="syz.0.2276" path="socket:[31813]" dev="sockfs" ino=31813 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2582.249830][T18135] fuse: Bad value for 'fd' [ 2584.147864][T18151] FAULT_INJECTION: forcing a failure. [ 2584.147864][T18151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.150193][T18151] CPU: 0 UID: 0 PID: 18151 Comm: syz.1.2282 Not tainted 6.12.0-rc3-syzkaller #0 [ 2584.157118][T18151] Hardware name: ARM-Versatile Express [ 2584.158534][T18151] Call trace: [ 2584.158864][T18151] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2584.159427][T18151] r7:20000200 r6:eb6c5e30 r5:60000013 r4:8203d3f8 [ 2584.159720][T18151] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2584.160139][T18151] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2584.160513][T18151] r5:00000000 r4:8274e844 [ 2584.160725][T18151] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2584.161119][T18151] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2584.161518][T18151] r6:eb6c5e30 r5:00000000 r4:eb6c5f38 [ 2584.161837][T18151] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2584.162270][T18151] [<808e551c>] (should_fail_usercopy) from [<81486880>] (copy_msghdr_from_user+0x50/0x130) [ 2584.162836][T18151] [<81486830>] (copy_msghdr_from_user) from [<814869d8>] (___sys_sendmsg+0x78/0xd0) [ 2584.163307][T18151] r8:04048010 r7:00000000 r6:831ac500 r5:eb6c5f38 r4:eb6c5e74 [ 2584.163732][T18151] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2584.164135][T18151] r10:00000128 r9:846d9800 r8:8020029c r7:04048010 r6:20000200 r5:831ac500 [ 2584.164460][T18151] r4:00000000 [ 2584.164646][T18151] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2584.165032][T18151] Exception stack(0xeb6c5fa8 to 0xeb6c5ff0) [ 2584.165318][T18151] 5fa0: 00000000 00000000 00000003 20000200 04048010 00000000 [ 2584.165698][T18151] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bc10bc [ 2584.166081][T18151] 5fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 2584.166343][T18151] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2584.581043][T18153] fuse: Bad value for 'fd' [ 2586.171600][T18162] FAULT_INJECTION: forcing a failure. [ 2586.171600][T18162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2586.172317][T18162] CPU: 1 UID: 0 PID: 18162 Comm: syz.1.2286 Not tainted 6.12.0-rc3-syzkaller #0 [ 2586.172670][T18162] Hardware name: ARM-Versatile Express [ 2586.172974][T18162] Call trace: [ 2586.173198][T18162] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2586.173684][T18162] r7:84664fc0 r6:00000000 r5:60000013 r4:8203d3f8 [ 2586.174000][T18162] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2586.174415][T18162] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2586.174837][T18162] r5:00000000 r4:8274e844 [ 2586.175056][T18162] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2586.175495][T18162] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2586.175912][T18162] r6:00000000 r5:df841ea8 r4:00000020 [ 2586.176190][T18162] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2586.176716][T18162] [<808e551c>] (should_fail_usercopy) from [<8083a364>] (_copy_from_iter+0x68/0x7c8) [ 2586.177106][T18162] [<8083a2fc>] (_copy_from_iter) from [<815a6d6c>] (netlink_sendmsg+0x19c/0x43c) [ 2586.177490][T18162] r10:00000000 r9:00000000 r8:df841ea8 r7:846b9000 r6:00000020 r5:8505e600 [ 2586.177820][T18162] r4:df841e98 [ 2586.177983][T18162] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2586.178611][T18162] r10:00000122 r9:84f5c800 r8:00000003 r7:8339bb80 r6:8339bb80 r5:df841e98 [ 2586.179089][T18162] r4:00000000 [ 2586.179231][T18162] [<81483a4c>] (__sock_sendmsg) from [<814860e8>] (__sys_sendto+0x108/0x14c) [ 2586.179602][T18162] r7:8339bb80 r6:76bbfe1c r5:00000000 r4:00000000 [ 2586.179846][T18162] [<81485fe0>] (__sys_sendto) from [<81486148>] (sys_sendto+0x1c/0x24) [ 2586.180182][T18162] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bbfe1c [ 2586.180448][T18162] [<8148612c>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2586.180805][T18162] Exception stack(0xdf841fa8 to 0xdf841ff0) [ 2586.181060][T18162] 1fa0: 76bbfe1c 0000000c 00000003 76bbfeb0 00000020 00000000 [ 2586.181479][T18162] 1fc0: 76bbfe1c 0000000c 00000000 00000122 00000003 00000000 76bbfeb0 76bc10bc [ 2586.181921][T18162] 1fe0: 00000000 76bbfdf0 000d8408 00135358 [ 2588.319650][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'. [ 