last executing test programs: 4.100688811s ago: executing program 0 (id=3532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000380)) 3.762568354s ago: executing program 0 (id=3533): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) getrandom(&(0x7f0000000240)=""/273, 0x111, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 3.058972568s ago: executing program 0 (id=3534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 2.596825636s ago: executing program 0 (id=3535): syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4004}], 0x1, &(0x7f0000000040), 0x0, 0x0) 1.258696711s ago: executing program 0 (id=3536): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x4}, 0x8, 0x0) 849.469048ms ago: executing program 1 (id=3538): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x8) 586.507528ms ago: executing program 0 (id=3539): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000400)={0x0, 0xfffffffd, 0x0, 0x4001}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) dup(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 505.423194ms ago: executing program 1 (id=3540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100000800050000000800150002000000000000000000e1d0fc36e0260c810200"], 0x154}}, 0x0) 331.772306ms ago: executing program 1 (id=3541): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x6, 0x0, &(0x7f0000000080)) 233.178515ms ago: executing program 1 (id=3542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 143.948442ms ago: executing program 1 (id=3543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)={0x14, 0x17, 0xa, 0x101}, 0x14}}, 0x0) 0s ago: executing program 1 (id=3544): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000680), 0x100000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) kernel console output (not intermixed with test programs): 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.572015][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.572529][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.572946][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.573262][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.577440][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.578135][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.578483][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.578843][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.579215][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.579567][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.579934][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.580263][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.580824][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.581192][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.581523][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.581861][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.582297][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.582607][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.582983][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.583607][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.583959][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.596234][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.596712][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.599670][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.600526][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.601268][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.601818][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.602399][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.602851][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.603349][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.603969][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.604557][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.605328][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.605885][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.618398][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.619469][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.619902][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.620679][ T1486] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2318.629509][ T1486] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2327.334784][T15959] sctp: [Deprecated]: syz.1.2557 (pid 15959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2327.334784][T15959] Use struct sctp_sack_info instead [ 2327.488982][T15959] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 2327.490618][ T31] audit: type=1400 audit(2327.400:735): avc: denied { relabelfrom } for pid=15957 comm="syz.1.2557" name="NETLINK" dev="sockfs" ino=29528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2327.491759][ T31] audit: type=1400 audit(2327.400:736): avc: denied { relabelto } for pid=15957 comm="syz.1.2557" name="NETLINK" dev="sockfs" ino=29528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 2333.948936][T16013] fuse: Bad value for 'fd' [ 2334.214568][T16017] sctp: [Deprecated]: syz.0.2577 (pid 16017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2334.214568][T16017] Use struct sctp_sack_info instead [ 2336.172028][T16036] sctp: [Deprecated]: syz.0.2583 (pid 16036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2336.172028][T16036] Use struct sctp_sack_info instead [ 2339.086429][ T31] audit: type=1400 audit(2338.990:737): avc: denied { listen } for pid=16055 comm="syz.1.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2342.903568][T16078] FAULT_INJECTION: forcing a failure. [ 2342.903568][T16078] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.904228][T16078] CPU: 1 UID: 0 PID: 16078 Comm: syz.1.2596 Not tainted 6.12.0-rc3-syzkaller #0 [ 2342.904771][T16078] Hardware name: ARM-Versatile Express [ 2342.905354][T16078] Call trace: [ 2342.905588][T16078] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2342.905845][T16078] r7:8569c800 r6:00000dc0 r5:60000013 r4:8203d7bc [ 2342.906079][T16078] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2342.906287][T16078] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2342.906486][T16078] r5:00000000 r4:8271925c [ 2342.906596][T16078] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2342.906832][T16078] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2342.907356][T16078] r6:00000dc0 r5:826253b0 r4:82c01240 [ 2342.907597][T16078] [<804e82d4>] (should_failslab) from [<804cc788>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2342.907984][T16078] [<804cc73c>] (__kmalloc_cache_noprof) from [<806d0038>] (fuse_init_fs_context+0x28/0x90) [ 2342.908243][T16078] r10:8518c400 r9:00000010 r8:847c8d00 r7:00000002 r6:83132110 r5:826253b0 [ 2342.908433][T16078] r4:8464da00 [ 2342.908530][T16078] [<806d0010>] (fuse_init_fs_context) from [<805647ec>] (alloc_fs_context+0x194/0x2a8) [ 2342.908748][T16078] r5:826253b0 r4:8464da00 [ 2342.908871][T16078] [<80564658>] (alloc_fs_context) from [<8056495c>] (fs_context_for_reconfigure+0x30/0x38) [ 2342.909110][T16078] r9:00000000 r8:85e3fcd0 r7:00000000 r6:dfe25f6c r5:00000020 r4:83132110 [ 2342.909296][T16078] [<8056492c>] (fs_context_for_reconfigure) from [<80545d24>] (path_mount+0x358/0xacc) [ 2342.909523][T16078] [<805459cc>] (path_mount) from [<805469fc>] (sys_mount+0x168/0x260) [ 2342.909721][T16078] r10:00000015 r9:8569c800 r8:00000000 r7:00000000 r6:00000000 r5:00000000 [ 2342.909926][T16078] r4:00000000 [ 2342.910069][T16078] [<80546894>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2342.910275][T16078] Exception stack(0xdfe25fa8 to 0xdfe25ff0) [ 2342.910423][T16078] 5fa0: 00000000 00000000 00000000 20000280 00000000 00304030 [ 2342.910623][T16078] 5fc0: 00000000 00000000 00130e70 00000015 00000000 00006364 003d0f00 76b270bc [ 2342.910822][T16078] 5fe0: 76b26ec0 76b26eb0 00018af8 00132ec0 [ 2342.910974][T16078] r10:00000015 r9:8569c800 r8:8020029c r7:00000015 r6:00130e70 r5:00000000 [ 2342.911166][T16078] r4:00000000 [ 2345.489666][T16096] FAULT_INJECTION: forcing a failure. [ 2345.489666][T16096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.490268][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.1.2601 Not tainted 6.12.0-rc3-syzkaller #0 [ 2345.490464][T16096] Hardware name: ARM-Versatile Express [ 2345.490594][T16096] Call trace: [ 2345.490699][T16096] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2345.490907][T16096] r7:76b04e1c r6:0000000c r5:60000013 r4:8203d7bc [ 2345.491055][T16096] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2345.491258][T16096] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2345.491442][T16096] r5:00000000 r4:8274e844 [ 2345.491543][T16096] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2345.491765][T16096] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2345.492083][T16096] r6:0000000c r5:df991ee4 r4:0000000c [ 2345.492300][T16096] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2345.492636][T16096] [<808e55b4>] (should_fail_usercopy) from [<81484ce8>] (move_addr_to_kernel+0x3c/0xe4) [ 2345.492987][T16096] [<81484cac>] (move_addr_to_kernel) from [<81486298>] (__sys_sendto+0xc0/0x14c) [ 2345.493282][T16096] r9:83ea8000 r8:00000003 r7:84ce5900 r6:76b04e1c r5:00000000 r4:00000000 [ 2345.493460][T16096] [<814861d8>] (__sys_sendto) from [<81486340>] (sys_sendto+0x1c/0x24) [ 2345.493656][T16096] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b04e1c [ 2345.493812][T16096] [<81486324>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2345.494126][T16096] Exception stack(0xdf991fa8 to 0xdf991ff0) [ 2345.494333][T16096] 1fa0: 76b04e1c 0000000c 00000003 76b04eb0 00000024 00000000 [ 2345.494557][T16096] 1fc0: 76b04e1c 0000000c 00000000 00000122 00000003 00000000 76b04eb0 76b060bc [ 2345.494780][T16096] 1fe0: 00000000 76b04df0 000d8408 00135358 [ 2353.243592][T16128] FAULT_INJECTION: forcing a failure. [ 2353.243592][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.245410][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.0.2611 Not tainted 6.12.0-rc3-syzkaller #0 [ 2353.245743][T16128] Hardware name: ARM-Versatile Express [ 2353.245981][T16128] Call trace: [ 2353.246191][T16128] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2353.246535][T16128] r7:00000c40 r6:851354a8 r5:60000013 r4:8203d7bc [ 2353.246800][T16128] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2353.247779][T16128] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2353.248553][T16128] r5:00000000 r4:8271925c [ 2353.248746][T16128] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2353.249187][T16128] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2353.249527][T16128] r6:851354a8 r5:00001000 r4:82c016c0 [ 2353.249744][T16128] [<804e82d4>] (should_failslab) from [<804cd760>] (__kmalloc_noprof+0x9c/0x458) [ 2353.250115][T16128] [<804cd6c4>] (__kmalloc_noprof) from [<80751070>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2353.250514][T16128] r10:83eae000 r9:82f90400 r8:00000000 r7:83132b28 r6:851354a8 r5:00001000 [ 2353.250810][T16128] r4:00000000 [ 2353.250976][T16128] [<80751034>] (tomoyo_realpath_from_path) from [<8074d1b4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2353.251375][T16128] r10:83eae000 r9:00000000 r8:00000003 r7:00008942 r6:00000004 r5:81ad1868 [ 2353.251677][T16128] r4:851354a8 r3:824ba340 [ 2353.251869][T16128] [<8074d0e8>] (tomoyo_path_number_perm) from [<80751a80>] (tomoyo_file_ioctl+0x1c/0x20) [ 2353.252259][T16128] r9:85135480 r8:00000003 r7:20000000 r6:20000000 r5:00008942 r4:85135480 [ 2353.252553][T16128] [<80751a64>] (tomoyo_file_ioctl) from [<807000cc>] (security_file_ioctl+0x64/0x1e4) [ 2353.252913][T16128] [<80700068>] (security_file_ioctl) from [<8052f728>] (sys_ioctl+0x50/0xda8) [ 2353.253542][T16128] r7:20000000 r6:85135481 r5:00000000 r4:00008942 [ 2353.254048][T16128] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2353.254532][T16128] Exception stack(0xdfeddfa8 to 0xdfeddff0) [ 2353.254825][T16128] dfa0: 00000000 00000000 00000003 00008942 20000000 00000000 [ 2353.255202][T16128] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b400bc [ 2353.255521][T16128] dfe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2353.255882][T16128] r10:00000036 r9:83eae000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2353.256220][T16128] r4:00000000 [ 2353.297555][T16128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2354.315130][T16144] fuse: Bad value for 'user_id' [ 2354.315560][T16144] fuse: Bad value for 'user_id' [ 2367.676076][T16227] sctp: [Deprecated]: syz.1.2639 (pid 16227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2367.676076][T16227] Use struct sctp_sack_info instead [ 2368.260747][ T31] audit: type=1400 audit(2368.170:738): avc: denied { watch } for pid=16241 comm="syz.1.2644" path="/proc/689/net" dev="proc" ino=30010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2369.593326][ T31] audit: type=1804 audit(2369.500:739): pid=16259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2651" name="/newroot/286/file1" dev="fuse" ino=1 res=1 errno=0 [ 2369.599378][ T31] audit: type=1804 audit(2369.500:740): pid=16257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2651" name="/newroot/286/file1" dev="fuse" ino=1 res=1 errno=0 [ 2370.784222][ T31] audit: type=1400 audit(2370.690:741): avc: denied { lock } for pid=16276 comm="syz.0.2658" path="/dev/fuse" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2371.511408][ T31] audit: type=1400 audit(2371.420:742): avc: denied { mounton } for pid=16284 comm="syz.0.2661" path="/214/bus" dev="tmpfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2372.789778][ T31] audit: type=1400 audit(2372.700:743): avc: denied { mounton } for pid=16297 comm="syz.1.2667" path="/291/file0" dev="tmpfs" ino=1573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2374.045131][ T31] audit: type=1804 audit(2373.950:744): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2672" name="/newroot/223/file0" dev="fuse" ino=1 res=1 errno=0 [ 2375.072350][ T31] audit: type=1400 audit(2374.980:745): avc: denied { mount } for pid=16322 comm="syz.0.2676" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 2375.657695][T11779] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2375.843847][T11779] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2375.844376][T11779] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2375.844577][T11779] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2375.845026][T11779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.878909][T16333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2375.882801][T11779] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2376.781409][T12267] usb 