last executing test programs: 11.950273947s ago: executing program 1 (id=2941): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x486, 0x185, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xab, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x8dee, 0x0, 0x1, {0x22, 0x2e4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x4, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x44, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x1, 0xc, 0x4, 0xef, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x4000}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x2]}) 11.260109566s ago: executing program 1 (id=2942): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0x5, 0x10, 0x0, @void, @value}, 0x20) 11.259849936s ago: executing program 1 (id=2943): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 11.180506531s ago: executing program 1 (id=2944): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.483949698s ago: executing program 0 (id=2945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0xf5, @private1, 0x6}}, 0x0, 0x0, 0x22, 0x0, "99b2d53ed1a3d9ea74c873760672322d2f73eed6887b06c6b484fa117ee927b23ebe86dc99d2092836b26f05e32ff376e73601ace393be52eb53ad772f39c426e6772ec104d999a53e3ee0ec9ac07acf"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, 0x0, 0x0, 0x35, 0x0, "4e7f8324eeec7ff3d3137a508003d2c5c89ab0220cefebd4687636457b9822769c0e36bfdfac577a6a4caeaf4899623d972400"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2.420271842s ago: executing program 0 (id=2946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x5410, &(0x7f0000000440)) 2.409855412s ago: executing program 0 (id=2947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000006c0)={0x142000000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000a40)="82"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 727.321399ms ago: executing program 0 (id=2948): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x80000000000c, 0x100000003, 0x8000000005}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 666.905292ms ago: executing program 0 (id=2949): socket$inet6(0xa, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 359.425119ms ago: executing program 1 (id=2950): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "65c2e8282ec975aa26d67a0c"}}}}}}, 0x0) 289.505163ms ago: executing program 1 (id=2951): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 0s ago: executing program 0 (id=2952): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe94, 0x2f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8814) socket$unix(0x1, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) listen(r1, 0x2000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2953): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x40800) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x9, 0x1000, 0xc7}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00abfe0000001701f5"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): hsr_slave_1: left promiscuous mode [ 1071.167215][ T7175] veth1_macvtap: left promiscuous mode [ 1071.167774][ T7175] veth0_macvtap: left promiscuous mode [ 1071.168394][ T7175] veth1_vlan: left promiscuous mode [ 1071.169662][ T7175] veth0_vlan: left promiscuous mode [ 1071.258249][T11764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65498 sclass=netlink_audit_socket pid=11764 comm=syz.0.2232 [ 1072.122824][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.126576][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.615762][T11714] hsr_slave_0: entered promiscuous mode [ 1072.616930][T11714] hsr_slave_1: entered promiscuous mode [ 1073.053374][T11714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.063979][T11714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.074645][T11714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.081258][T11714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.641979][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.995890][T11714] veth0_vlan: entered promiscuous mode [ 1075.005443][T11714] veth1_vlan: entered promiscuous mode [ 1075.047085][T11714] veth0_macvtap: entered promiscuous mode [ 1075.053276][T11714] veth1_macvtap: entered promiscuous mode [ 1075.080135][T11714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.080973][T11714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.082561][T11714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.083688][T11714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.729578][T12167] FAULT_INJECTION: forcing a failure. [ 1075.729578][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.729892][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.1.2230 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1075.729929][T12167] Hardware name: ARM-Versatile Express [ 1075.729944][T12167] Call trace: [ 1075.729968][T12167] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1075.730042][T12167] r7:00000077 r6:00000000 r5:60000013 r4:82257d54 [ 1075.730116][T12167] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1075.730158][T12167] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1075.730192][T12167] r5:84090000 r4:82951710 [ 1075.730201][T12167] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1075.730243][T12167] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1075.730304][T12167] r8:00000000 r7:00000077 r6:76b66bb8 r5:00000000 r4:eada1fb0 [ 1075.730339][T12167] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1075.730370][T12167] [<8095f754>] (should_fail_usercopy) from [<8022b364>] (restore_sigframe+0x4c/0x210) [ 1075.730404][T12167] [<8022b318>] (restore_sigframe) from [<8022b72c>] (sys_sigreturn+0x40/0x60) [ 1075.730434][T12167] r7:00000077 r6:0012fee0 r5:00000000 r4:eada1fb0 [ 1075.730442][T12167] [<8022b6ec>] (sys_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1075.730467][T12167] Exception stack(0xeada1fa8 to 0xeada1ff0) [ 1075.730488][T12167] 1fa0: 00000000 00000000 00000011 00000000 00000000 00000012 [ 1075.730532][T12167] 1fc0: 00000000 00000000 0012fee0 00000077 002d0000 00000000 00006364 76b670bc [ 1075.730549][T12167] 1fe0: 76b66ec0 76b66bb8 000ef160 000ef168 [ 1075.730561][T12167] r5:00000000 r4:00000000 [ 1076.438044][ T31] audit: type=1400 audit(1076.370:349): avc: denied { create } for pid=12193 comm="syz.1.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1076.860286][ T31] audit: type=1400 audit(1076.790:350): avc: denied { lock } for pid=12200 comm="syz.0.2247" path="socket:[24997]" dev="sockfs" ino=24997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1076.929559][T12204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39623 sclass=netlink_route_socket pid=12204 comm=syz.1.2248 [ 1077.445989][T12225] capability: warning: `syz.1.2256' uses deprecated v2 capabilities in a way that may be insecure [ 1085.637936][T12249] FAULT_INJECTION: forcing a failure. [ 1085.637936][T12249] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1085.640860][T12249] CPU: 1 UID: 0 PID: 12249 Comm: syz.1.2262 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1085.640954][T12249] Hardware name: ARM-Versatile Express [ 1085.640982][T12249] Call trace: [ 1085.641047][T12249] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1085.641162][T12249] r7:00000010 r6:00000000 r5:60000013 r4:82257d54 [ 1085.641184][T12249] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1085.641240][T12249] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1085.641302][T12249] r5:84090000 r4:828fba58 [ 1085.641324][T12249] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1085.641385][T12249] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1085.641501][T12249] r8:84106100 r7:00000010 r6:eafcddd8 r5:00000000 r4:76b46000 [ 1085.641523][T12249] [<8095f73c>] (should_fail) from [<8034f688>] (get_futex_key+0x190/0x4d8) [ 1085.641587][T12249] [<8034f4f8>] (get_futex_key) from [<80353730>] (futex_wake+0x5c/0x1ac) [ 1085.641658][T12249] r10:83d7af40 r9:00000001 r8:eafcde90 r7:eafcddd0 r6:00000001 r5:ffffffff [ 1085.641680][T12249] r4:00000012 [ 1085.641698][T12249] [<803536d4>] (futex_wake) from [<80350588>] (do_futex+0x100/0x1b4) [ 1085.641773][T12249] r10:83d7af40 r9:00000001 r8:eafcde90 r7:83d7af40 r6:00000000 r5:b5403587 [ 1085.641797][T12249] r4:00000001 [ 1085.641814][T12249] [<80350488>] (do_futex) from [<8025cb50>] (mm_release+0xc4/0xc8) [ 1085.641876][T12249] r4:84090000 [ 1085.641897][T12249] [<8025ca8c>] (mm_release) from [<8025e4ec>] (exit_mm_release+0x24/0x28) [ 1085.641954][T12249] r5:84106100 r4:84090000 [ 1085.641974][T12249] [<8025e4c8>] (exit_mm_release) from [<80268748>] (do_exit+0x238/0xaa0) [ 1085.642030][T12249] r5:84106100 r4:84090000 [ 1085.642048][T12249] [<80268510>] (do_exit) from [<80269170>] (do_group_exit+0x40/0x8c) [ 1085.642102][T12249] r7:00131f30 [ 1085.642127][T12249] [<80269130>] (do_group_exit) from [<80279b78>] (get_signal+0xa14/0xa38) [ 1085.642191][T12249] r7:00131f30 r4:84090000 [ 1085.642211][T12249] [<80279164>] (get_signal) from [<8022ba08>] (do_work_pending+0x248/0x4f8) [ 1085.642283][T12249] r10:00000128 r9:fffffe00 r8:00131f2c r7:00131f30 r6:00000001 r5:eafcdfb0 [ 1085.642306][T12249] r4:84090000 [ 1085.642324][T12249] [<8022b7c0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1085.642376][T12249] Exception stack(0xeafcdfb0 to 0xeafcdff8) [ 1085.642412][T12249] dfa0: 00000003 200001c0 00000000 00000000 [ 1085.642449][T12249] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b460bc [ 1085.642481][T12249] dfe0: 76b45ec0 76b45eb0 0001939c 00131f2c 60000010 00000003 [ 1085.642517][T12249] r10:00000128 r9:84090000 r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 [ 1085.642538][T12249] r4:00000000 [ 1089.592415][T12289] FAULT_INJECTION: forcing a failure. [ 1089.592415][T12289] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.593984][T12289] CPU: 1 UID: 0 PID: 12289 Comm: syz.0.2272 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1089.594084][T12289] Hardware name: ARM-Versatile Express [ 1089.594113][T12289] Call trace: [ 1089.594157][T12289] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1089.594262][T12289] r7:00000d40 r6:00000000 r5:60000013 r4:82257d54 [ 1089.594285][T12289] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1089.594343][T12289] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1089.594401][T12289] r5:83b03c00 r4:8291bcc0 [ 1089.594420][T12289] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1089.594480][T12289] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1089.594553][T12289] r8:83b03c00 r7:00000d40 r6:85ca4f28 r5:00000019 r4:83001240 [ 1089.594575][T12289] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1089.594633][T12289] [<8050a41c>] (__kmalloc_noprof) from [<807bc26c>] (tomoyo_encode2+0x64/0xf0) [ 1089.594712][T12289] r10:00000fff r9:83351000 r8:00000000 r7:834b4b28 r6:85ca4f28 r5:83af1ffd [ 1089.594738][T12289] r4:83af1fef [ 1089.594758][T12289] [<807bc208>] (tomoyo_encode2) from [<807bc31c>] (tomoyo_encode+0x24/0x30) [ 1089.594828][T12289] r9:83351000 r8:00000000 r7:834b4b28 r6:85ca4f28 r5:00001000 r4:83af1ff0 [ 1089.594846][T12289] [<807bc2f8>] (tomoyo_encode) from [<807bc3a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1089.594919][T12289] r5:00001000 r4:83af1000 [ 1089.594940][T12289] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1089.595019][T12289] r10:83b03c00 r9:00000000 r8:85ca4f00 r7:00008918 r6:00000004 r5:81cd56c4 [ 1089.595046][T12289] r4:85ca4f28 r3:826c0240 [ 1089.595064][T12289] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1089.595135][T12289] r9:00000003 r8:85ca4f00 r7:20000040 r6:20000040 r5:00008918 r4:85ca4f00 [ 1089.595158][T12289] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1089.595221][T12289] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1089.595286][T12289] r7:20000040 r6:85ca4f01 r5:00000000 r4:00008918 [ 1089.595307][T12289] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1089.595357][T12289] Exception stack(0xeb75dfa8 to 0xeb75dff0) [ 1089.595396][T12289] dfa0: 00000000 00000000 00000003 00008918 20000040 00000000 [ 1089.595432][T12289] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b780bc [ 1089.595461][T12289] dfe0: 76b77ec0 76b77eb0 0001939c 00131f30 [ 1089.595496][T12289] r10:00000036 r9:83b03c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1089.595519][T12289] r4:00000000 [ 1089.614894][T12289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1092.931438][ T31] audit: type=1400 audit(1092.870:351): avc: denied { ioctl } for pid=12305 comm="syz.0.2282" path="socket:[25255]" dev="sockfs" ino=25255 ioctlcmd=0x4d65 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1093.492159][T12315] FAULT_INJECTION: forcing a failure. [ 1093.492159][T12315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.493053][T12315] CPU: 1 UID: 0 PID: 12315 Comm: syz.0.2285 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1093.493114][T12315] Hardware name: ARM-Versatile Express [ 1093.493128][T12315] Call trace: [ 1093.493148][T12315] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1093.493201][T12315] r7:eb151e20 r6:00000000 r5:60000013 r4:82257d54 [ 1093.493210][T12315] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1093.493235][T12315] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1093.493261][T12315] r5:83b05400 r4:82951710 [ 1093.493269][T12315] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1093.493295][T12315] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1093.493324][T12315] r8:0000c080 r7:eb151e20 r6:20000340 r5:00000000 r4:eb151f20 [ 1093.493333][T12315] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1093.493356][T12315] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1093.493383][T12315] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1093.493412][T12315] r8:0000c080 r7:00000000 r6:848f5900 r5:eb151f20 r4:eb151e64 [ 1093.493420][T12315] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1093.493449][T12315] r10:00000128 r9:83b05400 r8:85ca4840 r7:0000c080 r6:20000340 r5:85ca4841 [ 1093.493459][T12315] r4:00000003 [ 1093.493466][T12315] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1093.493494][T12315] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1093.493502][T12315] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1093.493524][T12315] Exception stack(0xeb151fa8 to 0xeb151ff0) [ 1093.493543][T12315] 1fa0: 00000000 00000000 00000003 20000340 0000c080 00000000 [ 1093.493559][T12315] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bdb0bc [ 1093.493571][T12315] 1fe0: 76bdaec0 76bdaeb0 0001939c 00131f30 [ 1096.302117][T12326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1024 sclass=netlink_tcpdiag_socket pid=12326 comm=syz.0.2289 [ 1099.041605][T12338] FAULT_INJECTION: forcing a failure. [ 1099.041605][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.042528][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.1.2293 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1099.042588][T12338] Hardware name: ARM-Versatile Express [ 1099.042603][T12338] Call trace: [ 1099.042740][T12338] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1099.042803][T12338] r7:00000d40 r6:00000000 r5:60000013 r4:82257d54 [ 1099.042813][T12338] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1099.042856][T12338] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1099.042884][T12338] r5:83ae0000 r4:8291bcc0 [ 1099.042891][T12338] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1099.042919][T12338] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1099.042953][T12338] r8:83ae0000 