last executing test programs: 21.783896278s ago: executing program 0 (id=4142): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.762824963s ago: executing program 0 (id=4148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 5.562665955s ago: executing program 0 (id=4149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2b, @void, @value}, 0x94) 2.842827944s ago: executing program 0 (id=4150): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0xfdef, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.712512202s ago: executing program 0 (id=4151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.582420059s ago: executing program 0 (id=4152): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x20000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f0000002080)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) 2.511999843s ago: executing program 1 (id=4153): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0x4, 0x4, 0x0, @void, @value}, 0x20) 2.253099288s ago: executing program 1 (id=4154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x2f, 0x0, "3fe898cf475648b07398b8dc67b76e6bd14bb37fb341cd6c142bb230c96ef88066ce6f2953fded261351a0a635b4a49eea5198b84b3329b8217806661f3a50933616d2ae0ebd69680b52eb1d47cc6808"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.040123321s ago: executing program 1 (id=4155): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000000c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\x93\x15\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\x1a\xf5\xbc\xc3 \xe1XR?\xd2\xd3P\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xce\xabD\x00)m\xac\xc5\x01uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1b!p\xbeV\xb7x\r@\x00'/157, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004ac0)={0x2020}, 0x2020) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc9", 0x583}], 0x1) r2 = io_uring_setup(0x194e, &(0x7f00000002c0)={0x0, 0x1994, 0x80, 0x40002, 0x2b0, 0x0, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000002b40)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) 1.70562983s ago: executing program 1 (id=4156): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 1.041941799s ago: executing program 1 (id=4157): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0xc8}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000480)="ee1f6c4186f1efac12007accfbfdea280971d2f74fcfd258452ffcff46e58b4d4ec8644f0a96a98b44caf97e6587af8f90eb4b2cd3f093af0b68372da59c0c362cd3fff7184777580d5fea8b18fbaf3814641586e5ee88b29ec09a329b9bc9b24779c56c5b0c51edffd129dcaece", 0x6e}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000009c0)}], 0x2}}], 0x2, 0x20000004) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ed}, [], {0x14, 0x3f2}}, 0x28}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x64802, 0x2002}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=4158): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$FICLONE(r5, 0x40049409, r5) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000098d000/0x2000)=nil, 0x2000}) kernel console output (not intermixed with test programs): 0525610>] (should_failslab) from [<805094a0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1290.666091][T15332] [<80509454>] (__kmalloc_cache_noprof) from [<807ab1fc>] (selinux_netlbl_sock_genattr+0x4c/0x140) [ 1290.666153][T15332] r10:81e72184 r9:8078de68 r8:84b60d00 r7:0000000a r6:85259a00 r5:85259a00 [ 1290.666171][T15332] r4:00000000 [ 1290.666180][T15332] [<807ab1b0>] (selinux_netlbl_sock_genattr) from [<807abc68>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 1290.666215][T15332] r7:0000000a r6:85259a00 r5:00000000 r4:00000002 [ 1290.666246][T15332] [<807abc28>] (selinux_netlbl_socket_post_create) from [<8078dfe4>] (selinux_socket_post_create+0x17c/0x29c) [ 1290.666357][T15332] r9:8078de68 r8:00000010 r7:0000000a r6:824683fc r5:83524500 r4:855002dc [ 1290.666434][T15332] [<8078de68>] (selinux_socket_post_create) from [<807804cc>] (security_socket_post_create+0x23c/0x24c) [ 1290.666529][T15332] r8:00000000 r7:00000106 r6:00000001 r5:0000000a r4:83524500 [ 1290.666632][T15332] [<80780290>] (security_socket_post_create) from [<81518720>] (__sock_create+0x1c0/0x228) [ 1290.666745][T15332] r9:853b8000 r8:83524500 r7:00000106 r6:00000000 r5:00000001 r4:0000000a [ 1290.666798][T15332] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1290.666873][T15332] r10:00000119 r9:832fe000 r8:8020029c r7:00000119 r6:832fe000 r5:0000000a [ 1290.666946][T15332] r4:00000001 [ 1290.666985][T15332] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1290.667071][T15332] r6:0012fee0 r5:00000000 r4:00000000 [ 1290.667090][T15332] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1290.667146][T15332] Exception stack(0xdf9edfa8 to 0xdf9edff0) [ 1290.667257][T15332] dfa0: 00000000 00000000 0000000a 00000001 00000106 00000000 [ 1290.667300][T15332] dfc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76bce0bc [ 1290.667314][T15332] dfe0: 76bcdec0 76bcdeb0 0001939c 00131f30 [ 1297.024089][T15374] FAULT_INJECTION: forcing a failure. [ 1297.024089][T15374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.025057][T15374] CPU: 1 UID: 0 PID: 15374 Comm: syz.0.2925 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1297.025139][T15374] Hardware name: ARM-Versatile Express [ 1297.025170][T15374] Call trace: [ 1297.025215][T15374] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1297.025325][T15374] r7:fffffdfd r6:00000000 r5:60000013 r4:82257d44 [ 1297.025348][T15374] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1297.025412][T15374] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1297.025484][T15374] r5:842ba400 r4:82951710 [ 1297.025504][T15374] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1297.025572][T15374] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1297.025643][T15374] r8:dfe85ecc r7:fffffdfd r6:853b8000 r5:200004c0 r4:00008980 [ 1297.025663][T15374] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1297.025751][T15374] [<8095f714>] (should_fail_usercopy) from [<8151ac4c>] (sock_ioctl+0x4ec/0x600) [ 1297.025822][T15374] [<8151a760>] (sock_ioctl) from [<8056b408>] (sys_ioctl+0x138/0xd84) [ 1297.025896][T15374] r9:00000004 r8:85375e40 r7:200004c0 r6:85375e41 r5:00000000 r4:00008980 [ 1297.025917][T15374] [<8056b2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1297.025977][T15374] Exception stack(0xdfe85fa8 to 0xdfe85ff0) [ 1297.026024][T15374] 5fa0: 00000000 00000000 00000004 00008980 200004c0 00000000 [ 1297.026067][T15374] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bad0bc [ 1297.026099][T15374] 5fe0: 76bacec0 76baceb0 0001939c 00131f30 [ 1297.026141][T15374] r10:00000036 r9:842ba400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1297.026169][T15374] r4:00000000 [ 1297.402465][T15401] FAULT_INJECTION: forcing a failure. [ 1297.402465][T15401] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.404936][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.1.2931 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1297.405037][T15401] Hardware name: ARM-Versatile Express [ 1297.405064][T15401] Call trace: [ 1297.405104][T15401] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1297.405206][T15401] r7:00000820 r6:00000000 r5:60000013 r4:82257d44 [ 1297.405225][T15401] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1297.405279][T15401] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1297.405336][T15401] r5:842ba400 r4:8291bcc0 [ 1297.405350][T15401] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1297.405405][T15401] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1297.405472][T15401] r8:842ba400 r7:00000820 r6:851991c0 r5:0000002c r4:83001240 [ 1297.405491][T15401] [<80525610>] (should_failslab) from [<8050a470>] (__kmalloc_noprof+0x9c/0x458) [ 1297.405559][T15401] [<8050a3d4>] (__kmalloc_noprof) from [<8151f700>] (sock_kmalloc+0x58/0x80) [ 1297.405643][T15401] r10:e00d1d80 r9:851991c0 r8:0000002c r7:00000036 r6:851991c0 r5:0000002c [ 1297.405666][T15401] r4:84936410 [ 1297.405709][T15401] [<8151f6a8>] (sock_kmalloc) from [<81842bd8>] (ipv6_renew_options+0xb4/0x3ac) [ 1297.405785][T15401] r5:00000000 r4:00000000 [ 1297.405803][T15401] [<81842b24>] (ipv6_renew_options) from [<81820224>] (do_ipv6_setsockopt+0x7bc/0x1830) [ 1297.405882][T15401] r9:851991c0 r8:e00d1d88 r7:00000036 r6:84936300 r5:84936a80 r4:00000000 [ 1297.405901][T15401] [<8181fa6c>] (do_ipv6_setsockopt) from [<818212f8>] (ipv6_setsockopt+0x60/0xbc) [ 1297.405972][T15401] r10:00000126 r9:842ba400 r8:00000000 r7:85375480 r6:00000018 r5:00000036 [ 1297.405995][T15401] r4:84936300 [ 1297.406011][T15401] [<8182129c>] (ipv6_setsockopt) from [<817179d8>] (tcp_setsockopt+0x3c/0x58) [ 1297.406074][T15401] r6:835fe780 r5:00000000 r4:81821298 [ 1297.406092][T15401] [<817179a0>] (tcp_setsockopt) from [<8151d188>] (sock_common_setsockopt+0x38/0x40) [ 1297.406144][T15401] r4:8171799c [ 1297.406167][T15401] [<8151d154>] (sock_common_setsockopt) from [<81518980>] (do_sock_setsockopt+0xb0/0x17c) [ 1297.406224][T15401] r4:8151d150 [ 1297.406242][T15401] [<815188d0>] (do_sock_setsockopt) from [<8151be3c>] (__sys_setsockopt+0x7c/0xb4) [ 1297.406300][T15401] r6:85375481 r5:00000036 r4:00000029 [ 1297.406310][T15401] [<8151bdc0>] (__sys_setsockopt) from [<8151be90>] (sys_setsockopt+0x1c/0x24) [ 1297.406344][T15401] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:00000018 [ 1297.406352][T15401] [<8151be74>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1297.406378][T15401] Exception stack(0xe00d1fa8 to 0xe00d1ff0) [ 1297.406398][T15401] 1fa0: 00000018 00000000 00000003 00000029 00000036 20000080 [ 1297.406416][T15401] 1fc0: 00000018 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b870bc [ 1297.406430][T15401] 1fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1300.743623][T15420] SELinux: Context system_u:object_r:auditctl_exec_t:s0 is not valid (left unmapped). [ 1300.745307][ T31] audit: type=1400 audit(1812.678:353): avc: denied { relabelto } for pid=15416 comm="syz.1.2935" name="info" dev="debugfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditctl_exec_t:s0" [ 1300.745604][ T31] audit: type=1400 audit(1812.678:354): avc: denied { associate } for pid=15416 comm="syz.1.2935" name="info" dev="debugfs" ino=815 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditctl_exec_t:s0" [ 1303.079129][T15428] FAULT_INJECTION: forcing a failure. [ 1303.079129][T15428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.082319][T15428] CPU: 1 UID: 0 PID: 15428 Comm: syz.0.2938 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1303.082433][T15428] Hardware name: ARM-Versatile Express [ 1303.082463][T15428] Call trace: [ 1303.082509][T15428] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1303.082628][T15428] r7:e00d1e20 r6:00000000 r5:60000013 r4:82257d44 [ 1303.082652][T15428] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1303.082719][T15428] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1303.082783][T15428] r5:842bd400 r4:82951710 [ 1303.082802][T15428] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1303.082867][T15428] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1303.082937][T15428] r8:20040000 r7:e00d1e20 r6:200002c0 r5:00000000 r4:e00d1f20 [ 1303.082955][T15428] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1303.083008][T15428] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1303.083067][T15428] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1303.083135][T15428] r8:20040000 r7:00000000 r6:835fef00 r5:e00d1f20 r4:e00d1e64 [ 1303.083152][T15428] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1303.083221][T15428] r10:00000128 r9:842bd400 r8:85375300 r7:20040000 r6:200002c0 r5:85375301 [ 1303.083245][T15428] r4:00000003 [ 1303.083262][T15428] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1303.083328][T15428] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1303.083348][T15428] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1303.083397][T15428] Exception stack(0xe00d1fa8 to 0xe00d1ff0) [ 1303.083436][T15428] 1fa0: 00000000 00000000 00000003 200002c0 20040000 00000000 [ 1303.083469][T15428] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bce0bc [ 1303.083496][T15428] 1fe0: 76bcdec0 76bcdeb0 0001939c 00131f30 [ 1305.508260][T15443] FAULT_INJECTION: forcing a failure. [ 1305.508260][T15443] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.509555][T15443] CPU: 1 UID: 0 PID: 15443 Comm: syz.1.2943 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1305.509642][T15443] Hardware name: ARM-Versatile Express [ 1305.509659][T15443] Call trace: [ 1305.509723][T15443] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1305.509809][T15443] r7:842b8c00 r6:00000000 r5:60000013 r4:82257d44 [ 1305.509820][T15443] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1305.509860][T15443] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1305.509892][T15443] r5:842b8c00 r4:8291bcc0 [ 1305.509900][T15443] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1305.509932][T15443] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1305.509972][T15443] r8:00000000 r7:842b8c00 r6:00000920 r5:844e4780 r4:83001240 [ 1305.509981][T15443] [<80525610>] (should_failslab) from [<805094a0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1305.510011][T15443] [<80509454>] (__kmalloc_cache_noprof) from [<807ab1fc>] (selinux_netlbl_sock_genattr+0x4c/0x140) [ 1305.510050][T15443] r10:81e72184 r9:8078de68 r8:844d7800 r7:0000000a r6:844e4780 r5:844e4780 [ 1305.510061][T15443] r4:00000000 [ 1305.510069][T15443] [<807ab1b0>] (selinux_netlbl_sock_genattr) from [<807abc68>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 1305.510101][T15443] r7:0000000a r6:844e4780 r5:00000000 r4:00000002 [ 1305.510109][T15443] [<807abc28>] (selinux_netlbl_socket_post_create) from [<8078dfe4>] (selinux_socket_post_create+0x17c/0x29c) [ 1305.510148][T15443] r9:8078de68 r8:00000012 r7:0000000a r6:824683fc r5:835fef00 r4:8449a5ac [ 1305.510158][T15443] [<8078de68>] (selinux_socket_post_create) from [<807804cc>] (security_socket_post_create+0x23c/0x24c) [ 1305.510197][T15443] r8:00000000 r7:00000073 r6:00000002 r5:0000000a r4:835fef00 [ 1305.510205][T15443] [<80780290>] (security_socket_post_create) from [<81518720>] (__sock_create+0x1c0/0x228) [ 1305.510244][T15443] r9:84a68000 r8:835fef00 r7:00000073 r6:00000000 r5:00000002 r4:0000000a [ 1305.510253][T15443] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1305.510287][T15443] r10:00000119 r9:842b8c00 r8:8020029c r7:00000119 r6:842b8c00 r5:0000000a [ 1305.510297][T15443] r4:00000002 [ 1305.510304][T15443] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1305.510333][T15443] r6:0012fee0 r5:00000000 r4:00000000 [ 1305.510340][T15443] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1305.510366][T15443] Exception stack(0xe056dfa8 to 0xe056dff0) [ 1305.510387][T15443] dfa0: 00000000 00000000 0000000a 00000002 00000073 00000000 [ 1305.510406][T15443] dfc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76b870bc [ 1305.510419][T15443] dfe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1308.247770][T15466] batadv_slave_0: entered promiscuous mode [ 1308.255932][T15465] batadv_slave_0: left promiscuous mode [ 1322.387671][T15548] FAULT_INJECTION: forcing a failure. [ 1322.387671][T15548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.388171][T15548] CPU: 1 UID: 0 PID: 15548 Comm: syz.1.2969 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1322.388255][T15548] Hardware name: ARM-Versatile Express [ 1322.388281][T15548] Call trace: [ 1322.388330][T15548] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1322.388439][T15548] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1322.388459][T15548] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1322.388623][T15548] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1322.388733][T15548] r5:842bb000 r4:82951710 [ 1322.388865][T15548] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1322.388963][T15548] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1322.389073][T15548] r8:e0649eb8 r7:00000000 r6:00000001 r5:76b86f30 r4:00000001 [ 1322.389204][T15548] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1322.389537][T15548] [<8095f714>] (should_fail_usercopy) from [<808b7890>] (kstrtouint_from_user+0x54/0x13c) [ 1322.389801][T15548] [<808b783c>] (kstrtouint_from_user) from [<80605688>] (proc_fail_nth_write+0x40/0xe8) [ 1322.389889][T15548] r8:e0649f68 r7:842bb000 r6:00000001 r5:85375480 r4:00000001 [ 1322.390334][T15548] [<80605648>] (proc_fail_nth_write) from [<80552020>] (vfs_write+0xac/0x448) [ 1322.390593][T15548] r5:85375480 r4:80605648 [ 1322.391496][T15548] [<80551f74>] (vfs_write) from [<80552528>] (ksys_write+0x74/0xe4) [ 1322.391603][T15548] r10:00000004 r9:842bb000 r8:8020029c r7:00000000 r6:00000002 r5:85375480 [ 1322.391619][T15548] r4:85375483 [ 1322.391628][T15548] [<805524b4>] (ksys_write) from [<805525a8>] (sys_write+0x10/0x14) [ 1322.391664][T15548] r7:00000004 r6:00000004 r5:76b86f30 r4:00000001 [ 1322.391672][T15548] [<80552598>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1322.391699][T15548] Exception stack(0xe0649fa8 to 0xe0649ff0) [ 1322.391718][T15548] 9fa0: 00000001 76b86f30 00000004 76b86f30 00000001 00000000 [ 1322.391736][T15548] 9fc0: 00000001 76b86f30 00000004 00000004 002d0000 00000000 00006364 76b870bc [ 1322.391749][T15548] 9fe0: 00000158 76b86ed0 000d7d68 0012fecc [ 1323.589050][T15558] sctp: [Deprecated]: syz.1.2972 (pid 15558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1323.589050][T15558] Use struct sctp_sack_info instead [ 1334.403790][ T31] audit: type=1400 audit(1846.338:355): avc: denied { create } for pid=15630 comm="syz.1.