2592.471117][T18222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18222 comm=syz.0.2304 [ 2594.538735][ T31] audit: type=1400 audit(2850.423:421): avc: denied { write } for pid=18249 comm="syz.1.2314" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2594.546334][ T31] audit: type=1400 audit(2850.433:422): avc: denied { lock } for pid=18249 comm="syz.1.2314" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2595.543505][T18266] fuse: Bad value for 'fd' [ 2596.121085][T18277] fuse: Bad value for 'fd' [ 2596.561468][T18286] fuse: Bad value for 'fd' [ 2596.780016][ T31] audit: type=1400 audit(2852.673:423): avc: denied { map } for pid=18289 comm="syz.1.2332" path="socket:[31997]" dev="sockfs" ino=31997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2597.022804][T18296] fuse: Bad value for 'fd' [ 2597.207576][T18302] FAULT_INJECTION: forcing a failure. [ 2597.207576][T18302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2597.220405][T18302] CPU: 1 UID: 0 PID: 18302 Comm: syz.0.2336 Not tainted 6.12.0-rc3-syzkaller #0 [ 2597.221105][T18302] Hardware name: ARM-Versatile Express [ 2597.221377][T18302] Call trace: [ 2597.221730][T18302] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2597.222261][T18302] r7:20000480 r6:dfccde30 r5:60000013 r4:8203d3f8 [ 2597.222561][T18302] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2597.222987][T18302] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2597.223394][T18302] r5:00000000 r4:8274e844 [ 2597.223645][T18302] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2597.224054][T18302] [<808e5328>] (should_fail_ex) from [<808e5518>] (should_fail+0x14/0x18) [ 2597.224434][T18302] r6:dfccde30 r5:00000000 r4:dfccdf38 [ 2597.224663][T18302] [<808e5504>] (should_fail) from [<808e5538>] (should_fail_usercopy+0x1c/0x20) [ 2597.225058][T18302] [<808e551c>] (should_fail_usercopy) from [<81486880>] (copy_msghdr_from_user+0x50/0x130) [ 2597.225595][T18302] [<81486830>] (copy_msghdr_from_user) from [<814869d8>] (___sys_sendmsg+0x78/0xd0) [ 2597.226027][T18302] r8:00040001 r7:00000000 r6:84968c80 r5:dfccdf38 r4:dfccde74 [ 2597.226322][T18302] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2597.226693][T18302] r10:00000128 r9:846dec00 r8:8020029c r7:00040001 r6:20000480 r5:84968c80 [ 2597.227038][T18302] r4:00000000 [ 2597.227232][T18302] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2597.227651][T18302] Exception stack(0xdfccdfa8 to 0xdfccdff0) [ 2597.227977][T18302] dfa0: 00000000 00000000 00000003 20000480 00040001 00000000 [ 2597.229141][T18302] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b410bc [ 2597.230220][T18302] dfe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2597.230517][T18302] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2598.324058][T18307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18307 comm=syz.0.2339 [ 2598.343176][T18307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=18307 comm=syz.0.2339 [ 2599.360901][T18316] fuse: Unknown parameter 'grou00000000000000000000' [ 2600.903303][T18330] fuse: Unknown parameter 'grou00000000000000000000' [ 2601.162280][T18336] serio: Serial port pts0 [ 2602.839571][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 390 seconds [ 2603.206696][T18342] serio: Serial port pts1 [ 2604.824198][ T31] audit: type=1400 audit(2860.713:424): avc: denied { getopt } for pid=18349 comm="syz.0.2350" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2605.152340][T18355] fuse: Unknown parameter 'grou00000000000000000000' [ 2605.243486][T18357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18357 comm=syz.0.2352 [ 2605.449684][T18363] FAULT_INJECTION: forcing a failure. [ 2605.449684][T18363] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.450267][T18363] CPU: 1 UID: 0 PID: 18363 Comm: syz.0.2354 Not tainted 6.12.0-rc3-syzkaller #0 [ 2605.450617][T18363] Hardware name: ARM-Versatile Express [ 2605.451226][T18363] Call trace: [ 2605.451381][T18363] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2605.451678][T18363] r7:846dec00 r6:00000dc0 r5:60000013 r4:8203d3f8 [ 2605.451831][T18363] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2605.452039][T18363] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2605.452260][T18363] r5:00000000 r4:8271925c [ 2605.452353][T18363] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2605.452566][T18363] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2605.452784][T18363] r6:00000dc0 