r7:00000d40 r6:85a99da8 r5:00000019 r4:83001240 [ 1099.042961][T12338] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1099.043022][T12338] [<8050a41c>] (__kmalloc_noprof) from [<807bc26c>] (tomoyo_encode2+0x64/0xf0) [ 1099.043061][T12338] r10:00000fff r9:83351000 r8:00000000 r7:8480ca18 r6:85a99da8 r5:83af4ffd [ 1099.043071][T12338] r4:83af4fef [ 1099.043078][T12338] [<807bc208>] (tomoyo_encode2) from [<807bc31c>] (tomoyo_encode+0x24/0x30) [ 1099.043109][T12338] r9:83351000 r8:00000000 r7:8480ca18 r6:85a99da8 r5:00001000 r4:83af4ff0 [ 1099.043117][T12338] [<807bc2f8>] (tomoyo_encode) from [<807bc3a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1099.043145][T12338] r5:00001000 r4:83af4000 [ 1099.043152][T12338] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1099.043185][T12338] r10:83ae0000 r9:00000000 r8:85a99d80 r7:c0186404 r6:00000004 r5:81cd56c4 [ 1099.043195][T12338] r4:85a99da8 r3:826c0240 [ 1099.043202][T12338] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1099.043234][T12338] r9:00000004 r8:85a99d80 r7:00000000 r6:00000000 r5:c0186404 r4:85a99d80 [ 1099.043243][T12338] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1099.043271][T12338] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1099.043300][T12338] r7:00000000 r6:85a99d81 r5:00000000 r4:c0186404 [ 1099.043327][T12338] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1099.043350][T12338] Exception stack(0xdf9d5fa8 to 0xdf9d5ff0) [ 1099.043368][T12338] 5fa0: 00000000 00000000 00000004 c0186404 00000000 00000000 [ 1099.043385][T12338] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b250bc [ 1099.043397][T12338] 5fe0: 76b24ec0 76b24eb0 0001939c 00131f30 [ 1099.043413][T12338] r10:00000036 r9:83ae0000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1099.043422][T12338] r4:00000000 [ 1099.043908][T12338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1103.342894][T12351] sctp: [Deprecated]: syz.1.2296 (pid 12351) Use of int in max_burst socket option. [ 1103.342894][T12351] Use struct sctp_assoc_value instead [ 1104.050158][T10398] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 1104.179529][T10398] usb 1-1: device descriptor read/64, error -71 [ 1104.419171][T10398] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 1104.549595][T10398] usb 1-1: device descriptor read/64, error -71 [ 1104.660251][T10398] usb usb1-port1: attempt power cycle [ 1104.999417][T10398] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 1105.021948][T10398] usb 1-1: device descriptor read/8, error -71 [ 1105.271037][T10398] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1105.292719][T10398] usb 1-1: device descriptor read/8, error -71 [ 1105.400093][T10398] usb usb1-port1: unable to enumerate USB device [ 1108.957249][ T31] audit: type=1400 audit(1108.890:352): avc: denied { map } for pid=12373 comm="syz.1.2302" path="socket:[25356]" dev="sockfs" ino=25356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1111.594211][T12389] FAULT_INJECTION: forcing a failure. [ 1111.594211][T12389] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.594638][T12389] CPU: 1 UID: 0 PID: 12389 Comm: syz.1.2307 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1111.594732][T12389] Hardware name: ARM-Versatile Express [ 1111.594759][T12389] Call trace: [ 1111.594798][T12389] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1111.594901][T12389] r7:84232400 r6:00000000 r5:60000013 r4:82257d54 [ 1111.594922][T12389] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1111.595028][T12389] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1111.595093][T12389] r5:84232400 r4:8291bcc0 [ 1111.595111][T12389] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1111.595166][T12389] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1111.595231][T12389] r8:00000000 r7:84232400 r6:00400cc0 r5:ffffffff r4:832c7240 [ 1111.595246][T12389] [<80525658>] (should_failslab) from [<80509ac8>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1111.595314][T12389] [<80509a78>] (kmem_cache_alloc_node_noprof) from [<815270b8>] (__alloc_skb+0x138/0x160) [ 1111.595387][T12389] r10:dfb91d1c r9:00000000 r8:00400cc0 r7:00000000 r6:832c7240 r5:ffffffff [ 1111.595409][T12389] r4:82806040 [ 1111.595426][T12389] [<81526f80>] (__alloc_skb) from [<8152f4c0>] (alloc_skb_with_frags+0x44/0x1ec) [ 1111.595496][T12389] r8:802ce320 r7:dfb91cbc r6:00000000 r5:00001000 r4:00000003 [ 1111.595541][T12389] [<8152f47c>] (alloc_skb_with_frags) from [<8151feac>] (sock_alloc_send_pskb+0x1f4/0x228) [ 1111.595626][T12389] r10:dfb91d1c r9:00000000 r8:802ce320 r7:dfb91cbc r6:84232400 r5:7fffffff [ 1111.595649][T12389] r4:84ca1e00 [ 1111.595706][T12389] [<8151fcb8>] (sock_alloc_send_pskb) from [<817f0cbc>] (unix_dgram_sendmsg+0x134/0x774) [ 1111.595801][T12389] r10:00000000 r9:84232400 r8:84ca1e00 r7:00000000 r6:00000000 r5:837dfb80 [ 1111.595824][T12389] r4:dfb91f20 [ 1111.595846][T12389] [<817f0b88>] (unix_dgram_sendmsg) from [<817f1340>] (unix_seqpacket_sendmsg+0x44/0x84) [ 1111.596023][T12389] r10:00000000 r9:dfb91dc4 r8:dfb91dc4 r7:00000000 r6:837dfb80 r5:dfb91f20 [ 1111.596109][T12389] r4:00000000 [ 1111.596162][T12389] [<817f12fc>] (unix_seqpacket_sendmsg) from [<81519d7c>] (__sock_sendmsg+0x44/0x78) [ 1111.596367][T12389] r5:dfb91f20 r4:00000000 [ 1111.596415][T12389] [<81519d38>] (__sock_sendmsg) from [<8151a5ec>] (____sys_sendmsg+0x298/0x2cc) [ 1111.596478][T12389] r7:00000000 r6:837dfb80 r5:20004800 r4:dfb91f20 [ 1111.596495][T12389] [<8151a354>] (____sys_sendmsg) from [<8151c38c>] (___sys_sendmsg+0x9c/0xd0) [ 1111.596578][T12389] r10:dfb91e24 r9:20000180 r8:20004800 r7:00000000 r6:837dfb80 r5:dfb91f20 [ 1111.596597][T12389] r4:00000000 [ 1111.596612][T12389] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1111.596671][T12389] r10:00000128 r9:84232400 r8:85a99e40 r7:20004800 r6:20000180 r5:85a99e41 [ 1111.596689][T12389] r4:00000003 [ 1111.596703][T12389] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1111.596757][T12389] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1111.596773][T12389] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1111.596817][T12389] Exception stack(0xdfb91fa8 to 0xdfb91ff0) [ 1111.596862][T12389] 1fa0: 00000000 00000000 00000003 20000180 20004800 00000000 [ 1111.596945][T12389] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1111.596979][T12389] 1fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1112.337134][T12398] FAULT_INJECTION: forcing a failure. [ 1112.337134][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.338054][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.1.2310 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1112.338121][T12398] Hardware name: ARM-Versatile Express [ 1112.338134][T12398] Call trace: [ 1112.338155][T12398] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1112.338212][T12398] r7:84092400 r6:00000000 r5:60000013 r4:82257d54 [ 1112.338221][T12398] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1112.338247][T12398] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1112.338274][T12398] r5:84092400 r4:8291bcc0 [ 1112.338282][T12398] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1112.338309][T12398] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1112.338343][T12398] r8:00000000 r7:84092400 r6:00000920 r5:0000001c r4:83001240 [ 1112.338352][T12398] [<80525658>] (should_failslab) from [<805094e8>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1112.338378][T12398] [<8050949c>] (__kmalloc_cache_noprof) from [<8190c0d0>] (sctp_add_bind_addr+0x50/0xf4) [ 1112.338413][T12398] r10:85430f30 r9:829ea7d0 r8:dfb91dc0 r7:00000001 r6:85430f30 r5:0000001c [ 1112.338423][T12398] r4:84501900 [ 1112.338430][T12398] [<8190c080>] (sctp_add_bind_addr) from [<81915944>] (sctp_do_bind+0xd4/0x240) [ 1112.338462][T12398] r9:829ea7d0 r8:85430f00 r7:00000000 r6:00000000 r5:dfb91dc0 r4:84501900 [ 1112.338470][T12398] [<81915870>] (sctp_do_bind) from [<81916340>] (sctp_connect_new_asoc+0x19c/0x1e0) [ 1112.338504][T12398] r10:00000000 r9:84501900 r8:dfb91e24 r7:84fa3680 r6:00000000 r5:829ea7d0 [ 1112.338513][T12398] r4:85430f00 [ 1112.338521][T12398] [<819161a4>] (sctp_connect_new_asoc) from [<819164c8>] (__sctp_connect+0x144/0x334) [ 1112.338554][T12398] r9:85430f00 r8:829e9db8 r7:00000000 r6:00000010 r5:84fa3680 r4:84501900 [ 1112.338562][T12398] [<81916384>] (__sctp_connect) from [<819167f8>] (__sctp_setsockopt_connectx+0x70/0xb4) [ 1112.338596][T12398] r10:00000000 r9:00000010 r8:84092400 r7:00000000 r6:84fa3680 r5:84501900 [ 1112.338605][T12398] r4:00000010 [ 1112.338612][T12398] [<81916788>] (__sctp_setsockopt_connectx) from [<81917124>] (sctp_setsockopt+0x74c/0x2694) [ 1112.338644][T12398] r7:00000010 r6:84fa3680 r5:0000006b r4:84501900 [ 1112.338652][T12398] [<819169dc>] (sctp_setsockopt) from [<8151d1c8>] (sock_common_setsockopt+0x38/0x40) [ 1112.338769][T12398] r10:00000126 r9:84092400 r8:00000000 r7:85535180 r6:8349b680 r5:00000000 [ 1112.338796][T12398] r4:819169d8 [ 1112.338807][T12398] [<8151d194>] (sock_common_setsockopt) from [<815189c0>] (do_sock_setsockopt+0xb0/0x17c) [ 1112.338853][T12398] r4:8151d190 [ 1112.338878][T12398] [<81518910>] (do_sock_setsockopt) from [<8151be7c>] (__sys_setsockopt+0x7c/0xb4) [ 1112.338905][T12398] r6:85535181 r5:0000006b r4:00000084 [ 1112.338914][T12398] [<8151be00>] (__sys_setsockopt) from [<8151bed0>] (sys_setsockopt+0x1c/0x24) [ 1112.338943][T12398] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:00000010 [ 1112.338950][T12398] [<8151beb4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1112.338974][T12398] Exception stack(0xdfb91fa8 to 0xdfb91ff0) [ 1112.338993][T12398] 1fa0: 00000010 00000000 00000003 00000084 0000006b 20000000 [ 1112.339037][T12398] 1fc0: 00000010 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b670bc [ 1112.339051][T12398] 1fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1114.024233][T12418] FAULT_INJECTION: forcing a failure. [ 1114.024233][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.025122][T12418] CPU: 0 UID: 0 PID: 12418 Comm: syz.0.2318 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1114.025181][T12418] Hardware name: ARM-Versatile Express [ 1114.025195][T12418] Call trace: [ 1114.025215][T12418] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1114.025269][T12418] r7:839c0000 r6:00000000 r5:60000013 r4:82257d54 [ 1114.025278][T12418] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1114.025308][T12418] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1114.025336][T12418] r5:84096000 r4:82951710 [ 1114.025343][T12418] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1114.025372][T12418] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1114.025402][T12418] r8:81d35d60 r7:839c0000 r6:c01064b5 r5:00000000 r4:00000010 [ 1114.025410][T12418] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1114.025434][T12418] [<8095f754>] (should_fail_usercopy) from [<80ab79e8>] (drm_ioctl+0x270/0x5b0) [ 1114.025460][T12418] [<80ab7778>] (drm_ioctl) from [<8056b450>] (sys_ioctl+0x138/0xd84) [ 1114.025493][T12418] r10:84096000 r9:00000003 r8:85535a80 r7:20000040 r6:85535a81 r5:00000000 [ 1114.025503][T12418] r4:c01064b5 [ 1114.025510][T12418] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1114.025531][T12418] Exception stack(0xeb99dfa8 to 0xeb99dff0) [ 1114.025549][T12418] dfa0: 00000000 00000000 00000003 c01064b5 20000040 00000000 [ 1114.025565][T12418] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bfc0bc [ 1114.025577][T12418] dfe0: 76bfbec0 76bfbeb0 0001939c 00131f30 [ 1114.025594][T12418] r10:00000036 r9:84096000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1114.025604][T12418] r4:00000000 [ 1114.497774][ T31] audit: type=1400 audit(1114.430:353): avc: denied { write } for pid=12438 comm="syz.0.2325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1115.243882][T12447] FAULT_INJECTION: forcing a failure. [ 1115.243882][T12447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.246861][T12447] CPU: 0 UID: 0 PID: 12447 Comm: syz.0.2329 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1115.246941][T12447] Hardware name: ARM-Versatile Express [ 1115.246968][T12447] Call trace: [ 1115.247007][T12447] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1115.247114][T12447] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1115.247134][T12447] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1115.247188][T12447] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1115.247243][T12447] r5:841a3000 r4:82951710 [ 1115.247259][T12447] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1115.247311][T12447] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1115.247369][T12447] r8:76bfbf30 r7:00000000 r6:00000000 r5:df9cdf68 r4:00000002 [ 1115.247387][T12447] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1115.247435][T12447] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1115.247486][T12447] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1115.247551][T12447] r10:00000001 r9:806041f0 r8:00000002 r7:df9cdf68 r6:0000000f r5:76bfbf30 [ 1115.247575][T12447] r4:841a3000 r3:df9cde9f [ 1115.247591][T12447] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1115.247650][T12447] r8:76bfbf30 r7:df9cdf68 r6:841a3000 r5:0000000f r4:85535000 [ 1115.247667][T12447] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1115.247726][T12447] r10:00000003 r9:841a3000 r8:8020029c r7:00000000 r6:00000000 r5:85535000 [ 1115.247746][T12447] r4:85535003 [ 1115.247763][T12447] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1115.247822][T12447] r7:00000003 r6:00000004 r5:76bfbf30 r4:0000000f [ 1115.247840][T12447] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1115.247885][T12447] Exception stack(0xdf9cdfa8 to 0xdf9cdff0) [ 1115.247920][T12447] dfa0: 0000000f 76bfbf30 00000004 76bfbf30 0000000f 00000000 [ 1115.247953][T12447] dfc0: 0000000f 76bfbf30 00000004 00000003 002d0000 00000000 00006364 76bfc0bc [ 1115.247979][T12447] dfe0: 00000158 76bfbed0 000d7d68 0012fe04 [ 1115.886916][T12455] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 1115.894755][ T31] audit: type=1400 audit(1115.830:354): avc: denied { relabelto } for pid=12454 comm="syz.1.2331" name="timer" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 1115.895386][ T31] audit: type=1400 audit(1115.830:355): avc: denied { associate } for pid=12454 comm="syz.1.2331" name="timer" dev="devtmpfs" ino=710 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:textrel_shlib_t:s0" [ 1118.573754][T12467] 8021q: VLANs not supported on ip6_vti0 [ 1121.335624][T12481] FAULT_INJECTION: forcing a failure. [ 1121.335624][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.336034][T12481] CPU: 0 UID: 0 PID: 12481 Comm: syz.1.2340 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1121.336102][T12481] Hardware name: ARM-Versatile Express [ 1121.336126][T12481] Call trace: [ 1121.336215][T12481] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1121.336317][T12481] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1121.336337][T12481] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1121.336391][T12481] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1121.336447][T12481] r5:85cee000 r4:82951710 [ 1121.336465][T12481] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1121.336501][T12481] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1121.336551][T12481] r8:76b66f30 r7:00000000 r6:00000000 r5:dff4df68 r4:00000002 [ 