last executing test programs: 5m15.121887945s ago: executing program 0 (id=1130): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0xa1ffffff, {0x7, 0x0, 0x0, r2, 0x0, 0xe2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x800) 5m11.251984856s ago: executing program 0 (id=1131): socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) 5m6.881546503s ago: executing program 0 (id=1136): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000001cc0)=[{0x0, 0x3f}, {&(0x7f0000000cc0)="b04a9b7ad16f67046ac04d8aed395a02bef8b411b064e2e408f9e2b57b23d68d7ea2e6da3bddd88727b157ce0dda2e73cc63a6528c32fc5a6d0819085e72e900cba2d134eb7ce39275edd4a0978c8bb1a1bc49633563f60ceeaff2e454c3dfd009755fbfbf985f8ff7ba0867013f9201f72ad5d749c130890be48214de303259a42b665ce2726367a4f51f78bc49f74b3d0625c708b20c9499608f02a75597fe1c990f830ad83893404ebaa3e99f974d2250d9e55c31df64f1c82680737f40dc2f89f6bfd77667b8a119a8a46ad9982e5d59e46c762b1bdf783700a2184878a4b35c11c3a207f96d5788967d58f09c34641fac81a7ab4693952a60105f64eba1a5a8303fe0c7263e29182627c9bbacb5c41e7400637c67b3ec239f297dc6df3b6485c3e3f2deae144be36287c2ca503f2c91b90d582b34fbdfdea0b0dc9392b6d8c1f2baa4039f6747158636e11185e6fa8b098d9487db4c854ed3e5d9083d9e5145b1421559050bc39371f5c2f1e0c8a2050b91011891d521039377de7616434af549423057c4302550fe0693f1283292e422d7f3228ba64564dcd473166491e1818fbfbdd915bad584ea122324ec85e9627f5d0b8ca4fa9c97d8fac8d552e61d71eea2a0e163c46e471a293768bf33f6d2fc600e8bcbf192b4834535fb7c36e0637fdefe114875c71952ed00e3de08602d86bbaef731a773f0d8b25c6b4f06ae6c526bc1abd0d0ed63d18011856ade0d415876606cdb85ee680f0c43248783b32cae1b5fd0882122f8272c0e40fdbf7f2a4558e6b32be057dd9bcb935e5a9fc8586f2625e88ffa358daf66cad538b70a7f6ddbc8227d4981398477b6511a35309605dbfcfb8b450dd2d9c01f330afc97055761a7f83e0d04a548ec18997e5f6b88df466eda9fb98678d2a1520de9e2a6f048d5742cb131393e595c797cf2f4d563190e54d7b5009419057361fec8054e2ae5c423b4e6036ac7683fd502f4f6fa48223ef66b1c9cb4a4ffd9395bd74910f2493863d16b6fa8f05bf85969c1635e5c2eded372f270e7b22d3f8f2d47ba3d052b88900ba6e1d5571cf94297e1fba270b19093e78a72f52e93c152f3b871568752af9ca10fc19914e444ff52629968030030edc8247d9f970c79e5dc52e5dc979825477ab00059229a3f7587e4b11c91ede85fdf218269ee5bf3bb2f93bebe74da16d16c7b2525969d0fcab576dd603bbe4ea3ee60a762a8614e326307de54a596695864af7869adfc5687fe6e6e815ae94940550d89f1672d0bb768d9abf025953772a2d57f982728af35e5c4c2a498aaecd81394f947bf753b6dfe63ec80dff1ad952f243a4f67ffde7b9e9d194bff6dfa1e28bfa996dbbd2b30b6cb97fb06da235687403d9f481bdd4f4f9e213f5a34798f270290bfa6f7efea829c5448813422015e1937d5c387a056f3be283cccc5e962a6c67b65c0693f1e2f1dcb5d21cdbc1c37e12709cd285c97a5dad5e34529f39100657e09b33d1bacbe85586c64640fbbb9bab73222dd4274621232495c7597378ff0781aab0f9a22538f45dfa24c9ce09187947341a1b75e0a36412a11e09bc2a13c6988f616af953493841fb9b11eba7f734f0f71b4a472bae7ba0a03c0f63ae086d17091da0a9685beee98c7b2cffd6b3664678c33c0691107a104604bbb20019d0a0c478df3846d9cce411174730e565d1532cc372b8c8734948286baeea82175310d28281e11859a341fa26114f25c36c44fdfc8d5c4af153620da4c48fef641c7b572e96eeb39324511872fa9a641593cce1902716cdc7771b8618f88f9b75fad51da36e89e1ef80c532190e89d48aa3042ceff3f41122517147f60c32838d395cb08a761b86eefeac82c7d8dc4fc6f0d6f64ac97856d22e4b59a433881ad29a1695f616c6fbc1d4f3874e406a2dd70c5cf36a55232044e32b69032e0836a047dc20703f4ab177c8dc87dc07c3dd163d57d6d3a1601f8cefb881fe99fe6dffd12e61ceb9a81c59fc451a3280770eae1dff30ad04f917b36da7f86b012af1eeea053c27fefeffcd0c616de771d279b26c2a1aa5757a8fb4afd0aff6018616ffec0be931a698f9366893a19f013525899dfde0a7eaf1d80f31c8f08eba16affe6282b7ceb7f3e9d5b065cb612bfebd375d9eede211f53affbd6debc7408bd3a3aa0fc44547070cfc9f751a90e25b81df2ae1451b9b1873c38430bc01baf115df2410b00f930f60caa211deea3b74b687673dde7e6f6b1578f2f44fda60db5c78d2fb46653961a21c16b65e9bc44969be5ff65f0ffb75f2de4591bfd5e46ad6958d6863975c38150d0ac53834d4f1865910e4beb639b9985ed60d2f170517da3506c89ba89e6d587513a60ed2ea458a0962f34c35e60fd94f7e820c73a60976162fc8b03a5f3a221c0157ccc2290a436b362e1f479def9253dfbd7f67a39be6404afb8b759ed8c3c7f69b6bb1e1b98d5bf0d3272388c23764e708cfb0f2af3d8290a70b8141434dc6e8ce441d7e80da0644db45e3c5491463f5f66a77132c089de81207bd1a68cf07e3de8532f835f1b506d6c336fe1f7a5644b7e0b97b7462e4fffd63d70cb37217057e56dd50e0c47214121d3d5bedf0b43cafb6a37a1ad8c2f2ce5c755d230e39ca1b774a74c4f0e035c48b6d8c073919379ccf572b6fcf64836d99cd99ed6573a377aace6fb8e57999ba48578b7d6a767e42bb4477588ecfa5d17f24c1b098970b68c507e354eecb0bfd135510e54f86b06d5a325b0518242ff8e9630ce1c1ae3305d04cedd3d072632323055d8f7f15376a6afaca6faa8b37669e5e925f576b206789773b70b2139811df3ce5be55b3808899f5a05fa95e8a52a1d0cb951c33ba013b4028015d5b81c144107a6906bb6ee1294548607fc40b70f344e2c51620c553ddec499cde74b7f2c78d37aa1d7ed883c486c91f35ddb0e00869dff755d2e9f656e1fea0fe00e2e0955ec8d4b2a3eff60d10f3f0df26f4dbd0c53145b3a129f800e29237523651d0a07e6a9822cb97b5e2b7c64878aae00a09d2648903c89e423db1a2bd3eea55d88934e60db0f9b46f8965cf7588099a59b9db66fc481c885d3cf6b93defe5fd845fde9fe7299b8b4b3325e33fcdc1c652625cb6b301663d1f092e8bc4b3781a8f08e4e8ffc0173ff2ebb4b7b", 0x8c4}], 0x2) 5m2.856955889s ago: executing program 0 (id=1140): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) 4m58.013269618s ago: executing program 0 (id=1142): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 4m51.682568373s ago: executing program 0 (id=1143): add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000140)="1e4ea861a32adce984fdbf4447738b1392e54d8a321302485cdea2e2c2e43ea34fb9fa393e1a700f7b56c748316f884115dfbcd8821408d520b082c92b07211607bfa709ab2d1b2b6c60d5a653589679a47890164328a8af07591a0f54a3be1a50e74ac07cabefca074718936189fd39c807da8bf8851ffacaa1fc516894c5170e37d77500a6f76de1e4f27771affe0c06c6bbd410ca800138587a07cdc98f5d710a807b4ddd19bbd1ebcc23033e3dd6b7fe92eedcf3d02fe8cb08c60195d377933bcc693df172f59e598921ab41daed37f3", 0xd2, 0xfffffffffffffffa) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 4m5.930847258s ago: executing program 32 (id=1143): add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000140)="1e4ea861a32adce984fdbf4447738b1392e54d8a321302485cdea2e2c2e43ea34fb9fa393e1a700f7b56c748316f884115dfbcd8821408d520b082c92b07211607bfa709ab2d1b2b6c60d5a653589679a47890164328a8af07591a0f54a3be1a50e74ac07cabefca074718936189fd39c807da8bf8851ffacaa1fc516894c5170e37d77500a6f76de1e4f27771affe0c06c6bbd410ca800138587a07cdc98f5d710a807b4ddd19bbd1ebcc23033e3dd6b7fe92eedcf3d02fe8cb08c60195d377933bcc693df172f59e598921ab41daed37f3", 0xd2, 0xfffffffffffffffa) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 3m58.663089968s ago: executing program 1 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e0001000000080017"], 0x2c}}, 0x0) 3m57.963746552s ago: executing program 1 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000817}, 0x80d0) 3m57.134479397s ago: executing program 1 (id=1164): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140), 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e23, @loopback}, @vsock={0x28, 0x0, 0x2711, @local}, @phonet={0x23, 0x37, 0x0, 0x3}, 0x7ff, 0x0, 0x0, 0x0, 0x24f2, 0x0, 0x2, 0xf93, 0x5}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) 3m53.612697277s ago: executing program 1 (id=1165): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x1, 0x26, 0x4}) 3m52.212965174s ago: executing program 1 (id=1166): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f501}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x8084) 3m50.461343123s ago: executing program 1 (id=1167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m4.527670654s ago: executing program 33 (id=1167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.570017512s ago: executing program 2 (id=1341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 13.34218563s ago: executing program 2 (id=1342): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000018}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x824064, 0x0) 13.231813803s ago: executing program 2 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000007b002300430000000100000090"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) 13.091535081s ago: executing program 2 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffff7ffbdbdf250500000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 12.702800778s ago: executing program 2 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000190001090000000000000000021800080000fd010000000008000100ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.602837541s ago: executing program 2 (id=1346): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.090128907s ago: executing program 3 (id=1350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x104, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 3.600824407s ago: executing program 3 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x38}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)='\a', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9c07}]}}]}, 0x38}}, 0x4080040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000008000fbdbdf251c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x40006) 1.968109428s ago: executing program 3 (id=1352): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x4, "abacd211119c871663376126aab5ab0006278ee042000000e4ffffffffffffff", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(0x4) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 977.8352ms ago: executing program 3 (id=1353): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2ce42, 0x8) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xffffffef, 0x94d, 0x0) 508.423007ms ago: executing program 3 (id=1354): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x1, 0x26, 0x4}) 0s ago: executing program 3 (id=1355): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x22800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x3, [0x0], [0x0, 0xfffffffc], [0x0, 0x3c, 0x2], [0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) kernel console output (not intermixed with test programs): _usercopy) from [<80590874>] (simple_read_from_buffer+0x80/0x13c) [ 357.979128][ T5115] [<805907f4>] (simple_read_from_buffer) from [<806089b8>] (proc_fail_nth_read+0xb8/0x100) [ 357.979204][ T5115] r10:00000001 r9:80608900 r8:00000002 r7:ec569f68 r6:0000000f r5:76bddf30 [ 357.979230][ T5115] r4:84480c00 r3:ec569e9f [ 357.979257][ T5115] [<80608900>] (proc_fail_nth_read) from [<80555098>] (vfs_read+0x98/0x320) [ 357.979346][ T5115] r8:76bddf30 r7:ec569f68 r6:84480c00 r5:0000000f r4:85428c00 [ 357.979366][ T5115] [<80555000>] (vfs_read) from [<80555d40>] (ksys_read+0x74/0xe8) [ 357.979427][ T5115] r10:00000003 r9:84480c00 r8:8020029c r7:00000000 r6:00000000 r5:85428c00 [ 357.979450][ T5115] r4:85428c03 [ 357.979466][ T5115] [<80555ccc>] (ksys_read) from [<80555dc4>] (sys_read+0x10/0x14) [ 357.979526][ T5115] r7:00000003 r6:00000006 r5:76bddf30 r4:0000000f [ 357.979544][ T5115] [<80555db4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 357.979592][ T5115] Exception stack(0xec569fa8 to 0xec569ff0) [ 357.979632][ T5115] 9fa0: 0000000f 76bddf30 00000006 76bddf30 0000000f 00000000 [ 357.979667][ T5115] 9fc0: 0000000f 76bddf30 00000006 00000003 002d0000 00000000 00006364 76bde0bc [ 357.979694][ T5115] 9fe0: 00000158 76bdded0 000d7d50 0012fdf4 [ 359.388381][ T5123] FAULT_INJECTION: forcing a failure. [ 359.388381][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.456688][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.0.417 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 359.456796][ T5123] Hardware name: ARM-Versatile Express [ 359.456820][ T5123] Call trace: [ 359.456859][ T5123] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 359.456973][ T5123] r7:00000000 r6:00000000 r5:60000013 r4:82259c04 [ 359.456995][ T5123] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 359.457069][ T5123] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 359.457151][ T5123] r5:84486000 r4:82950490 [ 359.457166][ T5123] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 359.457250][ T5123] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 359.457320][ T5123] r8:76bddf30 r7:00000000 r6:00000000 r5:dfe49f68 r4:00000002 [ 359.457335][ T5123] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 359.457391][ T5123] [<8096b798>] (should_fail_usercopy) from [<80590874>] (simple_read_from_buffer+0x80/0x13c) [ 359.457450][ T5123] [<805907f4>] (simple_read_from_buffer) from [<806089b8>] (proc_fail_nth_read+0xb8/0x100) [ 359.457519][ T5123] r10:00000001 r9:80608900 r8:00000002 r7:dfe49f68 r6:0000000f r5:76bddf30 [ 359.457539][ T5123] r4:84486000 r3:dfe49e9f [ 359.457553][ T5123] [<80608900>] (proc_fail_nth_read) from [<80555098>] (vfs_read+0x98/0x320) [ 359.457616][ T5123] r8:76bddf30 r7:dfe49f68 r6:84486000 r5:0000000f r4:851333c0 [ 359.457634][ T5123] [<80555000>] (vfs_read) from [<80555d40>] (ksys_read+0x74/0xe8) [ 359.457691][ T5123] r10:00000003 r9:84486000 r8:8020029c r7:00000000 r6:00000000 r5:851333c0 [ 359.457708][ T5123] r4:851333c3 [ 359.457722][ T5123] [<80555ccc>] (ksys_read) from [<80555dc4>] (sys_read+0x10/0x14) [ 359.457775][ T5123] r7:00000003 r6:00000004 r5:76bddf30 r4:0000000f [ 359.457789][ T5123] [<80555db4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 359.457833][ T5123] Exception stack(0xdfe49fa8 to 0xdfe49ff0) [ 359.457868][ T5123] 9fa0: 0000000f 76bddf30 00000004 76bddf30 0000000f 00000000 [ 359.457899][ T5123] 9fc0: 0000000f 76bddf30 00000004 00000003 002d0000 00000000 00006364 76bde0bc [ 359.457922][ T5123] 9fe0: 00000158 76bdded0 000d7d50 0012fdf4 [ 361.675513][ T31] audit: type=1400 audit(361.510:251): avc: denied { setopt } for pid=5130 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.071115][ T5133] could not allocate digest TFM handle sha1_mb [ 362.197806][ T5132] could not allocate digest TFM handle sha1_mb [ 362.476624][ T31] audit: type=1400 audit(362.330:252): avc: denied { ioctl } for pid=5130 comm="syz.1.421" path="socket:[7274]" dev="sockfs" ino=7274 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.267657][ T31] audit: type=1400 audit(363.120:253): avc: denied { write } for pid=5138 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 364.537524][ T31] audit: type=1400 audit(364.380:254): avc: denied { write } for pid=5146 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.322813][ T5155] capability: warning: `syz.1.427' uses deprecated v2 capabilities in a way that may be insecure [ 367.978127][ T31] audit: type=1400 audit(367.830:255): avc: denied { accept } for pid=5159 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 368.385823][ T31] audit: type=1400 audit(368.220:256): avc: denied { ioctl } for pid=5159 comm="syz.1.429" path="socket:[7325]" dev="sockfs" ino=7325 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.918367][ T5173] FAULT_INJECTION: forcing a failure. [ 371.918367][ T5173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.957657][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.1.434 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 371.957753][ T5173] Hardware name: ARM-Versatile Express [ 371.957777][ T5173] Call trace: [ 371.957817][ T5173] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 371.957939][ T5173] r7:00000000 r6:00000000 r5:60000113 r4:82259c04 [ 371.957958][ T5173] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 371.958037][ T5173] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 371.958109][ T5173] r5:83a83c00 r4:82950490 [ 371.958123][ T5173] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 371.958193][ T5173] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 371.958255][ T5173] r8:76bcdf30 r7:00000000 r6:00000000 r5:e0479f68 r4:00000002 [ 371.958271][ T5173] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 371.958326][ T5173] [<8096b798>] (should_fail_usercopy) from [<80590874>] (simple_read_from_buffer+0x80/0x13c) [ 371.958383][ T5173] [<805907f4>] (simple_read_from_buffer) from [<806089b8>] (proc_fail_nth_read+0xb8/0x100) [ 371.958451][ T5173] r10:00000001 r9:80608900 r8:00000002 r7:e0479f68 r6:0000000f r5:76bcdf30 [ 371.958473][ T5173] r4:83a83c00 r3:e0479e9f [ 371.958488][ T5173] [<80608900>] (proc_fail_nth_read) from [<80555098>] (vfs_read+0x98/0x320) [ 371.958550][ T5173] r8:76bcdf30 r7:e0479f68 r6:83a83c00 r5:0000000f r4:85133a80 [ 371.958567][ T5173] [<80555000>] (vfs_read) from [<80555d40>] (ksys_read+0x74/0xe8) [ 371.958625][ T5173] r10:00000003 r9:83a83c00 r8:8020029c r7:00000000 r6:00000000 r5:85133a80 [ 371.958643][ T5173] r4:85133a83 [ 371.958657][ T5173] [<80555ccc>] (ksys_read) from [<80555dc4>] (sys_read+0x10/0x14) [ 371.958711][ T5173] r7:00000003 r6:00000004 r5:76bcdf30 r4:0000000f [ 371.958729][ T5173] [<80555db4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 371.958774][ T5173] Exception stack(0xe0479fa8 to 0xe0479ff0) [ 371.958809][ T5173] 9fa0: 0000000f 76bcdf30 00000004 76bcdf30 0000000f 00000000 [ 371.958840][ T5173] 9fc0: 0000000f 76bcdf30 00000004 00000003 002d0000 00000000 00006364 76bce0bc [ 371.958865][ T5173] 9fe0: 00000158 76bcded0 000d7d50 0012fdf4 [ 377.679224][ T31] audit: type=1400 audit(377.530:257): avc: denied { create } for pid=5189 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 377.941385][ T31] audit: type=1400 audit(377.770:258): avc: denied { setattr } for pid=5189 comm="syz.1.440" name="NETLINK" dev="sockfs" ino=7374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.442537][ T5201] FAULT_INJECTION: forcing a failure. [ 380.442537][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 380.443024][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.1.444 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 380.443096][ T5201] Hardware name: ARM-Versatile Express [ 380.443120][ T5201] Call trace: [ 380.443159][ T5201] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 380.443315][ T5201] r7:85209800 r6:00000000 r5:60000013 r4:82259c04 [ 380.443338][ T5201] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 380.443413][ T5201] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 380.443495][ T5201] r5:85209800 r4:82919c40 [ 380.443512][ T5201] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 380.443585][ T5201] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 380.443674][ T5201] r8:00000000 r7:85209800 r6:00000820 r5:849fd0c0 r4:830adb40 [ 380.443692][ T5201] [<80523710>] (should_failslab) from [<80508188>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 380.443774][ T5201] [<8050813c>] (kmem_cache_alloc_noprof) from [<8153b178>] (skb_clone+0x60/0x1c8) [ 380.443856][ T5201] r10:000001a2 r9:8473ca80 r8:8423f400 r7:849fd0c0 r6:85423ec0 r5:849fd0c0 [ 380.443877][ T5201] r4:00000820 [ 380.443893][ T5201] [<8153b118>] (skb_clone) from [<81651e18>] (__netlink_deliver_tap+0x1f4/0x28c) [ 380.443972][ T5201] r5:00000028 r4:85423800 [ 380.443993][ T5201] [<81651c24>] (__netlink_deliver_tap) from [<81654ebc>] (netlink_unicast+0x280/0x29c) [ 380.444086][ T5201] r10:00000000 r9:00000000 r8:85020000 r7:849fd0c0 r6:8473ca80 r5:00000028 [ 380.444105][ T5201] r4:8423f400 [ 380.444119][ T5201] [<81654c3c>] (netlink_unicast) from [<816550a4>] (netlink_sendmsg+0x1cc/0x444) [ 380.444205][ T5201] r9:00000000 r8:00000000 r7:85517400 r6:00000028 r5:849fd0c0 r4:e05a9f20 [ 380.444232][ T5201] [<81654ed8>] (netlink_sendmsg) from [<81527524>] (__sock_sendmsg+0x44/0x78) [ 380.444311][ T5201] r10:00000000 r9:e05a9dc4 r8:e05a9dc4 r7:00000000 r6:84cb9900 r5:e05a9f20 [ 380.444330][ T5201] r4:00000000 [ 380.444346][ T5201] [<815274e0>] (__sock_sendmsg) from [<81527d94>] (____sys_sendmsg+0x298/0x2cc) [ 380.444404][ T5201] r7:00000000 r6:84cb9900 r5:20000000 r4:e05a9f20 [ 380.444422][ T5201] [<81527afc>] (____sys_sendmsg) from [<81529ba0>] (___sys_sendmsg+0x9c/0xd0) [ 380.444492][ T5201] r10:e05a9e24 r9:20000140 r8:20000000 r7:00000000 r6:84cb9900 r5:e05a9f20 [ 380.444511][ T5201] r4:00000000 [ 380.444525][ T5201] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 380.444598][ T5201] r10:00000128 r9:85209800 r8:84817e40 r7:20000000 r6:20000140 r5:84817e41 [ 380.444619][ T5201] r4:00000003 [ 380.444636][ T5201] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 380.444711][ T5201] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 380.444729][ T5201] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 380.444778][ T5201] Exception stack(0xe05a9fa8 to 0xe05a9ff0) [ 380.444821][ T5201] 9fa0: 00000000 00000000 00000003 20000140 20000000 00000000 [ 380.444853][ T5201] 9fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bce0bc [ 380.444878][ T5201] 9fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 382.661827][ T5209] FAULT_INJECTION: forcing a failure. [ 382.661827][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 382.685036][ T5209] CPU: 1 UID: 0 PID: 5209 Comm: syz.1.448 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 382.685148][ T5209] Hardware name: ARM-Versatile Express [ 382.685172][ T5209] Call trace: [ 382.685210][ T5209] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 382.685318][ T5209] r7:00000d40 r6:00000000 r5:60000013 r4:82259c04 [ 382.685337][ T5209] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 382.685404][ T5209] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 382.685480][ T5209] r5:84186c00 r4:82919c40 [ 382.685552][ T5209] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 382.685625][ T5209] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 382.685709][ T5209] r8:84186c00 r7:00000d40 r6:85133268 r5:0000001f r4:83001240 [ 382.685726][ T5209] [<80523710>] (should_failslab) from [<8050850c>] (__kmalloc_noprof+0x9c/0x458) [ 382.685801][ T5209] [<80508470>] (__kmalloc_noprof) from [<807c1718>] (tomoyo_encode2+0x64/0xf0) [ 382.685878][ T5209] r10:00000fff r9:8309e400 r8:00000000 r7:83423088 r6:85133268 r5:855edffc [ 382.685897][ T5209] r4:855edfe8 [ 382.685912][ T5209] [<807c16b4>] (tomoyo_encode2) from [<807c17c8>] (tomoyo_encode+0x24/0x30) [ 382.686075][ T5209] r9:8309e400 r8:00000000 r7:83423088 r6:85133268 r5:00001000 r4:855edfe9 [ 382.686098][ T5209] [<807c17a4>] (tomoyo_encode) from [<807c1854>] (tomoyo_realpath_from_path+0x80/0x17c) [ 382.686173][ T5209] r5:00001000 r4:855ed000 [ 382.686188][ T5209] [<807c17d4>] (tomoyo_realpath_from_path) from [<807bd954>] (tomoyo_path_number_perm+0xcc/0x22c) [ 382.686290][ T5209] r10:84186c00 r9:00000000 r8:00000003 r7:0000540d r6:00000004 r5:81cd63f8 [ 382.686315][ T5209] r4:85133268 r3:826c0200 [ 382.686331][ T5209] [<807bd888>] (tomoyo_path_number_perm) from [<807c2234>] (tomoyo_file_ioctl+0x1c/0x20) [ 382.686413][ T5209] r9:85133240 r8:00000003 r7:00000000 r6:00000000 r5:0000540d r4:85133240 [ 382.686514][ T5209] [<807c2218>] (tomoyo_file_ioctl) from [<8076f37c>] (security_file_ioctl+0x64/0x1e4) [ 382.686622][ T5209] [<8076f318>] (security_file_ioctl) from [<8056ed10>] (sys_ioctl+0x4c/0xdc8) [ 382.686711][ T5209] r7:00000000 r6:85133241 r5:00000000 r4:0000540d [ 382.686808][ T5209] [<8056ecc4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 382.686883][ T5209] Exception stack(0xe05a5fa8 to 0xe05a5ff0) [ 382.686974][ T5209] 5fa0: 00000000 00000000 00000003 0000540d 00000000 00000000 [ 382.687019][ T5209] 5fc0: 00000000 00000000 0012fed0 00000036 002d0000 00000000 00006364 76bce0bc [ 382.687048][ T5209] 5fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 382.687083][ T5209] r10:00000036 r9:84186c00 r8:8020029c r7:00000036 r6:0012fed0 r5:00000000 [ 382.687101][ T5209] r4:00000000 [ 382.766880][ T5209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.027031][ T5216] fuse: Bad value for 'group_id' [ 386.027659][ T5216] fuse: Bad value for 'group_id' [ 387.142961][ T5220] fuse: Bad value for 'fd' [ 388.297511][ T5226] fuse: Bad value for 'group_id' [ 388.297931][ T5226] fuse: Bad value for 'group_id' [ 388.820499][ T5228] Zero length message leads to an empty skb [ 391.827959][ T5234] fuse: Bad value for 'fd' [ 393.374222][ T31] audit: type=1400 audit(393.200:259): avc: denied { remount } for pid=5238 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.119187][ T31] audit: type=1400 audit(394.970:260): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 398.579801][ T5243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5243 comm=syz.0.462 [ 398.865796][ T5243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5243 comm=syz.0.462 [ 406.112217][ T31] audit: type=1400 audit(405.960:261): avc: denied { create } for pid=5270 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 406.339937][ T5276] FAULT_INJECTION: forcing a failure. [ 406.339937][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 406.340419][ T5276] CPU: 1 UID: 0 PID: 5276 Comm: syz.1.473 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 406.340488][ T5276] Hardware name: ARM-Versatile Express [ 406.340512][ T5276] Call trace: [ 406.340553][ T5276] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 406.340677][ T5276] r7:83843c00 r6:00000000 r5:60000013 r4:82259c04 [ 406.340696][ T5276] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 406.341434][ T5276] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 406.342853][ T5276] r5:83843c00 r4:82919c40 [ 406.342886][ T5276] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 406.342979][ T5276] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 406.343102][ T5276] r8:00000000 r7:83843c00 r6:00000d40 r5:84c7c080 r4:830a8600 [ 406.343119][ T5276] [<80523710>] (should_failslab) from [<80508188>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 406.343230][ T5276] [<8050813c>] (kmem_cache_alloc_noprof) from [<80778d3c>] (security_inode_alloc+0x30/0x1e8) [ 406.343351][ T5276] r10:84c7c188 r9:00000000 r8:00000000 r7:00000c40 r6:8309f800 r5:84c7c080 [ 406.343411][ T5276] r4:84c7c080 [ 406.343434][ T5276] [<80778d0c>] (security_inode_alloc) from [<805788ac>] (inode_init_always_gfp+0x188/0x1dc) [ 406.343549][ T5276] r5:00000000 r4:84c7c080 [ 406.343567][ T5276] [<80578724>] (inode_init_always_gfp) from [<8057bf20>] (alloc_inode+0x40/0xcc) [ 406.343798][ T5276] r10:00000002 r9:85020000 r8:00000000 r7:00000006 r6:81e53540 r5:8309f800 [ 406.343828][ T5276] r4:84c7c080 r3:00000000 [ 406.343843][ T5276] [<8057bee0>] (alloc_inode) from [<81525bcc>] (sock_alloc+0x20/0x70) [ 406.343968][ T5276] r7:00000006 r6:00000000 r5:00000001 r4:00000002 [ 406.343990][ T5276] [<81525bac>] (sock_alloc) from [<81525dc8>] (__sock_create+0x80/0x228) [ 406.344186][ T5276] r5:00000001 r4:00000002 [ 406.344204][ T5276] [<81525d48>] (__sock_create) from [<81525fd8>] (sock_create_kern+0x24/0x2c) [ 406.344628][ T5276] r10:00000002 r9:00000001 r8:00000000 r7:00000000 r6:85020000 r5:84c7cf00 [ 406.344699][ T5276] r4:85518d80 [ 406.344719][ T5276] [<81525fb4>] (sock_create_kern) from [<819250e0>] (smc_create+0xac/0x114) [ 406.344816][ T5276] [<81925034>] (smc_create) from [<81525e44>] (__sock_create+0xfc/0x228) [ 406.344919][ T5276] r10:81e8a43c r9:85020000 r8:84c7cf00 r7:00000000 r6:81925034 r5:00000001 [ 406.345165][ T5276] r4:0000002b [ 406.345334][ T5276] [<81525d48>] (__sock_create) from [<81528698>] (__sys_socket+0x94/0x10c) [ 406.345425][ T5276] r10:00000119 r9:83843c00 r8:8020029c r7:00000119 r6:83843c00 r5:0000002b [ 406.345445][ T5276] r4:00000001 [ 406.345460][ T5276] [<81528604>] (__sys_socket) from [<81528720>] (sys_socket+0x10/0x14) [ 406.345576][ T5276] r6:0012fed0 r5:00000000 r4:00000000 [ 406.345594][ T5276] [<81528710>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 406.345722][ T5276] Exception stack(0xeac71fa8 to 0xeac71ff0) [ 406.345771][ T5276] 1fa0: 00000000 00000000 0000002b 00000001 00000000 00000000 [ 406.345804][ T5276] 1fc0: 00000000 00000000 0012fed0 00000119 002d0000 00000000 00006364 76bce0bc [ 406.345828][ T5276] 1fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 406.496862][ T5276] socket: no more sockets [ 407.915528][ T31] audit: type=1400 audit(407.760:262): avc: denied { bind } for pid=5277 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.986988][ T31] audit: type=1400 audit(407.840:263): avc: denied { write } for pid=5277 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.106875][ T5303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=537 sclass=netlink_tcpdiag_socket pid=5303 comm=syz.1.484 [ 413.167594][ T5303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1795 sclass=netlink_tcpdiag_socket pid=5303 comm=syz.1.484 [ 413.171384][ T5303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=5303 comm=syz.1.484 [ 415.368818][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.1.489 [ 415.539464][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.1.489 [ 415.567188][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.1.489 [ 416.074831][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1018 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.1.489 [ 420.579369][ T5333] FAULT_INJECTION: forcing a failure. [ 420.579369][ T5333] name failslab, interval 1, probability 0, space 0, times 0 [ 420.579824][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: syz.0.494 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 420.579891][ T5333] Hardware name: ARM-Versatile Express [ 420.579914][ T5333] Call trace: [ 420.579953][ T5333] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 420.580132][ T5333] r7:00000c40 r6:00000000 r5:60000013 r4:82259c04 [ 420.580155][ T5333] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 420.580235][ T5333] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 420.580327][ T5333] r5:83840000 r4:82919c40 [ 420.580367][ T5333] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 420.580535][ T5333] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 420.580629][ T5333] r8:83840000 r7:00000c40 r6:851339e8 r5:00001000 r4:830016c0 [ 420.580677][ T5333] [<80523710>] (should_failslab) from [<8050850c>] (__kmalloc_noprof+0x9c/0x458) [ 420.580770][ T5333] [<80508470>] (__kmalloc_noprof) from [<807c1810>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 420.580970][ T5333] r10:83840000 r9:8309e400 r8:00000000 r7:83432aa0 r6:851339e8 r5:00001000 [ 420.581009][ T5333] r4:00000000 [ 420.581098][ T5333] [<807c17d4>] (tomoyo_realpath_from_path) from [<807bd954>] (tomoyo_path_number_perm+0xcc/0x22c) [ 420.581242][ T5333] r10:83840000 r9:00000000 r8:00000004 r7:41015500 r6:00000004 r5:81cd63f8 [ 420.581336][ T5333] r4:851339e8 r3:826c0200 [ 420.581358][ T5333] [<807bd888>] (tomoyo_path_number_perm) from [<807c2234>] (tomoyo_file_ioctl+0x1c/0x20) [ 420.581486][ T5333] r9:851339c0 r8:00000004 r7:76bdce60 r6:76bdce60 r5:41015500 r4:851339c0 [ 420.581537][ T5333] [<807c2218>] (tomoyo_file_ioctl) from [<8076f37c>] (security_file_ioctl+0x64/0x1e4) [ 420.581629][ T5333] [<8076f318>] (security_file_ioctl) from [<8056ed10>] (sys_ioctl+0x4c/0xdc8) [ 420.581776][ T5333] r7:76bdce60 r6:851339c1 r5:76bdce70 r4:41015500 [ 420.581798][ T5333] [<8056ecc4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 420.581868][ T5333] Exception stack(0xeafcdfa8 to 0xeafcdff0) [ 420.582006][ T5333] dfa0: 00000004 