last executing test programs: 4.705099585s ago: executing program 1 (id=1144): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0xc0189436, &(0x7f0000001b40)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) r3 = dup3(r1, r0, 0x0) getsockname(r3, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x80) r4 = accept$inet(r3, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0xc0189436, &(0x7f0000001b40)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) dup3(r1, r0, 0x0) (async) getsockname(r3, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x80) (async) accept$inet(r3, 0x0, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) (async) 2.217631863s ago: executing program 0 (id=1150): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5451, 0x0) 1.865083999s ago: executing program 0 (id=1151): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fstatat64(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) 1.785402995s ago: executing program 1 (id=1152): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept$packet(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5450, 0x0) r4 = socket(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040845}, 0x4001004) accept4$inet6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x4, 0x0, &(0x7f0000000340)) sendmmsg$sock(r5, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e24, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 1.420996663s ago: executing program 1 (id=1153): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) write$P9_RWALK(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x3eb, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 1.385520515s ago: executing program 0 (id=1154): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$watch_queue(r0, 0x0, 0x0) (async) read$watch_queue(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x5451, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$tcp_mem(r2, 0x0, 0x0) 1.030121672s ago: executing program 0 (id=1155): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) fstatat64(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) dup3(r0, r1, 0x0) 926.21817ms ago: executing program 1 (id=1156): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5451, 0x0) 693.804548ms ago: executing program 1 (id=1157): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000040)=0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0xfff, 0x1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x1}, 0x8) (async) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000140)=0x85d) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x30080) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000001c0)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000280)={0x8e0, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x8cc, 0x5, 0x0, 0x1, [{0x490, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x31e3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x74}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x234, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcbaf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x392}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4d77}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x88e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x67}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x376d27e6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}]}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x20040004}, 0x4004000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0xf0, 0x3, 0xa, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbd64}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4e80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff20}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x33}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x801}, 0x800) (async) r7 = openat$ttyprintk(0xffffff9c, &(0x7f0000000e40), 0x109240, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = dup3(r8, r1, 0x80000) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000e80)=@sack_info={r2, 0x9, 0xb0}, 0xc) (async) r10 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000ec0), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000f00)={0x0, 0x8, 0x3, 0x1}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r11, 0x84, 0x70, &(0x7f0000001300)={r2, @in={{0x2, 0x4e21, @remote}}, [0x4, 0x2, 0x2, 0x6, 0xffffffffffffffff, 0x8000, 0x2, 0x5, 0x7fff, 0x4, 0x8001, 0x1, 0xfffffffffffffffc, 0x10, 0x81]}, &(0x7f0000001400)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000001440)=r12, 0x4) (async) syz_clone3(&(0x7f0000001780)={0x0, &(0x7f0000001480), &(0x7f00000014c0)=0x0, &(0x7f0000001500), {0x35}, &(0x7f0000001540)=""/246, 0xf6, &(0x7f0000001640)=""/248, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r3}}, 0x58) timer_create(0x3, &(0x7f0000001800)={0x0, 0x3f, 0x0, @tid=r13}, &(0x7f0000001840)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000002240)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002200)={&(0x7f0000001900)={0x8e8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x8b7, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @device_a, @random="943f902e3d75", @device_b, {0x4, 0x6}, "", @value={0x1, 0x1, 0x3, 0x0, 0xee}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000002280)=0xffff0001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000022c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}}) 504.756852ms ago: executing program 0 (id=1158): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) fstatat64(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) dup3(r0, r1, 0x0) 204.219064ms ago: executing program 0 (id=1159): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x80000000}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_UNIMAP(r3, 0x8906, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="85643d", @ANYRESDEC=r0, @ANYRES8=r4, @ANYRESDEC=0x0, @ANYBLOB=',groupOid=', @ANYRES16=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() getrusage(0xffffffffffffffff, &(0x7f00000002c0)) r7 = dup2(r6, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000100)) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r8, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005280)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r9, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSKNS(r7, 0x894c, &(0x7f0000000180)={'vlan1\x00', 0x200}) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0x8940, &(0x7f0000001d00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x3}}) 0s ago: executing program 1 (id=1160): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fstatat64(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100) kernel console output (not intermixed with test programs): t } for pid=4965 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 240.036285][ T4968] FAULT_INJECTION: forcing a failure. [ 240.036285][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 240.037073][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.1.324 Not tainted 6.12.0-rc4-syzkaller #0 [ 240.037410][ T4968] Hardware name: ARM-Versatile Express [ 240.037627][ T4968] Call trace: [ 240.037866][ T4968] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 240.038262][ T4968] r7:00000d40 r6:84c6d928 r5:60000013 r4:8203d814 [ 240.038473][ T4968] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 240.038863][ T4968] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 240.039193][ T4968] r5:00000000 r4:8271925c [ 240.039382][ T4968] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 240.039719][ T4968] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 240.040142][ T4968] r6:84c6d928 r5:0000001e r4:82c01240 [ 240.040406][ T4968] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 240.040793][ T4968] [<804cd67c>] (__kmalloc_noprof) from [<80750f20>] (tomoyo_encode2+0x64/0xf0) [ 240.041150][ T4968] r10:00000fff r9:82c9e800 r8:00000000 r7:830df440 r6:84c6d928 r5:8441cffc [ 240.041534][ T4968] r4:8441cfe9 [ 240.041697][ T4968] [<80750ebc>] (tomoyo_encode2) from [<80750fd0>] (tomoyo_encode+0x24/0x30) [ 240.042751][ T4968] r9:82c9e800 r8:00000000 r7:830df440 r6:84c6d928 r5:00001000 r4:8441cfea [ 240.050761][ T4968] [<80750fac>] (tomoyo_encode) from [<8075105c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 240.052564][ T4968] r5:00001000 r4:8441c000 [ 240.052995][ T4968] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 240.053823][ T4968] r10:84160c00 r9:00000000 r8:00000003 r7:00000002 r6:00000004 r5:81ad1868 [ 240.055212][ T4968] r4:84c6d928 r3:824ba340 [ 240.056557][ T4968] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 240.059561][ T4968] r9:84c6d900 r8:00000003 r7:20000040 r6:20000040 r5:00000002 r4:84c6d900 [ 240.062242][ T4968] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 240.065282][ T4968] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 240.066892][ T4968] r7:20000040 r6:84c6d901 r5:00000000 r4:00000002 [ 240.067141][ T4968] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 240.067589][ T4968] Exception stack(0xdfde5fa8 to 0xdfde5ff0) [ 240.067931][ T4968] 5fa0: 00000000 00000000 00000003 00000002 20000040 00000000 [ 240.068476][ T4968] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcc0bc [ 240.068944][ T4968] 5fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 240.069231][ T4968] r10:00000036 r9:84160c00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 240.069535][ T4968] r4:00000000 [ 240.120448][ T4968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.759600][ T31] audit: type=1400 audit(243.660:239): avc: denied { getopt } for pid=4989 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.806008][ T31] audit: type=1400 audit(243.710:240): avc: denied { write } for pid=4989 comm="syz.0.331" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.858544][ T4995] FAULT_INJECTION: forcing a failure. [ 243.858544][ T4995] name failslab, interval 1, probability 0, space 0, times 0 [ 243.859307][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: syz.1.330 Not tainted 6.12.0-rc4-syzkaller #0 [ 243.859653][ T4995] Hardware name: ARM-Versatile Express [ 243.859883][ T4995] Call trace: [ 243.860091][ T4995] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 243.860485][ T4995] r7:84165400 r6:00000cc0 r5:60000013 r4:8203d814 [ 243.860768][ T4995] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 243.861101][ T4995] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 243.861443][ T4995] r5:00000000 r4:8271925c [ 243.861625][ T4995] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 243.862216][ T4995] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 243.862687][ T4995] r6:00000cc0 r5:20000300 r4:82ca8b40 [ 243.862935][ T4995] [<804e828c>] (should_failslab) from [<804cd394>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 243.863337][ T4995] [<804cd348>] (kmem_cache_alloc_noprof) from [<805250b0>] (getname_flags.part.0+0x28/0x18c) [ 243.863800][ T4995] r10:000000e2 r9:84165400 r8:dfc85e64 r7:00000001 r6:8223783c r5:20000300 [ 243.864138][ T4995] r4:20000300 [ 243.864285][ T4995] [<80525088>] (getname_flags.part.0) from [<8052a16c>] (getname_flags+0x3c/0x50) [ 243.864729][ T4995] r9:84165400 r8:dfc85e64 r7:00000000 r6:ffffff9c r5:00000001 r4:20000300 [ 243.865018][ T4995] [<8052a130>] (getname_flags) from [<8052a6d4>] (user_path_at+0x2c/0x64) [ 243.865398][ T4995] r5:00000001 r4:dfc85e48 [ 243.865620][ T4995] [<8052a6a8>] (user_path_at) from [<8054c8ac>] (path_setxattr+0x8c/0x124) [ 243.866017][ T4995] r6:00000000 r5:20000300 r4:00000000 [ 243.866257][ T4995] [<8054c820>] (path_setxattr) from [<8054caa8>] (sys_setxattr+0x24/0x2c) [ 243.866660][ T4995] r8:8020029c r7:000000e2 r6:00130e70 r5:00000000 r4:00000000 [ 243.867050][ T4995] [<8054ca84>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 243.867699][ T4995] Exception stack(0xdfc85fa8 to 0xdfc85ff0) [ 243.868112][ T4995] 5fa0: 00000000 00000000 20000300 20000340 00000000 00000000 [ 243.868746][ T4995] 5fc0: 00000000 00000000 00130e70 000000e2 00000000 00006364 003d0f00 76bcc0bc [ 243.869231][ T4995] 5fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 243.992789][ T31] audit: type=1400 audit(243.880:241): avc: denied { write } for pid=4989 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.014781][ T31] audit: type=1400 audit(244.920:242): avc: denied { read } for pid=5046 comm="syz.1.333" path="socket:[5915]" dev="sockfs" ino=5915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.645960][ T31] audit: type=1400 audit(245.550:243): avc: denied { getopt } for pid=5046 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.659480][ T31] audit: type=1400 audit(245.560:244): avc: denied { setopt } for pid=5046 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.852429][ T31] audit: type=1400 audit(245.750:245): avc: denied { module_load } for pid=5046 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 245.857272][ T5071] Invalid ELF header type: 3 != 1 [ 248.753141][ T31] audit: type=1400 audit(248.640:246): avc: denied { create } for pid=5081 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 248.895283][ T31] audit: type=1400 audit(248.800:247): avc: denied { write } for pid=5081 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 248.904074][ T5083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5083 comm=syz.1.336 [ 248.955850][ T5081] [U] ^P [ 249.153001][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.246788][ T5091] FAULT_INJECTION: forcing a failure. [ 249.246788][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 249.247400][ T5091] CPU: 1 UID: 0 PID: 5091 Comm: syz.1.339 Not tainted 6.12.0-rc4-syzkaller #0 [ 249.247731][ T5091] Hardware name: ARM-Versatile Express [ 249.247931][ T5091] Call trace: [ 249.248119][ T5091] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 249.248524][ T5091] r7:847cec00 r6:00400dc0 r5:60000013 r4:8203d814 [ 249.248978][ T5091] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 249.249417][ T5091] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 249.249811][ T5091] r5:00000000 r4:8271925c [ 249.250072][ T5091] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 249.250396][ T5091] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 249.250723][ T5091] r6:00400dc0 r5:82625350 r4:82c020c0 [ 249.250930][ T5091] [<804e828c>] (should_failslab) from [<804cc740>] (__kmalloc_cache_noprof+0x4c/0x344) [ 249.251277][ T5091] [<804cc6f4>] (__kmalloc_cache_noprof) from [<80522ba8>] (alloc_pipe_info+0x6c/0x238) [ 249.251671][ T5091] r10:00000000 r9:8271bd2c r8:01021994 r7:00100000 r6:84c6d300 r5:82625350 [ 249.252217][ T5091] r4:00000000 [ 249.252462][ T5091] [<80522b3c>] (alloc_pipe_info) from [<8052302c>] (fifo_open+0xdc/0x32c) [ 249.252864][ T5091] r9:84c6d300 r8:01021994 r7:83bed0c0 r6:84c6d300 r5:83bed058 r4:00000000 [ 249.253169][ T5091] [<80522f50>] (fifo_open) from [<80510cc8>] (do_dentry_open+0x144/0x4c0) [ 249.253540][ T5091] r9:84c6d300 r8:84c6d328 r7:80522f50 r6:83bed058 r5:00000000 r4:84c6d300 [ 249.253833][ T5091] [<80510b84>] (do_dentry_open) from [<80512b3c>] (vfs_open+0x2c/0xec) [ 249.254170][ T5091] r9:84c6d300 r8:dfc71e58 r7:00000000 r6:84c6d328 r5:8271f3f4 r4:84c6d300 [ 249.254466][ T5091] [<80512b10>] (vfs_open) from [<8052b26c>] (path_openat+0x770/0x11a4) [ 249.254810][ T5091] r6:dfc71f20 r5:8271f3f4 r4:00000000 [ 249.255027][ T5091] [<8052aafc>] (path_openat) from [<8052bd3c>] (do_filp_open+0x9c/0x138) [ 249.255360][ T5091] r10:00000142 r9:847cec00 r8:00000001 r7:dfc71e58 r6:dfc71f20 r5:847cec00 [ 249.255676][ T5091] r4:82eda000 [ 249.255857][ T5091] [<8052bca0>] (do_filp_open) from [<80512fe8>] (do_sys_openat2+0xbc/0xe4) [ 249.256209][ T5091] r8:8020029c r7:ffffff9c r6:00000004 r5:dfc71f58 r4:82eda000 [ 249.256480][ T5091] [<80512f2c>] (do_sys_openat2) from [<805133f0>] (sys_openat+0x98/0xd4) [ 249.256850][ T5091] r7:00000142 r6:00130e70 r5:20000000 r4:ffffff9c [ 249.257155][ T5091] [<80513358>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 249.257503][ T5091] Exception stack(0xdfc71fa8 to 0xdfc71ff0) [ 249.257756][ T5091] 1fa0: 00000000 00000000 ffffff9c 20000000 00000000 00000000 [ 249.258092][ T5091] 1fc0: 00000000 00000000 00130e70 00000142 00000000 00006364 003d0f00 76bcc0bc [ 249.258417][ T5091] 1fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 249.258650][ T5091] r5:00000000 r4:00000000 [ 249.322446][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 249.327624][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.331187][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 249.345324][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.359977][ T8] usb 1-1: config 0 descriptor?? [ 249.483361][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 252.094297][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 252.405293][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.406930][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.408470][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.423878][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.425143][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.466573][ T10] usb 2-1: config 0 descriptor?? [ 253.089412][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 253.115828][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 253.302916][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.305596][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.323913][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 254.723831][ T5085] bcm5974 1-1:0.0: could not read from device [ 254.737993][ T2904] usb 1-1: USB disconnect, device number 15 [ 255.105958][ T24] usb 2-1: USB disconnect, device number 11 [ 256.716920][ T5281] FAULT_INJECTION: forcing a failure. [ 256.716920][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 256.717552][ T5281] CPU: 1 UID: 0 PID: 5281 Comm: syz.0.348 Not tainted 6.12.0-rc4-syzkaller #0 [ 256.717892][ T5281] Hardware name: ARM-Versatile Express [ 256.718145][ T5281] Call trace: [ 256.718353][ T5281] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 256.718794][ T5281] r7:00000c40 r6:dfd39f7c r5:60000013 r4:8203d814 [ 256.719028][ T5281] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 256.719401][ T5281] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 256.719769][ T5281] r5:00000000 r4:8271925c [ 256.719970][ T5281] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 256.720344][ T5281] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 256.720780][ T5281] r6:dfd39f7c r5:00001000 r4:82c016c0 [ 256.721034][ T5281] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 256.721447][ T5281] [<804cd67c>] (__kmalloc_noprof) from [<80751018>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 256.722204][ T5281] r10:00000000 r9:84ffe800 r8:00000000 r7:84851110 r6:dfd39f7c r5:00001000 [ 256.723168][ T5281] r4:00000000 [ 256.723373][ T5281] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 256.724177][ T5281] r10:00000000 r9:00000000 r8:83394c80 r7:00000000 r6:00000005 r5:81ad1868 [ 256.724785][ T5281] r4:dfd39f7c r3:824ba340 [ 256.725328][ T5281] [<8074d090>] (tomoyo_path_number_perm) from [<80751a08>] (tomoyo_path_chmod+0x20/0x24) [ 256.725971][ T5281] r9:fffff000 r8:83394c80 r7:00000000 r6:83394d00 r5:00000000 r4:dfd39f7c [ 256.726369][ T5281] [<807519e8>] (tomoyo_path_chmod) from [<8070a454>] (security_path_chmod+0x68/0x1d4) [ 256.726864][ T5281] [<8070a3ec>] (security_path_chmod) from [<805120d4>] (chmod_common+0x78/0x174) [ 256.727374][ T5281] r5:dfd39f7c r4:00000000 [ 256.727654][ T5281] [<8051205c>] (chmod_common) from [<8051247c>] (sys_chmod+0x60/0xb0) [ 256.728062][ T5281] r10:0000000f r9:847c9800 r8:8020029c r7:00000002 r6:200000c0 r5:00000000 [ 256.728709][ T5281] r4:00000000 [ 256.728963][ T5281] [<8051241c>] (sys_chmod) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 256.729649][ T5281] Exception stack(0xdfd39fa8 to 0xdfd39ff0) [ 256.730173][ T5281] 9fa0: 00000000 00000000 200000c0 00000000 00000000 00000000 [ 256.730625][ T5281] 9fc0: 00000000 00000000 00130e70 0000000f 00000000 00006364 003d0f00 76b9f0bc [ 256.731032][ T5281] 9fe0: 76b9eec0 76b9eeb0 00018af8 00132ec0 [ 256.731392][ T5281] r7:0000000f r6:00130e70 r5:00000000 r4:00000000 [ 256.765959][ T5281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.408702][ T5343] FAULT_INJECTION: forcing a failure. [ 259.408702][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 259.409444][ T5343] CPU: 1 UID: 0 PID: 5343 Comm: syz.1.354 Not tainted 6.12.0-rc4-syzkaller #0 [ 259.409786][ T5343] Hardware name: ARM-Versatile Express [ 259.410008][ T5343] Call trace: [ 259.410194][ T5343] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 259.410541][ T5343] r7:83fa9800 r6:00000cc0 r5:60000013 r4:8203d814 [ 259.410777][ T5343] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 259.411067][ T5343] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 259.411385][ T5343] r5:00000000 r4:8271925c [ 259.411568][ T5343] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 259.412409][ T5343] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 259.412890][ T5343] r6:00000cc0 r5:ffffffff r4:82cac780 [ 259.413113][ T5343] [<804e828c>] (should_failslab) from [<804ccd28>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 259.414205][ T5343] [<804cccd8>] (kmem_cache_alloc_node_noprof) from [<81491680>] (__alloc_skb+0x138/0x160) [ 259.414813][ T5343] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cac780 r5:ffffffff [ 259.415282][ T5343] r4:82606000 [ 259.415513][ T5343] [<81491548>] (__alloc_skb) from [<815a6abc>] (netlink_alloc_large_skb+0x88/0xa0) [ 259.416026][ T5343] r8:00000000 r7:84d92c00 r6:00000018 r5:8483b180 r4:00000140 [ 259.416299][ T5343] [<815a6a34>] (netlink_alloc_large_skb) from [<815a70c4>] (netlink_sendmsg+0x134/0x43c) [ 259.416840][ T5343] r5:8483b180 r4:dfb81e68 [ 259.417033][ T5343] [<815a6f90>] (netlink_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 259.417383][ T5343] r10:81c4a3c0 r9:20004840 r8:00000000 r7:8483b180 r6:8483b180 r5:dfb81e68 [ 259.417706][ T5343] r4:00000000 [ 259.417889][ T5343] [<81483dd4>] (__sock_sendmsg) from [<81483eec>] (sock_write_iter+0xa0/0xfc) [ 259.418321][ T5343] r7:8483b180 r6:83e906c0 r5:dfb81f08 r4:dfb81ef0 [ 259.418793][ T5343] [<81483e4c>] (sock_write_iter) from [<80516aec>] (vfs_write+0x3a8/0x44c) [ 259.419163][ T5343] r7:83fa9800 r6:00000018 r5:83e906c0 r4:00000000 [ 259.419426][ T5343] [<80516744>] (vfs_write) from [<80516d60>] (ksys_write+0xc4/0xf8) [ 259.419790][ T5343] r10:00000004 r9:83fa9800 r8:8020029c r7:00000018 r6:20004840 r5:83e906c0 [ 259.420961][ T5343] r4:83e906c1 [ 259.421233][ T5343] [<80516c9c>] (ksys_write) from [<80516da4>] (sys_write+0x10/0x14) [ 259.421682][ T5343] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 259.422383][ T5343] [<80516d94>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 259.422746][ T5343] Exception stack(0xdfb81fa8 to 0xdfb81ff0) [ 259.423143][ T5343] 1fa0: 00000000 00000000 00000003 20004840 00000018 00000000 [ 259.423568][ T5343] 1fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76bcc0bc [ 259.424089][ T5343] 1fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 259.771486][ T5347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=265 sclass=netlink_audit_socket pid=5347 comm=syz.0.356 [ 260.206436][ T31] audit: type=1400 audit(260.110:248): avc: denied { write } for pid=5351 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 261.825360][ T31] audit: type=1400 audit(261.730:249): avc: denied { write } for pid=5362 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.941236][ T31] audit: type=1400 audit(264.840:250): avc: denied { create } for pid=5633 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.906783][ T5652] FAULT_INJECTION: forcing a failure. [ 267.906783][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.907441][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.1.368 Not tainted 6.12.0-rc4-syzkaller #0 [ 267.907783][ T5652] Hardware name: ARM-Versatile Express [ 267.907994][ T5652] Call trace: [ 267.908190][ T5652] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 267.908585][ T5652] r7:b5403587 r6:20000100 r5:60000013 r4:8203d814 [ 267.908850][ T5652] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 267.909181][ T5652] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 267.909519][ T5652] r5:00000000 r4:8274e844 [ 267.909707][ T5652] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 267.910038][ T5652] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 267.910360][ T5652] r6:20000100 r5:b5003500 r4:85084480 [ 267.910600][ T5652] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 267.910917][ T5652] [<808e555c>] (should_fail_usercopy) from [<8186f248>] (sctp_getsockopt+0x1248/0x1c90) [ 267.911408][ T5652] [<8186e000>] (sctp_getsockopt) from [<81487bf4>] (sock_common_getsockopt+0x28/0x30) [ 267.911909][ T5652] r10:00000127 r9:20000080 r8:00000000 r7:8483af00 r6:00000003 r5:00000084 [ 267.912647][ T5652] r4:8186e000 [ 267.912832][ T5652] [<81487bcc>] (sock_common_getsockopt) from [<814849e4>] (do_sock_getsockopt+0x10c/0x298) [ 267.913717][ T5652] r4:81487bcc [ 267.913910][ T5652] [<814848d8>] (do_sock_getsockopt) from [<81486970>] (sys_getsockopt+0x90/0xd4) [ 267.914439][ T5652] r9:84e14800 r8:8483af00 r7:20000100 r6:00000003 r5:00000084 r4:00000000 [ 267.914906][ T5652] [<814868e0>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 267.915276][ T5652] Exception stack(0xdfefdfa8 to 0xdfefdff0) [ 267.915615][ T5652] dfa0: 20000080 00000000 00000003 00000084 00000003 20000100 [ 267.915996][ T5652] dfc0: 20000080 00000000 00130e70 00000127 00000000 00006364 003d0f00 76bcc0bc [ 267.916375][ T5652] dfe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 267.916718][ T5652] r8:8020029c r7:00000127 r6:00130e70 r5:00000000 r4:20000080 [ 270.514002][ T5660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=265 sclass=netlink_audit_socket pid=5660 comm=syz.1.372 [ 271.818405][ T5671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=265 sclass=netlink_audit_socket pid=5671 comm=syz.1.377 [ 274.006845][ T31] audit: type=1400 audit(273.910:251): avc: denied { ioctl } for pid=5688 comm="syz.1.385" path="socket:[6405]" dev="sockfs" ino=6405 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.352937][ T1803] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 274.522302][ T1803] usb 2-1: Using ep0 maxpacket: 16 [ 274.538094][ T1803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.538666][ T1803] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 274.538993][ T1803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.552983][ T1803] usb 2-1: config 0 descriptor?? [ 274.572387][ T1803] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 279.605884][ T1803] bcm5974 2-1:0.0: could not read from device [ 279.613883][ T1803] input: failed to attach handler mousedev to device input9, error: -5 [ 279.639286][ T1803] usb 2-1: USB disconnect, device number 12 [ 279.969627][ T31] audit: type=1400 audit(279.870:252): avc: denied { bind } for pid=5731 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.970443][ T31] audit: type=1400 audit(279.870:253): avc: denied { name_bind } for pid=5731 comm="syz.0.390" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 279.971465][ T31] audit: type=1400 audit(279.870:254): avc: denied { node_bind } for pid=5731 comm="syz.0.390" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 288.019797][ T5770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=265 sclass=netlink_audit_socket pid=5770 comm=syz.0.402 [ 335.720669][ T31] audit: type=1400 audit(335.620:255): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 340.993862][ T31] audit: type=1400 audit(340.900:256): avc: denied { create } for pid=5964 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.997398][ T31] audit: type=1400 audit(340.900:257): avc: denied { getopt } for pid=5964 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 352.705181][ T5999] capability: warning: `syz.1.473' uses deprecated v2 capabilities in a way that may be insecure [ 352.757799][ T31] audit: type=1400 audit(352.660:258): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 356.370969][ T6018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6018 comm=syz.0.479 [ 364.862648][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 365.002431][ T46] usb 1-1: device descriptor read/64, error -71 [ 365.242847][ T46] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 365.392308][ T46] usb 1-1: device descriptor read/64, error -71 [ 365.503674][ T46] usb usb1-port1: attempt power cycle [ 365.843406][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 365.867401][ T46] usb 1-1: device descriptor read/8, error -71 [ 366.113369][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 366.137370][ T46] usb 1-1: device descriptor read/8, error -71 [ 366.253901][ T46] usb usb1-port1: unable to enumerate USB device [ 367.251579][ T6060] netlink: 'syz.1.494': attribute type 27 has an invalid length. [ 367.584192][ T6060] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.585165][ T6060] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.585569][ T6060] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.585858][ T6060] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.990922][ T6074] syz.1.497 uses obsolete (PF_INET,SOCK_PACKET) [ 373.645671][ T6077] FAULT_INJECTION: forcing a failure. [ 373.645671][ T6077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.646571][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.1.498 Not tainted 6.12.0-rc4-syzkaller #0 [ 373.646999][ T6077] Hardware name: ARM-Versatile Express [ 373.647235][ T6077] Call trace: [ 373.647431][ T6077] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 373.647849][ T6077] r7:00000000 r6:00000000 r5:60000013 r4:8203d814 [ 373.648104][ T6077] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 373.648437][ T6077] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 373.648835][ T6077] r5:00000000 r4:8274e844 [ 373.649036][ T6077] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 373.649386][ T6077] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 373.649739][ T6077] r6:00000000 r5:eafc9f68 r4:00000002 [ 373.649979][ T6077] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 373.650332][ T6077] [<808e555c>] (should_fail_usercopy) from [<8054e80c>] (simple_read_from_buffer+0x8c/0x134) [ 373.650721][ T6077] [<8054e780>] (simple_read_from_buffer) from [<805c326c>] (proc_fail_nth_read+0xb8/0x100) [ 373.651131][ T6077] r10:00000001 r9:805c31b4 r8:00000002 r7:eafc9f68 r6:0000000f r5:76bcbf30 [ 373.651443][ T6077] r4:84e10000 r3:eafc9e9f [ 373.651671][ T6077] [<805c31b4>] (proc_fail_nth_read) from [<80515f58>] (vfs_read+0x98/0x324) [ 373.652402][ T6077] r8:76bcbf30 r7:eafc9f68 r6:84e10000 r5:0000000f r4:8510e840 [ 373.652755][ T6077] [<80515ec0>] (vfs_read) from [<80516c08>] (ksys_read+0x78/0xf8) [ 373.653127][ T6077] r10:00000003 r9:84e10000 r8:8020029c r7:00000000 r6:00000000 r5:8510e840 [ 373.653471][ T6077] r4:8510e843 [ 373.653653][ T6077] [<80516b90>] (ksys_read) from [<80516c98>] (sys_read+0x10/0x14) [ 373.654009][ T6077] r7:00000003 r6:00000005 r5:76bcbf30 r4:0000000f [ 373.654283][ T6077] [<80516c88>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 373.654638][ T6077] Exception stack(0xeafc9fa8 to 0xeafc9ff0) [ 373.654933][ T6077] 9fa0: 0000000f 76bcbf30 00000005 76bcbf30 0000000f 00000000 [ 373.655286][ T6077] 9fc0: 0000000f 76bcbf30 00000005 00000003 00000000 00006364 003d0f00 76bcc0bc [ 373.655623][ T6077] 9fe0: 00000158 76bcbed0 000d8408 00130d94 [ 373.806435][ T31] audit: type=1400 audit(373.710:259): avc: denied { map } for pid=6081 comm="syz.1.499" path="socket:[7711]" dev="sockfs" ino=7711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.335051][ T31] audit: type=1400 audit(375.240:260): avc: denied { setopt } for pid=6094 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.864031][ T31] audit: type=1400 audit(376.770:261): avc: denied { ioctl } for pid=6106 comm="syz.1.507" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.491049][ T6112] fuse: Bad value for 'fd' [ 379.484917][ T6124] fuse: Bad value for 'fd' [ 379.619668][ T6127] FAULT_INJECTION: forcing a failure. [ 379.619668][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 379.620049][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.1.514 Not tainted 6.12.0-rc4-syzkaller #0 [ 379.620231][ T6127] Hardware name: ARM-Versatile Express [ 379.620381][ T6127] Call trace: [ 379.620482][ T6127] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 379.620730][ T6127] r7:00000cc0 r6:840f6d80 r5:60000013 r4:8203d814 [ 379.620902][ T6127] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 379.621084][ T6127] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 379.621290][ T6127] r5:00000000 r4:8271925c [ 379.621387][ T6127] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 379.621600][ T6127] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 379.621930][ T6127] r6:840f6d80 r5:0000000c r4:82c01240 [ 379.622259][ T6127] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 379.622740][ T6127] [<804cd67c>] (__kmalloc_noprof) from [<815a8a64>] (genl_family_rcv_msg_attrs_parse.constprop.0+0x5c/0xf8) [ 379.623541][ T6127] r10:84780d00 r9:00000000 r8:eb115d24 r7:eb115c8c r6:840f6d80 r5:840f6d80 [ 379.624065][ T6127] r4:00000004 [ 379.624168][ T6127] [<815a8a08>] (genl_family_rcv_msg_attrs_parse.constprop.0) from [<815a9110>] (genl_rcv_msg+0x23c/0x428) [ 379.624465][ T6127] r9:eb115d24 r8:83853000 r7:eb115c8c r6:00000000 r5:840f6d80 r4:82246594 [ 379.624743][ T6127] [<815a8ed4>] (genl_rcv_msg) from [<815a76a8>] (netlink_rcv_skb+0xc0/0x120) [ 379.624985][ T6127] r10:00000000 r9:00000000 r8:84780d00 r7:00000024 r6:840f6d80 r5:815a8ed4 [ 379.625208][ T6127] r4:83853000 [ 379.625315][ T6127] [<815a75e8>] (netlink_rcv_skb) from [<815a88a0>] (genl_rcv+0x2c/0x3c) [ 379.625538][ T6127] r7:83853000 r6:8461c8c0 r5:827de460 r4:83853000 [ 379.625694][ T6127] [<815a8874>] (genl_rcv) from [<815a6e90>] (netlink_unicast+0x19c/0x29c) [ 379.625930][ T6127] r5:00000024 r4:845af800 [ 379.626061][ T6127] [<815a6cf4>] (netlink_unicast) from [<815a716c>] (netlink_sendmsg+0x1dc/0x43c) [ 379.626308][ T6127] r9:00000000 r8:00000000 r7:84d91400 r6:00000024 r5:83853000 r4:eb115e98 [ 379.626541][ T6127] [<815a6f90>] (netlink_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 379.626804][ T6127] r10:00000122 r9:84166c00 r8:00000003 r7:8339a500 r6:8339a500 r5:eb115e98 [ 379.627018][ T6127] r4:00000000 [ 379.627108][ T6127] [<81483dd4>] (__sock_sendmsg) from [<81486470>] (__sys_sendto+0x108/0x14c) [ 379.627296][ T6127] r7:8339a500 r6:76bcae1c r5:00000000 r4:00000000 [ 379.627423][ T6127] [<81486368>] (__sys_sendto) from [<814864d0>] (sys_sendto+0x1c/0x24) [ 379.627597][ T6127] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bcae1c [ 379.627741][ T6127] [<814864b4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 379.627934][ T6127] Exception stack(0xeb115fa8 to 0xeb115ff0) [ 379.628072][ T6127] 5fa0: 76bcae1c 0000000c 00000003 76bcaeb0 00000024 00000000 [ 379.628245][ T6127] 5fc0: 76bcae1c 0000000c 00000000 00000122 00000003 00000000 76bcaeb0 76bcc0bc [ 379.628545][ T6127] 5fe0: 00000000 76bcadf0 000d8408 00135358 [ 382.082423][ T46] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 382.212588][ T46] usb 1-1: device descriptor read/64, error -71 [ 382.453163][ T46] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 382.582421][ T46] usb 1-1: device descriptor read/64, error -71 [ 382.693571][ T46] usb usb1-port1: attempt power cycle [ 383.053637][ T46] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 383.074665][ T46] usb 1-1: device descriptor read/8, error -71 [ 383.322368][ T46] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 383.353848][ T46] usb 1-1: device descriptor read/8, error -71 [ 383.473052][ T46] usb usb1-port1: unable to enumerate USB device [ 391.965426][ T6145] fuse: Bad value for 'fd' [ 393.174880][ T6159] FAULT_INJECTION: forcing a failure. [ 393.174880][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.175579][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.1.524 Not tainted 6.12.0-rc4-syzkaller #0 [ 393.175969][ T6159] Hardware name: ARM-Versatile Express [ 393.176225][ T6159] Call trace: [ 393.176453][ T6159] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 393.176923][ T6159] r7:8472a3a3 r6:00000000 r5:60000013 r4:8203d814 [ 393.177206][ T6159] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 393.177612][ T6159] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 393.178009][ T6159] r5:00000000 r4:8274e844 [ 393.178224][ T6159] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 393.178639][ T6159] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 393.179039][ T6159] r6:00000000 r5:eb459f48 r4:00000154 [ 393.179309][ T6159] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 393.179716][ T6159] [<808e555c>] (should_fail_usercopy) from [<8083a3a4>] (_copy_from_iter+0x68/0x7c8) [ 393.180136][ T6159] [<8083a33c>] (_copy_from_iter) from [<8182d084>] (isotp_sendmsg+0x25c/0x7fc) [ 393.180573][ T6159] r10:eb459f38 r9:8472a3a3 r8:eb459f48 r7:00000154 r6:84728000 r5:8472a000 [ 393.180937][ T6159] r4:00000000 [ 393.181123][ T6159] [<8182ce28>] (isotp_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 393.181545][ T6159] r10:0008c8b4 r9:eb459dd4 r8:eb459dd4 r7:00000000 r6:83392000 r5:eb459f38 [ 393.182143][ T6159] r4:00000000 [ 393.182430][ T6159] [<81483dd4>] (__sock_sendmsg) from [<81484e1c>] (____sys_sendmsg+0x2ac/0x2cc) [ 393.183176][ T6159] r7:00000000 r6:00000000 r5:83392000 r4:eb459f38 [ 393.183493][ T6159] [<81484b70>] (____sys_sendmsg) from [<81486d84>] (___sys_sendmsg+0x9c/0xd0) [ 393.183934][ T6159] r10:eb459e34 r9:20000140 r8:0008c8b4 r7:00000000 r6:83392000 r5:eb459f38 [ 393.184305][ T6159] r4:00000000 [ 393.184522][ T6159] [<81486ce8>] (___sys_sendmsg) from [<8148729c>] (sys_sendmsg+0x78/0xbc) [ 393.184959][ T6159] r10:00000128 r9:84e10c00 r8:8020029c r7:0008c8b4 r6:20000140 r5:83392000 [ 393.185375][ T6159] r4:00000000 [ 393.185604][ T6159] [<81487224>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 393.186020][ T6159] Exception stack(0xeb459fa8 to 0xeb459ff0) [ 393.186340][ T6159] 9fa0: 00000000 00000000 00000003 20000140 0008c8b4 00000000 [ 393.186783][ T6159] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcc0bc [ 393.187177][ T6159] 9fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 393.187511][ T6159] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 409.081470][ T6317] fuse: Bad value for 'group_id' [ 409.081966][ T6317] fuse: Bad value for 'group_id' [ 409.280710][ T31] audit: type=1400 audit(409.180:262): avc: denied { create } for pid=6320 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.762941][ T6333] fuse: Bad value for 'group_id' [ 409.763327][ T6333] fuse: Bad value for 'group_id' [ 410.617464][ T31] audit: type=1400 audit(410.520:263): avc: denied { mounton } for pid=6339 comm="syz.0.590" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.617762][ T6340] binder: Bad value for 'max' [ 411.116536][ T6347] fuse: Bad value for 'group_id' [ 411.116988][ T6347] fuse: Bad value for 'group_id' [ 411.178527][ T6349] FAULT_INJECTION: forcing a failure. [ 411.178527][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 411.179312][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.0.594 Not tainted 6.12.0-rc4-syzkaller #0 [ 411.179665][ T6349] Hardware name: ARM-Versatile Express [ 411.180157][ T6349] Call trace: [ 411.180359][ T6349] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 411.181102][ T6349] r7:00000d40 r6:8510e868 r5:60000013 r4:8203d814 [ 411.181585][ T6349] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 411.183519][ T6349] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 411.184065][ T6349] r5:00000000 r4:8271925c [ 411.184582][ T6349] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 411.185091][ T6349] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 411.185485][ T6349] r6:8510e868 r5:00000025 r4:82c01240 [ 411.185844][ T6349] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 411.186871][ T6349] [<804cd67c>] (__kmalloc_noprof) from [<80750f20>] (tomoyo_encode2+0x64/0xf0) [ 411.187270][ T6349] r10:00000fff r9:82c9e800 r8:00000000 r7:830df770 r6:8510e868 r5:8443affc [ 411.187629][ T6349] r4:8443afe2 [ 411.187879][ T6349] [<80750ebc>] (tomoyo_encode2) from [<80750fd0>] (tomoyo_encode+0x24/0x30) [ 411.188262][ T6349] r9:82c9e800 r8:00000000 r7:830df770 r6:8510e868 r5:00001000 r4:8443afe3 [ 411.188622][ T6349] [<80750fac>] (tomoyo_encode) from [<8075105c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 411.189050][ T6349] r5:00001000 r4:8443a000 [ 411.189263][ T6349] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 411.189804][ T6349] r10:83fa4800 r9:00000000 r8:00000003 r7:c1205531 r6:00000004 r5:81ad1868 [ 411.190192][ T6349] r4:8510e868 r3:824ba340 [ 411.190400][ T6349] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 411.191092][ T6349] r9:8510e840 r8:00000003 r7:20000100 r6:20000100 r5:c1205531 r4:8510e840 [ 411.191611][ T6349] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 411.192520][ T6349] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 411.193236][ T6349] r7:20000100 r6:8510e841 r5:00000000 r4:c1205531 [ 411.193544][ T6349] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 411.193989][ T6349] Exception stack(0xec68dfa8 to 0xec68dff0) [ 411.194267][ T6349] dfa0: 00000000 00000000 00000003 c1205531 20000100 00000000 [ 411.194642][ T6349] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 411.195016][ T6349] dfe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 411.195292][ T6349] r10:00000036 r9:83fa4800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 411.195638][ T6349] r4:00000000 [ 411.223601][ T6349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 423.133580][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 423.294727][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.295300][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.295649][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.296143][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.296483][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.304554][ T46] usb 1-1: config 0 descriptor?? [ 423.751116][ T46] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 423.755269][ T46] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 425.073520][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 425.865872][ T4444] usb 1-1: USB disconnect, device number 24 [ 427.251608][ T31] audit: type=1400 audit(427.150:264): avc: denied { create } for pid=6446 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 427.295150][ T6463] FAULT_INJECTION: forcing a failure. [ 427.295150][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 427.295765][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.1.625 Not tainted 6.12.0-rc4-syzkaller #0 [ 427.296085][ T6463] Hardware name: ARM-Versatile Express [ 427.296298][ T6463] Call trace: [ 427.296484][ T6463] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 427.296892][ T6463] r7:00000d40 r6:ece11f7c r5:60000013 r4:8203d814 [ 427.297106][ T6463] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 427.297311][ T6463] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 427.297501][ T6463] r5:00000000 r4:8271925c [ 427.297597][ T6463] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 427.298029][ T6463] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 427.298224][ T6463] r6:ece11f7c r5:00000011 r4:82c01240 [ 427.298340][ T6463] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 427.298560][ T6463] [<804cd67c>] (__kmalloc_noprof) from [<80750f20>] (tomoyo_encode2+0x64/0xf0) [ 427.298766][ T6463] r10:00000fff r9:84d92400 r8:00000000 r7:848515d8 r6:ece11f7c r5:8443cffc [ 427.298920][ T6463] r4:8443cff6 [ 427.299049][ T6463] [<80750ebc>] (tomoyo_encode2) from [<80750fd0>] (tomoyo_encode+0x24/0x30) [ 427.299257][ T6463] r9:84d92400 r8:00000000 r7:848515d8 r6:ece11f7c r5:00001000 r4:8443cff7 [ 427.299420][ T6463] [<80750fac>] (tomoyo_encode) from [<8075105c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 427.299630][ T6463] r5:00001000 r4:8443c000 [ 427.299772][ T6463] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 427.300150][ T6463] r10:00000000 r9:00000000 r8:83394c80 r7:00000000 r6:00000005 r5:81ad1868 [ 427.300787][ T6463] r4:ece11f7c r3:824ba340 [ 427.300918][ T6463] [<8074d090>] (tomoyo_path_number_perm) from [<80751a08>] (tomoyo_path_chmod+0x20/0x24) [ 427.301149][ T6463] r9:fffff000 r8:83394c80 r7:00000000 r6:83394d00 r5:00000000 r4:ece11f7c [ 427.301338][ T6463] [<807519e8>] (tomoyo_path_chmod) from [<8070a454>] (security_path_chmod+0x68/0x1d4) [ 427.301561][ T6463] [<8070a3ec>] (security_path_chmod) from [<805120d4>] (chmod_common+0x78/0x174) [ 427.301824][ T6463] r5:ece11f7c r4:00000000 [ 427.302053][ T6463] [<8051205c>] (chmod_common) from [<8051247c>] (sys_chmod+0x60/0xb0) [ 427.302439][ T6463] r10:0000000f r9:84e16000 r8:8020029c r7:00000002 r6:200000c0 r5:00000000 [ 427.302687][ T6463] r4:00000000 [ 427.302785][ T6463] [<8051241c>] (sys_chmod) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 427.303126][ T6463] Exception stack(0xece11fa8 to 0xece11ff0) [ 427.303515][ T6463] 1fa0: 00000000 00000000 200000c0 00000000 00000000 00000000 [ 427.303777][ T6463] 1fc0: 00000000 00000000 00130e70 0000000f 00000000 00006364 003d0f00 76bab0bc [ 427.304651][ T6463] 1fe0: 76baaec0 76baaeb0 00018af8 00132ec0 [ 427.304961][ T6463] r7:0000000f r6:00130e70 r5:00000000 r4:00000000 [ 427.322642][ T6463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.765583][ T6474] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 430.925999][ T6476] fuse: Unknown parameter 'grou00000000000000000000' [ 432.693893][ T6489] fuse: Unknown parameter 'grou00000000000000000000' [ 434.420717][ T6500] FAULT_INJECTION: forcing a failure. [ 434.420717][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.421358][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.1.638 Not tainted 6.12.0-rc4-syzkaller #0 [ 434.421800][ T6500] Hardware name: ARM-Versatile Express [ 434.422403][ T6500] Call trace: [ 434.422741][ T6500] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 434.423181][ T6500] r7:200000c0 r6:ecf55e30 r5:60000013 r4:8203d814 [ 434.423490][ T6500] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 434.423893][ T6500] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 434.424279][ T6500] r5:00000000 r4:8274e844 [ 434.424534][ T6500] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 434.424980][ T6500] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 434.425388][ T6500] r6:ecf55e30 r5:00000000 r4:ecf55f38 [ 434.425670][ T6500] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 434.426086][ T6500] [<808e555c>] (should_fail_usercopy) from [<81486c08>] (copy_msghdr_from_user+0x50/0x130) [ 434.426579][ T6500] [<81486bb8>] (copy_msghdr_from_user) from [<81486d60>] (___sys_sendmsg+0x78/0xd0) [ 434.427010][ T6500] r8:00000001 r7:00000000 r6:83370280 r5:ecf55f38 r4:ecf55e74 [ 434.427326][ T6500] [<81486ce8>] (___sys_sendmsg) from [<8148729c>] (sys_sendmsg+0x78/0xbc) [ 434.427745][ T6500] r10:00000128 r9:847ce000 r8:8020029c r7:00000001 r6:200000c0 r5:83370280 [ 434.428114][ T6500] r4:00000000 [ 434.428302][ T6500] [<81487224>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 434.428807][ T6500] Exception stack(0xecf55fa8 to 0xecf55ff0) [ 434.429120][ T6500] 5fa0: 00000000 00000000 00000003 200000c0 00000001 00000000 [ 434.429544][ T6500] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcc0bc [ 434.429929][ T6500] 5fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 434.430234][ T6500] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 434.596436][ T6502] fuse: Unknown parameter 'grou00000000000000000000' [ 434.771328][ T31] audit: type=1400 audit(434.670:265): avc: denied { accept } for pid=6503 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 437.628239][ T6520] fuse: Unknown parameter 'group_i00000000000000000000' [ 438.116187][ T6534] fuse: Unknown parameter 'group_i00000000000000000000' [ 439.775979][ T6551] fuse: Unknown parameter 'group_i00000000000000000000' [ 440.413608][ T6566] fuse: Unknown parameter 'group_id00000000000000000000' [ 440.726140][ T6573] FAULT_INJECTION: forcing a failure. [ 440.726140][ T6573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.726727][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.1.662 Not tainted 6.12.0-rc4-syzkaller #0 [ 440.727008][ T6573] Hardware name: ARM-Versatile Express [ 440.727181][ T6573] Call trace: [ 440.727333][ T6573] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 440.727652][ T6573] r7:ed16ddec r6:00000000 r5:60000113 r4:8203d814 [ 440.727845][ T6573] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 440.728130][ T6573] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 440.728402][ T6573] r5:00000000 r4:827192b0 [ 440.728556][ T6573] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 440.728863][ T6573] [<808e5368>] (should_fail_ex) from [<804e8388>] (should_fail_alloc_page+0x68/0x74) [ 440.729162][ T6573] r6:00000000 r5:00140cca r4:ed16ddf8 [ 440.729338][ T6573] [<804e8320>] (should_fail_alloc_page) from [<804b8f84>] (prepare_alloc_pages.constprop.0+0x88/0x198) [ 440.729667][ T6573] [<804b8efc>] (prepare_alloc_pages.constprop.0) from [<804bf6bc>] (__alloc_pages_noprof+0xb4/0x1128) [ 440.729998][ T6573] r10:00000000 r9:84028c00 r8:00000000 r7:847cbc00 r6:00140cca r5:847cbc00 [ 440.730257][ T6573] r4:00000000 r3:ed16ddf8 [ 440.730405][ T6573] [<804bf608>] (__alloc_pages_noprof) from [<804c0d1c>] (__folio_alloc_noprof+0x14/0x2c) [ 440.730719][ T6573] r10:ed16dfb0 r9:84028c00 r8:00000000 r7:00000040 r6:76bcae69 r5:847cbc00 [ 440.730968][ T6573] r4:00001255 [ 440.731092][ T6573] [<804c0d08>] (__folio_alloc_noprof) from [<80494acc>] (handle_mm_fault+0xd08/0x1348) [ 440.731393][ T6573] r5:847cbc00 r4:00001255 [ 440.731546][ T6573] [<80493dc4>] (handle_mm_fault) from [<80214290>] (do_page_fault+0x1c8/0x3d8) [ 440.731840][ T6573] r10:00000002 r9:84028c00 r8:00000255 r7:847cbc00 r6:00000a07 r5:76bcae69 [ 440.732626][ T6573] r4:ed16dfb0 [ 440.733019][ T6573] [<802140c8>] (do_page_fault) from [<80214688>] (do_DataAbort+0x38/0xa8) [ 440.733406][ T6573] r10:003b0034 r9:76bcae60 r8:802140c8 r7:ed16dfb0 r6:76bcae69 r5:00000a07 [ 440.734010][ T6573] r4:8261d1bc [ 440.734188][ T6573] [<80214650>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 440.734549][ T6573] Exception stack(0xed16dfb0 to 0xed16dff8) [ 440.734849][ T6573] dfa0: 76bcae69 00000000 00000077 76bcae69 [ 440.735218][ T6573] dfc0: 00000009 00000080 00189dec 76bcae60 00000004 76bcae60 003b0034 00000000 [ 440.735596][ T6573] dfe0: 00189df5 76bc9df0 0011a540 00118ce0 20000010 ffffffff [ 440.735979][ T6573] r8:824b1044 r7:847cbc00 r6:ffffffff r5:20000010 r4:00118ce0 [ 440.792570][ T6573] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 440.977197][ T6581] fuse: Unknown parameter 'group_id00000000000000000000' [ 441.304942][ T6589] FAULT_INJECTION: forcing a failure. [ 441.304942][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.305993][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.0.669 Not tainted 6.12.0-rc4-syzkaller #0 [ 441.306645][ T6589] Hardware name: ARM-Versatile Express [ 441.306941][ T6589] Call trace: [ 441.307150][ T6589] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 441.307591][ T6589] r7:76bbee1c r6:0000000c r5:60000013 r4:8203d814 [ 441.307862][ T6589] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 441.308224][ T6589] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 441.308740][ T6589] r5:00000000 r4:8274e844 [ 441.308955][ T6589] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 441.309339][ T6589] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 441.309806][ T6589] r6:0000000c r5:ed2a5ee4 r4:0000000c [ 441.310048][ T6589] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 441.310429][ T6589] [<808e555c>] (should_fail_usercopy) from [<81484e78>] (move_addr_to_kernel+0x3c/0xe4) [ 441.310927][ T6589] [<81484e3c>] (move_addr_to_kernel) from [<81486428>] (__sys_sendto+0xc0/0x14c) [ 441.311365][ T6589] r9:84e14800 r8:00000004 r7:83370c80 r6:76bbee1c r5:00000000 r4:00000000 [ 441.311694][ T6589] [<81486368>] (__sys_sendto) from [<814864d0>] (sys_sendto+0x1c/0x24) [ 441.312573][ T6589] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bbee1c [ 441.313075][ T6589] [<814864b4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 441.313641][ T6589] Exception stack(0xed2a5fa8 to 0xed2a5ff0) [ 441.313989][ T6589] 5fa0: 76bbee1c 0000000c 00000004 76bbeeb0 00000020 00000000 [ 441.314352][ T6589] 5fc0: 76bbee1c 0000000c 00000000 00000122 00000004 00000000 76bbeeb0 76bc00bc [ 441.314712][ T6589] 5fe0: 00000000 76bbedf0 000d8408 00135358 [ 441.487283][ T6596] fuse: Unknown parameter 'group_id00000000000000000000' [ 442.064693][ T6610] FAULT_INJECTION: forcing a failure. [ 442.064693][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.065322][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.1.677 Not tainted 6.12.0-rc4-syzkaller #0 [ 442.065651][ T6610] Hardware name: ARM-Versatile Express [ 442.065853][ T6610] Call trace: [ 442.066036][ T6610] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 442.066451][ T6610] r7:20000140 r6:ed2d5e30 r5:60000013 r4:8203d814 [ 442.066657][ T6610] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 442.066961][ T6610] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 442.067278][ T6610] r5:00000000 r4:8274e844 [ 442.067536][ T6610] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 442.067986][ T6610] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 442.068295][ T6610] r6:ed2d5e30 r5:00000000 r4:ed2d5f38 [ 442.068486][ T6610] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 442.068871][ T6610] [<808e555c>] (should_fail_usercopy) from [<81486c08>] (copy_msghdr_from_user+0x50/0x130) [ 442.069211][ T6610] [<81486bb8>] (copy_msghdr_from_user) from [<81486d60>] (___sys_sendmsg+0x78/0xd0) [ 442.069556][ T6610] r8:00000000 r7:00000000 r6:83370780 r5:ed2d5f38 r4:ed2d5e74 [ 442.069862][ T6610] [<81486ce8>] (___sys_sendmsg) from [<8148729c>] (sys_sendmsg+0x78/0xbc) [ 442.070242][ T6610] r10:00000128 r9:847cbc00 r8:8020029c r7:00000000 r6:20000140 r5:83370780 [ 442.070772][ T6610] r4:00000000 [ 442.071067][ T6610] [<81487224>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 442.071403][ T6610] Exception stack(0xed2d5fa8 to 0xed2d5ff0) [ 442.071664][ T6610] 5fa0: 00000000 00000000 00000003 20000140 00000000 00000000 [ 442.072278][ T6610] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcc0bc [ 442.072827][ T6610] 5fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 442.073088][ T6610] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 442.441122][ T6615] fuse: Bad value for 'user_id' [ 442.452530][ T6615] fuse: Bad value for 'user_id' [ 443.774591][ T6628] fuse: Bad value for 'user_id' [ 443.774965][ T6628] fuse: Bad value for 'user_id' [ 445.606024][ T6642] fuse: Bad value for 'user_id' [ 445.606439][ T6642] fuse: Bad value for 'user_id' [ 445.640110][ T31] audit: type=1400 audit(445.530:266): avc: denied { name_bind } for pid=6640 comm="syz.0.692" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 446.177518][ T6648] FAULT_INJECTION: forcing a failure. [ 446.177518][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.178136][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.0.695 Not tainted 6.12.0-rc4-syzkaller #0 [ 446.178475][ T6648] Hardware name: ARM-Versatile Express [ 446.178695][ T6648] Call trace: [ 446.178913][ T6648] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 446.179322][ T6648] r7:00000000 r6:00000000 r5:60000013 r4:8203d814 [ 446.179640][ T6648] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 446.179997][ T6648] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 446.180352][ T6648] r5:00000000 r4:8274e844 [ 446.180550][ T6648] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 446.180924][ T6648] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 446.181272][ T6648] r6:00000000 r5:ed53df68 r4:00000002 [ 446.181487][ T6648] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 446.182098][ T6648] [<808e555c>] (should_fail_usercopy) from [<8054e80c>] (simple_read_from_buffer+0x8c/0x134) [ 446.184327][ T6648] [<8054e780>] (simple_read_from_buffer) from [<805c326c>] (proc_fail_nth_read+0xb8/0x100) [ 446.192920][ T6648] r10:00000001 r9:805c31b4 r8:00000002 r7:ed53df68 r6:0000000f r5:76bbff30 [ 446.193291][ T6648] r4:847c8c00 r3:ed53de9f [ 446.193511][ T6648] [<805c31b4>] (proc_fail_nth_read) from [<80515f58>] (vfs_read+0x98/0x324) [ 446.193918][ T6648] r8:76bbff30 r7:ed53df68 r6:847c8c00 r5:0000000f r4:85062240 [ 446.194226][ T6648] [<80515ec0>] (vfs_read) from [<80516c08>] (ksys_read+0x78/0xf8) [ 446.194593][ T6648] r10:00000003 r9:847c8c00 r8:8020029c r7:00000000 r6:00000000 r5:85062240 [ 446.194946][ T6648] r4:85062243 [ 446.195113][ T6648] [<80516b90>] (ksys_read) from [<80516c98>] (sys_read+0x10/0x14) [ 446.195439][ T6648] r7:00000003 r6:00000004 r5:76bbff30 r4:0000000f [ 446.195713][ T6648] [<80516c88>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 446.196090][ T6648] Exception stack(0xed53dfa8 to 0xed53dff0) [ 446.196455][ T6648] dfa0: 0000000f 76bbff30 00000004 76bbff30 0000000f 00000000 [ 446.196845][ T6648] dfc0: 0000000f 76bbff30 00000004 00000003 00000000 00006364 003d0f00 76bc00bc [ 446.197230][ T6648] dfe0: 00000158 76bbfed0 000d8408 00130d94 [ 446.728743][ T6656] fuse: Bad value for 'fd' [ 453.513774][ T6689] fuse: Bad value for 'fd' [ 454.465869][ T6691] FAULT_INJECTION: forcing a failure. [ 454.465869][ T6691] name failslab, interval 1, probability 0, space 0, times 0 [ 454.482634][ T6691] CPU: 1 UID: 0 PID: 6691 Comm: syz.1.707 Not tainted 6.12.0-rc4-syzkaller #0 [ 454.482973][ T6691] Hardware name: ARM-Versatile Express [ 454.483109][ T6691] Call trace: [ 454.483220][ T6691] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 454.483467][ T6691] r7:847c9800 r6:00000cc0 r5:60000013 r4:8203d814 [ 454.483625][ T6691] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 454.484700][ T6691] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 454.486918][ T6691] r5:00000000 r4:8271925c [ 454.489291][ T6691] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 454.490781][ T6691] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 454.492107][ T6691] r6:00000cc0 r5:ffffffff r4:82cac780 [ 454.492394][ T6691] [<804e828c>] (should_failslab) from [<804ccd28>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 454.492819][ T6691] [<804cccd8>] (kmem_cache_alloc_node_noprof) from [<81491680>] (__alloc_skb+0x138/0x160) [ 454.493113][ T6691] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cac780 r5:ffffffff [ 454.493326][ T6691] r4:82606000 [ 454.493424][ T6691] [<81491548>] (__alloc_skb) from [<815a6abc>] (netlink_alloc_large_skb+0x88/0xa0) [ 454.493657][ T6691] r8:00000000 r7:84ed5400 r6:00000043 r5:83370780 r4:00000180 [ 454.493830][ T6691] [<815a6a34>] (netlink_alloc_large_skb) from [<815a70c4>] (netlink_sendmsg+0x134/0x43c) [ 454.494007][ T6691] r5:83370780 r4:dfa39e68 [ 454.494092][ T6691] [<815a6f90>] (netlink_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 454.494312][ T6691] r10:81c4a3c0 r9:20000400 r8:00000000 r7:83370780 r6:83370780 r5:dfa39e68 [ 454.494456][ T6691] r4:00000000 [ 454.494536][ T6691] [<81483dd4>] (__sock_sendmsg) from [<81483eec>] (sock_write_iter+0xa0/0xfc) [ 454.494692][ T6691] r7:83370780 r6:85062c00 r5:dfa39f08 r4:dfa39ef0 [ 454.494798][ T6691] [<81483e4c>] (sock_write_iter) from [<80516aec>] (vfs_write+0x3a8/0x44c) [ 454.495000][ T6691] r7:847c9800 r6:00000043 r5:85062c00 r4:00000000 [ 454.495130][ T6691] [<80516744>] (vfs_write) from [<80516d60>] (ksys_write+0xc4/0xf8) [ 454.495333][ T6691] r10:00000004 r9:847c9800 r8:8020029c r7:00000043 r6:20000400 r5:85062c00 [ 454.495532][ T6691] r4:85062c01 [ 454.495628][ T6691] [<80516c9c>] (ksys_write) from [<80516da4>] (sys_write+0x10/0x14) [ 454.495825][ T6691] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 454.495971][ T6691] [<80516d94>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 454.496169][ T6691] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 454.496324][ T6691] 9fa0: 00000000 00000000 00000003 20000400 00000043 00000000 [ 454.496532][ T6691] 9fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76bcc0bc [ 454.496781][ T6691] 9fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 454.671029][ T31] audit: type=1400 audit(454.570:267): avc: denied { setopt } for pid=6692 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 455.030162][ T31] audit: type=1400 audit(454.930:268): avc: denied { getopt } for pid=6694 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 455.054943][ T31] audit: type=1400 audit(454.960:269): avc: denied { unlink } for pid=2924 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.810266][ T6704] fuse: Bad value for 'fd' [ 456.378954][ T6712] FAULT_INJECTION: forcing a failure. [ 456.378954][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.379469][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.1.715 Not tainted 6.12.0-rc4-syzkaller #0 [ 456.379777][ T6712] Hardware name: ARM-Versatile Express [ 456.379985][ T6712] Call trace: [ 456.380169][ T6712] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 456.380570][ T6712] r7:76bcae1c r6:0000000c r5:60000013 r4:8203d814 [ 456.380907][ T6712] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 456.381253][ T6712] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 456.381594][ T6712] r5:00000000 r4:8274e844 [ 456.381822][ T6712] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 456.382404][ T6712] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 456.382836][ T6712] r6:0000000c r5:dfabdee4 r4:0000000c [ 456.383012][ T6712] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 456.383310][ T6712] [<808e555c>] (should_fail_usercopy) from [<81484e78>] (move_addr_to_kernel+0x3c/0xe4) [ 456.383680][ T6712] [<81484e3c>] (move_addr_to_kernel) from [<81486428>] (__sys_sendto+0xc0/0x14c) [ 456.384034][ T6712] r9:84e13000 r8:00000003 r7:83370000 r6:76bcae1c r5:00000000 r4:00000000 [ 456.384321][ T6712] [<81486368>] (__sys_sendto) from [<814864d0>] (sys_sendto+0x1c/0x24) [ 456.384686][ T6712] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bcae1c [ 456.384919][ T6712] [<814864b4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 456.385173][ T6712] Exception stack(0xdfabdfa8 to 0xdfabdff0) [ 456.385332][ T6712] dfa0: 76bcae1c 0000000c 00000003 76bcaeb0 00000020 00000000 [ 456.385598][ T6712] dfc0: 76bcae1c 0000000c 00000000 00000122 00000003 00000000 76bcaeb0 76bcc0bc [ 456.385947][ T6712] dfe0: 00000000 76bcadf0 000d8408 00135358 [ 456.575895][ T6714] fuse: Bad value for 'fd' [ 457.256411][ T6724] fuse: Bad value for 'fd' [ 460.509814][ T6743] fuse: Bad value for 'fd' [ 460.652658][ T6745] FAULT_INJECTION: forcing a failure. [ 460.652658][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 460.653218][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.727 Not tainted 6.12.0-rc4-syzkaller #0 [ 460.653501][ T6745] Hardware name: ARM-Versatile Express [ 460.653712][ T6745] Call trace: [ 460.653916][ T6745] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 460.654270][ T6745] r7:00000c40 r6:84c6d9e8 r5:60000013 r4:8203d814 [ 460.654488][ T6745] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 460.654798][ T6745] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 460.655088][ T6745] r5:00000000 r4:8271925c [ 460.655260][ T6745] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 460.655575][ T6745] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 460.655890][ T6745] r6:84c6d9e8 r5:00001000 r4:82c016c0 [ 460.656078][ T6745] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 460.656376][ T6745] [<804cd67c>] (__kmalloc_noprof) from [<80751018>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 460.656745][ T6745] r10:84e15400 r9:82c9e800 r8:00000000 r7:830d63b8 r6:84c6d9e8 r5:00001000 [ 460.657025][ T6745] r4:00000000 [ 460.657179][ T6745] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 460.657531][ T6745] r10:84e15400 r9:00000000 r8:00000004 r7:c0406618 r6:00000004 r5:81ad1868 [ 460.657804][ T6745] r4:84c6d9e8 r3:824ba340 [ 460.657972][ T6745] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 460.658297][ T6745] r9:84c6d9c0 r8:00000004 r7:00000000 r6:00000000 r5:c0406618 r4:84c6d9c0 [ 460.658559][ T6745] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 460.658944][ T6745] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 460.659518][ T6745] r7:00000000 r6:84c6d9c1 r5:00000000 r4:c0406618 [ 460.659758][ T6745] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 460.660656][ T6745] Exception stack(0xdfa8dfa8 to 0xdfa8dff0) [ 460.661010][ T6745] dfa0: 00000000 00000000 00000004 c0406618 00000000 00000000 [ 460.661409][ T6745] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 460.661714][ T6745] dfe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 460.662249][ T6745] r10:00000036 r9:84e15400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 460.662696][ T6745] r4:00000000 [ 460.672692][ T6745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.673372][ T6803] fuse: Unknown parameter 'user_i00000000000000000000' [ 478.528990][ T6819] fuse: Unknown parameter 'user_i00000000000000000000' [ 478.767746][ T31] audit: type=1400 audit(478.670:270): avc: denied { create } for pid=6820 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 481.681763][ T6834] fuse: Unknown parameter 'user_id00000000000000000000' [ 483.142512][ T50] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 483.292471][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 483.315564][ T50] usb 1-1: config 7 has an invalid interface number: 11 but max is 1 [ 483.316060][ T50] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 483.316779][ T50] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 483.317326][ T50] usb 1-1: config 7 has no interface number 0 [ 483.317727][ T50] usb 1-1: config 7 interface 11 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 483.318504][ T50] usb 1-1: config 7 interface 11 has no altsetting 0 [ 483.341786][ T50] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2751, bcdDevice=4f.5e [ 483.342926][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.343443][ T50] usb 1-1: Product: syz [ 483.343733][ T50] usb 1-1: Manufacturer: syz [ 483.343925][ T50] usb 1-1: SerialNumber: syz [ 483.875133][ T50] usb 1-1: USB disconnect, device number 25 [ 484.120081][ T6859] fuse: Unknown parameter 'user_id00000000000000000000' [ 484.254552][ T6861] fuse: Bad value for 'group_id' [ 484.254962][ T6861] fuse: Bad value for 'group_id' [ 484.664512][ T6872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6872 comm=syz.0.764 [ 484.669230][ T6872] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6872 comm=syz.0.764 [ 484.886810][ T6878] fuse: Unknown parameter 'user_id00000000000000000000' [ 485.752946][ T6888] fuse: Bad value for 'fd' [ 487.994583][ T6901] fuse: Bad value for 'fd' [ 488.196800][ T31] audit: type=1400 audit(488.100:271): avc: denied { ioctl } for pid=6902 comm="syz.0.777" path="socket:[10395]" dev="sockfs" ino=10395 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 488.721303][ T6911] fuse: Bad value for 'fd' [ 488.914096][ T6915] FAULT_INJECTION: forcing a failure. [ 488.914096][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.914754][ T6915] CPU: 1 UID: 0 PID: 6915 Comm: syz.0.783 Not tainted 6.12.0-rc4-syzkaller #0 [ 488.915130][ T6915] Hardware name: ARM-Versatile Express [ 488.915367][ T6915] Call trace: [ 488.915594][ T6915] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 488.916009][ T6915] r7:e058deb8 r6:00000000 r5:60000013 r4:8203d814 [ 488.916280][ T6915] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 488.916679][ T6915] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 488.917047][ T6915] r5:00000000 r4:8274e844 [ 488.917240][ T6915] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 488.917608][ T6915] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 488.918266][ T6915] r6:00000000 r5:00000001 r4:00000001 [ 488.918621][ T6915] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 488.919147][ T6915] [<808e555c>] (should_fail_usercopy) from [<80842edc>] (kstrtouint_from_user+0x60/0x128) [ 488.919918][ T6915] [<80842e7c>] (kstrtouint_from_user) from [<805c4778>] (proc_fail_nth_write+0x40/0xe8) [ 488.920374][ T6915] r8:e058df68 r7:847c8000 r6:00000001 r5:84c6db40 r4:00000001 [ 488.920702][ T6915] [<805c4738>] (proc_fail_nth_write) from [<805167f0>] (vfs_write+0xac/0x44c) [ 488.921050][ T6915] r5:84c6db40 r4:805c4738 [ 488.921237][ T6915] [<80516744>] (vfs_write) from [<80516d14>] (ksys_write+0x78/0xf8) [ 488.921580][ T6915] r10:00000004 r9:847c8000 r8:8020029c r7:00000000 r6:00000002 r5:84c6db40 [ 488.922087][ T6915] r4:84c6db43 [ 488.922507][ T6915] [<80516c9c>] (ksys_write) from [<80516da4>] (sys_write+0x10/0x14) [ 488.922889][ T6915] r7:00000004 r6:00000005 r5:76bbff30 r4:00000001 [ 488.923185][ T6915] [<80516d94>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 488.923604][ T6915] Exception stack(0xe058dfa8 to 0xe058dff0) [ 488.924064][ T6915] dfa0: 00000001 76bbff30 00000005 76bbff30 00000001 00000000 [ 488.924452][ T6915] dfc0: 00000001 76bbff30 00000005 00000004 00000000 00006364 003d0f00 76bc00bc [ 488.924850][ T6915] dfe0: 00000158 76bbfed0 000d8408 00130e5c [ 489.456533][ T6924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6924 comm=syz.1.785 [ 490.010703][ T6928] fuse: Unknown parameter '0x0000000000000004' [ 490.197794][ T6932] FAULT_INJECTION: forcing a failure. [ 490.197794][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 490.198154][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.0.789 Not tainted 6.12.0-rc4-syzkaller #0 [ 490.198339][ T6932] Hardware name: ARM-Versatile Express [ 490.198463][ T6932] Call trace: [ 490.198576][ T6932] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 490.198782][ T6932] r7:00000cc0 r6:82e6a480 r5:60000013 r4:8203d814 [ 490.198929][ T6932] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 490.199100][ T6932] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 490.199236][ T6932] r5:00000000 r4:8271925c [ 490.199335][ T6932] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 490.199572][ T6932] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 490.199720][ T6932] r6:82e6a480 r5:0000000c r4:82c01240 [ 490.199837][ T6932] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 490.200086][ T6932] [<804cd67c>] (__kmalloc_noprof) from [<815a8a64>] (genl_family_rcv_msg_attrs_parse.constprop.0+0x5c/0xf8) [ 490.200412][ T6932] r10:84780000 r9:00000000 r8:e06fdd24 r7:e06fdc8c r6:82e6a480 r5:82e6a480 [ 490.200626][ T6932] r4:00000004 [ 490.200714][ T6932] [<815a8a08>] (genl_family_rcv_msg_attrs_parse.constprop.0) from [<815a9110>] (genl_rcv_msg+0x23c/0x428) [ 490.200951][ T6932] r9:e06fdd24 r8:84684e40 r7:e06fdc8c r6:00000000 r5:82e6a480 r4:82246594 [ 490.201079][ T6932] [<815a8ed4>] (genl_rcv_msg) from [<815a76a8>] (netlink_rcv_skb+0xc0/0x120) [ 490.201272][ T6932] r10:00000000 r9:00000000 r8:84780000 r7:00000024 r6:82e6a480 r5:815a8ed4 [ 490.201394][ T6932] r4:84684e40 [ 490.201479][ T6932] [<815a75e8>] (netlink_rcv_skb) from [<815a88a0>] (genl_rcv+0x2c/0x3c) [ 490.201673][ T6932] r7:84684e40 r6:84615400 r5:827de460 r4:84684e40 [ 490.202008][ T6932] [<815a8874>] (genl_rcv) from [<815a6e90>] (netlink_unicast+0x19c/0x29c) [ 490.202205][ T6932] r5:00000024 r4:84081c00 [ 490.202385][ T6932] [<815a6cf4>] (netlink_unicast) from [<815a716c>] (netlink_sendmsg+0x1dc/0x43c) [ 490.202610][ T6932] r9:00000000 r8:00000000 r7:84ed7400 r6:00000024 r5:84684e40 r4:e06fde98 [ 490.202835][ T6932] [<815a6f90>] (netlink_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 490.203056][ T6932] r10:00000122 r9:847c9800 r8:00000003 r7:83371400 r6:83371400 r5:e06fde98 [ 490.203231][ T6932] r4:00000000 [ 490.203314][ T6932] [<81483dd4>] (__sock_sendmsg) from [<81486470>] (__sys_sendto+0x108/0x14c) [ 490.203531][ T6932] r7:83371400 r6:76bbee1c r5:00000000 r4:00000000 [ 490.203693][ T6932] [<81486368>] (__sys_sendto) from [<814864d0>] (sys_sendto+0x1c/0x24) [ 490.203973][ T6932] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bbee1c [ 490.204171][ T6932] [<814864b4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 490.204499][ T6932] Exception stack(0xe06fdfa8 to 0xe06fdff0) [ 490.204782][ T6932] dfa0: 76bbee1c 0000000c 00000003 76bbeeb0 00000024 00000000 [ 490.205014][ T6932] dfc0: 76bbee1c 0000000c 00000000 00000122 00000003 00000000 76bbeeb0 76bc00bc [ 490.205205][ T6932] dfe0: 00000000 76bbedf0 000d8408 00135358 [ 490.395046][ T6939] fuse: Unknown parameter '0x0000000000000004' [ 494.517916][ T31] audit: type=1400 audit(494.420:272): avc: denied { shutdown } for pid=6958 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 497.281097][ T31] audit: type=1400 audit(497.180:273): avc: denied { connect } for pid=7042 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.287867][ T7043] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7043 comm=syz.0.803 [ 497.340886][ T7043] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7043 comm=syz.0.803 [ 497.556179][ T31] audit: type=1400 audit(497.460:274): avc: denied { getopt } for pid=7050 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 498.185248][ T7064] FAULT_INJECTION: forcing a failure. [ 498.185248][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 498.186504][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.1.807 Not tainted 6.12.0-rc4-syzkaller #0 [ 498.186850][ T7064] Hardware name: ARM-Versatile Express [ 498.187052][ T7064] Call trace: [ 498.187240][ T7064] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 498.187622][ T7064] r7:847ce000 r6:00000cc0 r5:60000013 r4:8203d814 [ 498.187900][ T7064] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 498.188269][ T7064] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 498.188584][ T7064] r5:00000000 r4:8271925c [ 498.188787][ T7064] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 498.189092][ T7064] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 498.189437][ T7064] r6:00000cc0 r5:00000002 r4:82c01240 [ 498.189644][ T7064] [<804e828c>] (should_failslab) from [<804cc740>] (__kmalloc_cache_noprof+0x4c/0x344) [ 498.189969][ T7064] [<804cc6f4>] (__kmalloc_cache_noprof) from [<802f9704>] (__request_module+0xe8/0x2c0) [ 498.190307][ T7064] r10:847ce000 r9:00000000 r8:826f6564 r7:847ce000 r6:814f0778 r5:00000002 [ 498.190746][ T7064] r4:00000000 [ 498.190913][ T7064] [<802f961c>] (__request_module) from [<814f0778>] (dev_load+0x80/0x8c) [ 498.191226][ T7064] r3:00400140 r2:e06fde28 r1:821fa40c [ 498.191429][ T7064] r8:e06fde38 r7:00008917 r6:00000000 r5:00000000 r4:e06fde28 [ 498.191753][ T7064] [<814f06f8>] (dev_load) from [<816b19b8>] (devinet_ioctl+0x70/0x754) [ 498.192341][ T7064] r5:84780d00 r4:e06fde28 [ 498.192721][ T7064] [<816b1948>] (devinet_ioctl) from [<816b47c8>] (inet_ioctl+0x128/0x268) [ 498.193081][ T7064] r10:847ce000 r9:81c66fdc r8:e06fdecc r7:84780d00 r6:200005c0 r5:85011f00 [ 498.193391][ T7064] r4:00008917 [ 498.193577][ T7064] [<816b46a0>] (inet_ioctl) from [<81485410>] (sock_ioctl+0x450/0x608) [ 498.193914][ T7064] r7:8339c500 r6:84780d00 r5:200005c0 r4:00008917 [ 498.194200][ T7064] [<81484fc0>] (sock_ioctl) from [<8052f7d0>] (sys_ioctl+0x134/0xda8) [ 498.194586][ T7064] r9:84c64780 r8:00000003 r7:200005c0 r6:84c64781 r5:00000000 r4:00008917 [ 498.194876][ T7064] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 498.195204][ T7064] Exception stack(0xe06fdfa8 to 0xe06fdff0) [ 498.195463][ T7064] dfa0: 00000000 00000000 00000003 00008917 200005c0 00000000 [ 498.195796][ T7064] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcc0bc [ 498.196104][ T7064] dfe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 498.196416][ T7064] r10:00000036 r9:847ce000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 498.196747][ T7064] r4:00000000 [ 501.042708][ T7076] FAULT_INJECTION: forcing a failure. [ 501.042708][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 501.043331][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.1.811 Not tainted 6.12.0-rc4-syzkaller #0 [ 501.043733][ T7076] Hardware name: ARM-Versatile Express [ 501.043985][ T7076] Call trace: [ 501.044203][ T7076] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 501.044625][ T7076] r7:84e15400 r6:00000dc0 r5:60000113 r4:8203d814 [ 501.044894][ T7076] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 501.045214][ T7076] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 501.045547][ T7076] r5:00000000 r4:8271925c [ 501.045759][ T7076] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 501.046113][ T7076] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 501.046519][ T7076] r6:00000dc0 r5:826f6690 r4:82c01240 [ 501.046748][ T7076] [<804e828c>] (should_failslab) from [<804cc740>] (__kmalloc_cache_noprof+0x4c/0x344) [ 501.047134][ T7076] [<804cc6f4>] (__kmalloc_cache_noprof) from [<80260330>] (call_usermodehelper_setup+0x48/0xb8) [ 501.047552][ T7076] r10:00000000 r9:eaa4decb r8:826f6564 r7:826f6564 r6:84d7b500 r5:826f6690 [ 501.047873][ T7076] r4:84d7b500 [ 501.048049][ T7076] [<802602e8>] (call_usermodehelper_setup) from [<802f976c>] (__request_module+0x150/0x2c0) [ 501.048445][ T7076] r7:84e15400 r6:84d7bf00 r5:00000002 r4:84d7b500 [ 501.048723][ T7076] [<802f961c>] (__request_module) from [<814f0760>] (dev_load+0x68/0x8c) [ 501.049087][ T7076] r3:00400140 r2:eaa4decc r1:820adb74 [ 501.049328][ T7076] r8:00000000 r7:84780d00 r6:eaa4decc r5:00000000 r4:eaa4decc [ 501.049594][ T7076] [<814f06f8>] (dev_load) from [<814f1ad4>] (dev_ioctl+0x378/0x678) [ 501.049949][ T7076] r5:00000047 r4:00008947 [ 501.050148][ T7076] [<814f175c>] (dev_ioctl) from [<814854a8>] (sock_ioctl+0x4e8/0x608) [ 501.050489][ T7076] r10:84e15400 r9:81c59b50 r8:eaa4decc r7:b5403587 r6:84780d00 r5:20000580 [ 501.050810][ T7076] r4:00008947 r3:00000000 [ 501.051011][ T7076] [<81484fc0>] (sock_ioctl) from [<8052f7d0>] (sys_ioctl+0x134/0xda8) [ 501.051358][ T7076] r9:84c64840 r8:00000003 r7:20000580 r6:84c64841 r5:00000000 r4:00008947 [ 501.051654][ T7076] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 501.052288][ T7076] Exception stack(0xeaa4dfa8 to 0xeaa4dff0) [ 501.052641][ T7076] dfa0: 00000000 00000000 00000003 00008947 20000580 00000000 [ 501.053217][ T7076] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcc0bc [ 501.053825][ T7076] dfe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 501.054172][ T7076] r10:00000036 r9:84e15400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 501.054576][ T7076] r4:00000000 [ 501.443648][ T31] audit: type=1400 audit(501.350:275): avc: denied { write } for pid=7089 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 501.448560][ T31] audit: type=1400 audit(501.350:276): avc: denied { read } for pid=7089 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 504.919750][ T31] audit: type=1400 audit(504.820:277): avc: denied { shutdown } for pid=7106 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.089082][ T31] audit: type=1400 audit(504.980:278): avc: denied { map } for pid=7106 comm="syz.1.818" path="socket:[11338]" dev="sockfs" ino=11338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.193493][ T31] audit: type=1400 audit(505.100:279): avc: denied { accept } for pid=7106 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.217937][ T7107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7107 comm=syz.1.818 [ 505.226634][ T31] audit: type=1400 audit(505.130:280): avc: denied { create } for pid=7106 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.268875][ T7107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5134 sclass=netlink_xfrm_socket pid=7107 comm=syz.1.818 [ 506.287072][ T7112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7112 comm=syz.1.820 [ 506.386568][ T7115] fuse: Unknown parameter 'fd0x0000000000000004' [ 509.310459][ T7131] fuse: Unknown parameter 'fd0x0000000000000004' [ 509.818162][ T31] audit: type=1400 audit(509.710:281): avc: denied { wake_alarm } for pid=7132 comm="syz.0.829" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 510.297526][ T7138] FAULT_INJECTION: forcing a failure. [ 510.297526][ T7138] name failslab, interval 1, probability 0, space 0, times 0 [ 510.298128][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.0.830 Not tainted 6.12.0-rc4-syzkaller #0 [ 510.298418][ T7138] Hardware name: ARM-Versatile Express [ 510.298617][ T7138] Call trace: [ 510.298935][ T7138] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 510.299295][ T7138] r7:00000c40 r6:83e90aa8 r5:60000013 r4:8203d814 [ 510.299512][ T7138] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 510.299805][ T7138] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 510.300092][ T7138] r5:00000000 r4:8271925c [ 510.300251][ T7138] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 510.300564][ T7138] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 510.300898][ T7138] r6:83e90aa8 r5:00001000 r4:82c016c0 [ 510.301078][ T7138] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 510.301374][ T7138] [<804cd67c>] (__kmalloc_noprof) from [<80751018>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 510.301719][ T7138] r10:847cec00 r9:82c9fc00 r8:00000000 r7:84851110 r6:83e90aa8 r5:00001000 [ 510.302411][ T7138] r4:00000000 [ 510.302590][ T7138] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 510.303148][ T7138] r10:847cec00 r9:00000000 r8:00000003 r7:000089f8 r6:00000004 r5:81ad1868 [ 510.303437][ T7138] r4:83e90aa8 r3:824ba340 [ 510.303629][ T7138] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 510.304155][ T7138] r9:83e90a80 r8:00000003 r7:20000040 r6:20000040 r5:000089f8 r4:83e90a80 [ 510.304431][ T7138] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 510.304839][ T7138] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 510.305181][ T7138] r7:20000040 r6:83e90a81 r5:00000000 r4:000089f8 [ 510.305394][ T7138] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 510.305710][ T7138] Exception stack(0xeae9dfa8 to 0xeae9dff0) [ 510.305943][ T7138] dfa0: 00000000 00000000 00000003 000089f8 20000040 00000000 [ 510.306244][ T7138] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 510.306622][ T7138] dfe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 510.306867][ T7138] r10:00000036 r9:847cec00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 510.307141][ T7138] r4:00000000 [ 510.343313][ T7138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.624128][ T7141] capability: warning: `syz.1.831' uses 32-bit capabilities (legacy support in use) [ 513.384236][ T7159] could not allocate digest TFM handle sha1-ni [ 514.975281][ T7170] FAULT_INJECTION: forcing a failure. [ 514.975281][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 514.975659][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.1.839 Not tainted 6.12.0-rc4-syzkaller #0 [ 514.975895][ T7170] Hardware name: ARM-Versatile Express [ 514.976099][ T7170] Call trace: [ 514.976248][ T7170] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 514.976576][ T7170] r7:84e16c00 r6:00000920 r5:60000013 r4:8203d814 [ 514.976840][ T7170] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 514.977087][ T7170] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 514.977387][ T7170] r5:00000000 r4:8271925c [ 514.977493][ T7170] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 514.977783][ T7170] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 514.978008][ T7170] r6:00000920 r5:84482830 r4:82c01240 [ 514.978148][ T7170] [<804e828c>] (should_failslab) from [<804cc740>] (__kmalloc_cache_noprof+0x4c/0x344) [ 514.978393][ T7170] [<804cc6f4>] (__kmalloc_cache_noprof) from [<8185f838>] (sctp_add_bind_addr+0x50/0xf4) [ 514.978651][ T7170] r10:0000e69c r9:84781460 r8:0000001c r7:844ae6d0 r6:00000001 r5:84482830 [ 514.978856][ T7170] r4:844ae6c0 [ 514.978948][ T7170] [<8185f7e8>] (sctp_add_bind_addr) from [<8184e318>] (sctp_copy_local_addr_list+0x120/0x160) [ 514.979204][ T7170] r9:84781460 r8:84482830 r7:00000003 r6:84780d00 r5:844ae6d0 r4:844ae6c0 [ 514.979398][ T7170] [<8184e1f8>] (sctp_copy_local_addr_list) from [<818601d0>] (sctp_bind_addr_copy+0x50/0x1cc) [ 514.979675][ T7170] r10:00000003 r9:84482830 r8:850fbb74 r7:84780d00 r6:00000cc0 r5:84c0dcd0 [ 514.979881][ T7170] r4:84c0dcc0 [ 514.979957][ T7170] [<81860180>] (sctp_bind_addr_copy) from [<818514a8>] (sctp_assoc_set_bind_addr_from_ep+0x6c/0x74) [ 514.980232][ T7170] r10:00000010 r9:84ecd400 r8:df969e34 r7:84c0d280 r6:00000000 r5:00000003 [ 514.980448][ T7170] r4:00000cc0 [ 514.980526][ T7170] [<8185143c>] (sctp_assoc_set_bind_addr_from_ep) from [<818698ac>] (sctp_connect_new_asoc+0x90/0x1e0) [ 514.980837][ T7170] r4:84482800 [ 514.980930][ T7170] [<8186981c>] (sctp_connect_new_asoc) from [<81869b40>] (__sctp_connect+0x144/0x334) [ 514.981155][ T7170] r9:850fbb40 r8:827ea298 r7:00000000 r6:00000010 r5:84c0d280 r4:84ecd400 [ 514.981281][ T7170] [<818699fc>] (__sctp_connect) from [<81869e70>] (__sctp_setsockopt_connectx+0x70/0xb4) [ 514.981584][ T7170] r10:00000010 r9:b5403587 r8:84e16c00 r7:00000000 r6:84c0d280 r5:84ecd400 [ 514.981842][ T7170] r4:00000010 [ 514.981960][ T7170] [<81869e00>] (__sctp_setsockopt_connectx) from [<8186a788>] (sctp_setsockopt+0x73c/0x2680) [ 514.982413][ T7170] r7:00000010 r6:84c0d280 r5:0000006b r4:84ecd400 [ 514.982590][ T7170] [<8186a050>] (sctp_setsockopt) from [<81487ca8>] (sock_common_setsockopt+0x38/0x40) [ 514.982863][ T7170] r10:00000126 r9:84e16c00 r8:8020029c r7:00000000 r6:8339c000 r5:00000000 [ 514.983148][ T7170] r4:8186a04c [ 514.983244][ T7170] [<81487c74>] (sock_common_setsockopt) from [<81483304>] (do_sock_setsockopt+0xb0/0x17c) [ 514.983510][ T7170] r4:81487c70 [ 514.983621][ T7170] [<81483254>] (do_sock_setsockopt) from [<814867c8>] (sys_setsockopt+0x78/0xbc) [ 514.983927][ T7170] r6:8339c000 r5:0000006b r4:00000084 [ 514.984086][ T7170] [<81486750>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 514.984325][ T7170] Exception stack(0xdf969fa8 to 0xdf969ff0) [ 514.984502][ T7170] 9fa0: 00000010 00000000 00000003 00000084 0000006b 20000240 [ 514.984822][ T7170] 9fc0: 00000010 00000000 00130e70 00000126 00000000 00006364 003d0f00 76bcc0bc [ 514.985031][ T7170] 9fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 514.985360][ T7170] r7:00000126 r6:00130e70 r5:00000000 r4:00000010 [ 516.333589][ T7176] FAULT_INJECTION: forcing a failure. [ 516.333589][ T7176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.334288][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.841 Not tainted 6.12.0-rc4-syzkaller #0 [ 516.334734][ T7176] Hardware name: ARM-Versatile Express [ 516.334987][ T7176] Call trace: [ 516.335161][ T7176] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 516.335499][ T7176] r7:003d0f00 r6:76bc00bc r5:60000013 r4:8203d814 [ 516.335771][ T7176] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 516.336167][ T7176] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 516.336533][ T7176] r5:00000000 r4:8274e844 [ 516.336782][ T7176] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 516.337150][ T7176] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 516.337526][ T7176] r6:76bc00bc r5:847c9420 r4:76bbfbd8 [ 516.337755][ T7176] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 516.338096][ T7176] [<808e555c>] (should_fail_usercopy) from [<8020b7e4>] (setup_sigframe+0xe4/0x1c4) [ 516.338479][ T7176] [<8020b700>] (setup_sigframe) from [<8020bc8c>] (do_work_pending+0x2f4/0x4f8) [ 516.338855][ T7176] r10:00000004 r9:b5403587 r8:00000000 r7:847c9420 r6:76bbfbd8 r5:eaf39fb0 [ 516.339146][ T7176] r4:847c8c00 [ 516.339305][ T7176] [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 516.339658][ T7176] Exception stack(0xeaf39fb0 to 0xeaf39ff8) [ 516.339911][ T7176] 9fa0: 00000001 76bbff20 00000001 00000000 [ 516.340242][ T7176] 9fc0: 00000001 76bbff20 00000005 00000004 00000000 00006364 003d0f00 76bc00bc [ 516.340584][ T7176] 9fe0: 00000158 76bbfed0 000d8408 00130e5c 40000010 00000005 [ 516.340917][ T7176] r10:00000004 r9:847c8c00 r8:8020029c r7:00000004 r6:00000005 r5:76bbff20 [ 516.341218][ T7176] r4:00000001 [ 519.078429][ T31] audit: type=1400 audit(518.980:282): avc: denied { accept } for pid=7187 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 523.067331][ T7204] FAULT_INJECTION: forcing a failure. [ 523.067331][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.067974][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.0.851 Not tainted 6.12.0-rc4-syzkaller #0 [ 523.068285][ T7204] Hardware name: ARM-Versatile Express [ 523.068490][ T7204] Call trace: [ 523.068721][ T7204] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 523.069098][ T7204] r7:00000000 r6:00000000 r5:60000013 r4:8203d814 [ 523.069317][ T7204] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 523.069625][ T7204] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 523.069949][ T7204] r5:00000000 r4:8274e844 [ 523.070138][ T7204] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 523.070466][ T7204] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 523.070806][ T7204] r6:00000000 r5:dfb51f68 r4:00000002 [ 523.071025][ T7204] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 523.071355][ T7204] [<808e555c>] (should_fail_usercopy) from [<8054e80c>] (simple_read_from_buffer+0x8c/0x134) [ 523.071810][ T7204] [<8054e780>] (simple_read_from_buffer) from [<805c326c>] (proc_fail_nth_read+0xb8/0x100) [ 523.072678][ T7204] r10:00000001 r9:805c31b4 r8:00000002 r7:dfb51f68 r6:0000000f r5:76bbff30 [ 523.073091][ T7204] r4:84e15400 r3:dfb51e9f [ 523.073308][ T7204] [<805c31b4>] (proc_fail_nth_read) from [<80515f58>] (vfs_read+0x98/0x324) [ 523.073699][ T7204] r8:76bbff30 r7:dfb51f68 r6:84e15400 r5:0000000f r4:84c64300 [ 523.074002][ T7204] [<80515ec0>] (vfs_read) from [<80516c08>] (ksys_read+0x78/0xf8) [ 523.074369][ T7204] r10:00000003 r9:84e15400 r8:8020029c r7:00000000 r6:00000000 r5:84c64300 [ 523.074695][ T7204] r4:84c64303 [ 523.074883][ T7204] [<80516b90>] (ksys_read) from [<80516c98>] (sys_read+0x10/0x14) [ 523.075279][ T7204] r7:00000003 r6:00000004 r5:76bbff30 r4:0000000f [ 523.075551][ T7204] [<80516c88>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 523.075922][ T7204] Exception stack(0xdfb51fa8 to 0xdfb51ff0) [ 523.076206][ T7204] 1fa0: 0000000f 76bbff30 00000004 76bbff30 0000000f 00000000 [ 523.076569][ T7204] 1fc0: 0000000f 76bbff30 00000004 00000003 00000000 00006364 003d0f00 76bc00bc [ 523.076924][ T7204] 1fe0: 00000158 76bbfed0 000d8408 00130d94 [ 526.061308][ T31] audit: type=1400 audit(525.960:283): avc: denied { read } for pid=7220 comm="syz.0.855" dev="sockfs" ino=11554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 528.798351][ T31] audit: type=1400 audit(528.700:284): avc: denied { create } for pid=7235 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 531.856800][ T31] audit: type=1400 audit(531.760:285): avc: denied { bind } for pid=7257 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 532.269954][ T31] audit: type=1400 audit(532.170:286): avc: denied { read } for pid=7263 comm="syz.1.867" path="socket:[11633]" dev="sockfs" ino=11633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 532.292417][ T7264] sctp: [Deprecated]: syz.1.867 (pid 7264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.292417][ T7264] Use struct sctp_sack_info instead [ 538.817673][ T7286] fuse: Unknown parameter ' ' [ 550.969595][ T7329] FAULT_INJECTION: forcing a failure. [ 550.969595][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 550.969998][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.0.889 Not tainted 6.12.0-rc4-syzkaller #0 [ 550.970217][ T7329] Hardware name: ARM-Versatile Express [ 550.970421][ T7329] Call trace: [ 550.970548][ T7329] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 550.970789][ T7329] r7:00000c40 r6:84c64b68 r5:60000013 r4:8203d814 [ 550.970967][ T7329] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 550.971205][ T7329] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 550.971420][ T7329] r5:00000000 r4:8271925c [ 550.971540][ T7329] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 550.971763][ T7329] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 