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1343.234145][ T31] audit: type=1400 audit(1855.168:356): avc: denied { validate_trans } for pid=15696 comm="syz.0.3011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1359.190014][ T31] audit: type=1400 audit(1871.118:357): avc: denied { getopt } for pid=15763 comm="syz.0.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1363.534246][T15801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15801 comm=syz.1.3039 [ 1363.568366][T15801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15801 comm=syz.1.3039 [ 1366.343090][T15810] fuse: Bad value for 'fd' [ 1381.650108][T15886] FAULT_INJECTION: forcing a failure. [ 1381.650108][T15886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1381.661254][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.0.3062 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1381.661371][T15886] Hardware name: ARM-Versatile Express [ 1381.661402][T15886] Call trace: [ 1381.661478][T15886] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1381.661560][T15886] r7:20001540 r6:00000000 r5:60000113 r4:82257d44 [ 1381.661570][T15886] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1381.661622][T15886] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1381.661655][T15886] r5:841c3000 r4:82951710 [ 1381.661664][T15886] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1381.661711][T15886] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1381.661755][T15886] r8:842ae480 r7:20001540 r6:20001540 r5:83ce7000 r4:83ce7010 [ 1381.661764][T15886] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1381.661792][T15886] [<8095f714>] (should_fail_usercopy) from [<809d13d0>] (do_fb_ioctl+0x18c/0x5e0) [ 1381.661820][T15886] [<809d1244>] (do_fb_ioctl) from [<809d1868>] (fb_ioctl+0x44/0x50) [ 1381.661854][T15886] r9:00000003 r8:842ae480 r7:20001540 r6:842ae481 r5:00000000 r4:00004600 [ 1381.661863][T15886] [<809d1824>] (fb_ioctl) from [<8056b408>] (sys_ioctl+0x138/0xd84) [ 1381.661891][T15886] [<8056b2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1381.661916][T15886] Exception stack(0xebc2dfa8 to 0xebc2dff0) [ 1381.661937][T15886] dfa0: 00000000 00000000 00000003 00004600 20001540 00000000 [ 1381.661955][T15886] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bce0bc [ 1381.661969][T15886] dfe0: 76bcdec0 76bcdeb0 0001939c 00131f30 [ 1381.661989][T15886] r10:00000036 r9:841c3000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1381.661999][T15886] r4:00000000 [ 1382.041135][ T3798] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1382.191681][ T3798] usb 1-1: Using ep0 maxpacket: 32 [ 1382.210237][ T3798] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 16 [ 1382.212098][ T3798] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1382.215614][ T3798] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1382.236828][ T3798] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1382.238329][ T3798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.241262][ T3798] usb 1-1: Product: ࠧ [ 1382.242128][ T3798] usb 1-1: Manufacturer: ఒ [ 1382.245388][ T3798] usb 1-1: SerialNumber: 殲ᆒえቋප쬥郚閗ᄒ荿䝈ꓓ㲐㚞뺃ꕡ顶薷핹뻽擃ᢈ萯ᦻ⋨䷝耤ᚁ뚴씖쐓⩳늁뙇좌鮊猶躽憚竢쩃ꕶ㞨蔋൳̷達ꏬȄꟊ㳰愄븊…╚鈄桶ꏉ푋ᇁ녴餆⧳뇒㦚৷쀞늴䔯ႝꗥ폒玃෫榑Ƙᔽ৸귣뤲̫悺闾租ꏨⳛ⪞着慄ⷑ穼ს힨ꤲ⧖ﱴ瓞쵂 [ 1382.256511][T15888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1382.256965][T15888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1382.466512][T15888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1382.467217][T15888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1382.925482][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.932960][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.939852][ T3798] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1382.946421][ T3798] usb 1-1: USB disconnect, device number 13 [ 1385.378747][ T31] audit: type=1400 audit(1897.308:358): avc: denied { nlmsg_read } for pid=15928 comm="syz.1.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1388.610454][T15952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15952 comm=syz.0.3084 [ 1388.922294][T15953] FAULT_INJECTION: forcing a failure. [ 1388.922294][T15953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1388.923763][T15953] CPU: 1 UID: 0 PID: 15953 Comm: syz.1.3083 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1388.923893][T15953] Hardware name: ARM-Versatile Express [ 1388.923923][T15953] Call trace: [ 1388.923965][T15953] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1388.924080][T15953] r7:ebd79e20 r6:00000000 r5:60000013 r4:82257d44 [ 1388.924100][T15953] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1388.924159][T15953] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1388.924219][T15953] r5:842b8c00 r4:82951710 [ 1388.924235][T15953] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1388.924296][T15953] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1388.924369][T15953] r8:20040000 r7:ebd79e20 r6:200002c0 r5:00000000 r4:ebd79f20 [ 1388.924387][T15953] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1388.924442][T15953] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1388.924503][T15953] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1388.924574][T15953] r8:20040000 r7:00000000 r6:83652280 r5:ebd79f20 r4:ebd79e64 [ 1388.924593][T15953] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1388.924665][T15953] r10:00000128 r9:842b8c00 r8:85359240 r7:20040000 r6:200002c0 r5:85359241 [ 1388.924686][T15953] r4:00000003 [ 1388.924704][T15953] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1388.924769][T15953] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1388.924796][T15953] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1388.924849][T15953] Exception stack(0xebd79fa8 to 0xebd79ff0) [ 1388.924890][T15953] 9fa0: 00000000 00000000 00000003 200002c0 20040000 00000000 [ 1388.924930][T15953] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b660bc [ 1388.924962][T15953] 9fe0: 76b65ec0 76b65eb0 0001939c 00131f30 [ 1389.694906][T15963] fuse: Bad value for 'fd' [ 1396.236189][T16019] fuse: Bad value for 'group_id' [ 1396.236477][T16019] fuse: Bad value for 'group_id' [ 1400.693296][T16036] FAULT_INJECTION: forcing a failure. [ 1400.693296][T16036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.694828][T16036] CPU: 1 UID: 0 PID: 16036 Comm: syz.0.3109 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1400.694888][T16036] Hardware name: ARM-Versatile Express [ 1400.694904][T16036] Call trace: [ 1400.694927][T16036] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1400.694998][T16036] r7:fffffdfd r6:00000000 r5:60000013 r4:82257d44 [ 1400.695008][T16036] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1400.695041][T16036] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1400.695077][T16036] r5:842bec00 r4:82951710 [ 1400.695085][T16036] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1400.695121][T16036] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1400.695162][T16036] r8:ed299ecc r7:fffffdfd r6:853b8000 r5:00000000 r4:00008980 [ 1400.695172][T16036] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1400.695204][T16036] [<8095f714>] (should_fail_usercopy) from [<8151ac4c>] (sock_ioctl+0x4ec/0x600) [ 1400.695238][T16036] [<8151a760>] (sock_ioctl) from [<8056b408>] (sys_ioctl+0x138/0xd84) [ 1400.695280][T16036] r9:00000004 r8:85359000 r7:00000000 r6:85359001 r5:00000000 r4:00008980 [ 1400.695290][T16036] [<8056b2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1400.695319][T16036] Exception stack(0xed299fa8 to 0xed299ff0) [ 1400.695342][T16036] 9fa0: 00000000 00000000 00000004 00008980 00000000 00000000 [ 1400.695364][T16036] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bad0bc [ 1400.695380][T16036] 9fe0: 76bacec0 76baceb0 0001939c 00131f30 [ 1400.695404][T16036] r10:00000036 r9:842bec00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1400.695415][T16036] r4:00000000 [ 1404.140189][T16077] FAULT_INJECTION: forcing a failure. [ 1404.140189][T16077] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.142063][T16077] CPU: 1 UID: 0 PID: 16077 Comm: syz.0.3123 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1404.142152][T16077] Hardware name: ARM-Versatile Express [ 1404.142170][T16077] Call trace: [ 1404.142197][T16077] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1404.142269][T16077] r7:83243c00 r6:00000000 r5:60000013 r4:82257d44 [ 1404.142279][T16077] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1404.142309][T16077] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1404.142341][T16077] r5:83243c00 r4:8291bcc0 [ 1404.142349][T16077] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1404.142382][T16077] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1404.142422][T16077] r8:00000000 r7:83243c00 r6:00000dc0 r5:828f88d8 r4:83001240 [ 1404.142432][T16077] [<80525610>] (should_failslab) from [<805094a0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1404.142462][T16077] [<80509454>] (__kmalloc_cache_noprof) from [<80280780>] (call_usermodehelper_setup+0x48/0xb8) [ 1404.142502][T16077] r10:82c24ec8 r9:82c24ec4 r8:828f87ac r7:828f87ac r6:851d0400 r5:828f88d8 [ 1404.142513][T16077] r4:851d0400 [ 1404.142521][T16077] [<80280738>] (call_usermodehelper_setup) from [<803281e8>] (__request_module+0x150/0x2c0) [ 1404.142559][T16077] r7:83243c00 r6:851d0800 r5:00000002 r4:851d0400 [ 1404.142567][T16077] [<80328098>] (__request_module) from [<817587cc>] (inet_create+0x360/0x384) [ 1404.142604][T16077] r3:00000000 r2:00000002 r1:8241cf38 [ 1404.142621][T16077] r8:00000000 r7:853b8000 r6:83652000 r5:ffffffa2 r4:00000000 [ 1404.142631][T16077] [<8175846c>] (inet_create) from [<8151865c>] (__sock_create+0xfc/0x228) [ 1404.142670][T16077] r10:81e6b908 r9:853b8000 r8:83652000 r7:00000000 r6:8175846c r5:00000004 [ 1404.142680][T16077] r4:00000002 [ 1404.142688][T16077] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1404.142722][T16077] r10:00000119 r9:83243c00 r8:8020029c r7:00000119 r6:83243c00 r5:00000002 [ 1404.142733][T16077] r4:00000004 [ 1404.142741][T16077] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1404.142770][T16077] r6:0012fee0 r5:00000000 r4:00000000 [ 1404.142778][T16077] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1404.142804][T16077] Exception stack(0xed4adfa8 to 0xed4adff0) [ 1404.142826][T16077] dfa0: 00000000 00000000 00000002 00000004 00000000 00000000 [ 1404.142844][T16077] dfc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76bce0bc [ 1404.142859][T16077] dfe0: 76bcdec0 76bcdeb0 0001939c 00131f30 [ 1411.497169][T16161] fuse: Unknown parameter 'grou00000000000000000000' [ 1413.596242][T16184] fuse: Unknown parameter 'grou00000000000000000000' [ 1415.838948][T16195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16195 comm=syz.0.3147 [ 1417.605820][T16201] fuse: Unknown parameter 'grou00000000000000000000' [ 1418.699912][T16208] FAULT_INJECTION: forcing a failure. [ 1418.699912][T16208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.702768][T16208] CPU: 1 UID: 0 PID: 16208 Comm: syz.1.3151 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1418.702912][T16208] Hardware name: ARM-Versatile Express [ 1418.702944][T16208] Call trace: [ 1418.702989][T16208] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1418.703103][T16208] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1418.703122][T16208] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1418.703176][T16208] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1418.703232][T16208] r5:842bec00 r4:82951710 [ 1418.703248][T16208] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1418.703303][T16208] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1418.703367][T16208] r8:842bec00 r7:00000000 r6:ed56dea4 r5:00000000 r4:00000000 [ 1418.703383][T16208] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1418.703434][T16208] [<8095f714>] (should_fail_usercopy) from [<8151d880>] (copy_from_sockptr_offset.constprop.0+0x5c/0x11c) [ 1418.703494][T16208] [<8151d824>] (copy_from_sockptr_offset.constprop.0) from [<81523544>] (sk_setsockopt+0x4e8/0x1388) [ 1418.703563][T16208] r8:842bec00 r7:842ae780 r6:84a68000 r5:8514a880 r4:00000000 [ 1418.703582][T16208] [<81523060>] (sk_setsockopt) from [<81524410>] (sock_setsockopt+0x2c/0x34) [ 1418.703657][T16208] r10:00000126 r9:842bec00 r8:00000000 r7:842ae780 r6:83525900 r5:00000000 [ 1418.703676][T16208] r4:00000000 [ 1418.703693][T16208] [<815243e8>] (sock_setsockopt) from [<81518a2c>] (do_sock_setsockopt+0x15c/0x17c) [ 1418.703750][T16208] [<815188d0>] (do_sock_setsockopt) from [<8151be3c>] (__sys_setsockopt+0x7c/0xb4) [ 1418.703805][T16208] r6:842ae781 r5:00000019 r4:00000001 [ 1418.703822][T16208] [<8151bdc0>] (__sys_setsockopt) from [<8151be90>] (sys_setsockopt+0x1c/0x24) [ 1418.703884][T16208] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:00000000 [ 1418.703901][T16208] [<8151be74>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1418.703951][T16208] Exception stack(0xed56dfa8 to 0xed56dff0) [ 1418.703991][T16208] dfa0: 00000000 00000000 00000004 00000001 00000019 00000000 [ 1418.704026][T16208] dfc0: 00000000 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b450bc [ 1418.704053][T16208] dfe0: 76b44ec0 76b44eb0 0001939c 00131f30 [ 1421.059303][T16233] fuse: Bad value for 'group_id' [ 1421.059565][T16233] fuse: Bad value for 'group_id' [ 1423.859495][T16247] fuse: Bad value for 'group_id' [ 1423.860393][T16247] fuse: Bad value for 'group_id' [ 1425.246279][T16259] fuse: Bad value for 'group_id' [ 