76bdce70 00000004 41015500 76bdce60 76bdbe00 [ 420.582069][ T5333] dfc0: 00000004 76bdce70 76bdbe70 00000036 00000001 76bdce60 00410000 00000000 [ 420.582097][ T5333] dfe0: 00000000 76bdbde8 002b8000 001318ec [ 420.582151][ T5333] r10:00000036 r9:83840000 r8:8020029c r7:00000036 r6:76bdbe70 r5:76bdce70 [ 420.582278][ T5333] r4:00000004 [ 420.725636][ T5333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.966049][ T54] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 421.187599][ T54] usb 1-1: config 12 has an invalid interface number: 119 but max is 0 [ 421.187984][ T54] usb 1-1: config 12 has no interface number 0 [ 421.188379][ T54] usb 1-1: config 12 interface 119 has no altsetting 0 [ 421.368705][ T54] usb 1-1: string descriptor 0 read error: -22 [ 421.369170][ T54] usb 1-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice=19.f9 [ 421.369297][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.550063][ T54] usb 1-1: unknown interface protocol 0x87, assuming v1 [ 421.550448][ T54] usb 1-1: cannot find UAC_HEADER [ 421.600563][ T54] snd-usb-audio 1-1:12.119: probe with driver snd-usb-audio failed with error -22 [ 421.787735][ T54] usb 1-1: USB disconnect, device number 7 [ 424.109781][ T31] audit: type=1400 audit(423.960:264): avc: denied { connect } for pid=5355 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.885839][ T31] audit: type=1400 audit(426.660:265): avc: denied { shutdown } for pid=5358 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.789090][ T5376] fuse: Bad value for 'user_id' [ 428.829151][ T5376] fuse: Bad value for 'user_id' [ 430.906802][ T5388] fuse: Bad value for 'user_id' [ 430.907151][ T5388] fuse: Bad value for 'user_id' [ 436.958309][ T5407] FAULT_INJECTION: forcing a failure. [ 436.958309][ T5407] name failslab, interval 1, probability 0, space 0, times 0 [ 436.958818][ T5407] CPU: 1 UID: 0 PID: 5407 Comm: syz.0.516 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 436.958893][ T5407] Hardware name: ARM-Versatile Express [ 436.958921][ T5407] Call trace: [ 436.958962][ T5407] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 436.959093][ T5407] r7:00400cc0 r6:00000000 r5:60000013 r4:82259c04 [ 436.959116][ T5407] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 436.959383][ T5407] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 436.959668][ T5407] r5:8449c800 r4:82919c40 [ 436.959938][ T5407] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 436.960100][ T5407] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 436.960292][ T5407] r8:8449c800 r7:00400cc0 r6:eb1a5e5c r5:00000019 r4:83002000 [ 436.960513][ T5407] [<80523710>] (should_failslab) from [<805091c0>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 436.961204][ T5407] [<80509120>] (__kmalloc_node_track_caller_noprof) from [<804a10b4>] (kstrdup+0x38/0x64) [ 436.961312][ T5407] r10:00000002 r9:eb1a5e5c r8:830cd5b0 r7:8058ef84 r6:eb1a5e5c r5:00000018 [ 436.961359][ T5407] r4:00400cc0 [ 436.961541][ T5407] [<804a107c>] (kstrdup) from [<8058ef84>] (simple_xattr_set+0x40/0x184) [ 436.961676][ T5407] r7:8411a438 r6:856a92c0 r5:eb1a5e5c r4:82259c04 [ 436.961811][ T5407] [<8058ef44>] (simple_xattr_set) from [<80498c4c>] (shmem_xattr_handler_set+0x194/0x1a8) [ 436.962096][ T5407] r9:eb1a5e5c r8:830cd5b0 r7:00000040 r6:830cd580 r5:8411a458 r4:82259c04 [ 436.962301][ T5407] [<80498ab8>] (shmem_xattr_handler_set) from [<8058d170>] (__vfs_setxattr+0xb4/0xc8) [ 436.962390][ T5407] r9:80498ab8 r8:00000000 r7:82259c04 r6:83437dd0 r5:82920ba0 r4:8411a458 [ 436.962498][ T5407] [<8058d0bc>] (__vfs_setxattr) from [<8058db98>] (__vfs_setxattr_noperm+0x7c/0x204) [ 436.962699][ T5407] r9:82920ba0 r8:00000000 r7:8411a458 r6:00000001 r5:eb1a5e5c r4:83437dd0 [ 436.962988][ T5407] [<8058db1c>] (__vfs_setxattr_noperm) from [<8058de08>] (__vfs_setxattr_locked+0xe8/0x118) [ 436.963135][ T5407] r10:eb1a5dc0 r9:00000000 r8:8411a458 r7:00000000 r6:eb1a5e5c r5:82920ba0 [ 436.963187][ T5407] r4:83437dd0 [ 436.963220][ T5407] [<8058dd20>] (__vfs_setxattr_locked) from [<8058dec8>] (vfs_setxattr+0x90/0x180) [ 436.963405][ T5407] r8:82920ba0 r7:eb1a5e5c r6:83437dd0 r5:8411a4d8 r4:eb1a5e48 [ 436.963537][ T5407] [<8058de38>] (vfs_setxattr) from [<8058e04c>] (do_setxattr+0x94/0x9c) [ 436.963663][ T5407] r10:000000e4 r9:83437dd0 r8:82920ba0 r7:00000000 r6:00000000 r5:eb1a5e5c [ 436.963730][ T5407] r4:eb1a5e48 [ 436.963746][ T5407] [<8058dfb8>] (do_setxattr) from [<8058e27c>] (file_setxattr+0x58/0x78) [ 436.963979][ T5407] r9:8449c800 r8:00000000 r7:00000003 r6:eb1a5e48 r5:847a9b40 r4:00000000 [ 436.964206][ T5407] [<8058e224>] (file_setxattr) from [<8058e480>] (path_setxattrat+0x104/0x17c) [ 436.964676][ T5407] r7:00000003 r6:847a9b40 r5:847a9b41 r4:00000000 [ 436.964865][ T5407] [<8058e37c>] (path_setxattrat) from [<8058e6f8>] (sys_fsetxattr+0x30/0x38) [ 436.965077][ T5407] r8:8020029c r7:000000e4 r6:0012fed0 r5:00000000 r4:00000002 [ 436.965192][ T5407] [<8058e6c8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 436.965383][ T5407] Exception stack(0xeb1a5fa8 to 0xeb1a5ff0) [ 436.965450][ T5407] 5fa0: 00000002 00000000 00000003 20000000 00000000 00000000 [ 436.965497][ T5407] 5fc0: 00000002 00000000 0012fed0 000000e4 002d0000 00000000 00006364 76bde0bc [ 436.965520][ T5407] 5fe0: 76bddec0 76bddeb0 00019384 00131f20 [ 449.327105][ T5463] fuse: Unknown parameter 'group_id00000000000000000000' [ 459.610443][ T5504] FAULT_INJECTION: forcing a failure. [ 459.610443][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 459.610938][ T5504] CPU: 1 UID: 0 PID: 5504 Comm: syz.1.551 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 459.611014][ T5504] Hardware name: ARM-Versatile Express [ 459.611039][ T5504] Call trace: [ 459.611079][ T5504] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 459.611204][ T5504] r7:00000820 r6:00000000 r5:60000013 r4:82259c04 [ 459.611226][ T5504] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 459.611346][ T5504] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 459.614972][ T5504] r5:8449bc00 r4:82919c40 [ 459.615574][ T5504] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 459.615659][ T5504] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 459.615750][ T5504] r8:8449bc00 r7:00000820 r6:846149c0 r5:00000009 r4:83001240 [ 459.615767][ T5504] [<80523710>] (should_failslab) from [<805091c0>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 459.615847][ T5504] [<80509120>] (__kmalloc_node_track_caller_noprof) from [<804a10b4>] (kstrdup+0x38/0x64) [ 459.615931][ T5504] r10:81e7778c r9:80793948 r8:849a6c00 r7:807ad710 r6:846149c0 r5:00000008 [ 459.615952][ T5504] r4:00000820 [ 459.615967][ T5504] [<804a107c>] (kstrdup) from [<807ad710>] (security_netlbl_sid_to_secattr+0x78/0xdc) [ 459.616112][ T5504] r7:83bd90c8 r6:0000005f r5:85492e00 r4:84641740 [ 459.616130][ T5504] [<807ad698>] (security_netlbl_sid_to_secattr) from [<807b0738>] (selinux_netlbl_sock_genattr+0x60/0x140) [ 459.616220][ T5504] r7:0000000a r6:855d3bc0 r5:855d3bc0 r4:84641740 [ 459.616237][ T5504] [<807b06d8>] (selinux_netlbl_sock_genattr) from [<807b1190>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 459.617599][ T5504] r7:0000000a r6:855d3bc0 r5:00000000 r4:00000002 [ 459.617653][ T5504] [<807b1150>] (selinux_netlbl_socket_post_create) from [<80793ac4>] (selinux_socket_post_create+0x17c/0x280) [ 459.617956][ T5504] r9:80793948 r8:00000011 r7:0000000a r6:824673fc r5:8378d180 r4:8568d054 [ 459.618069][ T5504] [<80793948>] (selinux_socket_post_create) from [<807850e4>] (security_socket_post_create+0x23c/0x24c) [ 459.618166][ T5504] r8:00000000 r7:00000000 r6:00000002 r5:0000000a r4:8378d180 [ 459.618302][ T5504] [<80784ea8>] (security_socket_post_create) from [<81525f08>] (__sock_create+0x1c0/0x228) [ 459.618448][ T5504] r9:85020000 r8:8378d180 r7:00000000 r6:00000000 r5:00000002 r4:0000000a [ 459.618555][ T5504] [<81525d48>] (__sock_create) from [<81528698>] (__sys_socket+0x94/0x10c) [ 459.618727][ T5504] r10:00000119 r9:8449bc00 r8:8020029c r7:00000119 r6:8449bc00 r5:0000000a [ 459.618824][ T5504] r4:00000002 [ 459.618913][ T5504] [<81528604>] (__sys_socket) from [<81528720>] (sys_socket+0x10/0x14) [ 459.619033][ T5504] r6:0012fed0 r5:00000000 r4:00000000 [ 459.619054][ T5504] [<81528710>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 459.619217][ T5504] Exception stack(0xec30dfa8 to 0xec30dff0) [ 459.619391][ T5504] dfa0: 00000000 00000000 0000000a 00000002 00000000 00000000 [ 459.619544][ T5504] dfc0: 00000000 00000000 0012fed0 00000119 002d0000 00000000 00006364 76bce0bc [ 459.619670][ T5504] dfe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 473.116320][ T31] audit: type=1400 audit(472.950:266): avc: denied { write } for pid=5550 comm="dhcpcd-run-hook" name="null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 473.116956][ T31] audit: type=1400 audit(472.960:267): avc: denied { open } for pid=5550 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 473.136167][ T31] audit: type=1400 audit(472.980:268): avc: denied { search } for pid=5550 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.139263][ T31] audit: type=1400 audit(472.980:269): avc: denied { search } for pid=5550 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=11 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.141455][ T31] audit: type=1400 audit(472.980:270): avc: denied { search } for pid=5550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.145875][ T31] audit: type=1400 audit(472.980:271): avc: denied { search } for pid=5550 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.207313][ T31] audit: type=1400 audit(473.060:272): avc: denied { read open } for pid=5551 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.209802][ T31] audit: type=1400 audit(473.060:273): avc: denied { getattr } for pid=5551 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.294242][ T31] audit: type=1400 audit(473.140:274): avc: denied { add_name } for pid=5550 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.298222][ T31] audit: type=1400 audit(473.150:275): avc: denied { create } for pid=5550 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 480.463208][ T5576] fuse: Bad value for 'fd' [ 483.536568][ T5590] fuse: Bad value for 'fd' [ 486.866888][ T5604] fuse: Bad value for 'fd' [ 487.673386][ T5609] FAULT_INJECTION: forcing a failure. [ 487.673386][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.673782][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz.1.593 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 487.673838][ T5609] Hardware name: ARM-Versatile Express [ 487.673858][ T5609] Call trace: [ 487.673891][ T5609] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 487.674009][ T5609] r7:00000000 r6:00000000 r5:60000013 r4:82259c04 [ 487.674024][ T5609] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 487.674173][ T5609] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 487.674263][ T5609] r5:8449c800 r4:82950490 [ 487.674276][ T5609] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 487.674373][ T5609] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 487.674462][ T5609] r8:f311deb8 r7:00000000 r6:00000001 r5:76bcdf30 r4:00000001 [ 487.674503][ T5609] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 487.674617][ T5609] [<8096b798>] (should_fail_usercopy) from [<808c38f8>] (kstrtouint_from_user+0x54/0x13c) [ 487.674748][ T5609] [<808c38a4>] (kstrtouint_from_user) from [<80609cf8>] (proc_fail_nth_write+0x40/0xe8) [ 487.674821][ T5609] r8:f311df68 r7:8449c800 r6:00000001 r5:847a9e40 r4:00000001 [ 487.674836][ T5609] [<80609cb8>] (proc_fail_nth_write) from [<8055592c>] (vfs_write+0xac/0x44c) [ 487.674920][ T5609] r5:847a9e40 r4:80609cb8 [ 487.674934][ T5609] [<80555880>] (vfs_write) from [<80555e3c>] (ksys_write+0x74/0xe8) [ 487.675175][ T5609] r10:00000004 r9:8449c800 r8:8020029c r7:00000000 r6:00000002 r5:847a9e40 [ 487.675388][ T5609] r4:847a9e43 [ 487.675548][ T5609] [<80555dc8>] (ksys_write) from [<80555ec0>] (sys_write+0x10/0x14) [ 487.675654][ T5609] r7:00000004 r6:00000005 r5:76bcdf30 r4:00000001 [ 487.675688][ T5609] [<80555eb0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 487.675752][ T5609] Exception stack(0xf311dfa8 to 0xf311dff0) [ 487.675791][ T5609] dfa0: 00000001 76bcdf30 00000005 76bcdf30 00000001 00000000 [ 487.675821][ T5609] dfc0: 00000001 76bcdf30 00000005 00000004 002d0000 00000000 00006364 76bce0bc [ 487.675847][ T5609] dfe0: 00000158 76bcded0 000d7d50 0012febc [ 496.152935][ T5641] fuse: Bad value for 'rootmode' [ 500.830616][ T5658] fuse: Unknown parameter 'use00000000000000000000' [ 505.897097][ T5669] fuse: Unknown parameter 'use00000000000000000000' [ 508.720353][ T5678] fuse: Unknown parameter 'use00000000000000000000' [ 510.127409][ T5685] FAULT_INJECTION: forcing a failure. [ 510.127409][ T5685] name failslab, interval 1, probability 0, space 0, times 0 [ 510.127888][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.1.625 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 510.127945][ T5685] Hardware name: ARM-Versatile Express [ 510.127969][ T5685] Call trace: [ 510.128010][ T5685] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 510.129529][ T5685] r7:00000820 r6:00000000 r5:60000013 r4:82259c04 [ 510.131254][ T5685] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 510.131379][ T5685] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 510.131472][ T5685] r5:84453000 r4:82919c40 [ 510.131492][ T5685] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 510.131637][ T5685] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 510.131769][ T5685] r8:84453000 r7:00000820 r6:846149c0 r5:00000009 r4:83001240 [ 510.131815][ T5685] [<80523710>] (should_failslab) from [<805091c0>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 510.131926][ T5685] [<80509120>] (__kmalloc_node_track_caller_noprof) from [<804a10b4>] (kstrdup+0x38/0x64) [ 510.132049][ T5685] r10:81e7778c r9:80793948 r8:849a7000 r7:807ad710 r6:846149c0 r5:00000008 [ 510.132091][ T5685] r4:00000820 [ 510.132130][ T5685] [<804a107c>] (kstrdup) from [<807ad710>] (security_netlbl_sid_to_secattr+0x78/0xdc) [ 510.132239][ T5685] r7:83bd90c8 r6:0000005f r5:85492e00 r4:846f6040 [ 510.132324][ T5685] [<807ad698>] (security_netlbl_sid_to_secattr) from [<807b0738>] (selinux_netlbl_sock_genattr+0x60/0x140) [ 510.132519][ T5685] r7:0000000a r6:846f6600 r5:846f6600 r4:846f6040 [ 510.132568][ T5685] [<807b06d8>] (selinux_netlbl_sock_genattr) from [<807b1190>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 510.132673][ T5685] r7:0000000a r6:846f6600 r5:00000000 r4:00000002 [ 510.132741][ T5685] [<807b1150>] (selinux_netlbl_socket_post_create) from [<80793ac4>] (selinux_socket_post_create+0x17c/0x280) [ 510.132864][ T5685] r9:80793948 r8:00000012 r7:0000000a r6:824673fc r5:84ca7900 r4:8568dd8c [ 510.132963][ T5685] [<80793948>] (selinux_socket_post_create) from [<807850e4>] (security_socket_post_create+0x23c/0x24c) [ 510.133051][ T5685] r8:00000000 r7:00000088 r6:00000002 r5:0000000a r4:84ca7900 [ 510.133507][ T5685] [<80784ea8>] (security_socket_post_create) from [<81525f08>] (__sock_create+0x1c0/0x228) [ 510.133625][ T5685] r9:85020000 r8:84ca7900 r7:00000088 r6:00000000 r5:00000002 r4:0000000a [ 510.133711][ T5685] [<81525d48>] (__sock_create) from [<81528698>] (__sys_socket+0x94/0x10c) [ 510.133849][ T5685] r10:00000119 r9:84453000 r8:8020029c r7:00000119 r6:84453000 