last executing test programs: 1.861105031s ago: executing program 1 (id=6089): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 1.550507381s ago: executing program 1 (id=6091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x866}], 0x1}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 1.250642159s ago: executing program 0 (id=6093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NLBL_MGMT_C_LISTALL(r0, 0x0, 0x0) 1.169159895s ago: executing program 0 (id=6094): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) 936.214309ms ago: executing program 0 (id=6095): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 935.92217ms ago: executing program 1 (id=6096): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x2, &(0x7f0000000280)) 760.403203ms ago: executing program 0 (id=6097): r0 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000140)={0x20a40}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 661.988743ms ago: executing program 1 (id=6098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 500.163744ms ago: executing program 0 (id=6099): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) 335.529655ms ago: executing program 1 (id=6100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x91020, &(0x7f0000000180)) 162.158569ms ago: executing program 0 (id=6101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x866}], 0x1}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 0s ago: executing program 1 (id=6102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566305add", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)}], 0x1}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000740)={0x18c, 0x15, 0x0, 0x0, 0x0, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "d5cf07583ff8676f50cd0930a32b6216f0dd25f1e66d40aa63a3b76b58c54b7c1bb87ef8fbb6d31083"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "2fb016ae2d2f2bd7b733f89b9ee24e9933d517f13eb9fe07ffe2ba135da1167da690e541dad06c72742c62d780e6be426aaccdf414ba131fc86c4304e1b2fe7c1307f8a9ecd189addd7b4a4738092ff617b1fe314bf72728afa34be2ea535ec0a659b149af1f8d0316a1f3c6f117f124715294d8f1335bb4624fd1771074b65792db0e3bca8f336832b2142a16583cbf96967904e41a212060cf56fa5a102ecb4ee926276aacdfbeb4344fae0daa1c0b9e2db1eca5d5f14a3097f1a34b6c5e00010f47d512e597aef2746c2a96f5"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "a9a08897c0afd91d90e34641fe08abfd3ff75d63b3"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "2f80fea4a635d3dc32e34ae94fd5f95b5202f0387eda45227ded97fa10cc80e2d609f7ecec34171fcace0fff80f426a39c75bdc69d61236196b42a5b4c286f82e18bf02977172e524426ba185fb8efe0c8"}]}, 0x18c}}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) kernel console output (not intermixed with test programs): er: ÑŒ [ 2109.844987][ T7709] usb 1-1: SerialNumber: syz [ 2110.206437][ T7709] cdc_ncm 1-1:1.0: bind() failure [ 2110.212475][ T7709] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2110.213356][ T7709] cdc_ncm 1-1:1.1: bind() failure [ 2110.242743][ T7709] usb 1-1: USB disconnect, device number 55 [ 2110.797072][T17799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17799 comm=syz.0.2587 [ 2111.206447][T17802] FAULT_INJECTION: forcing a failure. [ 2111.206447][T17802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2111.208889][T17802] CPU: 0 UID: 0 PID: 17802 Comm: syz.0.2588 Not tainted 6.11.0-rc6-syzkaller #0 [ 2111.209744][T17802] Hardware name: ARM-Versatile Express [ 2111.210239][T17802] Call trace: [ 2111.210647][T17802] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2111.211715][T17802] r7:84660480 r6:00000000 r5:60000013 r4:8200ca84 [ 2111.212419][T17802] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2111.213390][T17802] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2111.214354][T17802] r5:00000000 r4:8274a3d4 [ 2111.214672][T17802] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2111.215570][T17802] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2111.216768][T17802] r6:00000000 r5:dff4dea8 r4:00000024 [ 2111.217484][T17802] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2111.218444][T17802] [<808be6b0>] (should_fail_usercopy) from [<8080d364>] (_copy_from_iter+0x64/0x5f8) [ 2111.219179][T17802] [<8080d300>] (_copy_from_iter) from [<8156fb40>] (netlink_sendmsg+0x19c/0x43c) [ 2111.220087][T17802] r10:00000000 r9:00000000 r8:dff4dea8 r7:859f4c00 r6:00000024 r5:847b7d80 [ 2111.221213][T17802] r4:dff4de98 [ 2111.221591][T17802] [<8156f9a4>] (netlink_sendmsg) from [<81450154>] (__sock_sendmsg+0x44/0x78) [ 2111.222725][T17802] r10:00000122 r9:838abc00 r8:00000004 r7:8332c000 r6:8332c000 r5:dff4de98 [ 2111.223631][T17802] r4:00000000 [ 2111.224119][T17802] [<81450110>] (__sock_sendmsg) from [<8145271c>] (__sys_sendto+0x108/0x14c) [ 2111.225301][T17802] r7:8332c000 r6:76b49e1c r5:00000000 r4:00000000 [ 2111.225650][T17802] [<81452614>] (__sys_sendto) from [<8145277c>] (sys_sendto+0x1c/0x24) [ 2111.226036][T17802] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b49e1c [ 2111.226517][T17802] [<81452760>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2111.227423][T17802] Exception stack(0xdff4dfa8 to 0xdff4dff0) [ 2111.228228][T17802] dfa0: 76b49e1c 0000000c 00000004 76b49eb0 00000024 00000000 [ 2111.229279][T17802] dfc0: 76b49e1c 0000000c 00000000 00000122 00000004 00000000 76b49eb0 76b4b0bc [ 2111.230324][T17802] dfe0: 00000000 76b49df0 000d8318 00135268 [ 2111.420698][T16309] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 2111.426333][T16309] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2111.520862][T17810] fuse: Unknown parameter '0x0000000000000003' [ 2112.866380][T16369] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 2113.017757][T16369] usb 2-1: device descriptor read/64, error -32 [ 2113.285904][T16369] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 2113.507073][T17826] fuse: Unknown parameter '0x0000000000000003' [ 2114.109608][ T7709] usb 2-1: USB disconnect, device number 50 [ 2115.008924][T17838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17838 comm=syz.1.2596 [ 2115.935967][ T7709] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2116.144201][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.144851][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2116.146407][ T7709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2116.147345][ T7709] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2116.147706][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.154211][ T7709] usb 1-1: config 0 descriptor?? [ 2117.897903][T17852] fuse: Unknown parameter '0x0000000000000003' [ 2118.375513][ T31] audit: type=1400 audit(2118.290:1793): avc: denied { create } for pid=17853 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2118.406620][ T31] audit: type=1400 audit(2118.320:1794): avc: denied { write } for pid=17853 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2118.748869][T17856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17856 comm=syz.1.2601 [ 2119.529105][ T7709] usbhid 1-1:0.0: can't add hid device: -71 [ 2119.529857][ T7709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2119.538597][ T7709] usb 1-1: USB disconnect, device number 56 [ 2120.175584][ T31] audit: type=1400 audit(2120.090:1795): avc: denied { map } for pid=17872 comm="syz.0.2604" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2120.179065][ T31] audit: type=1400 audit(2120.090:1796): avc: denied { read write } for pid=17872 comm="syz.0.2604" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2120.357684][T17873] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 2120.359135][ T31] audit: type=1400 audit(2120.280:1797): avc: denied { relabelfrom } for pid=17872 comm="syz.0.2604" name="NFC_LLCP" dev="sockfs" ino=32889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2120.366134][ T31] audit: type=1400 audit(2120.280:1798): avc: denied { relabelto } for pid=17872 comm="syz.0.2604" name="NFC_LLCP" dev="sockfs" ino=32889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=nfc_socket permissive=1 trawcon="system_u:object_r:watchdog_device_t:s0" [ 2120.387884][ T31] audit: type=1400 audit(2120.300:1799): avc: denied { ioctl } for pid=17872 comm="syz.0.2604" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32661 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2121.713590][T17881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17881 comm=syz.1.2606 [ 2122.317855][T16324] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2122.529050][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2122.529709][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2122.530104][T16324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2122.530684][T16324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2122.531073][T16324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.541659][T16324] usb 2-1: config 0 descriptor?? [ 2122.842411][T16324] usbhid 2-1:0.0: can't add hid device: -71 [ 2122.843040][T16324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2122.857849][T16324] usb 2-1: USB disconnect, device number 51 [ 2124.765879][T16324] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2124.957529][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.958206][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2124.958599][T16324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2124.959107][T16324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2124.959524][T16324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.969422][T16324] usb 2-1: config 0 descriptor?? [ 2125.200355][T16324] usbhid 2-1:0.0: can't add hid device: -71 [ 2125.200933][T16324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2125.216511][T16324] usb 2-1: USB disconnect, device number 52 [ 2125.695774][ T31] audit: type=1400 audit(2125.600:1800): avc: denied { create } for pid=17931 comm="syz.0.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2126.596333][T16324] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2126.822639][T16324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.823265][T16324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.823640][T16324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2126.824152][T16324] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2126.824512][T16324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.844972][T16324] usb 1-1: config 0 descriptor?? [ 2127.188946][T16324] usbhid 1-1:0.0: can't add hid device: -71 [ 2127.189585][T16324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2127.195067][T16324] usb 1-1: USB disconnect, device number 57 [ 2128.877129][T10266] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2129.079818][T10266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.080340][T10266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.080687][T10266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2129.081143][T10266] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2129.081466][T10266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.091423][T10266] usb 1-1: config 0 descriptor?? [ 2129.397115][T10266] usbhid 1-1:0.0: can't add hid device: -71 [ 2129.397717][T10266] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2129.401946][T10266] usb 1-1: USB disconnect, device number 58 [ 2130.747822][T18000] serio: Serial port pts0 [ 2134.895489][T10266] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2135.118637][T10266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.119310][T10266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2135.119730][T10266] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2135.120239][T10266] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2135.120629][T10266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.124419][T10266] usb 2-1: config 0 descriptor?? [ 2135.404283][T10266] usbhid 2-1:0.0: can't add hid device: -71 [ 2135.404979][T10266] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2135.420327][T10266] usb 2-1: USB disconnect, device number 53 [ 2137.694094][T18049] serio: Serial port pts0 [ 2140.135746][T16369] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2140.348824][T16369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2140.349242][T16369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2140.349577][T16369] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2140.350055][T16369] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2140.350420][T16369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.354299][T16369] usb 2-1: config 0 descriptor?? [ 2140.640199][T16369] usbhid 2-1:0.0: can't add hid device: -71 [ 2140.640794][T16369] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2140.643697][T16369] usb 2-1: USB disconnect, device number 54 [ 2144.043960][T18106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18106 comm=syz.0.2658 [ 2144.732403][T18112] serio: Serial port pts0 [ 2146.353176][T18123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18123 comm=syz.1.2663 [ 2146.856442][T16309] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2147.068620][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.069466][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.069893][T16309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2147.070473][T16309] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2147.070862][T16309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.075094][T16309] usb 2-1: config 0 descriptor?? [ 2147.574038][T16309] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 2147.594381][T16309] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2147.938093][ T5268] usb 2-1: USB disconnect, device number 55 [ 2148.632294][T18153] FAULT_INJECTION: forcing a failure. [ 2148.632294][T18153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2148.633080][T18153] CPU: 1 UID: 0 PID: 18153 Comm: syz.1.2667 Not tainted 6.11.0-rc6-syzkaller #0 [ 2148.633526][T18153] Hardware name: ARM-Versatile Express [ 2148.633814][T18153] Call trace: [ 2148.634093][T18153] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2148.634639][T18153] r7:00000000 r6:00000000 r5:60000013 r4:8200ca84 [ 2148.634946][T18153] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2148.635368][T18153] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2148.636182][T18153] r5:00000000 r4:8274a3d4 [ 2148.636457][T18153] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2148.636924][T18153] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2148.637389][T18153] r6:00000000 r5:eb615f68 r4:00000002 [ 2148.637693][T18153] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2148.638155][T18153] [<808be6b0>] (should_fail_usercopy) from [<8053f584>] (simple_read_from_buffer+0x8c/0x134) [ 2148.638678][T18153] [<8053f4f8>] (simple_read_from_buffer) from [<805b4374>] (proc_fail_nth_read+0xb8/0x100) [ 2148.639608][T18153] r10:00000001 r9:805b42bc r8:00000002 r7:eb615f68 r6:0000000f r5:76bf2f30 [ 2148.640191][T18153] r4:852ca400 r3:eb615e9f [ 2148.640619][T18153] [<805b42bc>] (proc_fail_nth_read) from [<805074ac>] (vfs_read+0x98/0x324) [ 2148.641065][T18153] r8:76bf2f30 r7:eb615f68 r6:852ca400 r5:0000000f r4:8a00ed80 [ 2148.641437][T18153] [<80507414>] (vfs_read) from [<8050815c>] (ksys_read+0x78/0xf8) [ 2148.641868][T18153] r10:00000003 r9:852ca400 r8:8020029c r7:00000000 r6:00000000 r5:8a00ed80 [ 2148.642295][T18153] r4:8a00ed83 [ 2148.642521][T18153] [<805080e4>] (ksys_read) from [<805081ec>] (sys_read+0x10/0x14) [ 2148.642921][T18153] r7:00000003 r6:00000004 r5:76bf2f30 r4:0000000f [ 2148.643225][T18153] [<805081dc>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2148.643668][T18153] Exception stack(0xeb615fa8 to 0xeb615ff0) [ 2148.643982][T18153] 5fa0: 0000000f 76bf2f30 00000004 76bf2f30 0000000f 00000000 [ 2148.644407][T18153] 5fc0: 0000000f 76bf2f30 00000004 00000003 00000000 00006364 003d0f00 76bf30bc [ 2148.644796][T18153] 5fe0: 00000158 76bf2ed0 000d8318 00130ca4 [ 2148.887269][T18155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18155 comm=syz.1.2668 [ 2151.009830][T18167] misc userio: The device must be registered before sending interrupts [ 2151.590484][T18171] serio: Serial port pts0 [ 2152.146537][ T31] audit: type=1400 audit(2152.060:1801): avc: denied { execute } for pid=18178 comm="syz.1.2677" name="file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2155.558853][T18190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18190 comm=syz.1.2679 [ 2157.434342][T18203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18203 comm=syz.0.2684 [ 2158.771587][ T31] audit: type=1400 audit(2158.690:1802): avc: denied { getopt } for pid=18211 comm="syz.0.