550.972304][ T7329] r6:84c64b68 r5:00001000 r4:82c016c0 [ 550.972451][ T7329] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 550.972934][ T7329] [<804cd67c>] (__kmalloc_noprof) from [<80751018>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 550.973363][ T7329] r10:84e11800 r9:82c9fc00 r8:00000000 r7:84849f68 r6:84c64b68 r5:00001000 [ 550.973594][ T7329] r4:00000000 [ 550.973719][ T7329] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 550.974018][ T7329] r10:84e11800 r9:00000000 r8:00000003 r7:00008983 r6:00000004 r5:81ad1868 [ 550.974232][ T7329] r4:84c64b68 r3:824ba340 [ 550.974370][ T7329] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 550.974655][ T7329] r9:84c64b40 r8:00000003 r7:200047c0 r6:200047c0 r5:00008983 r4:84c64b40 [ 550.974892][ T7329] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 550.975177][ T7329] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 550.975440][ T7329] r7:200047c0 r6:84c64b41 r5:00000000 r4:00008983 [ 550.975614][ T7329] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 550.975852][ T7329] Exception stack(0xe00b5fa8 to 0xe00b5ff0) [ 550.976096][ T7329] 5fa0: 00000000 00000000 00000003 00008983 200047c0 00000000 [ 550.976372][ T7329] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 550.976663][ T7329] 5fe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 550.976851][ T7329] r10:00000036 r9:84e11800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 550.977082][ T7329] r4:00000000 [ 550.989367][ T7329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.136166][ T7332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7332 comm=syz.0.890 [ 551.555011][ T7346] FAULT_INJECTION: forcing a failure. [ 551.555011][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 551.555373][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.0.895 Not tainted 6.12.0-rc4-syzkaller #0 [ 551.555540][ T7346] Hardware name: ARM-Versatile Express [ 551.555643][ T7346] Call trace: [ 551.555736][ T7346] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 551.555928][ T7346] r7:00000c40 r6:84c64f28 r5:60000013 r4:8203d814 [ 551.556175][ T7346] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 551.556518][ T7346] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 551.556873][ T7346] r5:00000000 r4:8271925c [ 551.557074][ T7346] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 551.557420][ T7346] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 551.557738][ T7346] r6:84c64f28 r5:00001000 r4:82c016c0 [ 551.557866][ T7346] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 551.558057][ T7346] [<804cd67c>] (__kmalloc_noprof) from [<80751018>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 551.558265][ T7346] r10:84e13c00 r9:82c9fc00 r8:00000000 r7:84849908 r6:84c64f28 r5:00001000 [ 551.558423][ T7346] r4:00000000 [ 551.558515][ T7346] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 551.558724][ T7346] r10:84e13c00 r9:00000000 r8:00000004 r7:00005451 r6:00000004 r5:81ad1868 [ 551.558977][ T7346] r4:84c64f28 r3:824ba340 [ 551.559162][ T7346] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 551.559573][ T7346] r9:84c64f00 r8:00000004 r7:00000000 r6:00000000 r5:00005451 r4:84c64f00 [ 551.559736][ T7346] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 551.559937][ T7346] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 551.560127][ T7346] r7:00000000 r6:84c64f01 r5:00000000 r4:00005451 [ 551.560256][ T7346] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 551.560430][ T7346] Exception stack(0xdff75fa8 to 0xdff75ff0) [ 551.560574][ T7346] 5fa0: 00000000 00000000 00000004 00005451 00000000 00000000 [ 551.560792][ T7346] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 551.560963][ T7346] 5fe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 551.561085][ T7346] r10:00000036 r9:84e13c00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 551.561242][ T7346] r4:00000000 [ 551.583370][ T7346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.882520][ T4175] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 556.032331][ T4175] usb 1-1: Using ep0 maxpacket: 16 [ 556.042633][ T4175] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.043012][ T4175] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 556.043265][ T4175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.045525][ T4175] usb 1-1: config 0 descriptor?? [ 556.055374][ T4175] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 557.296883][ T7386] FAULT_INJECTION: forcing a failure. [ 557.296883][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.298442][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.0.905 Not tainted 6.12.0-rc4-syzkaller #0 [ 557.298945][ T7386] Hardware name: ARM-Versatile Express [ 557.299236][ T7386] Call trace: [ 557.299468][ T7386] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 557.299933][ T7386] r7:b5403587 r6:00000000 r5:60000113 r4:8203d814 [ 557.300280][ T7386] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 557.300739][ T7386] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 557.301140][ T7386] r5:00000000 r4:8274e844 [ 557.301360][ T7386] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 557.301770][ T7386] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 557.302826][ T7386] r6:00000000 r5:847cd020 r4:76b9ebb8 [ 557.303326][ T7386] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 557.304495][ T7386] [<808e555c>] (should_fail_usercopy) from [<8020b824>] (setup_sigframe+0x124/0x1c4) [ 557.305558][ T7386] [<8020b700>] (setup_sigframe) from [<8020bd8c>] (do_work_pending+0x3f4/0x4f8) [ 557.306146][ T7386] r10:b5403587 r9:76b9ebb8 r8:00000000 r7:847cd020 r6:76b9eb38 r5:e0671fb0 [ 557.306513][ T7386] r4:847cc800 [ 557.306832][ T7386] [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 557.307243][ T7386] Exception stack(0xe0671fb0 to 0xe0671ff8) [ 557.307672][ T7386] 1fa0: fffffffc 20000000 00000200 00000000 [ 557.308028][ T7386] 1fc0: 00000000 00000000 00130e70 00000142 00000000 00006364 003d0f00 76b9f0bc [ 557.308351][ T7386] 1fe0: 76b9eec0 76b9eeb0 00018af8 00132ec0 60000010 ffffff9c [ 557.309053][ T7386] r10:00000142 r9:847cc800 r8:8020029c r7:00000142 r6:00130e70 r5:00000000 [ 557.309578][ T7386] r4:00000000 [ 557.642221][ T4444] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 557.830164][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.830681][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.831126][ T4444] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.836457][ T4444] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.838829][ T4444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.871359][ T4444] usb 2-1: config 0 descriptor?? [ 558.371155][ T4444] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 558.399235][ T4444] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 559.683648][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 560.459970][ T10] usb 2-1: USB disconnect, device number 13 [ 561.293896][ T7375] bcm5974 1-1:0.0: could not read from device [ 561.305653][ T50] usb 1-1: USB disconnect, device number 26 [ 561.589078][ T31] audit: type=1400 audit(561.490:287): avc: denied { setattr } for pid=7435 comm="syz.0.912" name="PING" dev="sockfs" ino=11087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 564.957775][ T7457] FAULT_INJECTION: forcing a failure. [ 564.957775][ T7457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.958397][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: syz.1.920 Not tainted 6.12.0-rc4-syzkaller #0 [ 564.958690][ T7457] Hardware name: ARM-Versatile Express [ 564.958889][ T7457] Call trace: [ 564.959056][ T7457] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 564.959383][ T7457] r7:00000000 r6:00000000 r5:60000013 r4:8203d814 [ 564.959598][ T7457] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 564.961354][ T7457] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 564.961682][ T7457] r5:00000000 r4:8274e844 [ 564.962188][ T7457] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 564.962751][ T7457] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 564.963163][ T7457] r6:00000000 r5:e4879f68 r4:00000002 [ 564.963684][ T7457] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 564.964063][ T7457] [<808e555c>] (should_fail_usercopy) from [<8054e80c>] (simple_read_from_buffer+0x8c/0x134) [ 564.964709][ T7457] [<8054e780>] (simple_read_from_buffer) from [<805c326c>] (proc_fail_nth_read+0xb8/0x100) [ 564.965325][ T7457] r10:00000001 r9:805c31b4 r8:00000002 r7:e4879f68 r6:0000000f r5:76baaf30 [ 564.965700][ T7457] r4:84e11800 r3:e4879e9f [ 564.966208][ T7457] [<805c31b4>] (proc_fail_nth_read) from [<80515f58>] (vfs_read+0x98/0x324) [ 564.967051][ T7457] r8:76baaf30 r7:e4879f68 r6:84e11800 r5:0000000f r4:84c64600 [ 564.967351][ T7457] [<80515ec0>] (vfs_read) from [<80516c08>] (ksys_read+0x78/0xf8) [ 564.967690][ T7457] r10:00000003 r9:84e11800 r8:8020029c r7:00000000 r6:00000000 r5:84c64600 [ 564.968140][ T7457] r4:84c64603 [ 564.968308][ T7457] [<80516b90>] (ksys_read) from [<80516c98>] (sys_read+0x10/0x14) [ 564.968685][ T7457] r7:00000003 r6:00000004 r5:76baaf30 r4:0000000f [ 564.968946][ T7457] [<80516c88>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 564.969277][ T7457] Exception stack(0xe4879fa8 to 0xe4879ff0) [ 564.969540][ T7457] 9fa0: 0000000f 76baaf30 00000004 76baaf30 0000000f 00000000 [ 564.969888][ T7457] 9fc0: 0000000f 76baaf30 00000004 00000003 00000000 00006364 003d0f00 76bab0bc [ 564.970212][ T7457] 9fe0: 00000158 76baaed0 000d8408 00130d94 [ 569.066848][ T7501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5134 sclass=netlink_xfrm_socket pid=7501 comm=syz.0.938 [ 570.077731][ T31] audit: type=1400 audit(569.980:288): avc: denied { connect } for pid=7516 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 570.115371][ T31] audit: type=1400 audit(570.020:289): avc: denied { accept } for pid=7516 comm="syz.0.946" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 573.037174][ T31] audit: type=1400 audit(572.940:290): avc: denied { getopt } for pid=7539 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 573.060282][ T7540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5124 sclass=netlink_tcpdiag_socket pid=7540 comm=syz.1.956 [ 573.066110][ T31] audit: type=1400 audit(572.970:291): avc: denied { setopt } for pid=7539 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 573.113810][ T7540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7540 comm=syz.1.956 [ 573.115060][ T31] audit: type=1400 audit(573.020:292): avc: denied { read } for pid=7539 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 573.589299][ T7544] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65498 sclass=netlink_xfrm_socket pid=7544 comm=syz.1.958 [ 574.249409][ T7559] fuse: Bad value for 'fd' [ 574.983691][ T7571] fuse: Bad value for 'fd' [ 575.019011][ T7573] FAULT_INJECTION: forcing a failure. [ 575.019011][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 575.019672][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.0.970 Not tainted 6.12.0-rc4-syzkaller #0 [ 575.020019][ T7573] Hardware name: ARM-Versatile Express [ 575.020249][ T7573] Call trace: [ 575.020456][ T7573] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 575.020873][ T7573] r7:84e13000 r6:00000cc0 r5:60000013 r4:8203d814 [ 575.021110][ T7573] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 575.021448][ T7573] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 575.021848][ T7573] r5:00000000 r4:8271925c [ 575.022295][ T7573] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 575.023002][ T7573] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 575.023468][ T7573] r6:00000cc0 r5:ffffffff r4:82cac780 [ 575.023813][ T7573] [<804e828c>] (should_failslab) from [<804ccd28>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 575.024330][ T7573] [<804cccd8>] (kmem_cache_alloc_node_noprof) from [<81491680>] (__alloc_skb+0x138/0x160) [ 575.024812][ T7573] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cac780 r5:ffffffff [ 575.025167][ T7573] r4:82606000 [ 575.025365][ T7573] [<81491548>] (__alloc_skb) from [<815a6abc>] (netlink_alloc_large_skb+0x88/0xa0) [ 575.025791][ T7573] r8:00000000 r7:84d8b800 r6:00000014 r5:8483b400 r4:00000140 [ 575.026150][ T7573] [<815a6a34>] (netlink_alloc_large_skb) from [<815a70c4>] (netlink_sendmsg+0x134/0x43c) [ 575.026565][ T7573] r5:8483b400 r4:eba89f38 [ 575.026794][ T7573] [<815a6f90>] (netlink_sendmsg) from [<81483e18>] (__sock_sendmsg+0x44/0x78) [ 575.027247][ T7573] r10:0004c000 r9:eba89dd4 r8:eba89dd4 r7:00000000 r6:8483b400 r5:eba89f38 [ 575.027600][ T7573] r4:00000000 [ 575.027817][ T7573] [<81483dd4>] (__sock_sendmsg) from [<81484e1c>] (____sys_sendmsg+0x2ac/0x2cc) [ 575.028186][ T7573] r7:00000000 r6:00000000 r5:8483b400 r4:eba89f38 [ 575.028448][ T7573] [<81484b70>] (____sys_sendmsg) from [<81486d84>] (___sys_sendmsg+0x9c/0xd0) [ 575.028835][ T7573] r10:eba89e34 r9:200000c0 r8:0004c000 r7:00000000 r6:8483b400 r5:eba89f38 [ 575.029165][ T7573] r4:00000000 [ 575.029313][ T7573] [<81486ce8>] (___sys_sendmsg) from [<8148729c>] (sys_sendmsg+0x78/0xbc) [ 575.029654][ T7573] r10:00000128 r9:84e13000 r8:8020029c r7:0004c000 r6:200000c0 r5:8483b400 [ 575.030005][ T7573] r4:00000000 [ 575.030183][ T7573] [<81487224>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 575.030553][ T7573] Exception stack(0xeba89fa8 to 0xeba89ff0) [ 575.030861][ T7573] 9fa0: 00000000 00000000 00000003 200000c0 0004c000 00000000 [ 575.031225][ T7573] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bc00bc [ 575.031574][ T7573] 9fe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 575.032415][ T7573] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 575.543963][ T7583] fuse: Bad value for 'fd' [ 575.866315][ T7599] raw_sendmsg: syz.0.977 forgot to set AF_INET. Fix it! [ 576.192354][ T31] audit: type=1400 audit(576.090:293): avc: denied { map } for pid=7601 comm="syz.1.978" path="/proc/1191/task/1192/fd" dev="proc" ino=12523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 576.193579][ T31] audit: type=1400 audit(576.090:294): avc: denied { execute } for pid=7601 comm="syz.1.978" path="/proc/1191/task/1192/fd" dev="proc" ino=12523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 577.379945][ T31] audit: type=1400 audit(577.280:295): avc: denied { map } for pid=7615 comm="syz.1.985" path="socket:[12097]" dev="sockfs" ino=12097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 585.227360][ T7695] fuse: Bad value for 'fd' [ 585.651872][ T7700] FAULT_INJECTION: forcing a failure. [ 585.651872][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 585.654337][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.0.1019 Not tainted 6.12.0-rc4-syzkaller #0 [ 585.654739][ T7700] Hardware name: ARM-Versatile Express [ 585.654978][ T7700] Call trace: [ 585.655167][ T7700] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 585.655546][ T7700] r7:00000d40 r6:85062628 r5:60000013 r4:8203d814 [ 585.655762][ T7700] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 585.655945][ T7700] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 585.656160][ T7700] r5:00000000 r4:8271925c [ 585.656292][ T7700] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 585.656477][ T7700] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 585.656816][ T7700] r6:85062628 r5:00000024 r4:82c01240 [ 585.656994][ T7700] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 585.657228][ T7700] [<804cd67c>] (__kmalloc_noprof) from [<80750f20>] (tomoyo_encode2+0x64/0xf0) [ 585.657499][ T7700] r10:00000fff r9:82c9e800 r8:00000000 r7:830d63b8 r6:85062628 r5:8443bffc [ 585.657782][ T7700] r4:8443bfe3 [ 585.657901][ T7700] [<80750ebc>] (tomoyo_encode2) from [<80750fd0>] (tomoyo_encode+0x24/0x30) [ 585.658078][ T7700] r9:82c9e800 r8:00000000 r7:830d63b8 r6:85062628 r5:00001000 r4:8443bfe4 [ 585.658218][ T7700] [<80750fac>] (tomoyo_encode) from [<8075105c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 585.658459][ T7700] r5:00001000 r4:8443b000 [ 585.658580][ T7700] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 585.658876][ T7700] r10:84e13000 r9:00000000 r8:00000004 r7:c0406618 r6:00000004 r5:81ad1868 [ 585.659096][ T7700] r4:85062628 r3:824ba340 [ 585.659217][ T7700] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 585.659467][ T7700] r9:85062600 r8:00000004 r7:00000000 r6:00000000 r5:c0406618 r4:85062600 [ 585.659656][ T7700] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 585.659824][ T7700] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 585.660037][ T7700] r7:00000000 r6:85062601 r5:00000000 r4:c0406618 [ 585.660269][ T7700] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 585.660428][ T7700] Exception stack(0xec4a1fa8 to 0xec4a1ff0) [ 585.660566][ T7700] 1fa0: 00000000 00000000 00000004 c0406618 00000000 00000000 [ 585.660914][ T7700] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc00bc [ 585.661221][ T7700] 1fe0: 76bbfec0 76bbfeb0 00018af8 00132ec0 [ 585.661458][ T7700] r10:00000036 r9:84e13000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 585.661647][ T7700] r4:00000000 [ 585.661766][ T7700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.877109][ T7708] fuse: Bad value for 'fd' [ 588.871676][ T7720] fuse: Bad value for 'fd' [ 590.635101][ T7734] fuse: Bad value for 'fd' [ 612.872705][ T7799] fuse: Bad value for 'fd' [ 618.234634][ T7813] fuse: Bad value for 'fd' [ 618.387241][ T7815] fuse: Bad value for 'fd' [ 621.184781][ T7820] binfmt_misc: register: failed to install interpreter file ./file0 [ 621.476210][ T7824] fuse: Bad value for 'group_id' [ 621.476451][ T7824] fuse: Bad value for 'group_id' [ 621.585707][ T7826] fuse: Bad value for 'fd' [ 621.727480][ T7828] fuse: Bad value for 'fd' [ 622.049230][ T31] audit: type=1400 audit(621.950:296): avc: denied { setopt } for pid=7831 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.059204][ T31] audit: type=1400 audit(621.960:297): avc: denied { bind } for pid=7831 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.263163][ T7834] fuse: Bad value for 'group_id' [ 622.263413][ T7834] fuse: Bad value for 'group_id' [ 624.306230][ T7846] fuse: Bad value for 'group_id' [ 624.306530][ T7846] fuse: Bad value for 'group_id' [ 625.304002][ T7858] FAULT_INJECTION: forcing a failure. [ 625.304002][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.304362][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.1.1081 Not tainted 6.12.0-rc4-syzkaller #0 [ 625.304526][ T7858] Hardware name: ARM-Versatile Express [ 625.304659][ T7858] Call trace: [ 625.304758][ T7858] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 625.304954][ T7858] r7:20000280 r6:dfc9de30 r5:60000013 r4:8203d814 [ 625.305066][ T7858] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 625.305230][ T7858] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 625.305391][ T7858] r5:00000000 r4:8274e844 [ 625.305481][ T7858] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 625.305654][ T7858] [<808e5368>] (should_fail_ex) from [<808e5558>] (should_fail+0x14/0x18) [ 625.305812][ T7858] r6:dfc9de30 r5:00000000 r4:dfc9df38 [ 625.305915][ T7858] [<808e5544>] (should_fail) from [<808e5578>] (should_fail_usercopy+0x1c/0x20) [ 625.306084][ T7858] [<808e555c>] (should_fail_usercopy) from [<81486c08>] (copy_msghdr_from_user+0x50/0x130) [ 625.306255][ T7858] [<81486bb8>] (copy_msghdr_from_user) from [<81486d60>] (___sys_sendmsg+0x78/0xd0) [ 625.306453][ T7858] r8:00000000 r7:00000000 r6:8339d900 r5:dfc9df38 r4:dfc9de74 [ 625.306585][ T7858] [<81486ce8>] (___sys_sendmsg) from [<8148729c>] (sys_sendmsg+0x78/0xbc) [ 625.306748][ T7858] r10:00000128 r9:83fad400 r8:8020029c r7:00000000 r6:20000280 r5:8339d900 [ 625.306878][ T7858] r4:00000000 [ 625.306956][ T7858] [<81487224>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 625.307125][ T7858] Exception stack(0xdfc9dfa8 to 0xdfc9dff0) [ 625.307246][ T7858] dfa0: 00000000 00000000 00000003 20000280 00000000 00000000 [ 625.307399][ T7858] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bab0bc [ 625.307561][ T7858] dfe0: 76baaec0 76baaeb0 00018af8 00132ec0 [ 625.307676][ T7858] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 629.033980][ T31] audit: type=1400 audit(628.940:298): avc: denied { getopt } for pid=7888 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 629.059414][ T31] audit: type=1400 audit(628.960:299): avc: denied { append } for pid=7888 comm="syz.1.1092" name="nullb0" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 629.317845][ T7894] FAULT_INJECTION: forcing a failure. [ 629.317845][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 629.342416][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.1.1093 Not tainted 6.12.0-rc4-syzkaller #0 [ 629.342994][ T7894] Hardware name: ARM-Versatile Express [ 629.343149][ T7894] Call trace: [ 629.343262][ T7894] [<81999930>] (dump_backtrace) from [<81999a2c>] (show_stack+0x18/0x1c) [ 629.343510][ T7894] r7:00000d40 r6:8472b028 r5:60000013 r4:8203d814 [ 629.343770][ T7894] [<81999a14>] (show_stack) from [<819b7ee4>] (dump_stack_lvl+0x70/0x7c) [ 629.344021][ T7894] [<819b7e74>] (dump_stack_lvl) from [<819b7f08>] (dump_stack+0x18/0x1c) [ 629.344340][ T7894] r5:00000000 r4:8271925c [ 629.344542][ T7894] [<819b7ef0>] (dump_stack) from [<808e54f4>] (should_fail_ex+0x18c/0x1dc) [ 629.344989][ T7894] [<808e5368>] (should_fail_ex) from [<804e82f8>] (should_failslab+0x6c/0x94) [ 629.345324][ T7894] r6:8472b028 r5:00000019 r4:82c01240 [ 629.345469][ T7894] [<804e828c>] (should_failslab) from [<804cd718>] (__kmalloc_noprof+0x9c/0x458) [ 629.345741][ T7894] [<804cd67c>] (__kmalloc_noprof) from [<80750f20>] (tomoyo_encode2+0x64/0xf0) [ 629.345976][ T7894] r10:00000fff r9:82c9fc00 r8:00000000 r7:8482aa18 r6:8472b028 r5:8443dffd [ 629.346184][ T7894] r4:8443dfef [ 629.346276][ T7894] [<80750ebc>] (tomoyo_encode2) from [<80750fd0>] (tomoyo_encode+0x24/0x30) [ 629.346541][ T7894] r9:82c9fc00 r8:00000000 r7:8482aa18 r6:8472b028 r5:00001000 r4:8443dff0 [ 629.346753][ T7894] [<80750fac>] (tomoyo_encode) from [<8075105c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 629.347026][ T7894] r5:00001000 r4:8443d000 [ 629.347115][ T7894] [<80750fdc>] (tomoyo_realpath_from_path) from [<8074d15c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 629.347421][ T7894] r10:84e12400 r9:00000000 r8:00000003 r7:000089f8 r6:00000004 r5:81ad1868 [ 629.347655][ T7894] r4:8472b028 r3:824ba340 [ 629.347779][ T7894] [<8074d090>] (tomoyo_path_number_perm) from [<80751a28>] (tomoyo_file_ioctl+0x1c/0x20) [ 629.348101][ T7894] r9:8472b000 r8:00000003 r7:20000040 r6:20000040 r5:000089f8 r4:8472b000 [ 629.348319][ T7894] [<80751a0c>] (tomoyo_file_ioctl) from [<80700074>] (security_file_ioctl+0x64/0x1e4) [ 629.348628][ T7894] [<80700010>] (security_file_ioctl) from [<8052f6ec>] (sys_ioctl+0x50/0xda8) [ 629.348845][ T7894] r7:20000040 r6:8472b001 r5:00000000 r4:000089f8 [ 629.348968][ T7894] [<8052f69c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 629.349127][ T7894] Exception stack(0xdfd55fa8 to 0xdfd55ff0) [ 629.349287][ T7894] 5fa0: 00000000 00000000 00000003 000089f8 20000040 00000000 [ 629.349542][ T7894] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcc0bc [ 629.349796][ T7894] 5fe0: 76bcbec0 76bcbeb0 00018af8 00132ec0 [ 629.350007][ T7894] r10:00000036 r9:84e12400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 629.350249][ T7894] r4:00000000 [ 629.350442][ T7894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.596978][ T7896] fuse: Bad value for 'user_id' [ 629.597383][ T7896] fuse: Bad value for 'user_id' [ 630.956488][ T7909] fuse: Bad value for 'user_id' [ 630.956953][ T7909] fuse: Bad value for 'user_id' [ 631.397299][ T7917] fuse: Unknown parameter '' [ 631.427662][ T7917] fuse: Unknown parameter '0x000000000000000a' [ 631.993965][ T7926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7926 comm=syz.1.1107 [ 633.861366][ T7951] fuse: Unknown parameter 'grou00000000000000000000' [ 634.572954][ T4175] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 634.742741][ T4175] usb 2-1: Using ep0 maxpacket: 16 [ 634.841030][ T4175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.841701][ T4175] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 634.842957][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.874901][ T4175] usb 2-1: config 0 descriptor?? [ 634.921453][ T4175] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 636.305414][ T7969] fuse: Bad value for 'fd' [ 636.942800][ T31] audit: type=1400 audit(636.800:300): avc: denied { name_connect } for pid=7970 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 638.803717][ T7972] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 638.805345][ T31] audit: type=1400 audit(638.710:301): avc: denied { relabelto } for pid=7952 comm="syz.1.1117" name="tun" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 638.806509][ T31] audit: type=1400 audit(638.710:302): avc: denied { associate } for pid=7952 comm="syz.1.1117" name="tun" dev="devtmpfs" ino=691 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_etc_t:s0" [ 645.665399][ T31] audit: type=1400 audit(645.570:303): avc: denied { read } for pid=7974 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 645.733860][ T7975] fuse: Unknown parameter 'grou00000000000000000000' [ 646.352357][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 646.542539][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 646.577204][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.577769][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 646.578084][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.584219][ T46] usb 1-1: config 0 descriptor?? [ 646.617874][ T46] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 647.683869][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.685877][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.933329][ T46] bcm5974 1-1:0.0: could not write to device [ 651.942531][ T46] input: failed to attach handler mousedev to device input14, error: -5 [ 651.953468][ T46] usb 1-1: USB disconnect, device number 27 [ 651.980489][ T4175] usb 2-1: USB disconnect, device number 14 [ 652.140185][ T8010] fuse: Bad value for 'fd' [ 652.377223][ T31] audit: type=1400 audit(652.280:304): avc: denied { create } for pid=8012 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 652.441003][ T31] audit: type=1400 audit(652.340:305): avc: denied { audit_write } for pid=8013 comm="syz.0.1127" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 652.836930][ T8039] fuse: Unknown parameter 'group_id00000000000000000000' [ 654.026384][ T31] audit: type=1400 audit(653.930:306): avc: denied { nlmsg_read } for pid=8098 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 654.237540][ T8101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8101 comm=syz.0.1133 [ 654.744205][ T8106] fuse: Unknown parameter 'group_id00000000000000000000' [ 655.268232][ T8110] fuse: Unknown parameter '…d' [ 655.274583][ T8111] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8111 comm=syz.1.1137 [ 656.156314][ T8118] fuse: Bad value for 'user_id' [ 656.156784][ T8118] fuse: Bad value for 'user_id' [ 656.252933][ T31] audit: type=1400 audit(656.150:307): avc: denied { open } for pid=8115 comm="syz.0.1140" path="/dev/net/tun" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 656.255021][ T31] audit: type=1400 audit(656.150:308): avc: denied { ioctl } for pid=8115 comm="syz.0.1140" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 657.393194][ T8128] fuse: Bad value for 'user_id' [ 657.393510][ T8128] fuse: Bad value for 'user_id' [ 660.097540][ T31] audit: type=1400 audit(660.000:309): avc: denied { accept } for pid=8151 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.248106][ T8154] fuse: Bad value for 'user_id' [ 660.248659][ T8154] fuse: Bad value for 'user_id' [ 660.999776][ T8163] fuse: Unknown parameter 'grou00000000000000000000' [ 661.500637][ T31] audit: type=1400 audit(661.400:310): avc: denied { setopt } for pid=8164 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 661.565359][ T8171] fuse: Unknown parameter '…d' SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 661.917186][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.951543][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.011677][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.076340][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.189835][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.233479][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.437328][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.449961][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.457988][ T11] bond0 (unregistering): Released all slaves [ 662.540142][ T11] hsr_slave_0: left promiscuous mode [ 662.543700][ T11] hsr_slave_1: left promiscuous mode [ 662.549828][ T11] veth1_macvtap: left promiscuous mode [ 662.550285][ T11] veth0_macvtap: left promiscuous mode [ 662.550668][ T11] veth1_vlan: left promiscuous mode [ 662.550968][ T11] veth0_vlan: left promiscuous mode [ 663.553352][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.557385][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.559579][ T11] bond0 (unregistering): Released all slaves [ 663.630572][ T11] hsr_slave_0: left promiscuous mode [ 663.636575][ T11] hsr_slave_1: left promiscuous mode VM DIAGNOSIS: 22:58:35 Registers: info registers vcpu 0 CPU#0 R00=0091c000 R01=00000007 R02=7ee99170 R03=7ee9927c R04=00000008 R05=76f53c80 R06=7ee9927c R07=0000019e R08=0091c000 R09=7ee991fc R10=7ee9927c R11=00000000 R12=7ee99170 R13=7ee99170 R14=76b50f38 R15=76b50e90 PSR=60000010 -ZC- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005127e9 s17=00000000 d08=00000000005127e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=a8030008 s33=00080005 d16=00080005a8030008 s34=0005b003 s35=8281a008 d17=8281a0080005b003 s36=39a20280 s37=08060601 d18=0806060139a20280 s38=01000002 s39=00058002 d19=0005800201000002 s40=46a2e808 s41=08058003 d20=0805800346a2e808 s42=fffffffb s43=ffffffff d21=fffffffffffffffb s44=002e01ff s45=060629de d22=060629de002e01ff s46=00058002 s47=08000008 d23=0800000800058002 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=a8f26ce7 s53=811b57a9 d26=811b57a9a8f26ce7 s54=ab6555d4 s55=856d3f37 d27=856d3f37ab6555d4 s56=8e45d8ab s57=4c35413f d28=4c35413f8e45d8ab s58=5f86232c s59=c8de1e69 d29=c8de1e695f86232c s60=d0c527b3 s61=30d26494 d30=30d26494d0c527b3 s62=04d97e13 s63=714bc36f d31=714bc36f04d97e13 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00016c64 R01=15091508 R02=00000001 R03=defa55f8 R04=defa55f8 R05=00000000 R06=ddde8040 R07=00000000 R08=827f4a40 R09=defa55f4 R10=00000881 R11=df99dbbc R12=df99db88 R13=df99db30 R14=8027f3b4 R15=8048c8ac PSR=20000113 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000