r5:0000000a [ 510.133871][ T5685] r4:00000002 [ 510.134087][ T5685] [<81528604>] (__sys_socket) from [<81528720>] (sys_socket+0x10/0x14) [ 510.134198][ T5685] r6:0012fed0 r5:00000000 r4:00000000 [ 510.134267][ T5685] [<81528710>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 510.134379][ T5685] Exception stack(0xf34e1fa8 to 0xf34e1ff0) [ 510.134499][ T5685] 1fa0: 00000000 00000000 0000000a 00000002 00000088 00000000 [ 510.134573][ T5685] 1fc0: 00000000 00000000 0012fed0 00000119 002d0000 00000000 00006364 76bce0bc [ 510.134634][ T5685] 1fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 512.327171][ T5691] fuse: Unknown parameter 'user_i00000000000000000000' [ 512.709612][ T5689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5689 comm=syz.0.627 [ 514.575733][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 514.576189][ T31] audit: type=1400 audit(514.420:284): avc: denied { ioctl } for pid=5697 comm="syz.1.632" path="socket:[8347]" dev="sockfs" ino=8347 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 514.626914][ T31] audit: type=1400 audit(514.470:285): avc: denied { ioctl } for pid=5697 comm="syz.1.632" path="socket:[8346]" dev="sockfs" ino=8346 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 515.925988][ T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 515.960995][ T5707] fuse: Unknown parameter 'user_i00000000000000000000' [ 516.160753][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 516.243154][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.243536][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.416819][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.417192][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.417504][ T54] usb 2-1: Product: ᐁ [ 516.417714][ T54] usb 2-1: Manufacturer: 빃쿰踙㳩੠떡퓌툴핸ฉ詩㦿ኾ혛⯜瓇妹嘘譍甘뾽頪칧쓐钊쎧垗䗂滦넂햛郔摶햇敪䅻⌏兩㴢֢ἕ爻㜍㉇ﵷ跰⤷䯸쬌췥ꊴ岁⃯诵暅㍸뾲䰗깶鹥靈㻿ឪ쀫볮栖ண㱰䥰㖯５傢ല墈Ḅ臉곱ꑤ᳾㐜ａ [ 516.417922][ T54] usb 2-1: SerialNumber: 〉 [ 517.322005][ T54] usb 2-1: 0:2 : does not exist [ 517.356150][ T54] usb 2-1: USB disconnect, device number 4 [ 524.207480][ T5742] fuse: Unknown parameter 'user_i00000000000000000000' [ 530.117519][ T31] audit: type=1400 audit(529.970:286): avc: denied { ioctl } for pid=5744 comm="syz.0.640" path="socket:[9250]" dev="sockfs" ino=9250 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 540.716536][ T31] audit: type=1400 audit(540.570:287): avc: denied { write } for pid=5753 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 541.672423][ T31] audit: type=1400 audit(541.520:288): avc: denied { block_suspend } for pid=5760 comm="syz.1.645" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.759211][ T5762] fuse: Unknown parameter 'user_id00000000000000000000' [ 544.115493][ T31] audit: type=1400 audit(543.840:289): avc: denied { mount } for pid=5778 comm="syz.1.650" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 548.965845][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 549.105936][ T10] usb 1-1: device descriptor read/64, error -71 [ 549.356601][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 549.525831][ T10] usb 1-1: device descriptor read/64, error -71 [ 549.636143][ T10] usb usb1-port1: attempt power cycle [ 549.995905][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 550.035326][ T10] usb 1-1: device descriptor read/8, error -71 [ 550.285606][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 550.335568][ T10] usb 1-1: device descriptor read/8, error -71 [ 550.446384][ T10] usb usb1-port1: unable to enumerate USB device [ 558.231010][ T5818] 8021q: VLANs not supported on wg1 [ 558.395636][ T31] audit: type=1400 audit(558.210:290): avc: denied { write } for pid=5817 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 564.211245][ T5840] FAULT_INJECTION: forcing a failure. [ 564.211245][ T5840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.211767][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.0.667 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 564.211849][ T5840] Hardware name: ARM-Versatile Express [ 564.211879][ T5840] Call trace: [ 564.211922][ T5840] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 564.212138][ T5840] r7:85358000 r6:00000000 r5:60000013 r4:82259c04 [ 564.212169][ T5840] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 564.212339][ T5840] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 564.212442][ T5840] r5:84453000 r4:82950490 [ 564.212464][ T5840] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 564.212554][ T5840] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 564.212704][ T5840] r8:00000003 r7:85358000 r6:20000000 r5:20000000 r4:82c1c780 [ 564.212725][ T5840] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 564.212788][ T5840] [<8096b798>] (should_fail_usercopy) from [<818fcdf4>] (vlan_ioctl_handler+0x3c/0x4a0) [ 564.212874][ T5840] [<818fcdb8>] (vlan_ioctl_handler) from [<81528140>] (sock_ioctl+0x1f8/0x600) [ 564.213064][ T5840] r9:847a93c0 r8:00000003 r7:84ca6c80 r6:85358000 r5:20000000 r4:82c1c780 [ 564.213204][ T5840] [<81527f48>] (sock_ioctl) from [<8056edf4>] (sys_ioctl+0x130/0xdc8) [ 564.213316][ T5840] r9:847a93c0 r8:00000003 r7:20000000 r6:847a93c1 r5:00000000 r4:00008983 [ 564.213374][ T5840] [<8056ecc4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 564.213488][ T5840] Exception stack(0xf3b41fa8 to 0xf3b41ff0) [ 564.213557][ T5840] 1fa0: 00000000 00000000 00000003 00008983 20000000 00000000 [ 564.213738][ T5840] 1fc0: 00000000 00000000 0012fed0 00000036 002d0000 00000000 00006364 76bde0bc [ 564.213778][ T5840] 1fe0: 76bddec0 76bddeb0 00019384 00131f20 [ 564.213867][ T5840] r10:00000036 r9:84453000 r8:8020029c r7:00000036 r6:0012fed0 r5:00000000 [ 564.213922][ T5840] r4:00000000 [ 565.956861][ T5842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=381 sclass=netlink_audit_socket pid=5842 comm=syz.0.668 [ 580.816245][ T31] audit: type=1400 audit(580.660:291): avc: denied { ioctl } for pid=5875 comm="syz.0.680" path="uts:[4026532651]" dev="nsfs" ino=4026532651 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 588.222119][ T31] audit: type=1400 audit(588.070:292): avc: denied { create } for pid=5892 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.259871][ T31] audit: type=1400 audit(588.110:293): avc: denied { ioctl } for pid=5892 comm="syz.0.686" path="socket:[8604]" dev="sockfs" ino=8604 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.353022][ T5898] FAULT_INJECTION: forcing a failure. [ 588.353022][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.353529][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.1.688 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 588.353601][ T5898] Hardware name: ARM-Versatile Express [ 588.353624][ T5898] Call trace: [ 588.353671][ T5898] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 588.353792][ T5898] r7:f3e51e20 r6:00000000 r5:60000013 r4:82259c04 [ 588.353810][ T5898] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 588.353881][ T5898] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 588.353960][ T5898] r5:84454800 r4:82950490 [ 588.354056][ T5898] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 588.354293][ T5898] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 588.354542][ T5898] r8:20004080 r7:f3e51e20 r6:20000600 r5:00000000 r4:f3e51f20 [ 588.354563][ T5898] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 588.354941][ T5898] [<8096b798>] (should_fail_usercopy) from [<81529a24>] (copy_msghdr_from_user+0x50/0x130) [ 588.355198][ T5898] [<815299d4>] (copy_msghdr_from_user) from [<81529b7c>] (___sys_sendmsg+0x78/0xd0) [ 588.355486][ T5898] r8:20004080 r7:00000000 r6:84ca7900 r5:f3e51f20 r4:f3e51e64 [ 588.355986][ T5898] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 588.356089][ T5898] r10:00000128 r9:84454800 r8:847a9780 r7:20004080 r6:20000600 r5:847a9781 [ 588.356114][ T5898] r4:00000003 [ 588.356132][ T5898] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 588.356217][ T5898] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 588.356238][ T5898] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 588.356314][ T5898] Exception stack(0xf3e51fa8 to 0xf3e51ff0) [ 588.356367][ T5898] 1fa0: 00000000 00000000 00000003 20000600 20004080 00000000 [ 588.356405][ T5898] 1fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bce0bc [ 588.356436][ T5898] 1fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 598.848193][ T5935] fuse: Unknown parameter '' [ 606.719749][ T5955] FAULT_INJECTION: forcing a failure. [ 606.719749][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 606.720239][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.0.708 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 606.720313][ T5955] Hardware name: ARM-Versatile Express [ 606.720336][ T5955] Call trace: [ 606.720378][ T5955] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 606.720503][ T5955] r7:00000cc0 r6:00000000 r5:60000013 r4:82259c04 [ 606.720522][ T5955] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 606.720597][ T5955] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 606.720757][ T5955] r5:84454800 r4:82919c40 [ 606.720779][ T5955] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 606.721489][ T5955] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 606.723540][ T5955] r8:84454800 r7:00000cc0 r6:84c7ac80 r5:00000040 r4:83001240 [ 606.725185][ T5955] [<80523710>] (should_failslab) from [<8050850c>] (__kmalloc_noprof+0x9c/0x458) [ 606.725345][ T5955] [<80508470>] (__kmalloc_noprof) from [<8152cf70>] (sock_kmalloc+0x58/0x80) [ 606.725444][ T5955] r10:00000040 r9:f4175dc4 r8:20000050 r7:00000040 r6:84c7ac80 r5:00000040 [ 606.725463][ T5955] r4:85171510 [ 606.725477][ T5955] [<8152cf18>] (sock_kmalloc) from [<81527d38>] (____sys_sendmsg+0x23c/0x2cc) [ 606.725553][ T5955] r5:20000050 r4:f4175f20 [ 606.725568][ T5955] [<81527afc>] (____sys_sendmsg) from [<81529ba0>] (___sys_sendmsg+0x9c/0xd0) [ 606.725631][ T5955] r10:f4175e24 r9:20000340 r8:20000050 r7:00000000 r6:84c7ac80 r5:f4175f20 [ 606.725650][ T5955] r4:00000000 [ 606.725665][ T5955] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 606.726069][ T5955] r10:00000128 r9:84454800 r8:847a96c0 r7:20000050 r6:20000340 r5:847a96c1 [ 606.726124][ T5955] r4:00000004 [ 606.726702][ T5955] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 606.727325][ T5955] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 606.727849][ T5955] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 606.728428][ T5955] Exception stack(0xf4175fa8 to 0xf4175ff0) [ 606.728995][ T5955] 5fa0: 00000000 00000000 00000004 20000340 20000050 00000000 [ 606.731631][ T5955] 5fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bde0bc [ 606.731681][ T5955] 5fe0: 76bddec0 76bddeb0 00019384 00131f20 [ 616.558962][ T5982] FAULT_INJECTION: forcing a failure. [ 616.558962][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.559475][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.0.718 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 616.559541][ T5982] Hardware name: ARM-Versatile Express [ 616.559568][ T5982] Call trace: [ 616.559609][ T5982] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 616.559726][ T5982] r7:00000000 r6:00000000 r5:60000013 r4:82259c04 [ 616.559746][ T5982] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 616.559888][ T5982] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 616.560044][ T5982] r5:84498c00 r4:82950490 [ 616.560154][ T5982] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 616.560374][ T5982] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 616.560525][ T5982] r8:f4231eb8 r7:00000000 r6:00000001 r5:76bddf30 r4:00000001 [ 616.560659][ T5982] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 616.560860][ T5982] [<8096b798>] (should_fail_usercopy) from [<808c38f8>] (kstrtouint_from_user+0x54/0x13c) [ 616.561329][ T5982] [<808c38a4>] (kstrtouint_from_user) from [<80609cf8>] (proc_fail_nth_write+0x40/0xe8) [ 616.561442][ T5982] r8:f4231f68 r7:84498c00 r6:00000001 r5:847a9180 r4:00000001 [ 616.561461][ T5982] [<80609cb8>] (proc_fail_nth_write) from [<8055592c>] (vfs_write+0xac/0x44c) [ 616.561597][ T5982] r5:847a9180 r4:80609cb8 [ 616.562594][ T5982] [<80555880>] (vfs_write) from [<80555e3c>] (ksys_write+0x74/0xe8) [ 616.562785][ T5982] r10:00000004 r9:84498c00 r8:8020029c r7:00000000 r6:00000002 r5:847a9180 [ 616.562870][ T5982] r4:847a9183 [ 616.562909][ T5982] [<80555dc8>] (ksys_write) from [<80555ec0>] (sys_write+0x10/0x14) [ 616.563008][ T5982] r7:00000004 r6:00000003 r5:76bddf30 r4:00000001 [ 616.563353][ T5982] [<80555eb0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 616.563425][ T5982] Exception stack(0xf4231fa8 to 0xf4231ff0) [ 616.563526][ T5982] 1fa0: 00000001 76bddf30 00000003 76bddf30 00000001 00000000 [ 616.563649][ T5982] 1fc0: 00000001 76bddf30 00000003 00000004 002d0000 00000000 00006364 76bde0bc [ 616.563763][ T5982] 1fe0: 00000158 76bdded0 000d7d50 0012febc [ 617.815694][ T31] audit: type=1400 audit(617.660:294): avc: denied { sqpoll } for pid=5986 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 617.943521][ T31] audit: type=1400 audit(617.790:295): avc: denied { accept } for pid=5986 comm="syz.1.722" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.377073][ T31] audit: type=1400 audit(620.230:296): avc: denied { getopt } for pid=6000 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 629.338557][ T31] audit: type=1400 audit(629.190:297): avc: denied { mounton } for pid=6013 comm="syz.1.730" path="/469/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 629.356604][ T6016] fuse: Unknown parameter 'func' [ 633.366438][ T31] audit: type=1400 audit(633.180:298): avc: denied { bind } for pid=6026 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.567876][ T6064] fuse: Bad value for 'fd' [ 649.584065][ T6081] fuse: Bad value for 'fd' [ 653.907110][ T6095] fuse: Bad value for 'fd' [ 659.470839][ T6116] fuse: Invalid rootmode [ 667.830994][ T6135] fuse: Invalid rootmode [ 668.626497][ T6137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=6137 comm=syz.1.766 [ 672.512004][ T6154] fuse: Invalid rootmode [ 674.289184][ T31] audit: type=1400 audit(674.140:299): avc: granted { setsecparam } for pid=6159 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 677.290514][ T6167] fuse: Unknown parameter '0x0000000000000003' [ 677.628175][ T6168] fuse: Bad value for 'rootmode' [ 682.019850][ T6179] fuse: Unknown parameter '0x0000000000000003' [ 682.662971][ T6182] fuse: Bad value for 'rootmode' [ 685.096767][ T6189] fuse: Unknown parameter 'fd0x0000000000000003' [ 685.527718][ T6193] fuse: Bad value for 'rootmode' [ 687.862042][ T6203] fuse: Unknown parameter 'fd0x0000000000000003' [ 688.960625][ T6207] fuse: Unknown parameter 'use00000000000000000000' [ 692.176459][ T31] audit: type=1400 audit(692.020:300): avc: denied { write } for pid=6217 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 693.488795][ T6222] fuse: Unknown parameter 'use00000000000000000000' [ 697.798454][ T6240] fuse: Unknown parameter 'use00000000000000000000' [ 702.069556][ T6256] fuse: Unknown parameter 'user_i00000000000000000000' [ 707.217743][ T6273] fuse: Unknown parameter 'user_i00000000000000000000' [ 708.800054][ T6280] fuse: Unknown parameter 'func' [ 715.469092][ T6299] fuse: Unknown parameter 'user_i00000000000000000000' [ 718.049078][ T6309] fuse: Unknown parameter 'func' [ 721.868645][ T6320] fuse: Unknown parameter 