2-1: USB disconnect, device number 49 [ 2376.896168][T16375] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2682'. [ 2380.487189][T14535] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2380.671670][T14535] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2380.672174][T14535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.675444][T14535] usb 1-1: config 0 descriptor?? [ 2382.496472][T14535] pegasus 1-1:0.0: setup Pegasus II specific registers [ 2382.613111][T14535] pegasus 1-1:0.0: can't locate MII phy, using default [ 2382.632483][T14535] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 22:bf:25:c3:01:42 [ 2382.643659][T14535] usb 1-1: USB disconnect, device number 41 [ 2383.882109][ T31] audit: type=1400 audit(2383.780:746): avc: denied { map } for pid=16419 comm="syz.0.2691" path="/dev/nullb0" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2414.787839][T14535] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2414.937781][T14535] usb 2-1: Using ep0 maxpacket: 8 [ 2414.953294][T14535] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2414.953859][T14535] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2414.983169][T14535] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2414.983730][T14535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.984055][T14535] usb 2-1: Product: syz [ 2414.984276][T14535] usb 2-1: Manufacturer: syz [ 2414.984506][T14535] usb 2-1: SerialNumber: syz [ 2415.204672][T14535] usb 2-1: USB disconnect, device number 50 [ 2415.697256][ T3792] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 2415.867067][ T3792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2415.887793][ T3792] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2415.888348][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.888669][ T3792] usb 2-1: Product: syz [ 2415.888878][ T3792] usb 2-1: Manufacturer: syz [ 2415.889123][ T3792] usb 2-1: SerialNumber: syz [ 2415.898311][ T3792] usb 2-1: config 0 descriptor?? [ 2415.912132][ T3792] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 2415.915567][ T3792] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 2415.916127][ T3792] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 2416.113261][T14535] usb 2-1: USB disconnect, device number 51 [ 2416.115951][T14535] garmin_gps 2-1:0.0: device disconnected [ 2416.234537][ T31] audit: type=1400 audit(2416.140:747): avc: denied { name_connect } for pid=16487 comm="syz.1.2704" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 2416.717666][ T4543] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2416.877455][ T4543] usb 2-1: Using ep0 maxpacket: 16 [ 2416.888372][ T4543] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2416.888724][ T4543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2416.901839][ T4543] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2416.902242][ T4543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.902488][ T4543] usb 2-1: Product: syz [ 2416.902642][ T4543] usb 2-1: Manufacturer: syz [ 2416.902741][ T4543] usb 2-1: SerialNumber: syz [ 2416.906821][ T4543] usb 2-1: config 0 descriptor?? [ 2427.144464][ T3792] usb 2-1: USB disconnect, device number 52 [ 2427.818034][T14535] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2427.988355][T14535] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2427.989001][T14535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2427.989438][T14535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2427.989812][T14535] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2427.990290][T14535] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2427.990639][T14535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2427.995023][T14535] usb 2-1: config 0 descriptor?? [ 2428.460867][T14535] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 2428.464403][T14535] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 2428.479868][T14535] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2432.481561][ T1805] usb 2-1: USB disconnect, device number 53 [ 2444.757641][ T3792] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2444.907718][ T3792] usb 2-1: Using ep0 maxpacket: 32 [ 2444.916420][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2444.917677][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2444.918067][ T3792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2444.918486][ T3792] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2444.918826][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.929466][ T3792] usb 2-1: config 0 descriptor?? [ 2445.489527][ T3792] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0017/input/input16 [ 2445.496212][ T3792] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0017/input/input17 [ 2445.512588][ T3792] kye 0003:0458:5011.0017: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 2445.724661][T14535] usb 2-1: USB disconnect, device number 54 [ 2449.887517][ T1486] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2450.101712][ T1486] usb 2-1: config 0 has no interfaces? [ 2450.138689][ T1486] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2450.139176][ T1486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.139355][ T1486] usb 2-1: Product: syz [ 2450.139459][ T1486] usb 2-1: Manufacturer: syz [ 2450.139566][ T1486] usb 2-1: SerialNumber: syz [ 2450.141558][ T1486] usb 2-1: config 0 descriptor?? [ 2460.857373][T12003] usb 2-1: USB disconnect, device number 55 [ 2469.877920][T14535] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2470.029034][T14535] usb 2-1: Using ep0 maxpacket: 8 [ 2470.047246][T14535] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 2470.047881][T14535] usb 2-1: config 150 has no interface number 0 [ 2470.048558][T14535] usb 2-1: config 150 interface 204 has no altsetting 0 [ 2470.048893][T14535] usb 2-1: config 150 interface 1 has no altsetting 0 [ 2470.093510][T14535] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2470.094093][T14535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.094417][T14535] usb 2-1: Product: syz [ 2470.094633][T14535] usb 2-1: Manufacturer: syz [ 2470.094856][T14535] usb 2-1: SerialNumber: syz [ 2470.337869][T14535] xr_serial 2-1:150.204: xr_serial converter detected [ 2471.160323][T14535] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 2471.362835][ T3792] usb 2-1: USB disconnect, device number 56 [ 2471.370488][ T3792] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 2471.371991][ T3792] xr_serial 2-1:150.204: device disconnected [ 2471.496196][T16693] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2735'. [ 2471.721241][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 2471.721955][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2737'. [ 2500.408321][T16769] input: syz1 as /devices/virtual/input/input18 [ 2508.394752][T16790] batadv_slave_0: entered allmulticast mode [ 2545.747528][ T1486] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2545.916581][ T1486] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2545.917985][ T1486] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2545.918363][ T1486] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2545.918686][ T1486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 2545.919075][ T1486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 2545.929668][ T1486] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2545.930019][ T1486] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2545.930182][ T1486] usb 2-1: Product: syz [ 2545.930292][ T1486] usb 2-1: Manufacturer: syz [ 2545.949348][T16869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2545.951442][ T1486] cdc_wdm 2-1:1.0: skipping garbage [ 2545.951611][ T1486] cdc_wdm 2-1:1.0: skipping garbage [ 2545.954643][ T1486] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2546.190506][ T1486] usb 2-1: USB disconnect, device number 57 [ 2549.947437][ T4543] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2550.097500][ T4543] usb 2-1: Using ep0 maxpacket: 16 [ 2550.128128][ T4543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2550.128768][ T4543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2550.129175][ T4543] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2550.129680][ T4543] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2550.131535][ T4543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.135234][ T4543] usb 2-1: config 0 descriptor?? [ 2550.570714][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.571331][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.571707][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.572096][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.572462][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.572839][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.573514][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.574107][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.574521][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.574887][ T4543] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2550.576468][ T4543] HID 045e:07da: Invalid code 65791 type 1 [ 2550.599788][ T4543] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input19 [ 2550.606168][ T4543] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2550.772796][ T4543] usb 2-1: USB disconnect, device number 58 [ 2585.454873][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'. [ 2606.595783][T11779] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2606.817252][T11779] usb 1-1: config 0 has no interfaces? [ 2606.837219][T11779] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2606.837788][T11779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.839886][T11779] usb 1-1: Product: syz [ 2606.843270][T11779] usb 1-1: Manufacturer: syz [ 2606.844238][T11779] usb 1-1: SerialNumber: syz [ 2606.883901][T11779] usb 1-1: config 0 descriptor?? [ 2608.544069][T17030] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2813'. [ 2619.735807][ T31] audit: type=1400 audit(2619.640:748): avc: denied { mount } for pid=17035 comm="syz.1.2816" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2619.741806][ T31] audit: type=1400 audit(2619.650:749): avc: denied { remount } for pid=17035 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2619.743217][T17036] tracefs: Bad value for 'gid' [ 2619.743500][T17036] tracefs: Bad value for 'gid' [ 2619.835716][ T31] audit: type=1400 audit(2619.740:750): avc: denied { unmount } for pid=13492 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2624.067817][T11779] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2624.142107][ T3792] usb 1-1: USB disconnect, device number 42 [ 2624.225741][T11779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2624.226414][T11779] usb 2-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 2624.228167][T11779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.233502][T11779] usb 2-1: config 0 descriptor?? [ 2624.670963][T11779] wacom 0003:056A:0019.0019: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 2624.688388][T11779] wacom 0003:056A:0019.0019: hidraw0: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.1-1/input0 [ 2624.690238][T11779] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0019.0019/input/input20 [ 2624.868340][T11779] usb 2-1: USB disconnect, device number 59 [ 2625.017449][T17089] Invalid logical block size (768) [ 2635.008244][ T1486] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2635.211962][ T1486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2635.212569][ T1486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2635.212968][ T1486] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2635.213312][ T1486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.228959][ T1486] usb 1-1: config 0 descriptor?? [ 2635.804650][ T1486] magicmouse 0003:05AC:0265.001A: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 2643.657732][T14535] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2643.812248][T14535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2643.812605][T14535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2643.812810][T14535] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2643.813289][T14535] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2643.813551][T14535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2643.815764][T14535] usb 2-1: config 0 descriptor?? [ 2644.264931][T14535] hid-udraw 0003:20D6:CB17.001B: unknown main item tag 0x0 [ 2644.280205][T14535] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001B/input/input23 [ 2644.297796][T14535] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001B/input/input24 [ 2644.303358][T14535] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001B/input/input25 [ 2644.317103][T14535] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.001B/input/input26 [ 2644.328685][T14535] hid-udraw 0003:20D6:CB17.001B: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 2644.548638][T14535] usb 2-1: USB disconnect, device number 60 [ 2648.050213][T17173] fuse: Bad value for 'fd' [ 2651.729742][T17186] fuse: Bad value for 'fd' [ 2654.512452][T12003] usb 1-1: USB disconnect, device number 43 [ 2654.720489][T17209] fuse: Bad value for 'fd' [ 2655.322768][T17220] fuse: Bad value for 'fd' [ 2655.654853][T17224] fuse: Unknown parameter 'user_id00000000000000000000' [ 2657.040502][T17233] fuse: Unknown parameter 'grou00000000000000000000' [ 2657.158937][T17235] fuse: Unknown parameter 'user_id00000000000000000000' [ 2657.291344][T17237] fuse: Bad value for 'group_id' [ 2657.291907][T17237] fuse: Bad value for 'group_id' [ 2657.789997][T17243] fuse: Unknown parameter 'grou00000000000000000000' [ 2658.093109][T17245] fuse: Unknown parameter 'user_id00000000000000000000' [ 2658.370692][T17247] fuse: Bad value for 'group_id' [ 2658.371100][T17247] fuse: Bad value for 'group_id' [ 2659.204838][T17254] fuse: Unknown parameter 'grou00000000000000000000' [ 2659.338244][T17257] fuse: Bad value for 'fd' [ 2659.482262][T17259] fuse: Bad value for 'group_id' [ 2659.482725][T17259] fuse: Bad value for 'group_id' [ 2660.931521][T17268] fuse: Unknown parameter 'group_i00000000000000000000' [ 2661.111125][T17270] fuse: Bad value for 'fd' [ 2661.260493][T17272] sctp: [Deprecated]: syz.0.2874 (pid 17272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2661.260493][T17272] Use struct sctp_sack_info instead [ 2662.239729][T17283] fuse: Unknown parameter 'group_i00000000000000000000' [ 2663.283276][ T31] audit: type=1400 audit(2663.190:751): avc: denied { getopt } for pid=17292 comm="syz.0.