r5:826f6690 r4:82c01240 [ 2605.452911][T18363] [<804e81d4>] (should_failslab) from [<804cc688>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2605.453400][T18363] [<804cc63c>] (__kmalloc_cache_noprof) from [<80260330>] (call_usermodehelper_setup+0x48/0xb8) [ 2605.453887][T18363] r10:e0061e8c r9:e0061f10 r8:826f6564 r7:826f6564 r6:84c61040 r5:826f6690 [ 2605.454158][T18363] r4:84c61040 [ 2605.454294][T18363] [<802602e8>] (call_usermodehelper_setup) from [<802f9754>] (__request_module+0x150/0x2c0) [ 2605.454832][T18363] r7:846dec00 r6:84c61600 r5:00000002 r4:84c61040 [ 2605.455053][T18363] [<802f9604>] (__request_module) from [<8169668c>] (tcp_ca_find_autoload+0x88/0xcc) [ 2605.455334][T18363] r3:00000000 r2:e0061e34 r1:822070dc [ 2605.455504][T18363] r8:e0061e8c r7:84c61a40 r6:e0061e34 r5:827e0b80 r4:827e0b40 [ 2605.455751][T18363] [<81696604>] (tcp_ca_find_autoload) from [<81696dac>] (tcp_set_default_congestion_control+0x20/0xf8) [ 2605.456073][T18363] r7:84c61a40 r6:e0061e34 r5:84fac100 r4:e0061e34 [ 2605.456228][T18363] [<81696d8c>] (tcp_set_default_congestion_control) from [<816da0d0>] (proc_tcp_congestion_control+0xd4/0xdc) [ 2605.456557][T18363] r5:84fac100 r4:00000001 [ 2605.456770][T18363] [<816d9ffc>] (proc_tcp_congestion_control) from [<805d0a50>] (proc_sys_call_handler+0x1a8/0x2dc) [ 2605.457091][T18363] r9:85763500 r8:00000000 r7:e0061ef0 r6:816d9ffc r5:00000001 r4:857c1000 [ 2605.457299][T18363] [<805d08a8>] (proc_sys_call_handler) from [<805d0b98>] (proc_sys_write+0x14/0x18) [ 2605.457595][T18363] r10:81a22500 r9:20000300 r8:e0061f68 r7:846dec00 r6:00000007 r5:85127b40 [ 2605.457870][T18363] r4:805d0b84 [ 2605.457992][T18363] [<805d0b84>] (proc_sys_write) from [<805168f4>] (vfs_write+0x274/0x44c) [ 2605.458432][T18363] [<80516680>] (vfs_write) from [<80516c50>] (ksys_write+0x78/0xf8) [ 2605.458658][T18363] r10:00000004 r9:846dec00 r8:8020029c r7:00000000 r6:00000000 r5:85127b40 [ 2605.459356][T18363] r4:85127b43 [ 2605.459571][T18363] [<80516bd8>] (ksys_write) from [<80516ce0>] (sys_write+0x10/0x14) [ 2605.459984][T18363] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 2605.460257][T18363] [<80516cd0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2605.460621][T18363] Exception stack(0xe0061fa8 to 0xe0061ff0) [ 2605.460915][T18363] 1fa0: 00000000 00000000 00000003 20000300 00000007 00000000 [ 2605.461253][T18363] 1fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76b410bc [ 2605.461594][T18363] 1fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2605.603018][T18365] FAULT_INJECTION: forcing a failure. [ 2605.603018][T18365] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.603730][T18365] CPU: 0 UID: 0 PID: 18365 Comm: syz.0.2355 Not tainted 6.12.0-rc3-syzkaller #0 [ 2605.604156][T18365] Hardware name: ARM-Versatile Express [ 2605.604403][T18365] Call trace: [ 2605.604626][T18365] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2605.605052][T18365] r7:846dec00 r6:00000cc0 r5:60000013 r4:8203d3f8 [ 2605.605330][T18365] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2605.605772][T18365] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2605.606154][T18365] r5:00000000 r4:8271925c [ 2605.606364][T18365] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2605.606763][T18365] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2605.607159][T18365] r6:00000cc0 r5:ffffffff r4:82ea1000 [ 2605.607392][T18365] [<804e81d4>] (should_failslab) from [<804ccc70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2605.607825][T18365] [<804ccc20>] (kmem_cache_alloc_node_noprof) from [<814912f8>] (__alloc_skb+0x138/0x160) [ 2605.608539][T18365] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82ea1000 r5:ffffffff [ 2605.609208][T18365] r4:82606000 [ 2605.609426][T18365] [<814911c0>] (__alloc_skb) from [<815a66fc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2605.609952][T18365] r8:00000000 r7:8563bc00 r6:000004a4 r5:84995900 r4:000005c0 [ 2605.610296][T18365] [<815a6674>] (netlink_alloc_large_skb) from [<815a6d04>] (netlink_sendmsg+0x134/0x43c) [ 2605.610778][T18365] r5:84995900 r4:e05a5f38 [ 2605.611012][T18365] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2605.611453][T18365] r10:00000800 r9:e05a5dd4 r8:e05a5dd4 r7:00000000 r6:84995900 r5:e05a5f38 [ 2605.611889][T18365] r4:00000000 [ 2605.612162][T18365] [<81483a4c>] (__sock_sendmsg) from [<81484a94>] (____sys_sendmsg+0x2ac/0x2cc) [ 2605.612874][T18365] r7:00000000 