1425.247094][T16259] fuse: Bad value for 'group_id' [ 1427.211217][T16272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16272 comm=syz.0.3171 [ 1428.853531][T16277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16277 comm=syz.0.3177 [ 1432.015002][T16292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16292 comm=syz.0.3181 [ 1432.366692][T16295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16295 comm=syz.1.3182 [ 1435.739379][ T31] audit: type=1400 audit(1947.668:359): avc: denied { bind } for pid=16307 comm="syz.0.3187" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1439.655211][T16322] FAULT_INJECTION: forcing a failure. [ 1439.655211][T16322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.657294][T16322] CPU: 0 UID: 0 PID: 16322 Comm: syz.1.3192 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1439.657335][T16322] Hardware name: ARM-Versatile Express [ 1439.657350][T16322] Call trace: [ 1439.657376][T16322] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1439.657469][T16322] r7:ede21e20 r6:00000000 r5:60000013 r4:82257d44 [ 1439.657479][T16322] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1439.657515][T16322] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1439.657630][T16322] r5:832fe000 r4:82951710 [ 1439.657648][T16322] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1439.657703][T16322] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1439.657743][T16322] r8:20040000 r7:ede21e20 r6:200002c0 r5:00000000 r4:ede21f20 [ 1439.657752][T16322] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1439.657783][T16322] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1439.657843][T16322] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1439.657917][T16322] r8:20040000 r7:00000000 r6:83525180 r5:ede21f20 r4:ede21e64 [ 1439.657928][T16322] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1439.657968][T16322] r10:00000128 r9:832fe000 r8:842ae900 r7:20040000 r6:200002c0 r5:842ae901 [ 1439.657979][T16322] r4:00000003 [ 1439.657988][T16322] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1439.658028][T16322] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1439.658038][T16322] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1439.658069][T16322] Exception stack(0xede21fa8 to 0xede21ff0) [ 1439.658092][T16322] 1fa0: 00000000 00000000 00000003 200002c0 20040000 00000000 [ 1439.658112][T16322] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b870bc [ 1439.658141][T16322] 1fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1441.841782][T16334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16334 comm=syz.1.3198 [ 1445.694274][T16349] fuse: Unknown parameter 'group_i00000000000000000000' [ 1446.799023][T16353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=16353 comm=syz.1.3205 [ 1448.897297][T16360] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1448.901894][T16360] nvme_fabrics: unknown parameter or missing value '0' in ctrl creation request [ 1459.557892][T16414] fuse: Unknown parameter 'group_i00000000000000000000' [ 1464.094280][T16444] fuse: Bad value for 'user_id' [ 1464.094527][T16444] fuse: Bad value for 'user_id' [ 1474.820150][T16501] fuse: Bad value for 'fd' [ 1476.101607][T16523] fuse: Bad value for 'fd' [ 1477.686048][T16550] fuse: Bad value for 'fd' [ 1480.239273][T16574] fuse: Bad value for 'fd' [ 1483.747878][T16603] fuse: Invalid rootmode [ 1485.608251][T16626] fuse: Invalid rootmode [ 1485.983935][T16644] fuse: Invalid rootmode [ 1492.381193][T16707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=16707 comm=syz.1.3289 [ 1492.388675][T16707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16707 comm=syz.1.3289 [ 1497.809473][T16732] fuse: Invalid rootmode [ 1502.446472][T16748] fuse: Bad value for 'rootmode' [ 1502.491901][T16750] fuse: Invalid rootmode [ 1504.846019][T16771] fuse: Bad value for 'rootmode' [ 1506.632358][T16785] fuse: Bad value for 'rootmode' [ 1509.937192][T16803] fuse: Unknown parameter 'use00000000000000000000' [ 1511.361207][T16823] fuse: Unknown parameter 'use00000000000000000000' [ 1514.511662][T16840] fuse: Unknown parameter 'use00000000000000000000' [ 1516.989422][T16854] fuse: Unknown parameter 'user_i00000000000000000000' [ 1534.546902][T16936] fuse: Unknown parameter 'user_i00000000000000000000' [ 1539.555752][T16957] fuse: Unknown parameter 'user_i00000000000000000000' [ 1554.639889][T11044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.695264][T11044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.745277][T11044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.795970][T11044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.943049][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.946307][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.948924][T11044] bond0 (unregistering): Released all slaves [ 1555.035075][T11044] hsr_slave_0: left promiscuous mode [ 1555.041590][T11044] hsr_slave_1: left promiscuous mode [ 1555.046714][T11044] veth1_macvtap: left promiscuous mode [ 1555.047015][T11044] veth0_macvtap: left promiscuous mode [ 1555.047143][T11044] veth1_vlan: left promiscuous mode [ 1555.047200][T11044] veth0_vlan: left promiscuous mode [ 1555.812543][T17030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.815759][T17030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.290338][T17030] hsr_slave_0: entered promiscuous mode [ 1556.293293][T17030] hsr_slave_1: entered promiscuous mode [ 1556.303039][T17297] FAULT_INJECTION: forcing a failure. [ 1556.303039][T17297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.304089][T17297] CPU: 1 UID: 0 PID: 17297 Comm: syz.1.3378 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1556.304152][T17297] Hardware name: ARM-Versatile Express [ 1556.304167][T17297] Call trace: [ 1556.304187][T17297] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1556.304251][T17297] r7:eb781e20 r6:00000000 r5:60000013 r4:82257d44 [ 1556.304261][T17297] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1556.304290][T17297] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1556.304320][T17297] r5:83b7bc00 r4:82951710 [ 1556.304327][T17297] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1556.304358][T17297] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1556.304391][T17297] r8:00048841 r7:eb781e20 r6:200002c0 r5:00000000 r4:eb781f20 [ 1556.304399][T17297] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1556.304425][T17297] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1556.304455][T17297] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1556.304487][T17297] r8:00048841 r7:00000000 r6:83622500 r5:eb781f20 r4:eb781e64 [ 1556.304495][T17297] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1556.304538][T17297] r10:00000128 r9:83b7bc00 r8:85359d80 r7:00048841 r6:200002c0 r5:85359d81 [ 1556.304550][T17297] r4:00000003 [ 1556.304557][T17297] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1556.304590][T17297] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1556.304599][T17297] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1556.304624][T17297] Exception stack(0xeb781fa8 to 0xeb781ff0) [ 1556.304643][T17297] 1fa0: 00000000 00000000 00000003 200002c0 00048841 00000000 [ 1556.304661][T17297] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b870bc [ 1556.304674][T17297] 1fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1556.754216][T17030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1556.758611][T17030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1556.763216][T17030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1556.767243][T17030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1557.113001][T17030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.656743][T17030] veth0_vlan: entered promiscuous mode [ 1558.665564][T17030] veth1_vlan: entered promiscuous mode [ 1558.696406][T17030] veth0_macvtap: entered promiscuous mode [ 1558.700386][T17030] veth1_macvtap: entered promiscuous mode [ 1558.726062][T17030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.726273][T17030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.728699][T17030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.730144][T17030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.803066][ T31] audit: type=1400 audit(2070.738:360): avc: denied { mounton } for pid=17030 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1559.904200][T17486] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17486 comm=syz.0.3386 [ 1562.204073][T17498] FAULT_INJECTION: forcing a failure. [ 1562.204073][T17498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.204522][T17498] CPU: 1 UID: 0 PID: 17498 Comm: syz.0.3391 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1562.204628][T17498] Hardware name: ARM-Versatile Express [ 1562.204658][T17498] Call trace: [ 1562.204700][T17498] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1562.204827][T17498] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1562.204851][T17498] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1562.204913][T17498] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1562.204975][T17498] r5:84baec00 r4:82951710 [ 1562.204994][T17498] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1562.205055][T17498] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1562.205121][T17498] r8:76b8af30 r7:00000000 r6:00000000 r5:eba61f68 r4:00000002 [ 1562.205231][T17498] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1562.205394][T17498] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1562.205549][T17498] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1562.205667][T17498] r10:00000001 r9:80604190 r8:00000002 r7:eba61f68 r6:0000000f r5:76b8af30 [ 1562.205810][T17498] r4:84baec00 r3:eba61e9f [ 1562.205929][T17498] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1562.206608][T17498] r8:76b8af30 r7:eba61f68 r6:84baec00 r5:0000000f r4:844b7e40 [ 1562.206632][T17498] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1562.206771][T17498] r10:00000003 r9:84baec00 r8:8020029c r7:00000000 r6:00000000 r5:844b7e40 [ 1562.207223][T17498] r4:844b7e43 [ 1562.207402][T17498] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1562.207571][T17498] r7:00000003 r6:00000004 r5:76b8af30 r4:0000000f [ 1562.207717][T17498] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1562.207861][T17498] Exception stack(0xeba61fa8 to 0xeba61ff0) [ 1562.207906][T17498] 1fa0: 0000000f 76b8af30 00000004 76b8af30 0000000f 00000000 [ 1562.208342][T17498] 1fc0: 0000000f 76b8af30 00000004 00000003 002d0000 00000000 00006364 76b8b0bc [ 1562.208727][T17498] 1fe0: 00000158 76b8aed0 000d7d68 0012fe04 [ 1563.260398][T17511] fuse: Unknown parameter '0x0000000000000003' [ 1564.759790][T17525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17525 comm=syz.1.3400 [ 1565.970162][T17527] fuse: Unknown parameter '0x0000000000000003' [ 1566.968928][T17538] fuse: Unknown parameter '0x0000000000000003' [ 1567.526523][T17556] fuse: Unknown parameter '0x0000000000000003' [ 1568.198136][T17560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=17560 comm=syz.1.3413 [ 1568.466379][T17567] fuse: Unknown parameter 'fd0x0000000000000003' [ 1569.188047][T17592] fuse: Unknown parameter 'fd0x0000000000000003' [ 1570.133561][T17606] fuse: Unknown parameter 'fd0x0000000000000003' [ 1570.180956][T17608] fuse: Bad value for 'fd' [ 1570.375724][T17616] usb usb2: usbfs: process 17616 (syz.0.3430) did not claim interface 0 before use [ 1570.378804][T17616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17616 comm=syz.0.3430 [ 1570.564958][T17621] fuse: Bad value for 'fd' [ 1571.082765][T17634] fuse: Bad value for 'fd' [ 1577.888151][T17709] fuse: Bad value for 'user_id' [ 1577.888438][T17709] fuse: Bad value for 'user_id' [ 1581.018955][T17731] fuse: Bad value for 'fd' [ 1585.429407][T17753] fuse: Bad value for 'fd' [ 1606.307444][T17884] FAULT_INJECTION: forcing a failure. [ 1606.307444][T17884] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.309136][T17884] CPU: 0 UID: 0 PID: 17884 Comm: syz.1.3511 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1606.309279][T17884] Hardware name: ARM-Versatile Express [ 1606.309312][T17884] Call trace: [ 1606.309356][T17884] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1606.309479][T17884] r7:00000c40 r6:00000000 r5:60000013 r4:82257d44 [ 1606.309503][T17884] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1606.309570][T17884] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1606.309642][T17884] r5:84bab000 r4:8291bcc0 [ 1606.309662][T17884] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1606.309761][T17884] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1606.309848][T17884] r8:84bab000 r7:00000c40 r6:842ae6e8 r5:00001000 r4:830016c0 [ 1606.309871][T17884] [<80525610>] (should_failslab) from [<8050a470>] (__kmalloc_noprof+0x9c/0x458) [ 1606.309935][T17884] [<8050a3d4>] (__kmalloc_noprof) from [<807bc304>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1606.310020][T17884] r10:84bab000 r9:8309e800 r8:00000000 r7:83437110 r6:842ae6e8 r5:00001000 [ 1606.310043][T17884] r4:00000000 [ 1606.310061][T17884] [<807bc2c8>] (tomoyo_realpath_from_path) from [<807b8448>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1606.310150][T17884] r10:84bab000 r9:00000000 r8:842ae6c0 r7:00005451 r6:00000004 r5:81cd56c4 [ 1606.310180][T17884] r4:842ae6e8 r3:826c0240 [ 1606.310203][T17884] [<807b837c>] (tomoyo_path_number_perm) from [<807bcd28>] (tomoyo_file_ioctl+0x1c/0x20) [ 1606.310294][T17884] r9:00000003 r8:842ae6c0 r7:00000000 r6:00000000 r5:00005451 r4:842ae6c0 [ 1606.310316][T17884] [<807bcd0c>] (tomoyo_file_ioctl) from [<8076a764>] (security_file_ioctl+0x64/0x1e4) [ 1606.310385][T17884] [<8076a700>] (security_file_ioctl) from [<8056b31c>] (sys_ioctl+0x4c/0xd84) [ 1606.310456][T17884] r7:00000000 r6:842ae6c1 r5:00000000 r4:00005451 [ 1606.310478][T17884] [<8056b2d0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1606.310534][T17884] Exception stack(0xed1a9fa8 to 0xed1a9ff0) [ 1606.310620][T17884] 9fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 1606.310663][T17884] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b870bc [ 1606.310728][T17884] 9fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1606.310778][T17884] r10:00000036 r9:84bab000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1606.310803][T17884] r4:00000000 [ 1606.324378][T17884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1632.220116][T18073] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18073 comm=syz.1.3559 [ 1635.503880][T18100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18100 comm=syz.1.3568 [ 1636.662053][T17792] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1636.811457][T17792] usb 1-1: Using ep0 maxpacket: 16 [ 1636.824121][T17792] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 42, changing to 9 [ 1636.824479][T17792] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 1636.824718][T17792] usb 1-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1636.825784][T17792] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1636.841750][T17792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.842212][T17792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.842572][T17792] usb 1-1: Product: syz [ 1636.842694][T17792] usb 1-1: Manufacturer: syz [ 1636.842817][T17792] usb 1-1: SerialNumber: syz [ 1636.853433][T18102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1636.855943][T18102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1637.089473][T17792] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1637.105529][T17792] usb 