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2664.952363][T17299] fuse: Unknown parameter '00000000000000000003' [ 2666.864881][T17314] fuse: Unknown parameter '00000000000000000003' [ 2669.083242][T17328] fuse: Bad value for 'fd' [ 2669.449117][T17333] fuse: Unknown parameter 'group_id00000000000000000000' [ 2671.619523][T17350] fuse: Unknown parameter 'group_id00000000000000000000' [ 2673.750219][T17398] fuse: Bad value for 'user_id' [ 2673.752462][T17398] fuse: Bad value for 'user_id' [ 2674.786162][T17409] fuse: Bad value for 'user_id' [ 2674.786590][T17409] fuse: Bad value for 'user_id' [ 2675.622438][T17424] fuse: Bad value for 'fd' [ 2676.184961][T17435] fuse: Unknown parameter 'fd00000000000000000003' [ 2678.398582][T17443] fuse: Bad value for 'fd' [ 2678.795658][T17449] fuse: Unknown parameter 'fd00000000000000000003' [ 2678.976054][T17453] fuse: Bad value for 'fd' [ 2681.681589][T17469] fuse: Bad value for 'fd' [ 2682.780846][T17485] fuse: Bad value for 'fd' [ 2685.581006][T17501] fuse: Bad value for 'fd' [ 2692.936328][T17558] fuse: Invalid rootmode [ 2694.478844][T17575] fuse: Bad value for 'rootmode' [ 2695.592738][T17590] fuse: Bad value for 'rootmode' [ 2696.496186][T17604] fuse: Bad value for 'rootmode' [ 2699.304272][T17620] fuse: Unknown parameter 'use00000000000000000000' [ 2700.619451][T17639] fuse: Unknown parameter 'use00000000000000000000' [ 2702.029028][T17655] fuse: Unknown parameter 'use00000000000000000000' [ 2711.131755][T17697] fuse: Unknown parameter 'user_id00000000000000000000' [ 2715.494467][T17716] fuse: Unknown parameter 'user_id00000000000000000000' [ 2717.702021][T17734] fuse: Unknown parameter 'user_id00000000000000000000' [ 2718.690651][T17748] fuse: Bad value for 'fd' [ 2721.731781][T17769] fuse: Bad value for 'fd' [ 2722.130949][T17778] fuse: Unknown parameter 'user_id00000000000000000000' [ 2723.103994][T17787] fuse: Bad value for 'fd' [ 2724.139755][T17798] fuse: Unknown parameter '0x0000000000000003' [ 2725.134307][T17814] fuse: Unknown parameter '0x0000000000000003' [ 2725.863126][T17830] fuse: Unknown parameter '0x0000000000000003' [ 2725.989765][T17833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3055'. [ 2725.993387][ T31] audit: type=1400 audit(2725.900:752): avc: denied { read } for pid=17832 comm="syz.0.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2731.023254][T17878] fuse: Bad value for 'fd' [ 2731.154110][T17880] FAULT_INJECTION: forcing a failure. [ 2731.154110][T17880] name failslab, interval 1, probability 0, space 0, times 0 [ 2731.154497][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.1.3068 Not tainted 6.12.0-rc3-syzkaller #0 [ 2731.154678][T17880] Hardware name: ARM-Versatile Express [ 2731.154811][T17880] Call trace: [ 2731.154927][T17880] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2731.155209][T17880] r7:8569e000 r6:00000cc0 r5:60000013 r4:8203d7bc [ 2731.155360][T17880] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2731.155614][T17880] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2731.155806][T17880] r5:00000000 r4:8271925c [ 2731.155945][T17880] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2731.156149][T17880] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2731.156349][T17880] r6:00000cc0 r5:20000140 r4:82ca8b40 [ 2731.156530][T17880] [<804e82d4>] (should_failslab) from [<804cd3dc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2731.157078][T17880] [<804cd390>] (kmem_cache_alloc_noprof) from [<805250ec>] (getname_flags.part.0+0x28/0x18c) [ 2731.157663][T17880] r10:00000026 r9:8569e000 r8:8020029c r7:00000000 r6:8223783c r5:20000140 [ 2731.157994][T17880] r4:20000140 [ 2731.158184][T17880] [<805250c4>] (getname_flags.part.0) from [<8052a1a8>] (getname_flags+0x3c/0x50) [ 2731.158650][T17880] r9:8569e000 r8:8020029c r7:00000026 r6:00130e70 r5:00000000 r4:20000140 [ 2731.158955][T17880] [<8052a16c>] (getname_flags) from [<8052d294>] (sys_rename+0x2c/0x50) [ 2731.159301][T17880] r5:20000140 r4:82ed8000 [ 2731.159497][T17880] [<8052d268>] (sys_rename) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2731.159824][T17880] Exception stack(0xec459fa8 to 0xec459ff0) [ 2731.160245][T17880] 9fa0: 00000000 00000000 20000100 20000140 00000000 00000000 [ 2731.160572][T17880] 9fc0: 00000000 00000000 00130e70 00000026 00000000 00006364 003d0f00 76b270bc [ 2731.160885][T17880] 9fe0: 76b26ec0 76b26eb0 00018af8 00132ec0 [ 2731.161127][T17880] r5:00000000 r4:00000000 [ 2731.469286][T17889] fuse: Unknown parameter 'fd0x0000000000000003' [ 2731.546099][T17891] fuse: Unknown parameter '0x0000000000000003' [ 2731.918609][T17899] fuse: Unknown parameter 'fd0x0000000000000003' [ 2732.022036][T17901] fuse: Unknown parameter '0x0000000000000003' [ 2733.024348][T17909] fuse: Bad value for 'fd' [ 2733.204975][T17911] fuse: Bad value for 'fd' [ 2733.394939][T17913] fuse: Unknown parameter '0x0000000000000003' [ 2734.858517][T17921] fuse: Bad value for 'fd' [ 2734.991609][T17924] fuse: Bad value for 'fd' [ 2735.134267][T17926] fuse: Unknown parameter '0x0000000000000003' [ 2735.551797][T17932] fuse: Bad value for 'fd' [ 2735.680952][T17934] fuse: Bad value for 'fd' [ 2735.820354][T17936] fuse: Unknown parameter '0x0000000000000003' [ 2742.574887][ T31] audit: type=1400 audit(2742.480:753): avc: denied { setopt } for pid=18011 comm="syz.1.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2744.169799][T18007] FAULT_INJECTION: forcing a failure. [ 2744.169799][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 2744.170560][T18007] CPU: 1 UID: 0 PID: 18007 Comm: syz.0.3115 Not tainted 6.12.0-rc3-syzkaller #0 [ 2744.170936][T18007] Hardware name: ARM-Versatile Express [ 2744.171190][T18007] Call trace: [ 2744.171420][T18007] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2744.171848][T18007] r7:00000d40 r6:8511e0e8 r5:60000013 r4:8203d7bc [ 2744.172122][T18007] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2744.172502][T18007] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2744.172872][T18007] r5:00000000 r4:8271925c [ 2744.173073][T18007] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2744.173465][T18007] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2744.173844][T18007] r6:8511e0e8 r5:00000023 r4:82c01240 [ 2744.174169][T18007] [<804e82d4>] (should_failslab) from [<804cd760>] (__kmalloc_noprof+0x9c/0x458) [ 2744.174690][T18007] [<804cd6c4>] (__kmalloc_noprof) from [<80750f78>] (tomoyo_encode2+0x64/0xf0) [ 2744.175095][T18007] r10:00000fff r9:82e08000 r8:00000000 r7:84c26a18 r6:8511e0e8 r5:85c17ffd [ 2744.175431][T18007] r4:85c17fe5 [ 2744.175615][T18007] [<80750f14>] (tomoyo_encode2) from [<80751028>] (tomoyo_encode+0x24/0x30) [ 2744.176070][T18007] r9:82e08000 r8:00000000 r7:84c26a18 r6:8511e0e8 r5:00001000 r4:85c17fe6 [ 2744.176932][T18007] [<80751004>] (tomoyo_encode) from [<807510b4>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2744.177487][T18007] r5:00001000 r4:85c17000 [ 2744.177770][T18007] [<80751034>] (tomoyo_realpath_from_path) from [<8074d1b4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2744.178334][T18007] r10:82e38000 r9:00000000 r8:00000003 r7:c020aa08 r6:00000004 r5:81ad1868 [ 2744.178943][T18007] r4:8511e0e8 r3:824ba340 [ 2744.179243][T18007] [<8074d0e8>] (tomoyo_path_number_perm) from [<80751a80>] (tomoyo_file_ioctl+0x1c/0x20) [ 2744.179698][T18007] r9:8511e0c0 r8:00000003 r7:20000500 r6:20000500 r5:c020aa08 r4:8511e0c0 [ 2744.180050][T18007] [<80751a64>] (tomoyo_file_ioctl) from [<807000cc>] (security_file_ioctl+0x64/0x1e4) [ 2744.180497][T18007] [<80700068>] (security_file_ioctl) from [<8052f728>] (sys_ioctl+0x50/0xda8) [ 2744.180898][T18007] r7:20000500 r6:8511e0c1 r5:00000000 r4:c020aa08 [ 2744.181320][T18007] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2744.181670][T18007] Exception stack(0xeca21fa8 to 0xeca21ff0) [ 2744.181944][T18007] 1fa0: 00000000 00000000 00000003 c020aa08 20000500 00000000 [ 2744.182376][T18007] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b400bc [ 2744.182749][T18007] 1fe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2744.183056][T18007] r10:00000036 r9:82e38000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2744.183417][T18007] r4:00000000 [ 2744.252804][T18007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2746.175646][T18039] fuse: Unknown parameter 'fd0x0000000000000003' [ 2747.488352][T18052] fuse: Bad value for 'fd' [ 2750.669912][T18068] fuse: Bad value for 'fd' [ 2750.855403][T18070] fuse: Bad value for 'fd' [ 2751.065838][T18072] fuse: Bad value for 'fd' [ 2751.221504][T18078] fuse: Bad value for 'fd' [ 2753.938164][T18088] fuse: Bad value for 'fd' [ 2754.012734][T18090] fuse: Bad value for 'fd' [ 2756.312707][T18101] fuse: Bad value for 'fd' [ 2756.498590][T18103] fuse: Bad value for 'fd' [ 2766.570566][T18171] fuse: Bad value for 'fd' [ 2775.258199][T18202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18202 comm=syz.1.3179 [ 2775.359402][T18205] fuse: Bad value for 'fd' [ 2777.249050][T18207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2777.260186][T18207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2778.209051][T18207] hsr_slave_0: entered promiscuous mode [ 2778.219797][T18207] hsr_slave_1: entered promiscuous mode [ 2778.223335][T18207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2778.223614][T18207] Cannot create hsr debugfs directory [ 2778.552990][T18207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2778.614014][T18207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2778.667838][T18207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2778.730386][T18207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.273352][T18207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2780.288946][T18207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2780.293048][T18207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2780.298969][T18207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2781.072361][T18207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2784.259076][T18207] veth0_vlan: entered promiscuous mode [ 2784.281437][T18207] veth1_vlan: entered promiscuous mode [ 2784.369172][T18207] veth0_macvtap: entered promiscuous mode [ 2784.382139][T18207] veth1_macvtap: entered promiscuous mode [ 2784.458694][T18207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2784.459220][T18207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2784.459539][T18207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2784.459849][T18207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.612656][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 2787.639692][ T31] audit: type=1400 audit(2787.550:754): avc: denied { accept } for pid=18602 comm="syz.1.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2787.753807][T18612] fuse: Bad value for 'group_id' [ 2787.754256][T18612] fuse: Bad value for 'group_id' [ 2787.938491][T18616] fuse: Unknown parameter '` ' [ 2788.048143][ T31] audit: type=1400 audit(2787.960:755): avc: denied { getopt } for pid=18617 comm="syz.1.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2788.242990][T18623] fuse: Bad value for 'group_id' [ 2788.243221][T18623] fuse: Bad value for 'group_id' [ 2790.513900][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 2791.020801][T18659] FAULT_INJECTION: forcing a failure. [ 2791.020801][T18659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.021151][T18659] CPU: 0 UID: 0 PID: 18659 Comm: syz.1.3210 Not tainted 6.12.0-rc3-syzkaller #0 [ 2791.021349][T18659] Hardware name: ARM-Versatile Express [ 2791.021453][T18659] Call trace: [ 2791.021544][T18659] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2791.021745][T18659] r7:00000000 r6:00000000 r5:60000013 r4:8203d7bc [ 2791.021860][T18659] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2791.022066][T18659] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2791.022232][T18659] r5:00000000 r4:8274e844 [ 2791.022326][T18659] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2791.022474][T18659] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2791.022660][T18659] r6:00000000 r5:ed86df68 r4:00000002 [ 2791.022752][T18659] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2791.022950][T18659] [<808e55b4>] (should_fail_usercopy) from [<8054e834>] (simple_read_from_buffer+0x8c/0x134) [ 2791.023137][T18659] [<8054e7a8>] (simple_read_from_buffer) from [<805c3294>] (proc_fail_nth_read+0xb8/0x100) [ 2791.023302][T18659] r10:00000001 r9:805c31dc r8:00000002 r7:ed86df68 r6:0000000f r5:76b32f30 [ 2791.023426][T18659] r4:83eaa400 r3:ed86de9f [ 2791.023499][T18659] [<805c31dc>] (proc_fail_nth_read) from [<80515f94>] (vfs_read+0x98/0x324) [ 2791.023823][T18659] r8:76b32f30 r7:ed86df68 r6:83eaa400 r5:0000000f r4:85135480 [ 2791.024058][T18659] [<80515efc>] (vfs_read) from [<80516c44>] (ksys_read+0x78/0xf8) [ 2791.024354][T18659] r10:00000003 r9:83eaa400 r8:8020029c r7:00000000 r6:00000000 r5:85135480 [ 2791.024629][T18659] r4:85135483 [ 2791.024717][T18659] [<80516bcc>] (ksys_read) from [<80516cd4>] (sys_read+0x10/0x14) [ 2791.024897][T18659] r7:00000003 r6:00000006 r5:76b32f30 r4:0000000f [ 2791.025038][T18659] [<80516cc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2791.025225][T18659] Exception stack(0xed86dfa8 to 0xed86dff0) [ 2791.025398][T18659] dfa0: 0000000f 76b32f30 00000006 76b32f30 0000000f 00000000 [ 2791.025597][T18659] dfc0: 0000000f 76b32f30 00000006 00000003 00000000 00006364 003d0f00 76b330bc [ 2791.025737][T18659] dfe0: 00000158 76b32ed0 000d8408 00130d94 [ 2801.379050][T18708] fuse: Unknown parameter 'grou00000000000000000000' [ 2802.682728][T18713] fuse: Unknown parameter 'grou00000000000000000000' [ 2803.190649][T18721] fuse: Unknown parameter 'grou00000000000000000000' [ 2803.353068][T18723] FAULT_INJECTION: forcing a failure. [ 2803.353068][T18723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2803.353725][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.0.3230 Not tainted 6.12.0-rc3-syzkaller #0 [ 2803.354107][T18723] Hardware name: ARM-Versatile Express [ 2803.354349][T18723] Call trace: [ 2803.354570][T18723] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2803.354963][T18723] r7:00000000 r6:00000000 r5:60000013 r4:8203d7bc [ 2803.355223][T18723] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2803.355537][T18723] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2803.355879][T18723] r5:00000000 