r6:00000000 r5:84995900 r4:e05a5f38 [ 2605.613258][T18365] [<814847e8>] (____sys_sendmsg) from [<814869fc>] (___sys_sendmsg+0x9c/0xd0) [ 2605.613886][T18365] r10:e05a5e34 r9:20000140 r8:00000800 r7:00000000 r6:84995900 r5:e05a5f38 [ 2605.614254][T18365] r4:00000000 [ 2605.614464][T18365] [<81486960>] (___sys_sendmsg) from [<81486f14>] (sys_sendmsg+0x78/0xbc) [ 2605.614900][T18365] r10:00000128 r9:846dec00 r8:8020029c r7:00000800 r6:20000140 r5:84995900 [ 2605.615262][T18365] r4:00000000 [ 2605.615454][T18365] [<81486e9c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2605.615882][T18365] Exception stack(0xe05a5fa8 to 0xe05a5ff0) [ 2605.616208][T18365] 5fa0: 00000000 00000000 00000003 20000140 00000800 00000000 [ 2605.616590][T18365] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b410bc [ 2605.616938][T18365] 5fe0: 76b40ec0 76b40eb0 00018af8 00132ec0 [ 2605.617197][T18365] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2605.714935][T18367] fuse: Unknown parameter 'group_i00000000000000000000' [ 2605.891300][T18371] fuse: Bad value for 'fd' [ 2606.521969][T18380] fuse: Unknown parameter 'group_i00000000000000000000' [ 2606.782583][T18384] fuse: Bad value for 'fd' [ 2607.143784][T18390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=18390 comm=syz.0.2365 [ 2607.169193][T18391] fuse: Unknown parameter 'group_i00000000000000000000' [ 2607.906860][T18410] fuse: Unknown parameter 'group_id00000000000000000000' [ 2608.547824][T18417] FAULT_INJECTION: forcing a failure. [ 2608.547824][T18417] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.555021][T18417] CPU: 0 UID: 0 PID: 18417 Comm: syz.1.2376 Not tainted 6.12.0-rc3-syzkaller #0 [ 2608.556530][T18417] Hardware name: ARM-Versatile Express [ 2608.557834][T18417] Call trace: [ 2608.558152][T18417] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2608.559949][T18417] r7:846dbc00 r6:00000cc0 r5:60000013 r4:8203d3f8 [ 2608.560284][T18417] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2608.560735][T18417] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2608.561174][T18417] r5:00000000 r4:8271925c [ 2608.561420][T18417] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2608.561924][T18417] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2608.562387][T18417] r6:00000cc0 r5:ffffffff r4:82ea1000 [ 2608.562674][T18417] [<804e81d4>] (should_failslab) from [<804ccc70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2608.563180][T18417] [<804ccc20>] (kmem_cache_alloc_node_noprof) from [<814912f8>] (__alloc_skb+0x138/0x160) [ 2608.563695][T18417] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82ea1000 r5:ffffffff [ 2608.564407][T18417] r4:82606000 [ 2608.564674][T18417] [<814911c0>] (__alloc_skb) from [<815a66fc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2608.565314][T18417] r8:00000000 r7:8563bc00 r6:00000010 r5:84995180 r4:00000140 [ 2608.565752][T18417] [<815a6674>] (netlink_alloc_large_skb) from [<815a6d04>] (netlink_sendmsg+0x134/0x43c) [ 2608.566217][T18417] r5:84995180 r4:e0061e68 [ 2608.566455][T18417] [<815a6bd0>] (netlink_sendmsg) from [<81483a90>] (__sock_sendmsg+0x44/0x78) [ 2608.566913][T18417] r10:81c4a040 r9:200002c0 r8:00000000 r7:84995180 r6:84995180 r5:e0061e68 [ 2608.567281][T18417] r4:00000000 [ 2608.567494][T18417] [<81483a4c>] (__sock_sendmsg) from [<81483b64>] (sock_write_iter+0xa0/0xfc) [ 2608.567959][T18417] r7:84995180 r6:8512c6c0 r5:e0061f08 r4:e0061ef0 [ 2608.568540][T18417] [<81483ac4>] (sock_write_iter) from [<80516a28>] (vfs_write+0x3a8/0x44c) [ 2608.569231][T18417] r7:846dbc00 r6:00000010 r5:8512c6c0 r4:00000000 [ 2608.569567][T18417] [<80516680>] (vfs_write) from [<80516c9c>] (ksys_write+0xc4/0xf8) [ 2608.570114][T18417] r10:00000004 r9:846dbc00 r8:8020029c r7:00000010 r6:200002c0 r5:8512c6c0 [ 2608.570530][T18417] r4:8512c6c1 [ 2608.570761][T18417] [<80516bd8>] (ksys_write) from [<80516ce0>] (sys_write+0x10/0x14) [ 2608.571174][T18417] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 2608.571519][T18417] [<80516cd0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2608.571976][T18417] Exception stack(0xe0061fa8 to 0xe0061ff0) [ 2608.572291][T18417] 1fa0: 00000000 00000000 00000003 200002c0 00000010 00000000 [ 2608.572705][T18417] 1fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76bc10bc [ 2608.573194][T18417] 1fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 2608.791447][T18422] fuse: Unknown