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2159.733073][T18215] serio: Serial port pts0 [ 2160.096951][T18218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18218 comm=syz.0.2689 [ 2165.509477][T18238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18238 comm=syz.1.2694 [ 2166.784756][T18249] serio: Serial port pts0 [ 2174.969630][T18290] serio: Serial port pts0 [ 2176.588077][T18298] FAULT_INJECTION: forcing a failure. [ 2176.588077][T18298] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.590694][T18298] CPU: 0 UID: 0 PID: 18298 Comm: syz.1.2709 Not tainted 6.11.0-rc6-syzkaller #0 [ 2176.591300][T18298] Hardware name: ARM-Versatile Express [ 2176.591567][T18298] Call trace: [ 2176.591797][T18298] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2176.592246][T18298] r7:838ae000 r6:00000cc0 r5:60000013 r4:8200ca84 [ 2176.592533][T18298] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2176.592914][T18298] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2176.593301][T18298] r5:00000000 r4:8271619c [ 2176.593563][T18298] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2176.594018][T18298] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2176.594957][T18298] r6:00000cc0 r5:ffffffff r4:82cab780 [ 2176.595565][T18298] [<804daf7c>] (should_failslab) from [<804c0398>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2176.596230][T18298] [<804c0348>] (kmem_cache_alloc_node_noprof) from [<8145dd9c>] (__alloc_skb+0x138/0x160) [ 2176.603310][T18298] r10:00040010 r9:ec6b9d1c r8:00000cc0 r7:00000000 r6:82cab780 r5:ffffffff [ 2176.606013][T18298] r4:82606000 [ 2176.606394][T18298] [<8145dc64>] (__alloc_skb) from [<81456c68>] (sock_wmalloc+0x3c/0x60) [ 2176.615298][T18298] r8:00000000 r7:ec6b9e90 r6:00000000 r5:00000000 r4:84d5a400 [ 2176.616041][T18298] [<81456c2c>] (sock_wmalloc) from [<817fdf70>] (l2tp_ip_sendmsg+0x78/0x420) [ 2176.616520][T18298] r5:00000000 r4:84d5a400 [ 2176.616984][T18298] [<817fdef8>] (l2tp_ip_sendmsg) from [<8167b6b0>] (inet_sendmsg+0x40/0x4c) [ 2176.617650][T18298] r10:00040010 r9:ec6b9d1c r8:ec6b9d1c r7:ec6b9ed8 r6:84d5a400 r5:00000000 [ 2176.618095][T18298] r4:ec6b9e90 [ 2176.618304][T18298] [<8167b670>] (inet_sendmsg) from [<81450154>] (__sock_sendmsg+0x44/0x78) [ 2176.618686][T18298] r7:ec6b9ed8 r6:8332d900 r5:ec6b9e90 r4:00000000 [ 2176.618988][T18298] [<81450110>] (__sock_sendmsg) from [<81450ed4>] (____sys_sendmsg+0xbc/0x2cc) [ 2176.619368][T18298] r7:ec6b9ed8 r6:00000000 r5:8332d900 r4:ec6b9e90 [ 2176.619622][T18298] [<81450e18>] (____sys_sendmsg) from [<81453030>] (___sys_sendmsg+0x9c/0xd0) [ 2176.619999][T18298] r10:ec6b9d7c r9:20000840 r8:00040010 r7:ec6b9ed8 r6:8332d900 r5:ec6b9e90 [ 2176.620318][T18298] r4:00000000 [ 2176.620506][T18298] [<81452f94>] (___sys_sendmsg) from [<81453664>] (__sys_sendmmsg+0xd8/0x1c4) [ 2176.620879][T18298] r10:00000000 r9:ec6b9ed8 r8:00040010 r7:00040010 r6:00000001 r5:20000840 [ 2176.621208][T18298] r4:00000000 [ 2176.621463][T18298] [<8145358c>] (__sys_sendmmsg) from [<8145376c>] (sys_sendmmsg+0x1c/0x24) [ 2176.621860][T18298] r10:00000176 r9:838ae000 r8:8020029c r7:00000176 r6:00130d80 r5:00000000 [ 2176.622241][T18298] r4:00000000 [ 2176.622434][T18298] [<81453750>] (sys_sendmmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2176.622800][T18298] Exception stack(0xec6b9fa8 to 0xec6b9ff0) [ 2176.623064][T18298] 9fa0: 00000000 00000000 00000003 20000840 00000001 00040010 [ 2176.623414][T18298] 9fc0: 00000000 00000000 00130d80 00000176 00000000 00006364 003d0f00 76bf30bc [ 2176.623745][T18298] 9fe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2178.884264][ T31] audit: type=1400 audit(2178.800:1803): avc: denied { setattr } for pid=18310 comm="syz.1.2714" name="CAN_J1939" dev="sockfs" ino=34190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2181.327655][ T7709] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2181.517618][ T7709] usb 1-1: device descriptor read/64, error -71 [ 2181.807079][ T7709] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2181.971643][ T7709] usb 1-1: device descriptor read/64, error -71 [ 2182.115729][ T7709] usb usb1-port1: attempt power cycle [ 2182.576073][ T7709] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2182.630731][ T7709] usb 1-1: device descriptor read/8, error -71 [ 2182.926452][ T7709] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2182.959029][ T7709] usb 1-1: device descriptor read/8, error -71 [ 2183.077634][ T7709] usb usb1-port1: unable to enumerate USB device [ 2184.233756][T18339] serio: Serial port pts0 [ 2192.849253][T18378] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=18378 comm=syz.1.2734 [ 2194.023752][T18395] FAULT_INJECTION: forcing a failure. [ 2194.023752][T18395] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.024542][T18395] CPU: 0 UID: 0 PID: 18395 Comm: syz.1.2739 Not tainted 6.11.0-rc6-syzkaller #0 [ 2194.024921][T18395] Hardware name: ARM-Versatile Express [ 2194.025577][T18395] Call trace: [ 2194.025859][T18395] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2194.026610][T18395] r7:83f48c00 r6:00000cc0 r5:60000013 r4:8200ca84 [ 2194.026957][T18395] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2194.027403][T18395] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2194.027823][T18395] r5:00000000 r4:8271619c [ 2194.028064][T18395] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2194.028498][T18395] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2194.028949][T18395] r6:00000cc0 r5:ffffffff r4:82cab780 [ 2194.029233][T18395] [<804daf7c>] (should_failslab) from [<804c0398>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2194.029706][T18395] [<804c0348>] (kmem_cache_alloc_node_noprof) from [<8145dd9c>] (__alloc_skb+0x138/0x160) [ 2194.030214][T18395] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cab780 r5:ffffffff [ 2194.030582][T18395] r4:82606000 [ 2194.030784][T18395] [<8145dc64>] (__alloc_skb) from [<8156f4d0>] (netlink_alloc_large_skb+0x88/0xa0) [ 2194.031257][T18395] r8:00000000 r7:859f5400 r6:00000014 r5:8332c780 r4:00000140 [ 2194.031599][T18395] [<8156f448>] (netlink_alloc_large_skb) from [<8156fad8>] (netlink_sendmsg+0x134/0x43c) [ 2194.032057][T18395] r5:8332c780 r4:dfd15f38 [ 2194.032318][T18395] [<8156f9a4>] (netlink_sendmsg) from [<81450154>] (__sock_sendmsg+0x44/0x78) [ 2194.032774][T18395] r10:20000850 r9:dfd15dd4 r8:dfd15dd4 r7:00000000 r6:8332c780 r5:dfd15f38 [ 2194.033147][T18395] r4:00000000 [ 2194.033353][T18395] [<81450110>] (__sock_sendmsg) from [<814510c4>] (____sys_sendmsg+0x2ac/0x2cc) [ 2194.033807][T18395] r7:00000000 r6:00000000 r5:8332c780 r4:dfd15f38 [ 2194.034110][T18395] [<81450e18>] (____sys_sendmsg) from [<81453030>] (___sys_sendmsg+0x9c/0xd0) [ 2194.034589][T18395] r10:dfd15e34 r9:20000280 r8:20000850 r7:00000000 r6:8332c780 r5:dfd15f38 [ 2194.034951][T18395] r4:00000000 [ 2194.035257][T18395] [<81452f94>] (___sys_sendmsg) from [<81453548>] (sys_sendmsg+0x78/0xbc) [ 2194.035832][T18395] r10:00000128 r9:83f48c00 r8:8020029c r7:20000850 r6:20000280 r5:8332c780 [ 2194.036411][T18395] r4:00000000 [ 2194.036610][T18395] [<814534d0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2194.036999][T18395] Exception stack(0xdfd15fa8 to 0xdfd15ff0) [ 2194.037337][T18395] 5fa0: 00000000 00000000 00000003 20000280 20000850 00000000 [ 2194.037733][T18395] 5fc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76bf30bc [ 2194.038139][T18395] 5fe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2194.038494][T18395] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2200.496205][T16309] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2200.726013][T16309] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2200.727253][T16309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.727638][T16309] usb 2-1: Product: syz [ 2200.727869][T16309] usb 2-1: Manufacturer: syz [ 2200.728116][T16309] usb 2-1: SerialNumber: syz [ 2200.732582][T16309] usb 2-1: config 0 descriptor?? [ 2200.987219][T16309] usb 2-1: USB disconnect, device number 56 [ 2201.588256][T18504] FAULT_INJECTION: forcing a failure. [ 2201.588256][T18504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.589753][T18504] CPU: 1 UID: 0 PID: 18504 Comm: syz.0.2765 Not tainted 6.11.0-rc6-syzkaller #0 [ 2201.590164][T18504] Hardware name: ARM-Versatile Express [ 2201.590435][T18504] Call trace: [ 2201.590641][T18504] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2201.591048][T18504] r7:200001c0 r6:dffd9e30 r5:60000013 r4:8200ca84 [ 2201.591462][T18504] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2201.591884][T18504] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2201.592259][T18504] r5:00000000 r4:8274a3d4 [ 2201.592446][T18504] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2201.592802][T18504] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2201.593157][T18504] r6:dffd9e30 r5:00000000 r4:dffd9f38 [ 2201.593382][T18504] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2201.593736][T18504] [<808be6b0>] (should_fail_usercopy) from [<81452eb4>] (copy_msghdr_from_user+0x50/0x130) [ 2201.594117][T18504] [<81452e64>] (copy_msghdr_from_user) from [<8145300c>] (___sys_sendmsg+0x78/0xd0) [ 2201.594531][T18504] r8:00008090 r7:00000000 r6:831ae780 r5:dffd9f38 r4:dffd9e74 [ 2201.594807][T18504] [<81452f94>] (___sys_sendmsg) from [<81453548>] (sys_sendmsg+0x78/0xbc) [ 2201.595232][T18504] r10:00000128 r9:852ca400 r8:8020029c r7:00008090 r6:200001c0 r5:831ae780 [ 2201.595845][T18504] r4:00000000 [ 2201.596159][T18504] [<814534d0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2201.596549][T18504] Exception stack(0xdffd9fa8 to 0xdffd9ff0) [ 2201.597012][T18504] 9fa0: 00000000 00000000 00000004 200001c0 00008090 00000000 [ 2201.597397][T18504] 9fc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b4b0bc [ 2201.597756][T18504] 9fe0: 76b4aec0 76b4aeb0 000189f0 00132dd0 [ 2201.598023][T18504] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2202.046247][T16207] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2202.234388][T16207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.235018][T16207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2202.235377][T16207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2202.238633][T16207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2202.238981][T16207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.248843][T16207] usb 1-1: config 0 descriptor?? [ 2202.756899][T16207] usbhid 1-1:0.0: can't add hid device: -71 [ 2202.757522][T16207] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2202.762260][T16207] usb 1-1: USB disconnect, device number 63 [ 2204.468371][T16324] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2204.684180][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.684735][T16324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.685049][T16324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2204.686842][T16324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2204.687182][T16324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.689544][T16324] usb 2-1: config 0 descriptor?? [ 2205.224758][T16324] usbhid 2-1:0.0: can't add hid device: -71 [ 2205.225480][T16324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2205.227599][T16324] usb 2-1: USB disconnect, device number 57 [ 2205.258742][T18560] fuse: Bad value for 'fd' [ 2206.319060][T18573] binder: 18572:18573 ioctl 401c5820 20000000 returned -22 [ 2206.332015][T18573] binder: 18572:18573 ioctl c0306201 0 returned -14 [ 2208.536372][T16309] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2208.741665][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2208.742578][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.743202][T16309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2208.743726][T16309] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2208.744073][T16309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.762811][T16309] usb 2-1: config 0 descriptor?? [ 2209.042146][T18584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18584 comm=syz.0.2780 [ 2209.256674][T16309] usbhid 2-1:0.0: can't add hid device: -71 [ 2209.257241][T16309] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2209.262083][T16309] usb 2-1: USB disconnect, device number 58 [ 2209.568093][T18595] fuse: Bad value for 'fd' [ 2211.475820][T16309] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2211.700920][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.701514][T16309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2211.701879][T16309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2211.702383][T16309] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2211.702719][T16309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.706686][T16309] usb 2-1: config 0 descriptor?? [ 2212.213551][T16309] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 2212.219827][T16309] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2212.493262][T16207] usb 2-1: USB disconnect, device number 59 [ 2212.730035][T18633] fuse: Bad value for 'fd' [ 2213.986078][T16207] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2214.172275][T16207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.172648][T16207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.172869][T16207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2214.173165][T16207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2214.173447][T16207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.186755][T16207] usb 1-1: config 0 descriptor?? [ 2214.643231][T16207] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 2214.673586][T16207] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2214.925069][T16309] usb 1-1: USB disconnect, device number 64 [ 2221.041178][ T31] audit: type=1400 audit(2220.960:1804): avc: denied { name_bind } for pid=18715 comm="syz.1.2811" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2254.770205][ T31] audit: type=1400 audit(2254.690:1805): avc: denied { accept } for pid=19050 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2255.899356][ T31] audit: type=1400 audit(2255.820:1806): avc: denied { create } for pid=19050 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 2256.315727][ T31] audit: type=1400 audit(2256.230:1807): avc: denied { create } for pid=19050 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 2256.316770][ T31] audit: type=1400 audit(2256.230:1808): avc: denied { write } for pid=19050 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 2256.355990][ T31] audit: type=1400 audit(2256.270:1809): avc: denied { read } for pid=2924 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2256.488172][ T31] audit: type=1400 audit(2256.400:1810): avc: denied { read } for pid=19050 comm="syz.0.2915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 2264.755934][T19094] serio: Serial port pts0 [ 2273.444164][ T31] audit: type=1400 audit(2273.360:1811): avc: denied { create } for pid=19142 comm="syz.0.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2273.457145][ T31] audit: type=1400 audit(2273.380:1812): avc: denied { write } for pid=19142 comm="syz.0.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2275.990315][T19157] FAULT_INJECTION: forcing a failure. [ 2275.990315][T19157] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.990860][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.1.2947 Not tainted 6.11.0-rc6-syzkaller #0 [ 2275.991173][T19157] Hardware name: ARM-Versatile Express [ 2275.991388][T19157] Call trace: [ 2275.991560][T19157] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2275.991945][T19157] r7:00000d40 r6:851bb8b0 r5:60000013 r4:8200ca84 [ 2275.992195][T19157] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2275.992537][T19157] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2275.992897][T19157] r5:00000000 r4:8271619c [ 2275.993102][T19157] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2275.993452][T19157] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2275.994119][T19157] r6:851bb8b0 r5:00000024 r4:82c01240 [ 2275.994471][T19157] [<804daf7c>] (should_failslab) from [<804c0d88>] (__kmalloc_noprof+0x9c/0x458) [ 2275.994856][T19157] [<804c0cec>] (__kmalloc_noprof) from [<80728a08>] (tomoyo_encode2+0x64/0xf0) [ 2275.995291][T19157] r10:00000fff r9:82c9a800 r8:00000000 r7:830cf880 r6:851bb8b0 r5:856e9ffc [ 2275.995968][T19157] r4:856e9fe3 [ 2275.996173][T19157] [<807289a4>] (tomoyo_encode2) from [<80728ab8>] (tomoyo_encode+0x24/0x30) [ 2275.996559][T19157] r9:82c9a800 r8:00000000 r7:830cf880 r6:851bb8b0 r5:00001000 r4:856e9fe4 [ 2275.996857][T19157] [<80728a94>] (tomoyo_encode) from [<80728b44>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2275.997905][T19157] r5:00001000 r4:856e9000 [ 2275.998317][T19157] [<80728ac4>] (tomoyo_realpath_from_path) from [<80724c44>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2275.998902][T19157] r10:8344b000 r9:00000000 r8:851bb840 r7:40046602 r6:00000004 r5:81ad0e68 [ 2275.999364][T19157] r4:851bb8b0 r3:824b7380 [ 2275.999545][T19157] [<80724b78>] (tomoyo_path_number_perm) from [<80729510>] (tomoyo_file_ioctl+0x1c/0x20) [ 2275.999907][T19157] r9:00000003 r8:851bb840 r7:851bb840 r6:40046602 r5:20000040 r4:822071e4 [ 2276.000189][T19157] [<807294f4>] (tomoyo_file_ioctl) from [<806ec4c8>] (security_file_ioctl+0x40/0x5c) [ 2276.000542][T19157] [<806ec488>] (security_file_ioctl) from [<80520c80>] (sys_ioctl+0x50/0xda4) [ 2276.000884][T19157] r7:20000040 r6:851bb841 r5:00000000 r4:40046602 [ 2276.001112][T19157] [<80520c30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2276.001427][T19157] Exception stack(0xeccd1fa8 to 0xeccd1ff0) [ 2276.001647][T19157] 1fa0: 00000000 00000000 00000003 40046602 20000040 00000000 [ 2276.001942][T19157] 1fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76bf30bc [ 2276.002265][T19157] 1fe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2276.002502][T19157] r10:00000036 r9:8344b000 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2276.002777][T19157] r4:00000000 [ 2276.055822][T19157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2277.029860][T19169] FAULT_INJECTION: forcing a failure. [ 2277.029860][T19169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2277.030503][T19169] CPU: 0 UID: 0 PID: 19169 Comm: syz.1.2952 Not tainted 6.11.0-rc6-syzkaller #0 [ 2277.030840][T19169] Hardware name: ARM-Versatile Express [ 2277.031054][T19169] Call trace: [ 2277.031323][T19169] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2277.031704][T19169] r7:00000000 r6:00000000 r5:60000013 r4:8200ca84 [ 2277.031946][T19169] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2277.032291][T19169] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2277.032625][T19169] r5:00000000 r4:8274a3d4 [ 2277.032799][T19169] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2277.033133][T19169] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2277.033468][T19169] r6:00000000 r5:ecdb5f68 r4:00000002 [ 2277.033679][T19169] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2277.034028][T19169] [<808be6b0>] (should_fail_usercopy) from [<8053f584>] (simple_read_from_buffer+0x8c/0x134) [ 2277.034463][T19169] [<8053f4f8>] (simple_read_from_buffer) from [<805b4374>] (proc_fail_nth_read+0xb8/0x100) [ 2277.034865][T19169] r10:00000001 r9:805b42bc r8:00000002 r7:ecdb5f68 r6:0000000f r5:76bf2f30 [ 2277.035233][T19169] r4:84106000 r3:ecdb5e9f [ 2277.035749][T19169] [<805b42bc>] (proc_fail_nth_read) from [<805074ac>] (vfs_read+0x98/0x324) [ 2277.036235][T19169] r8:76bf2f30 r7:ecdb5f68 r6:84106000 r5:0000000f r4:851bb780 [ 2277.036654][T19169] [<80507414>] (vfs_read) from [<8050815c>] (ksys_read+0x78/0xf8) [ 2277.037336][T19169] r10:00000003 r9:84106000 r8:8020029c r7:00000000 r6:00000000 r5:851bb780 [ 2277.038036][T19169] r4:851bb783 [ 2277.038247][T19169] [<805080e4>] (ksys_read) from [<805081ec>] (sys_read+0x10/0x14) [ 2277.038592][T19169] r7:00000003 r6:00000004 r5:76bf2f30 r4:0000000f [ 2277.038852][T19169] [<805081dc>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2277.039217][T19169] Exception stack(0xecdb5fa8 to 0xecdb5ff0) [ 2277.039490][T19169] 5fa0: 0000000f 76bf2f30 00000004 76bf2f30 0000000f 00000000 [ 2277.039843][T19169] 5fc0: 0000000f 76bf2f30 00000004 00000003 00000000 00006364 003d0f00 76bf30bc [ 2277.040196][T19169] 5fe0: 00000158 76bf2ed0 000d8318 00130ca4 [ 2282.271280][T19193] fuse: Bad value for 'fd' [ 2297.733833][ T31] audit: type=1400 audit(2297.650:1813): avc: denied { ioctl } for pid=19288 comm="syz.0.3002" path="socket:[36920]" dev="sockfs" ino=36920 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2299.537046][T19307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=19307 comm=syz.1.3008 [ 2302.233114][T19332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=19332 comm=syz.1.3019 [ 2304.497580][ T31] audit: type=1400 audit(2304.420:1814): avc: denied { ioctl } for pid=19360 comm="syz.0.3031" path="socket:[37075]" dev="sockfs" ino=37075 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2307.211843][T19399] fuse: Bad value for 'group_id' [ 2307.212136][T19399] fuse: Bad value for 'group_id' [ 2307.326309][T16309] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2307.486488][T16309] usb 1-1: device descriptor read/64, error -71 [ 