r4:8274e844 [ 2803.356078][T18723] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2803.356397][T18723] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2803.356704][T18723] r6:00000000 r5:edabdf68 r4:00000002 [ 2803.357196][T18723] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2803.357651][T18723] [<808e55b4>] (should_fail_usercopy) from [<8054e834>] (simple_read_from_buffer+0x8c/0x134) [ 2803.358098][T18723] [<8054e7a8>] (simple_read_from_buffer) from [<805c3294>] (proc_fail_nth_read+0xb8/0x100) [ 2803.358734][T18723] r10:00000001 r9:805c31dc r8:00000002 r7:edabdf68 r6:0000000f r5:76b3ff30 [ 2803.359080][T18723] r4:8419a400 r3:edabde9f [ 2803.359297][T18723] [<805c31dc>] (proc_fail_nth_read) from [<80515f94>] (vfs_read+0x98/0x324) [ 2803.359674][T18723] r8:76b3ff30 r7:edabdf68 r6:8419a400 r5:0000000f r4:84949900 [ 2803.359978][T18723] [<80515efc>] (vfs_read) from [<80516c44>] (ksys_read+0x78/0xf8) [ 2803.360327][T18723] r10:00000003 r9:8419a400 r8:8020029c r7:00000000 r6:00000000 r5:84949900 [ 2803.360654][T18723] r4:84949903 [ 2803.360850][T18723] [<80516bcc>] (ksys_read) from [<80516cd4>] (sys_read+0x10/0x14) [ 2803.361239][T18723] r7:00000003 r6:00000005 r5:76b3ff30 r4:0000000f [ 2803.361566][T18723] [<80516cc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2803.361931][T18723] Exception stack(0xedabdfa8 to 0xedabdff0) [ 2803.362247][T18723] dfa0: 0000000f 76b3ff30 00000005 76b3ff30 0000000f 00000000 [ 2803.362590][T18723] dfc0: 0000000f 76b3ff30 00000005 00000003 00000000 00006364 003d0f00 76b400bc [ 2803.362937][T18723] dfe0: 00000158 76b3fed0 000d8408 00130d94 [ 2803.540294][T18725] fuse: Unknown parameter 'grou00000000000000000000' [ 2804.101009][T18733] fuse: Unknown parameter 'grou00000000000000000000' [ 2804.239023][T18735] FAULT_INJECTION: forcing a failure. [ 2804.239023][T18735] name failslab, interval 1, probability 0, space 0, times 0 [ 2804.239733][T18735] CPU: 1 UID: 0 PID: 18735 Comm: syz.0.3235 Not tainted 6.12.0-rc3-syzkaller #0 [ 2804.240080][T18735] Hardware name: ARM-Versatile Express [ 2804.240334][T18735] Call trace: [ 2804.240556][T18735] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2804.241041][T18735] r7:00000c40 r6:84949da8 r5:60000013 r4:8203d7bc [ 2804.241350][T18735] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2804.241752][T18735] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2804.242193][T18735] r5:00000000 r4:8271925c [ 2804.242422][T18735] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2804.242814][T18735] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2804.243194][T18735] r6:84949da8 r5:00001000 r4:82c016c0 [ 2804.243464][T18735] [<804e82d4>] (should_failslab) from [<804cd760>] (__kmalloc_noprof+0x9c/0x458) [ 2804.243873][T18735] [<804cd6c4>] (__kmalloc_noprof) from [<80751070>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2804.244330][T18735] r10:84198000 r9:82c9e800 r8:00000000 r7:83025bb0 r6:84949da8 r5:00001000 [ 2804.244660][T18735] r4:00000000 [ 2804.244845][T18735] [<80751034>] (tomoyo_realpath_from_path) from [<8074d1b4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2804.245326][T18735] r10:84198000 r9:00000000 r8:00000003 r7:40084504 r6:00000004 r5:81ad1868 [ 2804.245699][T18735] r4:84949da8 r3:824ba340 [ 2804.245987][T18735] [<8074d0e8>] (tomoyo_path_number_perm) from [<80751a80>] (tomoyo_file_ioctl+0x1c/0x20) [ 2804.249371][T18735] r9:84949d80 r8:00000003 r7:20000000 r6:20000000 r5:40084504 r4:84949d80 [ 2804.250729][T18735] [<80751a64>] (tomoyo_file_ioctl) from [<807000cc>] (security_file_ioctl+0x64/0x1e4) [ 2804.251354][T18735] [<80700068>] (security_file_ioctl) from [<8052f728>] (sys_ioctl+0x50/0xda8) [ 2804.251809][T18735] r7:20000000 r6:84949d81 r5:00000000 r4:40084504 [ 2804.252130][T18735] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2804.252611][T18735] Exception stack(0xedb41fa8 to 0xedb41ff0) [ 2804.252992][T18735] 1fa0: 00000000 00000000 00000003 40084504 20000000 00000000 [ 2804.253415][T18735] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b400bc [ 2804.253795][T18735] 1fe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2804.254131][T18735] r10:00000036 r9:84198000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2804.254499][T18735] r4:00000000 [ 2804.297557][T18735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2807.813598][T18752] fuse: Unknown parameter 'group_i00000000000000000000' [ 2807.925362][T18754] fuse: Unknown parameter 'group_i00000000000000000000' [ 2808.269072][T18758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18758 comm=syz.0.3242 [ 2808.429482][T18758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18758 comm=syz.0.3242 [ 2809.335497][T18769] fuse: Unknown parameter 'group_i00000000000000000000' [ 2812.181615][T18778] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18778 comm=syz.0.3247 [ 2812.324361][T18778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18778 comm=syz.0.3247 [ 2814.115528][T18790] FAULT_INJECTION: forcing a failure. [ 2814.115528][T18790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2814.116084][T18790] CPU: 0 UID: 0 PID: 18790 Comm: syz.0.3249 Not tainted 6.12.0-rc3-syzkaller #0 [ 2814.116373][T18790] Hardware name: ARM-Versatile Express [ 2814.116581][T18790] Call trace: [ 2814.116820][T18790] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2814.118394][T18790] r7:00000000 r6:8223783c r5:60000013 r4:8203d7bc [ 2814.119352][T18790] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2814.119765][T18790] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2814.120103][T18790] r5:00000000 r4:8274e844 [ 2814.120289][T18790] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2814.120617][T18790] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2814.120933][T18790] r6:8223783c r5:200001c0 r4:83536000 [ 2814.121146][T18790] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2814.121465][T18790] [<808e55b4>] (should_fail_usercopy) from [<808eb61c>] (strncpy_from_user+0x20/0x194) [ 2814.121817][T18790] [<808eb5fc>] (strncpy_from_user) from [<80525108>] (getname_flags.part.0+0x44/0x18c) [ 2814.122240][T18790] r10:00000142 r9:83ea8000 r8:8020029c r7:00000000 r6:8223783c r5:200001c0 [ 2814.122531][T18790] r4:83536000 [ 2814.122770][T18790] [<805250c4>] (getname_flags.part.0) from [<8052a2e8>] (getname+0x38/0x4c) [ 2814.123120][T18790] r9:83ea8000 r8:8020029c r7:ffffff9c r6:00000000 r5:edbedf58 r4:200001c0 [ 2814.123408][T18790] [<8052a2b0>] (getname) from [<80512ff4>] (do_sys_openat2+0x80/0xe4) [ 2814.123731][T18790] r5:edbedf58 r4:200001c0 [ 2814.123932][T18790] [<80512f74>] (do_sys_openat2) from [<80513438>] (sys_openat+0x98/0xd4) [ 2814.124256][T18790] r7:00000142 r6:00130e70 r5:200001c0 r4:ffffff9c [ 2814.124493][T18790] [<805133a0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2814.124812][T18790] Exception stack(0xedbedfa8 to 0xedbedff0) [ 2814.125074][T18790] dfa0: 00000000 00000000 ffffff9c 200001c0 00080040 00000000 [ 2814.125390][T18790] dfc0: 00000000 00000000 00130e70 00000142 00000000 00006364 003d0f00 76afe0bc [ 2814.125690][T18790] dfe0: 76afdec0 76afdeb0 00018af8 00132ec0 [ 2814.125919][T18790] r5:00000000 r4:00000000 [ 2818.392482][T18800] fuse: Unknown parameter 'group_id00000000000000000000' [ 2821.980963][T18823] fuse: Bad value for 'user_id' [ 2821.988072][T18823] fuse: Bad value for 'user_id' [ 2824.010537][T18814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2824.013576][T18814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2824.223871][T19012] fuse: Bad value for 'user_id' [ 2824.224289][T19012] fuse: Bad value for 'user_id' [ 2825.304502][T18814] hsr_slave_0: entered promiscuous mode [ 2825.309021][T18814] hsr_slave_1: entered promiscuous mode [ 2825.311374][T18814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2825.314253][T18814] Cannot create hsr debugfs directory [ 2825.604897][T18814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.655420][T18814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.720057][T18814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.780009][T18814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.913092][T18814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2825.931730][T18814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2825.944917][T18814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2825.955903][T18814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2826.014159][T19164] fuse: Bad value for 'user_id' [ 2826.014585][T19164] fuse: Bad value for 'user_id' [ 2826.872705][T18814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2827.061619][T19180] fuse: Bad value for 'fd' [ 2829.885037][T18814] veth0_vlan: entered promiscuous mode [ 2829.917616][T18814] veth1_vlan: entered promiscuous mode [ 2830.001667][T18814] veth0_macvtap: entered promiscuous mode [ 2830.014377][T18814] veth1_macvtap: entered promiscuous mode [ 2830.088615][T18814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.089022][T18814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.089269][T18814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.089585][T18814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.202495][T19215] fuse: Bad value for 'fd' [ 2830.457625][ T31] audit: type=1400 audit(2830.360:756): avc: denied { listen } for pid=19220 comm="syz.0.3270" path=2F3439332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2830.715602][T19229] fuse: Bad value for 'fd' [ 2830.993337][T19235] fuse: Bad value for 'fd' [ 2831.249475][T19240] fuse: Bad value for 'fd' [ 2832.270693][T19248] fuse: Bad value for 'fd' [ 2832.480600][T19252] fuse: Bad value for 'fd' [ 2833.156524][T19263] FAULT_INJECTION: forcing a failure. [ 2833.156524][T19263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.157827][T19263] CPU: 1 UID: 0 PID: 19263 Comm: syz.0.3287 Not tainted 6.12.0-rc3-syzkaller #0 [ 2833.158236][T19263] Hardware name: ARM-Versatile Express [ 2833.158388][T19263] Call trace: [ 2833.158507][T19263] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2833.158735][T19263] r7:85cc8900 r6:00000000 r5:60000013 r4:8203d7bc [ 2833.158889][T19263] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2833.159142][T19263] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2833.159361][T19263] r5:00000000 r4:8274e844 [ 2833.159475][T19263] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2833.159702][T19263] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2833.159912][T19263] r6:00000000 r5:ee189f48 r4:00000020 [ 2833.160037][T19263] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2833.160266][T19263] [<808e55b4>] (should_fail_usercopy) from [<8083a3fc>] (_copy_from_iter+0x68/0x7c8) [ 2833.160628][T19263] [<8083a394>] (_copy_from_iter) from [<815a6f9c>] (netlink_sendmsg+0x19c/0x43c) [ 2833.161027][T19263] r10:00000000 r9:00000000 r8:ee189f48 r7:84587400 r6:00000020 r5:854da6c0 [ 2833.161376][T19263] r4:ee189f38 [ 2833.161553][T19263] [<815a6e00>] (netlink_sendmsg) from [<81483c88>] (__sock_sendmsg+0x44/0x78) [ 2833.162014][T19263] r10:00044040 r9:ee189dd4 r8:ee189dd4 r7:00000000 r6:84d24a00 r5:ee189f38 [ 2833.162530][T19263] r4:00000000 [ 2833.162730][T19263] [<81483c44>] (__sock_sendmsg) from [<81484c8c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2833.163120][T19263] r7:00000000 r6:00000000 r5:84d24a00 r4:ee189f38 [ 2833.163389][T19263] [<814849e0>] (____sys_sendmsg) from [<81486bf4>] (___sys_sendmsg+0x9c/0xd0) [ 2833.163770][T19263] r10:ee189e34 r9:20000100 r8:00044040 r7:00000000 r6:84d24a00 r5:ee189f38 [ 2833.164105][T19263] r4:00000000 [ 2833.164304][T19263] [<81486b58>] (___sys_sendmsg) from [<8148710c>] (sys_sendmsg+0x78/0xbc) [ 2833.164690][T19263] r10:00000128 r9:83f43000 r8:8020029c r7:00044040 r6:20000100 r5:84d24a00 [ 2833.165036][T19263] r4:00000000 [ 2833.165246][T19263] [<81487094>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2833.165634][T19263] Exception stack(0xee189fa8 to 0xee189ff0) [ 2833.165934][T19263] 9fa0: 00000000 00000000 00000003 20000100 00044040 00000000 [ 2833.166344][T19263] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b400bc [ 2833.166707][T19263] 9fe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2833.167354][T19263] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2833.875195][T19266] fuse: Unknown parameter '0x00000000000000030x0000000000000005' [ 2834.365282][T19268] fuse: Bad value for 'fd' [ 2837.294437][T19291] fuse: Bad value for 'fd' [ 2838.031382][T19300] FAULT_INJECTION: forcing a failure. [ 2838.031382][T19300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2838.032018][T19300] CPU: 1 UID: 0 PID: 19300 Comm: syz.1.3297 Not tainted 6.12.0-rc3-syzkaller #0 [ 2838.032347][T19300] Hardware name: ARM-Versatile Express [ 2838.032565][T19300] Call trace: [ 2838.032760][T19300] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2838.033116][T19300] r7:00000000 r6:00000000 r5:60000013 r4:8203d7bc [ 2838.033356][T19300] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2838.033671][T19300] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2838.034050][T19300] r5:00000000 r4:8274e844 [ 2838.034236][T19300] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2838.034563][T19300] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2838.034900][T19300] r6:00000000 r5:ee219f68 r4:00000002 [ 2838.035120][T19300] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2838.035463][T19300] [<808e55b4>] (should_fail_usercopy) from [<8054e834>] (simple_read_from_buffer+0x8c/0x134) [ 2838.035821][T19300] [<8054e7a8>] (simple_read_from_buffer) from [<805c3294>] (proc_fail_nth_read+0xb8/0x100) [ 2838.036336][T19300] r10:00000001 r9:805c31dc r8:00000002 r7:ee219f68 r6:0000000f r5:76b03f30 [ 2838.036580][T19300] r4:83f33000 r3:ee219e9f [ 2838.036783][T19300] [<805c31dc>] (proc_fail_nth_read) from [<80515f94>] (vfs_read+0x98/0x324) [ 2838.037260][T19300] r8:76b03f30 r7:ee219f68 r6:83f33000 r5:0000000f r4:85120540 [ 2838.037616][T19300] [<80515efc>] (vfs_read) from [<80516c44>] (ksys_read+0x78/0xf8) [ 2838.037989][T19300] r10:00000003 r9:83f33000 r8:8020029c r7:00000000 r6:00000000 r5:85120540 [ 2838.038353][T19300] r4:85120543 [ 2838.038526][T19300] [<80516bcc>] (ksys_read) from [<80516cd4>] (sys_read+0x10/0x14) [ 2838.039021][T19300] r7:00000003 r6:00000004 r5:76b03f30 r4:0000000f [ 2838.039321][T19300] [<80516cc4>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2838.039797][T19300] Exception stack(0xee219fa8 to 0xee219ff0) [ 2838.040073][T19300] 9fa0: 0000000f 76b03f30 00000004 76b03f30 0000000f 00000000 [ 2838.040444][T19300] 9fc0: 0000000f 76b03f30 00000004 00000003 00000000 00006364 003d0f00 76b040bc [ 2838.040887][T19300] 9fe0: 00000158 76b03ed0 000d8408 00130d94 [ 2838.080828][T19301] binder: Unknown parameter 'euid' [ 2838.281325][T19303] fuse: Invalid rootmode [ 2840.871815][T19320] fuse: Invalid rootmode [ 2841.594680][T19324] fuse: Bad value for 'rootmode' [ 2842.148644][T19330] fuse: Invalid rootmode [ 2844.529835][T19348] fuse: Bad value for 'rootmode' [ 2845.080986][T19351] FAULT_INJECTION: forcing a failure. [ 2845.080986][T19351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2845.082032][T19351] CPU: 1 UID: 0 PID: 19351 Comm: syz.1.3317 Not tainted 6.12.0-rc3-syzkaller #0 [ 2845.082364][T19351] Hardware name: ARM-Versatile Express [ 2845.082573][T19351] Call trace: [ 2845.082901][T19351] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2845.083307][T19351] r7:83a3d800 r6:c01c64ad r5:60000013 r4:8203d7bc [ 2845.083550][T19351] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2845.083997][T19351] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2845.084326][T19351] r5:00000000 r4:8274e844 [ 2845.084509][T19351] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2845.084949][T19351] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2845.085276][T19351] r6:c01c64ad r5:00000000 r4:ee945e64 [ 2845.085479][T19351] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2845.085850][T19351] [<808e55b4>] (should_fail_usercopy) from [<80a385c4>] (drm_ioctl+0x260/0x564) [ 2845.086536][T19351] [<80a38364>] (drm_ioctl) from [<8052f80c>] (sys_ioctl+0x134/0xda8) [ 2845.087190][T19351] r10:83f43000 r9:858eb000 r8:00000004 r7:20000000 r6:858eb001 r5:00000000 [ 2845.087849][T19351] r4:c01c64ad [ 2845.088128][T19351] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2845.094458][T19351] Exception stack(0xee945fa8 to 0xee945ff0) [ 2845.097850][T19351] 5fa0: 00000000 00000000 00000004 c01c64ad 20000000 00000000 [ 2845.099236][T19351] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b040bc [ 2845.099680][T19351] 5fe0: 76b03ec0 76b03eb0 00018af8 00132ec0 [ 2845.101541][T19351] r10:00000036 r9:83f43000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2845.107010][T19351] r4:00000000 [ 2847.805390][T19365] fuse: Invalid rootmode [ 2848.148382][T19368] fuse: Bad value for 'rootmode' [ 2848.776007][T19373] FAULT_INJECTION: forcing a failure. [ 2848.776007][T19373] name failslab, interval 1, probability 0, space 0, times 0 [ 2848.776592][T19373] CPU: 1 UID: 0 PID: 19373 Comm: syz.0.3324 Not tainted 6.12.0-rc3-syzkaller #0 [ 2848.777195][T19373] Hardware name: ARM-Versatile Express [ 2848.777450][T19373] Call trace: [ 2848.777764][T19373] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2848.779270][T19373] r7:83f35400 r6:00000dc0 r5:60000013 r4:8203d7bc [ 2848.782152][T19373] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2848.784942][T19373] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2848.785588][T19373] r5:00000000 r4:8271925c [ 2848.785833][T19373] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2848.787822][T19373] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2848.795988][T19373] r6:00000dc0 r5:8271bc14 r4:82ca8d80 [ 2848.796507][T19373] [<804e82d4>] (should_failslab) from [<804cd3dc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2848.797105][T19373] [<804cd390>] (kmem_cache_alloc_noprof) from [<805186f0>] (alloc_empty_file+0x64/0x13c) [ 2848.797585][T19373] r10:83f35400 r9:858eb180 r8:82605c00 r7:837e9e80 r6:00000000 r5:8271bc14 [ 2848.798023][T19373] r4:82237820 [ 2848.798232][T19373] [<8051868c>] (alloc_empty_file) from [<80512c6c>] (dentry_open+0x28/0x68) [ 2848.798959][T19373] r8:00000003 r7:00000000 r6:83f35400 r5:eea15ea4 r4:00000005 [ 2848.799255][T19373] [<80512c44>] (dentry_open) from [<80563320>] (open_namespace+0x6c/0xbc) [ 2848.799537][T19373] r5:00000000 r4:00000005 [ 2848.799740][T19373] [<805632b4>] (open_namespace) from [<80563538>] (ns_ioctl+0x1a8/0x424) [ 2848.800081][T19373] r6:83f35400 r5:00000000 r4:82625480 [ 2848.800327][T19373] [<80563390>] (ns_ioctl) from [<8052f80c>] (sys_ioctl+0x134/0xda8) [ 2848.800673][T19373] r9:858eb180 r8:00000003 r7:00000000 r6:858eb181 r5:00000000 r4:0000b701 [ 2848.800989][T19373] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2848.801333][T19373] Exception stack(0xeea15fa8 to 0xeea15ff0) [ 2848.801595][T19373] 5fa0: 00000000 00000000 00000003 0000b701 00000000 00000000 [ 2848.801934][T19373] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b400bc [ 2848.802309][T19373] 5fe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2848.802589][T19373] r10:00000036 r9:83f35400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2848.802911][T19373] r4:00000000 [ 2849.408735][T19378] fuse: Bad value for 'rootmode' [ 2850.129800][T19384] fuse: Bad value for 'rootmode' [ 2852.602304][T19403] fuse: Unknown parameter 'use00000000000000000000' [ 2852.612004][T19404] fuse: Unknown parameter 'user_i00000000000000000000' [ 2855.212489][T19432] fuse: Unknown parameter 'use00000000000000000000' [ 2855.454105][T19434] fuse: Unknown parameter 'user_i00000000000000000000' [ 2856.051646][T19442] fuse: Unknown parameter 'user_i00000000000000000000' [ 2856.276369][T19444] fuse: Unknown parameter 'user_id00000000000000000000' [ 2857.918300][ T1486] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2858.078194][ T1486] usb 1-1: Using ep0 maxpacket: 32 [ 2858.100999][ T1486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2858.101611][ T1486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2858.102030][ T1486] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2858.102514][ T1486] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2858.102850][ T1486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.112154][ T1486] usb 1-1: config 0 descriptor?? [ 2858.658693][T19454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.663129][T19454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2858.890269][ T1486] usbhid 1-1:0.0: can't add hid device: -71 [ 2858.890690][ T1486] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2858.892674][ T1486] usb 1-1: USB disconnect, device number 44 [ 2859.128749][T19471] fuse: Unknown parameter 'user_i00000000000000000000' [ 2859.544447][T19473] fuse: Unknown parameter 'user_id00000000000000000000' [ 2860.872129][T19488] fuse: Bad value for 'fd' [ 2863.895124][T19510] fuse: Bad value for 'fd' [ 2882.689603][T19532] fuse: Bad value for 'fd' [ 2882.818554][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 2886.034855][T19545] fuse: Unknown parameter '0x0000000000000003' [ 2886.363441][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 2891.289068][T19566] fuse: Bad value for 'fd' [ 2894.246228][T19563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2894.252673][T19563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2895.631148][T19563] hsr_slave_0: entered promiscuous mode [ 2895.633887][T19563] hsr_slave_1: entered promiscuous mode [ 2895.635915][T19563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2895.641932][T19563] Cannot create hsr debugfs directory [ 2896.082859][T19563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.153009][T19563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.222863][T19563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.284017][T19563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.492433][T19563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2896.512435][T19563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2896.534533][T19563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2896.553043][T19563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2897.995885][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2900.061043][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.061428][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.061679][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.061903][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.062175][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.062375][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.062567][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.062758][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.062951][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.063146][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.063349][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.063543][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.063735][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.063992][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.064213][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.064459][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.064995][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.065298][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.065505][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.065703][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.065898][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.066187][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.066387][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.066587][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.066818][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.087867][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.088100][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.088308][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.088801][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.089008][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.089202][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.089391][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.089588][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.089792][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.090061][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.090269][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.090466][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.090660][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.090856][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.091089][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.091289][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.091489][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.091714][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.091913][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.092123][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.092327][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.092552][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.092902][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.093231][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.093551][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.094205][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.094674][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.095031][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.095538][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.095982][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.096350][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.107928][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.108510][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.108850][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.109216][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.109564][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.109909][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.110323][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.110670][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.110986][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.111402][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.111744][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.112084][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.112434][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.112770][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.113091][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.113446][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.113766][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.114134][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.114502][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.114834][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.115149][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.115461][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.115771][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.116104][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.116375][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.116642][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.138124][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.138931][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.139467][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.139812][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.140173][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.140542][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.140989][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.141350][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.141943][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.142441][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.142850][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.143283][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.143629][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.144165][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.144653][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.145046][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.145615][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.145946][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.146323][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.146701][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.157934][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.158451][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.158754][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.159057][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.159383][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.159690][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.160002][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.160320][