1121.336589][T12481] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1121.336642][T12481] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1121.336729][T12481] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1121.336794][T12481] r10:00000001 r9:806041f0 r8:00000002 r7:dff4df68 r6:0000000f r5:76b66f30 [ 1121.336808][T12481] r4:85cee000 r3:dff4de9f [ 1121.336815][T12481] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1121.336850][T12481] r8:76b66f30 r7:dff4df68 r6:85cee000 r5:0000000f r4:855353c0 [ 1121.336886][T12481] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1121.336948][T12481] r10:00000003 r9:85cee000 r8:8020029c r7:00000000 r6:00000000 r5:855353c0 [ 1121.336959][T12481] r4:855353c3 [ 1121.337024][T12481] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1121.337066][T12481] r7:00000003 r6:00000004 r5:76b66f30 r4:0000000f [ 1121.337074][T12481] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1121.337104][T12481] Exception stack(0xdff4dfa8 to 0xdff4dff0) [ 1121.337133][T12481] dfa0: 0000000f 76b66f30 00000004 76b66f30 0000000f 00000000 [ 1121.337150][T12481] dfc0: 0000000f 76b66f30 00000004 00000003 002d0000 00000000 00006364 76b670bc [ 1121.337163][T12481] dfe0: 00000158 76b66ed0 000d7d68 0012fe04 [ 1121.461754][T12491] FAULT_INJECTION: forcing a failure. [ 1121.461754][T12491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.462808][T12491] CPU: 1 UID: 0 PID: 12491 Comm: syz.1.2344 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1121.462886][T12491] Hardware name: ARM-Versatile Express [ 1121.462899][T12491] Call trace: [ 1121.462920][T12491] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1121.462975][T12491] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1121.462985][T12491] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1121.463012][T12491] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1121.463039][T12491] r5:85cea400 r4:82951710 [ 1121.463047][T12491] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1121.463076][T12491] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1121.463115][T12491] r8:76b66f30 r7:00000000 r6:00000000 r5:df9cdf68 r4:00000002 [ 1121.463133][T12491] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1121.463181][T12491] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1121.463213][T12491] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1121.463247][T12491] r10:00000001 r9:806041f0 r8:00000002 r7:df9cdf68 r6:0000000f r5:76b66f30 [ 1121.463258][T12491] r4:85cea400 r3:df9cde9f [ 1121.463266][T12491] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1121.463297][T12491] r8:76b66f30 r7:df9cdf68 r6:85cea400 r5:0000000f r4:855ca0c0 [ 1121.463305][T12491] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1121.463335][T12491] r10:00000003 r9:85cea400 r8:8020029c r7:00000000 r6:00000000 r5:855ca0c0 [ 1121.463344][T12491] r4:855ca0c3 [ 1121.463351][T12491] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1121.463379][T12491] r7:00000003 r6:00000005 r5:76b66f30 r4:0000000f [ 1121.463386][T12491] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1121.463409][T12491] Exception stack(0xdf9cdfa8 to 0xdf9cdff0) [ 1121.463426][T12491] dfa0: 0000000f 76b66f30 00000005 76b66f30 0000000f 00000000 [ 1121.463443][T12491] dfc0: 0000000f 76b66f30 00000005 00000003 002d0000 00000000 00006364 76b670bc [ 1121.463455][T12491] dfe0: 00000158 76b66ed0 000d7d68 0012fe04 [ 1124.333635][T12511] FAULT_INJECTION: forcing a failure. [ 1124.333635][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.335091][T12511] CPU: 1 UID: 0 PID: 12511 Comm: syz.1.2351 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1124.335151][T12511] Hardware name: ARM-Versatile Express [ 1124.335164][T12511] Call trace: [ 1124.335184][T12511] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1124.335238][T12511] r7:85cec800 r6:00000000 r5:60000013 r4:82257d54 [ 1124.335247][T12511] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1124.335278][T12511] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1124.335305][T12511] r5:85cec800 r4:8291bcc0 [ 1124.335312][T12511] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1124.335341][T12511] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1124.335374][T12511] r8:00000000 r7:85cec800 r6:00000c40 r5:ffffffff r4:832c7240 [ 1124.335383][T12511] [<80525658>] (should_failslab) from [<80509ac8>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1124.335408][T12511] [<80509a78>] (kmem_cache_alloc_node_noprof) from [<815270b8>] (__alloc_skb+0x138/0x160) [ 1124.335442][T12511] r10:8526fe4c r9:85cec800 r8:00000c40 r7:00000000 r6:832c7240 r5:ffffffff [ 1124.335452][T12511] r4:82806040 [ 1124.335459][T12511] [<81526f80>] (__alloc_skb) from [<805fc6ec>] (quota_send_warning+0x44/0x284) [ 1124.335488][T12511] r8:e04f5c50 r7:8526fe4c r6:e04f5cac r5:0000002a r4:ffffff86 [ 1124.335496][T12511] [<805fc6a8>] (quota_send_warning) from [<805f6804>] (dquot_alloc_inode+0x178/0x244) [ 1124.335528][T12511] r10:8526fe4c r9:e04f5cac r8:8526fe4c r7:8526fe4c r6:e04f5cac r5:e04f5cdc [ 1124.335537][T12511] r4:ffffff86 [ 1124.335544][T12511] [<805f668c>] (dquot_alloc_inode) from [<8049dc24>] (shmem_get_inode+0x1dc/0x38c) [ 1124.335577][T12511] r10:00000003 r9:85cec800 r8:00008000 r7:850ee700 r6:8526fa58 r5:00000000 [ 1124.335586][T12511] r4:8526fe58 [ 1124.335594][T12511] [<8049da48>] (shmem_get_inode) from [<8049df24>] (shmem_mknod+0x90/0x1d8) [ 1124.335644][T12511] r10:855ca900 r9:00000000 r8:834b3788 r7:834b3770 r6:00008000 r5:829225e0 [ 1124.335654][T12511] r4:8526fa58 [ 1124.335661][T12511] [<8049de94>] (shmem_mknod) from [<8049e0d8>] (shmem_create+0x20/0x28) [ 1124.335690][T12511] r8:e04f5e58 r7:8526fa58 r6:e04f5f20 r5:834b3770 r4:834b34c8 [ 1124.335698][T12511] [<8049e0b8>] (shmem_create) from [<805676b8>] (path_openat+0xf28/0x11a0) [ 1124.335724][T12511] [<80566790>] (path_openat) from [<805679dc>] (do_filp_open+0xac/0x148) [ 1124.335755][T12511] r10:00000142 r9:83893000 r8:00000000 r7:e04f5e58 r6:e04f5f20 r5:85cec800 [ 1124.335764][T12511] r4:ffffff9c [ 1124.335771][T12511] [<80567930>] (do_filp_open) from [<8054e79c>] (do_sys_openat2+0x90/0xe0) [ 1124.335826][T12511] r9:85cec800 r8:8020029c r7:ffffff9c r6:e04f5f58 r5:83893000 r4:00000005 [ 1124.335835][T12511] [<8054e70c>] (do_sys_openat2) from [<8054ebc4>] (sys_openat+0x98/0xd4) [ 1124.335881][T12511] r7:00000142 r6:0012fee0 r5:200000c0 r4:ffffff9c [ 1124.335890][T12511] [<8054eb2c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1124.335912][T12511] Exception stack(0xe04f5fa8 to 0xe04f5ff0) [ 1124.335930][T12511] 5fa0: 00000000 00000000 ffffff9c 200000c0 000281c2 00000000 [ 1124.335946][T12511] 5fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76b670bc [ 1124.335959][T12511] 5fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1124.335970][T12511] r5:00000000 r4:00000000 [ 1124.357370][T12511] VFS: Not enough memory to send quota warning. [ 1128.324805][T12536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12536 comm=syz.0.2359 [ 1128.970575][T12542] mmap: syz.0.2360 (12542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1129.135578][ T31] audit: type=1400 audit(1129.070:356): avc: denied { connect } for pid=12546 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1130.950843][ T31] audit: type=1400 audit(1130.890:357): avc: denied { getopt } for pid=12562 comm="syz.0.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1132.435714][T12579] FAULT_INJECTION: forcing a failure. [ 1132.435714][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.436573][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.0.2371 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1132.436623][T12579] Hardware name: ARM-Versatile Express [ 1132.436636][T12579] Call trace: [ 1132.436656][T12579] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1132.436720][T12579] r7:00000cc0 r6:00000000 r5:60000013 r4:82257d54 [ 1132.436729][T12579] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1132.436755][T12579] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1132.436782][T12579] r5:85cea400 r4:8291bcc0 [ 1132.436790][T12579] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1132.436819][T12579] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1132.436853][T12579] r8:85cea400 r7:00000cc0 r6:84f8bc00 r5:0000000d r4:83001240 [ 1132.436862][T12579] [<80525658>] (should_failslab) from [<8050b16c>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 1132.436889][T12579] [<8050b0cc>] (__kmalloc_node_track_caller_noprof) from [<804a4de0>] (kstrdup+0x38/0x64) [ 1132.436923][T12579] r10:85cea400 r9:00000004 r8:855cac00 r7:804a4e3c r6:84f8bc00 r5:0000000c [ 1132.436933][T12579] r4:00000cc0 [ 1132.436941][T12579] [<804a4da8>] (kstrdup) from [<804a4e3c>] (kstrdup_const+0x30/0x34) [ 1132.436970][T12579] r7:833bb900 r6:00000cc0 r5:e062de58 r4:822d0b68 [ 1132.436977][T12579] [<804a4e0c>] (kstrdup_const) from [<808a6c34>] (kvasprintf_const+0x5c/0x84) [ 1132.437049][T12579] [<808a6bd8>] (kvasprintf_const) from [<81a29460>] (kobject_set_name_vargs+0x34/0x9c) [ 1132.437114][T12579] r7:833bb900 r6:00000000 r5:850ee500 r4:822d0b68 [ 1132.437130][T12579] [<81a2942c>] (kobject_set_name_vargs) from [<81a297b0>] (kobject_init_and_add+0x4c/0x9c) [ 1132.437177][T12579] r7:833bb900 r6:00000000 r5:850ee500 r4:822d0b68 [ 1132.437191][T12579] [<81a29768>] (kobject_init_and_add) from [<80b26ec0>] (bus_add_driver+0x88/0x21c) [ 1132.437241][T12579] r6:8459e830 r5:850ee500 r4:8459e830 [ 1132.437249][T12579] [<80b26e38>] (bus_add_driver) from [<80b29820>] (driver_register+0x84/0x11c) [ 1132.437282][T12579] r8:855cac00 r7:8459e804 r6:8459e830 r5:00000000 r4:8459e830 [ 1132.437290][T12579] [<80b2979c>] (driver_register) from [<80fcae88>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 1132.437320][T12579] r5:00000000 r4:8459e80c [ 1132.437327][T12579] [<80fcae38>] (usb_gadget_register_driver_owner) from [<8103b108>] (raw_ioctl+0x9dc/0x1094) [ 1132.437359][T12579] r7:8459e804 r6:60000013 r5:00000000 r4:8459e800 [ 1132.437367][T12579] [<8103a72c>] (raw_ioctl) from [<8056b450>] (sys_ioctl+0x138/0xd84) [ 1132.437398][T12579] r10:85cea400 r9:00000004 r8:855cac00 r7:00000000 r6:855cac01 r5:00000000 [ 1132.437408][T12579] r4:00005501 [ 1132.437415][T12579] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1132.437438][T12579] Exception stack(0xe062dfa8 to 0xe062dff0) [ 1132.437456][T12579] dfa0: 00000004 76bfae70 00000004 00005501 00000000 76bf9e00 [ 1132.437480][T12579] dfc0: 00000004 76bfae70 76bf9e70 00000036 00000002 76bfae60 00410000 00000000 [ 1132.437507][T12579] dfe0: 00000000 76bf9de8 002b8000 001318fc [ 1132.437539][T12579] r10:00000036 r9:85cea400 r8:8020029c r7:00000036 r6:76bf9e70 r5:76bfae70 [ 1132.437563][T12579] r4:00000004 [ 1132.452209][T12579] kobject: can not set name properly! [ 1132.453325][T12579] UDC core: USB Raw Gadget: driver registration failed: -12 [ 1132.453911][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 1133.595547][T12599] FAULT_INJECTION: forcing a failure. [ 1133.595547][T12599] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.596819][T12599] CPU: 1 UID: 0 PID: 12599 Comm: syz.1.2379 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1133.596883][T12599] Hardware name: ARM-Versatile Express [ 1133.596897][T12599] Call trace: [ 1133.596917][T12599] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1133.596972][T12599] r7:00000c40 r6:00000000 r5:60000013 r4:82257d54 [ 1133.596981][T12599] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1133.597065][T12599] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1133.597116][T12599] r5:85ceb000 r4:8291bcc0 [ 1133.597133][T12599] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1133.597169][T12599] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1133.597218][T12599] r8:85ceb000 r7:00000c40 r6:855ca3e8 r5:00001000 r4:830016c0 [ 1133.597228][T12599] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1133.597254][T12599] [<8050a41c>] (__kmalloc_noprof) from [<807bc364>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1133.597290][T12599] r10:85ceb000 r9:8309e800 r8:00000000 r7:834f12a8 r6:855ca3e8 r5:00001000 [ 1133.597300][T12599] r4:00000000 [ 1133.597308][T12599] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1133.597342][T12599] r10:85ceb000 r9:00000000 r8:855ca3c0 r7:00004c04 r6:00000004 r5:81cd56c4 [ 1133.597353][T12599] r4:855ca3e8 r3:826c0240 [ 1133.597360][T12599] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1133.597393][T12599] r9:00000004 r8:855ca3c0 r7:00000000 r6:00000000 r5:00004c04 r4:855ca3c0 [ 1133.597402][T12599] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1133.597430][T12599] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1133.597459][T12599] r7:00000000 r6:855ca3c1 r5:00000000 r4:00004c04 [ 1133.597468][T12599] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1133.597490][T12599] Exception stack(0xe062dfa8 to 0xe062dff0) [ 1133.597507][T12599] dfa0: 00000000 00000000 00000004 00004c04 00000000 00000000 [ 1133.597524][T12599] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b670bc [ 1133.597537][T12599] dfe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1133.597553][T12599] r10:00000036 r9:85ceb000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1133.597563][T12599] r4:00000000 [ 1133.617287][T12599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1134.110423][ T31] audit: type=1400 audit(1134.050:358): avc: denied { wake_alarm } for pid=12611 comm="syz.1.2385" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1134.641618][ T31] audit: type=1400 audit(1134.580:359): avc: denied { create } for pid=12623 comm="syz.1.