2307.776147][T16309] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2307.935800][T16309] usb 1-1: device descriptor read/64, error -71 [ 2308.056491][T16309] usb usb1-port1: attempt power cycle [ 2308.367533][T19407] fuse: Unknown parameter 'grou00000000000000000000' [ 2308.496570][T16309] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2308.562228][T16309] usb 1-1: device descriptor read/8, error -71 [ 2308.711503][T19409] fuse: Bad value for 'group_id' [ 2308.711891][T19409] fuse: Bad value for 'group_id' [ 2308.829101][T16309] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2308.870409][T16309] usb 1-1: device descriptor read/8, error -71 [ 2308.996262][T16309] usb usb1-port1: unable to enumerate USB device [ 2309.826109][ T7709] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2310.030203][ T7709] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2310.030835][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2310.031254][ T7709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2310.031632][ T7709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2310.032119][ T7709] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2310.032877][ T7709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.037536][ T7709] usb 2-1: config 0 descriptor?? [ 2310.538363][ T7709] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 2310.550960][ T7709] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2311.995875][ T7709] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 2312.156208][ T7709] usb 2-1: device descriptor read/64, error -32 [ 2312.426326][ T7709] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 2312.586159][ T7709] usb 2-1: device descriptor read/64, error -32 [ 2312.856108][ T7709] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 2312.889425][ T7709] usb 2-1: device descriptor read/8, error -32 [ 2313.155946][ T7709] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 2313.186377][ T7709] usb 2-1: device descriptor read/8, error -32 [ 2313.306397][ T7709] raw-gadget.1 gadget.1: failed to queue suspend event [ 2313.316558][T16369] usb 2-1: USB disconnect, device number 60 [ 2313.330742][T16369] raw-gadget.1 gadget.1: failed to queue reset event [ 2313.341609][T19416] raw-gadget.1 gadget.1: failed to queue disconnect event [ 2313.626281][T19442] fuse: Bad value for 'group_id' [ 2313.626577][T19442] fuse: Bad value for 'group_id' [ 2326.631150][T19526] FAULT_INJECTION: forcing a failure. [ 2326.631150][T19526] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.631877][T19526] CPU: 1 UID: 0 PID: 19526 Comm: syz.0.3082 Not tainted 6.11.0-rc6-syzkaller #0 [ 2326.632301][T19526] Hardware name: ARM-Versatile Express [ 2326.632586][T19526] Call trace: [ 2326.632825][T19526] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2326.633282][T19526] r7:00000dc0 r6:841c7d94 r5:60000013 r4:8200ca84 [ 2326.633600][T19526] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2326.634026][T19526] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2326.634527][T19526] r5:00000000 r4:8271619c [ 2326.634808][T19526] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2326.635653][T19526] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2326.636428][T19526] r6:841c7d94 r5:00000064 r4:82c01300 [ 2326.636922][T19526] [<804daf7c>] (should_failslab) from [<804c0d88>] (__kmalloc_noprof+0x9c/0x458) [ 2326.637701][T19526] [<804c0cec>] (__kmalloc_noprof) from [<8135ce40>] (constrain_params_by_rules+0x88/0x50c) [ 2326.638408][T19526] r10:858c3c00 r9:841c4c00 r8:841c7c00 r7:841c4e30 r6:841c7d94 r5:00000014 [ 2326.638787][T19526] r4:00000000 [ 2326.638993][T19526] [<8135cdb8>] (constrain_params_by_rules) from [<8135d4cc>] (snd_pcm_hw_refine+0x208/0x420) [ 2326.639475][T19526] r10:858c3c00 r9:edcb1c68 r8:83ee1800 r7:841c4e30 r6:841c7d94 r5:00000014 [ 2326.639848][T19526] r4:841c7c00 [ 2326.640047][T19526] [<8135d2c4>] (snd_pcm_hw_refine) from [<813764f0>] (snd_pcm_hw_param_near.constprop.0+0x1c4/0x274) [ 2326.640578][T19526] r10:00001f40 r9:822056ac r8:83ee1800 r7:0000000a r6:841c6000 r5:00000009 [ 2326.640951][T19526] r4:841c7c00 [ 2326.641147][T19526] [<8137632c>] (snd_pcm_hw_param_near.constprop.0) from [<81376b6c>] (snd_pcm_oss_change_params_locked+0x314/0xca8) [ 2326.641716][T19526] r10:00001f40 r9:000003e8 r8:841c4c00 r7:841c6000 r6:00001f40 r5:83ee1800 [ 2326.642095][T19526] r4:841c7c00 [ 2326.642340][T19526] [<81376858>] (snd_pcm_oss_change_params_locked) from [<81377698>] (snd_pcm_oss_mmap+0x144/0x194) [ 2326.642845][T19526] r10:841a9500 r9:841c4eb8 r8:83ee1800 r7:843ad480 r6:8587aa80 r5:841c4c00 [ 2326.643225][T19526] r4:8587aa80 [ 2326.643432][T19526] [<81377554>] (snd_pcm_oss_mmap) from [<80497d1c>] (mmap_region+0x43c/0xcb4) [ 2326.643883][T19526] r9:82928744 r8:82928748 r7:20b36000 r6:8587aa80 r5:00000075 r4:20000000 [ 2326.644248][T19526] [<804978e0>] (mmap_region) from [<804988ec>] (do_mmap+0x358/0x4c8) [ 2326.644673][T19526] r10:03000005 r9:841a9500 r8:20000000 r7:858c3c00 r6:00000075 r5:00000012 [ 2326.645046][T19526] r4:00b36000 [ 2326.645572][T19526] [<80498594>] (do_mmap) from [<804624c4>] (vm_mmap_pgoff+0xd8/0x18c) [ 2326.646337][T19526] r10:841a9500 r9:00b36000 r8:20000000 r7:843ad480 r6:edcb1f20 r5:03000005 [ 2326.646762][T19526] r4:00000000 [ 2326.646969][T19526] [<804623ec>] (vm_mmap_pgoff) from [<804948dc>] (ksys_mmap_pgoff+0xa4/0xec) [ 2326.647774][T19526] r10:000000c0 r9:858c3c00 r8:843ad480 r7:20000000 r6:00b36000 r5:03000005 [ 2326.648641][T19526] r4:00000012 [ 2326.649091][T19526] [<80494838>] (ksys_mmap_pgoff) from [<80494940>] (sys_mmap_pgoff+0x1c/0x24) [ 2326.649719][T19526] r8:8020029c r7:000000c0 r6:00130d80 r5:00000000 r4:00000004 [ 2326.650070][T19526] [<80494924>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2326.650541][T19526] Exception stack(0xedcb1fa8 to 0xedcb1ff0) [ 2326.650859][T19526] 1fa0: 00000004 00000000 20000000 00b36000 03000005 00000012 [ 2326.651271][T19526] 1fc0: 00000004 00000000 00130d80 000000c0 00000000 00006364 003d0f00 76b4b0bc [ 2326.651677][T19526] 1fe0: 76b4aec0 76b4aeb0 000189f0 00132dd0 [ 2327.719399][ T31] audit: type=1400 audit(2327.640:1815): avc: denied { listen } for pid=19531 comm="syz.1.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2328.267465][T19537] FAULT_INJECTION: forcing a failure. [ 2328.267465][T19537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2328.268309][T19537] CPU: 0 UID: 0 PID: 19537 Comm: syz.1.3086 Not tainted 6.11.0-rc6-syzkaller #0 [ 2328.268730][T19537] Hardware name: ARM-Versatile Express [ 2328.268976][T19537] Call trace: [ 2328.269192][T19537] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2328.269608][T19537] r7:00000000 r6:00000000 r5:60000013 r4:8200ca84 [ 2328.269868][T19537] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2328.270264][T19537] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2328.270630][T19537] r5:00000000 r4:8274a3d4 [ 2328.270818][T19537] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2328.271192][T19537] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2328.271789][T19537] r6:00000000 r5:edd0df68 r4:00000002 [ 2328.272041][T19537] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2328.272465][T19537] [<808be6b0>] (should_fail_usercopy) from [<8053f584>] (simple_read_from_buffer+0x8c/0x134) [ 2328.272909][T19537] [<8053f4f8>] (simple_read_from_buffer) from [<805b4374>] (proc_fail_nth_read+0xb8/0x100) [ 2328.273370][T19537] r10:00000001 r9:805b42bc r8:00000002 r7:edd0df68 r6:0000000f r5:76bf2f30 [ 2328.273727][T19537] r4:858c0000 r3:edd0de9f [ 2328.273909][T19537] [<805b42bc>] (proc_fail_nth_read) from [<805074ac>] (vfs_read+0x98/0x324) [ 2328.274370][T19537] r8:76bf2f30 r7:edd0df68 r6:858c0000 r5:0000000f r4:851bb9c0 [ 2328.274684][T19537] [<80507414>] (vfs_read) from [<8050815c>] (ksys_read+0x78/0xf8) [ 2328.275085][T19537] r10:00000003 r9:858c0000 r8:8020029c r7:00000000 r6:00000000 r5:851bb9c0 [ 2328.276466][T19537] r4:851bb9c3 [ 2328.276656][T19537] [<805080e4>] (ksys_read) from [<805081ec>] (sys_read+0x10/0x14) [ 2328.277704][T19537] r7:00000003 r6:00000005 r5:76bf2f30 r4:0000000f [ 2328.282270][T19537] [<805081dc>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2328.286233][T19537] Exception stack(0xedd0dfa8 to 0xedd0dff0) [ 2328.286580][T19537] dfa0: 0000000f 76bf2f30 00000005 76bf2f30 0000000f 00000000 [ 2328.286964][T19537] dfc0: 0000000f 76bf2f30 00000005 00000003 00000000 00006364 003d0f00 76bf30bc [ 2328.287319][T19537] dfe0: 00000158 76bf2ed0 000d8318 00130ca4 [ 2333.816163][T19562] fuse: Bad value for 'user_id' [ 2333.816657][T19562] fuse: Bad value for 'user_id' [ 2335.480651][T19573] fuse: Bad value for 'user_id' [ 2335.481081][T19573] fuse: Bad value for 'user_id' [ 2335.796236][ T31] audit: type=1400 audit(2335.710:1816): avc: denied { lock } for pid=19572 comm="syz.1.3100" path="/dev/dsp" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2339.867794][T19593] fuse: Bad value for 'user_id' [ 2339.868256][T19593] fuse: Bad value for 'user_id' [ 2340.478053][T19596] FAULT_INJECTION: forcing a failure. [ 2340.478053][T19596] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.478832][T19596] CPU: 0 UID: 0 PID: 19596 Comm: syz.1.3108 Not tainted 6.11.0-rc6-syzkaller #0 [ 2340.479210][T19596] Hardware name: ARM-Versatile Express [ 2340.479449][T19596] Call trace: [ 2340.479664][T19596] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2340.480076][T19596] r7:00000c40 r6:851bb7f0 r5:60000013 r4:8200ca84 [ 2340.480336][T19596] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2340.480691][T19596] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2340.481041][T19596] r5:00000000 r4:8271619c [ 2340.482500][T19596] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2340.482972][T19596] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2340.483371][T19596] r6:851bb7f0 r5:00001000 r4:82c016c0 [ 2340.483598][T19596] [<804daf7c>] (should_failslab) from [<804c0d88>] (__kmalloc_noprof+0x9c/0x458) [ 2340.483961][T19596] [<804c0cec>] (__kmalloc_noprof) from [<80728b00>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2340.484398][T19596] r10:84101800 r9:82c9bc00 r8:00000000 r7:8485a908 r6:851bb7f0 r5:00001000 [ 2340.484711][T19596] r4:00000000 [ 2340.484867][T19596] [<80728ac4>] (tomoyo_realpath_from_path) from [<80724c44>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2340.485538][T19596] r10:84101800 r9:00000000 r8:851bb780 r7:00005450 r6:00000004 r5:81ad0e68 [ 2340.485924][T19596] r4:851bb7f0 r3:824b7380 [ 2340.486265][T19596] [<80724b78>] (tomoyo_path_number_perm) from [<80729510>] (tomoyo_file_ioctl+0x1c/0x20) [ 2340.490419][T19596] r9:00000003 r8:851bb780 r7:851bb780 r6:00005450 r5:00000000 r4:822071e4 [ 2340.495432][T19596] [<807294f4>] (tomoyo_file_ioctl) from [<806ec4c8>] (security_file_ioctl+0x40/0x5c) [ 2340.496047][T19596] [<806ec488>] (security_file_ioctl) from [<80520c80>] (sys_ioctl+0x50/0xda4) [ 2340.496475][T19596] r7:00000000 r6:851bb781 r5:00000000 r4:00005450 [ 2340.496758][T19596] [<80520c30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2340.497172][T19596] Exception stack(0xdf959fa8 to 0xdf959ff0) [ 2340.497465][T19596] 9fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 2340.497834][T19596] 9fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76bf30bc [ 2340.498248][T19596] 9fe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2340.499060][T19596] r10:00000036 r9:84101800 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2340.499551][T19596] r4:00000000 [ 2340.646367][T19596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2343.326830][T19607] syzkaller1: entered promiscuous mode [ 2343.327297][T19607] syzkaller1: entered allmulticast mode [ 2343.410874][T19607] FAULT_INJECTION: forcing a failure. [ 2343.410874][T19607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2343.411627][T19607] CPU: 1 UID: 0 PID: 19607 Comm: syz.1.3112 Not tainted 6.11.0-rc6-syzkaller #0 [ 2343.412011][T19607] Hardware name: ARM-Versatile Express [ 2343.412275][T19607] Call trace: [ 2343.412530][T19607] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2343.412931][T19607] r7:85377000 r6:00000000 r5:60000013 r4:8200ca84 [ 2343.413169][T19607] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2343.413552][T19607] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2343.413922][T19607] r5:00000000 r4:8274a3d4 [ 2343.414123][T19607] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2343.414556][T19607] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2343.414921][T19607] r6:00000000 r5:dfa01ef0 r4:00001000 [ 2343.415224][T19607] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2343.415845][T19607] [<808be6b0>] (should_fail_usercopy) from [<8080d364>] (_copy_from_iter+0x64/0x5f8) [ 2343.416317][T19607] [<8080d300>] (_copy_from_iter) from [<8080da00>] (copy_page_from_iter+0x108/0x144) [ 2343.416831][T19607] r10:85377000 r9:8286d4e8 r8:00007000 r7:ddeb4cbc r6:00001000 r5:00000000 [ 2343.417253][T19607] r4:00001000 [ 2343.417470][T19607] [<8080d8f8>] (copy_page_from_iter) from [<8146a6e0>] (skb_copy_datagram_from_iter+0x110/0x228) [ 2343.417941][T19607] r10:85ba46c0 r9:dfa01ef0 r8:00000001 r7:0000fdcb r6:00008016 r5:00008016 [ 2343.418358][T19607] r4:00008000 [ 2343.418582][T19607] [<8146a5d0>] (skb_copy_datagram_from_iter) from [<80c5f3f0>] (tun_get_user+0x568/0x1048) [ 2343.419072][T19607] r10:00000000 r9:0000fdcb r8:00000016 r7:85ba46c0 r6:dfa01ef0 r5:00000016 [ 2343.419744][T19607] r4:85756680 [ 2343.420047][T19607] [<80c5ee88>] (tun_get_user) from [<80c60738>] (tun_chr_write_iter+0x60/0xc8) [ 2343.420542][T19607] r10:81b73624 r9:20000140 r8:84123000 r7:85756680 r6:00000000 r5:dfa01ef0 [ 2343.421368][T19607] r4:dfa01f08 [ 2343.421639][T19607] [<80c606d8>] (tun_chr_write_iter) from [<80507f0c>] (vfs_write+0x274/0x44c) [ 2343.422127][T19607] r8:dfa01f68 r7:83f48c00 r6:0000fdef r5:84cc6480 r4:80c606d8 [ 2343.422971][T19607] [<80507c98>] (vfs_write) from [<80508268>] (ksys_write+0x78/0xf8) [ 2343.423459][T19607] r10:00000004 r9:83f48c00 r8:8020029c r7:00000000 r6:00000000 r5:84cc6480 [ 2343.423828][T19607] r4:84cc6481 [ 2343.424032][T19607] [<805081f0>] (ksys_write) from [<805082f8>] (sys_write+0x10/0x14) [ 2343.424458][T19607] r7:00000004 r6:00130d80 r5:00000000 r4:00000000 [ 2343.424748][T19607] [<805082e8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2343.425540][T19607] Exception stack(0xdfa01fa8 to 0xdfa01ff0) [ 2343.425984][T19607] 1fa0: 00000000 00000000 00000003 20000140 0000fdef 00000000 [ 2343.426611][T19607] 1fc0: 00000000 00000000 00130d80 00000004 00000000 00006364 003d0f00 76bf30bc [ 2343.427415][T19607] 1fe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2344.599046][T16324] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2344.899416][T16324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.900235][T16324] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2344.900695][T16324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2344.901133][T16324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.911140][T16324] usb 2-1: config 0 descriptor?? [ 2347.031397][ T31] audit: type=1400 audit(2346.950:1817): avc: denied { nlmsg_read } for pid=19625 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2352.829250][ T31] audit: type=1400 audit(2352.750:1818): avc: denied { bind } for pid=19645 comm="syz.0.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2355.069215][T19650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19650 comm=syz.0.3127 [ 2356.256303][T10266] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2356.455939][T10266] usb 1-1: Using ep0 maxpacket: 8 [ 2356.554755][T10266] usb 1-1: config 0 has no interfaces? [ 2356.556297][T10266] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2356.556798][T10266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.562398][T10266] usb 1-1: config 0 descriptor?? [ 2356.849819][T16207] usb 1-1: USB disconnect, device number 69 [ 2357.368002][T16207] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2357.555830][T16207] usb 1-1: Using ep0 maxpacket: 8 [ 2357.615833][T16207] usb 1-1: config 0 has no interfaces? [ 2357.616403][T16207] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2357.616959][T16207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.648060][T16207] usb 1-1: config 0 descriptor?? [ 2357.884587][T16207] usb 1-1: USB disconnect, device number 70 [ 2358.586386][T16207] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2358.783410][T16207] usb 1-1: Using ep0 maxpacket: 8 [ 2358.829024][T16207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2358.829707][T16207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2358.830202][T16207] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 2358.830661][T16207] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2358.831081][T16207] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2358.831460][T16207] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2358.866915][T16207] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2358.867551][T16207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.867880][T16207] usb 1-1: Product: syz [ 2358.868127][T16207] usb 1-1: Manufacturer: syz [ 2358.868347][T16207] usb 1-1: SerialNumber: syz [ 2359.110578][T15953] usb 2-1: USB disconnect, device number 62 [ 2359.167440][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.196908][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.202473][T16207] cdc_ncm 1-1:1.0: bind() failure [ 2359.219772][T16207] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2359.220221][T16207] cdc_ncm 1-1:1.1: bind() failure [ 2359.244033][T16207] usb 1-1: USB disconnect, device number 71 [ 2365.228419][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2366.626474][ T31] audit: type=1400 audit(2366.540:1819): avc: denied { ioctl } for pid=19749 comm="syz.0.3150" path="socket:[37612]" dev="sockfs" ino=37612 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2366.730968][ T31] audit: type=1400 audit(2366.650:1820): avc: denied { read } for pid=19749 comm="syz.0.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2367.382065][ T31] audit: type=1400 audit(2367.300:1821): avc: denied { accept } for pid=19755 comm="syz.1.