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.160622][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.160924][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.161228][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.161583][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.161850][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.162141][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.162457][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.162759][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.163056][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.163364][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.163666][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.163975][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.164334][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.164664][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.164966][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.165337][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.165637][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.165937][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.166290][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.166601][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.188686][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.189276][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.189642][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.190130][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.190736][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.191331][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.191781][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.192655][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.192989][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.193466][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.193801][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.194282][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.194634][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.195250][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.195651][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.196049][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.196418][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.217712][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.218176][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.218707][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.218983][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.219261][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.219603][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.219915][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.220321][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.220658][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.220982][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.221314][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.221627][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.222015][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.222433][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.222763][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.223185][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.223644][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.223964][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.224257][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.224538][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.224838][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.225079][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.225360][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.225643][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.225901][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.226242][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.226525][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.247924][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.248513][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.248889][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.249231][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.249567][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.250009][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.250398][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.250791][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.251284][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.251668][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.252047][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.252403][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.252864][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.253463][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.254109][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.254739][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.255274][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.255763][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.256282][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.277667][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.278179][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.278546][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.279064][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.279571][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.279896][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.280133][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.280358][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.280600][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.280856][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.281111][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.281363][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.281595][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.281863][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.282106][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.282675][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.283044][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.283867][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.284339][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.284680][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.285010][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.285457][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.285863][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.286251][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.286552][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.286854][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.308479][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.308868][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.309428][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.309838][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.310529][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.310908][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.311329][T12267] hid-generic FFF7:1000:0024.001C: unknown main item tag 0x0 [ 2900.324236][T12267] hid-generic FFF7:1000:0024.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2902.850453][T19563] veth0_vlan: entered promiscuous mode [ 2902.910047][T19563] veth1_vlan: entered promiscuous mode [ 2903.038733][T19563] veth0_macvtap: entered promiscuous mode [ 2903.053097][T19563] veth1_macvtap: entered promiscuous mode [ 2903.174042][T19563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.174658][T19563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.175047][T19563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.175453][T19563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.910839][ T31] audit: type=1400 audit(2905.820:757): avc: denied { setopt } for pid=19992 comm="syz.1.3403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2906.250117][ T31] audit: type=1400 audit(2906.160:758): avc: denied { getopt } for pid=19992 comm="syz.1.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2908.135795][T20009] FAULT_INJECTION: forcing a failure. [ 2908.135795][T20009] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.136568][T20009] CPU: 1 UID: 0 PID: 20009 Comm: syz.1.3408 Not tainted 6.12.0-rc3-syzkaller #0 [ 2908.137232][T20009] Hardware name: ARM-Versatile Express [ 2908.137508][T20009] Call trace: [ 2908.137884][T20009] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2908.138425][T20009] r7:00000820 r6:8640ad40 r5:60000013 r4:8203d7bc [ 2908.138964][T20009] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2908.139332][T20009] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2908.139703][T20009] r5:00000000 r4:8271925c [ 2908.139923][T20009] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2908.140316][T20009] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2908.140727][T20009] r6:8640ad40 r5:00000030 r4:82c01240 [ 2908.141011][T20009] [<804e82d4>] (should_failslab) from [<804ce414>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 2908.141477][T20009] [<804ce374>] (__kmalloc_node_track_caller_noprof) from [<8046cda8>] (kmemdup_noprof+0x28/0x44) [ 2908.142004][T20009] r10:83eac800 r9:8640ad40 r8:00000000 r7:8450218c r6:8640ad40 r5:00000030 [ 2908.142360][T20009] r4:84502168 [ 2908.142557][T20009] [<8046cd80>] (kmemdup_noprof) from [<8184e2fc>] (sctp_addr_wq_mgmt+0x134/0x1e8) [ 2908.142995][T20009] r7:8450218c r6:84501a00 r5:84502168 r4:84502168 [ 2908.143308][T20009] [<8184e1c8>] (sctp_addr_wq_mgmt) from [<8187d548>] (sctp_inet6addr_event+0x17c/0x1e0) [ 2908.143759][T20009] r10:83eac800 r9:84502160 r8:84502190 r7:84501a00 r6:85f5b0c0 r5:8640ad40 [ 2908.144153][T20009] r4:858cc440 [ 2908.144359][T20009] [<8187d3cc>] (sctp_inet6addr_event) from [<80271480>] (notifier_call_chain+0x74/0x1ac) [ 2908.144817][T20009] r9:00000000 r8:fffffffc r7:8543f008 r6:827ead44 r5:00000000 r4:8187d3cc [ 2908.145178][T20009] [<8027140c>] (notifier_call_chain) from [<802716e0>] (atomic_notifier_call_chain+0x3c/0x50) [ 2908.145622][T20009] r10:00000000 r9:858c9e04 r8:8543f148 r7:8543f008 r6:85f5b0c0 r5:00000001 [ 2908.146494][T20009] r4:8292db04 [ 2908.146746][T20009] [<802716a4>] (atomic_notifier_call_chain) from [<817d6528>] (inet6addr_notifier_call_chain+0x24/0x28) [ 2908.147524][T20009] r6:85f5b0e0 r5:8543f000 r4:85f5b0c0 [ 2908.147866][T20009] [<817d6504>] (inet6addr_notifier_call_chain) from [<8175aab8>] (ipv6_add_addr+0x478/0x708) [ 2908.148325][T20009] [<8175a640>] (ipv6_add_addr) from [<8175f228>] (inet6_addr_add+0x120/0x380) [ 2908.148732][T20009] r10:00000000 r9:83731000 r8:00000005 r7:8543f000 r6:84501a00 r5:00000000 [ 2908.149261][T20009] r4:eaa45df0 [ 2908.149454][T20009] [<8175f108>] (inet6_addr_add) from [<8176216c>] (addrconf_add_ifaddr+0x11c/0x154) [ 2908.149866][T20009] r10:83eac800 r9:81c80dec r8:eaa45ecc r7:b5403587 r6:20000000 r5:84501a00 [ 2908.150260][T20009] r4:00000000 [ 2908.150463][T20009] [<81762050>] (addrconf_add_ifaddr) from [<8174c76c>] (inet6_ioctl+0x64/0x198) [ 2908.150874][T20009] r7:84c7a500 r6:84501a00 r5:20000000 r4:00008916 [ 2908.151188][T20009] [<8174c708>] (inet6_ioctl) from [<81485280>] (sock_ioctl+0x450/0x608) [ 2908.151571][T20009] r7:84c7a500 r6:84501a00 r5:20000000 r4:00008916 [ 2908.151852][T20009] [<81484e30>] (sock_ioctl) from [<8052f80c>] (sys_ioctl+0x134/0xda8) [ 2908.152268][T20009] r9:858eb0c0 r8:00000003 r7:20000000 r6:858eb0c1 r5:00000000 r4:00008916 [ 2908.152621][T20009] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2908.153020][T20009] Exception stack(0xeaa45fa8 to 0xeaa45ff0) [ 2908.153328][T20009] 5fa0: 00000000 00000000 00000003 00008916 20000000 00000000 [ 2908.153705][T20009] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b9d0bc [ 2908.154140][T20009] 5fe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2908.154437][T20009] r10:00000036 r9:83eac800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2908.154794][T20009] r4:00000000 [ 2910.040091][T20027] FAULT_INJECTION: forcing a failure. [ 2910.040091][T20027] name failslab, interval 1, probability 0, space 0, times 0 [ 2910.040463][T20027] CPU: 0 UID: 0 PID: 20027 Comm: syz.1.3416 Not tainted 6.12.0-rc3-syzkaller #0 [ 2910.040662][T20027] Hardware name: ARM-Versatile Express [ 2910.040836][T20027] Call trace: [ 2910.040954][T20027] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2910.041222][T20027] r7:83eac800 r6:00000920 r5:60000013 r4:8203d7bc [ 2910.041445][T20027] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2910.041734][T20027] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2910.041947][T20027] r5:00000000 r4:8271925c [ 2910.042096][T20027] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2910.042312][T20027] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2910.042567][T20027] r6:00000920 r5:856e7030 r4:82c01240 [ 2910.042698][T20027] [<804e82d4>] (should_failslab) from [<804cc788>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2910.042949][T20027] [<804cc73c>] (__kmalloc_cache_noprof) from [<8185f6a8>] (sctp_add_bind_addr+0x50/0xf4) [ 2910.043181][T20027] r10:00001782 r9:84502160 r8:0000001c r7:85894650 r6:00000001 r5:856e7030 [ 2910.043358][T20027] r4:85894640 [ 2910.043454][T20027] [<8185f658>] (sctp_add_bind_addr) from [<8184e188>] (sctp_copy_local_addr_list+0x120/0x160) [ 2910.043725][T20027] r9:84502160 r8:856e7030 r7:00000002 r6:84501a00 r5:85894650 r4:85894640 [ 2910.043896][T20027] [<8184e068>] (sctp_copy_local_addr_list) from [<81860040>] (sctp_bind_addr_copy+0x50/0x1cc) [ 2910.044105][T20027] r10:00000002 r9:856e7030 r8:862746f4 r7:84501a00 r6:00000cc0 r5:858e23d0 [ 2910.044323][T20027] r4:858e23c0 [ 2910.044396][T20027] [<8185fff0>] (sctp_bind_addr_copy) from [<81851318>] (sctp_assoc_set_bind_addr_from_ep+0x6c/0x74) [ 2910.044673][T20027] r10:0000001c r9:84162800 r8:eadede34 r7:86227ec0 r6:00000000 r5:00000002 [ 2910.044987][T20027] r4:00000cc0 [ 2910.045152][T20027] [<818512ac>] (sctp_assoc_set_bind_addr_from_ep) from [<8186971c>] (sctp_connect_new_asoc+0x90/0x1e0) [ 2910.045547][T20027] r4:856e7000 [ 2910.045793][T20027] [<8186968c>] (sctp_connect_new_asoc) from [<818699b0>] (__sctp_connect+0x144/0x334) [ 2910.046238][T20027] r9:862746c0 r8:827eaca4 r7:00000000 r6:0000001c r5:86227ec0 r4:84162800 [ 2910.046573][T20027] [<8186986c>] (__sctp_connect) from [<81869ce0>] (__sctp_setsockopt_connectx+0x70/0xb4) [ 2910.047293][T20027] r10:0000001c