1-1: USB disconnect, device number 14 [ 1643.016216][T18189] FAULT_INJECTION: forcing a failure. [ 1643.016216][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.018424][T18189] CPU: 1 UID: 0 PID: 18189 Comm: syz.0.3592 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1643.018538][T18189] Hardware name: ARM-Versatile Express [ 1643.018567][T18189] Call trace: [ 1643.018608][T18189] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1643.018717][T18189] r7:76b89e1c r6:00000000 r5:60000013 r4:82257d44 [ 1643.018736][T18189] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1643.018799][T18189] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1643.018858][T18189] r5:84bad400 r4:82951710 [ 1643.018875][T18189] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1643.018933][T18189] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1643.018999][T18189] r8:844b76c1 r7:76b89e1c r6:edacdee4 r5:0000000c r4:0000000c [ 1643.019016][T18189] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1643.019066][T18189] [<8095f714>] (should_fail_usercopy) from [<8151a614>] (move_addr_to_kernel+0x34/0xf8) [ 1643.019123][T18189] [<8151a5e0>] (move_addr_to_kernel) from [<8151bb3c>] (__sys_sendto+0xd0/0x15c) [ 1643.019185][T18189] r7:76b89e1c r6:835ff400 r5:00000000 r4:00000000 [ 1643.019202][T18189] [<8151ba6c>] (__sys_sendto) from [<8151bbe4>] (sys_sendto+0x1c/0x24) [ 1643.019268][T18189] r9:84bad400 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b89e1c [ 1643.019285][T18189] [<8151bbc8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1643.019334][T18189] Exception stack(0xedacdfa8 to 0xedacdff0) [ 1643.019370][T18189] dfa0: 76b89e1c 0000000c 00000004 76b89eb0 00000024 00000000 [ 1643.019405][T18189] dfc0: 76b89e1c 0000000c 00000000 00000122 00000004 00000000 76b89eb0 76b8b0bc [ 1643.019432][T18189] dfe0: 00000000 76b89df0 000d7d68 001343c8 [ 1644.556495][T18227] FAULT_INJECTION: forcing a failure. [ 1644.556495][T18227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.556830][T18227] CPU: 0 UID: 0 PID: 18227 Comm: syz.0.3605 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1644.556879][T18227] Hardware name: ARM-Versatile Express [ 1644.556894][T18227] Call trace: [ 1644.556922][T18227] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1644.556990][T18227] r7:ede19e20 r6:00000000 r5:60000013 r4:82257d44 [ 1644.556999][T18227] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1644.557030][T18227] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1644.557060][T18227] r5:838b0000 r4:82951710 [ 1644.557068][T18227] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1644.557101][T18227] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1644.557135][T18227] r8:00000004 r7:ede19e20 r6:20000280 r5:00000000 r4:ede19f20 [ 1644.557144][T18227] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1644.557170][T18227] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1644.557203][T18227] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1644.557237][T18227] r8:00000004 r7:00000000 r6:83525400 r5:ede19f20 r4:ede19e64 [ 1644.557245][T18227] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1644.557280][T18227] r10:00000128 r9:838b0000 r8:842ae000 r7:00000004 r6:20000280 r5:842ae001 [ 1644.557291][T18227] r4:00000003 [ 1644.557298][T18227] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1644.557331][T18227] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1644.557341][T18227] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1644.557372][T18227] Exception stack(0xede19fa8 to 0xede19ff0) [ 1644.557392][T18227] 9fa0: 00000000 00000000 00000003 20000280 00000004 00000000 [ 1644.557411][T18227] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b6a0bc [ 1644.557425][T18227] 9fe0: 76b69ec0 76b69eb0 0001939c 00131f30 [ 1662.333475][T18431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65498 sclass=netlink_audit_socket pid=18431 comm=syz.0.3651 [ 1663.934647][ T31] audit: type=1400 audit(2175.858:361): avc: denied { getopt } for pid=18471 comm="syz.1.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1670.182851][T18527] FAULT_INJECTION: forcing a failure. [ 1670.182851][T18527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.183179][T18527] CPU: 1 UID: 0 PID: 18527 Comm: syz.1.3671 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1670.183222][T18527] Hardware name: ARM-Versatile Express [ 1670.183238][T18527] Call trace: [ 1670.183261][T18527] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1670.183327][T18527] r7:20000100 r6:00000000 r5:60000113 r4:82257d44 [ 1670.183336][T18527] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1670.183366][T18527] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1670.183396][T18527] r5:8440e000 r4:82951710 [ 1670.183403][T18527] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1670.183435][T18527] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1670.183469][T18527] r8:00000000 r7:20000100 r6:849ca3a3 r5:00000000 r4:00000000 [ 1670.183531][T18527] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1670.183607][T18527] [<8095f714>] (should_fail_usercopy) from [<808aec1c>] (_copy_from_iter+0x6c/0x7c8) [ 1670.183685][T18527] [<808aebb0>] (_copy_from_iter) from [<818d9708>] (isotp_sendmsg+0x254/0x820) [ 1670.183771][T18527] r10:ee5b5f20 r9:849ca3a3 r8:ee5b5f30 r7:00000014 r6:849c8000 r5:849ca000 [ 1670.183792][T18527] r4:00000000 [ 1670.183806][T18527] [<818d94b4>] (isotp_sendmsg) from [<81519d3c>] (__sock_sendmsg+0x44/0x78) [ 1670.183891][T18527] r10:00000000 r9:ee5b5dc4 r8:ee5b5dc4 r7:00000000 r6:835fef00 r5:ee5b5f20 [ 1670.183915][T18527] r4:00000000 [ 1670.183932][T18527] [<81519cf8>] (__sock_sendmsg) from [<8151a5ac>] (____sys_sendmsg+0x298/0x2cc) [ 1670.183988][T18527] r7:00000000 r6:835fef00 r5:24040804 r4:ee5b5f20 [ 1670.184005][T18527] [<8151a314>] (____sys_sendmsg) from [<8151c34c>] (___sys_sendmsg+0x9c/0xd0) [ 1670.184075][T18527] r10:ee5b5e24 r9:20000400 r8:24040804 r7:00000000 r6:835fef00 r5:ee5b5f20 [ 1670.184094][T18527] r4:00000000 [ 1670.184108][T18527] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1670.184172][T18527] r10:00000128 r9:8440e000 r8:842ae300 r7:24040804 r6:20000400 r5:842ae301 [ 1670.184191][T18527] r4:00000003 [ 1670.184239][T18527] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1670.184306][T18527] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1670.184324][T18527] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1670.184372][T18527] Exception stack(0xee5b5fa8 to 0xee5b5ff0) [ 1670.184411][T18527] 5fa0: 00000000 00000000 00000003 20000400 24040804 00000000 [ 1670.184453][T18527] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b870bc [ 1670.184479][T18527] 5fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1672.934608][T18570] serio: Serial port pts0 [ 1680.762059][T18645] serio: Serial port pts0 [ 1685.426665][T18688] FAULT_INJECTION: forcing a failure. [ 1685.426665][T18688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.431099][T18688] CPU: 1 UID: 0 PID: 18688 Comm: syz.0.3705 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1685.431170][T18688] Hardware name: ARM-Versatile Express [ 1685.431186][T18688] Call trace: [ 1685.431207][T18688] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1685.431267][T18688] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1685.431277][T18688] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1685.431307][T18688] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1685.431337][T18688] r5:84ba8c00 r4:82951710 [ 1685.431345][T18688] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1685.431377][T18688] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1685.431411][T18688] r8:df955eb8 r7:00000000 r6:00000001 r5:76b8af30 r4:00000001 [ 1685.431419][T18688] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1685.431446][T18688] [<8095f714>] (should_fail_usercopy) from [<808b7890>] (kstrtouint_from_user+0x54/0x13c) [ 1685.431476][T18688] [<808b783c>] (kstrtouint_from_user) from [<80605688>] (proc_fail_nth_write+0x40/0xe8) [ 1685.431525][T18688] r8:df955f68 r7:84ba8c00 r6:00000001 r5:842ae840 r4:00000001 [ 1685.431534][T18688] [<80605648>] (proc_fail_nth_write) from [<80552020>] (vfs_write+0xac/0x448) [ 1685.431567][T18688] r5:842ae840 r4:80605648 [ 1685.431576][T18688] [<80551f74>] (vfs_write) from [<80552528>] (ksys_write+0x74/0xe4) [ 1685.431611][T18688] r10:00000004 r9:84ba8c00 r8:8020029c r7:00000000 r6:00000002 r5:842ae840 [ 1685.431621][T18688] r4:842ae843 [ 1685.431629][T18688] [<805524b4>] (ksys_write) from [<805525a8>] (sys_write+0x10/0x14) [ 1685.431660][T18688] r7:00000004 r6:00000004 r5:76b8af30 r4:00000001 [ 1685.431704][T18688] [<80552598>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1685.431738][T18688] Exception stack(0xdf955fa8 to 0xdf955ff0) [ 1685.431758][T18688] 5fa0: 00000001 76b8af30 00000004 76b8af30 00000001 00000000 [ 1685.431777][T18688] 5fc0: 00000001 76b8af30 00000004 00000004 002d0000 00000000 00006364 76b8b0bc [ 1685.431791][T18688] 5fe0: 00000158 76b8aed0 000d7d68 0012fecc [ 1693.822214][T18754] FAULT_INJECTION: forcing a failure. [ 1693.822214][T18754] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.822468][T18754] CPU: 0 UID: 0 PID: 18754 Comm: syz.1.3718 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1693.822513][T18754] Hardware name: ARM-Versatile Express [ 1693.822527][T18754] Call trace: [ 1693.822546][T18754] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1693.822644][T18754] r7:842bb000 r6:00000000 r5:60000013 r4:82257d44 [ 1693.822663][T18754] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1693.822695][T18754] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1693.822725][T18754] r5:842bb000 r4:8291bcc0 [ 1693.822733][T18754] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1693.822764][T18754] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1693.822803][T18754] r8:00000000 r7:842bb000 r6:00000820 r5:847bb840 r4:830ad9c0 [ 1693.822821][T18754] [<80525610>] (should_failslab) from [<8050a0ec>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1693.822853][T18754] [<8050a0a0>] (kmem_cache_alloc_noprof) from [<8152d6cc>] (skb_clone+0x60/0x1c8) [ 1693.822909][T18754] r10:847bb840 r9:00000000 r8:00000000 r7:00000001 r6:85371280 r5:847bb840 [ 1693.822920][T18754] r4:00000820 [ 1693.822930][T18754] [<8152d66c>] (skb_clone) from [<818c6e20>] (can_send+0xe8/0x388) [ 1693.823003][T18754] r5:00000010 r4:847bb840 [ 1693.823012][T18754] [<818c6d38>] (can_send) from [<818d98a8>] (isotp_sendmsg+0x3f4/0x820) [ 1693.823093][T18754] r9:00000000 r8:00000000 r7:00000000 r6:85280000 r5:85282000 r4:85280280 [ 1693.823104][T18754] [<818d94b4>] (isotp_sendmsg) from [<81519d3c>] (__sock_sendmsg+0x44/0x78) [ 1693.823141][T18754] r10:00000000 r9:dfc39dc4 r8:dfc39dc4 r7:00000000 r6:83650f00 r5:dfc39f20 [ 1693.823151][T18754] r4:00000000 [ 1693.823158][T18754] [<81519cf8>] (__sock_sendmsg) from [<8151a5ac>] (____sys_sendmsg+0x298/0x2cc) [ 1693.823188][T18754] r7:00000000 r6:83650f00 r5:04040080 r4:dfc39f20 [ 1693.823197][T18754] [<8151a314>] (____sys_sendmsg) from [<8151c34c>] (___sys_sendmsg+0x9c/0xd0) [ 1693.823240][T18754] r10:dfc39e24 r9:200013c0 r8:04040080 r7:00000000 r6:83650f00 r5:dfc39f20 [ 1693.823252][T18754] r4:00000000 [ 1693.823259][T18754] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1693.823295][T18754] r10:00000128 r9:842bb000 r8:8495e3c0 r7:04040080 r6:200013c0 r5:8495e3c1 [ 1693.823328][T18754] r4:00000003 [ 1693.823336][T18754] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1693.823371][T18754] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1693.823405][T18754] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1693.823434][T18754] Exception stack(0xdfc39fa8 to 0xdfc39ff0) [ 1693.823507][T18754] 9fa0: 00000000 00000000 00000003 200013c0 04040080 00000000 [ 1693.823549][T18754] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b870bc [ 1693.823586][T18754] 9fe0: 76b86ec0 76b86eb0 0001939c 00131f30 [ 1708.608587][T18881] FAULT_INJECTION: forcing a failure. [ 1708.608587][T18881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1708.609080][T18881] CPU: 0 UID: 0 PID: 18881 Comm: syz.0.3743 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1708.609163][T18881] Hardware name: ARM-Versatile Express [ 1708.609196][T18881] Call trace: [ 1708.609252][T18881] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1708.609381][T18881] r7:76b68e1c r6:00000000 r5:60000013 r4:82257d44 [ 1708.609405][T18881] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1708.609809][T18881] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1708.609926][T18881] r5:8440d400 r4:82951710 [ 1708.609985][T18881] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1708.610064][T18881] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1708.610184][T18881] r8:8495e241 r7:76b68e1c r6:e006dee4 r5:0000000c r4:0000000c [ 1708.610208][T18881] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1708.610329][T18881] [<8095f714>] (should_fail_usercopy) from [<8151a614>] (move_addr_to_kernel+0x34/0xf8) [ 1708.610446][T18881] [<8151a5e0>] (move_addr_to_kernel) from [<8151bb3c>] (__sys_sendto+0xd0/0x15c) [ 1708.610500][T18881] r7:76b68e1c r6:83651680 r5:00000000 r4:00000000 [ 1708.610559][T18881] [<8151ba6c>] (__sys_sendto) from [<8151bbe4>] (sys_sendto+0x1c/0x24) [ 1708.610712][T18881] r9:8440d400 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b68e1c [ 1708.610740][T18881] [<8151bbc8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1708.610768][T18881] Exception stack(0xe006dfa8 to 0xe006dff0) [ 1708.610788][T18881] dfa0: 76b68e1c 0000000c 00000003 76b68eb0 00000020 00000000 [ 1708.610806][T18881] dfc0: 76b68e1c 0000000c 00000000 00000122 00000003 00000000 76b68eb0 76b6a0bc [ 1708.610820][T18881] dfe0: 00000000 76b68df0 000d7d68 001343c8 [ 1714.081322][T18905] 8021q: VLANs not supported on ip_vti0 [ 1725.663552][T18998] fuse: Unknown parameter 'grou00000000000000000000' [ 1727.700196][T19011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19011 comm=syz.0.3782 [ 1727.934919][T19013] fuse: Unknown parameter 'grou00000000000000000000' [ 1728.835842][T19028] fuse: Unknown parameter 'group_i00000000000000000000' [ 1728.997766][T19034] fuse: Bad value for 'fd' [ 1729.088152][T19038] fuse: Unknown parameter 'group_i00000000000000000000' [ 1729.785416][T19054] fuse: Bad value for 'fd' [ 1729.888734][T19059] fuse: Unknown parameter 'group_i00000000000000000000' [ 1730.377719][ T31] audit: type=1107 audit(2242.308:362): pid=19051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtIoKYV#Z;}QxG}Wm ֋Y [ 1730.377719][ T31] 5' [ 1731.325493][T19079] fuse: Invalid rootmode [ 1731.442302][T19083] fuse: Unknown parameter 'group_id00000000000000000000' [ 1731.668197][T17076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.734708][T17076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.783922][T17076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.835943][T17076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.005511][T17076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.008649][T17076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.015812][T17076] bond0 (unregistering): Released all slaves [ 1732.064074][T17076] hsr_slave_0: left promiscuous mode [ 1732.064998][T17076] hsr_slave_1: left promiscuous mode [ 1732.068288][T17076] veth1_macvtap: left promiscuous mode [ 1732.068485][T17076] veth0_macvtap: left promiscuous mode [ 1732.068760][T17076] veth1_vlan: left promiscuous mode [ 1732.068829][T17076] veth0_vlan: left promiscuous mode [ 1733.067290][T19087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.069881][T19087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.209899][T19294] fuse: Invalid rootmode [ 1733.872747][T19087] hsr_slave_0: entered promiscuous mode [ 1733.874598][T19087] hsr_slave_1: entered promiscuous mode [ 1733.875237][T19087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1733.875367][T19087] Cannot create hsr debugfs directory [ 1733.961960][T19379] fuse: Unknown parameter 'group_id00000000000000000000' [ 1734.298284][T19443] fuse: Invalid rootmode [ 1734.357941][T19087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1734.364344][T19087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1734.378214][T19087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1734.384080][T19087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1734.454095][T19458] FAULT_INJECTION: forcing a failure. [ 1734.454095][T19458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.454354][T19458] CPU: 1 UID: 0 PID: 19458 Comm: syz.0.3811 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1734.454396][T19458] Hardware name: ARM-Versatile Express [ 1734.454410][T19458] Call trace: [ 1734.454432][T19458] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1734.454495][T19458] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1734.454504][T19458] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1734.454545][T19458] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1734.454580][T19458] r5:83ae6c00 r4:82951710 [ 1734.454588][T19458] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1734.454618][T19458] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1734.454652][T19458] r8:76b8af30 r7:00000000 r6:00000000 r5:eae71f68 r4:00000002 [ 1734.454660][T19458] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1734.454686][T19458] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1734.454716][T19458] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1734.454755][T19458] r10:00000001 r9:80604190 r8:00000002 r7:eae71f68 r6:0000000f r5:76b8af30 [ 1734.454767][T19458] r4:83ae6c00 r3:eae71e9f [ 1734.454775][T19458] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1734.454810][T19458] r8:76b8af30 r7:eae71f68 r6:83ae6c00 r5:0000000f r4:838fc840 [ 1734.454819][T19458] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1734.454853][T19458] r10:00000003 r9:83ae6c00 r8:8020029c r7:00000000 r6:00000000 r5:838fc840 [ 1734.454863][T19458] r4:838fc843 [ 1734.454870][T19458] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1734.454901][T19458] r7:00000003 r6:00000004 r5:76b8af30 r4:0000000f [ 1734.454908][T19458] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1734.454953][T19458] Exception stack(0xeae71fa8 to 0xeae71ff0) [ 1734.454996][T19458] 1fa0: 0000000f 76b8af30 00000004 76b8af30 0000000f 00000000 [ 1734.455015][T19458] 1fc0: 0000000f 76b8af30 00000004 00000003 002d0000 00000000 00006364 76b8b0bc [ 1734.455029][T19458] 1fe0: 00000158 76b8aed0 000d7d68 0012fe04 [ 1734.569493][T19463] fuse: Unknown parameter 'group_id00000000000000000000' [ 1734.944782][T19087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.175688][T19485] FAULT_INJECTION: forcing a failure. [ 1735.175688][T19485] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.175955][T19485] CPU: 0 UID: 0 PID: 19485 Comm: syz.0.3813 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1735.175997][T19485] Hardware name: ARM-Versatile Express [ 1735.176011][T19485] Call trace: [ 1735.176032][T19485] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1735.176088][T19485] r7:83395400 r6:00000000 r5:60000013 r4:82257d44 [ 1735.176097][T19485] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1735.176132][T19485] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1735.176206][T19485] r5:83395400 r4:8291bcc0 [ 1735.176224][T19485] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1735.176279][T19485] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1735.176321][T19485] r8:00000000 r7:83395400 r6:00000cc0 r5:ffffffff r4:830ad9c0 [ 1735.176363][T19485] [<80525610>] (should_failslab) from [<80509a80>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1735.176414][T19485] [<80509a30>] (kmem_cache_alloc_node_noprof) from [<81527078>] (__alloc_skb+0x138/0x160) [ 1735.176472][T19485] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830ad9c0 r5:ffffffff [ 1735.176484][T19485] r4:82806040 [ 1735.176491][T19485] [<81526f40>] (__alloc_skb) from [<81644dbc>] (netlink_alloc_large_skb+0x88/0xa0) [ 1735.176571][T19485] r8:00000000 r7:84820000 r6:00000024 r5:835fec80 r4:00000140 [ 1735.176626][T19485] [<81644d34>] (netlink_alloc_large_skb) from [<816453e0>] (netlink_sendmsg+0x134/0x444) [ 1735.176705][T19485] r5:835fec80 r4:eae09e98 [ 1735.176736][T19485] [<816452ac>] (netlink_sendmsg) from [<81519d3c>] (__sock_sendmsg+0x44/0x78) [ 1735.176785][T19485] r10:00000122 r9:847fd3c0 r8:847fd3c1 r7:76b68e1c r6:835fec80 r5:eae09e98 [ 1735.176848][T19485] r4:00000000 [ 1735.176904][T19485] [<81519cf8>] (__sock_sendmsg) from [<8151bb7c>] (__sys_sendto+0x110/0x15c) [ 1735.176939][T19485] r7:76b68e1c r6:835fec80 r5:00000000 r4:00000000 [ 1735.176948][T19485] [<8151ba6c>] (__sys_sendto) from [<8151bbe4>] (sys_sendto+0x1c/0x24) [ 1735.177013][T19485] r9:83395400 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b68e1c [ 1735.177061][T19485] [<8151bbc8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1735.177205][T19485] Exception stack(0xeae09fa8 to 0xeae09ff0) [ 1735.177245][T19485] 9fa0: 76b68e1c 0000000c 00000005 76b68eb0 00000024 00000000 [ 1735.177275][T19485] 9fc0: 76b68e1c 0000000c 00000000 00000122 00000005 00000000 76b68eb0 76b6a0bc [ 1735.177337][T19485] 9fe0: 00000000 76b68df0 000d7d68 001343c8 [ 1737.138978][T19087] veth0_vlan: entered promiscuous mode [ 1737.155356][T19087] veth1_vlan: entered promiscuous mode [ 1737.218986][T19087] veth0_macvtap: entered promiscuous mode [ 1737.233182][T19087] veth1_macvtap: entered promiscuous mode [ 1737.283132][T19087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.283355][T19087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.283414][T19087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.283482][T19087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.740981][T19467] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1739.907029][T19554] fuse: Bad value for 'rootmode' [ 1739.981637][T19558] fuse: Bad value for 'user_id' [ 1739.982429][T19558] fuse: Bad value for 'user_id' [ 1740.124537][T19569] serio: Serial port pts0 [ 1745.091543][T19562] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1745.194158][T19580] fuse: Bad value for 'rootmode' [ 1745.628772][T19596] fuse: Bad value for 'user_id' [ 1745.629506][T19596] fuse: Bad value for 'user_id' [ 1745.752128][T19598] FAULT_INJECTION: forcing a failure. [ 1745.752128][T19598] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.752365][T19598] CPU: 0 UID: 0 PID: 19598 Comm: syz.1.3823 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1745.752407][T19598] Hardware name: ARM-Versatile Express [ 1745.752425][T19598] Call trace: [ 1745.752447][T19598] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1745.752506][T19598] r7:84bac800 r6:00000000 r5:60000013 r4:82257d44 [ 1745.752515][T19598] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1745.752554][T19598] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1745.752586][T19598] r5:84bac800 r4:8291bcc0 [ 1745.752594][T19598] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1745.752627][T19598] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1745.752665][T19598] r8:00000000 r7:84bac800 r6:00000dc0 r5:84025400 r4:83001240 [ 1745.752674][T19598] [<80525610>] (should_failslab) from [<805094a0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1745.752703][T19598] [<80509454>] (__kmalloc_cache_noprof) from [<818fb59c>] (sctp_endpoint_new+0x64/0x2a4) [ 1745.752746][T19598] r10:00000dc0 r9:00000000 r8:8245d6c4 r7:00000cc0 r6:853b8d80 r5:84025400 [ 1745.752756][T19598] r4:854f7180 [ 1745.752764][T19598] [<818fb538>] (sctp_endpoint_new) from [<8190e960>] (sctp_init_sock+0x1f8/0x298) [ 1745.752803][T19598] r10:0000040c r9:00000000 r8:00000000 r7:00000336 r6:853b8d80 r5:00000000 [ 1745.752814][T19598] r4:84025400 r3:00000000 [ 1745.752821][T19598] [<8190e768>] (sctp_init_sock) from [<8190ea14>] (sctp_v6_init_sock+0x14/0x28) [ 1745.752858][T19598] r10:00000084 r9:853b8d80 r8:84025634 r7:84c95b80 r6:00000001 r5:84025400 [ 1745.752868][T19598] r4:84025400 [ 1745.752875][T19598] [<8190ea00>] (sctp_v6_init_sock) from [<817f4568>] (inet6_create+0x26c/0x3d8) [ 1745.752909][T19598] r5:84025400 r4:84025860 [ 1745.752917][T19598] [<817f42fc>] (inet6_create) from [<8151865c>] (__sock_create+0xfc/0x228) [ 1745.752955][T19598] r10:81e72184 r9:853b8d80 r8:84c95b80 r7:00000084 r6:817f42fc r5:00000001 [ 1745.752965][T19598] r4:0000000a [ 1745.752972][T19598] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1745.753006][T19598] r10:00000119 r9:84bac800 r8:8020029c r7:00000119 r6:84bac800 r5:0000000a [ 1745.753015][T19598] r4:00000801 [ 1745.753023][T19598] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1745.753051][T19598] r6:0012fee0 r5:00000000 r4:00000000 [ 1745.753059][T19598] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1745.753084][T19598] Exception stack(0xeb061fa8 to 0xeb061ff0) [ 1745.753103][T19598] 1fa0: 00000000 00000000 0000000a 00000801 00000084 00000000 [ 1745.753121][T19598] 1fc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76bd40bc [ 1745.753135][T19598] 1fe0: 76bd3ec0 76bd3eb0 0001939c 00131f30 [ 1745.855721][T19601] fuse: Bad value for 'rootmode' [ 1746.347617][T19618] fuse: Bad value for 'user_id' [ 1746.347861][T19618] fuse: Bad value for 'user_id' [ 1746.510508][T19623] fuse: Unknown parameter 'use00000000000000000000' [ 1746.779271][T19633] serio: Serial port pts0 [ 1746.968342][T19644] FAULT_INJECTION: forcing a failure. [ 1746.968342][T19644] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.968697][T19644] CPU: 0 UID: 0 PID: 19644 Comm: syz.0.3834 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1746.968741][T19644] Hardware name: ARM-Versatile Express [ 1746.968756][T19644] Call trace: [ 1746.968778][T19644] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1746.968839][T19644] r7:00000820 r6:00000000 r5:60000013 r4:82257d44 [ 1746.968849][T19644] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1746.968878][T19644] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1746.968908][T19644] r5:84babc00 r4:8291bcc0 [ 1746.968915][T19644] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1746.969008][T19644] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1746.969578][T19644] r8:84babc00 r7:00000820 r6:846d8c40 r5:00000009 r4:83001240 [ 1746.969728][T19644] [<80525610>] (should_failslab) from [<8050b124>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 1746.969954][T19644] [<8050b084>] (__kmalloc_node_track_caller_noprof) from [<804a4d98>] (kstrdup+0x38/0x64) [ 1746.970116][T19644] r10:81e72184 r9:8078de68 r8:833e0e00 r7:807a81ec r6:846d8c40 r5:00000008 [ 1746.970129][T19644] r4:00000820 [ 1746.970138][T19644] [<804a4d60>] (kstrdup) from [<807a81ec>] (security_netlbl_sid_to_secattr+0x78/0xdc) [ 1746.970295][T19644] r7:844330c8 r6:0000005f r5:83e6c400 r4:84a13f00 [ 1746.970444][T19644] [<807a8174>] (security_netlbl_sid_to_secattr) from [<807ab210>] (selinux_netlbl_sock_genattr+0x60/0x140) [ 1746.970534][T19644] r7:0000000a r6:84a13f40 r5:84a13f40 r4:84a13f00 [ 1746.970579][T19644] [<807ab1b0>] (selinux_netlbl_sock_genattr) from [<807abc68>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 1746.970879][T19644] r7:0000000a r6:84a13f40 r5:00000000 r4:00000002 [ 1746.971054][T19644] [<807abc28>] (selinux_netlbl_socket_post_create) from [<8078dfe4>] (selinux_socket_post_create+0x17c/0x29c) [ 1746.971103][T19644] r9:8078de68 r8:00000012 r7:0000000a r6:824683fc r5:83657180 r4:8525575c [ 1746.971112][T19644] [<8078de68>] (selinux_socket_post_create) from [<807804cc>] (security_socket_post_create+0x23c/0x24c) [ 1746.971152][T19644] r8:00000000 r7:00000073 r6:00000002 r5:0000000a r4:83657180 [ 1746.971160][T19644] [<80780290>] (security_socket_post_create) from [<81518720>] (__sock_create+0x1c0/0x228) [ 1746.971218][T19644] r9:84a68d80 r8:83657180 r7:00000073 r6:00000000 r5:00000002 r4:0000000a [ 1746.971228][T19644] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1746.971299][T19644] r10:00000119 r9:84babc00 r8:8020029c r7:00000119 r6:84babc00 r5:0000000a [ 1746.971309][T19644] r4:00000002 [ 1746.971316][T19644] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1746.971345][T19644] r6:0012fee0 r5:00000000 r4:00000000 [ 1746.971353][T19644] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1746.971378][T19644] Exception stack(0xeb1b1fa8 to 0xeb1b1ff0) [ 1746.971397][T19644] 1fa0: 00000000 00000000 0000000a 00000002 00000073 00000000 [ 1746.971415][T19644] 1fc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76b8b0bc [ 1746.971428][T19644] 1fe0: 76b8aec0 76b8aeb0 0001939c 00131f30 [ 1747.075678][T19646] fuse: Unknown parameter 'use00000000000000000000' [ 1750.978534][T19678] fuse: Unknown parameter 'use00000000000000000000' [ 1752.962635][T19700] fuse: Bad value for 'fd' [ 1754.276887][T19708] fuse: Unknown parameter 'user_i00000000000000000000' [ 1759.359157][T19764] FAULT_INJECTION: forcing a failure. [ 1759.359157][T19764] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.361842][T19764] CPU: 0 UID: 0 PID: 19764 Comm: syz.1.3859 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1759.361915][T19764] Hardware name: ARM-Versatile Express [ 1759.361931][T19764] Call trace: [ 1759.361953][T19764] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1759.362022][T19764] r7:00000820 r6:00000000 r5:60000013 r4:82257d44 [ 1759.362032][T19764] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1759.362062][T19764] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1759.362092][T19764] r5:842bbc00 r4:8291bcc0 [ 1759.362100][T19764] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1759.362131][T19764] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1759.362170][T19764] r8:842bbc00 r7:00000820 r6:846d8c40 r5:00000009 r4:83001240 [ 1759.362179][T19764] [<80525610>] (should_failslab) from [<8050b124>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 1759.362209][T19764] [<8050b084>] (__kmalloc_node_track_caller_noprof) from [<804a4d98>] (kstrdup+0x38/0x64) [ 1759.362248][T19764] r10:81e72184 r9:8078de68 r8:84297840 r7:807a81ec r6:846d8c40 r5:00000008 [ 1759.362259][T19764] r4:00000820 [ 1759.362267][T19764] [<804a4d60>] (kstrdup) from [<807a81ec>] (security_netlbl_sid_to_secattr+0x78/0xdc) [ 1759.362305][T19764] r7:844330c8 r6:0000005f r5:83e6c400 r4:85377140 [ 1759.362314][T19764] [<807a8174>] (security_netlbl_sid_to_secattr) from [<807ab210>] (selinux_netlbl_sock_genattr+0x60/0x140) [ 1759.362347][T19764] r7:0000000a r6:85377900 r5:85377900 r4:85377140 [ 1759.362356][T19764] [<807ab1b0>] (selinux_netlbl_sock_genattr) from [<807abc68>] (selinux_netlbl_socket_post_create+0x40/0x84) [ 1759.362388][T19764] r7:0000000a r6:85377900 r5:00000000 r4:00000002 [ 1759.362396][T19764] [<807abc28>] (selinux_netlbl_socket_post_create) from [<8078dfe4>] (selinux_socket_post_create+0x17c/0x29c) [ 1759.362434][T19764] r9:8078de68 r8:00000012 r7:0000000a r6:824683fc r5:835fe280 r4:8524ff3c [ 1759.362443][T19764] [<8078de68>] (selinux_socket_post_create) from [<807804cc>] (security_socket_post_create+0x23c/0x24c) [ 1759.362482][T19764] r8:00000000 