last executing test programs: 27m35.771480972s ago: executing program 0 (id=5392): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000e00), 0x0, 0x22002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) 27m27.551301613s ago: executing program 0 (id=5393): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x40000, 0x7f, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 27m27.283135517s ago: executing program 0 (id=5396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000600) ioprio_get$pid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r3, r4, 0x0) 26m52.730473598s ago: executing program 0 (id=5400): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22142) socket(0x11, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26m52.339873178s ago: executing program 0 (id=5401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500fff7240007800c000180080001406401012008000a40004000020c00028008000140640101200900020073797a31000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 26m52.010363825s ago: executing program 0 (id=5402): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001807eff00000547000008000200", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 26m23.322791294s ago: executing program 1 (id=5404): r0 = syz_io_uring_setup(0x2dec, &(0x7f0000000200)={0x0, 0xa38f, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000043c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x29, 0x0, 0x0, 0x6, 0x3}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 26m23.071104617s ago: executing program 1 (id=5405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000008000f28, 0x0) splice(r3, 0x0, r1, 0x0, 0x20000119, 0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 26m21.861376839s ago: executing program 1 (id=5406): r0 = epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000200)=0x400a65) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000300)={0x40000001}) 26m21.581575723s ago: executing program 1 (id=5407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000003c0), 0x12) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x1000) 26m21.0514906s ago: executing program 1 (id=5408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26m20.140673297s ago: executing program 1 (id=5409): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1062) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000030569f00"/20, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000001040)={0x7, 'batadv0\x00', {}, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) 26m6.059952928s ago: executing program 32 (id=5402): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001807eff00000547000008000200", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 25m34.222478918s ago: executing program 33 (id=5409): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1062) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000030569f00"/20, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000001040)={0x7, 'batadv0\x00', {}, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) 8m22.238622804s ago: executing program 3 (id=6616): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='exofs\x00', 0x30000, &(0x7f0000000180)='(\x00') mount$binder(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1001000, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@context={'context', 0x3d, 'system_u'}}]}) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x6fd, 0xfff]}, 0x8) r3 = openat$selinux_status(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) fchmodat(r3, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000480), 0x80001, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f00000004c0)) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000500)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000540)={@hyper}) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @empty}, 0x10) clock_gettime(0x0, &(0x7f00000005c0)) fcntl$getownex(r3, 0x10, &(0x7f0000000600)={0x0, 0x0}) setpriority(0x1, r5, 0x91) r6 = openat$vcsu(0xffffff9c, &(0x7f0000000640), 0x311041, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xddf5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) r8 = open_tree(r6, &(0x7f00000007c0)='./file0\x00', 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000840)={0x4, &(0x7f0000000800)=[{0x7, 0xbe, 0x1, 0x4}, {0x101, 0xc, 0x1, 0x100}, {0x0, 0x4, 0x8, 0x6}, {0x6, 0x5, 0x9, 0x6}]}, 0x8) bind$alg(r3, &(0x7f0000000880)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(ghash-generic)\x00'}, 0x58) timer_delete(0x0) epoll_pwait2(r8, &(0x7f0000000980)=[{}], 0x1, &(0x7f00000009c0), &(0x7f0000000a00)={[0xffff, 0x7]}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000a40)) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000e40)) setxattr$security_capability(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440), &(0x7f0000001480)=@v3={0x3000000, [{0x7, 0x9}, {0x7, 0x537}], 0xffffffffffffffff}, 0x18, 0x3) 8m11.190479491s ago: executing program 3 (id=6622): syz_clone3(&(0x7f00000005c0)={0x1000000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 8m10.791076972s ago: executing program 3 (id=6623): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r0], 0x27) 8m10.450756379s ago: executing program 3 (id=6625): syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000008060001080006040001"], 0x0) 8m10.160944824s ago: executing program 3 (id=6626): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="41460104"], 0x4) 8m9.130188867s ago: executing