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2367.416811][T19756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=19756 comm=syz.1.3153 [ 2369.761699][T19774] FAULT_INJECTION: forcing a failure. [ 2369.761699][T19774] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.763087][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.1.3158 Not tainted 6.11.0-rc6-syzkaller #0 [ 2369.763553][T19774] Hardware name: ARM-Versatile Express [ 2369.763819][T19774] Call trace: [ 2369.764065][T19774] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2369.764504][T19774] r7:83f03c00 r6:00000cc0 r5:60000013 r4:8200ca84 [ 2369.764770][T19774] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2369.765148][T19774] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2369.765940][T19774] r5:00000000 r4:8271619c [ 2369.766256][T19774] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2369.766780][T19774] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2369.767240][T19774] r6:00000cc0 r5:76bd1ab0 r4:82c9fb40 [ 2369.767529][T19774] [<804daf7c>] (should_failslab) from [<804c0a04>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2369.767968][T19774] [<804c09b8>] (kmem_cache_alloc_noprof) from [<80516848>] (getname_flags.part.0+0x28/0x18c) [ 2369.768452][T19774] r10:00000142 r9:83f03c00 r8:8020029c r7:00000000 r6:8220582c r5:76bd1ab0 [ 2369.768799][T19774] r4:76bd1ab0 [ 2369.768998][T19774] [<80516820>] (getname_flags.part.0) from [<8051b9f4>] (getname+0x38/0x4c) [ 2369.769419][T19774] r9:83f03c00 r8:8020029c r7:ffffff9c r6:00000000 r5:df9a5f58 r4:76bd1ab0 [ 2369.769768][T19774] [<8051b9bc>] (getname) from [<805046c8>] (do_sys_openat2+0x80/0xe4) [ 2369.770214][T19774] r5:df9a5f58 r4:76bd1ab0 [ 2369.770473][T19774] [<80504648>] (do_sys_openat2) from [<80504b0c>] (sys_openat+0x98/0xd4) [ 2369.770867][T19774] r7:00000142 r6:00000000 r5:76bd1ab0 r4:ffffff9c [ 2369.771148][T19774] [<80504a74>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2369.771585][T19774] Exception stack(0xdf9a5fa8 to 0xdf9a5ff0) [ 2369.771912][T19774] 5fa0: 00000002 76bd1ab0 ffffff9c 76bd1ab0 00000002 00000000 [ 2369.772341][T19774] 5fc0: 00000002 76bd1ab0 00000000 00000142 00000000 00006364 003d0f00 76bd20bc [ 2369.772782][T19774] 5fe0: 7f017eff 76bd1a68 000d8318 00130bc8 [ 2369.773109][T19774] r5:76bd1ab0 r4:00000002 [ 2370.434219][T19783] fuse: Unknown parameter ' ' [ 2371.412183][T19792] fuse: Bad value for 'rootmode' [ 2372.505871][T16369] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2372.760711][T16369] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2372.761550][T16369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.761860][T16369] usb 1-1: Product: syz [ 2372.762065][T16369] usb 1-1: Manufacturer: syz [ 2372.762328][T16369] usb 1-1: SerialNumber: syz [ 2372.772382][T16369] usb 1-1: config 0 descriptor?? [ 2373.387787][ T31] audit: type=1400 audit(2373.310:1822): avc: denied { listen } for pid=19812 comm="syz.1.3174" path=2F3430362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2374.325938][ T31] audit: type=1400 audit(2374.240:1823): avc: denied { execute } for pid=19819 comm="syz.1.3176" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 2377.709440][T19835] serio: Serial port pts0 [ 2382.428346][ T31] audit: type=1400 audit(2382.350:1824): avc: denied { getopt } for pid=19845 comm="syz.1.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2383.349483][ T31] audit: type=1400 audit(2383.270:1825): avc: denied { lock } for pid=19850 comm="syz.1.3186" path="socket:[37761]" dev="sockfs" ino=37761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 2383.367156][T19851] binder: 19850:19851 ioctl c0286687 20000040 returned -22 [ 2384.128638][T16324] usb 1-1: USB disconnect, device number 72 [ 2387.036554][T19868] fuse: Bad value for 'fd' [ 2388.225973][T16369] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 2388.414685][T16369] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2388.433375][T16369] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2388.433695][T16369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.433880][T16369] usb 1-1: Product: syz [ 2388.434020][T16369] usb 1-1: Manufacturer: syz [ 2388.434147][T16369] usb 1-1: SerialNumber: syz [ 2388.675690][T16369] usbhid 1-1:1.0: can't add hid device: -71 [ 2388.676081][T16369] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2388.686259][T16369] usb 1-1: USB disconnect, device number 73 [ 2388.902485][T19889] FAULT_INJECTION: forcing a failure. [ 2388.902485][T19889] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.903161][T19889] CPU: 0 UID: 0 PID: 19889 Comm: syz.0.3193 Not tainted 6.11.0-rc6-syzkaller #0 [ 2388.903483][T19889] Hardware name: ARM-Versatile Express [ 2388.903694][T19889] Call trace: [ 2388.903876][T19889] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2388.904251][T19889] r7:00000cc0 r6:0000001c r5:60000013 r4:8200ca84 [ 2388.904474][T19889] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2388.904775][T19889] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2388.905081][T19889] r5:00000000 r4:8271619c [ 2388.905435][T19889] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2388.905812][T19889] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2388.906258][T19889] r6:0000001c r5:0000001c r4:82c01240 [ 2388.906483][T19889] [<804daf7c>] (should_failslab) from [<804c0d88>] (__kmalloc_noprof+0x9c/0x458) [ 2388.906837][T19889] [<804c0cec>] (__kmalloc_noprof) from [<8145672c>] (sock_kmalloc+0x58/0x80) [ 2388.907220][T19889] r10:00000000 r9:00000024 r8:00000000 r7:00000000 r6:0000001c r5:0000001c [ 2388.907526][T19889] r4:84781910 [ 2388.907685][T19889] [<814566d4>] (sock_kmalloc) from [<80778694>] (hash_alloc_result+0x3c/0x64) [ 2388.908039][T19889] r5:00000000 r4:84782000 [ 2388.908244][T19889] [<80778658>] (hash_alloc_result) from [<80778e60>] (hash_sendmsg+0x1c8/0x3cc) [ 2388.908604][T19889] r7:00000000 r6:e06fdf38 r5:84782000 r4:00000024 [ 2388.908846][T19889] [<80778c98>] (hash_sendmsg) from [<81450154>] (__sock_sendmsg+0x44/0x78) [ 2388.909262][T19889] r10:00000800 r9:e06fddd4 r8:e06fddd4 r7:00000000 r6:8334f180 r5:e06fdf38 [ 2388.909571][T19889] r4:00000000 [ 2388.909740][T19889] [<81450110>] (__sock_sendmsg) from [<814510c4>] (____sys_sendmsg+0x2ac/0x2cc) [ 2388.910103][T19889] r7:00000000 r6:00000000 r5:8334f180 r4:e06fdf38 [ 2388.910387][T19889] [<81450e18>] (____sys_sendmsg) from [<81453030>] (___sys_sendmsg+0x9c/0xd0) [ 2388.910755][T19889] r10:e06fde34 r9:20000180 r8:00000800 r7:00000000 r6:8334f180 r5:e06fdf38 [ 2388.911051][T19889] r4:00000000 [ 2388.911226][T19889] [<81452f94>] (___sys_sendmsg) from [<81453548>] (sys_sendmsg+0x78/0xbc) [ 2388.911570][T19889] r10:00000128 r9:8388a400 r8:8020029c r7:00000800 r6:20000180 r5:8334f180 [ 2388.911869][T19889] r4:00000000 [ 2388.912032][T19889] [<814534d0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2388.912392][T19889] Exception stack(0xe06fdfa8 to 0xe06fdff0) [ 2388.912644][T19889] dfa0: 00000000 00000000 00000005 20000180 00000800 00000000 [ 2388.912975][T19889] dfc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b4b0bc [ 2388.913309][T19889] dfe0: 76b4aec0 76b4aeb0 000189f0 00132dd0 [ 2388.913558][T19889] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2389.378099][T19893] fuse: Bad value for 'fd' [ 2390.206461][T16207] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 2390.430585][T16207] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2390.471693][T16207] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2390.472288][T16207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.472860][T16207] usb 1-1: Product: syz [ 2390.473115][T16207] usb 1-1: Manufacturer: syz [ 2390.473332][T16207] usb 1-1: SerialNumber: syz [ 2390.754307][T16207] usbhid 1-1:1.0: can't add hid device: -71 [ 2390.754855][T16207] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2390.762959][T16207] usb 1-1: USB disconnect, device number 74 [ 2392.956845][T19916] fuse: Unknown parameter 'user_i00000000000000000000' [ 2395.336419][T16207] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 2395.581273][T16207] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2395.615769][T16207] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2395.616369][T16207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.616706][T16207] usb 1-1: Product: syz [ 2395.616910][T16207] usb 1-1: Manufacturer: syz [ 2395.617136][T16207] usb 1-1: SerialNumber: syz [ 2395.861305][T16207] usbhid 1-1:1.0: can't add hid device: -71 [ 2395.862251][T16207] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2395.891170][T16207] usb 1-1: USB disconnect, device number 75 [ 2398.058361][T19944] fuse: Unknown parameter 'user_id00000000000000000000' [ 2400.806253][T16369] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 2401.025819][T16369] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2401.058365][T16369] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2401.062615][T16369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.063081][T16369] usb 1-1: Product: syz [ 2401.064149][T16369] usb 1-1: Manufacturer: syz [ 2401.064442][T16369] usb 1-1: SerialNumber: syz [ 2401.357990][T16369] usbhid 1-1:1.0: can't add hid device: -71 [ 2401.358584][T16369] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2401.361166][T16369] usb 1-1: USB disconnect, device number 76 [ 2401.956877][T19965] FAULT_INJECTION: forcing a failure. [ 2401.956877][T19965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2401.957770][T19965] CPU: 0 UID: 0 PID: 19965 Comm: syz.0.3209 Not tainted 6.11.0-rc6-syzkaller #0 [ 2401.958146][T19965] Hardware name: ARM-Versatile Express [ 2401.958680][T19965] Call trace: [ 2401.958907][T19965] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2401.959323][T19965] r7:00000000 r6:00000000 r5:60000013 r4:8200ca84 [ 2401.960025][T19965] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2401.960747][T19965] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2401.965981][T19965] r5:00000000 r4:8274a3d4 [ 2401.966740][T19965] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2401.967164][T19965] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2401.967727][T19965] r6:00000000 r5:e070df68 r4:00000002 [ 2401.967982][T19965] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2401.968387][T19965] [<808be6b0>] (should_fail_usercopy) from [<8053f584>] (simple_read_from_buffer+0x8c/0x134) [ 2401.968963][T19965] [<8053f4f8>] (simple_read_from_buffer) from [<805b4374>] (proc_fail_nth_read+0xb8/0x100) [ 2401.969623][T19965] r10:00000001 r9:805b42bc r8:00000002 r7:e070df68 r6:0000000f r5:76b4af30 [ 2401.970388][T19965] r4:82e36c00 r3:e070de9f [ 2401.971151][T19965] [<805b42bc>] (proc_fail_nth_read) from [<805074ac>] (vfs_read+0x98/0x324) [ 2401.971696][T19965] r8:76b4af30 r7:e070df68 r6:82e36c00 r5:0000000f r4:84cc6240 [ 2401.971927][T19965] [<80507414>] (vfs_read) from [<8050815c>] (ksys_read+0x78/0xf8) [ 2401.972433][T19965] r10:00000003 r9:82e36c00 r8:8020029c r7:00000000 r6:00000000 r5:84cc6240 [ 2401.972819][T19965] r4:84cc6243 [ 2401.973048][T19965] [<805080e4>] (ksys_read) from [<805081ec>] (sys_read+0x10/0x14) [ 2401.973953][T19965] r7:00000003 r6:00000003 r5:76b4af30 r4:0000000f [ 2401.974556][T19965] [<805081dc>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2401.975587][T19965] Exception stack(0xe070dfa8 to 0xe070dff0) [ 2401.976063][T19965] dfa0: 0000000f 76b4af30 00000003 76b4af30 0000000f 00000000 [ 2401.976695][T19965] dfc0: 0000000f 76b4af30 00000003 00000003 00000000 00006364 003d0f00 76b4b0bc [ 2401.979342][T19965] dfe0: 00000158 76b4aed0 000d8318 00130ca4 [ 2403.167581][T16324] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 2403.400535][T16324] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2403.449529][T16324] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2403.450198][T16324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.450483][T16324] usb 2-1: Product: syz [ 2403.450652][T16324] usb 2-1: Manufacturer: syz [ 2403.450831][T16324] usb 2-1: SerialNumber: syz [ 2403.766738][T16324] usbhid 2-1:1.0: can't add hid device: -71 [ 2403.775886][T16324] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2403.783365][T16324] usb 2-1: USB disconnect, device number 63 [ 2406.340621][T16369] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 2406.605496][T16369] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2406.649992][T16369] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2406.650493][T16369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.650867][T16369] usb 1-1: Product: syz [ 2406.651132][T16369] usb 1-1: Manufacturer: syz [ 2406.651353][T16369] usb 1-1: SerialNumber: syz [ 2406.951376][T16369] usbhid 1-1:1.0: can't add hid device: -71 [ 2406.951742][T16369] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2406.956364][T16369] usb 1-1: USB disconnect, device number 77 [ 2408.546276][T20024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33022 sclass=netlink_route_socket pid=20024 comm=syz.0.3222 [ 2408.566943][T20030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=20030 comm=syz.0.3222 [ 2410.715848][T19713] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 2410.934646][T19713] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2411.038372][T19713] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2411.038969][T19713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.039314][T19713] usb 1-1: Product: syz [ 2411.039871][T19713] usb 1-1: Manufacturer: syz [ 2411.040141][T19713] usb 1-1: SerialNumber: syz [ 2411.311615][T19713] usbhid 1-1:1.0: can't add hid device: -71 [ 2411.312242][T19713] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2411.326967][T19713] usb 1-1: USB disconnect, device number 78 [ 2412.571663][ T31] audit: type=1400 audit(2412.490:1826): avc: denied { setopt } for pid=20058 comm="syz.0.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2413.990143][ T31] audit: type=1400 audit(2413.900:1827): avc: denied { map } for pid=20063 comm="syz.1.3228" path="socket:[38675]" dev="sockfs" ino=38675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2415.796208][T16207] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 2416.107190][T16207] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2416.157637][T16207] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2416.158134][T16207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.158462][T16207] usb 2-1: Product: syz [ 2416.158885][T16207] usb 2-1: Manufacturer: syz [ 2416.159163][T16207] usb 2-1: SerialNumber: syz [ 2416.508384][T16207] usbhid 2-1:1.0: can't add hid device: -71 [ 2416.509013][T16207] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2416.527766][T16207] usb 2-1: USB disconnect, device number 64 [ 2422.708634][T20116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=20116 comm=syz.0.3240 [ 2425.791049][T20133] fuse: Unknown parameter '0x0000000000000003' [ 2435.148759][T20177] fuse: Unknown parameter 'fd0x0000000000000003' [ 2438.196275][T16309] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2438.413409][T16309] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2438.413801][T16309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2438.414073][T16309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2438.414585][T16309] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2438.414913][T16309] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2438.415572][T16309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.417960][T16309] usb 1-1: config 0 descriptor?? [ 2438.436603][T20208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2438.989477][T16309] usbhid 1-1:0.0: can't add hid device: -71 [ 2438.990203][T16309] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2438.993434][T16309] usb 1-1: USB disconnect, device number 79 [ 2439.758822][T20236] fuse: Bad value for 'user_id' [ 2439.759610][T20236] fuse: Bad value for 'user_id' [ 2440.228795][ T31] audit: type=1400 audit(2440.150:1828): avc: denied { connect } for pid=20239 comm="syz.0.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2440.505936][T16207] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2440.685969][T16207] usb 1-1: Using ep0 maxpacket: 16 [ 2440.710068][T16207] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2440.710942][T16207] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2440.711389][T16207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2440.751529][T16207] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2440.752063][T16207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.752389][T16207] usb 1-1: Product: à°‡ [ 2440.752586][T16207] usb 1-1: Manufacturer: ည [ 2440.752792][T16207] usb 1-1: SerialNumber: à ‡ [ 2441.719290][ T31] audit: type=1400 audit(2441.640:1829): avc: denied { connect } for pid=20252 comm="syz.1.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2441.933439][T16207] usb 1-1: 0:2 : does not exist [ 2441.956572][T16207] usb 1-1: USB disconnect, device number 80 [ 2444.086325][T20280] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20280 comm=syz.1.3287 [ 2448.026559][T16309] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2448.241494][T16309] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2448.260674][T16309] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2448.261217][T16309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2448.261524][T16309] usb 1-1: SerialNumber: syz [ 2449.582646][T20330] can: request_module (can-proto-5) failed. [ 2452.061113][T20342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2452.063759][T20342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2452.946222][T16258] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2453.143943][T16258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2453.144620][T16258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2453.144967][T16258] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2453.155933][T16258] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2453.156457][T16258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.160721][T16258] usb 2-1: config 0 descriptor?? [ 2453.689231][T16258] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 2453.698679][T16258] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2453.977016][T16258] usb 2-1: USB disconnect, device number 65 [ 2456.250067][T20386] FAULT_INJECTION: forcing a failure. [ 2456.250067][T20386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2456.250542][T20386] CPU: 0 UID: 0 PID: 20386 Comm: syz.1.3318 Not tainted 6.11.0-rc6-syzkaller #0 [ 2456.250730][T20386] Hardware name: ARM-Versatile Express [ 2456.250855][T20386] Call trace: [ 2456.250968][T20386] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2456.251186][T20386] r7:00000000 r6:00000000 r5:60000013 r4:8200ca84 [ 2456.251319][T20386] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2456.251499][T20386] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2456.251677][T20386] r5:00000000 r4:8274a3d4 [ 2456.251779][T20386] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2456.251964][T20386] [<808be4bc>] (should_fail_ex) from [<808be6ac>] (should_fail+0x14/0x18) [ 2456.252139][T20386] r6:00000000 r5:20000080 r4:eaacde50 [ 2456.252254][T20386] [<808be698>] (should_fail) from [<808be6cc>] (should_fail_usercopy+0x1c/0x20) [ 2456.252435][T20386] [<808be6b0>] (should_fail_usercopy) from [<808c4714>] (strncpy_from_user+0x20/0x194) [ 2456.252628][T20386] [<808c46f4>] (strncpy_from_user) from [<8053d4b8>] (setxattr_copy+0x2c/0x90) [ 2456.252825][T20386] r10:000000e3 r9:838a8c00 r8:eaacde64 r7:00000000 r6:00000000 r5:20000000 [ 2456.252987][T20386] r4:eaacde50 [ 2456.253072][T20386] [<8053d48c>] (setxattr_copy) from [<8053d628>] (path_setxattr+0x70/0x124) [ 2456.253260][T20386] r5:20000000 r4:20000080 [ 2456.253364][T20386] [<8053d5b8>] (path_setxattr) from [<8053d86c>] (sys_lsetxattr+0x24/0x2c) [ 2456.253555][T20386] r8:8020029c r7:000000e3 r6:00130d80 r5:00000000 r4:00000002 [ 2456.253699][T20386] [<8053d848>] (sys_lsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2456.253888][T20386] Exception stack(0xeaacdfa8 to 0xeaacdff0) [ 2456.254025][T20386] dfa0: 00000002 00000000 20000000 20000080 00000000 00000000 [ 2456.254219][T20386] dfc0: 00000002 00000000 00130d80 000000e3 00000000 00006364 003d0f00 76bf30bc [ 2456.254398][T20386] dfe0: 76bf2ec0 76bf2eb0 000189f0 00132dd0 [ 2462.729818][T19713] usb 1-1: USB disconnect, device number 81 [ 2466.296637][T16207] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2466.580459][T16207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.581087][T16207] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2466.581703][T16207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2466.582094][T16207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.593765][T16207] usb 1-1: config 0 descriptor?? [ 2466.629841][T16207] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2469.187949][T20441] netlink: 644 bytes leftover after parsing attributes in process `syz.1.3333'. [ 2480.949465][T16369] usb 1-1: USB disconnect, device number 82 [ 2482.136452][T19713] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2482.349189][T19713] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2482.407369][T19713] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2482.407896][T19713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.408209][T19713] usb 2-1: Product: syz [ 2482.408418][T19713] usb 2-1: Manufacturer: syz [ 2482.408631][T19713] usb 2-1: SerialNumber: syz [ 2482.674470][T19713] usbhid 2-1:1.0: can't add hid device: -71 [ 2482.674993][T19713] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2482.687255][T19713] usb 2-1: USB disconnect, device number 66 [ 2483.347347][T16369] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2483.565999][T16369] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2483.566772][T16369] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2483.567152][T16369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.571786][T16369] usb 2-1: config 0 descriptor?? [ 2483.598919][T16369] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2486.375674][ T7709] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 2486.564330][ T7709] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2486.597595][ T7709] usb 1-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 2486.599557][ T7709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.599925][ T7709] usb 1-1: Product: syz [ 2486.600126][ T7709] usb 1-1: Manufacturer: syz [ 2486.600358][ T7709] usb 1-1: SerialNumber: syz [ 2486.849325][ T7709] usbhid 1-1:1.0: can't add hid device: -71 [ 2486.850014][ T7709] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2486.857637][ T7709] usb 1-1: USB disconnect, device number 83 [ 2487.090471][ T31] audit: type=1400 audit(2487.010:1830): avc: denied { create } for pid=20528 comm="syz.0.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2489.058534][T20542] FAULT_INJECTION: forcing a failure. [ 2489.058534][T20542] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.059266][T20542] CPU: 0 UID: 0 PID: 20542 Comm: syz.0.3355 Not tainted 6.11.0-rc6-syzkaller #0 [ 2489.059633][T20542] Hardware name: ARM-Versatile Express [ 2489.059863][T20542] Call trace: [ 2489.060061][T20542] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2489.060623][T20542] r7:00000d40 r6:847cc1f0 r5:60000013 r4:8200ca84 [ 2489.061026][T20542] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2489.061429][T20542] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2489.061784][T20542] r5:00000000 r4:8271619c [ 2489.061976][T20542] [<8197af40>] (dump_stack) from [<808be648>] (should_fail_ex+0x18c/0x1dc) [ 2489.062371][T20542] [<808be4bc>] (should_fail_ex) from [<804dafe8>] (should_failslab+0x6c/0x94) [ 2489.062761][T20542] r6:847cc1f0 r5:00000021 r4:82c01240 [ 2489.062947][T20542] [<804daf7c>] (should_failslab) from [<804c0d88>] (__kmalloc_noprof+0x9c/0x458) [ 2489.063323][T20542] [<804c0cec>] (__kmalloc_noprof) from [<80728a08>] (tomoyo_encode2+0x64/0xf0) [ 2489.063698][T20542] r10:00000fff r9:82c9a800 r8:00000000 r7:830e2b28 r6:847cc1f0 r5:82e4dffc [ 2489.064003][T20542] r4:82e4dfe6 [ 2489.064153][T20542] [<807289a4>] (tomoyo_encode2) from [<80728ab8>] (tomoyo_encode+0x24/0x30) [ 2489.064523][T20542] r9:82c9a800 r8:00000000 r7:830e2b28 r6:847cc1f0 r5:00001000 r4:82e4dfe7 [ 2489.064818][T20542] [<80728a94>] (tomoyo_encode) from [<80728b44>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2489.065264][T20542] r5:00001000 r4:82e4d000 [ 2489.065927][T20542] [<80728ac4>] (tomoyo_realpath_from_path) from [<80724c44>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2489.067101][T20542] r10:8412bc00 r9:00000000 r8:847cc180 r7:80047210 r6:00000004 r5:81ad0e68 [ 2489.067984][T20542] r4:847cc1f0 r3:824b7380 [ 2489.068447][T20542] [<80724b78>] (tomoyo_path_number_perm) from [<80729510>] (tomoyo_file_ioctl+0x1c/0x20) [ 2489.068883][T20542] r9:00000003 r8:847cc180 r7:847cc180 r6:80047210 r5:00000000 r4:822071e4 [ 2489.069210][T20542] [<807294f4>] (tomoyo_file_ioctl) from [<806ec4c8>] (security_file_ioctl+0x40/0x5c) [ 2489.069625][T20542] [<806ec488>] (security_file_ioctl) from [<80520c80>] (sys_ioctl+0x50/0xda4) [ 2489.070037][T20542] r7:00000000 r6:847cc181 r5:00000000 r4:80047210 [ 2489.070366][T20542] [<80520c30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2489.070759][T20542] Exception stack(0xeb219fa8 to 0xeb219ff0) [ 2489.071047][T20542] 9fa0: 00000000 00000000 00000003 80047210 00000000 00000000 [ 2489.071430][T20542] 9fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76b4b0bc [ 2489.071792][T20542] 9fe0: 76b4aec0 76b4aeb0 000189f0 00132dd0 [ 2489.072075][T20542] r10:00000036 r9:8412bc00 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2489.072441][T20542] r4:00000000 [ 2489.106760][T20542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2498.048802][ T7709] usb 2-1: USB disconnect, device number 67 [ 2498.442827][T20583] serio: Serial port pts0 [ 2499.613370][T20590] binder: 20589:20590 ioctl 400c620e 20000a40 returned -22 [ 2501.783454][T20599] fuse: Unknown parameter 'fd¤eoôt; é#Vj7ß(h6±w «KRêk6 † Z²' [ 2504.196404][T16369] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2504.346105][T16369] usb 2-1: device descriptor read/64, error -71 [ 2504.627121][T16369] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2504.775978][T16369] usb 2-1: device descriptor read/64, error -71 [ 2504.898223][T16369] usb usb2-port1: attempt power cycle [ 2505.316413][T16369] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2505.366141][T16369] usb 2-1: device descriptor read/8, error -71 [ 2505.392674][ T31] audit: type=1400 audit(2505.310:1831): avc: denied { map } for pid=20613 comm="syz.0.3375" path="/proc/1331/net/ip_tables_targets" dev="proc" ino=4026533320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2505.636166][T16369] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2505.679971][T16369] usb 2-1: device descriptor read/8, error -71 [ 2505.796836][T16369] usb usb2-port1: unable to enumerate USB device [ 2505.842436][T20618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=769 sclass=netlink_audit_socket pid=20618 comm=syz.0.3377 [ 2524.976528][ T5421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2525.150233][ T5421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2525.317679][ T5421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2525.520341][ T5421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2526.274320][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2526.381203][ T5421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2526.407099][ T5421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2526.411488][ T5421] bond0 (unregistering): Released all slaves [ 2526.557805][ T5421] hsr_slave_0: left promiscuous mode [ 2526.572174][ T5421] hsr_slave_1: left promiscuous mode [ 2526.610842][ T5421] veth1_macvtap: left promiscuous mode [ 2526.636401][ T5421] veth0_macvtap: left promiscuous mode [ 2526.637142][ T5421] veth1_vlan: left promiscuous mode [ 2526.637523][ T5421] veth0_vlan: left promiscuous mode [ 2531.877796][T20743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2531.908395][T20743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2534.572422][T20743] hsr_slave_0: entered promiscuous mode [ 2534.579704][T20743] hsr_slave_1: entered promiscuous mode [ 2534.588083][T20743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2534.588587][T20743] Cannot create hsr debugfs directory [ 2536.168958][T20743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2536.188518][T20743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2536.267526][T20743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2536.273898][T20743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2538.507708][T20743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2545.721525][T20743] veth0_vlan: entered promiscuous mode [ 2545.779370][T20743] veth1_vlan: entered promiscuous mode [ 2545.885061][T20743] veth0_macvtap: entered promiscuous mode [ 2545.898843][T20743] veth1_macvtap: entered promiscuous mode [ 2545.984450][T20743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.985173][T20743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.989514][T20743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.989895][T20743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.770355][T21248] ucma_write: process 13 (syz.0.3469) changed security contexts after opening file descriptor, this is not allowed. [ 2556.752887][ T31] audit: type=1400 audit(2556.670:1832): avc: denied { remount } for pid=21309 comm="syz.0.3496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2560.079501][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'. [ 2561.003183][T21335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21335 comm=syz.0.3507 [ 2563.857765][T21355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=21355 comm=syz.0.3516 [ 2564.268459][T21359] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21359 comm=syz.1.3517 [ 2564.591077][ T31] audit: type=1400 audit(2564.510:1833): avc: denied { write } for pid=21362 comm="syz.0.3521" name="vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 2571.387777][T21420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21420 comm=syz.0.3545 [ 2581.604818][T21465] serio: Serial port pts0 [ 2587.807226][T21506] "syz.0.3577" (21506) uses obsolete ecb(arc4) skcipher [ 2588.678606][T21521] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21521 comm=syz.0.3583 [ 2600.308399][ T5421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.389646][ T5421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.507591][ T5421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.573611][ T5421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.987377][ T5421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2600.992624][ T5421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2600.996792][ T5421] bond0 (unregistering): Released all slaves [ 2601.139482][ T5421] hsr_slave_0: left promiscuous mode [ 2601.146813][ T5421] hsr_slave_1: left promiscuous mode [ 2601.154143][ T5421] veth1_macvtap: left promiscuous mode [ 2601.154584][ T5421] veth0_macvtap: left promiscuous mode [ 2601.154807][ T5421] veth1_vlan: left promiscuous mode [ 2601.155009][ T5421] veth0_vlan: left promiscuous mode [ 2603.700124][T21564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2603.708530][T21564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2605.418161][T21564] hsr_slave_0: entered promiscuous mode [ 2605.421129][T21564] hsr_slave_1: entered promiscuous mode [ 2605.422437][T21564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2605.422672][T21564] Cannot create hsr debugfs directory [ 2606.141256][T21564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2606.154402][T21564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2606.171763][T21564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2606.186100][T21564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2607.288701][T21564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2607.600360][T21935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21935 comm=syz.0.3604 [ 2613.359749][T21564] veth0_vlan: entered promiscuous mode [ 2613.404342][T21564] veth1_vlan: entered promiscuous mode [ 2613.691914][T21564] veth0_macvtap: entered promiscuous mode [ 2613.746917][T21564] veth1_macvtap: entered promiscuous mode [ 2613.959561][T21564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.960323][T21564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.960767][T21564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.961171][T21564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2619.981217][ T31] audit: type=1400 audit(2619.890:1834): avc: denied { name_connect } for pid=22062 comm="syz.0.3636" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2620.035913][ T31] audit: type=1400 audit(2619.940:1835): avc: denied { shutdown } for pid=22062 comm="syz.0.3636" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2622.648500][ T31] audit: type=1400 audit(2622.570:1836): avc: denied { remount } for pid=22083 comm="syz.0.3646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2624.377507][T22096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22096 comm=syz.0.3651 [ 2625.205085][T22103] serio: Serial port pts0 [ 2638.174107][T22109] serio: Serial port pts0 [ 2640.281746][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2644.748200][T22159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22159 comm=syz.1.3677 [ 2645.627254][T22163] serio: Serial port pts1 [ 2654.753741][ T31] audit: type=1400 audit(2654.670:1837): avc: denied { lock } for pid=22228 comm="syz.0.3706" path="socket:[44147]" dev="sockfs" ino=44147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2661.149426][T22285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22285 comm=syz.0.3726 [ 2665.022918][T22328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=22328 comm=syz.1.3744 [ 2674.880691][T22326] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2674.881869][T22326] syz.0.3743: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 2674.882774][T22326] CPU: 1 UID: 0 PID: 22326 Comm: syz.0.3743 Not tainted 6.11.0-rc6-syzkaller #0 [ 2674.883178][T22326] Hardware name: ARM-Versatile Express [ 2674.883448][T22326] Call trace: [ 2674.883644][T22326] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2674.884179][T22326] r7:ff800000 r6:82025a1c r5:60000013 r4:8200ca84 [ 2674.884529][T22326] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2674.884904][T22326] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2674.885747][T22326] r5:852ca400 r4:00000000 [ 2674.885987][T22326] [<8197af40>] (dump_stack) from [<804b30fc>] (warn_alloc+0xd8/0x178) [ 2674.886708][T22326] [<804b3024>] (warn_alloc) from [<804aa2c0>] (__vmalloc_node_range_noprof+0xcc/0x56c) [ 2674.887190][T22326] r3:20000000 r2:82025a1c [ 2674.887458][T22326] r6:00000dc0 r5:00000001 r4:20000000 [ 2674.887712][T22326] [<804aa1f4>] (__vmalloc_node_range_noprof) from [<80461674>] (__kvmalloc_node_noprof+0xc0/0x110) [ 2674.888260][T22326] r10:dfc19d00 r9:84fbf800 r8:81606070 r7:ffffffff r6:00000dc0 r5:20000000 [ 2674.888637][T22326] r4:00000000 [ 2674.888849][T22326] [<804615b4>] (__kvmalloc_node_noprof) from [<81606070>] (xt_alloc_entry_offsets+0x24/0x30) [ 2674.889337][T22326] r8:b5403587 r7:00000000 r6:200001a0 r5:84fbf840 r4:08000000 [ 2674.889693][T22326] [<8160604c>] (xt_alloc_entry_offsets) from [<816bea4c>] (translate_table+0x70/0x78c) [ 2674.890151][T22326] [<816be9dc>] (translate_table) from [<816bfc08>] (do_replace+0xe8/0x5a0) [ 2674.890646][T22326] r10:00000126 r9:84fbf840 r8:b5403587 r7:00000220 r6:200001a0 r5:84fbf800 [ 2674.891017][T22326] r4:84f5db00 [ 2674.891225][T22326] [<816bfb20>] (do_replace) from [<816c01f4>] (do_ipt_set_ctl+0x134/0x2a0) [ 2674.891798][T22326] r10:00000126 r9:81453f20 r8:8568f140 r7:00000280 r6:dfc19da8 r5:8411ec80 [ 2674.892491][T22326] r4:00000040 [ 2674.892871][T22326] [<816c00c0>] (do_ipt_set_ctl) from [<81593b30>] (nf_setsockopt+0x60/0x7c) [ 2674.893339][T22326] r10:00000126 r9:81453f20 r8:8568f140 r7:00000280 r6:8411ec80 r5:816c00c0 [ 2674.893803][T22326] r4:827e0520 [ 2674.894014][T22326] [<81593ad4>] (nf_setsockopt) from [<8162bd0c>] (ip_setsockopt+0x88/0x98) [ 2674.894506][T22326] r6:8411ec80 r5:00000280 r4:00000040 [ 2674.894790][T22326] [<8162bc88>] (ip_setsockopt) from [<8163b7b0>] (tcp_setsockopt+0x3c/0x58) [ 2674.895488][T22326] r6:00000000 r5:8568ed00 r4:8162bc84 [ 2674.895827][T22326] [<8163b778>] (tcp_setsockopt) from [<81453f58>] (sock_common_setsockopt+0x38/0x40) [ 2674.896577][T22326] r4:8163b774 [ 2674.896792][T22326] [<81453f24>] (sock_common_setsockopt) from [<81867660>] (smc_setsockopt+0xa8/0x3c8) [ 2674.897851][T22326] r4:00000040 [ 2674.898068][T22326] [<818675bc>] (smc_setsockopt) from [<8144f574>] (do_sock_setsockopt+0xb0/0x17c) [ 2674.898798][T22326] r9:852ca400 r8:8020029c r7:00000000 r6:8481b900 r5:00000000 r4:818675b8 [ 2674.899149][T22326] [<8144f4c4>] (do_sock_setsockopt) from [<81452a74>] (sys_setsockopt+0x78/0xbc) [ 2674.899641][T22326] r6:8481b900 r5:00000040 r4:00000000 [ 2674.899906][T22326] [<814529fc>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2674.900343][T22326] Exception stack(0xdfc19fa8 to 0xdfc19ff0) [ 2674.900669][T22326] 9fa0: 00000280 00000000 00000003 00000000 00000040 20000140 [ 2674.901152][T22326] 9fc0: 00000280 00000000 002862f8 00000126 00000000 00006364 003d0f00 76b710bc [ 2674.901597][T22326] 9fe0: 76b70ec0 76b70eb0 000189f0 00132dd0 [ 2674.901903][T22326] r7:00000126 r6:002862f8 r5:00000000 r4:00000280 [ 2674.903167][T22339] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2674.926810][T22326] Mem-Info: [ 2674.927240][T22326] active_anon:1423 inactive_anon:0 isolated_anon:0 [ 2674.927240][T22326] active_file:64 inactive_file:40248 isolated_file:0 [ 2674.927240][T22326] unevictable:768 dirty:12 writeback:0 [ 2674.927240][T22326] slab_reclaimable:1043 slab_unreclaimable:19242 [ 2674.927240][T22326] mapped:2125 shmem:844 pagetables:219 [ 2674.927240][T22326] sec_pagetables:0 bounce:0 [ 2674.927240][T22326] kernel_misc_reclaimable:0 [ 2674.927240][T22326] free:424308 free_pcp:1056 free_cma:4032 [ 2674.928971][T22326] Node 0 active_anon:5692kB inactive_anon:0kB active_file:256kB inactive_file:160992kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:8500kB dirty:48kB writeback:0kB shmem:3376kB writeback_tmp:0kB kernel_stack:1560kB pagetables:876kB sec_pagetables:0kB all_unreclaimable? no [ 2674.929927][T22326] Normal free:1330240kB boost:0kB min:4776kB low:6204kB high:7632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4092kB unevictable:0kB writepending:0kB present:1556480kB managed:1430068kB mlocked:0kB bounce:0kB free_pcp:4224kB local_pcp:1512kB free_cma:0kB [ 2674.931352][T22326] lowmem_reserve[]: 0 4224 0 [ 2674.931734][T22326] Normal: 32*4kB (UME) 6*8kB (UM) 7*16kB (UME) 3*32kB (U) 1*64kB (U) 5*128kB (UM) 6*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 3*2048kB (ME) 321*4096kB (UM) = 1330240kB [ 2674.933234][T22326] 41156 total pagecache pages [ 2674.933535][T22326] 0 pages in swap cache [ 2674.933745][T22326] Free swap = 124924kB [ 2674.934156][T22326] Total swap = 124996kB [ 2674.934506][T22326] 524288 pages RAM [ 2674.934747][T22326] 135168 pages HighMem/MovableOnly [ 2674.935062][T22326] 31603 pages reserved [ 2674.939027][T22326] 4096 pages cma reserved [ 2675.386011][T22356] serio: Serial port pts0 [ 2690.722503][T22479] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3803'. [ 2694.180494][T22521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22521 comm=syz.0.3822 [ 2706.220439][T22551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22551 comm=syz.1.3837 [ 2744.571398][T22870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22870 comm=syz.1.3982 [ 2755.590837][T22939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22939 comm=syz.1.4009 [ 2758.628567][T22970] fuse: Bad value for 'fd' [ 2769.909000][T23073] fuse: Bad value for 'fd' [ 2773.307717][T23085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23085 comm=syz.1.4075 [ 2780.964270][T23127] fuse: Unknown parameter '0x0000000000000003' [ 2801.462607][T23223] serio: Serial port pts0 [ 2803.531947][T23235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23235 comm=syz.0.4143 [ 2805.029153][T23251] fuse: Bad value for 'group_id' [ 2805.029618][T23251] fuse: Bad value for 'group_id' [ 2805.332508][T23254] fuse: Bad value for 'group_id' [ 2805.333001][T23254] fuse: Bad value for 'group_id' [ 2807.099195][T23271] fuse: Bad value for 'group_id' [ 2807.099684][T23271] fuse: Bad value for 'group_id' [ 2813.709216][T23323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23323 comm=syz.1.4179 [ 2814.281949][T23331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=23331 comm=syz.0.4185 [ 2817.028528][T23363] fuse: Unknown parameter 'grou00000000000000000000' [ 2817.319535][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2818.241030][T23374] fuse: Unknown parameter 'grou00000000000000000000' [ 2828.867983][T23396] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2828.868515][T23396] warn_alloc: 1 callbacks suppressed [ 2828.868536][T23396] syz.0.4217: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 2828.869102][T23396] CPU: 0 UID: 0 PID: 23396 Comm: syz.0.4217 Not tainted 6.11.0-rc6-syzkaller #0 [ 2828.869317][T23396] Hardware name: ARM-Versatile Express [ 2828.869459][T23396] Call trace: [ 2828.869560][T23396] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 2828.869783][T23396] r7:ff800000 r6:82025a1c r5:60000013 r4:8200ca84 [ 2828.869936][T23396] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 2828.870158][T23396] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 2828.870417][T23396] r5:83896000 r4:00000000 [ 2828.870534][T23396] [<8197af40>] (dump_stack) from [<804b30fc>] (warn_alloc+0xd8/0x178) [ 2828.870728][T23396] [<804b3024>] (warn_alloc) from [<804aa2c0>] (__vmalloc_node_range_noprof+0xcc/0x56c) [ 2828.870943][T23396] r3:20000000 r2:82025a1c [ 2828.871054][T23396] r6:00000dc0 r5:00000001 r4:20000000 [ 2828.871190][T23396] [<804aa1f4>] (__vmalloc_node_range_noprof) from [<80461674>] (__kvmalloc_node_noprof+0xc0/0x110) [ 2828.871443][T23396] r10:dfe79d00 r9:84787400 r8:81606070 r7:ffffffff r6:00000dc0 r5:20000000 [ 2828.871630][T23396] r4:00000000 [ 2828.871731][T23396] [<804615b4>] (__kvmalloc_node_noprof) from [<81606070>] (xt_alloc_entry_offsets+0x24/0x30) [ 2828.871949][T23396] r8:b5403587 r7:00000000 r6:20000360 r5:84787440 r4:08000000 [ 2828.872097][T23396] [<8160604c>] (xt_alloc_entry_offsets) from [<816bea4c>] (translate_table+0x70/0x78c) [ 2828.872304][T23396] [<816be9dc>] (translate_table) from [<816bfc08>] (do_replace+0xe8/0x5a0) [ 2828.872498][T23396] r10:00000126 r9:84787440 r8:b5403587 r7:00000238 r6:20000360 r5:84787400 [ 2828.872651][T23396] r4:84f5db00 [ 2828.872738][T23396] [<816bfb20>] (do_replace) from [<816c01f4>] (do_ipt_set_ctl+0x134/0x2a0) [ 2828.872937][T23396] r10:00000126 r9:81453f20 r8:84f10d40 r7:00000298 r6:dfe79da8 r5:84591740 [ 2828.873108][T23396] r4:00000040 [ 2828.873185][T23396] [<816c00c0>] (do_ipt_set_ctl) from [<81593b30>] (nf_setsockopt+0x60/0x7c) [ 2828.873385][T23396] r10:00000126 r9:81453f20 r8:84f10d40 r7:00000298 r6:84591740 r5:816c00c0 [ 2828.873557][T23396] r4:827e0520 [ 2828.873643][T23396] [<81593ad4>] (nf_setsockopt) from [<8162bd0c>] (ip_setsockopt+0x88/0x98) [ 2828.873834][T23396] r6:84591740 r5:00000298 r4:00000040 [ 2828.873953][T23396] [<8162bc88>] (ip_setsockopt) from [<8163b7b0>] (tcp_setsockopt+0x3c/0x58) [ 2828.874149][T23396] r6:00000000 r5:84f10900 r4:8162bc84 [ 2828.874297][T23396] [<8163b778>] (tcp_setsockopt) from [<81453f58>] (sock_common_setsockopt+0x38/0x40) [ 2828.874496][T23396] r4:8163b774 [ 2828.874582][T23396] [<81453f24>] (sock_common_setsockopt) from [<81867660>] (smc_setsockopt+0xa8/0x3c8) [ 2828.874782][T23396] r4:00000040 [ 2828.874865][T23396] [<818675bc>] (smc_setsockopt) from [<8144f574>] (do_sock_setsockopt+0xb0/0x17c) [ 2828.875105][T23396] r9:83896000 r8:8020029c r7:00000000 r6:83334780 r5:00000000 r4:818675b8 [ 2828.875718][T23396] [<8144f4c4>] (do_sock_setsockopt) from [<81452a74>] (sys_setsockopt+0x78/0xbc) [ 2828.876138][T23396] r6:83334780 r5:00000040 r4:00000000 [ 2828.876316][T23396] [<814529fc>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2828.876518][T23396] Exception stack(0xdfe79fa8 to 0xdfe79ff0) [ 2828.876668][T23396] 9fa0: 00000298 00000000 00000003 00000000 00000040 20000300 [ 2828.876900][T23396] 9fc0: 00000298 00000000 002862f8 00000126 00000000 00006364 003d0f00 76b710bc [ 2828.877130][T23396] 9fe0: 76b70ec0 76b70eb0 000189f0 00132dd0 [ 2828.877289][T23396] r7:00000126 r6:002862f8 r5:00000000 r4:00000298 [ 2828.885716][T23396] Mem-Info: [ 2828.885986][T23396] active_anon:1406 inactive_anon:0 isolated_anon:0 [ 2828.885986][T23396] active_file:64 inactive_file:40298 isolated_file:0 [ 2828.885986][T23396] unevictable:768 dirty:12 writeback:0 [ 2828.885986][T23396] slab_reclaimable:1043 slab_unreclaimable:19239 [ 2828.885986][T23396] mapped:2101 shmem:846 pagetables:213 [ 2828.885986][T23396] sec_pagetables:0 bounce:0 [ 2828.885986][T23396] kernel_misc_reclaimable:0 [ 2828.885986][T23396] free:424178 free_pcp:1059 free_cma:4032 [ 2828.887742][T23396] Node 0 active_anon:5624kB inactive_anon:0kB active_file:256kB inactive_file:161192kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:8404kB dirty:48kB writeback:0kB shmem:3384kB writeback_tmp:0kB kernel_stack:1656kB pagetables:852kB sec_pagetables:0kB all_unreclaimable? no [ 2828.888730][T23396] Normal free:1329988kB boost:0kB min:4776kB low:6204kB high:7632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4292kB unevictable:0kB writepending:8kB present:1556480kB managed:1430068kB mlocked:0kB bounce:0kB free_pcp:4236kB local_pcp:1488kB free_cma:0kB [ 2828.890093][T23396] lowmem_reserve[]: 0 4224 0 [ 2828.896157][T23396] Normal: 3*4kB (UME) 1*8kB (M) 3*16kB (UME) 2*32kB (U) 1*64kB (U) 5*128kB (UM) 6*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 3*2048kB (ME) 321*4096kB (UM) = 1329988kB [ 2828.897396][T23396] 41210 total pagecache pages [ 2828.897564][T23396] 0 pages in swap cache [ 2828.897684][T23396] Free swap = 124924kB [ 2828.897887][T23396] Total swap = 124996kB [ 2828.898060][T23396] 524288 pages RAM [ 2828.898266][T23396] 135168 pages HighMem/MovableOnly [ 2828.898451][T23396] 31603 pages reserved [ 2828.898658][T23396] 4096 pages cma reserved [ 2829.082557][T23404] serio: Serial port pts0 [ 2842.101659][T23487] fuse: Bad value for 'user_id' [ 2842.102207][T23487] fuse: Bad value for 'user_id' [ 2843.758948][T23501] fuse: Bad value for 'fd' [ 2853.231089][T23557] fuse: Invalid rootmode [ 2854.417228][T23571] fuse: Invalid rootmode [ 2855.462846][T23583] fuse: Invalid rootmode [ 2856.394904][T23593] fuse: Bad value for 'rootmode' [ 2857.458241][T23605] fuse: Bad value for 'rootmode' [ 2858.678851][T23618] fuse: Bad value for 'rootmode' [ 2859.559397][T23631] fuse: Unknown parameter 'use00000000000000000000' [ 2860.918955][T23643] fuse: Unknown parameter 'use00000000000000000000' [ 2862.319565][T23655] fuse: Unknown parameter 'use00000000000000000000' [ 2863.663665][T23666] fuse: Unknown parameter 'user_i00000000000000000000' [ 2864.800965][T23679] fuse: Unknown parameter 'user_i00000000000000000000' [ 2865.910773][T23691] fuse: Unknown parameter 'user_i00000000000000000000' [ 2868.058843][T23712] fuse: Unknown parameter 'user_id00000000000000000000' [ 2869.367354][T23724] fuse: Unknown parameter 'user_id00000000000000000000' [ 2874.810006][T23789] fuse: Bad value for 'fd' [ 2875.017487][T23791] fuse: Unknown parameter '0x0000000000000003' [ 2875.948121][T23802] fuse: Bad value for 'fd' [ 2876.310286][T23805] fuse: Unknown parameter '0x0000000000000003' [ 2876.977215][T23814] fuse: Bad value for 'fd' [ 2877.280257][T23818] fuse: Unknown parameter '0x0000000000000003' [ 2878.544581][T23832] fuse: Unknown parameter '0x0000000000000003' [ 2880.130645][T23849] fuse: Unknown parameter '0x0000000000000003' [ 2883.217755][T23872] fuse: Unknown parameter 'fd0x0000000000000003' [ 2883.257415][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2884.412058][T23883] fuse: Unknown parameter 'fd0x0000000000000003' [ 2892.305974][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2902.394533][T18474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.513391][T18474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.589542][T18474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.659528][T18474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2903.230957][T18474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2903.279081][T18474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2903.320705][T18474] bond0 (unregistering): Released all slaves [ 2903.546964][T18474] hsr_slave_0: left promiscuous mode [ 2903.571307][T18474] hsr_slave_1: left promiscuous mode [ 2903.600012][T18474] veth1_macvtap: left promiscuous mode [ 2903.600653][T18474] veth0_macvtap: left promiscuous mode [ 2903.601154][T18474] veth1_vlan: left promiscuous mode [ 2903.601717][T18474] veth0_vlan: left promiscuous mode [ 2906.994014][T24070] fuse: Bad value for 'fd' [ 2910.232826][T23998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2910.248852][T23998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2913.361027][T23998] hsr_slave_0: entered promiscuous mode [ 2913.366502][T23998] hsr_slave_1: entered promiscuous mode [ 2913.368726][T23998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2913.369110][T23998] Cannot create hsr debugfs directory [ 2915.194483][T23998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2915.217067][T23998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2915.272219][T23998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2915.312232][T23998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2917.739907][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2920.208696][T24445] fuse: Unknown parameter 'grou00000000000000000000' [ 2922.557336][T24469] fuse: Unknown parameter 'grou00000000000000000000' [ 2927.583063][T23998] veth0_vlan: entered promiscuous mode [ 2927.639500][T23998] veth1_vlan: entered promiscuous mode [ 2927.851127][T23998] veth0_macvtap: entered promiscuous mode [ 2927.889191][T23998] veth1_macvtap: entered promiscuous mode [ 2928.003142][T23998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2928.003567][T23998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2928.003904][T23998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2928.004161][T23998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2931.033535][T24550] fuse: Unknown parameter 'group_i00000000000000000000' [ 2931.993766][T24561] fuse: Unknown parameter 'group_id00000000000000000000' [ 2933.563066][T24576] fuse: Unknown parameter 'group_id00000000000000000000' [ 2935.166374][T24592] fuse: Unknown parameter 'group_id00000000000000000000' [ 2945.600523][T24679] fuse: Bad value for 'fd' [ 2947.241412][T24691] fuse: Bad value for 'fd' [ 2953.493884][T24733] fuse: Bad value for 'group_id' [ 2953.535649][T24733] fuse: Bad value for 'group_id' [ 2956.228424][T24762] fuse: Bad value for 'group_id' [ 2956.228890][T24762] fuse: Bad value for 'group_id' [ 2967.588969][T24841] fuse: Bad value for 'rootmode' [ 2971.033428][T24865] fuse: Bad value for 'fd' [ 2982.792487][T24934] fuse: Unknown parameter 'user_id00000000000000000000' [ 2986.734641][T24956] fuse: Unknown parameter 'user_id00000000000000000000' [ 2991.523270][T24985] fuse: Bad value for 'fd' [ 2992.583342][T24993] fuse: Bad value for 'fd' [ 2993.353343][T24999] fuse: Unknown parameter '0x0000000000000004' [ 2993.992313][T25005] fuse: Bad value for 'fd' [ 2994.562243][T25012] fuse: Unknown parameter '0x0000000000000004' [ 2994.931584][T25016] fuse: Bad value for 'fd' [ 2995.907596][T25025] fuse: Unknown parameter '0x0000000000000004' [ 2996.747970][T25032] fuse: Invalid rootmode [ 2997.024797][T25037] fuse: Unknown parameter '0x0000000000000004' [ 3002.819154][T25072] fuse: Unknown parameter 'fd0x0000000000000004' [ 3007.436044][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 3008.548733][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 3009.707799][T25146] fuse: Bad value for 'group_id' [ 3009.708302][T25146] fuse: Bad value for 'group_id' [ 3010.061043][ T31] audit: type=1400 audit(3009.980:1838): avc: denied { remount } for pid=25149 comm="syz.0.4786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3010.934321][T25161] fuse: Bad value for 'group_id' [ 3010.934803][T25161] fuse: Bad value for 'group_id' [ 3012.098989][T25171] fuse: Bad value for 'group_id' [ 3012.099429][T25171] fuse: Bad value for 'group_id' [ 3013.101345][T25184] fuse: Unknown parameter 'use00000000000000000000' [ 3018.446934][T25234] fuse: Unknown parameter 'user_i00000000000000000000' [ 3019.970398][T25248] fuse: Unknown parameter 'user_id00000000000000000000' [ 3021.333312][T25262] fuse: Unknown parameter 'user_id00000000000000000000' [ 3023.389932][T25288] fuse: Unknown parameter 'grou00000000000000000000' [ 3025.254882][T25303] fuse: Bad value for 'fd' [ 3026.487639][T25313] fuse: Bad value for 'fd' [ 3027.768375][T25326] fuse: Bad value for 'fd' [ 3030.149797][T25356] fuse: Unknown parameter '00000000000000000003' [ 3031.358290][T25370] fuse: Unknown parameter '00000000000000000003' [ 3032.709287][T25383] fuse: Unknown parameter '00000000000000000003' [ 3038.793534][T25442] fuse: Bad value for 'user_id' [ 3038.793988][T25442] fuse: Bad value for 'user_id' [ 3040.387033][T25455] fuse: Unknown parameter 'fd00000000000000000003' [ 3040.391365][T25458] fuse: Bad value for 'user_id' [ 3040.391633][T25458] fuse: Bad value for 'user_id' [ 3041.326131][T25470] fuse: Bad value for 'fd' [ 3042.762220][T25490] fuse: Bad value for 'fd' [ 3044.213986][T25501] fuse: Bad value for 'fd' [ 3046.451376][T25516] fuse: Bad value for 'fd' [ 3047.706685][T25526] fuse: Bad value for 'fd' [ 3049.442420][T25538] fuse: Bad value for 'fd' [ 3051.488587][T18474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.560387][T18474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.618009][T18474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.690843][T18474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.377615][T18474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3052.427039][T18474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3052.458627][T18474] bond0 (unregistering): Released all slaves [ 3052.637663][T18474] hsr_slave_0: left promiscuous mode [ 3052.665930][T18474] hsr_slave_1: left promiscuous mode [ 3052.706625][T18474] veth1_macvtap: left promiscuous mode [ 3052.707167][T18474] veth0_macvtap: left promiscuous mode [ 3052.707593][T18474] veth1_vlan: left promiscuous mode [ 3052.708023][T18474] veth0_vlan: left promiscuous mode [ 3054.186169][T25597] fuse: Invalid rootmode [ 3057.573744][T25552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3057.591623][T25552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3061.121670][T25552] hsr_slave_0: entered promiscuous mode [ 3061.183455][T25552] hsr_slave_1: entered promiscuous mode [ 3061.189723][T25552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3061.190285][T25552] Cannot create hsr debugfs directory [ 3062.680607][T25552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3062.711837][T25552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3062.742970][T25552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3062.771496][T25552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3065.251587][T25552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3072.879021][T26087] fuse: Unknown parameter 'user_i00000000000000000000' [ 3075.430367][T25552] veth0_vlan: entered promiscuous mode [ 3075.509879][T25552] veth1_vlan: entered promiscuous mode [ 3075.821889][T25552] veth0_macvtap: entered promiscuous mode [ 3075.873747][T25552] veth1_macvtap: entered promiscuous mode [ 3076.108251][T25552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3076.108922][T25552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3076.109390][T25552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3076.109959][T25552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3186.446501][T27192] fuse: Bad value for 'fd' [ 3189.647101][T27231] fuse: Bad value for 'fd' [ 3195.825140][T27326] "syz.1.5443" (27326) uses obsolete ecb(arc4) skcipher [ 3197.059914][T27341] "syz.1.5449" (27341) uses obsolete ecb(arc4) skcipher [ 3228.599016][T18474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3228.759240][T18474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3228.877585][T18474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3228.955172][T18474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3229.604843][T18474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.622319][T18474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3229.647173][T18474] bond0 (unregistering): Released all slaves [ 3229.820314][T18474] hsr_slave_0: left promiscuous mode [ 3229.824705][T18474] hsr_slave_1: left promiscuous mode [ 3229.864930][T18474] veth1_macvtap: left promiscuous mode [ 3229.882745][T18474] veth0_macvtap: left promiscuous mode [ 3229.883520][T18474] veth1_vlan: left promiscuous mode [ 3229.883937][T18474] veth0_vlan: left promiscuous mode [ 