r9:b5403587 r8:83eac800 r7:00000000 r6:86227ec0 r5:84162800 [ 2910.048116][T20027] r4:0000001c [ 2910.048314][T20027] [<81869c70>] (__sctp_setsockopt_connectx) from [<8186a5f8>] (sctp_setsockopt+0x73c/0x2680) [ 2910.048789][T20027] r7:0000001c r6:86227ec0 r5:0000006b r4:84162800 [ 2910.049081][T20027] [<81869ec0>] (sctp_setsockopt) from [<81487b18>] (sock_common_setsockopt+0x38/0x40) [ 2910.049528][T20027] r10:00000126 r9:83eac800 r8:8020029c r7:00000000 r6:84d2f180 r5:00000000 [ 2910.049875][T20027] r4:81869ebc [ 2910.050066][T20027] [<81487ae4>] (sock_common_setsockopt) from [<81483174>] (do_sock_setsockopt+0xb0/0x17c) [ 2910.050366][T20027] r4:81487ae0 [ 2910.050499][T20027] [<814830c4>] (do_sock_setsockopt) from [<81486638>] (sys_setsockopt+0x78/0xbc) [ 2910.050706][T20027] r6:84d2f180 r5:0000006b r4:00000084 [ 2910.050913][T20027] [<814865c0>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2910.051159][T20027] Exception stack(0xeadedfa8 to 0xeadedff0) [ 2910.051345][T20027] dfa0: 0000001c 00000000 00000003 00000084 0000006b 20010980 [ 2910.051627][T20027] dfc0: 0000001c 00000000 00130e70 00000126 00000000 00006364 003d0f00 76b9d0bc [ 2910.051924][T20027] dfe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2910.052156][T20027] r7:00000126 r6:00130e70 r5:00000000 r4:0000001c [ 2918.078487][ T1486] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2918.227860][ T1486] usb 1-1: Using ep0 maxpacket: 8 [ 2921.691257][ T1486] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2921.769495][ T1486] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2921.770068][ T1486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2921.770437][ T1486] usb 1-1: Product: 뤪깱딹㴮錠ⷝ꒺貈睂㤆砊餳幖꯫⊼蹷녝屜᥵⪤덠訯ꂙ鷺⇪잡骱縜鯖鍩쬁Ⱟً랽㱹钘⨩⇩捝퐩턋勒἖眽讖Ṉ鞮攎䌳ଦ왦ꛅ䣕嵋曻隌Ⅷ [ 2921.771290][ T1486] usb 1-1: Manufacturer: Й [ 2921.771500][ T1486] usb 1-1: SerialNumber: ꟕ籠뾶顽๦ [ 2922.410413][ T1486] cdc_ncm 1-1:1.0: bind() failure [ 2922.423703][ T1486] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2922.424238][ T1486] cdc_ncm 1-1:1.1: bind() failure [ 2922.458906][ T1486] usb 1-1: USB disconnect, device number 45 [ 2922.801708][T20073] FAULT_INJECTION: forcing a failure. [ 2922.801708][T20073] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.802503][T20073] CPU: 1 UID: 0 PID: 20073 Comm: syz.1.3426 Not tainted 6.12.0-rc3-syzkaller #0 [ 2922.802884][T20073] Hardware name: ARM-Versatile Express [ 2922.803141][T20073] Call trace: [ 2922.803349][T20073] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2922.803774][T20073] r7:00000c40 r6:85050ce8 r5:60000013 r4:8203d7bc [ 2922.804062][T20073] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2922.804437][T20073] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2922.804763][T20073] r5:00000000 r4:8271925c [ 2922.804976][T20073] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2922.805335][T20073] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2922.805722][T20073] r6:85050ce8 r5:00001000 r4:82c016c0 [ 2922.806003][T20073] [<804e82d4>] (should_failslab) from [<804cd760>] (__kmalloc_noprof+0x9c/0x458) [ 2922.806408][T20073] [<804cd6c4>] (__kmalloc_noprof) from [<80751070>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2922.807022][T20073] r10:83ead400 r9:82f90400 r8:00000000 r7:8312fc38 r6:85050ce8 r5:00001000 [ 2922.807534][T20073] r4:00000000 [ 2922.807822][T20073] [<80751034>] (tomoyo_realpath_from_path) from [<8074d1b4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2922.808314][T20073] r10:83ead400 r9:00000000 r8:00000003 r7:00008970 r6:00000004 r5:81ad1868 [ 2922.808678][T20073] r4:85050ce8 r3:824ba340 [ 2922.808904][T20073] [<8074d0e8>] (tomoyo_path_number_perm) from [<80751a80>] (tomoyo_file_ioctl+0x1c/0x20) [ 2922.816718][T20073] r9:85050cc0 r8:00000003 r7:20005500 r6:20005500 r5:00008970 r4:85050cc0 [ 2922.817630][T20073] [<80751a64>] (tomoyo_file_ioctl) from [<807000cc>] (security_file_ioctl+0x64/0x1e4) [ 2922.818157][T20073] [<80700068>] (security_file_ioctl) from [<8052f728>] (sys_ioctl+0x50/0xda8) [ 2922.818574][T20073] r7:20005500 r6:85050cc1 r5:00000000 r4:00008970 [ 2922.819059][T20073] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2922.819446][T20073] Exception stack(0xeb019fa8 to 0xeb019ff0) [ 2922.819741][T20073] 9fa0: 00000000 00000000 00000003 00008970 20005500 00000000 [ 2922.820208][T20073] 9fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b9d0bc [ 2922.820564][T20073] 9fe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2922.820911][T20073] r10:00000036 r9:83ead400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2922.821513][T20073] r4:00000000 [ 2922.859519][T20073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2923.848074][T20076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20076 comm=syz.0.3427 [ 2926.990032][ T31] audit: type=1400 audit(2926.900:759): avc: denied { getopt } for pid=20097 comm="syz.1.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2931.980985][T20130] fuse: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 2932.004144][T20130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20130 comm=syz.0.3447 [ 2932.415638][T20133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=20133 comm=syz.0.3448 [ 2934.541493][T20148] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2561 sclass=netlink_xfrm_socket pid=20148 comm=syz.1.3452 [ 2936.430639][T20153] tmpfs: Unknown parameter ')_1V~({1~"APAFLILAX+m};mՌSŠ_L9ST{z+"AQOʶH0!;(9KiLw"-Kǝ>F&KuvroC?xDb8IG]hj0)+] ' [ 2939.327892][T20174] FAULT_INJECTION: forcing a failure. [ 2939.327892][T20174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2939.328293][T20174] CPU: 1 UID: 0 PID: 20174 Comm: syz.1.3462 Not tainted 6.12.0-rc3-syzkaller #0 [ 2939.328476][T20174] Hardware name: ARM-Versatile Express [ 2939.328597][T20174] Call trace: [ 2939.328713][T20174] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2939.328947][T20174] r7:200003c0 r6:dfb09e30 r5:60000013 r4:8203d7bc [ 2939.329079][T20174] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2939.329264][T20174] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2939.329462][T20174] r5:00000000 r4:8274e844 [ 2939.329560][T20174] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2939.329755][T20174] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2939.329950][T20174] r6:dfb09e30 r5:00000000 r4:dfb09f38 [ 2939.330127][T20174] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2939.330329][T20174] [<808e55b4>] (should_fail_usercopy) from [<81486a78>] (copy_msghdr_from_user+0x50/0x130) [ 2939.330553][T20174] [<81486a28>] (copy_msghdr_from_user) from [<81486bd0>] (___sys_sendmsg+0x78/0xd0) [ 2939.330768][T20174] r8:00000000 r7:00000000 r6:83394000 r5:dfb09f38 r4:dfb09e74 [ 2939.330927][T20174] [<81486b58>] (___sys_sendmsg) from [<8148710c>] (sys_sendmsg+0x78/0xbc) [ 2939.331128][T20174] r10:00000128 r9:83f30000 r8:8020029c r7:00000000 r6:200003c0 r5:83394000 [ 2939.331305][T20174] r4:00000000 [ 2939.331400][T20174] [<81487094>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2939.331645][T20174] Exception stack(0xdfb09fa8 to 0xdfb09ff0) [ 2939.331793][T20174] 9fa0: 00000000 00000000 00000004 200003c0 00000000 00000000 [ 2939.332001][T20174] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b9d0bc [ 2939.332237][T20174] 9fe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2939.332395][T20174] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2944.266283][T19188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2944.276380][T19188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2944.283645][T19188] bond0 (unregistering): Released all slaves [ 2944.370362][T19188] hsr_slave_0: left promiscuous mode [ 2944.374234][T19188] hsr_slave_1: left promiscuous mode [ 2944.383168][T19188] veth1_macvtap: left promiscuous mode [ 2944.383667][T19188] veth0_macvtap: left promiscuous mode [ 2944.384097][T19188] veth1_vlan: left promiscuous mode [ 2944.384449][T19188] veth0_vlan: left promiscuous mode [ 2944.457746][T12267] SELinux: failure in sel_netif_sid_slow(), invalid network interface (32) [ 2944.458386][T12267] SELinux: failure in sel_netif_sid_slow(), invalid network interface (34) [ 2945.881950][T20210] fuse: Bad value for 'group_id' [ 2945.882443][T20210] fuse: Bad value for 'group_id' [ 2949.700131][T20224] fuse: Bad value for 'group_id' [ 2949.700502][T20224] fuse: Bad value for 'group_id' ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1334:(snd_func_refer) error evaluating name ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5703:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2666:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1334:(snd_func_refer) error evaluating name ALSA lib conf.c:5180:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5703:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2666:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 2951.601365][T20232] FAULT_INJECTION: forcing a failure. [ 2951.601365][T20232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2951.602120][T20232] CPU: 0 UID: 0 PID: 20232 Comm: syz.1.3473 Not tainted 6.12.0-rc3-syzkaller #0 [ 2951.602487][T20232] Hardware name: ARM-Versatile Express [ 2951.602734][T20232] Call trace: [ 2951.602940][T20232] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2951.603177][T20232] r7:20000280 r6:dfd15e30 r5:60000013 r4:8203d7bc [ 2951.603321][T20232] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2951.603501][T20232] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2951.603699][T20232] r5:00000000 r4:8274e844 [ 2951.603807][T20232] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2951.604006][T20232] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2951.604205][T20232] r6:dfd15e30 r5:00000000 r4:dfd15f38 [ 2951.604333][T20232] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2951.604524][T20232] [<808e55b4>] (should_fail_usercopy) from [<81486a78>] (copy_msghdr_from_user+0x50/0x130) [ 2951.604750][T20232] [<81486a28>] (copy_msghdr_from_user) from [<81486bd0>] (___sys_sendmsg+0x78/0xd0) [ 2951.605233][T20232] r8:00000000 r7:00000000 r6:84d27680 r5:dfd15f38 r4:dfd15e74 [ 2951.605489][T20232] [<81486b58>] (___sys_sendmsg) from [<8148710c>] (sys_sendmsg+0x78/0xbc) [ 2951.605705][T20232] r10:00000128 r9:8569e000 r8:8020029c r7:00000000 r6:20000280 r5:84d27680 [ 2951.605992][T20232] r4:00000000 [ 2951.606101][T20232] [<81487094>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2951.606397][T20232] Exception stack(0xdfd15fa8 to 0xdfd15ff0) [ 2951.606537][T20232] 5fa0: 00000000 00000000 00000004 20000280 00000000 00000000 [ 2951.606735][T20232] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b9d0bc [ 2951.607139][T20232] 5fe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2951.607307][T20232] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2951.969328][T20236] fuse: Bad value for 'group_id' [ 2951.969571][T20236] fuse: Bad value for 'group_id' [ 2955.303416][T20250] FAULT_INJECTION: forcing a failure. [ 2955.303416][T20250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.303928][T20250] CPU: 0 UID: 0 PID: 20250 Comm: syz.0.3478 Not tainted 6.12.0-rc3-syzkaller #0 [ 2955.304262][T20250] Hardware name: ARM-Versatile Express [ 2955.304479][T20250] Call trace: [ 2955.304595][T20250] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2955.304897][T20250] r7:00000000 r6:8223783c r5:60000013 r4:8203d7bc [ 2955.305177][T20250] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2955.305501][T20250] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2955.305797][T20250] r5:00000000 r4:8274e844 [ 2955.305912][T20250] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2955.306203][T20250] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2955.306407][T20250] r6:8223783c r5:20000140 r4:83533000 [ 2955.306542][T20250] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2955.306764][T20250] [<808e55b4>] (should_fail_usercopy) from [<808eb61c>] (strncpy_from_user+0x20/0x194) [ 2955.307209][T20250] [<808eb5fc>] (strncpy_from_user) from [<80525108>] (getname_flags.part.0+0x44/0x18c) [ 2955.307719][T20250] r10:00000026 r9:86388c00 r8:8020029c r7:00000000 r6:8223783c r5:20000140 [ 2955.307927][T20250] r4:83533000 [ 2955.308033][T20250] [<805250c4>] (getname_flags.part.0) from [<8052a1a8>] (getname_flags+0x3c/0x50) [ 2955.308289][T20250] r9:86388c00 r8:8020029c r7:00000026 r6:00130e70 r5:00000000 r4:20000140 [ 2955.308487][T20250] [<8052a16c>] (getname_flags) from [<8052d294>] (sys_rename+0x2c/0x50) [ 2955.308704][T20250] r5:20000140 r4:83536000 [ 2955.308820][T20250] [<8052d268>] (sys_rename) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2955.309036][T20250] Exception stack(0xdf98dfa8 to 0xdf98dff0) [ 2955.309190][T20250] dfa0: 00000000 00000000 20000100 20000140 00000000 00000000 [ 2955.309494][T20250] dfc0: 00000000 00000000 00130e70 00000026 00000000 00006364 003d0f00 76b400bc [ 2955.309741][T20250] dfe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2955.309901][T20250] r5:00000000 r4:00000000 [ 2956.320519][T20260] FAULT_INJECTION: forcing a failure. [ 2956.320519][T20260] name failslab, interval 1, probability 0, space 0, times 0 [ 2956.321981][T20260] CPU: 0 UID: 0 PID: 20260 Comm: syz.0.3479 Not tainted 6.12.0-rc3-syzkaller #0 [ 2956.322712][T20260] Hardware name: ARM-Versatile Express [ 2956.322945][T20260] Call trace: [ 2956.323129][T20260] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2956.323462][T20260] r7:86388000 r6:00400cc0 r5:60000013 r4:8203d7bc [ 2956.323810][T20260] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2956.324329][T20260] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2956.324849][T20260] r5:00000000 r4:8271925c [ 2956.325062][T20260] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2956.325699][T20260] [<808e53c0>] (should_fail_ex) from [<804e8340>] (should_failslab+0x6c/0x94) [ 2956.326055][T20260] r6:00400cc0 r5:ffffffff r4:82ea5000 [ 2956.326260][T20260] [<804e82d4>] (should_failslab) from [<804ccd70>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2956.326599][T20260] [<804ccd20>] (kmem_cache_alloc_node_noprof) from [<814914f0>] (__alloc_skb+0x138/0x160) [ 2956.327714][T20260] r10:dfdf1df4 r9:00000000 r8:00400cc0 r7:00000000 r6:82ea5000 r5:ffffffff [ 2956.328445][T20260] r4:82606000 [ 2956.328759][T20260] [<814913b8>] (__alloc_skb) from [<814996c4>] (alloc_skb_with_frags+0x44/0x1ec) [ 2956.329213][T20260] r8:802a6e50 r7:dfdf1d94 r6:00000000 r5:00001000 r4:00000003 [ 2956.329614][T20260] [<81499680>] (alloc_skb_with_frags) from [<8148adc4>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2956.330382][T20260] r10:dfdf1df4 r9:00000000 r8:802a6e50 r7:dfdf1d94 r6:86388000 r5:7fffffff [ 2956.330790][T20260] r4:858b3300 [ 2956.331006][T20260] [<8148abd0>] (sock_alloc_send_pskb) from [<817487a4>] (unix_dgram_sendmsg+0x154/0x8b8) [ 2956.331763][T20260] r10:00000000 r9:858b3300 r8:86388000 r7:00000000 r6:00000000 r5:84d27900 [ 2956.332126][T20260] r4:dfdf1e68 [ 2956.332313][T20260] [<81748650>] (unix_dgram_sendmsg) from [<81483c88>] (__sock_sendmsg+0x44/0x78) [ 2956.332877][T20260] r10:81c4a340 r9:00000000 r8:00000000 r7:84d27900 r6:84d27900 r5:dfdf1e68 [ 2956.333316][T20260] r4:00000000 [ 2956.333583][T20260] [<81483c44>] (__sock_sendmsg) from [<81483d5c>] (sock_write_iter+0xa0/0xfc) [ 2956.333931][T20260] r7:84d27900 r6:86490840 r5:dfdf1f08 r4:dfdf1ef0 [ 2956.334205][T20260] [<81483cbc>] (sock_write_iter) from [<80516b28>] (vfs_write+0x3a8/0x44c) [ 2956.334594][T20260] r7:86388000 r6:00000000 r5:86490840 r4:00000000 [ 2956.334843][T20260] [<80516780>] (vfs_write) from [<80516d9c>] (ksys_write+0xc4/0xf8) [ 2956.335258][T20260] r10:00000004 r9:86388000 r8:8020029c r7:00000000 r6:00000000 r5:86490840 [ 2956.335680][T20260] r4:86490841 [ 2956.335884][T20260] [<80516cd8>] (ksys_write) from [<80516de0>] (sys_write+0x10/0x14) [ 2956.336235][T20260] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 2956.336485][T20260] [<80516dd0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2956.336947][T20260] Exception stack(0xdfdf1fa8 to 0xdfdf1ff0) [ 2956.337293][T20260] 1fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 2956.337559][T20260] 1fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76b400bc [ 2956.338023][T20260] 1fe0: 76b3fec0 76b3feb0 00018af8 00132ec0 [ 2956.931312][T20266] FAULT_INJECTION: forcing a failure. [ 2956.931312][T20266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.931977][T20266] CPU: 1 UID: 0 PID: 20266 Comm: syz.1.3483 Not tainted 6.12.0-rc3-syzkaller #0 [ 2956.932310][T20266] Hardware name: ARM-Versatile Express [ 2956.932539][T20266] Call trace: [ 2956.932743][T20266] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 2956.933106][T20266] r7:20000040 r6:dfe51e30 r5:60000013 r4:8203d7bc [ 2956.933358][T20266] [<81999854>] (show_stack) from [<819b7d24>] (dump_stack_lvl+0x70/0x7c) [ 2956.933691][T20266] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 2956.934051][T20266] r5:00000000 r4:8274e844 [ 2956.934407][T20266] [<819b7d30>] (dump_stack) from [<808e554c>] (should_fail_ex+0x18c/0x1dc) [ 2956.934997][T20266] [<808e53c0>] (should_fail_ex) from [<808e55b0>] (should_fail+0x14/0x18) [ 2956.935455][T20266] r6:dfe51e30 r5:00000000 r4:dfe51f38 [ 2956.935931][T20266] [<808e559c>] (should_fail) from [<808e55d0>] (should_fail_usercopy+0x1c/0x20) [ 2956.937437][T20266] [<808e55b4>] (should_fail_usercopy) from [<81486a78>] (copy_msghdr_from_user+0x50/0x130) [ 2956.940663][T20266] [<81486a28>] (copy_msghdr_from_user) from [<81486bd0>] (___sys_sendmsg+0x78/0xd0) [ 2956.941453][T20266] r8:00000000 r7:00000000 r6:84cab400 r5:dfe51f38 r4:dfe51e74 [ 2956.941836][T20266] [<81486b58>] (___sys_sendmsg) from [<8148710c>] (sys_sendmsg+0x78/0xbc) [ 2956.945873][T20266] r10:00000128 r9:8569c800 r8:8020029c r7:00000000 r6:20000040 r5:84cab400 [ 2956.946590][T20266] r4:00000000 [ 2956.947065][T20266] [<81487094>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2956.947883][T20266] Exception stack(0xdfe51fa8 to 0xdfe51ff0) [ 2956.948269][T20266] 1fa0: 00000000 00000000 00000003 20000040 00000000 00000000 [ 2956.948815][T20266] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b9d0bc [ 2956.949406][T20266] 1fe0: 76b9cec0 76b9ceb0 00018af8 00132ec0 [ 2956.950245][T20266] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2959.460744][T20282] serio: Serial port pts0 [ 2963.943292][T20317] sctp: [Deprecated]: syz.1.3498 (pid 20317) Use of int in max_burst socket option deprecated. [ 2963.943292][T20317] Use struct sctp_assoc_value instead [ 2970.078771][T20324] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2972.492019][ T31] audit: type=1326 audit(2972.320:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.492771][ T31] audit: type=1326 audit(2972.320:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.493202][ T31] audit: type=1326 audit(2972.320:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.493772][ T31] audit: type=1326 audit(2972.320:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.494404][ T31] audit: type=1326 audit(2972.320:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.495000][ T31] audit: type=1326 audit(2972.340:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=301 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.495566][ T31] audit: type=1326 audit(2972.340:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.496198][ T31] audit: type=1326 audit(2972.350:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.496816][ T31] audit: type=1326 audit(2972.350:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=294 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2972.532589][ T31] audit: type=1326 audit(2972.350:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20351 comm="syz.0.3507" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2973.573853][T19188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.703983][T19188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.769383][T19188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.910922][T19188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.426317][T19188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2974.492021][T19188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2974.589950][T19188] bond0 (unregistering): Released all slaves [ 2974.942695][T19188] hsr_slave_0: left promiscuous mode [ 2974.948742][T19188] hsr_slave_1: left promiscuous mode [ 2975.028253][T19188] veth1_macvtap: left promiscuous mode [ 2975.036096][T19188] veth0_macvtap: left promiscuous mode [ 2975.048057][T19188] veth1_vlan: left promiscuous mode [ 2975.048618][T19188] veth0_vlan: left promiscuous mode [ 2975.989100][T19188] batadv_slave_0 (unregistering): left allmulticast mode [ 2976.799829][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 2980.391196][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2980.419063][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2983.159582][T20377] hsr_slave_0: entered promiscuous mode [ 2983.162017][T20377] hsr_slave_1: entered promiscuous mode [ 2983.164123][T20377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2983.164345][T20377] Cannot create hsr debugfs directory [ 2984.073333][T20377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2984.111385][T20377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2984.183438][T20377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2984.196062][T20377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2986.113049][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2989.484398][T20377] veth0_vlan: entered promiscuous mode [ 2989.502065][T20377] veth1_vlan: entered promiscuous mode [ 2989.584879][T20377] veth0_macvtap: entered promiscuous mode [ 2989.604041][T20377] veth1_macvtap: entered promiscuous mode [ 2989.698664][T20377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2989.699318][T20377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2989.699714][T20377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2989.700311][T20377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2991.008756][ T4543] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2991.168364][ T4543] usb 1-1: Using ep0 maxpacket: 8 [ 2991.178499][ T4543] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2991.179198][ T4543] usb 1-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 2991.179654][ T4543] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 2991.179987][ T4543] usb 1-1: config 0 has no interface number 0 [ 2991.180236][ T4543] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2991.180593][ T4543] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2991.180889][ T4543] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2991.193101][ T4543] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2991.194170][ T4543] usb 1-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 2991.194804][ T4543] usb 1-1: Product: syz [ 2991.195057][ T4543] usb 1-1: Manufacturer: syz [ 2991.210360][ T4543] usb 1-1: config 0 descriptor?? [ 2991.220347][T20840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2991.889477][ T4543] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input29 [ 2992.093888][T20373] usb 1-1: USB disconnect, device number 46 [ 2992.094304][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2992.223679][T20863] loop2: detected capacity change from 0 to 7 [ 2992.588196][T20846] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2992.783997][T20846] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2992.784804][T20846] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2992.785265][T20846] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2992.785647][T20846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 2992.786094][T20846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 2992.822750][T20846] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2992.823323][T20846] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2992.823658][T20846] usb 1-1: Product: syz [ 2992.823856][T20846] usb 1-1: Manufacturer: syz [ 2992.832847][T20867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2992.838731][T20846] cdc_wdm 1-1:1.0: skipping garbage [ 2992.839127][T20846] cdc_wdm 1-1:1.0: skipping garbage [ 2992.844410][T20846] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2993.080665][T20846] usb 1-1: USB disconnect, device number 47 [ 2996.579340][T20898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3527'. [ 2999.075178][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3530'. [ 3002.599292][T11779] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 3002.765591][T11779] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 3002.766675][T11779] usb 1-1: config 0 has no interface number 0 [ 3002.770934][T11779] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3002.771531][T11779] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3002.771971][T11779] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3002.772428][T11779] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 3002.772846][T11779] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3002.773419][T11779] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3002.773823][T11779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3002.805697][T11779] usb 1-1: config 0 descriptor?? [ 3002.813225][T20926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3002.824913][T11779] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3003.121186][T20373] usb 1-1: USB disconnect, device number 48 [ 3003.136696][T20373] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 3004.102725][T20953] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3540'. [ 3004.629074][T20954] ------------[ cut here ]------------ [ 3004.629812][T20954] WARNING: CPU: 1 PID: 20954 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 3004.630405][T20954] Modules linked in: [ 3004.631398][T20954] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3004.632368][T20954] CPU: 1 UID: 0 PID: 20954 Comm: syz.0.3539 Not tainted 6.12.0-rc3-syzkaller #0 [ 3004.632917][T20954] Hardware name: ARM-Versatile Express [ 3004.633231][T20954] Call trace: [ 3004.633821][T20954] [<81999770>] (dump_backtrace) from [<8199986c>] (show_stack+0x18/0x1c) [ 3004.635010][T20954] r7:00000000 r6:82622f44 r5:00000000 r4:8203d7bc [ 3004.635671][T20954] [<81999854>] (show_stack) from [<819b7d08>] (dump_stack_lvl+0x54/0x7c) [ 3004.636147][T20954] [<819b7cb4>] (dump_stack_lvl) from [<819b7d48>] (dump_stack+0x18/0x1c) [ 3004.636549][T20954] r5:00000000 r4:82870d18 [ 3004.636829][T20954] [<819b7d30>] (dump_stack) from [<8199a398>] (panic+0x120/0x374) [ 3004.637354][T20954] [<8199a278>] (panic) from [<802420e0>] (get_taint+0x0/0x1c) [ 3004.637733][T20954] r3:8260c5c4 r2:00000001 r1:82025b9c r0:8202d604 [ 3004.638153][T20954] r7:8048c7d4 [ 3004.638510][T20954] [<8024206c>] (check_panic_on_warn) from [<80242244>] (__warn+0x80/0x188) [ 3004.638959][T20954] [<802421c4>] (__warn) from [<802424c4>] (warn_slowpath_fmt+0x178/0x1f4) [ 3004.639387][T20954] r8:00000009 r7:82055200 r6:df83dd24 r5:8569c800 r4:00000000 [ 3004.639693][T20954] [<80242350>] (warn_slowpath_fmt) from [<8048c7d4>] (kunmap_local_indexed+0x20c/0x224) [ 3004.640265][T20954] r10:ffedc0a8 r9:84981500 r8:20508000 r7:fffffffe r6:00000003 r5:8569c800 [ 3004.640614][T20954] r4:ffedc000 [ 3004.640812][T20954] [<8048c5c8>] (kunmap_local_indexed) from [<80505c00>] (move_pages+0x7e8/0x149c) [ 3004.641242][T20954] r7:fffffffe r6:00000000 r5:8551f810 r4:ffeda840 [ 3004.641535][T20954] [<80505418>] (move_pages) from [<80581e40>] (userfaultfd_ioctl+0x114c/0x2080) [ 3004.641997][T20954] r10:84981500 r9:df83de98 r8:00000001 r7:20c16000 r6:00000000 r5:20000080 [ 3004.642389][T20954] r4:8507b380 [ 3004.642636][T20954] [<80580cf4>] (userfaultfd_ioctl) from [<8052f80c>] (sys_ioctl+0x134/0xda8) [ 3004.643165][T20954] r10:8569c800 r9:85085780 r8:00000003 r7:20000080 r6:85085781 r5:00000000 [ 3004.643531][T20954] r4:c028aa05 [ 3004.643731][T20954] [<8052f6d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3004.644233][T20954] Exception stack(0xdf83dfa8 to 0xdf83dff0) [ 3004.644531][T20954] dfa0: 00000000 00000000 00000003 c028aa05 20000080 00000000 [ 3004.644906][T20954] dfc0: 00000000 00000000 002862f0 00000036 00000000 00006364 003d0f00 76bb50bc [ 3004.645364][T20954] dfe0: 76bb4ec0 76bb4eb0 00018af8 00132ec0 [ 3004.645636][T20954] r10:00000036 r9:8569c800 r8:8020029c r7:00000036 r6:002862f0 r5:00000000 [ 3004.646075][T20954] r4:00000000 [ 3004.648212][T20954] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:42:37 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00257fe8 R02=00000001 R03=00257000 R04=00000000 R05=00000000 R06=7ea7ea88 R07=00000006 R08=00000000 R09=7ea7eac8 R10=00000000 R11=00000061 R12=7ea7e428 R13=dffb5ff8 R14=001313b0 R15=001313b0 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=83ee0040 R01=00000020 R02=eb135000 R03=eb135018 R04=82873433 R05=83ee0040 R06=809e8874 R07=82873463 R08=8287341c R09=00000048 R10=00000001 R11=df83d9d8 R12=00000002 R13=df83d9cc R14=827584a4 R15=809e8884 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000