parameter 'group_id00000000000000000000' [ 2609.502394][T18435] fuse: Unknown parameter 'group_id00000000000000000000' [ 2609.927916][T18444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18444 comm=syz.1.2387 [ 2609.948839][T18444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=18444 comm=syz.1.2387 [ 2610.047048][T18446] fuse: Bad value for 'user_id' [ 2610.047344][T18446] fuse: Bad value for 'user_id' [ 2610.476175][T18455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=18455 comm=syz.1.2392 [ 2611.582828][T18468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=18468 comm=syz.1.2398 [ 2612.885925][T18470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18470 comm=syz.1.2399 [ 2618.244023][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 2631.454549][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'. [ 2633.320778][ T42] block nbd0: Possible stuck request 83a60200: control (read@0,11264B). Runtime 420 seconds [ 2642.281444][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2642.303009][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2643.720823][ T31] audit: type=1400 audit(2899.613:425): avc: denied { create } for pid=18732 comm="syz.1.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2644.113281][T18516] hsr_slave_0: entered promiscuous mode [ 2644.117970][T18516] hsr_slave_1: entered promiscuous mode [ 2644.123225][T18516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2644.123700][T18516] Cannot create hsr debugfs directory [ 2644.737161][T18516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2644.836928][T18516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2644.934191][T18516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.022272][T18516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.240345][T18516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2645.253295][T18516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2645.277378][T18516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2645.307353][T18516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2645.884060][T18856] FAULT_INJECTION: forcing a failure. [ 2645.884060][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.884716][T18856] CPU: 1 UID: 0 PID: 18856 Comm: syz.1.2419 Not tainted 6.12.0-rc3-syzkaller #0 [ 2645.885054][T18856] Hardware name: ARM-Versatile Express [ 2645.885276][T18856] Call trace: [ 2645.885486][T18856] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2645.885905][T18856] r7:00000d40 r6:851fbc28 r5:60000013 r4:8203d3f8 [ 2645.886151][T18856] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2645.886470][T18856] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2645.886858][T18856] r5:00000000 r4:8271925c [ 2645.887063][T18856] [<819b7a0c>] (dump_stack) from [<808e54b4>] (should_fail_ex+0x18c/0x1dc) [ 2645.887436][T18856] [<808e5328>] (should_fail_ex) from [<804e8240>] (should_failslab+0x6c/0x94) [ 2645.887819][T18856] r6:851fbc28 r5:00000019 r4:82c01240 [ 2645.888046][T18856] [<804e81d4>] (should_failslab) from [<804cd660>] (__kmalloc_noprof+0x9c/0x458) [ 2645.888651][T18856] [<804cd5c4>] (__kmalloc_noprof) from [<80750f18>] (tomoyo_encode2+0x64/0xf0) [ 2645.889135][T18856] r10:00000fff r9:82f90000 r8:00000000 r7:830af880 r6:851fbc28 r5:85e76ffd [ 2645.889791][T18856] r4:85e76fef [ 2645.890632][T18856] [<80750eb4>] (tomoyo_encode2) from [<80750fc8>] (tomoyo_encode+0x24/0x30) [ 2645.892374][T18856] r9:82f90000 r8:00000000 r7:830af880 r6:851fbc28 r5:00001000 r4:85e76ff0 [ 2645.892723][T18856] [<80750fa4>] (tomoyo_encode) from [<80751054>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2645.893132][T18856] r5:00001000 r4:85e76000 [ 2645.893336][T18856] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2645.893810][T18856] r10:8502a400 r9:00000000 r8:00000003 r7:0000891c r6:00000004 r5:81ad1828 [ 2645.894144][T18856] r4:851fbc28 r3:824ba340 [ 2645.894343][T18856] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 2645.894772][T18856] r9:851fbc00 r8:00000003 r7:200000c0 r6:200000c0 r5:0000891c r4:851fbc00 [ 2645.895111][T18856] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 2645.895517][T18856] [<80700008>] (security_file_ioctl) from [<8052f628>] (sys_ioctl+0x50/0xda8) [ 2645.895906][T18856] r7:200000c0 r6:851fbc01 r5:00000000 r4:0000891c [ 2645.896175][T18856] [<8052f5d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2645.896533][T18856] Exception stack(0xeb151fa8 to 