'user_id00000000000000000000' [ 725.377713][ T6330] fuse: Unknown parameter 'func' [ 745.736055][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 745.908980][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.909383][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.909776][ T23] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 745.909968][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.921170][ T23] usb 2-1: config 0 descriptor?? [ 751.269826][ T23] usbhid 2-1:0.0: can't add hid device: -32 [ 751.270642][ T23] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 757.944229][ T9] usb 2-1: USB disconnect, device number 5 [ 762.264715][ T6435] FAULT_INJECTION: forcing a failure. [ 762.264715][ T6435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.376203][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.1.866 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 762.376319][ T6435] Hardware name: ARM-Versatile Express [ 762.376347][ T6435] Call trace: [ 762.376389][ T6435] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 762.376525][ T6435] r7:dff4de20 r6:00000000 r5:60000113 r4:82259c04 [ 762.376547][ T6435] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 762.376624][ T6435] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 762.376712][ T6435] r5:83840000 r4:82950490 [ 762.376729][ T6435] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 762.376810][ T6435] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 762.376883][ T6435] r8:00000480 r7:dff4de20 r6:20000200 r5:00000000 r4:dff4df20 [ 762.376901][ T6435] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 762.376962][ T6435] [<8096b798>] (should_fail_usercopy) from [<81529a24>] (copy_msghdr_from_user+0x50/0x130) [ 762.377049][ T6435] [<815299d4>] (copy_msghdr_from_user) from [<81529b7c>] (___sys_sendmsg+0x78/0xd0) [ 762.377123][ T6435] r8:00000480 r7:00000000 r6:84c9cf00 r5:dff4df20 r4:dff4de64 [ 762.377142][ T6435] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 762.377221][ T6435] r10:00000128 r9:83840000 r8:857a7300 r7:00000480 r6:20000200 r5:857a7301 [ 762.377243][ T6435] r4:00000003 [ 762.377258][ T6435] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 762.377337][ T6435] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 762.377356][ T6435] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 762.377416][ T6435] Exception stack(0xdff4dfa8 to 0xdff4dff0) [ 762.377461][ T6435] dfa0: 00000000 00000000 00000003 20000200 00000480 00000000 [ 762.377495][ T6435] dfc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bce0bc [ 762.377521][ T6435] dfe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 793.188725][ T31] audit: type=1400 audit(793.040:301): avc: denied { create } for pid=6561 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 793.306684][ T31] audit: type=1400 audit(793.140:302): avc: denied { write } for pid=6561 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 793.330958][ T6563] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 793.347481][ T31] audit: type=1400 audit(793.180:303): avc: denied { mac_admin } for pid=6561 comm="syz.1.884" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 793.347917][ T31] audit: type=1400 audit(793.180:304): avc: denied { relabelto } for pid=6561 comm="syz.1.884" name="cgroup.procs" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 793.348265][ T31] audit: type=1400 audit(793.180:305): avc: denied { associate } for pid=6561 comm="syz.1.884" name="cgroup.procs" dev="cgroup" ino=82 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 793.376333][ T31] audit: type=1400 audit(793.210:306): avc: denied { read } for pid=6561 comm="syz.1.884" path="socket:[11647]" dev="sockfs" ino=11647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 803.997901][ T6585] fuse: Unknown parameter 'fd0x0000000000000003' [ 815.296511][ T31] audit: type=1400 audit(815.140:307): avc: denied { execute } for pid=6611 comm="syz.1.898" name="file0" dev="tmpfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 829.810676][ T6650] FAULT_INJECTION: forcing a failure. [ 829.810676][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.811216][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.0.909 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 829.811346][ T6650] Hardware name: ARM-Versatile Express [ 829.811374][ T6650] Call trace: [ 829.811415][ T6650] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 829.811743][ T6650] r7:20000080 r6:00000000 r5:60000013 r4:82259c04 [ 829.816072][ T6650] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 829.816203][ T6650] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 829.816303][ T6650] r5:8520ec00 r4:82950490 [ 829.816320][ T6650] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 829.816399][ T6650] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 829.816473][ T6650] r8:00000000 r7:20000080 r6:84146fc0 r5:00000000 r4:eaa01f20 [ 829.816492][ T6650] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 829.816555][ T6650] [<8096b798>] (should_fail_usercopy) from [<808bace8>] (_copy_from_iter+0x6c/0x7c8) [ 829.816634][ T6650] [<808bac7c>] (_copy_from_iter) from [<81655064>] (netlink_sendmsg+0x18c/0x444) [ 829.816739][ T6650] r10:00000000 r9:00000000 r8:eaa01f30 r7:85577000 r6:00000010 r5:84807900 [ 829.816760][ T6650] r4:eaa01f20 [ 829.816777][ T6650] [<81654ed8>] (netlink_sendmsg) from [<81527524>] (__sock_sendmsg+0x44/0x78) [ 829.816861][ T6650] r10:00000000 r9:eaa01dc4 r8:eaa01dc4 r7:00000000 r6:84c92280 r5:eaa01f20 [ 829.816881][ T6650] r4:00000000 [ 829.816898][ T6650] [<815274e0>] (__sock_sendmsg) from [<81527d94>] (____sys_sendmsg+0x298/0x2cc) [ 829.816955][ T6650] r7:00000000 r6:84c92280 r5:20000050 r4:eaa01f20 [ 829.816974][ T6650] [<81527afc>] (____sys_sendmsg) from [<81529ba0>] (___sys_sendmsg+0x9c/0xd0) [ 829.817046][ T6650] r10:eaa01e24 r9:20000180 r8:20000050 r7:00000000 r6:84c92280 r5:eaa01f20 [ 829.817067][ T6650] r4:00000000 [ 829.817083][ T6650] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 829.817159][ T6650] r10:00000128 r9:8520ec00 r8:857a70c0 r7:20000050 r6:20000180 r5:857a70c1 [ 829.817180][ T6650] r4:00000003 [ 829.817198][ T6650] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 829.817282][ T6650] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 829.817301][ T6650] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 829.817356][ T6650] Exception stack(0xeaa01fa8 to 0xeaa01ff0) [ 829.817408][ T6650] 1fa0: 00000000 00000000 00000003 20000180 20000050 00000000 [ 829.817444][ T6650] 1fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bde0bc [ 829.817471][ T6650] 1fe0: 76bddec0 76bddeb0 00019384 00131f20 [ 835.389483][ T6670] FAULT_INJECTION: forcing a failure. [ 835.389483][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 835.416635][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.1.914 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 835.416738][ T6670] Hardware name: ARM-Versatile Express [ 835.416762][ T6670] Call trace: [ 835.416802][ T6670] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 835.416930][ T6670] r7:00000c40 r6:00000000 r5:60000113 r4:82259c04 [ 835.416950][ T6670] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 835.417028][ T6670] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 835.417113][ T6670] r5:83aa8c00 r4:82919c40 [ 835.417128][ T6670] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 835.417205][ T6670] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 835.417305][ T6670] r8:83aa8c00 r7:00000c40 r6:856c5b68 r5:00001000 r4:830016c0 [ 835.417323][ T6670] [<80523710>] (should_failslab) from [<8050850c>] (__kmalloc_noprof+0x9c/0x458) [ 835.417406][ T6670] [<80508470>] (__kmalloc_noprof) from [<807c1810>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 835.417491][ T6670] r10:83aa8c00 r9:848a3000 r8:00000000 r7:84cbbbb0 r6:856c5b68 r5:00001000 [ 835.417510][ T6670] r4:00000000 [ 835.417526][ T6670] [<807c17d4>] (tomoyo_realpath_from_path) from [<807bd954>] (tomoyo_path_number_perm+0xcc/0x22c) [ 835.417602][ T6670] r10:83aa8c00 r9:00000000 r8:00000006 r7:00005450 r6:00000004 r5:81cd63f8 [ 835.417623][ T6670] r4:856c5b68 r3:826c0200 [ 835.417639][ T6670] [<807bd888>] (tomoyo_path_number_perm) from [<807c2234>] (tomoyo_file_ioctl+0x1c/0x20) [ 835.417716][ T6670] r9:856c5b40 r8:00000006 r7:00000000 r6:00000000 r5:00005450 r4:856c5b40 [ 835.417734][ T6670] [<807c2218>] (tomoyo_file_ioctl) from [<8076f37c>] (security_file_ioctl+0x64/0x1e4) [ 835.417808][ T6670] [<8076f318>] (security_file_ioctl) from [<8056ed10>] (sys_ioctl+0x4c/0xdc8) [ 835.417896][ T6670] r7:00000000 r6:856c5b41 r5:00000000 r4:00005450 [ 835.417913][ T6670] [<8056ecc4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 835.417974][ T6670] Exception stack(0xeaba9fa8 to 0xeaba9ff0) [ 835.418012][ T6670] 9fa0: 00000000 00000000 00000006 00005450 00000000 00000000 [ 835.418048][ T6670] 9fc0: 00000000 00000000 0012fed0 00000036 002d0000 00000000 00006364 76bce0bc [ 835.418079][ T6670] 9fe0: 76bcdec0 76bcdeb0 00019384 00131f20 [ 835.418112][ T6670] r10:00000036 r9:83aa8c00 r8:8020029c r7:00000036 r6:0012fed0 r5:00000000 [ 835.418130][ T6670] r4:00000000 [ 835.418838][ T6670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 852.568772][ T31] audit: type=1400 audit(852.420:308): avc: denied { execute } for pid=6717 comm="syz-executor" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 852.602637][ T31] audit: type=1400 audit(852.450:309): avc: denied { execute_no_trans } for pid=6717 comm="syz-executor" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 852.725707][ T31] audit: type=1400 audit(852.570:310): avc: denied { mounton } for pid=6718 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 852.864284][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.957471][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.018315][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.070531][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.390766][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.404837][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.422382][ T1057] bond0 (unregistering): Released all slaves [ 853.567114][ T1057] hsr_slave_0: left promiscuous mode [ 853.571315][ T1057] hsr_slave_1: left promiscuous mode [ 853.596455][ T1057] veth1_macvtap: left promiscuous mode [ 853.596996][ T1057] veth0_macvtap: left promiscuous mode [ 853.597296][ T1057] veth1_vlan: left promiscuous mode [ 853.597568][ T1057] veth0_vlan: left promiscuous mode [ 856.567171][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.574967][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.827679][ T6718] hsr_slave_0: entered promiscuous mode [ 857.829325][ T6718] hsr_slave_1: entered promiscuous mode [ 857.836764][ T6718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.837149][ T6718] Cannot create hsr debugfs directory [ 858.612778][ T6718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 858.631999][ T6718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 858.651030][ T6718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 858.661624][ T6718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 859.623091][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.438477][ T6718] veth0_vlan: entered promiscuous mode [ 863.484674][ T6718] veth1_vlan: entered promiscuous mode [ 863.553113][ T6718] veth0_macvtap: entered promiscuous mode [ 863.563018][ T6718] veth1_macvtap: entered promiscuous mode [ 863.612863][ T6718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.614201][ T6718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.616777][ T6718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.617804][ T6718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.736782][ T31] audit: type=1400 audit(863.570:311): avc: denied { mounton } for pid=6718 comm="syz-executor" path="/syzkaller.kA7gjg/syz-tmp" dev="vda" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 863.742190][ T31] audit: type=1400 audit(863.590:312): avc: denied { mount } for pid=6718 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 863.760064][ T31] audit: type=1400 audit(863.610:313): avc: denied { mounton } for pid=6718 comm="syz-executor" path="/syzkaller.kA7gjg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 863.769595][ T31] audit: type=1400 audit(863.610:314): avc: denied { mounton } for pid=6718 comm="syz-executor" path="/syzkaller.kA7gjg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 863.808564][ T31] audit: type=1400 audit(863.660:315): avc: denied { unmount } for pid=6718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 863.820875][ T31] audit: type=1400 audit(863.670:316): avc: denied { mounton } for pid=6718 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 863.822557][ T31] audit: type=1400 audit(863.670:317): avc: denied { mount } for pid=6718 comm="syz-executor" name="/" dev="gadgetfs" ino=2015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 863.828023][ T31] audit: type=1400 audit(863.670:318): avc: denied { mount } for pid=6718 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 863.831367][ T31] audit: type=1400 audit(863.680:319): avc: denied { write } for pid=6718 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 863.834447][ T31] audit: type=1400 audit(863.680:320): avc: denied { open } for pid=6718 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 870.301698][ T7184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7184 comm=syz.1.938 [ 870.583171][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=7192 comm=syz.1.940 [ 872.269396][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 872.270261][ T31] audit: type=1400 audit(872.120:322): avc: denied { mount } for pid=7202 comm="syz.1.943" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 872.278326][ T7203] FAULT_INJECTION: forcing a failure. [ 872.278326][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.278819][ T7203] CPU: 0 UID: 0 PID: 7203 Comm: syz.1.943 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 872.278882][ T7203] Hardware name: ARM-Versatile Express [ 872.278906][ T7203] Call trace: [ 872.278947][ T7203] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 872.279341][ T7203] r7:00000000 r6:00000000 r5:60000013 r4:82259c04 [ 872.279558][ T7203] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 872.283450][ T7203] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 872.283992][ T7203] r5:84005400 r4:82950490 [ 872.284021][ T7203] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 872.284998][ T7203] [<8096b558>] (should_fail_ex) from [<8096b794>] (should_fail+0x14/0x18) [ 872.286473][ T7203] r8:00000000 r7:00000000 r6:8245c848 r5:20000180 r4:20000180 [ 872.286494][ T7203] [<8096b780>] (should_fail) from [<8096b7b4>] (should_fail_usercopy+0x1c/0x20) [ 872.286590][ T7203] [<8096b798>] (should_fail_usercopy) from [<80971880>] (strncpy_from_user+0x20/0x1a0) [ 872.286667][ T7203] [<80971860>] (strncpy_from_user) from [<805646cc>] (getname_flags.part.0+0x44/0x18c) [ 872.286758][ T7203] r10:000000e2 r9:84005400 r8:00000000 r7:00000000 r6:8245c848 r5:20000180 [ 872.286778][ T7203] r4:833bb000 [ 872.286797][ T7203] [<80564688>] (getname_flags.part.0) from [<80569644>] (getname_flags+0x3c/0x50) [ 872.286877][ T7203] r9:84005400 r8:00000000 r7:ffffff9c r6:00000000 r5:00000000 r4:20000180 [ 872.286895][ T7203] [<80569608>] (getname_flags) from [<8058e4c8>] (path_setxattrat+0x14c/0x17c) [ 872.286982][ T7203] r5:20000180 r4:00000000 [ 872.287000][ T7203] [<8058e37c>] (path_setxattrat) from [<8058e684>] (sys_setxattr+0x34/0x3c) [ 872.287159][ T7203] r8:8020029c r7:000000e2 r6:0012fed0 r5:00000000 r4:200002c0 [ 872.287179][ T7203] [<8058e650>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 872.287257][ T7203] Exception stack(0xeb075fa8 to 0xeb075ff0) [ 872.287339][ T7203] 5fa0: 00000001 00000000 20000180 200002c0 00000000 00000000 [ 872.287375][ T7203] 5fc0: 00000001 00000000 0012fed0 000000e2 002d0000 00000000 00006364 76bea0bc [ 872.287401][ T7203] 5fe0: 76be9ec0 76be9eb0 00019384 00131f20 [ 872.287424][ T7203] r4:00000001 [ 872.344511][ T31] audit: type=1400 audit(872.190:323): avc: denied { unmount } for pid=6718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 877.446108][ T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 877.596340][ T54] usb 2-1: device descriptor read/64, error -71 [ 877.836409][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 877.865708][ T5825] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 877.966973][ T54] usb 2-1: device descriptor read/64, error -71 [ 878.087791][ T54] usb usb2-port1: attempt power cycle [ 878.446129][ T54] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 878.472830][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.473212][ T5825] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 878.473529][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.477980][ T5825] usb 1-1: config 0 descriptor?? [ 878.482203][ T54] usb 2-1: device descriptor read/8, error -71 [ 878.726261][ T54] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 878.760214][ T54] usb 2-1: device descriptor read/8, error -71 [ 878.866505][ T54] usb usb2-port1: unable to enumerate USB device [ 879.353123][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.558120][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.098840][ T5825] usbhid 1-1:0.0: can't add hid device: -71 [ 880.099306][ T5825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 880.108267][ T5825] usb 1-1: USB disconnect, device number 12 [ 904.906728][ T31] audit: type=1400 audit(904.760:324): avc: denied { append } for pid=7376 comm="syz.1.984" name="pfkey" dev="proc" ino=4026532818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 905.505914][ T31] audit: type=1400 audit(905.300:325): avc: denied { ioctl } for pid=7381 comm="syz.1.986" path="socket:[12623]" dev="sockfs" ino=12623 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 910.292241][ T31] audit: type=1400 audit(910.120:326): avc: denied { connect } for pid=7381 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 912.491043][ T7395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7395 comm=syz.1.988 [ 912.940104][ T31] audit: type=1400 audit(912.790:327): avc: denied { read } for pid=7396 comm="syz.1.989" path="socket:[13329]" dev="sockfs" ino=13329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 912.942128][ T7397] fuse: Unknown parameter 'func' [ 913.277640][ T31] audit: type=1400 audit(913.130:328): avc: denied { lock } for pid=7399 comm="syz.1.990" path="socket:[12665]" dev="sockfs" ino=12665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 916.758274][ T31] audit: type=1400 audit(916.610:329): avc: denied { name_bind } for pid=7409 comm="syz.0.992" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 932.236203][ T31] audit: type=1400 audit(932.080:330): avc: denied { create } for pid=7474 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 932.273797][ T31] audit: type=1400 audit(932.120:331): avc: denied { write } for pid=7474 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 934.368067][ T31] audit: type=1400 audit(934.220:332): avc: denied { read } for pid=7495 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 941.480726][ T7531] syz.1.1025(7531): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 953.482961][ T7577] FAULT_INJECTION: forcing a failure. [ 953.482961][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 953.526404][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.1.1040 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 953.526504][ T7577] Hardware name: ARM-Versatile Express [ 953.526523][ T7577] Call trace: [ 953.526558][ T7577] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 953.526678][ T7577] r7:8520b000 r6:00000000 r5:60000013 r4:82259c04 [ 953.526694][ T7577] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 953.526764][ T7577] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 953.526847][ T7577] r5:8520b000 r4:82919c40 [ 953.526859][ T7577] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 953.526930][ T7577] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 953.527013][ T7577] r8:00000000 r7:8520b000 r6:00000dc0 r5:00000000 r4:83001240 [ 953.527027][ T7577] [<80523710>] (should_failslab) from [<8050753c>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 953.527104][ T7577] [<805074f0>] (__kmalloc_cache_noprof) from [<8056ccac>] (file_f_owner_allocate+0x3c/0x88) [ 953.527189][ T7577] r10:00000037 r9:846ce9c0 r8:00000003 r7:00000001 r6:846ce9c0 r5:00000000 [ 953.527206][ T7577] r4:846ce9c0 [ 953.527223][ T7577] [<8056cc70>] (file_f_owner_allocate) from [<8056cd70>] (f_setown+0x78/0xac) [ 953.527335][ T7577] r5:846ce9c0 r4:00000000 [ 953.527348][ T7577] [<8056ccf8>] (f_setown) from [<8056d6a0>] (do_fcntl+0x67c/0x860) [ 953.527430][ T7577] r7:00000003 r6:00000000 r5:846ce9c0 r4:00000008 [ 953.527444][ T7577] [<8056d024>] (do_fcntl) from [<8056d8f4>] (sys_fcntl+0x70/0xd0) [ 953.527530][ T7577] r8:00000003 r7:00000000 r6:00000008 r5:00000000 r4:846ce9c1 [ 953.527543][ T7577] [<8056d884>] (sys_fcntl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 953.527601][ T7577] Exception stack(0xf33c9fa8 to 0xf33c9ff0) [ 953.527632][ T7577] 9fa0: 00000000 00000000 00000003 00000008 00000000 00000000 [ 953.527690][ T7577] 9fc0: 00000000 00000000 0012fed0 00000037 002d0000 00000000 00006364 76bea0bc [ 953.527751][ T7577] 9fe0: 76be9ec0 76be9eb0 00019384 00131f20 [ 953.527780][ T7577] r9:8520b000 r8:8020029c r7:00000037 r6:0012fed0 r5:00000000 r4:00000000 [ 957.063787][ T7591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=7591 comm=syz.1.1045 [ 960.799740][ T7609] SELinux: Context system_u:object_r:systemd_logind_exec_t:s0 is not valid (left unmapped). [ 960.816106][ T31] audit: type=1400 audit(960.660:333): avc: denied { relabelto } for pid=7608 comm="syz.1.1052" name="uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_exec_t:s0" [ 960.816563][ T31] audit: type=1400 audit(960.660:334): avc: denied { associate } for pid=7608 comm="syz.1.1052" name="uinput" dev="devtmpfs" ino=699 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_exec_t:s0" [ 961.676904][ T31] audit: type=1400 audit(961.530:335): avc: denied { accept } for pid=7614 comm="syz.1.1054" laddr=::1 lport=39023 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 969.296253][ T31] audit: type=1400 audit(969.140:336): avc: denied { nlmsg_write } for pid=7638 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 969.553411][ T7643] FAULT_INJECTION: forcing a failure. [ 969.553411][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 969.553884][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.1.1064 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 969.553953][ T7643] Hardware name: ARM-Versatile Express [ 969.553981][ T7643] Call trace: [ 969.554025][ T7643] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 969.554143][ T7643] r7:85209800 r6:00000000 r5:60000013 r4:82259c04 [ 969.554166][ T7643] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 969.554239][ T7643] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 969.554335][ T7643] r5:85209800 r4:82919c40 [ 969.554383][ T7643] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 969.554485][ T7643] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 969.554762][ T7643] r8:00000000 r7:85209800 r6:00000820 r5:849fdcc0 r4:830adb40 [ 969.555047][ T7643] [<80523710>] (should_failslab) from [<80508188>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 969.555181][ T7643] [<8050813c>] (kmem_cache_alloc_noprof) from [<8153b178>] (skb_clone+0x60/0x1c8) [ 969.555517][ T7643] r10:000001a2 r9:85780f80 r8:85587c00 r7:849fdcc0 r6:84bf2ec0 r5:849fdcc0 [ 969.555582][ T7643] r4:00000820 [ 969.555730][ T7643] [<8153b118>] (skb_clone) from [<81651e18>] (__netlink_deliver_tap+0x1f4/0x28c) [ 969.555889][ T7643] r5:0000005c r4:84bf2800 [ 969.555911][ T7643] [<81651c24>] (__netlink_deliver_tap) from [<81654ebc>] (netlink_unicast+0x280/0x29c) [ 969.556011][ T7643] r10:00000000 r9:00000000 r8:85358d00 r7:849fdcc0 r6:85780f80 r5:0000005c [ 969.556033][ T7643] r4:85587c00 [ 969.556051][ T7643] [<81654c3c>] (netlink_unicast) from [<816550a4>] (netlink_sendmsg+0x1cc/0x444) [ 969.556150][ T7643] r9:00000000 r8:00000000 r7:85254400 r6:0000005c r5:849fdcc0 r4:f36d1f20 [ 969.556181][ T7643] [<81654ed8>] (netlink_sendmsg) from [<81527524>] (__sock_sendmsg+0x44/0x78) [ 969.556275][ T7643] r10:00000000 r9:f36d1dc4 r8:f36d1dc4 r7:00000000 r6:84c9c000 r5:f36d1f20 [ 969.556297][ T7643] r4:00000000 [ 969.556339][ T7643] [<815274e0>] (__sock_sendmsg) from [<81527d94>] (____sys_sendmsg+0x298/0x2cc) [ 969.556403][ T7643] r7:00000000 r6:84c9c000 r5:00004800 r4:f36d1f20 [ 969.556420][ T7643] [<81527afc>] (____sys_sendmsg) from [<81529ba0>] (___sys_sendmsg+0x9c/0xd0) [ 969.556638][ T7643] r10:f36d1e24 r9:200002c0 r8:00004800 r7:00000000 r6:84c9c000 r5:f36d1f20 [ 969.556762][ T7643] r4:00000000 [ 969.556899][ T7643] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 969.557055][ T7643] r10:00000128 r9:85209800 r8:857a70c0 r7:00004800 r6:200002c0 r5:857a70c1 [ 969.557223][ T7643] r4:00000003 [ 969.557375][ T7643] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 969.557647][ T7643] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 969.557846][ T7643] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 969.558082][ T7643] Exception stack(0xf36d1fa8 to 0xf36d1ff0) [ 969.558132][ T7643] 1fa0: 00000000 00000000 00000003 200002c0 00004800 00000000 [ 969.558226][ T7643] 1fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bea0bc [ 969.558282][ T7643] 1fe0: 76be9ec0 76be9eb0 00019384 00131f20 [ 975.312326][ T7667] FAULT_INJECTION: forcing a failure. [ 975.312326][ T7667] name failslab, interval 1, probability 0, space 0, times 0 [ 975.313997][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.0.1070 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 975.314108][ T7667] Hardware name: ARM-Versatile Express [ 975.314134][ T7667] Call trace: [ 975.314180][ T7667] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 975.314323][ T7667] r7:847e2400 r6:00000000 r5:60000013 r4:82259c04 [ 975.314345][ T7667] [<80201ae4>] (show_stack) from [<8021fe20>] (dump_stack_lvl+0x70/0x7c) [ 975.314420][ T7667] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 975.314505][ T7667] r5:847e2400 r4:82919c40 [ 975.314522][ T7667] [<8021fe2c>] (dump_stack) from [<8096b71c>] (should_fail_ex+0x1c4/0x228) [ 975.314603][ T7667] [<8096b558>] (should_fail_ex) from [<8052377c>] (should_failslab+0x6c/0x94) [ 975.314691][ T7667] r8:00000000 r7:847e2400 r6:00400cc0 r5:ffffffff r4:830adb40 [ 975.314709][ T7667] [<80523710>] (should_failslab) from [<80507b1c>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 975.314789][ T7667] [<80507acc>] (kmem_cache_alloc_node_noprof) from [<815348d0>] (__alloc_skb+0x138/0x160) [ 975.314868][ T7667] r10:f3831d1c r9:00000000 r8:00400cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 975.314889][ T7667] r4:828060c0 [ 975.314909][ T7667] [<81534798>] (__alloc_skb) from [<8153ce74>] (alloc_skb_with_frags+0x44/0x1ec) [ 975.314984][ T7667] r8:802c5da0 r7:f3831cc4 r6:00000000 r5:00001000 r4:00000003 [ 975.315089][ T7667] [<8153ce30>] (alloc_skb_with_frags) from [<8152d6dc>] (sock_alloc_send_pskb+0x1f4/0x228) [ 975.315184][ T7667] r10:f3831d1c r9:00000000 r8:802c5da0 r7:f3831cc4 r6:847e2400 r5:7fffffff [ 975.315206][ T7667] r4:849d0300 [ 975.315221][ T7667] [<8152d4e8>] (sock_alloc_send_pskb) from [<81801d28>] (unix_dgram_sendmsg+0x134/0x764) [ 975.315365][ T7667] r10:00000000 r9:f3831dc4 r8:847e2400 r7:849d0300 r6:00000000 r5:00000000 [ 975.315387][ T7667] r4:f3831f20 [ 975.315402][ T7667] [<81801bf4>] (unix_dgram_sendmsg) from [<8180239c>] (unix_seqpacket_sendmsg+0x44/0x84) [ 975.315505][ T7667] r10:00000000 r9:f3831dc4 r8:f3831dc4 r7:00000000 r6:84c90000 r5:f3831f20 [ 975.315525][ T7667] r4:00000000 [ 975.315540][ T7667] [<81802358>] (unix_seqpacket_sendmsg) from [<81527524>] (__sock_sendmsg+0x44/0x78) [ 975.315611][ T7667] r5:f3831f20 r4:00000000 [ 975.315628][ T7667] [<815274e0>] (__sock_sendmsg) from [<81527d94>] (____sys_sendmsg+0x298/0x2cc) [ 975.315681][ T7667] r7:00000000 r6:84c90000 r5:00008800 r4:f3831f20 [ 975.315697][ T7667] [<81527afc>] (____sys_sendmsg) from [<81529ba0>] (___sys_sendmsg+0x9c/0xd0) [ 975.315765][ T7667] r10:f3831e24 r9:20000280 r8:00008800 r7:00000000 r6:84c90000 r5:f3831f20 [ 975.315786][ T7667] r4:00000000 [ 975.315802][ T7667] [<81529b04>] (___sys_sendmsg) from [<8152a038>] (__sys_sendmsg+0x8c/0xe0) [ 975.315873][ T7667] r10:00000128 r9:847e2400 r8:85133c00 r7:00008800 r6:20000280 r5:85133c01 [ 975.315892][ T7667] r4:00000004 [ 975.315907][ T7667] [<81529fac>] (__sys_sendmsg) from [<8152a0a0>] (sys_sendmsg+0x14/0x18) [ 975.315976][ T7667] r8:8020029c r7:00000128 r6:0012fed0 r5:00000000 r4:00000000 [ 975.315994][ T7667] [<8152a08c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 975.316050][ T7667] Exception stack(0xf3831fa8 to 0xf3831ff0) [ 975.316087][ T7667] 1fa0: 00000000 00000000 00000004 20000280 00008800 00000000 [ 975.316121][ T7667] 1fc0: 00000000 00000000 0012fed0 00000128 002d0000 00000000 00006364 76bde0bc [ 975.316146][ T7667] 1fe0: 76bddec0 76bddeb0 00019384 00131f20 [ 981.986112][ T31] audit: type=1400 audit(981.830:337): avc: denied { setopt } for pid=7689 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 986.846386][ T31] audit: type=1400 audit(986.690:338): avc: denied { name_bind } for pid=7702 comm="syz.1.1082" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 986.848872][ T31] audit: type=1400 audit(986.700:339): avc: denied { node_bind } for pid=7702 comm="syz.1.1082" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 990.216540][ T7712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46489 sclass=netlink_route_socket pid=7712 comm=syz.1.1086 [ 990.940585][ T7716] fuse: Bad value for 'fd' [ 1008.650541][ T31] audit: type=1400 audit(1008.500:340): avc: denied { read } for pid=7744 comm="syz.1.1097" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1008.687182][ T31] audit: type=1400 audit(1008.540:341): avc: denied { open } for pid=7744 comm="syz.1.1097" path="/129/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1010.915790][ T23] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1011.166489][ T23] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1011.166941][ T23] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1011.167298][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1011.167573][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1011.167846][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1011.168152][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1011.257289][ T23] usb 2-1: string descriptor 