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1135.497231][T12651] sctp: [Deprecated]: syz.0.2397 (pid 12651) Use of int in maxseg socket option. [ 1135.497231][T12651] Use struct sctp_assoc_value instead [ 1137.271297][T12677] FAULT_INJECTION: forcing a failure. [ 1137.271297][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.272193][T12677] CPU: 1 UID: 0 PID: 12677 Comm: syz.0.2405 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1137.272257][T12677] Hardware name: ARM-Versatile Express [ 1137.272270][T12677] Call trace: [ 1137.272291][T12677] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1137.272349][T12677] r7:eabb9e20 r6:00000000 r5:60000013 r4:82257d54 [ 1137.272359][T12677] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1137.272385][T12677] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1137.272412][T12677] r5:85ceb000 r4:82951710 [ 1137.272420][T12677] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1137.272448][T12677] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1137.272478][T12677] r8:200088c4 r7:eabb9e20 r6:200003c0 r5:00000000 r4:eabb9f20 [ 1137.272486][T12677] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1137.272509][T12677] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1137.272537][T12677] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1137.272566][T12677] r8:200088c4 r7:00000000 r6:848f4280 r5:eabb9f20 r4:eabb9e64 [ 1137.272574][T12677] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1137.272604][T12677] r10:00000128 r9:85ceb000 r8:84e88480 r7:200088c4 r6:200003c0 r5:84e88481 [ 1137.272614][T12677] r4:00000004 [ 1137.272621][T12677] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1137.272649][T12677] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1137.272657][T12677] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1137.272680][T12677] Exception stack(0xeabb9fa8 to 0xeabb9ff0) [ 1137.272698][T12677] 9fa0: 00000000 00000000 00000004 200003c0 200088c4 00000000 [ 1137.272714][T12677] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bfc0bc [ 1137.272727][T12677] 9fe0: 76bfbec0 76bfbeb0 0001939c 00131f30 [ 1137.600152][ T3765] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1137.755298][ T3765] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.756257][ T3765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1137.758544][ T3765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1137.759792][ T3765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1137.762080][ T3765] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.763399][ T3765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.768035][ T3765] usb 1-1: config 0 descriptor?? [ 1138.205263][ T3765] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1138.215334][ T3765] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1138.759083][ T3765] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1138.923173][ T3765] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1138.923990][ T3765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1138.925500][ T3765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1138.926556][ T3765] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1138.927739][ T3765] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1138.929332][ T3765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.932808][ T3765] usb 2-1: config 0 descriptor?? [ 1139.350498][ T3765] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1139.360315][ T3765] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1139.549342][T12695] FAULT_INJECTION: forcing a failure. [ 1139.549342][T12695] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.549642][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.1.2408 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1139.549690][T12695] Hardware name: ARM-Versatile Express [ 1139.549704][T12695] Call trace: [ 1139.549725][T12695] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1139.549778][T12695] r7:00000d40 r6:00000000 r5:60000013 r4:82257d54 [ 1139.549787][T12695] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1139.549813][T12695] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1139.549930][T12695] r5:84090000 r4:8291bcc0 [ 1139.550000][T12695] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1139.550098][T12695] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1139.550166][T12695] r8:84090000 r7:00000d40 r6:855ca628 r5:00000022 r4:83001240 [ 1139.550216][T12695] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1139.550356][T12695] [<8050a41c>] (__kmalloc_noprof) from [<807bc26c>] (tomoyo_encode2+0x64/0xf0) [ 1139.550488][T12695] r10:00000fff r9:8309e800 r8:00000000 r7:83412088 r6:855ca628 r5:8431fffc [ 1139.550500][T12695] r4:8431ffe5 [ 1139.550508][T12695] [<807bc208>] (tomoyo_encode2) from [<807bc31c>] (tomoyo_encode+0x24/0x30) [ 1139.550592][T12695] r9:8309e800 r8:00000000 r7:83412088 r6:855ca628 r5:00001000 r4:8431ffe6 [ 1139.550674][T12695] [<807bc2f8>] (tomoyo_encode) from [<807bc3a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1139.550819][T12695] r5:00001000 r4:8431f000 [ 1139.550914][T12695] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1139.551043][T12695] r10:84090000 r9:00000000 r8:855ca600 r7:80085502 r6:00000004 r5:81cd56c4 [ 1139.551055][T12695] r4:855ca628 r3:826c0240 [ 1139.551300][T12695] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1139.551490][T12695] r9:00000003 r8:855ca600 r7:76b65e88 r6:76b65e88 r5:80085502 r4:855ca600 [ 1139.551590][T12695] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1139.551685][T12695] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1139.551785][T12695] r7:76b65e88 r6:855ca601 r5:00000003 r4:80085502 [ 1139.551870][T12695] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1139.551977][T12695] Exception stack(0xeabb9fa8 to 0xeabb9ff0) [ 1139.552127][T12695] 9fa0: 76b65e98 00000003 00000003 80085502 76b65e88 76b64e50 [ 1139.552238][T12695] 9fc0: 76b65e98 00000003 00000003 00000036 00000000 00000000 00006364 76b670bc [ 1139.552300][T12695] 9fe0: 00000000 76b64e38 002b8000 001318fc [ 1139.552398][T12695] r10:00000036 r9:84090000 r8:8020029c r7:00000036 r6:00000003 r5:00000003 [ 1139.552490][T12695] r4:76b65e98 [ 1139.564713][T12695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1141.980460][ T3765] usb 1-1: USB disconnect, device number 10 [ 1142.073991][ T31] audit: type=1800 audit(1142.010:360): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2409" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1143.095341][ T11] usb 2-1: USB disconnect, device number 23 [ 1146.884766][T12759] FAULT_INJECTION: forcing a failure. [ 1146.884766][T12759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.885066][T12759] CPU: 0 UID: 0 PID: 12759 Comm: syz.1.2415 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1146.885101][T12759] Hardware name: ARM-Versatile Express [ 1146.885113][T12759] Call trace: [ 1146.885132][T12759] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1146.885246][T12759] r7:eae1de20 r6:00000000 r5:60000013 r4:82257d54 [ 1146.885260][T12759] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1146.885289][T12759] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1146.885316][T12759] r5:8458ec00 r4:82951710 [ 1146.885323][T12759] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1146.885352][T12759] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1146.885382][T12759] r8:00004800 r7:eae1de20 r6:200001c0 r5:00000000 r4:eae1df20 [ 1146.885390][T12759] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1146.885414][T12759] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1146.885442][T12759] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1146.885471][T12759] r8:00004800 r7:00000000 r6:848f5680 r5:eae1df20 r4:eae1de64 [ 1146.885479][T12759] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1146.885509][T12759] r10:00000128 r9:8458ec00 r8:85535e40 r7:00004800 r6:200001c0 r5:85535e41 [ 1146.885520][T12759] r4:00000003 [ 1146.885527][T12759] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1146.885556][T12759] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1146.885564][T12759] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1146.885609][T12759] Exception stack(0xeae1dfa8 to 0xeae1dff0) [ 1146.885631][T12759] dfa0: 00000000 00000000 00000003 200001c0 00004800 00000000 [ 1146.885648][T12759] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1146.885661][T12759] dfe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1148.512018][ T31] audit: type=1400 audit(1148.450:361): avc: denied { create } for pid=12765 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1148.790960][T12766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12766 comm=syz.0.2418 [ 1153.834391][T12788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12788 comm=syz.0.2422 [ 1158.140139][T12800] FAULT_INJECTION: forcing a failure. [ 1158.140139][T12800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.140922][T12800] CPU: 1 UID: 0 PID: 12800 Comm: syz.0.2424 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1158.140966][T12800] Hardware name: ARM-Versatile Express [ 1158.140979][T12800] Call trace: [ 1158.141028][T12800] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1158.141087][T12800] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1158.141097][T12800] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1158.141124][T12800] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1158.141151][T12800] r5:852c0000 r4:82951710 [ 1158.141158][T12800] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1158.141186][T12800] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1158.141215][T12800] r8:76bb9f30 r7:00000000 r6:00000000 r5:eb0a9f68 r4:00000002 [ 1158.141223][T12800] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1158.141247][T12800] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1158.141274][T12800] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1158.141309][T12800] r10:00000001 r9:806041f0 r8:00000002 r7:eb0a9f68 r6:0000000f r5:76bb9f30 [ 1158.141320][T12800] r4:852c0000 r3:eb0a9e9f [ 1158.141328][T12800] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1158.141359][T12800] r8:76bb9f30 r7:eb0a9f68 r6:852c0000 r5:0000000f r4:855caa80 [ 1158.141367][T12800] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1158.141397][T12800] r10:00000003 r9:852c0000 r8:8020029c r7:00000000 r6:00000000 r5:855caa80 [ 1158.141406][T12800] r4:855caa83 [ 1158.141414][T12800] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1158.141441][T12800] r7:00000003 r6:00000005 r5:76bb9f30 r4:0000000f [ 1158.141449][T12800] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1158.141471][T12800] Exception stack(0xeb0a9fa8 to 0xeb0a9ff0) [ 1158.141490][T12800] 9fa0: 0000000f 76bb9f30 00000005 76bb9f30 0000000f 00000000 [ 1158.141507][T12800] 9fc0: 0000000f 76bb9f30 00000005 00000003 002d0000 00000000 00006364 76bba0bc [ 1158.141519][T12800] 9fe0: 00000158 76bb9ed0 000d7d68 0012fe04 [ 1160.861080][T12822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=12822 comm=syz.0.2430 [ 1163.382268][T12829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12829 comm=syz.1.2432 [ 1167.546182][T12857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12857 comm=syz.0.2439 [ 1170.839352][T12873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12873 comm=syz.1.2445 [ 1176.493579][T12897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12897 comm=syz.1.2452 [ 1183.496673][T12921] FAULT_INJECTION: forcing a failure. [ 1183.496673][T12921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.506504][T12921] CPU: 1 UID: 0 PID: 12921 Comm: syz.1.2459 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1183.506622][T12921] Hardware name: ARM-Versatile Express [ 1183.506653][T12921] Call trace: [ 1183.506698][T12921] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1183.506809][T12921] r7:eb3e1e20 r6:00000000 r5:60000013 r4:82257d54 [ 1183.506846][T12921] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1183.506905][T12921] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1183.506967][T12921] r5:84588c00 r4:82951710 [ 1183.506986][T12921] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1183.507048][T12921] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1183.507113][T12921] r8:0000c080 r7:eb3e1e20 r6:20000340 r5:00000000 r4:eb3e1f20 [ 1183.507131][T12921] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1183.507175][T12921] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1183.507229][T12921] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1183.507287][T12921] r8:0000c080 r7:00000000 r6:834a4280 r5:eb3e1f20 r4:eb3e1e64 [ 1183.507304][T12921] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1183.507360][T12921] r10:00000128 r9:84588c00 r8:855ca840 r7:0000c080 r6:20000340 r5:855ca841 [ 1183.507380][T12921] r4:00000003 [ 1183.507395][T12921] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1183.507447][T12921] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1183.507464][T12921] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1183.507509][T12921] Exception stack(0xeb3e1fa8 to 0xeb3e1ff0) [ 1183.507544][T12921] 1fa0: 00000000 00000000 00000003 20000340 0000c080 00000000 [ 1183.507577][T12921] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1183.507601][T12921] 1fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1185.659641][T12929] FAULT_INJECTION: forcing a failure. [ 1185.659641][T12929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.659931][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.1.2462 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1185.659962][T12929] Hardware name: ARM-Versatile Express [ 1185.659976][T12929] Call trace: [ 1185.659995][T12929] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1185.660114][T12929] r7:eb3e1e20 r6:00000000 r5:60000013 r4:82257d54 [ 1185.660148][T12929] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1185.660184][T12929] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1185.660339][T12929] r5:83ae3000 r4:82951710 [ 1185.660394][T12929] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1185.660455][T12929] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1185.660517][T12929] r8:00008000 r7:eb3e1e20 r6:20000300 r5:00000000 r4:eb3e1f20 [ 1185.660539][T12929] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1185.660650][T12929] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1185.660696][T12929] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1185.660733][T12929] r8:00008000 r7:00000000 r6:848f5680 r5:eb3e1f20 r4:eb3e1e64 [ 1185.660740][T12929] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1185.660822][T12929] r10:00000128 r9:83ae3000 r8:85535000 r7:00008000 r6:20000300 r5:85535001 [ 1185.660832][T12929] r4:00000003 [ 1185.660865][T12929] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1185.660935][T12929] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1185.661101][T12929] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1185.661268][T12929] Exception stack(0xeb3e1fa8 to 0xeb3e1ff0) [ 1185.661418][T12929] 1fa0: 00000000 00000000 00000003 20000300 00008000 00000000 [ 1185.661464][T12929] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1185.661479][T12929] 1fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1194.319938][T12973] FAULT_INJECTION: forcing a failure. [ 1194.319938][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.320226][T12973] CPU: 0 UID: 0 PID: 12973 Comm: syz.1.2471 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1194.320259][T12973] Hardware name: ARM-Versatile Express [ 1194.320270][T12973] Call trace: [ 1194.320290][T12973] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1194.320376][T12973] r7:00000d40 r6:00000000 r5:60000013 r4:82257d54 [ 1194.320388][T12973] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1194.320416][T12973] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1194.320442][T12973] r5:83ade000 r4:8291bcc0 [ 1194.320482][T12973] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1194.320513][T12973] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1194.320547][T12973] r8:83ade000 r7:00000d40 r6:85535f28 r5:00000019 r4:83001240 [ 1194.320554][T12973] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1194.320609][T12973] [<8050a41c>] (__kmalloc_noprof) from [<807bc26c>] (tomoyo_encode2+0x64/0xf0) [ 1194.320648][T12973] r10:00000fff r9:83351000 r8:00000000 r7:83611550 r6:85535f28 r5:83af4ffd [ 1194.320693][T12973] r4:83af4fef [ 1194.320703][T12973] [<807bc208>] (tomoyo_encode2) from [<807bc31c>] (tomoyo_encode+0x24/0x30) [ 1194.320736][T12973] r9:83351000 r8:00000000 r7:83611550 r6:85535f28 r5:00001000 r4:83af4ff0 [ 1194.320743][T12973] [<807bc2f8>] (tomoyo_encode) from [<807bc3a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1194.320799][T12973] r5:00001000 r4:83af4000 [ 1194.320807][T12973] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1194.320846][T12973] r10:83ade000 r9:00000000 r8:85535f00 r7:00008918 r6:00000004 r5:81cd56c4 [ 1194.320857][T12973] r4:85535f28 r3:826c0240 [ 1194.320896][T12973] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1194.320932][T12973] r9:00000003 r8:85535f00 r7:00000000 r6:00000000 r5:00008918 r4:85535f00 [ 1194.320941][T12973] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1194.321013][T12973] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1194.321462][T12973] r7:00000000 