3236.040848][T27626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3236.071968][T27626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3238.301155][T27626] hsr_slave_0: entered promiscuous mode [ 3238.318746][T27626] hsr_slave_1: entered promiscuous mode [ 3238.326358][T27626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3238.326983][T27626] Cannot create hsr debugfs directory [ 3240.060292][T27626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3240.093424][T27626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3240.217215][T27626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3240.239198][T27626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3242.024091][T27626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3244.201136][T27626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3249.927005][T27626] veth0_vlan: entered promiscuous mode [ 3249.962093][T27626] veth1_vlan: entered promiscuous mode [ 3250.112179][T27626] veth0_macvtap: entered promiscuous mode [ 3250.144657][T27626] veth1_macvtap: entered promiscuous mode [ 3250.287275][T27626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3250.288104][T27626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3250.288481][T27626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3250.288821][T27626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3254.076570][T28146] fuse: Unknown parameter 'grou00000000000000000000' [ 3254.959302][T28160] fuse: Unknown parameter 'grou00000000000000000000' [ 3256.140130][T28171] fuse: Unknown parameter 'grou00000000000000000000' [ 3257.509593][T28182] fuse: Unknown parameter 'group_i00000000000000000000' [ 3259.140862][T28197] fuse: Unknown parameter 'group_i00000000000000000000' [ 3262.689206][T28224] fuse: Unknown parameter 'group_id00000000000000000000' [ 3263.767530][T28235] fuse: Unknown parameter 'group_id00000000000000000000' [ 3267.266000][T28256] fuse: Unknown parameter 'group_id00000000000000000000' [ 3268.612052][T28268] fuse: Bad value for 'user_id' [ 3268.613015][T28268] fuse: Bad value for 'user_id' [ 3270.624554][T28285] fuse: Bad value for 'user_id' [ 3270.624961][T28285] fuse: Bad value for 'user_id' [ 3272.439766][T28296] fuse: Bad value for 'user_id' [ 3272.440219][T28296] fuse: Bad value for 'user_id' [ 3280.198619][T28379] fuse: Bad value for 'fd' [ 3289.367686][T28501] fuse: Unknown parameter 'use00000000000000000000' [ 3296.537920][T28595] fuse: Unknown parameter 'user_i00000000000000000000' [ 3304.031636][T28677] fuse: Bad value for 'fd' [ 3305.289896][T28691] fuse: Bad value for 'fd' [ 3306.337240][T28702] fuse: Bad value for 'fd' [ 3307.477210][T28714] fuse: Unknown parameter '00000000000000000003' [ 3308.396616][T28726] fuse: Unknown parameter '00000000000000000003' [ 3369.516582][ T32] INFO: task kworker/0:26:24048 blocked for more than 430 seconds. [ 3369.517598][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.519568][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.520372][ T32] task:kworker/0:26 state:D stack:0 pid:24048 tgid:24048 ppid:2 flags:0x00000000 [ 3369.521517][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.522134][ T32] Call trace: [ 3369.522539][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.522983][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfbedda4 r5:82eebc00 [ 3369.523499][ T32] r4:82eebc00 [ 3369.523666][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.524028][ T32] r5:82eebc00 r4:82714ab4 [ 3369.524219][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.524752][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.525176][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbede20 [ 3369.550312][ T32] r4:00000000 [ 3369.550501][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.550888][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.551361][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.551899][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84c2e040 [ 3369.552292][ T32] r4:00000000 [ 3369.552481][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.552923][ T32] r9:82eebc00 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f029000 [ 3369.553238][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.553567][ T32] r5:00001000 r4:dfb0b000 [ 3369.553776][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.554293][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.554655][ T32] r5:85a73b54 r4:85a73800 [ 3369.554833][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3369.575756][ T32] r7:dddd0000 r6:82c16000 r5:85a73b54 r4:847bb080 [ 3369.576333][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.576751][ T32] r10:82eebc00 r9:847bb0ac r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.577102][ T32] r4:847bb080 [ 3369.577266][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.577609][ T32] r10:00000000 r9:dfbd5e78 r8:84cbdec0 r7:847bb080 r6:80266900 r5:82eebc00 [ 3369.577964][ T32] r4:84f3fb00 [ 3369.578120][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.578611][ T32] Exception stack(0xdfbedfb0 to 0xdfbedff8) [ 3369.578906][ T32] dfa0: 00000000 00000000 00000000 00000000 [ 3369.579310][ T32] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.579625][ T32] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.579999][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:84f3fb00 [ 3369.580586][ T32] INFO: task kworker/0:27:24483 blocked for more than 430 seconds. [ 3369.581039][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.581358][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.581750][ T32] task:kworker/0:27 state:D stack:0 pid:24483 tgid:24483 ppid:2 flags:0x00000000 [ 3369.582233][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.582511][ T32] Call trace: [ 3369.582815][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.583269][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfa41da4 r5:84d36c00 [ 3369.583669][ T32] r4:84d36c00 [ 3369.583935][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.584491][ T32] r5:84d36c00 r4:82714ab4 [ 3369.584770][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.625712][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.626519][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfa41e20 [ 3369.626791][ T32] r4:00000000 [ 3369.626949][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.627353][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.627697][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.628049][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a089400 [ 3369.628344][ T32] r4:00000000 [ 3369.628506][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.628868][ T32] r9:84d36c00 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f02f000 [ 3369.629191][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.629788][ T32] r5:00001000 r4:dfc2b000 [ 3369.629986][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.630409][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.630778][ T32] r5:846c4b54 r4:846c4800 [ 3369.630970][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.631400][ T32] r7:dddd0000 r6:82c16000 r5:846c4b54 r4:84653400 [ 3369.631637][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.632164][ T32] r10:84d36c00 r9:8465342c r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.632757][ T32] r4:84653400 [ 3369.633016][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.633392][ T32] r10:00000000 r9:dffb9e78 r8:8a067e00 r7:84653400 r6:80266900 r5:84d36c00 [ 3369.633738][ T32] r4:8a067e40 [ 3369.633929][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.634276][ T32] Exception stack(0xdfa41fb0 to 0xdfa41ff8) [ 3369.634626][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 3369.635003][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.667807][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.668266][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8a067e40 [ 3369.669039][ T32] INFO: task kworker/0:28:24515 blocked for more than 430 seconds. [ 3369.669360][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.669608][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.669952][ T32] task:kworker/0:28 state:D stack:0 pid:24515 tgid:24515 ppid:2 flags:0x00000000 [ 3369.670379][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.670701][ T32] Call trace: [ 3369.670877][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.671232][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:e064dda4 r5:84d33c00 [ 3369.671536][ T32] r4:84d33c00 [ 3369.671697][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.672053][ T32] r5:84d33c00 r4:82714ab4 [ 3369.672239][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.672644][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.673040][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e064de20 [ 3369.673339][ T32] r4:00000000 [ 3369.673491][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.673833][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.674208][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.674582][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a083680 [ 3369.674879][ T32] r4:00000000 [ 3369.675043][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.705899][ T32] r9:84d33c00 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f240000 [ 3369.706934][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.707359][ T32] r5:00001000 r4:dfd11000 [ 3369.707554][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.707922][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.708527][ T32] r5:85882b54 r4:85882800 [ 3369.708810][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.709317][ T32] r7:dddd0000 r6:82c16000 r5:85882b54 r4:8a013380 [ 3369.709587][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.710021][ T32] r10:84d33c00 r9:8a0133ac r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.710482][ T32] r4:8a013380 [ 3369.710678][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.711194][ T32] r10:00000000 r9:dfa41e78 r8:8a07c840 r7:8a013380 r6:80266900 r5:84d33c00 [ 3369.711591][ T32] r4:8a07c000 [ 3369.711777][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.712418][ T32] Exception stack(0xe064dfb0 to 0xe064dff8) [ 3369.712711][ T32] dfa0: 00000000 00000000 00000000 00000000 [ 3369.713100][ T32] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.713480][ T32] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.713804][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8a07c000 [ 3369.714198][ T32] INFO: task kworker/0:29:24518 blocked for more than 430 seconds. [ 3369.714562][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.714838][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.751110][ T32] task:kworker/0:29 state:D stack:0 pid:24518 tgid:24518 ppid:2 flags:0x00000000 [ 3369.751785][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.752112][ T32] Call trace: [ 3369.752327][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.752724][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:e0689da4 r5:84d34800 [ 3369.753067][ T32] r4:84d34800 [ 3369.753252][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.753629][ T32] r5:84d34800 r4:82714ab4 [ 3369.753837][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.754340][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.754777][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0689e20 [ 3369.755111][ T32] r4:00000000 [ 3369.756237][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.756685][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.757081][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.757616][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85163340 [ 3369.758254][ T32] r4:00000000 [ 3369.758474][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.758906][ T32] r9:84d34800 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f244000 [ 3369.759257][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.759629][ T32] r5:00001000 r4:dfe45000 [ 3369.759852][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.760241][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.760643][ T32] r5:846c6354 r4:846c6000 [ 3369.760848][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.761282][ T32] r7:dddd0000 r6:82c16000 r5:846c6354 r4:8a013480 [ 3369.761539][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.761932][ T32] r10:84d34800 r9:8a0134ac r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.762296][ T32] r4:8a013480 [ 3369.762475][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.762842][ T32] r10:00000000 r9:dfa41e78 r8:8a067680 r7:8a013480 r6:80266900 r5:84d34800 [ 3369.763178][ T32] r4:8a067140 [ 3369.763354][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.763705][ T32] Exception stack(0xe0689fb0 to 0xe0689ff8) [ 3369.763980][ T32] 9fa0: 00000000 00000000 00000000 00000000 [ 3369.764355][ T32] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.764688][ T32] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.764988][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8a067140 [ 3369.786079][ T32] INFO: task kworker/0:30:24519 blocked for more than 430 seconds. [ 3369.786734][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.786992][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.787340][ T32] task:kworker/0:30 state:D stack:0 pid:24519 tgid:24519 ppid:2 flags:0x00000000 [ 3369.787976][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.788424][ T32] Call trace: [ 3369.788685][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.789105][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfb41da4 r5:84d33000 [ 3369.789551][ T32] r4:84d33000 [ 3369.789788][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.790350][ T32] r5:84d33000 r4:82714ab4 [ 3369.790618][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.791252][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.791816][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb41e20 [ 3369.792227][ T32] r4:00000000 [ 3369.792458][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.792886][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.793387][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.793885][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:850a1380 [ 3369.794293][ T32] r4:00000000 [ 3369.794524][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.794956][ T32] r9:84d33000 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f23e000 [ 3369.815750][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.816158][ T32] r5:00001000 r4:dfc57000 [ 3369.816266][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.816495][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.816767][ T32] r5:846c7b54 r4:846c7800 [ 3369.816884][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.817178][ T32] r7:dddd0000 r6:82c16000 r5:846c7b54 r4:8a013e00 [ 3369.817325][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.817534][ T32] r10:84d33000 r9:8a013e2c r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.817763][ T32] r4:8a013e00 [ 3369.817943][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.818451][ T32] r10:00000000 r9:e0689e78 r8:8a067c80 r7:8a013e00 r6:80266900 r5:84d33000 [ 3369.818662][ T32] r4:8a067140 [ 3369.818831][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.819027][ T32] Exception stack(0xdfb41fb0 to 0xdfb41ff8) [ 3369.819214][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 3369.819434][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.819628][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.819822][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8a067140 [ 3369.820041][ T32] INFO: task kworker/1:30:24520 blocked for more than 430 seconds. [ 3369.820235][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.820372][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.820574][ T32] task:kworker/1:30 state:D stack:0 pid:24520 tgid:24520 ppid:2 flags:0x00000000 [ 3369.820836][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.821001][ T32] Call trace: [ 3369.821184][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.821679][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfafdda4 r5:836e0c00 [ 3369.822044][ T32] r4:836e0c00 [ 3369.822270][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.822757][ T32] r5:836e0c00 r4:82714ab4 [ 3369.823004][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.823559][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.824105][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfafde20 [ 3369.824506][ T32] r4:00000000 [ 3369.824706][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.846162][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.846895][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.847362][ T32] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:846bed00 [ 3369.847725][ T32] r4:00000000 [ 3369.847935][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.848367][ T32] r9:836e0c00 r8:01800000 r7:00000000 r6:82c16200 r5:00001000 r4:7f242000 [ 3369.848715][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.849154][ T32] r5:00001000 r4:dfd71000 [ 3369.849344][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.849675][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.850086][ T32] r5:8587cb54 r4:8587c800 [ 3369.850325][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.850767][ T32] r7:ddde4000 r6:82c16200 r5:8587cb54 r4:85b86880 [ 3369.851024][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.851437][ T32] r10:836e0c00 r9:85b868ac r8:61c88647 r7:ddde4020 r6:82604d40 r5:ddde4000 [ 3369.851724][ T32] r4:85b86880 [ 3369.851888][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.852441][ T32] r10:00000000 r9:dfbf1e78 r8:84c9f640 r7:85b86880 r6:80266900 r5:836e0c00 [ 3369.852822][ T32] r4:84f86880 [ 3369.853069][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.853627][ T32] Exception stack(0xdfafdfb0 to 0xdfafdff8) [ 3369.853916][ T32] dfa0: 00000000 00000000 00000000 00000000 [ 3369.854479][ T32] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.854915][ T32] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.885864][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:84f86880 [ 3369.886446][ T32] INFO: task kworker/0:31:24536 blocked for more than 430 seconds. [ 3369.886766][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.886992][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.887315][ T32] task:kworker/0:31 state:D stack:0 pid:24536 tgid:24536 ppid:2 flags:0x00000000 [ 3369.887829][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.888225][ T32] Call trace: [ 3369.888452][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.888843][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfcf5da4 r5:840fc800 [ 3369.889194][ T32] r4:840fc800 [ 3369.889401][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.889880][ T32] r5:840fc800 r4:82714ab4 [ 3369.890058][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.890805][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.891252][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfcf5e20 [ 3369.891618][ T32] r4:00000000 [ 3369.891807][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.892203][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.892663][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.892992][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84f9f880 [ 3369.893397][ T32] r4:00000000 [ 3369.893554][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.893902][ T32] r9:840fc800 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f246000 [ 3369.894274][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.894683][ T32] r5:00001000 r4:e0059000 [ 3369.894863][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.915924][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.916596][ T32] r5:846c5f54 r4:846c5c00 [ 3369.916841][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.917256][ T32] r7:dddd0000 r6:82c16000 r5:846c5f54 r4:8a013b80 [ 3369.917584][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.917930][ T32] r10:840fc800 r9:8a013bac r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.918240][ T32] r4:8a013b80 [ 3369.918402][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.918975][ T32] r10:00000000 r9:e0689e78 r8:85064fc0 r7:8a013b80 r6:80266900 r5:840fc800 [ 3369.919687][ T32] r4:847acfc0 [ 3369.919887][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.920241][ T32] Exception stack(0xdfcf5fb0 to 0xdfcf5ff8) [ 3369.920545][ T32] 5fa0: 00000000 00000000 00000000 00000000 [ 3369.920903][ T32] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.921223][ T32] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.921838][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:847acfc0 [ 3369.942730][ T32] INFO: task kworker/0:33:24566 blocked for more than 430 seconds. [ 3369.943316][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3369.943552][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3369.943869][ T32] task:kworker/0:33 state:D stack:0 pid:24566 tgid:24566 ppid:2 flags:0x00000000 [ 3369.944371][ T32] Workqueue: events bpf_prog_free_deferred [ 3369.944690][ T32] Call trace: [ 3369.944865][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3369.945311][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:e0009da4 r5:8467bc00 [ 3369.950302][ T32] r4:8467bc00 [ 3369.950494][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3369.951053][ T32] r5:8467bc00 r4:82714ab4 [ 3369.951274][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3369.954314][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3369.969514][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0009e20 [ 3369.974398][ T32] r4:00000000 [ 3369.986035][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3369.986631][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3369.987003][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3369.987342][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:850d79c0 [ 3369.987694][ T32] r4:00000000 [ 3369.987857][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3369.988254][ T32] r9:8467bc00 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f248000 [ 3369.988594][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3369.988990][ T32] r5:00001000 r4:e0519000 [ 3369.989171][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3369.989534][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3369.989929][ T32] r5:8587ff54 r4:8587fc00 [ 3369.990160][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3369.990631][ T32] r7:dddd0000 r6:82c16000 r5:8587ff54 r4:85be7a80 [ 3369.990862][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3369.991261][ T32] r10:8467bc00 r9:85be7aac r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3369.991553][ T32] r4:85be7a80 [ 3369.991735][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3369.992143][ T32] r10:00000000 r9:dfb45e78 r8:847acc00 r7:85be7a80 r6:80266900 r5:8467bc00 [ 3369.992481][ T32] r4:84f9f440 [ 3369.992665][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3369.992995][ T32] Exception stack(0xe0009fb0 to 0xe0009ff8) [ 3369.993284][ T32] 9fa0: 00000000 00000000 00000000 00000000 [ 3369.993651][ T32] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3369.993999][ T32] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3369.994324][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:84f9f440 [ 3369.994635][ T32] INFO: task kworker/0:35:24601 blocked for more than 430 seconds. [ 3369.994931][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.005876][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3370.006333][ T32] task:kworker/0:35 state:D stack:0 pid:24601 tgid:24601 ppid:2 flags:0x00000000 [ 3370.006751][ T32] Workqueue: events bpf_prog_free_deferred [ 3370.007039][ T32] Call trace: [ 3370.007211][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3370.007534][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:dfc55da4 r5:84679800 [ 3370.007824][ T32] r4:84679800 [ 3370.007969][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3370.008334][ T32] r5:84679800 r4:82714ab4 [ 3370.008531][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3370.008915][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3370.009314][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfc55e20 [ 3370.009627][ T32] r4:00000000 [ 3370.009803][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3370.010107][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3370.010520][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3370.010829][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a05a900 [ 3370.011089][ T32] r4:00000000 [ 3370.011238][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3370.011537][ T32] r9:84679800 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f24c000 [ 3370.011808][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3370.012137][ T32] r5:00001000 r4:e072f000 [ 3370.012339][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3370.012672][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3370.013015][ T32] r5:846c6754 r4:846c6400 [ 3370.013180][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3370.013596][ T32] r7:dddd0000 r6:82c16000 r5:846c6754 r4:8a013f00 [ 3370.013832][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3370.014199][ T32] r10:84679800 r9:8a013f2c r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3370.014515][ T32] r4:8a013f00 [ 3370.014659][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3370.014993][ T32] r10:00000000 r9:dfb45e78 r8:8a083600 r7:8a013f00 r6:80266900 r5:84679800 [ 3370.025747][ T32] r4:8a05a380 [ 3370.027723][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3370.031816][ T32] Exception stack(0xdfc55fb0 to 0xdfc55ff8) [ 3370.034768][ T32] 5fa0: 00000000 00000000 00000000 00000000 [ 3370.046033][ T32] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3370.046523][ T32] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3370.046788][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:8a05a380 [ 3370.051354][ T32] INFO: task kworker/0:36:24605 blocked for more than 430 seconds. [ 3370.052028][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.052301][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3370.052647][ T32] task:kworker/0:36 state:D stack:0 pid:24605 tgid:24605 ppid:2 flags:0x00000000 [ 3370.053052][ T32] Workqueue: events bpf_prog_free_deferred [ 3370.053331][ T32] Call trace: [ 3370.053541][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3370.053879][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:e047dda4 r5:8467a400 [ 3370.054205][ T32] r4:8467a400 [ 3370.054356][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3370.054694][ T32] r5:8467a400 r4:82714ab4 [ 3370.054896][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3370.067309][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3370.067915][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e047de20 [ 3370.068200][ T32] r4:00000000 [ 3370.068345][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3370.068675][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3370.069044][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3370.069387][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a083dc0 [ 3370.069671][ T32] r4:00000000 [ 3370.069814][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3370.070106][ T32] r9:8467a400 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f00b000 [ 3370.070393][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3370.070762][ T32] r5:00001000 r4:df9e3000 [ 3370.070957][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3370.071313][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3370.071700][ T32] r5:846c4354 r4:846c4000 [ 3370.072038][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3370.072483][ T32] r7:dddd0000 r6:82c16000 r5:846c4354 r4:8a013400 [ 3370.072731][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3370.073104][ T32] r10:8467a400 r9:8a01342c r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3370.073449][ T32] r4:8a013400 [ 3370.073648][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3370.074047][ T32] r10:00000000 r9:dfb45e78 r8:8a07bac0 r7:8a013400 r6:80266900 r5:8467a400 [ 3370.074445][ T32] r4:85601bc0 [ 3370.074605][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3370.074961][ T32] Exception stack(0xe047dfb0 to 0xe047dff8) [ 3370.075210][ T32] dfa0: 00000000 00000000 00000000 00000000 [ 3370.106206][ T32] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3370.106967][ T32] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3370.107311][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:85601bc0 [ 3370.107700][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3370.108105][ T32] INFO: task kworker/0:37:24619 blocked for more than 430 seconds. [ 3370.108453][ T32] Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.108702][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3370.109078][ T32] task:kworker/0:37 state:D stack:0 pid:24619 tgid:24619 ppid:2 flags:0x00000000 [ 3370.110162][ T32] Workqueue: events bpf_prog_free_deferred [ 3370.110524][ T32] Call trace: [ 3370.110757][ T32] [<8197ecd0>] (__schedule) from [<8197f868>] (schedule+0x2c/0xfc) [ 3370.111139][ T32] r10:8260ca7c r9:00000000 r8:82714ab8 r7:00000002 r6:e078dda4 r5:8467c800 [ 3370.112486][ T32] r4:8467c800 [ 3370.114668][ T32] [<8197f83c>] (schedule) from [<8197fc1c>] (schedule_preempt_disabled+0x18/0x24) [ 3370.128422][ T32] r5:8467c800 r4:82714ab4 [ 3370.131370][ T32] [<8197fc04>] (schedule_preempt_disabled) from [<819826f4>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 3370.148487][ T32] [<8198240c>] (__mutex_lock.constprop.0) from [<81982fc0>] (__mutex_lock_slowpath+0x14/0x18) [ 3370.149118][ T32] r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e078de20 [ 3370.149475][ T32] r4:00000000 [ 3370.149629][ T32] [<81982fac>] (__mutex_lock_slowpath) from [<81983000>] (mutex_lock+0x3c/0x40) [ 3370.149999][ T32] [<81982fc4>] (mutex_lock) from [<804a63d4>] (_vm_unmap_aliases+0x68/0x240) [ 3370.150438][ T32] [<804a636c>] (_vm_unmap_aliases) from [<804aa130>] (vfree+0x170/0x1e4) [ 3370.150809][ T32] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84d9ef80 [ 3370.151166][ T32] r4:00000000 [ 3370.151365][ T32] [<804a9fc0>] (vfree) from [<805019d0>] (execmem_free+0x30/0x64) [ 3370.151729][ T32] r9:8467c800 r8:00800000 r7:00000000 r6:82c16000 r5:00001000 r4:7f031000 [ 3370.152084][ T32] [<805019a0>] (execmem_free) from [<80393a3c>] (bpf_jit_free_exec+0x10/0x14) [ 3370.152446][ T32] r5:00001000 r4:dfa55000 [ 3370.152667][ T32] [<80393a2c>] (bpf_jit_free_exec) from [<80393e1c>] (bpf_jit_free+0x68/0xe4) [ 3370.153035][ T32] [<80393db4>] (bpf_jit_free) from [<80394f58>] (bpf_prog_free_deferred+0x14c/0x164) [ 3370.153403][ T32] r5:84fbfb54 r4:84fbf800 [ 3370.153642][ T32] [<80394e0c>] (bpf_prog_free_deferred) from [<80265f08>] (process_one_work+0x1b4/0x4f4) [ 3370.154029][ T32] r7:dddd0000 r6:82c16000 r5:84fbfb54 r4:8a013000 [ 3370.154263][ T32] [<80265d54>] (process_one_work) from [<80266aec>] (worker_thread+0x1ec/0x3b4) [ 3370.154634][ T32] r10:8467c800 r9:8a01302c r8:61c88647 r7:dddd0020 r6:82604d40 r5:dddd0000 [ 3370.154942][ T32] r4:8a013000 [ 3370.155085][ T32] [<80266900>] (worker_thread) from [<8026fb04>] (kthread+0x104/0x134) [ 3370.166138][ T32] r10:00000000 r9:e00a1e78 r8:8a083900 r7:8a013000 r6:80266900 r5:8467c800 [ 3370.166597][ T32] r4:84ee7800 [ 3370.166798][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3370.167173][ T32] Exception stack(0xe078dfb0 to 0xe078dff8) [ 3370.167405][ T32] dfa0: 00000000 00000000 00000000 00000000 [ 3370.167687][ T32] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3370.167969][ T32] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3370.168219][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:84ee7800 [ 3370.168596][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3370.171235][ T32] NMI backtrace for cpu 1 [ 3370.171547][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.171967][ T32] Hardware name: ARM-Versatile Express [ 3370.172187][ T32] Call trace: [ 3370.172368][ T32] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 3370.172729][ T32] r7:00000000 r6:00000113 r5:60000193 r4:8200ca84 [ 3370.172946][ T32] [<8195d1dc>] (show_stack) from [<8197af34>] (dump_stack_lvl+0x70/0x7c) [ 3370.173318][ T32] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 3370.173715][ T32] r5:00000001 r4:00000001 [ 3370.173936][ T32] [<8197af40>] (dump_stack) from [<8194a3e8>] (nmi_cpu_backtrace+0x160/0x17c) [ 3370.174308][ T32] [<8194a288>] (nmi_cpu_backtrace) from [<8194a534>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 3370.174728][ T32] r7:00000001 r6:8260c5d0 r5:8261a88c r4:ffffffff [ 3370.174991][ T32] [<8194a404>] (nmi_trigger_cpumask_backtrace) from [<802103c8>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 3370.175985][ T32] r9:0004af42 r8:828b3130 r7:8260c734 r6:00007d49 r5:8261ae48 r4:8a1b821c [ 3370.176597][ T32] [<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (watchdog+0x498/0x5b8) [ 3370.177111][ T32] [<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134) [ 3370.177505][ T32] r10:00000000 r9:df819e58 r8:82e9e2c0 r7:00000000 r6:80350998 r5:82ee8c00 [ 3370.177845][ T32] r4:82f43e80 [ 3370.178019][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3370.178420][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 3370.178703][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 3370.179105][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3370.179575][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3370.179875][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82f43e80 [ 3370.181413][ T32] Sending NMI from CPU 1 to CPUs 0: [ 3370.182116][ C0] NMI backtrace for cpu 0 [ 3370.182418][ C0] CPU: 0 UID: 0 PID: 2924 Comm: syslogd Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.182514][ C0] Hardware name: ARM-Versatile Express [ 3370.182566][ C0] PC is at 0x76e03694 [ 3370.182924][ C0] LR is at 0x76e4d408 [ 3370.182965][ C0] pc : [<76e03694>] lr : [<76e4d408>] psr: 80000010 [ 3370.183003][ C0] sp : 7ed89c70 ip : 00000006 fp : 76ed8548 [ 3370.183041][ C0] r10: 76ed854c r9 : 01c0c1c8 r8 : 00000000 [ 3370.183082][ C0] r7 : 01c0c20e r6 : 01c0c2d0 r5 : 01c0c1a8 r4 : 7ed89cb8 [ 3370.183143][ C0] r3 : 00000036 r2 : 0000000a r1 : 76f165b0 r0 : 01c0c1d1 [ 3370.183277][ C0] Flags: Nzcv IRQs on FIQs on Mode USER_32 ISA ARM Segment user [ 3370.183354][ C0] Control: 30c5387d Table: 83fe4a80 DAC: fffffffd [ 3370.183433][ C0] Call trace: invalid frame pointer 0x76ed8548 [ 3370.201293][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3370.202002][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 3370.202459][ T32] Hardware name: ARM-Versatile Express [ 3370.202652][ T32] Call trace: [ 3370.202851][ T32] [<8195d0f8>] (dump_backtrace) from [<8195d1f4>] (show_stack+0x18/0x1c) [ 3370.203290][ T32] r7:00000000 r6:826228c4 r5:00000000 r4:8200ca84 [ 3370.203573][ T32] [<8195d1dc>] (show_stack) from [<8197af18>] (dump_stack_lvl+0x54/0x7c) [ 3370.203966][ T32] [<8197aec4>] (dump_stack_lvl) from [<8197af58>] (dump_stack+0x18/0x1c) [ 3370.204371][ T32] r5:00000000 r4:8286dd18 [ 3370.204572][ T32] [<8197af40>] (dump_stack) from [<8195dc9c>] (panic+0x120/0x368) [ 3370.204903][ T32] [<8195db7c>] (panic) from [<80350cb0>] (watchdog+0x318/0x5b8) [ 3370.205469][ T32] r3:00000000 r2:00000000 r1:00000001 r0:8200d584 [ 3370.205982][ T32] r7:8260c734 [ 3370.206154][ T32] [<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134) [ 3370.206616][ T32] r10:00000000 r9:df819e58 r8:82e9e2c0 r7:00000000 r6:80350998 r5:82ee8c00 [ 3370.207024][ T32] r4:82f43e80 [ 3370.207196][ T32] [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3370.207555][ T32] Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) [ 3370.207852][ T32] 1fa0: 00000000 00000000 00000000 00000000 [ 3370.208228][ T32] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3370.208621][ T32] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3370.208939][ T32] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82f43e80 [ 3370.211026][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:27:35 Registers: info registers vcpu 0 CPU#0 R00=83dbc040 R01=00000030 R02=eb01d000 R03=eb01d018 R04=828704c8 R05=83dbc040 R06=809baa68 R07=828704c9 R08=82870458 R09=00000072 R10=60000113 R11=df8e1d64 R12=00000002 R13=df8e1d58 R14=82753ddc R15=809baa78 PSR=80000193 N--- A S svc32 s00=05ec76f0 s01=00000001 d00=0000000105ec76f0 s02=dea713f1 s03=00000000 d01=00000000dea713f1 s04=d417fd86 s05=d6ede1ed d02=d6ede1edd417fd86 s06=00000000 s07=00000000 d03=0000000000000000 s08=54edfe20 s09=d7d3e9e5 d04=d7d3e9e554edfe20 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=00000000 d06=00000000ffffffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=95ea2390 s21=8d391279 d10=8d39127995ea2390 s22=4b129b63 s23=00000000 d11=000000004b129b63 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=20080006 s33=f3080003 d16=f308000320080006 s34=ffffffff s35=ffffffff d17=ffffffffffffffff s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=060102d2 s41=00020806 d20=00020806060102d2 s42=08000100 s43=00080001 d21=0008000108000100 s44=080b8003 s45=ffffffeb d22=ffffffeb080b8003 s46=ffffffff s47=642f01ff d23=642f01ffffffffff s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=ff5cb6bc s53=0460116f d26=0460116fff5cb6bc s54=4311ce2a s55=c8ab0b98 d27=c8ab0b984311ce2a s56=a7113378 s57=e507c3e9 d28=e507c3e9a7113378 s58=5e3f40fc s59=8042c65e d29=8042c65e5e3f40fc s60=1980926f s61=dafa506f d30=dafa506f1980926f s62=0d9ce73b s63=44a6a2f0 d31=44a6a2f00d9ce73b FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=eb3a5e28 R02=8a184800 R03=00000004 R04=00000069 R05=eb3a5e28 R06=840ac340 R07=840a8000 R08=eb3a5e24 R09=00000000 R10=0000000a R11=eb3a5d64 R12=ddde7578 R13=eb3a5d08 R14=8a081140 R15=804c1c04 PSR=20000013 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000