0 read error: -22 [ 1011.257688][ T23] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1011.257970][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.278117][ T23] usb 2-1: config 0 descriptor?? [ 1011.287527][ T7752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1011.290004][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1011.290328][ T23] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1011.294718][ T23] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 1011.592465][ T23] usb 2-1: USB disconnect, device number 10 [ 1014.523658][ T31] audit: type=1400 audit(1014.350:342): avc: denied { create } for pid=7776 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.669305][ T7781] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 1014.688665][ T7781] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 1018.675964][ T5825] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1019.719023][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1019.719539][ T5825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1019.719649][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1020.762037][ T5825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1020.762401][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1020.762784][ T5825] usb 2-1: Product: syz [ 1020.762862][ T5825] usb 2-1: Manufacturer: syz [ 1020.762915][ T5825] usb 2-1: SerialNumber: syz [ 1021.051963][ T5825] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1021.448845][ T6408] usb 2-1: USB disconnect, device number 11 [ 1021.549072][ T6408] usblp0: removed [ 1022.156668][ T31] audit: type=1400 audit(1022.000:343): avc: denied { set_context_mgr } for pid=7804 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1022.331585][ T31] audit: type=1400 audit(1022.180:344): avc: denied { map } for pid=7804 comm="syz.1.1104" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1022.438749][ T31] audit: type=1400 audit(1022.290:345): avc: denied { call } for pid=7804 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1022.495933][ T31] audit: type=1400 audit(1022.340:346): avc: denied { transfer } for pid=7804 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1033.940075][ T7819] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 1034.226313][ T7819] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 1044.868949][ T7826] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 1044.896963][ T7826] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 1050.415834][ T31] audit: type=1400 audit(1050.240:347): avc: denied { prog_run } for pid=7828 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1059.873219][ T7835] process 'syz.1.1113' launched '/dev/fd/3' with NULL argv: empty string added [ 1059.912357][ T31] audit: type=1400 audit(1059.760:348): avc: denied { execute_no_trans } for pid=7834 comm="syz.1.1113" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1061.785941][ T6408] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1062.076259][ T6408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.076681][ T6408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.076961][ T6408] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1062.077209][ T6408] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1062.077413][ T6408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.084525][ T6408] usb 1-1: config 0 descriptor?? [ 1062.275927][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1062.505825][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1062.506321][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.506411][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.506487][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1062.556815][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1062.557240][ T43] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1062.557571][ T43] usb 2-1: Manufacturer: syz [ 1062.575914][ T43] usb 2-1: config 0 descriptor?? [ 1063.220138][ T43] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 1063.222495][ T43] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 1063.238454][ T43] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1063.303112][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.305809][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.307169][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.308697][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.310163][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.311373][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.312471][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.313505][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.314784][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.316493][ T6408] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1063.318683][ T6408] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1063.329502][ T6408] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1063.652413][ T6408] usb 1-1: USB disconnect, device number 13 [ 1064.699399][ T6408] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 1070.017789][ T7888] UHID_CREATE from different security context by process 363 (syz.1.1120), this is not allowed. [ 1070.437067][ T23] usb 2-1: USB disconnect, device number 12 [ 1070.757193][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'. [ 1070.766531][ T31] audit: type=1400 audit(1070.620:349): avc: denied { bind } for pid=7889 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1071.767792][ T31] audit: type=1400 audit(1071.620:350): avc: denied { write } for pid=7889 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1079.300126][ T31] audit: type=1400 audit(1079.100:351): avc: denied { read } for pid=7912 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1080.056577][ T31] audit: type=1400 audit(1079.610:352): avc: denied { setopt } for pid=7912 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1080.057066][ T31] audit: type=1400 audit(1079.620:353): avc: denied { write } for pid=7912 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1085.665778][ T7880] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1085.885569][ T7880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.885972][ T7880] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1085.886295][ T7880] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1085.886466][ T7880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.087378][ T7924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1086.102605][ T7880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.117733][ T31] audit: type=1400 audit(1091.970:354): avc: denied { create } for pid=7944 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1098.658405][ T5825] usb 2-1: USB disconnect, device number 13 [ 1100.389437][ T31] audit: type=1400 audit(1100.240:355): avc: denied { connect } for pid=7973 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1103.666046][ T31] audit: type=1400 audit(1103.510:356): avc: denied { setopt } for pid=7983 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1156.466082][ T8043] vlan2: entered allmulticast mode [ 1156.467217][ T8043] bond0: entered allmulticast mode [ 1156.470586][ T8043] bond_slave_0: entered allmulticast mode [ 1156.472643][ T8043] bond_slave_1: entered allmulticast mode [ 1159.747494][ T8053] input: syz1 as /devices/virtual/input/input10 [ 1159.754746][ T31] audit: type=1400 audit(1159.360:357): avc: denied { read write } for pid=8050 comm="syz.1.1155" name="uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_exec_t:s0" [ 1159.755613][ T31] audit: type=1400 audit(1159.360:358): avc: denied { open } for pid=8050 comm="syz.1.1155" path="/dev/uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_exec_t:s0" [ 1159.756429][ T31] audit: type=1400 audit(1159.420:359): avc: denied { ioctl } for pid=8050 comm="syz.1.1155" path="/dev/uinput" dev="devtmpfs" ino=699 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_exec_t:s0" [ 1166.218732][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.240612][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.278324][ T8062] hsr_slave_0: entered promiscuous mode [ 1168.280916][ T8062] hsr_slave_1: entered promiscuous mode [ 1168.286049][ T8062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.287124][ T8062] Cannot create hsr debugfs directory [ 1169.141336][ T8062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1169.150074][ T8062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1169.165010][ T8062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1169.191556][ T8062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1170.703776][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.749309][ T31] audit: type=1400 audit(1172.600:360): avc: denied { setopt } for pid=8418 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1175.486622][ T8436] capability: warning: `syz.1.1165' uses 32-bit capabilities (legacy support in use) [ 1175.813466][ T6722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.918124][ T6722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.997636][ T6722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.060779][ T6722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.587985][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.607851][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.630363][ T6722] bond0 (unregistering): Released all slaves [ 1176.756899][ T6722] hsr_slave_0: left promiscuous mode [ 1176.766505][ T6722] hsr_slave_1: left promiscuous mode [ 1176.788565][ T6722] veth1_macvtap: left promiscuous mode [ 1176.789153][ T6722] veth0_macvtap: left promiscuous mode [ 1176.789762][ T6722] veth1_vlan: left promiscuous mode [ 1176.789954][ T6722] veth0_vlan: left promiscuous mode [ 1177.358031][ T8452] geneve2: entered promiscuous mode [ 1179.947240][ T8062] veth0_vlan: entered promiscuous mode [ 1179.957020][ T8062] veth1_vlan: entered promiscuous mode [ 1180.088968][ T8062] veth0_macvtap: entered promiscuous mode [ 1180.101206][ T8062] veth1_macvtap: entered promiscuous mode [ 1180.170228][ T8062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.170441][ T8062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.170490][ T8062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.170558][ T8062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.891898][ T31] audit: type=1326 audit(1189.740:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.894593][ T31] audit: type=1326 audit(1189.740:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.904305][ T31] audit: type=1326 audit(1189.750:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.907629][ T31] audit: type=1326 audit(1189.760:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.911093][ T31] audit: type=1326 audit(1189.760:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.913519][ T31] audit: type=1326 audit(1189.760:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=391 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.921351][ T31] audit: type=1326 audit(1189.770:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1189.934432][ T31] audit: type=1326 audit(1189.780:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.2.1173" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1191.081237][ T31] audit: type=1400 audit(1190.930:369): avc: denied { read } for pid=8541 comm="syz.2.1175" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1191.088073][ T31] audit: type=1400 audit(1190.930:370): avc: denied { open } for pid=8541 comm="syz.2.1175" path="/8/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1226.282158][ T6722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.471943][ T6722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.610573][ T6722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.749005][ T6722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.435743][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.437823][ T6722] bond_slave_0: left allmulticast mode [ 1227.449610][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.451603][ T6722] bond_slave_1: left allmulticast mode [ 1227.467229][ T6722] bond0 (unregistering): Released all slaves [ 1227.837142][ T6722] hsr_slave_0: left promiscuous mode [ 1227.851121][ T6722] hsr_slave_1: left promiscuous mode [ 1227.941568][ T6722] veth1_macvtap: left promiscuous mode [ 1227.944298][ T6722] veth0_macvtap: left promiscuous mode [ 1227.944536][ T6722] veth1_vlan: left promiscuous mode [ 1227.944670][ T6722] veth0_vlan: left promiscuous mode [ 1230.367148][ C1] vcan0: j1939_tp_rxtimer: 0x855bbd00: rx timeout, send abort [ 1230.368616][ C1] vcan0: j1939_xtp_rx_abort_one: 0x855bbd00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1231.657425][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.677967][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.467193][ T8592] hsr_slave_0: entered promiscuous mode [ 1234.470450][ T8592] hsr_slave_1: entered promiscuous mode [ 1235.324217][ T8592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1235.364083][ T8592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1235.374341][ T8592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1235.489340][ T8592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1236.666748][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.039779][ T8592] veth0_vlan: entered promiscuous mode [ 1241.061403][ T8592] veth1_vlan: entered promiscuous mode [ 1241.151091][ T8592] veth0_macvtap: entered promiscuous mode [ 1241.163679][ T8592] veth1_macvtap: entered promiscuous mode [ 1241.232684][ T8592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.233893][ T8592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.234928][ T8592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.239072][ T8592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.501119][ T31] audit: type=1400 audit(1242.350:371): avc: denied { bind } for pid=9011 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1243.012935][ T31] audit: type=1400 audit(1242.860:372): avc: denied { listen } for pid=9011 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1243.046525][ T31] audit: type=1400 audit(1242.890:373): avc: denied { write } for pid=9011 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1245.965883][ T31] audit: type=1326 audit(1245.810:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1245.975858][ T31] audit: type=1326 audit(1245.820:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1245.985672][ T31] audit: type=1326 audit(1245.830:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=390 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1245.986098][ T31] audit: type=1326 audit(1245.830:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1246.017625][ T31] audit: type=1326 audit(1245.860:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1246.018029][ T31] audit: type=1326 audit(1245.870:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1246.029318][ T31] audit: type=1326 audit(1245.870:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.2.1194" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x131f20 code=0x7ffc0000 [ 1248.426631][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.428024][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.548206][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1200'. [ 