r6:85535f01 r5:00000000 r4:00008918 [ 1194.321779][T12973] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1194.321979][T12973] Exception stack(0xeb7e9fa8 to 0xeb7e9ff0) [ 1194.322653][T12973] 9fa0: 00000000 00000000 00000003 00008918 00000000 00000000 [ 1194.322673][T12973] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76ae30bc [ 1194.322685][T12973] 9fe0: 76ae2ec0 76ae2eb0 0001939c 00131f30 [ 1194.322723][T12973] r10:00000036 r9:83ade000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1194.323018][T12973] r4:00000000 [ 1194.342016][T12973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1203.911358][T13020] Restarting kernel threads ... done. [ 1203.925933][T13020] SELinux: syz.1.2489 (13020) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1205.750031][T13030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=13030 comm=syz.0.2492 [ 1213.719089][ T4148] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1213.872091][ T4148] usb 2-1: not running at top speed; connect to a high speed hub [ 1213.876601][ T4148] usb 2-1: config 1 interface 0 altsetting 90 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1213.888155][ T4148] usb 2-1: config 1 interface 0 altsetting 90 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1213.888395][ T4148] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1213.896892][ T4148] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1213.897114][ T4148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.897279][ T4148] usb 2-1: Product: 醙佘珅챉ꎞ⯨轐믓ﺩ迿턕࿁珠븫뙛ẟ읙뗒㤂崝ᘏɹᆣఀ䃪⟽͆楤賣쌊䔲熲故쐓烽婒늹䂚꘺犺냀ᯢ璟蚎뿋⡐ቭ慮護验䭒ᵋ⏢鶂镺缈⋫㉇톘䛜䛠퟼둈䨋遻褐␻蕾㎇䨦ꊦ쵖圶䪢쬠게胰͟㠃㸟⶚蔡甉㐻ꉧ蟄∵팲볗텡㿶㺇㵊ᴩ㋟皪럱Ꮶᤩ⊐쏑懶灈 [ 1213.897394][ T4148] usb 2-1: Manufacturer: 剼漣鱦쇁ູ㈐謁䣶㝢⹼쓌됢ᑺ㩚 [ 1213.897497][ T4148] usb 2-1: SerialNumber: 삷䟔氒풰쇟孤䊜ꀎꨒ괿࠴ᒹ揧陋纻죄⾂㞰㟋；甛䡭➕؛䐳뺴꓍뉋⁋飫凵생訢Ʇ랜領⻙䆮ࡒ茼쵐䠔淒쌵⇘톅땙蹪뜒큼枈㔵⾯Ϗ꒾㳅Ͻ毆엺⍛杨爱턺䏌℧⭭뭂逎頋팞內않柟䟏ＴḔ᮶摺鈔茻귛迥酖ᳱ甕뎺㚼锊ꆬ떣ᐘ⦽꺆磂뵘굷ᚙ䡜楔 [ 1214.665087][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.670779][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.968211][ T4148] usbhid 2-1:1.0: can't add hid device: -32 [ 1218.968540][ T4148] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 1222.349244][ T4148] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1222.502858][ T4148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.503912][ T4148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.504803][ T4148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.509248][ T4148] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.509865][ T4148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.512097][ T4148] usb 1-1: config 0 descriptor?? [ 1222.938656][ T4148] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1222.943442][ T4148] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1224.736436][ T3765] usb 2-1: USB disconnect, device number 24 [ 1224.931578][T10414] usb 1-1: USB disconnect, device number 11 [ 1230.731375][T13149] FAULT_INJECTION: forcing a failure. [ 1230.731375][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.731650][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.1.2510 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1230.731688][T13149] Hardware name: ARM-Versatile Express [ 1230.731702][T13149] Call trace: [ 1230.731723][T13149] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1230.731839][T13149] r7:ec609e20 r6:00000000 r5:60000013 r4:82257d54 [ 1230.731897][T13149] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1230.731941][T13149] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1230.732000][T13149] r5:84233c00 r4:82951710 [ 1230.732012][T13149] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1230.732061][T13149] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1230.732167][T13149] r8:00040044 r7:ec609e20 r6:200001c0 r5:00000000 r4:ec609f20 [ 1230.732191][T13149] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1230.732219][T13149] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1230.732247][T13149] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1230.732330][T13149] r8:00040044 r7:00000000 r6:848f4f00 r5:ec609f20 r4:ec609e64 [ 1230.732364][T13149] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1230.732422][T13149] r10:00000128 r9:84233c00 r8:855359c0 r7:00040044 r6:200001c0 r5:855359c1 [ 1230.732458][T13149] r4:00000004 [ 1230.732481][T13149] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1230.732550][T13149] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1230.732586][T13149] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1230.732640][T13149] Exception stack(0xec609fa8 to 0xec609ff0) [ 1230.732661][T13149] 9fa0: 00000000 00000000 00000004 200001c0 00040044 00000000 [ 1230.732742][T13149] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1230.732847][T13149] 9fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1268.000829][ T31] audit: type=1400 audit(1267.940:362): avc: denied { getattr } for pid=13314 comm="syz.1.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1290.332661][T13398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=13398 comm=syz.0.2573 [ 1299.898646][ T2956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.956360][ T2956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.015249][ T2956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.092161][ T2956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.246760][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.254135][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.256450][ T2956] bond0 (unregistering): Released all slaves [ 1300.314270][ T2956] hsr_slave_0: left promiscuous mode [ 1300.316021][ T2956] hsr_slave_1: left promiscuous mode [ 1300.331364][ T2956] veth1_macvtap: left promiscuous mode [ 1300.331614][ T2956] veth0_macvtap: left promiscuous mode [ 1300.331760][ T2956] veth1_vlan: left promiscuous mode [ 1300.331852][ T2956] veth0_vlan: left promiscuous mode [ 1301.411382][T13437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.420713][T13437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.131388][T13437] hsr_slave_0: entered promiscuous mode [ 1302.132252][T13437] hsr_slave_1: entered promiscuous mode [ 1302.132935][T13437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1302.140250][T13437] Cannot create hsr debugfs directory [ 1302.617613][T13437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1302.633387][T13437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1302.638022][T13437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1302.650546][T13437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.247659][T13437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.223008][T13437] veth0_vlan: entered promiscuous mode [ 1305.233481][T13437] veth1_vlan: entered promiscuous mode [ 1305.265490][T13437] veth0_macvtap: entered promiscuous mode [ 1305.274442][T13437] veth1_macvtap: entered promiscuous mode [ 1305.308158][T13437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.309758][T13437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.311703][T13437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.313201][T13437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.382006][ T31] audit: type=1400 audit(1305.320:363): avc: denied { mounton } for pid=13437 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1306.561592][T13859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13859 comm=syz.1.2588 [ 1326.607474][T13933] FAULT_INJECTION: forcing a failure. [ 1326.607474][T13933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.608542][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.1.2604 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1326.608602][T13933] Hardware name: ARM-Versatile Express [ 1326.608616][T13933] Call trace: [ 1326.608635][T13933] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1326.608692][T13933] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1326.608702][T13933] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1326.608808][T13933] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1326.608843][T13933] r5:85ce9800 r4:82951710 [ 1326.608851][T13933] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1326.608880][T13933] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1326.608909][T13933] r8:76b66f30 r7:00000000 r6:00000000 r5:ed679f68 r4:00000002 [ 1326.608917][T13933] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1326.608940][T13933] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1326.608967][T13933] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1326.609034][T13933] r10:00000001 r9:806041f0 r8:00000002 r7:ed679f68 r6:0000000f r5:76b66f30 [ 1326.609068][T13933] r4:85ce9800 r3:ed679e9f [ 1326.609084][T13933] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1326.609138][T13933] r8:76b66f30 r7:ed679f68 r6:85ce9800 r5:0000000f r4:85caac00 [ 1326.609155][T13933] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1326.609189][T13933] r10:00000003 r9:85ce9800 r8:8020029c r7:00000000 r6:00000000 r5:85caac00 [ 1326.609199][T13933] r4:85caac03 [ 1326.609207][T13933] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1326.609235][T13933] r7:00000003 r6:00000004 r5:76b66f30 r4:0000000f [ 1326.609242][T13933] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1326.609265][T13933] Exception stack(0xed679fa8 to 0xed679ff0) [ 1326.609283][T13933] 9fa0: 0000000f 76b66f30 00000004 76b66f30 0000000f 00000000 [ 1326.609299][T13933] 9fc0: 0000000f 76b66f30 00000004 00000003 002d0000 00000000 00006364 76b670bc [ 1326.609312][T13933] 9fe0: 00000158 76b66ed0 000d7d68 0012fe04 [ 1335.241550][T13968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13968 comm=syz.1.2614 [ 1341.849824][T14004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14004 comm=syz.0.2625 [ 1345.862376][T14022] FAULT_INJECTION: forcing a failure. [ 1345.862376][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.865434][T14022] CPU: 1 UID: 0 PID: 14022 Comm: syz.0.2630 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1345.865541][T14022] Hardware name: ARM-Versatile Express [ 1345.865568][T14022] Call trace: [ 1345.865610][T14022] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1345.865717][T14022] r7:edb91e20 r6:00000000 r5:60000013 r4:82257d54 [ 1345.865737][T14022] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1345.865790][T14022] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1345.865860][T14022] r5:85ce9800 r4:82951710 [ 1345.865877][T14022] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1345.865934][T14022] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1345.865991][T14022] r8:00000884 r7:edb91e20 r6:20000140 r5:00000000 r4:edb91f20 [ 1345.866010][T14022] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1345.866056][T14022] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1345.866111][T14022] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1345.866168][T14022] r8:00000884 r7:00000000 r6:834a3180 r5:edb91f20 r4:edb91e64 [ 1345.866185][T14022] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1345.866245][T14022] r10:00000128 r9:85ce9800 r8:85caa6c0 r7:00000884 r6:20000140 r5:85caa6c1 [ 1345.866267][T14022] r4:00000003 [ 1345.866284][T14022] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1345.866344][T14022] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1345.866363][T14022] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1345.866410][T14022] Exception stack(0xedb91fa8 to 0xedb91ff0) [ 1345.866447][T14022] 1fa0: 00000000 00000000 00000003 20000140 00000884 00000000 [ 1345.866481][T14022] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76ba90bc [ 1345.866508][T14022] 1fe0: 76ba8ec0 76ba8eb0 0001939c 00131f30 [ 1346.535776][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.537327][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.542929][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.547360][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.550346][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.553179][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.557851][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.560878][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.564453][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.570039][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.572947][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.575772][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.580657][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.583400][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.586028][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.589567][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.592549][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.595649][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.598282][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.601845][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.604456][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.607781][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.610902][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.613167][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.615944][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.620805][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.622220][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.623493][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.624689][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.625893][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.627069][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.628241][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.630881][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.632382][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.633681][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.635092][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.636178][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.637629][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.639611][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.640894][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.642092][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.643250][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.644529][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.645657][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.646950][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.648085][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.650004][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.650413][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.650589][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.650830][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.651047][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.651281][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.651459][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.651620][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.651780][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.652019][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.656532][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.656856][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.657117][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.657284][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.657531][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.657699][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.657867][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.658098][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.658316][T14024] 