0xeb151ff0) [ 2645.896809][T18856] 1fa0: 00000000 00000000 00000003 0000891c 200000c0 00000000 [ 2645.897164][T18856] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc10bc [ 2645.897511][T18856] 1fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 2645.897809][T18856] r10:00000036 r9:8502a400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2645.898185][T18856] r4:00000000 [ 2645.910236][T18856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2648.498058][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2653.705343][T18516] veth0_vlan: entered promiscuous mode [ 2653.736757][T18516] veth1_vlan: entered promiscuous mode [ 2653.838971][T18516] veth0_macvtap: entered promiscuous mode [ 2653.844852][T18516] veth1_macvtap: entered promiscuous mode [ 2653.920184][T18516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.920526][T18516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.920758][T18516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.920968][T18516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2654.964038][T18884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18884 comm=syz.1.2426 [ 2655.970187][ T32] INFO: task syz.0.1818:15280 blocked for more than 430 seconds. [ 2655.970965][ T32] Not tainted 6.12.0-rc3-syzkaller #0 [ 2655.971291][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2655.973602][ T32] task:syz.0.1818 state:D stack:0 pid:15280 tgid:15277 ppid:11852 flags:0x00000001 [ 2655.974700][ T32] Call trace: [ 2655.974940][ T32] [<819bb914>] (__schedule) from [<819bc554>] (schedule+0x2c/0xfc) [ 2655.976233][ T32] r10:ecbd9c64 r9:82605718 r8:82604ec0 r7:00000000 r6:00000000 r5:00000000 [ 2655.977068][ T32] r4:83491800 [ 2655.977319][ T32] [<819bc528>] (schedule) from [<819bc65c>] (io_schedule+0x38/0x48) [ 2655.977745][ T32] r5:00000000 r4:83491800 [ 2655.977936][ T32] [<819bc624>] (io_schedule) from [<8043d3ec>] (folio_wait_bit_common+0x190/0x3a8) [ 2655.981424][ T32] r5:83491800 r4:00000002 [ 2655.981816][ T32] [<8043d25c>] (folio_wait_bit_common) from [<80440da8>] (__filemap_get_folio+0x198/0x3d8) [ 2655.982287][ T32] r10:ffffffff r9:00000000 r8:83089030 r7:00000000 r6:00000000 r5:00000002 [ 2655.982583][ T32] r4:ddeace74 [ 2655.982749][ T32] [<80440c10>] (__filemap_get_folio) from [<804531e0>] (truncate_inode_pages_range+0x1c0/0x570) [ 2655.983143][ T32] r9:00000000 r8:ffffffff r7:00000000 r6:00000000 r5:ecbd9cf0 r4:83089030 [ 2655.983835][ T32] [<80453020>] (truncate_inode_pages_range) from [<804535b0>] (truncate_inode_pages+0x20/0x28) [ 2655.984519][ T32] r10:000000b4 r9:838aa12c r8:83088cc0 r7:00000000 r6:83088cc0 r5:ffffffff [ 2655.985263][ T32] r4:ffffffff [ 2655.985560][ T32] [<80453590>] (truncate_inode_pages) from [<807b5780>] (blkdev_flush_mapping+0x68/0x138) [ 2655.986045][ T32] r5:7fffffff r4:83089030 [ 2655.986350][ T32] [<807b5718>] (blkdev_flush_mapping) from [<807b58ac>] (blkdev_put_whole+0x5c/0x60) [ 2655.986864][ T32] r9:838aa12c r8:83088cc0 r7:00000000 r6:838aa000 r5:8500a9c0 r4:83088cc0 [ 2655.987209][ T32] [<807b5850>] (blkdev_put_whole) from [<807b6a8c>] (bdev_release+0x10c/0x1a0) [ 2655.987581][ T32] r5:8500a9c0 r4:83088f28 [ 2655.987763][ T32] [<807b6980>] (bdev_release) from [<807b6fc8>] (blkdev_release+0x14/0x1c) [ 2655.988803][ T32] r9:83491800 r8:850abc10 r7:8389ce58 r6:8302cf68 r5:084a001d r4:8500a9c0 [ 2655.989154][ T32] [<807b6fb4>] (blkdev_release) from [<805181ec>] (__fput+0xdc/0x2e4) [ 2655.989710][ T32] [<80518110>] (__fput) from [<8051847c>] (____fput+0x14/0x18) [ 2655.990048][ T32] r9:83491800 r8:82871694 r7:83491800 r6:83492084 r5:83492054 r4:00000000 [ 2655.990349][ T32] [<80518468>] (____fput) from [<8026c5cc>] (task_work_run+0x90/0xb8) [ 2655.990666][ T32] [<8026c53c>] (task_work_run) from [<8020bde0>] (do_work_pending+0x448/0x4f8) [ 2655.991477][ T32] r9:83491800 r8:8020029c r7:000000b4 r6:8020029c r5:ecbd9fb0 r4:83491800 [ 2655.991840][ T32] [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 2655.992417][ T32] Exception stack(0xecbd9fb0 to 0xecbd9ff8) [ 2655.992672][ T32] 9fa0: fffffffc 20000240 00000046 0000052c [ 2655.993141][ T32] 9fc0: 00000000 00000000 00286384 000000b4 00000000 00006364 003d0f00 76bb40bc [ 2655.993478][ T32] 9fe0: 76bb3ec0 76bb3eb0 00018af8 00132ec0 60000010 00000004 [ 2655.993894][ T32] r10:000000b4 r9:83491800 r8:8020029c r7:000000b4 r6:00286384 r5:00000000 [ 2655.994292][ T32] r4:00000000 [ 2655.995148][ T32] NMI backtrace