1251.000448][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.003219][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.703918][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.715071][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.974849][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.980452][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.243733][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.251952][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.372394][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.380471][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.574634][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.579454][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.863017][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.868002][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.888941][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.890626][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.170942][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.176337][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.542222][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.543228][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.896363][ T9180] bond0: entered promiscuous mode [ 1291.897023][ T9180] bond_slave_0: entered promiscuous mode [ 1291.897559][ T9180] bond_slave_1: entered promiscuous mode [ 1291.897862][ T9180] bond0: entered allmulticast mode [ 1291.897956][ T9180] bond_slave_0: entered allmulticast mode [ 1291.898027][ T9180] bond_slave_1: entered allmulticast mode [ 1293.017110][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.020859][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.320253][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.328381][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.552562][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1293.553151][ T31] audit: type=1400 audit(263693.399:393): avc: denied { watch } for pid=9195 comm="syz.3.1227" path="/19" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1294.393735][ T31] audit: type=1400 audit(263694.239:394): avc: denied { mounton } for pid=9200 comm="syz.3.1229" path="/proc/53/task" dev="proc" ino=15992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1294.574899][ T31] audit: type=1400 audit(263694.419:395): avc: denied { associate } for pid=9202 comm="syz.3.1229" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1295.027422][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.030306][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.795592][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.834635][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.694637][ T9217] ======================================================= [ 1296.694637][ T9217] WARNING: The mand mount option has been deprecated and [ 1296.694637][ T9217] and is ignored by this kernel. Remove the mand [ 1296.694637][ T9217] option from the mount to silence this warning. [ 1296.694637][ T9217] ======================================================= [ 1312.312386][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.327398][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.393173][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.402723][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.487722][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.506058][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.619227][ T31] audit: type=1400 audit(263714.469:396): avc: denied { mount } for pid=9249 comm="syz.3.1240" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1314.650056][ T9250] debugfs: Invalid gid '0x00000000ffffffff' [ 1314.650119][ T31] audit: type=1400 audit(263714.499:397): avc: denied { remount } for pid=9249 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1314.681949][ T31] audit: type=1400 audit(263714.529:398): avc: denied { unmount } for pid=8592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1314.886435][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.899539][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.062999][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.086287][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.128830][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.130304][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.818908][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.820770][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.545954][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.548799][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.733791][ T9302] nftables ruleset with unbound chain [ 1335.147753][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.153335][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.334375][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.335998][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.231696][ T9324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1265'. [ 1348.308524][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.313357][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.462056][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.469615][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.420761][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.427107][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.571516][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.574151][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.958489][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 1353.645702][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.654682][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.176011][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.176901][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.738704][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.740914][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.952038][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.957570][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.972631][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.977414][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.270292][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.271927][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.947856][ T31] audit: type=1400 audit(263762.799:399): avc: denied { map } for pid=9410 comm="syz.3.1291" path="socket:[16936]" dev="sockfs" ino=16936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1363.159703][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.163835][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.284030][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.289198][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.929461][ T9426] syz.3.1295 uses obsolete (PF_INET,SOCK_PACKET) [ 1366.552645][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.566571][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.806586][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.809725][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.501750][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1300'. [ 1368.143241][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.149251][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.272920][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.281731][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.825767][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.826684][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.266074][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.276859][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.546397][ T9479] nbd2: detected capacity change from 0 to 4294967296 [ 1374.072342][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.081264][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.088790][ T9484] block nbd2: shutting down sockets [ 1374.377817][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.450467][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.744601][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.747317][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.888062][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.890707][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.017681][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.021626][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.161464][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.164278][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.610851][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.614702][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.171197][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.173491][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.683403][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.688503][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.812421][ T9653] macvtap0: entered allmulticast mode [ 1390.813109][ T9653] veth0_macvtap: entered allmulticast mode [ 1395.257909][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 1399.101443][ T31] audit: type=1400 audit(263798.949:400): avc: denied { mount } for pid=9679 comm="syz.3.1347" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1401.164444][ T9683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9683 comm=syz.3.1348 [ 1408.173365][ T9703] ------------[ cut here ]------------ [ 1408.174161][ T9703] WARN ** replaying previous printk message ** [ 1408.174161][ T9703] WARNING: CPU: 0 PID: 9703 at kernel/dma/direct.h:87 dma_direct_map_sg+0x374/0x404 [ 1408.188432][ T9703] Modules linked in: [ 1408.189647][ T9703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1408.190184][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.3.1355 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT [ 1408.190499][ T9703] Hardware name: ARM-Versatile Express [ 1408.190721][ T9703] Call trace: [ 1408.190935][ T9703] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1408.191343][ T9703] r7:00000000 r6:8282083c r5:00000000 r4:82259c04 [ 1408.191570][ T9703] [<80201ae4>] (show_stack) from [<8021fe04>] (dump_stack_lvl+0x54/0x7c) [ 1408.191888][ T9703] [<8021fdb0>] (dump_stack_lvl) from [<8021fe44>] (dump_stack+0x18/0x1c) [ 1408.192228][ T9703] r5:00000000 r4:82a6dd18 [ 1408.192397][ T9703] [<8021fe2c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 1408.192695][ T9703] [<802024f4>] (panic) from [<802585b8>] (get_taint+0x0/0x1c) [ 1408.192991][ T9703] r3:8280c684 r2:00000001 r1:82240730 r0:822480e0 [ 1408.193223][ T9703] r7:80317884 [ 1408.193369][ T9703] [<80258544>] (check_panic_on_warn) from [<8025871c>] (__warn+0x80/0x188) [ 1408.193665][ T9703] [<8025869c>] (__warn) from [<8025899c>] (warn_slowpath_fmt+0x178/0x1f4) [ 1408.193964][ T9703] r8:00000009 r7:82253ed8 r6:dfb65c0c r5:8511d400 r4:00000000 [ 1408.194197][ T9703] [<80258828>] (warn_slowpath_fmt) from [<80317884>] (dma_direct_map_sg+0x374/0x404) [ 1408.194554][ T9703] r10:82ab9cb0 r9:00000000 r8:00000000 r7:83c70410 r6:856a0500 r5:00018000 [ 1408.194811][ T9703] r4:856a0c40 [ 1408.195233][ T9703] [<80317510>] (dma_direct_map_sg) from [<80315fe4>] (__dma_map_sg_attrs+0x4c/0x2fc) [ 1408.195766][ T9703] r10:8569d100 r9:83c70b48 r8:00000001 r7:856a0500 r6:00000000 r5:83c70410 [ 1408.201475][ T9703] r4:856a0c40 [ 1408.205549][ T9703] [<80315f98>] (__dma_map_sg_attrs) from [<803162e8>] (dma_map_sgtable+0x2c/0x40) [ 1408.206229][ T9703] r10:8569d100 r9:83c70b48 r8:8569d1c0 r7:84a0a000 r6:84a0a000 r5:00000000 [ 1408.206535][ T9703] r4:856a0c40 [ 1408.206775][ T9703] [<803162bc>] (dma_map_sgtable) from [<80ad42d4>] (drm_gem_map_dma_buf+0x58/0xc4) [ 1408.209463][ T9703] r4:856a0c40 [ 1408.210538][ T9703] [<80ad427c>] (drm_gem_map_dma_buf) from [<80b958c8>] (dma_buf_map_attachment+0x50/0x164) [ 1408.211799][ T9703] r7:84a0a000 r6:00000000 r5:00000000 r4:84a0a000 [ 1408.212062][ T9703] [<80b95878>] (dma_buf_map_attachment) from [<80b95a18>] (dma_buf_map_attachment_unlocked+0x3c/0x78) [ 1408.216092][ T9703] r7:84a0a000 r6:83c70800 r5:00000000 r4:84a0a000 [ 1408.216354][ T9703] [<80b959dc>] (dma_buf_map_attachment_unlocked) from [<80ad4bb4>] (drm_gem_prime_import_dev+0x88/0x1a0) [ 1408.216811][ T9703] r5:84337e00 r4:85121980 [ 1408.216988][ T9703] [<80ad4b2c>] (drm_gem_prime_import_dev) from [<80ad5208>] (drm_gem_prime_fd_to_handle+0x184/0x230) [ 1408.217382][ T9703] r9:83c70b48 r8:8569d1c0 r7:dfb65e64 r6:83c70800 r5:8569d100 r4:85121980 [ 1408.217679][ T9703] [<80ad5084>] (drm_gem_prime_fd_to_handle) from [<80ad53c8>] (drm_prime_fd_to_handle_ioctl+0x34/0x38) [ 1408.218086][ T9703] r9:8511d400 r8:83c70800 r7:dfb65e64 r6:80ad5394 r5:8569d100 r4:00000000 [ 1408.218371][ T9703] [<80ad5394>] (drm_prime_fd_to_handle_ioctl) from [<80ac6920>] (drm_ioctl_kernel+0xb8/0x120) [ 1408.218786][ T9703] r5:8569d100 r4:00000020 [ 1408.219015][ T9703] [<80ac6868>] (drm_ioctl_kernel) from [<80ac6bec>] (drm_ioctl+0x264/0x5b0) [ 1408.219400][ T9703] r8:81d38d28 r7:83c70800 r6:c00c642e r5:0000000c r4:0000000c [ 1408.219711][ T9703] [<80ac6988>] (drm_ioctl) from [<8056edf4>] (sys_ioctl+0x130/0xdc8) [ 1408.225575][ T9703] r10:8511d400 r9:8471b300 r8:00000003 r7:20000800 r6:8471b301 r5:00000000 [ 1408.225923][ T9703] r4:c00c642e [ 1408.226102][ T9703] [<8056ecc4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1408.226555][ T9703] Exception stack(0xdfb65fa8 to 0xdfb65ff0) [ 1408.226789][ T9703] 5fa0: 00000000 00000000 00000003 c00c642e 20000800 00000000 [ 1408.227518][ T9703] 5fc0: 00000000 00000000 002e6300 00000036 002d0000 00000000 00006364 76be10bc [ 1408.229789][ T9703] 5fe0: 76be0ec0 76be0eb0 00019384 00131f20 [ 1408.235535][ T9703] r10:00000036 r9:8511d400 r8:8020029c r7:00000036 r6:002e6300 r5:00000000 [ 1408.236979][ T9703] r4:00000000 [ 1408.240737][ T9703] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:39:48 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=00000000 R02=00000000 R03=00000000 R04=858b9b88 R05=858b9b88 R06=00000000 R07=858b9ba0 R08=0001b0d5 R09=00000000 R10=81c05258 R11=df801e04 R12=df801d48 R13=df801db8 R14=81a30b9c R15=803291f8 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=dc4a2000 R01=eb3fd000 R02=00000001 R03=80239bb8 R04=7f057000 R05=00000001 R06=82abf1c4 R07=82abe5a0 R08=7f057000 R09=eb3fd000 R10=8280c9b4 R11=df93dd9c R12=df93dda0 R13=df93dd70 R14=80230af4 R15=80239bd0 PSR=80000113 N--- A S svc32 s00=01040800 s01=00000000 d00=0000000001040800 s02=00000800 s03=80020008 d01=8002000800000800 s04=ffff0209 s05=0303ffff d02=0303ffffffff0209 s06=d1080280 s07=ffffffff d03=ffffffffd1080280 s08=ffffffff s09=79732f01 d04=79732f01ffffffff s10=656b2f73 s11=6c656e72 d05=6c656e72656b2f73 s12=2f6d6d2f s13=2f6d736b d06=2f6d736b2f6d6d2f s14=006e7572 s15=080046c4 d07=080046c4006e7572 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00048080 s33=80031808 d16=8003180800048080 s34=00080002 s35=00028803 d17=0002880300080002 s36=90032208 s37=00080002 d18=0008000290032208 s38=02029803 s39=ffffffff d19=ffffffff02029803 s40=02a00303 s41=ffffff02 d20=ffffff0202a00303 s42=71de03ff s43=08000601 d21=0800060171de03ff s44=02800200 s45=80030002 d22=8003000202800200 s46=00080009 s47=00098803 d23=0009880300080009 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=965b790a s53=18122549 d26=18122549965b790a s54=817907cb s55=979885df d27=979885df817907cb s56=50240a42 s57=ef26c0ca d28=ef26c0ca50240a42 s58=69159575 s59=2b7c4811 d29=2b7c481169159575 s60=225391f6 s61=96ed79aa d30=96ed79aa225391f6 s62=ee6bd4c6 s63=9f8cae3e d31=9f8cae3eee6bd4c6 FPSCR: 00000000