r7:00000002 r6:00000003 r5:0000000a r4:835fe280 [ 1759.362491][T19764] [<80780290>] (security_socket_post_create) from [<81518720>] (__sock_create+0x1c0/0x228) [ 1759.362530][T19764] r9:853b8d80 r8:835fe280 r7:00000002 r6:00000000 r5:00000003 r4:0000000a [ 1759.362539][T19764] [<81518560>] (__sock_create) from [<8151aeb0>] (__sys_socket+0x94/0x10c) [ 1759.362574][T19764] r10:00000119 r9:842bbc00 r8:8020029c r7:00000119 r6:842bbc00 r5:0000000a [ 1759.362584][T19764] r4:00000003 [ 1759.362591][T19764] [<8151ae1c>] (__sys_socket) from [<8151af38>] (sys_socket+0x10/0x14) [ 1759.362621][T19764] r6:0012fee0 r5:00000000 r4:00000000 [ 1759.362629][T19764] [<8151af28>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1759.362654][T19764] Exception stack(0xeb465fa8 to 0xeb465ff0) [ 1759.362675][T19764] 5fa0: 00000000 00000000 0000000a 00000003 00000002 00000000 [ 1759.362693][T19764] 5fc0: 00000000 00000000 0012fee0 00000119 002d0000 00000000 00006364 76bd40bc [ 1759.362708][T19764] 5fe0: 76bd3ec0 76bd3eb0 0001939c 00131f30 [ 1759.714915][T19774] serio: Serial port pts0 [ 1762.523822][T19784] FAULT_INJECTION: forcing a failure. [ 1762.523822][T19784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.524254][T19784] CPU: 0 UID: 0 PID: 19784 Comm: syz.0.3865 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1762.524383][T19784] Hardware name: ARM-Versatile Express [ 1762.524417][T19784] Call trace: [ 1762.524507][T19784] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1762.524659][T19784] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1762.524685][T19784] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1762.524747][T19784] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1762.524816][T19784] r5:83ae3000 r4:82951710 [ 1762.524832][T19784] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1762.524926][T19784] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1762.525000][T19784] r8:76b69f30 r7:00000000 r6:00000000 r5:eb4b1f68 r4:00000002 [ 1762.525036][T19784] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1762.525094][T19784] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1762.525155][T19784] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1762.525230][T19784] r10:00000001 r9:80604190 r8:00000002 r7:eb4b1f68 r6:0000000f r5:76b69f30 [ 1762.525255][T19784] r4:83ae3000 r3:eb4b1e9f [ 1762.525272][T19784] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1762.525342][T19784] r8:76b69f30 r7:eb4b1f68 r6:83ae3000 r5:0000000f r4:842aee40 [ 1762.525386][T19784] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1762.525480][T19784] r10:00000003 r9:83ae3000 r8:8020029c r7:00000000 r6:00000000 r5:842aee40 [ 1762.525506][T19784] r4:842aee43 [ 1762.525541][T19784] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1762.525610][T19784] r7:00000003 r6:00000004 r5:76b69f30 r4:0000000f [ 1762.525629][T19784] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1762.525716][T19784] Exception stack(0xeb4b1fa8 to 0xeb4b1ff0) [ 1762.525793][T19784] 1fa0: 0000000f 76b69f30 00000004 76b69f30 0000000f 00000000 [ 1762.525837][T19784] 1fc0: 0000000f 76b69f30 00000004 00000003 002d0000 00000000 00006364 76b6a0bc [ 1762.525866][T19784] 1fe0: 00000158 76b69ed0 000d7d68 0012fe04 [ 1766.781484][T19799] serio: Serial port pts0 [ 1767.933777][T19810] FAULT_INJECTION: forcing a failure. [ 1767.933777][T19810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.935223][T19810] CPU: 1 UID: 0 PID: 19810 Comm: syz.0.3874 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1767.935338][T19810] Hardware name: ARM-Versatile Express [ 1767.935368][T19810] Call trace: [ 1767.935408][T19810] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1767.935519][T19810] r7:eb809e20 r6:00000000 r5:60000013 r4:82257d44 [ 1767.935542][T19810] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1767.935599][T19810] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1767.935656][T19810] r5:83395400 r4:82951710 [ 1767.935673][T19810] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1767.935733][T19810] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1767.935810][T19810] r8:00000004 r7:eb809e20 r6:20000280 r5:00000000 r4:eb809f20 [ 1767.935828][T19810] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1767.935881][T19810] [<8095f714>] (should_fail_usercopy) from [<8151c1d0>] (copy_msghdr_from_user+0x50/0x130) [ 1767.935940][T19810] [<8151c180>] (copy_msghdr_from_user) from [<8151c328>] (___sys_sendmsg+0x78/0xd0) [ 1767.936007][T19810] r8:00000004 r7:00000000 r6:83656c80 r5:eb809f20 r4:eb809e64 [ 1767.936023][T19810] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1767.936091][T19810] r10:00000128 r9:83395400 r8:842ae480 r7:00000004 r6:20000280 r5:842ae481 [ 1767.936111][T19810] r4:00000003 [ 1767.936127][T19810] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1767.936193][T19810] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1767.936211][T19810] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1767.936261][T19810] Exception stack(0xeb809fa8 to 0xeb809ff0) [ 1767.936301][T19810] 9fa0: 00000000 00000000 00000003 20000280 00000004 00000000 [ 1767.936338][T19810] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b490bc [ 1767.936366][T19810] 9fe0: 76b48ec0 76b48eb0 0001939c 00131f30 [ 1768.976545][ T31] audit: type=1400 audit(2280.908:363): avc: denied { bind } for pid=19812 comm="syz.0.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1769.513995][T19826] fuse: Unknown parameter '0x0000000000000003' [ 1772.375325][T19840] fuse: Unknown parameter '0x0000000000000003' [ 1772.692227][T19849] serio: Serial port pts0 [ 1774.429449][T19855] fuse: Unknown parameter '0x0000000000000003' [ 1779.630413][T19909] serio: Serial port pts0 [ 1782.933372][T19934] FAULT_INJECTION: forcing a failure. [ 1782.933372][T19934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.933707][T19934] CPU: 0 UID: 0 PID: 19934 Comm: syz.1.3907 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1782.933756][T19934] Hardware name: ARM-Versatile Express [ 1782.933772][T19934] Call trace: [ 1782.933800][T19934] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1782.933914][T19934] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1782.933935][T19934] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1782.933992][T19934] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1782.934078][T19934] r5:838b0000 r4:82951710 [ 1782.934114][T19934] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1782.934162][T19934] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1782.934242][T19934] r8:76bd3f30 r7:00000000 r6:00000000 r5:ebbf1f68 r4:00000002 [ 1782.934359][T19934] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1782.934417][T19934] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1782.934451][T19934] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1782.934521][T19934] r10:00000001 r9:80604190 r8:00000002 r7:ebbf1f68 r6:0000000f r5:76bd3f30 [ 1782.934541][T19934] r4:838b0000 r3:ebbf1e9f [ 1782.934574][T19934] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1782.934703][T19934] r8:76bd3f30 r7:ebbf1f68 r6:838b0000 r5:0000000f r4:847fd240 [ 1782.934771][T19934] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1782.934881][T19934] r10:00000003 r9:838b0000 r8:8020029c r7:00000000 r6:00000000 r5:847fd240 [ 1782.935017][T19934] r4:847fd243 [ 1782.935041][T19934] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1782.935109][T19934] r7:00000003 r6:00000005 r5:76bd3f30 r4:0000000f [ 1782.935128][T19934] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1782.935182][T19934] Exception stack(0xebbf1fa8 to 0xebbf1ff0) [ 1782.935221][T19934] 1fa0: 0000000f 76bd3f30 00000005 76bd3f30 0000000f 00000000 [ 1782.935255][T19934] 1fc0: 0000000f 76bd3f30 00000005 00000003 002d0000 00000000 00006364 76bd40bc [ 1782.935282][T19934] 1fe0: 00000158 76bd3ed0 000d7d68 0012fe04 [ 1786.593221][T19962] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 1786.599378][T19962] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 1786.599763][ T31] audit: type=1400 audit(2298.528:364): avc: denied { relabelto } for pid=19961 comm="syz.0.3913" name="vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1786.599899][ T31] audit: type=1400 audit(2298.528:365): avc: denied { associate } for pid=19961 comm="syz.0.3913" name="vhost-net" dev="devtmpfs" ino=707 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 1786.603635][ T31] audit: type=1400 audit(2298.538:366): avc: denied { relabelto } for pid=19961 comm="syz.0.3913" name="vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1786.604028][ T31] audit: type=1400 audit(2298.538:367): avc: denied { associate } for pid=19961 comm="syz.0.3913" name="vhost-net" dev="devtmpfs" ino=707 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="u:object_r:app_data_file:s0:c512,c768" [ 1786.606916][ T31] audit: type=1400 audit(2298.538:368): avc: denied { execute } for pid=19961 comm="syz.0.3913" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1787.020258][T19977] FAULT_INJECTION: forcing a failure. [ 1787.020258][T19977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.020506][T19977] CPU: 0 UID: 0 PID: 19977 Comm: syz.0.3915 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1787.020585][T19977] Hardware name: ARM-Versatile Express [ 1787.020628][T19977] Call trace: [ 1787.020655][T19977] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1787.020721][T19977] r7:20000440 r6:00000000 r5:60000013 r4:82257d44 [ 1787.020731][T19977] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1787.020761][T19977] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1787.020791][T19977] r5:8440d400 r4:82951710 [ 1787.020799][T19977] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1787.020867][T19977] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1787.020903][T19977] r8:00000000 r7:20000440 r6:8490bd40 r5:00000000 r4:ebc35f20 [ 1787.020911][T19977] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1787.020938][T19977] [<8095f714>] (should_fail_usercopy) from [<808aec1c>] (_copy_from_iter+0x6c/0x7c8) [ 1787.020969][T19977] [<808aebb0>] (_copy_from_iter) from [<81645438>] (netlink_sendmsg+0x18c/0x444) [ 1787.021011][T19977] r10:00000000 r9:00000000 r8:ebc35f30 r7:850efc00 r6:00000014 r5:85022180 [ 1787.021021][T19977] r4:ebc35f20 [ 1787.021029][T19977] [<816452ac>] (netlink_sendmsg) from [<81519d3c>] (__sock_sendmsg+0x44/0x78) [ 1787.021067][T19977] r10:00000000 r9:ebc35dc4 r8:ebc35dc4 r7:00000000 r6:8368fb80 r5:ebc35f20 [ 1787.021077][T19977] r4:00000000 [ 1787.021085][T19977] [<81519cf8>] (__sock_sendmsg) from [<8151a5ac>] (____sys_sendmsg+0x298/0x2cc) [ 1787.021115][T19977] r7:00000000 r6:8368fb80 r5:00042080 r4:ebc35f20 [ 1787.021125][T19977] [<8151a314>] (____sys_sendmsg) from [<8151c34c>] (___sys_sendmsg+0x9c/0xd0) [ 1787.021158][T19977] r10:ebc35e24 r9:200004c0 r8:00042080 r7:00000000 r6:8368fb80 r5:ebc35f20 [ 1787.021168][T19977] r4:00000000 [ 1787.021175][T19977] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1787.021210][T19977] r10:00000128 r9:8440d400 r8:847fd3c0 r7:00042080 r6:200004c0 r5:847fd3c1 [ 1787.021220][T19977] r4:00000004 [ 1787.021228][T19977] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1787.021261][T19977] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1787.021269][T19977] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1787.021297][T19977] Exception stack(0xebc35fa8 to 0xebc35ff0) [ 1787.021319][T19977] 5fa0: 00000000 00000000 00000004 200004c0 00042080 00000000 [ 1787.021336][T19977] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b8b0bc [ 1787.021351][T19977] 5fe0: 76b8aec0 76b8aeb0 0001939c 00131f30 [ 1790.659116][T20001] FAULT_INJECTION: forcing a failure. [ 1790.659116][T20001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.660611][T20001] CPU: 1 UID: 0 PID: 20001 Comm: syz.1.3921 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1790.660750][T20001] Hardware name: ARM-Versatile Express [ 1790.660773][T20001] Call trace: [ 1790.660807][T20001] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1790.660897][T20001] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1790.660913][T20001] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1790.660959][T20001] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1790.661010][T20001] r5:83242400 r4:82951710 [ 1790.661023][T20001] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1790.661073][T20001] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1790.661129][T20001] r8:76bd3f30 r7:00000000 r6:00000000 r5:ebe15f68 r4:00000002 [ 1790.661143][T20001] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1790.661186][T20001] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1790.661235][T20001] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1790.661309][T20001] r10:00000001 r9:80604190 r8:00000002 r7:ebe15f68 r6:0000000f r5:76bd3f30 [ 1790.661335][T20001] r4:83242400 r3:ebe15e9f [ 1790.661356][T20001] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1790.661432][T20001] r8:76bd3f30 r7:ebe15f68 r6:83242400 r5:0000000f r4:852c6b40 [ 1790.661453][T20001] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1790.661526][T20001] r10:00000003 r9:83242400 r8:8020029c r7:00000000 r6:00000000 r5:852c6b40 [ 1790.661562][T20001] r4:852c6b43 [ 1790.661580][T20001] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1790.661646][T20001] r7:00000003 r6:00000004 r5:76bd3f30 r4:0000000f [ 1790.661665][T20001] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1790.661742][T20001] Exception stack(0xebe15fa8 to 0xebe15ff0) [ 1790.661785][T20001] 5fa0: 0000000f 76bd3f30 00000004 76bd3f30 0000000f 00000000 [ 1790.661824][T20001] 5fc0: 0000000f 76bd3f30 00000004 00000003 002d0000 00000000 00006364 76bd40bc [ 1790.661855][T20001] 5fe0: 00000158 76bd3ed0 000d7d68 0012fe04 [ 1791.785090][T20046] FAULT_INJECTION: forcing a failure. [ 1791.785090][T20046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.785362][T20046] CPU: 0 UID: 0 PID: 20046 Comm: syz.0.3931 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1791.785396][T20046] Hardware name: ARM-Versatile Express [ 1791.785409][T20046] Call trace: [ 1791.785431][T20046] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1791.785488][T20046] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1791.785497][T20046] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1791.785537][T20046] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1791.785567][T20046] r5:833a8c00 r4:82951710 [ 1791.785574][T20046] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1791.785605][T20046] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1791.785639][T20046] r8:76b8af30 r7:00000000 r6:00000000 r5:ebed5f68 r4:00000002 [ 1791.785647][T20046] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1791.785673][T20046] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1791.785777][T20046] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1791.785881][T20046] r10:00000001 r9:80604190 r8:00000002 r7:ebed5f68 r6:0000000f r5:76b8af30 [ 1791.785907][T20046] r4:833a8c00 r3:ebed5e9f [ 1791.785971][T20046] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1791.786039][T20046] r8:76b8af30 r7:ebed5f68 r6:833a8c00 r5:0000000f r4:847fd300 [ 1791.786049][T20046] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1791.786086][T20046] r10:00000003 r9:833a8c00 r8:8020029c r7:00000000 r6:00000000 r5:847fd300 [ 1791.786097][T20046] r4:847fd303 [ 1791.786175][T20046] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1791.786260][T20046] r7:00000003 r6:00000004 r5:76b8af30 r4:0000000f [ 