8021q: VLANs not supported on ip6_vti0 [ 1346.696615][ T31] audit: type=1400 audit(1346.630:364): avc: denied { setattr } for pid=14023 comm="syz.0.2631" path="socket:[30153]" dev="sockfs" ino=30153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1347.459707][T13855] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1347.612364][T13855] usb 2-1: not running at top speed; connect to a high speed hub [ 1347.616152][T13855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.616582][T13855] usb 2-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.616685][T13855] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1347.635060][T13855] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1347.635366][T13855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.635446][T13855] usb 2-1: Product: syz [ 1347.635538][T13855] usb 2-1: Manufacturer: syz [ 1347.635612][T13855] usb 2-1: SerialNumber: syz [ 1347.856273][T13855] cdc_ether 2-1:1.0: skipping garbage [ 1347.857399][T13855] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1347.866229][T13855] usb 2-1: USB disconnect, device number 25 [ 1350.281881][T14062] FAULT_INJECTION: forcing a failure. [ 1350.281881][T14062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.283467][T14062] CPU: 1 UID: 0 PID: 14062 Comm: syz.1.2639 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1350.283578][T14062] Hardware name: ARM-Versatile Express [ 1350.283603][T14062] Call trace: [ 1350.283646][T14062] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1350.283757][T14062] r7:edd89e20 r6:00000000 r5:60000013 r4:82257d54 [ 1350.283779][T14062] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1350.283839][T14062] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1350.283899][T14062] r5:85cea400 r4:82951710 [ 1350.283919][T14062] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1350.283977][T14062] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1350.284043][T14062] r8:240180d4 r7:edd89e20 r6:20000240 r5:00000000 r4:edd89f20 [ 1350.284063][T14062] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1350.284124][T14062] [<8095f754>] (should_fail_usercopy) from [<8151c210>] (copy_msghdr_from_user+0x50/0x130) [ 1350.284184][T14062] [<8151c1c0>] (copy_msghdr_from_user) from [<8151c368>] (___sys_sendmsg+0x78/0xd0) [ 1350.284242][T14062] r8:240180d4 r7:00000000 r6:834a4f00 r5:edd89f20 r4:edd89e64 [ 1350.284261][T14062] [<8151c2f0>] (___sys_sendmsg) from [<8151c81c>] (__sys_sendmsg+0x8c/0xd8) [ 1350.284326][T14062] r10:00000128 r9:85cea400 r8:85684780 r7:240180d4 r6:20000240 r5:85684781 [ 1350.284352][T14062] r4:00000003 [ 1350.284369][T14062] [<8151c790>] (__sys_sendmsg) from [<8151c87c>] (sys_sendmsg+0x14/0x18) [ 1350.284428][T14062] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1350.284446][T14062] [<8151c868>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1350.284493][T14062] Exception stack(0xedd89fa8 to 0xedd89ff0) [ 1350.284526][T14062] 9fa0: 00000000 00000000 00000003 20000240 240180d4 00000000 [ 1350.284556][T14062] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b670bc [ 1350.284584][T14062] 9fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 1419.713208][T14420] cgroup: Unknown subsys name 'fsuuid' [ 1423.019747][T14442] FAULT_INJECTION: forcing a failure. [ 1423.019747][T14442] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.020235][T14442] CPU: 0 UID: 0 PID: 14442 Comm: syz.1.2720 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1423.020329][T14442] Hardware name: ARM-Versatile Express [ 1423.020358][T14442] Call trace: [ 1423.020396][T14442] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1423.020499][T14442] r7:00000c40 r6:00000000 r5:60000013 r4:82257d54 [ 1423.020553][T14442] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1423.020611][T14442] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1423.020750][T14442] r5:84096000 r4:8291bcc0 [ 1423.020772][T14442] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1423.020831][T14442] [<8095f514>] (should_fail_ex) from [<805256c4>] (should_failslab+0x6c/0x94) [ 1423.020935][T14442] r8:84096000 r7:00000c40 r6:85535da8 r5:00001000 r4:830016c0 [ 1423.020957][T14442] [<80525658>] (should_failslab) from [<8050a4b8>] (__kmalloc_noprof+0x9c/0x458) [ 1423.021037][T14442] [<8050a41c>] (__kmalloc_noprof) from [<807bc364>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1423.021178][T14442] r10:84096000 r9:83351000 r8:00000000 r7:834a6dd0 r6:85535da8 r5:00001000 [ 1423.021238][T14442] r4:00000000 [ 1423.021259][T14442] [<807bc328>] (tomoyo_realpath_from_path) from [<807b84a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1423.021330][T14442] r10:84096000 r9:00000000 r8:85535d80 r7:00008995 r6:00000004 r5:81cd56c4 [ 1423.021352][T14442] r4:85535da8 r3:826c0240 [ 1423.021368][T14442] [<807b83dc>] (tomoyo_path_number_perm) from [<807bcd88>] (tomoyo_file_ioctl+0x1c/0x20) [ 1423.021431][T14442] r9:00000004 r8:85535d80 r7:200001c0 r6:200001c0 r5:00008995 r4:85535d80 [ 1423.021450][T14442] [<807bcd6c>] (tomoyo_file_ioctl) from [<8076a7c4>] (security_file_ioctl+0x64/0x1e4) [ 1423.021503][T14442] [<8076a760>] (security_file_ioctl) from [<8056b364>] (sys_ioctl+0x4c/0xd84) [ 1423.021560][T14442] r7:200001c0 r6:85535d81 r5:00000000 r4:00008995 [ 1423.021576][T14442] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1423.021634][T14442] Exception stack(0xdfb21fa8 to 0xdfb21ff0) [ 1423.021676][T14442] 1fa0: 00000000 00000000 00000004 00008995 200001c0 00000000 [ 1423.021718][T14442] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76ae30bc [ 1423.021745][T14442] 1fe0: 76ae2ec0 76ae2eb0 0001939c 00131f30 [ 1423.021779][T14442] r10:00000036 r9:84096000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1423.021797][T14442] r4:00000000 [ 1423.021839][T14442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1424.250311][T14446] fuse: Bad value for 'fd' [ 1460.306430][ T31] audit: type=1400 audit(1460.240:365): avc: denied { read } for pid=14592 comm="syz.1.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1463.074930][T14608] FAULT_INJECTION: forcing a failure. [ 1463.074930][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.075414][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.0.2767 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1463.075476][T14608] Hardware name: ARM-Versatile Express [ 1463.075494][T14608] Call trace: [ 1463.075525][T14608] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1463.075610][T14608] r7:00000000 r6:00000000 r5:60000013 r4:82257d54 [ 1463.075623][T14608] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1463.075659][T14608] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1463.075695][T14608] r5:84208000 r4:82951710 [ 1463.075705][T14608] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1463.075848][T14608] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1463.076024][T14608] r8:76bc9f30 r7:00000000 r6:00000000 r5:e00c1f68 r4:00000002 [ 1463.076173][T14608] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1463.076334][T14608] [<8095f754>] (should_fail_usercopy) from [<8058cd1c>] (simple_read_from_buffer+0x80/0x13c) [ 1463.076436][T14608] [<8058cc9c>] (simple_read_from_buffer) from [<806042a8>] (proc_fail_nth_read+0xb8/0x100) [ 1463.076822][T14608] r10:00000001 r9:806041f0 r8:00000002 r7:e00c1f68 r6:0000000f r5:76bc9f30 [ 1463.077502][T14608] r4:84208000 r3:e00c1e9f [ 1463.077516][T14608] [<806041f0>] (proc_fail_nth_read) from [<805517d8>] (vfs_read+0x98/0x320) [ 1463.077565][T14608] r8:76bc9f30 r7:e00c1f68 r6:84208000 r5:0000000f r4:85433240 [ 1463.077577][T14608] [<80551740>] (vfs_read) from [<80552478>] (ksys_read+0x74/0xe4) [ 1463.077891][T14608] r10:00000003 r9:84208000 r8:8020029c r7:00000000 r6:00000000 r5:85433240 [ 1463.078137][T14608] r4:85433243 [ 1463.078516][T14608] [<80552404>] (ksys_read) from [<805524f8>] (sys_read+0x10/0x14) [ 1463.078704][T14608] r7:00000003 r6:00000005 r5:76bc9f30 r4:0000000f [ 1463.078725][T14608] [<805524e8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1463.078940][T14608] Exception stack(0xe00c1fa8 to 0xe00c1ff0) [ 1463.078984][T14608] 1fa0: 0000000f 76bc9f30 00000005 76bc9f30 0000000f 00000000 [ 1463.079009][T14608] 1fc0: 0000000f 76bc9f30 00000005 00000003 002d0000 00000000 00006364 76bca0bc [ 1463.079158][T14608] 1fe0: 00000158 76bc9ed0 000d7d68 0012fe04 [ 1463.265038][T14612] FAULT_INJECTION: forcing a failure. [ 1463.265038][T14612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.265447][T14612] CPU: 0 UID: 0 PID: 14612 Comm: syz.0.2769 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1463.265510][T14612] Hardware name: ARM-Versatile Express [ 1463.265530][T14612] Call trace: [ 1463.265562][T14612] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1463.265646][T14612] r7:83963400 r6:00000000 r5:60000013 r4:82257d54 [ 1463.265748][T14612] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1463.265799][T14612] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1463.265866][T14612] r5:8458d400 r4:82951710 [ 1463.265944][T14612] [<80220048>] (dump_stack) from [<8095f6d8>] (should_fail_ex+0x1c4/0x228) [ 1463.265991][T14612] [<8095f514>] (should_fail_ex) from [<8095f750>] (should_fail+0x14/0x18) [ 1463.266096][T14612] r8:81d35cb0 r7:83963400 r6:c04064aa r5:ffffffa1 r4:00000040 [ 1463.266153][T14612] [<8095f73c>] (should_fail) from [<8095f770>] (should_fail_usercopy+0x1c/0x20) [ 1463.266193][T14612] [<8095f754>] (should_fail_usercopy) from [<80ab79e8>] (drm_ioctl+0x270/0x5b0) [ 1463.266290][T14612] [<80ab7778>] (drm_ioctl) from [<8056b450>] (sys_ioctl+0x138/0xd84) [ 1463.266500][T14612] r10:8458d400 r9:00000003 r8:85433600 r7:20002300 r6:85433601 r5:00000000 [ 1463.266519][T14612] r4:c04064aa [ 1463.266533][T14612] [<8056b318>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1463.266571][T14612] Exception stack(0xe050dfa8 to 0xe050dff0) [ 1463.266669][T14612] dfa0: 00000000 00000000 00000003 c04064aa 20002300 00000000 [ 1463.266697][T14612] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bca0bc [ 1463.266716][T14612] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 1463.266742][T14612] r10:00000036 r9:8458d400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1463.266784][T14612] r4:00000000 [ 1465.301359][ T31] audit: type=1400 audit(1465.240:366): avc: denied { execute } for pid=14623 comm="syz.0.2773" path="/dev/audio1" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1472.509787][T10398] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1472.660181][T10398] usb 2-1: Using ep0 maxpacket: 16 [ 1472.686634][T10398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1472.710947][T10398] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1472.711306][T10398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.711399][T10398] usb 2-1: Product: syz [ 1472.711468][T10398] usb 2-1: Manufacturer: syz [ 1472.711536][T10398] usb 2-1: SerialNumber: syz [ 1472.715315][T10398] usb 2-1: config 0 descriptor?? [ 1472.958608][T13855] usb 2-1: USB disconnect, device number 26 [ 1474.095684][T14691] bond0: (slave bond_slave_0): Releasing backup interface [ 1474.114640][T14691] bond0: (slave bond_slave_1): Releasing backup interface [ 1474.169227][T13855] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1474.329359][T13855] usb 1-1: device descriptor read/64, error -71 [ 1474.589198][T13855] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1474.729221][T13855] usb 1-1: device descriptor read/64, error -71 [ 1474.839811][T13855] usb usb1-port1: attempt power cycle [ 1475.189470][T13855] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1475.219318][T13855] usb 1-1: device descriptor read/8, error -71 [ 1475.549527][T13855] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1475.571666][T13855] usb 1-1: device descriptor read/8, error -71 [ 1475.689711][T13855] usb usb1-port1: unable to enumerate USB device [ 1482.589384][T10374] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1482.743002][T10374] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 1482.743208][T10374] usb 2-1: config 0 has no interface number 0 [ 1482.752237][T10374] usb 2-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=72.c5 [ 1482.752430][T10374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.752624][T10374] usb 2-1: Product: syz [ 1482.752681][T10374] usb 2-1: Manufacturer: syz [ 1482.752817][T10374] usb 2-1: SerialNumber: syz [ 1482.755047][T10374] usb 2-1: config 0 descriptor?? [ 1482.966767][T10414] usb 2-1: USB disconnect, device number 27 [ 1484.637493][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 1484.639924][T10374] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1484.663941][T14746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.809332][T10374] usb 2-1: Using ep0 maxpacket: 16 [ 1484.823612][T10374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1484.836913][T10374] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1484.837238][T10374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.840067][T10374] usb 2-1: Product: syz [ 1484.840377][T10374] usb 2-1: Manufacturer: syz [ 1484.840457][T10374] usb 2-1: SerialNumber: syz [ 1484.846488][T10374] usb 2-1: config 0 descriptor?? [ 1484.865356][T10374] hub 2-1:0.0: bad descriptor, ignoring hub [ 1484.865748][T10374] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1484.872511][T10374] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 1485.302057][T13855] usb 2-1: USB disconnect, device number 28 [ 1486.780381][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2814'. [ 1487.159278][T10398] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1487.323048][T10398] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1487.323429][T10398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.323704][T10398] usb 1-1: Product: syz [ 1487.323795][T10398] usb 1-1: Manufacturer: syz [ 1487.323859][T10398] usb 1-1: SerialNumber: syz [ 1490.739343][T14805] netlink: 'syz.1.2820': attribute type 13 has an invalid length. [ 1496.919592][ T4197] usb 1-1: USB disconnect, device number 16 [ 1497.769106][ T4197] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1497.929389][ T4197] usb 1-1: Using ep0 maxpacket: 8 [ 1497.933517][ T4197] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 1497.933698][ T4197] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1497.933960][ T4197] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1497.934137][ T4197] usb 1-1: config 0 has no interface number 0 [ 1497.934267][ T4197] usb 1-1: config 0 has no interface number 1 [ 1497.934434][ T4197] usb 1-1: config 0 interface 205 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.934638][ T4197] usb 1-1: config 0 interface 132 altsetting 164 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1497.934866][ T4197] usb 1-1: config 0 interface 132 has no altsetting 0 [ 1497.935043][ T4197] usb 1-1: New USB device found, idVendor=16d8, idProduct=6002, bcdDevice=4b.b5 [ 1497.935164][ T4197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.938050][ T4197] usb 1-1: config 0 descriptor?? [ 1498.161340][ T4197] usb 1-1: string descriptor 0 read error: -71 [ 1498.163431][ T4197] option 1-1:0.205: GSM modem (1-port) converter detected [ 1498.166919][ T4197] option 1-1:0.132: GSM modem (1-port) converter detected [ 1498.187939][ T4197] usb 1-1: USB disconnect, device number 17 [ 1498.190502][ T4197] option 1-1:0.205: device disconnected [ 1498.191542][ T4197] option 1-1:0.132: device disconnected [ 1498.283698][T14856] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 1498.328347][T14856] bond0: entered promiscuous mode [ 1498.329564][T14856] bond_slave_0: entered promiscuous mode [ 1498.330283][T14856] bond_slave_1: entered promiscuous mode [ 1498.331731][T14856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1498.334428][T14856] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1499.259155][ T4197] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1499.409187][ T4197] usb 1-1: Using ep0 maxpacket: 8 [ 1499.421441][ T4197] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1499.421711][ T4197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.421975][ T4197] usb 1-1: Product: syz [ 1499.422091][ T4197] usb 1-1: Manufacturer: syz [ 1499.422196][ T4197] usb 1-1: SerialNumber: syz [ 1499.426895][ T4197] usb 1-1: config 0 descriptor?? [ 1504.099590][T10398] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1504.269427][T10398] usb 2-1: Using ep0 maxpacket: 8 [ 1504.273552][T10398] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1504.274983][T10398] usb 2-1: config 0 has no interface number 0 [ 1504.282987][T10398] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1504.283625][T10398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.284943][T10398] usb 2-1: Product: syz [ 1504.285404][T10398] usb 2-1: Manufacturer: syz [ 1504.286276][T10398] usb 2-1: SerialNumber: syz [ 1504.294095][T10398] usb 2-1: config 0 descriptor?? [ 1504.510291][T14945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14945 comm=syz.1.2839 [ 1504.522120][T10398] usb 2-1: USB disconnect, device number 29 [ 1504.703427][ T31] audit: type=1400 audit(1504.640:367): avc: denied { bind } for pid=14965 comm="syz.1.2843" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1509.651547][ T4197] usb 1-1: USB disconnect, device number 18 [ 1511.289067][ T4197] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1511.393030][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1511.457153][ T4197] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1511.459539][ T4197] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1511.462391][ T4197] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1511.463976][ T4197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.475258][T14995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1511.491767][ T4197] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1511.687497][T10398] usb 1-1: USB disconnect, device number 19 [ 1513.389793][T10414] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1513.592651][T10414] usb 1-1: config 0 has no interfaces? [ 1514.260580][T10414] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1514.260832][T10414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.260987][T10414] usb 1-1: Product: syz [ 1514.261144][T10414] usb 1-1: Manufacturer: syz [ 1514.261252][T10414] usb 1-1: SerialNumber: syz [ 1514.264309][T10414] usb 1-1: config 0 descriptor?? [ 1515.082487][T15034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1515.608517][T15034] could not allocate digest TFM handle poly1305-simd [ 1523.189323][T10398] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1523.339392][T10398] usb 2-1: Using ep0 maxpacket: 32 [ 1523.343368][T10398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1523.343582][T10398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1523.360569][T10398] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1523.360783][T10398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.360877][T10398] usb 2-1: Product: syz [ 1523.360912][T10398] usb 2-1: Manufacturer: syz [ 1523.360941][T10398] usb 2-1: SerialNumber: syz [ 1523.363476][T10398] usb 2-1: config 0 descriptor?? [ 1523.373727][T10398] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 1523.374676][T10398] cyphidcom ttyUSB0: required endpoint is missing [ 1526.790031][ T11] usb 1-1: USB disconnect, device number 20 [ 1526.965234][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1526.966201][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1528.489322][T13109] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1528.657292][T13109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1528.657514][T13109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1528.670450][T13109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1528.670585][T13109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1528.670650][T13109] usb 1-1: SerialNumber: syz [ 1528.692419][T13109] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1528.693261][T13109] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1528.720785][T13109] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1528.724889][T13109] scsi host0: usb-storage 1-1:1.0 [ 1530.652100][T15113] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1536.830910][T13109] usb 2-1: USB disconnect, device number 30 [ 1536.832190][T13109] cypress_m8 2-1:0.0: device disconnected [ 1542.519134][T15126] usb 1-1: USB disconnect, device number 21 [ 1542.719720][T15126] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1542.879210][T15126] usb 1-1: Using ep0 maxpacket: 16 [ 1542.886018][T15126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.889079][T15126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1542.899874][T15126] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.900127][T15126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.909687][T15126] usb 1-1: Product: syz [ 1542.910020][T15126] usb 1-1: Manufacturer: syz [ 1542.910230][T15126] usb 1-1: SerialNumber: syz [ 1543.127527][T15126] usb 1-1: 0:2 : does not exist [ 1543.145405][T15126] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1543.179189][T15126] usb 1-1: USB disconnect, device number 22 [ 1543.989511][T15126] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1544.179009][T15126] usb 1-1: Using ep0 maxpacket: 16 [ 1544.204547][T15126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1544.206642][T15126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1544.207005][T15126] usb 1-1: can't read configurations, error -71 [ 1544.619321][T15177] vlan3: entered promiscuous mode [ 1544.619760][T15177] vlan2: entered promiscuous mode [ 1544.619862][T15177] erspan0: entered promiscuous mode [ 1545.429056][T15126] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1545.590741][T15126] usb 1-1: Using ep0 maxpacket: 16 [ 1545.620320][T15126] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1545.620667][T15126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.620757][T15126] usb 1-1: Product: syz [ 1545.620818][T15126] usb 1-1: Manufacturer: syz [ 1545.620882][T15126] usb 1-1: SerialNumber: syz [ 1545.624333][T15126] usb 1-1: config 0 descriptor?? [ 1545.660983][T15126] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1545.663065][T15126] usb 1-1: Detected FT-X [ 1545.851266][T15126] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1546.294219][T15126] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1546.489197][T15126] usb 1-1: USB disconnect, device number 25 [ 1546.520491][T15126] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1546.528536][T15126] ftdi_sio 1-1:0.0: device disconnected [ 1547.110563][ T11] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1547.274103][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.274334][ T11] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1547.274486][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.279314][ T11] usb 1-1: config 0 descriptor?? [ 1547.770188][ T11] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 1547.792179][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input11 [ 1547.942424][ T11] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1551.468155][T15236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.472347][T15236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.989179][ T4148] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1556.139193][ T4148] usb 2-1: Using ep0 maxpacket: 16 [ 1556.144112][ T4148] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1556.144347][ T4148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1556.158025][ T4148] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1556.158257][ T4148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.158460][ T4148] usb 2-1: Product: syz [ 1556.158501][ T4148] usb 2-1: Manufacturer: syz [ 1556.158530][ T4148] usb 2-1: SerialNumber: syz [ 1556.168071][ T4148] usb 2-1: config 0 descriptor?? [ 1561.736611][ T11] usb 1-1: USB disconnect, device number 26 [ 1563.919438][T10398] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1563.920715][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1564.069520][T10398] usb 1-1: device descriptor read/64, error -32 [ 1564.319171][T10398] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1564.479181][T10398] usb 1-1: Using ep0 maxpacket: 8 [ 1564.496723][T10398] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.497741][T10398] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1564.499035][T10398] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1564.500378][T10398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.412116][T10398] usb 2-1: USB disconnect, device number 31 [ 1574.649425][ T3765] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1574.824104][ T3765] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1574.824326][ T3765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.824478][ T3765] usb 2-1: Product: syz [ 1574.824586][ T3765] usb 2-1: Manufacturer: syz [ 1574.824694][ T3765] usb 2-1: SerialNumber: syz [ 1577.671155][T10398] usb 1-1: USB disconnect, device number 28 [ 1578.089766][T10398] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1578.250069][T10398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.251112][T10398] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1578.254090][T10398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.260555][T10398] usb 1-1: config 0 descriptor?? [ 1578.493375][T10398] usbhid 1-1:0.0: can't add hid device: -71 [ 1578.494507][T10398] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1578.503860][T10398] usb 1-1: USB disconnect, device number 29 [ 1578.939161][T10398] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1579.099854][T10398] usb 1-1: Using ep0 maxpacket: 16 [ 1579.107576][T10398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.108562][T10398] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1579.110096][T10398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.112837][T10398] usb 1-1: config 0 descriptor?? [ 1579.548473][T10398] kye 0003:0458:5016.0005: control desc unexpectedly large [ 1579.554274][T10398] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0005/input/input12 [ 1579.558326][T10398] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0005/input/input13 [ 1579.633188][T10398] kye 0003:0458:5016.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1580.147090][T15126] usb 1-1: USB disconnect, device number 30 [ 1580.539129][T15126] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1580.692208][T15126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.697332][T15126] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1580.698626][T15126] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1580.709142][T15126] usb 1-1: Product: syz [ 1580.709300][T15126] usb 1-1: Manufacturer: syz [ 1580.709410][T15126] usb 1-1: SerialNumber: syz [ 1580.713483][T15126] usb 1-1: config 0 descriptor?? [ 1580.716152][T15126] hub 1-1:0.0: bad descriptor, ignoring hub [ 1580.716363][T15126] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1581.190024][T15126] usb 1-1: USB disconnect, device number 31 [ 1581.479404][T15126] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1581.639476][T15126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.639901][T15126] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1581.639990][T15126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.644606][T15126] usb 1-1: config 0 descriptor?? [ 1582.072015][T15126] razer 0003:1532:010D.0006: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0 [ 1582.268606][T10398] usb 1-1: USB disconnect, device number 32 [ 1584.435401][T15126] usb 2-1: USB disconnect, device number 32 [ 1585.429333][T15126] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1585.649165][T15126] usb 2-1: Using ep0 maxpacket: 16 [ 1585.659816][T15126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.660673][T15126] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1585.661248][T15126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.691769][T15126] usb 2-1: config 0 descriptor?? [ 1586.396737][T15126] usbhid 2-1:0.0: can't add hid device: -71 [ 1586.409748][T15126] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1586.415377][T15126] usb 2-1: USB disconnect, device number 33 [ 1591.289468][T15126] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1591.452358][T15126] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.453063][T15126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1591.453535][T15126] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1591.454579][T15126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.456638][T15126] usb 2-1: config 0 descriptor?? [ 1591.960121][T15126] kye 0003:0458:5013.