for cpu 0 [ 2655.995469][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller #0 [ 2655.995809][ T32] Hardware name: ARM-Versatile Express [ 2655.996235][ T32] Call trace: [ 2655.996677][ T32] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2655.997132][ T32] r7:00000000 r6:00000113 r5:60000193 r4:8203d3f8 [ 2655.997628][ T32] [<8199953c>] (show_stack) from [<819b7a00>] (dump_stack_lvl+0x70/0x7c) [ 2655.998060][ T32] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2655.998751][ T32] r5:00000000 r4:00000001 [ 2655.999113][ T32] [<819b7a0c>] (dump_stack) from [<81986718>] (nmi_cpu_backtrace+0x160/0x17c) [ 2655.999663][ T32] [<819865b8>] (nmi_cpu_backtrace) from [<81986864>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 2656.000409][ T32] r7:00000000 r6:8260c5d0 r5:8261af0c r4:ffffffff [ 2656.000862][ T32] [<81986734>] (nmi_trigger_cpumask_backtrace) from [<802103e8>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 2656.001414][ T32] r9:00039844 r8:828b6cf8 r7:8260c730 r6:00007f2d r5:8261b4c8 r4:84535d1c [ 2656.001780][ T32] [<802103d0>] (arch_trigger_cpumask_backtrace) from [<803581b0>] (watchdog+0x498/0x5b8) [ 2656.002256][ T32] [<80357d18>] (watchdog) from [<8026fc90>] (kthread+0x104/0x134) [ 2656.002666][ T32] r10:00000000 r9:df819e58 r8:82f23ac0 r7:00000000 r6:80357d18 r5:82e59800 [ 2656.003148][ T32] r4:82ec92c0 [ 2656.003397][ T32] [<8026fb8c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2656.003772][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2656.004137][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2656.004793][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2656.005248][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2656.005690][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb8c r4:82ec92c0 [ 2656.007224][ T32] Sending NMI from CPU 0 to CPUs 1: [ 2656.007943][ C1] NMI backtrace for cpu 1 [ 2656.008274][ C1] CPU: 1 UID: 0 PID: 2927 Comm: syslogd Not tainted 6.12.0-rc3-syzkaller #0 [ 2656.008412][ C1] Hardware name: ARM-Versatile Express [ 2656.008471][ C1] PC is at kmem_cache_free+0x9c/0x494 [ 2656.008575][ C1] LR is at _raw_spin_unlock_irqrestore+0x30/0x54 [ 2656.008634][ C1] pc : [<804ca670>] lr : [<819c4d70>] psr: 60000113 [ 2656.008672][ C1] sp : ec391d10 ip : 828dd084 fp : ec391d5c [ 2656.008702][ C1] r10: 00000000 r9 : 83d53000 r8 : 000b5ecc [ 2656.008741][ C1] r7 : 81492320 r6 : ddeaeecc r5 : 850db540 r4 : 82ea1000 [ 2656.008796][ C1] r3 : 83d53000 r2 : 00000000 r1 : 00000000 r0 : 00000001 [ 2656.008932][ C1] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 2656.009011][ C1] Control: 30c5387d Table: 8439f180 DAC: 00000000 [ 2656.009104][ C1] Call trace: [ 2656.009159][ C1] [<804ca5d4>] (kmem_cache_free) from [<81492320>] (kfree_skbmem+0x94/0xa8) [ 2656.009256][ C1] r10:00000000 r9:00000070 r8:00000070 r7:83071b80 r6:82e1b23c r5:8149f404 [ 2656.009282][ C1] r4:850db540 [ 2656.009297][ C1] [<8149228c>] (kfree_skbmem) from [<81499ea8>] (consume_skb+0x84/0x130) [ 2656.009355][ C1] [<81499e24>] (consume_skb) from [<8149f404>] (skb_free_datagram+0x14/0x18) [ 2656.009441][ C1] r7:83071b80 r6:82e1b23c r5:82e1b000 r4:850db540 [ 2656.009465][ C1] [<8149f3f0>] (skb_free_datagram) from [<81748ff8>] (__unix_dgram_recvmsg+0x2c4/0x4c8) [ 2656.009575][ C1] [<81748d34>] (__unix_dgram_recvmsg) from [<81749240>] (unix_dgram_recvmsg+0x44/0x4c) [ 2656.009658][ C1] r10:00000001 r9:00000000 r8:01fa41d0 r7:00000000 r6:83071b80 r5:ec391e68 [ 2656.009681][ C1] r4:817491fc [ 2656.009700][ C1] [<817491fc>] (unix_dgram_recvmsg) from [<814836d4>] (sock_recvmsg+0x50/0x78) [ 2656.009775][ C1] r4:817491fc [ 2656.009794][ C1] [<81483684>] (sock_recvmsg) from [<814837a0>] (sock_read_iter+0xa4/0xfc) [ 2656.009869][ C1] r7:83071b80 r6:82f6de40 r5:ec391f08 r4:ec391ef0 [ 2656.009885][ C1] [<814836fc>] (sock_read_iter) from [<805160f0>] (vfs_read+0x2f4/0x324) [ 2656.009965][ C1] r7:00000000 r6:83d53000 r5:000000ff r4:82f6de40 [ 2656.009985][ C1] [<80515dfc>] (vfs_read) from [<80516b90>] (ksys_read+0xc4/0xf8) [ 2656.010059][ C1] r10:00000003 r9:83d53000 r8:8020029c r7:000000ff r6:01fa41d0 r5:82f6de40 [ 2656.010080][ C1] r4:82f6de40 [ 2656.010097][ C1] [<80516acc>] (ksys_read) from [<80516bd4>] (sys_read+0x10/0x14) [ 2656.010165][ C1] r7:00000003 r6:01fa42d0 r5:76f265a0 r4:fffffc00 [ 2656.010180][ C1] [<80516bc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2656.010243][ C1] Exception stack(0xec391fa8 to 