1791.786345][T20046] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1791.786456][T20046] Exception stack(0xebed5fa8 to 0xebed5ff0) [ 1791.786531][T20046] 5fa0: 0000000f 76b8af30 00000004 76b8af30 0000000f 00000000 [ 1791.786552][T20046] 5fc0: 0000000f 76b8af30 00000004 00000003 002d0000 00000000 00006364 76b8b0bc [ 1791.786643][T20046] 5fe0: 00000158 76b8aed0 000d7d68 0012fe04 [ 1794.349481][ T31] audit: type=1400 audit(2306.278:369): avc: denied { mount } for pid=20112 comm="syz.1.3945" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1794.354238][ T31] audit: type=1400 audit(2306.288:370): avc: denied { remount } for pid=20112 comm="syz.1.3945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1795.967208][T20133] serio: Serial port pts0 [ 1797.601733][T20139] can: request_module (can-proto-0) failed. [ 1797.680539][T20139] can: request_module (can-proto-0) failed. [ 1797.740457][T20150] FAULT_INJECTION: forcing a failure. [ 1797.740457][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.744501][T20150] CPU: 1 UID: 0 PID: 20150 Comm: syz.1.3950 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1797.744571][T20150] Hardware name: ARM-Versatile Express [ 1797.744585][T20150] Call trace: [ 1797.744606][T20150] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1797.744709][T20150] r7:832f9800 r6:00000000 r5:60000013 r4:82257d44 [ 1797.744732][T20150] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1797.744767][T20150] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1797.744802][T20150] r5:832f9800 r4:8291bcc0 [ 1797.744811][T20150] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1797.744842][T20150] [<8095f4d4>] (should_fail_ex) from [<8052567c>] (should_failslab+0x6c/0x94) [ 1797.744881][T20150] r8:00000000 r7:832f9800 r6:00000820 r5:84888480 r4:830ad9c0 [ 1797.744890][T20150] [<80525610>] (should_failslab) from [<8050a0ec>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1797.744919][T20150] [<8050a0a0>] (kmem_cache_alloc_noprof) from [<8152d6cc>] (skb_clone+0x60/0x1c8) [ 1797.744962][T20150] r10:000001a2 r9:84b9d340 r8:85704c00 r7:84888480 r6:852a4ec0 r5:84888480 [ 1797.744973][T20150] r4:00000820 [ 1797.744980][T20150] [<8152d66c>] (skb_clone) from [<81642098>] (__netlink_deliver_tap+0x1f4/0x28c) [ 1797.745037][T20150] r5:00000014 r4:852a4800 [ 1797.745091][T20150] [<81641ea4>] (__netlink_deliver_tap) from [<81645290>] (netlink_unicast+0x280/0x29c) [ 1797.745138][T20150] r10:00000000 r9:00000000 r8:853b8d80 r7:84888480 r6:84b9d340 r5:00000014 [ 1797.745149][T20150] r4:85704c00 [ 1797.745157][T20150] [<81645010>] (netlink_unicast) from [<81645478>] (netlink_sendmsg+0x1cc/0x444) [ 1797.745194][T20150] r9:00000000 r8:00000000 r7:84822000 r6:00000014 r5:84888480 r4:eca41f20 [ 1797.745204][T20150] [<816452ac>] (netlink_sendmsg) from [<81519d3c>] (__sock_sendmsg+0x44/0x78) [ 1797.745239][T20150] r10:00000000 r9:eca41dc4 r8:eca41dc4 r7:00000000 r6:835ddb80 r5:eca41f20 [ 1797.745250][T20150] r4:00000000 [ 1797.745257][T20150] [<81519cf8>] (__sock_sendmsg) from [<8151a5ac>] (____sys_sendmsg+0x298/0x2cc) [ 1797.745288][T20150] r7:00000000 r6:835ddb80 r5:04000000 r4:eca41f20 [ 1797.745296][T20150] [<8151a314>] (____sys_sendmsg) from [<8151c34c>] (___sys_sendmsg+0x9c/0xd0) [ 1797.745329][T20150] r10:eca41e24 r9:20000340 r8:04000000 r7:00000000 r6:835ddb80 r5:eca41f20 [ 1797.745340][T20150] r4:00000000 [ 1797.745347][T20150] [<8151c2b0>] (___sys_sendmsg) from [<8151c7dc>] (__sys_sendmsg+0x8c/0xd8) [ 1797.745381][T20150] r10:00000128 r9:832f9800 r8:856ceb40 r7:04000000 r6:20000340 r5:856ceb40 [ 1797.745391][T20150] r4:00000004 [ 1797.745398][T20150] [<8151c750>] (__sys_sendmsg) from [<8151c83c>] (sys_sendmsg+0x14/0x18) [ 1797.745431][T20150] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1797.745440][T20150] [<8151c828>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1797.745465][T20150] Exception stack(0xeca41fa8 to 0xeca41ff0) [ 1797.745485][T20150] 1fa0: 00000000 00000000 00000004 20000340 04000000 00000000 [ 1797.745503][T20150] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bd40bc [ 1797.745517][T20150] 1fe0: 76bd3ec0 76bd3eb0 0001939c 00131f30 [ 1802.075053][T20177] fuse: Unknown parameter '0x0000000000000003' [ 1802.324281][T20190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20190 comm=syz.1.3955 [ 1804.385913][T20200] serio: Serial port pts0 [ 1806.203397][T20219] fuse: Unknown parameter '0x0000000000000003' [ 1813.985673][T20272] FAULT_INJECTION: forcing a failure. [ 1813.985673][T20272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.986188][T20272] CPU: 1 UID: 0 PID: 20272 Comm: syz.0.3973 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1813.986262][T20272] Hardware name: ARM-Versatile Express [ 1813.986287][T20272] Call trace: [ 1813.986327][T20272] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1813.986438][T20272] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1813.986461][T20272] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1813.986522][T20272] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1813.986583][T20272] r5:842bb000 r4:82951710 [ 1813.986600][T20272] [<80220048>] (dump_stack) from [<8095f698>] (should_fail_ex+0x1c4/0x228) [ 1813.986661][T20272] [<8095f4d4>] (should_fail_ex) from [<8095f710>] (should_fail+0x14/0x18) [ 1813.986735][T20272] r8:76b27f30 r7:00000000 r6:00000000 r5:ecdc5f68 r4:00000002 [ 1813.986753][T20272] [<8095f6fc>] (should_fail) from [<8095f730>] (should_fail_usercopy+0x1c/0x20) [ 1813.986808][T20272] [<8095f714>] (should_fail_usercopy) from [<8058ccd4>] (simple_read_from_buffer+0x80/0x13c) [ 1813.986871][T20272] [<8058cc54>] (simple_read_from_buffer) from [<80604248>] (proc_fail_nth_read+0xb8/0x100) [ 1813.986950][T20272] r10:00000001 r9:80604190 r8:00000002 r7:ecdc5f68 r6:0000000f r5:76b27f30 [ 1813.986977][T20272] r4:842bb000 r3:ecdc5e9f [ 1813.986995][T20272] [<80604190>] (proc_fail_nth_read) from [<80551790>] (vfs_read+0x98/0x320) [ 1813.987067][T20272] r8:76b27f30 r7:ecdc5f68 r6:842bb000 r5:0000000f r4:856ce780 [ 1813.987087][T20272] [<805516f8>] (vfs_read) from [<80552430>] (ksys_read+0x74/0xe4) [ 1813.987157][T20272] r10:00000003 r9:842bb000 r8:8020029c r7:00000000 r6:00000000 r5:856ce780 [ 1813.987178][T20272] r4:856ce783 [ 1813.987195][T20272] [<805523bc>] (ksys_read) from [<805524b0>] (sys_read+0x10/0x14) [ 1813.987260][T20272] r7:00000003 r6:00000005 r5:76b27f30 r4:0000000f [ 1813.987278][T20272] [<805524a0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1813.987334][T20272] Exception stack(0xecdc5fa8 to 0xecdc5ff0) [ 1813.987376][T20272] 5fa0: 0000000f 76b27f30 00000005 76b27f30 0000000f 00000000 [ 1813.987412][T20272] 5fc0: 0000000f 76b27f30 00000005 00000003 002d0000 00000000 00006364 76b280bc [ 1813.987440][T20272] 5fe0: 00000158 76b27ed0 000d7d68 0012fe04 [ 1817.202023][T17465] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1817.364616][T17465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1817.364870][T17465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.365078][T17465] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1817.365198][T17465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.368637][T17465] usb 1-1: config 0 descriptor?? [ 1817.455414][ T31] audit: type=1400 audit(2329.388:371): avc: denied { read } for pid=20383 comm="syz.1.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1817.821592][T17465] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1817.823346][T17465] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1817.824435][T17465] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1817.825421][T17465] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1817.826717][T17465] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1817.827644][T17465] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 1817.829451][T17465] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1818.035902][T17465] usb 1-1: USB disconnect, device number 15 [ 1818.130050][T20403] serio: Serial port pts0 [ 1822.895673][T20434] serio: Serial port pts0 [ 1827.481287][ T31] audit: type=1400 audit(2339.418:372): avc: denied { accept } for pid=20460 comm="syz.0.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1831.279367][ T31] audit: type=1400 audit(2343.208:373): avc: denied { setopt } for pid=20488 comm="syz.0.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1832.152241][T20496] SELinux: Context system_u:object_r:apm_bios_t:s0 is not valid (left unmapped). [ 1832.166402][ T31] audit: type=1400 audit(2344.088:374): avc: denied { relabelto } for pid=20477 comm="syz.1.4029" name="userio" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apm_bios_t:s0" [ 1832.166675][ T31] audit: type=1400 audit(2344.088:375): avc: denied { associate } for pid=20477 comm="syz.1.4029" name="userio" dev="devtmpfs" ino=692 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apm_bios_t:s0" [ 1833.070988][T17792] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1833.221157][T17792] usb 2-1: Using ep0 maxpacket: 16 [ 1833.225757][T17792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.225966][T17792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.226257][T17792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1833.226407][T17792] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1833.226520][T17792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.244253][T17792] usb 2-1: config 0 descriptor?? [ 1833.666764][T17792] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1833.672876][T17792] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input12 [ 1833.733899][T17792] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1833.884572][T17792] usb 2-1: USB disconnect, device number 20 [ 1835.672747][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.674135][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.681234][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.682557][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.683312][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.684046][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.684739][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.685486][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.686181][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1835.686935][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1839.690994][ T3798] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1839.844615][ T3798] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1839.844837][ T3798] usb 2-1: config 0 has no interface number 0 [ 1839.845026][ T3798] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1839.845085][ T3798] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1839.845130][ T3798] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1839.854131][ T3798] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1839.854293][ T3798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.854457][ T3798] usb 2-1: Product: syz [ 1839.854496][ T3798] usb 2-1: Manufacturer: syz [ 1839.854527][ T3798] usb 2-1: SerialNumber: syz [ 1839.857285][ T3798] usb 2-1: config 0 descriptor?? [ 1839.860391][T20535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1839.861472][T20535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1839.863525][ T3798] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1839.879070][ T3798] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1842.802975][ T3798] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1842.805396][ T3798] usb 2-1: USB disconnect, device number 21 [ 1851.861216][T17792] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1852.024844][T17792] usb 1-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 1852.025100][T17792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.025160][T17792] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 1852.032007][T17792] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1852.032190][T17792] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1852.032365][T17792] usb 1-1: Product: syz [ 1852.032479][T17792] usb 1-1: Manufacturer: syz [ 1852.034922][T17792] usb 1-1: config 0 descriptor?? [ 1852.283471][T13892] usb 1-1: USB disconnect, device number 16 [ 1858.446590][ T31] audit: type=1400 audit(2370.378:376): avc: denied { read write } for pid=20600 comm="syz.1.4052" name="userio" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apm_bios_t:s0" [ 1858.448811][ T31] audit: type=1400 audit(2370.378:377): avc: denied { open } for pid=20600 comm="syz.1.4052" path="/dev/userio" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apm_bios_t:s0" [ 1859.491695][T12510] atkbd serio14: keyboard reset failed on [ 1859.680986][T13892] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1859.841056][T13892] usb 2-1: Using ep0 maxpacket: 16 [ 1859.845561][T13892] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1859.847293][T13892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1859.863344][T13892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1859.863520][T13892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.863686][T13892] usb 2-1: Product: syz [ 1859.863793][T13892] usb 2-1: Manufacturer: syz [ 1859.863897][T13892] usb 2-1: SerialNumber: syz [ 1860.076514][T13892] usb 2-1: 0:2 : does not exist [ 1860.110855][T13892] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1860.136554][T13892] usb 2-1: USB disconnect, device number 22 [ 1860.232321][T20639] __nla_validate_parse: 41 callbacks suppressed [ 1860.232576][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1861.820900][T13892] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1861.991469][T13892] usb 1-1: Using ep0 maxpacket: 32 [ 1861.995273][T13892] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 1861.996573][T13892] usb 1-1: config 1 has no interface number 0 [ 1861.997572][T13892] usb 1-1: config 1 interface 242 has no altsetting 0 [ 1862.013295][T13892] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1862.014090][T13892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.020259][T13892] usb 1-1: Product: syz [ 1862.021318][T13892] usb 1-1: Manufacturer: syz [ 1862.022181][T13892] usb 1-1: SerialNumber: syz [ 1863.081886][T13892] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1863.293230][T13892] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1863.316111][T13892] aqc111 1-1:1.242 eth1: register 'aqc111' at usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller, 7a:a7:9f:2e:d7:c1 [ 1863.332913][T13892] usb 1-1: USB disconnect, device number 17 [ 1863.335076][T13892] aqc111 1-1:1.242 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller [ 1863.433369][T13892] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1863.435096][T13892] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1863.438415][T13892] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1883.247868][T20730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.763408][ T31] audit: type=1400 audit(2395.698:378): avc: denied { create } for pid=20746 comm="syz.0.4080" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1883.772953][ T31] audit: type=1400 audit(2395.708:379): avc: denied { write } for pid=20746 comm="syz.0.4080" name="file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1883.774309][ T31] audit: type=1400 audit(2395.708:380): avc: denied { open } for pid=20746 comm="syz.0.4080" path="/353/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1883.778594][ T31] audit: type=1400 audit(2395.708:381): avc: denied { ioctl } for pid=20746 comm="syz.0.4080" path="/353/file0" dev="tmpfs" ino=1862 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1883.803194][ T31] audit: type=1400 audit(2395.738:382): avc: denied { unlink } for pid=17030 comm="syz-executor" name="file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1884.991362][T13892] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1885.150955][ T31] audit: type=1326 audit(2397.068:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20738 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 1885.151215][ T31] audit: type=1326 audit(2397.078:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20738 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 1885.151384][ T31] audit: type=1326 audit(2397.078:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20738 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x131f30 code=0x7ffc0000 [ 1885.151514][ T31] audit: type=1326 audit(2397.078:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20738 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 1885.151651][ T31] audit: type=1326 audit(2397.088:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20738 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000028 syscall=294 compat=0 ip=0x131f30 code=0x7ffc0000 [ 1885.185396][T13892] usb 1-1: Using ep0 maxpacket: 16 [ 1885.197627][T13892] usb 1-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1885.198259][T13892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.199825][T13892] usb 1-1: Product: syz [ 1885.201383][T13892] usb 1-1: Manufacturer: syz [ 1885.202925][T13892] usb 1-1: SerialNumber: syz [ 1885.213270][T13892] usb 1-1: config 0 descriptor?? [ 1885.667736][T13892] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1885.669242][T13892] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 1885.880959][T12510] usb 1-1: USB disconnect, device number 18 [ 1895.943279][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1895.943609][ T31] audit: type=1400 audit(2407.878:393): avc: denied { read write } for pid=20778 comm="syz.1.4087" name="vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1895.943876][ T31] audit: type=1400 audit(2407.878:394): avc: denied { open } for pid=20778 comm="syz.1.4087" path="/dev/vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1895.971068][ T31] audit: type=1400 audit(2407.898:395): avc: denied { ioctl } for pid=20778 comm="syz.1.4087" path="/dev/vhost-net" dev="devtmpfs" ino=707 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1903.859455][ T31] audit: type=1326 audit(2415.788:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.1.4091" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 1914.173495][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1914.974938][T20829] block nbd1: shutting down sockets [ 1926.732118][T12510] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1926.882015][T12510] usb 2-1: Using ep0 maxpacket: 8 [ 1926.900876][T12510] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1926.901295][T12510] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1926.901418][T12510] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1926.901536][T12510] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.901713][T12510] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1926.901817][T12510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.134075][T12510] usb 2-1: GET_CAPABILITIES returned 0 [ 1927.134520][T12510] usbtmc 2-1:16.0: can't read capabilities [ 1927.342039][ T9602] usb 2-1: USB disconnect, device number 23 [ 1927.819677][T20868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1936.980987][T17792] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1937.134484][T17792] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1937.134899][T17792] usb 2-1: config 0 has no interface number 1 [ 1937.135199][T17792] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1937.135329][T17792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.139103][T17792] usb 2-1: config 0 descriptor?? [ 1937.346624][T17792] usb 2-1: Could not set interface, error -71 [ 1937.362545][T17792] usb 2-1: USB disconnect, device number 24 [ 1939.591171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1945.416186][ T31] audit: type=1400 audit(2457.348:397): avc: denied { name_bind } for pid=20907 comm="syz.1.4117" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1945.483860][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1945.861119][ T9602] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1946.021216][ T9602] usb 2-1: config 0 has no interfaces? [ 1946.021919][ T9602] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1946.022044][ T9602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.028289][ T9602] usb 2-1: config 0 descriptor?? [ 1946.288909][T20912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.304191][T20912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.311515][T12379] usb 2-1: USB disconnect, device number 25 [ 1947.846446][ T54] block nbd1: Receive control failed (result -107) [ 1947.912670][T20949] nbd1: detected capacity change from 0 to 12 [ 1947.983975][T20948] block nbd1: shutting down sockets [ 1948.754437][ T31] audit: type=1400 audit(2460.688:398): avc: denied { name_connect } for pid=20966 comm="syz.1.4135" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1949.187814][ T55] block nbd1: Receive control failed (result -107) [ 1949.293853][T20969] nbd1: detected capacity change from 0 to 12 [ 1949.462687][T20968] block nbd1: shutting down sockets [ 1950.380970][T12510] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1950.558325][T12510] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1950.558951][T12510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.561388][T12510] usb 1-1: Product: syz [ 1950.561553][T12510] usb 1-1: Manufacturer: syz [ 1950.561663][T12510] usb 1-1: SerialNumber: syz [ 1950.565173][T12510] usb 1-1: config 0 descriptor?? [ 1950.784980][T12510] hso 1-1:0.0: Failed to find INT IN ep [ 1950.791703][T12510] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1951.013897][ T7837] usb 1-1: USB disconnect, device number 19 [ 1951.271140][T21001] tmpfs: Unsupported parameter 'huge' [ 1953.297913][T21005] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1970.805173][T21034] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4151'. [ 1971.601794][ T31] audit: type=1400 audit(2483.528:399): avc: denied { view } for pid=21041 comm="syz.1.4155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1971.856362][ T31] audit: type=1400 audit(2483.788:400): avc: denied { relabelfrom } for pid=21045 comm="syz.1.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1971.858352][ T31] audit: type=1400 audit(2483.788:401): avc: denied { relabelto } for pid=21045 comm="syz.1.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1971.962260][T17076] syzkaller0: tun_net_xmit 76 [ 1971.962937][T17076] syzkaller0: tun_net_xmit 48 [ 1971.971870][T21046] syzkaller0: create flow: hash 2660183938 index 1 [ 1971.994175][ T9602] syzkaller0: tun_net_xmit 76 [ 1972.022091][T21045] syzkaller0: delete flow: hash 2660183938 index 1 [ 1972.536677][T21056] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1005 sclass=netlink_xfrm_socket pid=21056 comm=syz.1.4157 [ 1972.537798][T21056] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1010 sclass=netlink_xfrm_socket pid=21056 comm=syz.1.4157 [ 1972.821132][ T9602] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1973.051466][ T9602] usb 2-1: Using ep0 maxpacket: 16 [ 1973.074485][ T9602] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 1973.074669][ T9602] usb 2-1: config 0 has no interface number 0 [ 1973.074827][ T9602] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.186219][ T9602] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1973.186422][ T9602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.186578][ T9602] usb 2-1: Product: syz [ 1973.186619][ T9602] usb 2-1: Manufacturer: syz [ 1973.186651][ T9602] usb 2-1: SerialNumber: syz [ 1973.188604][ T9602] usb 2-1: config 0 descriptor?? [ 1973.437305][ T9602] usb 2-1: USB disconnect, device number 26 [ 1975.046305][T21072] 8<--- cut here --- [ 1975.046609][T21072] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 1975.046816][T21072] [0000000e] *pgd=84a5e003, *pmd=ee888003 [ 1975.047702][T21072] Internal error: Oops: 205 [#1] SMP ARM [ 1975.050063][T21072] Modules linked in: [ 1975.050374][T21072] CPU: 0 UID: 0 PID: 21072 Comm: syz.0.4152 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1975.050879][T21072] Hardware name: ARM-Versatile Express [ 1975.051067][T21072] PC is at io_buffer_select+0x50/0x18c [ 1975.051498][T21072] LR is at xa_load+0x68/0xa4 [ 1975.051674][T21072] pc : [<80889b04>] lr : [<81a4c354>] psr: 20000013 [ 1975.051869][T21072] sp : dfa25de8 ip : dfa25da8 fp : dfa25e04 [ 1975.052019][T21072] r10: 83522c80 r9 : 00000000 r8 : 80000001 [ 1975.052284][T21072] r7 : dfa25e20 r6 : 00000000 r5 : 85813900 r4 : 85a7b000 [ 1975.053660][T21072] r3 : 00000001 r2 : 00000000 r1 : 85196440 r0 : 00000000 [ 1975.054325][T21072] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1975.054626][T21072] Control: 30c5387d Table: 85196fc0 DAC: fffffffd [ 1975.054849][T21072] Register r0 information: NULL pointer [ 1975.055294][T21072] Register r1 information: slab kmalloc-64 start 85196440 pointer offset 0 size 64 [ 1975.055990][T21072] Register r2 information: NULL pointer [ 1975.056180][T21072] Register r3 information: non-paged memory [ 1975.056382][T21072] Register r4 information: slab io_kiocb start 85a7b000 pointer offset 0 size 192 [ 1975.056748][T21072] Register r5 information: slab kmalloc-2k start 85813800 pointer offset 256 size 2048 [ 1975.057083][T21072] Register r6 information: NULL pointer [ 1975.057262][T21072] Register r7 information: 2-page vmalloc region starting at 0xdfa24000 allocated at kernel_clone+0xac/0x3e4 [ 1975.057660][T21072] Register r8 information: non-slab/vmalloc memory [ 1975.057977][T21072] Register r9 information: NULL pointer [ 1975.058193][T21072] Register r10 information: slab sock_inode_cache start 83522c80 pointer offset 0 size 576 [ 1975.058517][T21072] Register r11 information: 2-page vmalloc region starting at 0xdfa24000 allocated at kernel_clone+0xac/0x3e4 [ 1975.058855][T21072] Register r12 information: 2-page vmalloc region starting at 0xdfa24000 allocated at kernel_clone+0xac/0x3e4 [ 1975.059245][T21072] Process syz.0.4152 (pid: 21072, stack limit = 0xdfa24000) [ 1975.059577][T21072] Stack: (0xdfa25de8 to 0xdfa26000) [ 1975.059778][T21072] 5de0: 85a7b000 85439600 00000000 00000040 dfa25e54 dfa25e08 [ 1975.060031][T21072] 5e00: 80892e30 80889ac0 85813928 000000e8 85b40000 00000001 01000000 00000000 [ 1975.060292][T21072] 5e20: 00000000 bff356f3 dfa25e54 85a7b000 81cf0bd4 00000000 00000000 00000000 [ 1975.060545][T21072] 5e40: 80000001 83ae6c00 dfa25e7c dfa25e58 808822b4 80892c0c 85a7b000 80000001 [ 1975.060957][T21072] 5e60: 0000000a 81cf0b5c 842aec00 00000000 dfa25ebc dfa25e80 80886d84 80882274 [ 1975.061428][T21072] 5e80: 00000000 00000000 00000000 81cf0bd4 00000000 85813800 85a7b06c 85a7b000 [ 1975.061837][T21072] 5ea0: 85b40000 00000000 00000000 83ae6c00 dfa25f14 dfa25ec0 8088789c 80886d48 [ 1975.062148][T21072] 5ec0: 8088e258 81a4c2f8 00000000 00000000 00000001 00000001 81cf0b5c 00000001 [ 1975.062411][T21072] 5ee0: 85813800 bff356f3 842ae9c0 00000000 85813800 00005b43 842ae9c0 00000000 [ 1975.062695][T21072] 5f00: 83ae6c00 00000000 dfa25fa4 dfa25f18 80888344 8088769c ecac8b10 85813840 [ 1975.062947][T21072] 5f20: 00000000 00000000 81a500d0 81a4ffa0 dfa25f54 dfa25f40 8026b438 8029ce24 [ 1975.063209][T21072] 5f40: dfa25fb0 40000000 dfa25f84 dfa25f58 802229dc 8026b3f4 00000000 8281d05c [ 1975.063481][T21072] 5f60: dfa25fb0 0014c490 ecac8b10 80222930 00000000 bff356f3 dfa25fac 00000000 [ 1975.063749][T21072] 5f80: 00000000 002e643c 000001aa 8020029c 83ae6c00 000001aa 00000000 dfa25fa8 [ 1975.063992][T21072] 5fa0: 80200060 80888218 00000000 00000000 00000007 00005b43 00000000 00000000 [ 1975.064243][T21072] 5fc0: 00000000 00000000 002e643c 000001aa 002d0000 00000000 00006364 76b490bc [ 1975.064505][T21072] 5fe0: 76b48ec0 76b48eb0 0001939c 00131f30 60000010 00000007 00000000 00000000 [ 1975.064770][T21072] Call trace: [ 1975.064906][T21072] [<80889ab4>] (io_buffer_select) from [<80892e30>] (io_recvmsg+0x230/0x420) [ 1975.065212][T21072] r7:00000040 r6:00000000 r5:85439600 r4:85a7b000 [ 1975.065389][T21072] [<80892c00>] (io_recvmsg) from [<808822b4>] (__io_issue_sqe+0x4c/0x1c0) [ 1975.065656][T21072] r10:83ae6c00 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0bd4 [ 1975.065940][T21072] r4:85a7b000 [ 1975.066058][T21072] [<80882268>] (__io_issue_sqe) from [<80886d84>] (io_issue_sqe+0x48/0x59c) [ 1975.066347][T21072] r9:00000000 r8:842aec00 r7:81cf0b5c r6:0000000a r5:80000001 r4:85a7b000 [ 1975.066592][T21072] [<80886d3c>] (io_issue_sqe) from [<8088789c>] (io_submit_sqes+0x20c/0x938) [ 1975.066855][T21072] r10:83ae6c00 r9:00000000 r8:00000000 r7:85b40000 r6:85a7b000 r5:85a7b06c [ 1975.067114][T21072] r4:85813800 [ 1975.067353][T21072] [<80887690>] (io_submit_sqes) from [<80888344>] (sys_io_uring_enter+0x138/0x780) [ 1975.067937][T21072] r10:00000000 r9:83ae6c00 r8:00000000 r7:842ae9c0 r6:00005b43 r5:85813800 [ 1975.068212][T21072] r4:00000000 [ 1975.068333][T21072] [<8088820c>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1975.068618][T21072] Exception stack(0xdfa25fa8 to 0xdfa25ff0) [ 1975.068805][T21072] 5fa0: 00000000 00000000 00000007 00005b43 00000000 00000000 [ 1975.069095][T21072] 5fc0: 00000000 00000000 002e643c 000001aa 002d0000 00000000 00006364 76b490bc [ 1975.069382][T21072] 5fe0: 76b48ec0 76b48eb0 0001939c 00131f30 [ 1975.069668][T21072] r10:000001aa r9:83ae6c00 r8:8020029c r7:000001aa r6:002e643c r5:00000000 [ 1975.070011][T21072] r4:00000000 [ 1975.070281][T21072] Code: e3130001 0a00002f e5910000 e1d120be (e1d030be) [ 1975.072120][T21072] ---[ end trace 0000000000000000 ]--- [ 1975.083799][ T31] audit: type=1400 audit(2487.008:402): avc: denied { read } for pid=2911 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1975.084205][ T31] audit: type=1400 audit(2487.008:403): avc: denied { search } for pid=2911 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1975.084373][ T31] audit: type=1400 audit(2487.008:404): avc: denied { write } for pid=2911 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1975.084522][ T31] audit: type=1400 audit(2487.008:405): avc: denied { add_name } for pid=2911 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1975.084700][ T31] audit: type=1400 audit(2487.008:406): avc: denied { create } for pid=2911 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1975.084850][ T31] audit: type=1400 audit(2487.008:407): avc: denied { append open } for pid=2911 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1975.084978][ T31] audit: type=1400 audit(2487.008:408): avc: denied { getattr } for pid=2911 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1975.122114][T21072] Kernel panic - not syncing: Fatal exception [ 1975.123754][T21072] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:31:30 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000000 R03=60000193 R04=00000000 R05=83ae6c00 R06=82822810 R07=00000000 R08=00000000 R09=83ae6c00 R10=00000001 R11=dfa25b84 R12=dfa25b88 R13=dfa25b00 R14=802edd20 R15=802ec27c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=00000000 R04=00000000 R05=1bafa8c5 R06=00000061 R07=00000000 R08=002d0000 R09=00000000 R10=00006364 R11=76b8b0bc R12=20000d00 R13=20000d00 R14=00019438 R15=00019438 PSR=00000010 ---- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000