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1591.979860][T15126] kye 0003:0458:5013.0007: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 1591.980573][T15126] kye 0003:0458:5013.0007: tablet-enabling feature report not found [ 1591.981134][T15126] kye 0003:0458:5013.0007: tablet enabling failed [ 1592.151239][T15126] usb 2-1: USB disconnect, device number 34 [ 1592.629197][T13855] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1592.780329][T13855] usb 2-1: Using ep0 maxpacket: 16 [ 1592.792437][T13855] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1592.792618][T13855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1592.805436][T13855] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1592.805630][T13855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.805784][T13855] usb 2-1: Product: syz [ 1592.805829][T13855] usb 2-1: Manufacturer: syz [ 1592.805858][T13855] usb 2-1: SerialNumber: syz [ 1592.812077][T13855] usb 2-1: config 0 descriptor?? [ 1596.617116][ T31] audit: type=1400 audit(1596.550:368): avc: denied { execute } for pid=15518 comm="syz.0.2912" path="/dev/loop6" dev="devtmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1596.663926][ T31] audit: type=1400 audit(1596.600:369): avc: denied { map } for pid=15520 comm="syz.0.2913" path="/dev/nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1603.057494][ T4148] usb 2-1: USB disconnect, device number 35 [ 1603.191960][T15540] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1603.193166][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1603.195023][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1603.940959][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2916'. [ 1604.290272][ T4148] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1604.459661][ T4148] usb 2-1: Using ep0 maxpacket: 32 [ 1604.478622][ T4148] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1604.512821][ T4148] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1604.514126][ T4148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.518060][ T4148] usb 2-1: Product: syz [ 1604.523516][ T4148] usb 2-1: Manufacturer: syz [ 1604.526047][ T4148] usb 2-1: SerialNumber: syz [ 1604.537570][ T4148] usb 2-1: config 0 descriptor?? [ 1605.001392][ T4148] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1605.439401][ T4148] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1605.657949][T10374] usb 2-1: USB disconnect, device number 36 [ 1606.434972][ T4148] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1606.609509][ T4148] usb 2-1: Using ep0 maxpacket: 8 [ 1606.632656][ T4148] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1606.633389][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1606.635305][ T4148] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1606.636685][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.638164][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1606.651466][ T4148] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1606.652128][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1606.654159][ T4148] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1606.655731][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.657183][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1606.661555][ T4148] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1606.662128][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1606.663811][ T4148] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1606.665470][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.666805][ T4148] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1606.675347][ T4148] usb 2-1: string descriptor 0 read error: -22 [ 1606.675900][ T4148] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1606.676472][ T4148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.699184][ T4148] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1607.003969][ T4148] usb 2-1: USB disconnect, device number 37 [ 1607.809690][ T4148] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1607.975058][ T4148] usb 2-1: Using ep0 maxpacket: 32 [ 1607.979618][ T4148] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1607.979812][ T4148] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.979942][ T4148] usb 2-1: config 0 has no interface number 0 [ 1607.980091][ T4148] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1607.980241][ T4148] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1607.990415][ T4148] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1607.990617][ T4148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.990762][ T4148] usb 2-1: Product: syz [ 1607.990881][ T4148] usb 2-1: Manufacturer: syz [ 1607.990982][ T4148] usb 2-1: SerialNumber: syz [ 1607.994080][ T4148] usb 2-1: config 0 descriptor?? [ 1608.227194][ T4148] usb 2-1: USB disconnect, device number 38 [ 1608.691595][T10374] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1608.895999][T10374] usb 2-1: Using ep0 maxpacket: 32 [ 1608.921389][T10374] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1608.921566][T10374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.921755][T10374] usb 2-1: config 0 has no interface number 0 [ 1608.921858][T10374] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1608.921940][T10374] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1608.948026][T10374] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1608.948273][T10374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.948443][T10374] usb 2-1: Product: syz [ 1608.948550][T10374] usb 2-1: Manufacturer: syz [ 1608.948653][T10374] usb 2-1: SerialNumber: syz [ 1608.971751][T10374] usb 2-1: config 0 descriptor?? [ 1609.709276][T13109] usb 2-1: USB disconnect, device number 39 [ 1610.239725][T13109] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1610.401331][T13109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1610.402243][T13109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.410896][T13109] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1610.411630][T13109] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1610.412456][T13109] usb 2-1: Manufacturer: syz [ 1610.415084][T13109] usb 2-1: config 0 descriptor?? [ 1610.432145][T13109] hub 2-1:0.0: USB hub found [ 1610.640949][T13109] hub 2-1:0.0: 1 port detected [ 1611.270340][ T1057] hub 2-1:0.0: activate --> -90 [ 1611.474237][ T3765] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1611.474771][T13855] usb 2-1: USB disconnect, device number 40 [ 1611.594735][T11719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1612.380082][ T3765] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1612.529570][ T3765] usb 1-1: Using ep0 maxpacket: 8 [ 1612.557928][ T3765] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1612.558557][ T3765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.560332][ T3765] usb 1-1: Product: syz [ 1612.561475][ T3765] usb 1-1: Manufacturer: syz [ 1612.562321][ T3765] usb 1-1: SerialNumber: syz [ 1612.564773][ T3765] usb 1-1: config 0 descriptor?? [ 1613.297915][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2939'. [ 1613.298214][T15691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2939'. [ 1613.337669][T15693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1613.619284][T13855] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1613.769985][T13855] usb 2-1: Using ep0 maxpacket: 32 [ 1613.777763][T13855] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1613.794483][T13855] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1613.794793][T13855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.796573][T13855] usb 2-1: Product: syz [ 1613.796841][T13855] usb 2-1: Manufacturer: syz [ 1613.797062][T13855] usb 2-1: SerialNumber: syz [ 1613.802340][T13855] usb 2-1: config 0 descriptor?? [ 1614.023024][T13855] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 1614.023287][T13855] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1614.033933][T13855] usb 2-1: USB disconnect, device number 41 [ 1614.499189][T13855] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1614.671661][T13855] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1614.672035][T13855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.672137][T13855] usb 2-1: Product: syz [ 1614.672207][T13855] usb 2-1: Manufacturer: syz [ 1614.672268][T13855] usb 2-1: SerialNumber: syz [ 1614.676599][T13855] usb 2-1: config 0 descriptor?? [ 1615.899371][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1622.795443][T10398] usb 1-1: USB disconnect, device number 33 [ 1624.219118][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1624.919395][T10398] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1624.929344][ T3765] usb 2-1: USB disconnect, device number 42 [ 1625.003625][T15776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2950'. [ 1625.072699][T10398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.072946][T10398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1625.076326][T10398] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1625.076478][T10398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1625.076640][T10398] usb 1-1: SerialNumber: syz [ 1625.285674][T10398] usb 1-1: 0:2 : does not exist [ 1625.313093][T10398] usb 1-1: USB disconnect, device number 34 [ 1625.425814][T15802] 8<--- cut here --- [ 1625.426497][T15802] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 1625.427182][T15802] [0000000e] *pgd=85795003, *pmd=df795003 [ 1625.430692][T15802] Internal error: Oops: 205 [#1] SMP ARM [ 1625.431522][T15802] Modules linked in: [ 1625.432000][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.0.2953 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1625.432359][T15802] Hardware name: ARM-Versatile Express [ 1625.432695][T15802] PC is at io_buffer_select+0x50/0x18c [ 1625.433041][T15802] LR is at xa_load+0x68/0xa4 [ 1625.433325][T15802] pc : [<80889b64>] lr : [<81a4c394>] psr: 20000013 [ 1625.433609][T15802] sp : dfe5dde8 ip : dfe5dda8 fp : dfe5de04 [ 1625.433871][T15802] r10: 848f0c80 r9 : 00000000 r8 : 80000001 [ 1625.434138][T15802] r7 : dfe5de20 r6 : 00000000 r5 : 84ef7900 r4 : 84edd540 [ 1625.434572][T15802] r3 : 00000001 r2 : 00000000 r1 : 85414c80 r0 : 00000000 [ 1625.434914][T15802] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1625.435276][T15802] Control: 30c5387d Table: 84da2140 DAC: fffffffd [ 1625.435752][T15802] Register r0 information: NULL pointer [ 1625.436450][T15802] Register r1 information: slab kmalloc-64 start 85414c80 pointer offset 0 size 64 [ 1625.437214][T15802] Register r2 information: NULL pointer [ 1625.437512][T15802] Register r3 information: non-paged memory [ 1625.437724][T15802] Register r4 information: slab io_kiocb start 84edd540 pointer offset 0 size 192 [ 1625.438065][T15802] Register r5 information: slab kmalloc-2k start 84ef7800 pointer offset 256 size 2048 [ 1625.438363][T15802] Register r6 information: NULL pointer [ 1625.438535][T15802] Register r7 information: 2-page vmalloc region starting at 0xdfe5c000 allocated at kernel_clone+0xac/0x3e4 [ 1625.439198][T15802] Register r8 information: non-slab/vmalloc memory [ 1625.439475][T15802] Register r9 information: NULL pointer [ 1625.439693][T15802] Register r10 information: slab sock_inode_cache start 848f0c80 pointer offset 0 size 576 [ 1625.440006][T15802] Register r11 information: 2-page vmalloc region starting at 0xdfe5c000 allocated at kernel_clone+0xac/0x3e4 [ 1625.440422][T15802] Register r12 information: 2-page vmalloc region starting at 0xdfe5c000 allocated at kernel_clone+0xac/0x3e4 [ 1625.440896][T15802] Process syz.0.2953 (pid: 15802, stack limit = 0xdfe5c000) [ 1625.441271][T15802] Stack: (0xdfe5dde8 to 0xdfe5e000) [ 1625.441465][T15802] dde0: 84edd540 8533c500 00000000 00000040 dfe5de54 dfe5de08 [ 1625.441701][T15802] de00: 80892e90 80889b20 84ef7928 000000e8 85f00000 00000001 01000000 00000000 [ 1625.441913][T15802] de20: 00000000 b3699d7b dfe5de54 84edd540 81cf0bd4 00000000 00000000 00000000 [ 1625.442189][T15802] de40: 80000001 83242400 dfe5de7c dfe5de58 80882314 80892c6c 84edd540 80000001 [ 1625.442402][T15802] de60: 0000000a 81cf0b5c 85535300 00000000 dfe5debc dfe5de80 80886de4 808822d4 [ 1625.442802][T15802] de80: 00000000 00000000 00000000 81cf0bd4 00000000 84ef7800 84edd5ac 84edd540 [ 1625.443067][T15802] dea0: 85f00000 00000000 00000000 83242400 dfe5df14 dfe5dec0 808878fc 80886da8 [ 1625.443440][T15802] dec0: 8088e2b8 81a4c338 dfe5df24 dfe5ded8 00000001 00000001 81cf0b5c 00000001 [ 1625.443703][T15802] dee0: 84ef7800 b3699d7b 85535c00 00000000 84ef7800 000027e2 85535c00 00000000 [ 1625.443942][T15802] df00: 83242400 00000000 dfe5dfa4 dfe5df18 808883a4 808876fc ecac8b10 84ef7840 [ 1625.444227][T15802] df20: 00000000 00000000 81a50110 81a4ffe0 dfe5df54 dfe5df40 8026b438 8029ce24 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1625.444464][T15802] df40: dfe5dfb0 40000000 dfe5df84 dfe5df58 802229dc 8026b3f4 00000000 8281d05c [ 1625.444797][T15802] df60: dfe5dfb0 0014c490 ecac8b10 80222930 00000000 b3699d7b dfe5dfac 00000000 [ 1625.445147][T15802] df80: 00000000 002e630c 000001aa 8020029c 83242400 000001aa 00000000 dfe5dfa8 [ 1625.445470][T15802] dfa0: 80200060 80888278 00000000 00000000 00000007 000027e2 00000000 00000000 [ 1625.445718][T15802] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bca0bc [ 1625.445981][T15802] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 60000010 00000007 00000000 00000000 [ 1625.446285][T15802] Call trace: [ 1625.446466][T15802] [<80889b14>] (io_buffer_select) from [<80892e90>] (io_recvmsg+0x230/0x420) [ 1625.446712][T15802] r7:00000040 r6:00000000 r5:8533c500 r4:84edd540 [ 1625.446883][T15802] [<80892c60>] (io_recvmsg) from [<80882314>] (__io_issue_sqe+0x4c/0x1c0) [ 1625.447153][T15802] r10:83242400 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0bd4 [ 1625.447430][T15802] r4:84edd540 [ 1625.447540][T15802] [<808822c8>] (__io_issue_sqe) from [<80886de4>] (io_issue_sqe+0x48/0x59c) [ 1625.447857][T15802] r9:00000000 r8:85535300 r7:81cf0b5c r6:0000000a r5:80000001 r4:84edd540 [ 1625.448057][T15802] [<80886d9c>] (io_issue_sqe) from [<808878fc>] (io_submit_sqes+0x20c/0x938) [ 1625.448338][T15802] r10:83242400 r9:00000000 r8:00000000 r7:85f00000 r6:84edd540 r5:84edd5ac [ 1625.448536][T15802] r4:84ef7800 [ 1625.448637][T15802] [<808876f0>] (io_submit_sqes) from [<808883a4>] (sys_io_uring_enter+0x138/0x780) [ 1625.449128][T15802] r10:00000000 r9:83242400 r8:00000000 r7:85535c00 r6:000027e2 r5:84ef7800 [ 1625.449341][T15802] r4:00000000 [ 1625.449501][T15802] [<8088826c>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1625.449795][T15802] Exception stack(0xdfe5dfa8 to 0xdfe5dff0) [ 1625.449954][T15802] dfa0: 00000000 00000000 00000007 000027e2 00000000 00000000 [ 1625.450311][T15802] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bca0bc [ 1625.450624][T15802] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 1625.450922][T15802] r10:000001aa r9:83242400 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 1625.451307][T15802] r4:00000000 [ 1625.451592][T15802] Code: e3130001 0a00002f e5910000 e1d120be (e1d030be) [ 1625.454401][T15802] ---[ end trace 0000000000000000 ]--- [ 1625.466534][ T31] audit: type=1400 audit(1625.390:370): avc: denied { read } for pid=2912 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1625.467735][ T31] audit: type=1400 audit(1625.390:371): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1625.488826][T15802] Kernel panic - not syncing: Fatal exception [ 1625.490259][T15802] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:33:01 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000002 R02=eb249030 R03=00000030 R04=84514c40 R05=dfe5db38 R06=8295b320 R07=00000001 R08=8282a2b8 R09=00000000 R10=00001693 R11=dfe5dad4 R12=dfe5da78 R13=dfe5dab8 R14=81a5bff4 R15=80a62d48 PSR=800f0193 N--- A S svc32 s00=6d702a20 s01=66643d64 d00=66643d646d702a20 s02=31545b5d s03=32303835 d01=3230383531545b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=554e206c s11=70204c4c d05=70204c4c554e206c s12=746e696f s13=64207265 d06=64207265746e696f s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=7effffff R02=00000000 R03=b5003500 R04=83254800 R05=b5403587 R06=00000000 R07=00000000 R08=02ae64e0 R09=00000001 R10=b5003500 R11=ec6ddf34 R12=83ae64fb R13=ec6ddea0 R14=8046ef20 R15=8046ef20 PSR=80010013 N--- A S svc32 s00=00050000 s01=00000000 d00=0000000000050000 s02=240c0000 s03=ffe90000 d01=ffe90000240c0000 s04=cd470edf s05=7ec32754 d02=7ec32754cd470edf s06=3c5b99a5 s07=070a68eb d03=070a68eb3c5b99a5 s08=6dfb397b s09=5201673d d04=5201673d6dfb397b s10=147812cd s11=6e239416 d05=6e239416147812cd s12=00000005 s13=00000000 d06=0000000000000005 s14=00000000 s15=60150000 d07=6015000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0dafd0ad s33=76d25a11 d16=76d25a110dafd0ad s34=67ffb133 s35=b801887d d17=b801887d67ffb133 s36=9c457755 s37=8bd9e9ec d18=8bd9e9ec9c457755 s38=ff7811aa s39=7c04da85 d19=7c04da85ff7811aa s40=4133c8e0 s41=edb8fa6a d20=edb8fa6a4133c8e0 s42=eb9aa731 s43=580dbf40 d21=580dbf40eb9aa731 s44=4b319851 s45=6f752dfd d22=6f752dfd4b319851 s46=70abb311 s47=ede23a45 d23=ede23a4570abb311 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=00640000 s53=00500000 d26=0050000000640000 s54=003c0000 s55=00280000 d27=00280000003c0000 s56=00140000 s57=00080000 d28=0008000000140000 s58=00000008 s59=00080004 d29=0008000400000008 s60=03e60000 s61=ff8e0000 d30=ff8e000003e60000 s62=0008ffff s63=00000000 d31=000000000008ffff FPSCR: 00000000