0xec391ff0) [ 2656.010286][ C1] 1fa0: fffffc00 76f265a0 00000000 01fa41d0 000000ff 00000000 [ 2656.010322][ C1] 1fc0: fffffc00 76f265a0 01fa42d0 00000003 00000000 01fa41c8 76ee854c 76ee8548 [ 2656.010351][ C1] 1fe0: 76ee79f8 7eb35c70 76e5d2ec 76d6b2fc [ 2656.014031][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2656.024380][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller #0 [ 2656.024916][ T32] Hardware name: ARM-Versatile Express [ 2656.025188][ T32] Call trace: [ 2656.025491][ T32] [<81999458>] (dump_backtrace) from [<81999554>] (show_stack+0x18/0x1c) [ 2656.026018][ T32] r7:00000000 r6:82622f44 r5:00000000 r4:8203d3f8 [ 2656.026320][ T32] [<8199953c>] (show_stack) from [<819b79e4>] (dump_stack_lvl+0x54/0x7c) [ 2656.026700][ T32] [<819b7990>] (dump_stack_lvl) from [<819b7a24>] (dump_stack+0x18/0x1c) [ 2656.027114][ T32] r5:00000000 r4:82870d18 [ 2656.027357][ T32] [<819b7a0c>] (dump_stack) from [<8199a080>] (panic+0x120/0x374) [ 2656.027692][ T32] [<81999f60>] (panic) from [<80358030>] (watchdog+0x318/0x5b8) [ 2656.028470][ T32] r3:00000000 r2:00000000 r1:00000001 r0:8203def8 [ 2656.028896][ T32] r7:8260c730 [ 2656.029063][ T32] [<80357d18>] (watchdog) from [<8026fc90>] (kthread+0x104/0x134) [ 2656.029465][ T32] r10:00000000 r9:df819e58 r8:82f23ac0 r7:00000000 r6:80357d18 r5:82e59800 [ 2656.029961][ T32] r4:82ec92c0 [ 2656.030255][ T32] [<8026fb8c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2656.030705][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 2656.030998][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 2656.031668][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2656.032138][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2656.032680][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb8c r4:82ec92c0 [ 2656.034782][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:27:14 Registers: info registers vcpu 0 CPU#0 R00=827584d8 R01=00000000 R02=00000002 R03=eb06d030 R04=83886440 R05=60000193 R06=60000113 R07=00000001 R08=8287341c R09=00000058 R10=00000001 R11=df8e1d20 R12=df8e1ce4 R13=df8e1cfc R14=819c48c4 R15=809ecbd0 PSR=80000193 N--- A S svc32 s00=0c000000 s01=00000000 d00=000000000c000000 s02=fc000000 s03=0001cdfe d01=0001cdfefc000000 s04=fc000000 s05=ffffffff d02=fffffffffc000000 s06=fc000000 s07=ffffffff d03=fffffffffc000000 s08=ff6e171f s09=00b098ed d04=00b098edff6e171f s10=ffffffff s11=00000000 d05=00000000ffffffff s12=fee4d67a s13=004e8172 d06=004e8172fee4d67a s14=ffffffff s15=00000000 d07=00000000ffffffff s16=fe000000 s17=06cb2a1c d08=06cb2a1cfe000000 s18=e6000000 s19=0001536e d09=0001536ee6000000 s20=ffc42c6c s21=004e8173 d10=004e8173ffc42c6c s22=ffffffff s23=00000000 d11=00000000ffffffff s24=0d6e171f s25=00000000 d12=000000000d6e171f s26=fc000000 s27=0001cdfe d13=0001cdfefc000000 s28=02000000 s29=00000000 d14=0000000002000000 s30=02000000 s31=00000000 d15=0000000002000000 s32=fe1f2f5f s33=ff2fdb21 d16=ff2fdb21fe1f2f5f s34=ffffffff s35=ffffffff d17=ffffffffffffffff s36=007aa3d4 s37=00911a7e d18=00911a7e007aa3d4 s38=00000000 s39=00000000 d19=0000000000000000 s40=01000000 s41=00000000 d20=0000000001000000 s42=01fd2659 s43=00000000 d21=0000000001fd2659 s44=00000003 s45=00000000 d22=0000000000000003 s46=00a9b773 s47=00000000 d23=0000000000a9b773 s48=feea6af4 s49=06cb2a1c d24=06cb2a1cfeea6af4 s50=0c989d89 s51=00000000 d25=000000000c989d89 s52=ffd7bff4 s53=fe2d5b74 d26=fe2d5b74ffd7bff4 s54=00ead8da s55=01363868 d27=0136386800ead8da s56=ff8c9b6e s57=00502f0a d28=00502f0aff8c9b6e s58=00281785 s59=00ead8da d29=00ead8da00281785 s60=fccddfe4 s61=0001cdfe d30=0001cdfefccddfe4 s62=86d57996 s63=fff5e8ff d31=fff5e8ff86d57996 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=000813fc R02=7ef2d000 R03=00000000 R04=00000007 R05=7ec4c150 R06=005b2b58 R07=00000000 R08=00000000 R09=7ec4c1fc R10=7ec4c27c R11=7ec4c134 R12=7ec4c138 R13=7ec4c0f0 R14=7ef2e4d8 R15=7ef2e518 PSR=20000010 --C- A S usr32 s00=05ec76f0 s01=00000001 d00=0000000105ec76f0 s02=dea713f1 s03=00000000 d01=00000000dea713f1 s04=630cd70b s05=b9c346b8 d02=b9c346b8630cd70b s06=00000000 s07=00000000 d03=0000000000000000 s08=39fcfc90 s09=62c44bea d04=62c44bea39fcfc90 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=00000000 d06=00000000ffffffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=aaf647d2 s21=0032f8df d10=0032f8dfaaf647d2 s22=6a579e6d s23=00000000 d11=000000006a579e6d s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000