program 3 (id=6627): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1a, 0x0, 0x0) 7m23.449853241s ago: executing program 34 (id=6627): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1a, 0x0, 0x0) 35.67083076s ago: executing program 4 (id=6973): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000f0000f4"], 0x78) 35.590969944s ago: executing program 4 (id=6974): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 32.858690205s ago: executing program 4 (id=6979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) 17.341522151s ago: executing program 4 (id=6982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) openat$nullb(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8c00) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5.901720568s ago: executing program 4 (id=6988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000680)="81b465d61b8908fb0c44f41ab91c29cc26842768ecc80d31687d7c695001ccc29055aa52b02e87cfcd1b64e508d440892a49acd98db8af998fae4a67fd476b806544aa1315ed5206b5bfb14f560b9f8fe10df2c4d266c140567287ed2847e3b64fab967547becab138ec3dfebc65b0a43ad2f8f2f933563ba6bc57ee627fdc6c3e9147068a2ed5cb005fc51a3881025b1cb8ce611e9af8ff2a51bb156e7434640421ba9f05e4ad2c79430cb9e705c517036829b9db1efa56aca1bd5afafd8c39833cab10fe6a3d4b82bfb45749dc8d01554f8dd01beb04a764e92a8f00f9572122fea08dde88223c", 0xe8}, {&(0x7f0000000180)="8d2f7958b18b0f52c9c532be1605a305ea3451ed1f3fab8ecfb96cb74cbc31ab2e289305cd2d627a5e372d6d8f6f56110fb4", 0x32}, {&(0x7f0000000780)="d777375f14f084f6e81d70f963a48538d3f66a9ca01219924daf3ff5eb94f588932483b342a4238af9ca0929832fc1492f1cd503f804aa631e6506de6e1934b6cf0d00ac3a060abdfbc196605946f2155ce0121e1fad33a32fe1e9293525305543b53aba35b6e087e7193fac81648ec9ae9b21e8e9cee770b9b2acbed11b0788ba27072c756ccf53e0c48de20bb8ea0c2c43d83c71566d865d4786e626353e6f64fe99bd8653fdbecda8fbb42c2b", 0xae}, {&(0x7f0000000cc0)="72390de9b96ab2b518ba3ff746bd7811f838c436ac7b3b9edf25ce89f08544b5d3cae4d1f4af04a08dfe8fa4ff7fc2bf4fa9cb59bfc547d41eca15d37aed29e0c6d8707290006daa9b1acd078e074df306d77032b73647a958f0f3bd9726cc449ff9477f3bd323c074b2", 0x6a}, {&(0x7f00000002c0)="b8c3b91ffa3b08a6729b45424cd6da78415df093f1dc8fa37b24965e3309982029d5cd75a10fd9ea1930cdee99bd", 0x2e}], 0x5, 0x0, 0x0, 0x48000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.751981875s ago: executing program 4 (id=6989): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) 1.797432018s ago: executing program 2 (id=6993): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000001840)="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"/274, 0x0, 0x6, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0xdec3140818b8086) 1.780311409s ago: executing program 2 (id=6994): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.490782944s ago: executing program 2 (id=6995): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) chdir(&(0x7f0000000280)='./file0\x00') 1.221141708s ago: executing program 2 (id=6996): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300001900000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006006c00c7000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000030000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000030007000000000002"], 0xc8}}, 0x0) 117.364854ms ago: executing program 2 (id=6997): openat$dsp1(0xffffffffffffff9c, 0x0, 0x141200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, 0x0, 0x0, 0x0, 0x120}}], 0x1, 0x44) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file1\x00') 0s ago: executing program 2 (id=6998): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x411, 0x0, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0xc, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): 681][T27930] r8:76ffbf30 r7:00000000 r6:00000000 r5:dfd61f68 r4:00000002 [ 2360.804691][T27930] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2360.804719][T27930] [<80972800>] (should_fail_usercopy) from [<8058e61c>] (simple_read_from_buffer+0x80/0x13c) [ 2360.804784][T27930] [<8058e59c>] (simple_read_from_buffer) from [<80608614>] (proc_fail_nth_read+0xb8/0x108) [ 2360.804822][T27930] r10:00000001 r9:8060855c r8:00000002 r7:dfd61f68 r6:0000000f r5:76ffbf30 [ 2360.804834][T27930] r4:83ad9800 r3:dfd61e9f [ 2360.804842][T27930] [<8060855c>] (proc_fail_nth_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2360.804878][T27930] r8:76ffbf30 r7:dfd61f68 r6:83ad9800 r5:0000000f r4:847bda80 [ 2360.804887][T27930] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2360.804989][T27930] r10:00000003 r9:83ad9800 r8:8020029c r7:00000000 r6:00000000 r5:847bda80 [ 2360.805001][T27930] r4:847bda83 [ 2360.805010][T27930] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2360.805044][T27930] r7:00000003 r6:00000004 r5:76ffbf30 r4:0000000f [ 2360.805052][T27930] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2360.805077][T27930] Exception stack(0xdfd61fa8 to 0xdfd61ff0) [ 2360.805097][T27930] 1fa0: 0000000f 76ffbf30 00000004 76ffbf30 0000000f 00000000 [ 2360.805114][T27930] 1fc0: 0000000f 76ffbf30 00000004 00000003 002e0000 00000000 00006364 76ffc0bc [ 2360.805128][T27930] 1fe0: 00000158 76ffbed0 000d80f0 00130194 [ 2361.777698][T27934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=27934 comm=syz.3.5899 [ 2362.082579][ T31] audit: type=1400 audit(2362.010:594): avc: denied { getopt } for pid=27936 comm="syz.3.5900" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2363.149885][T27945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=27945 comm=syz.3.5904 [ 2366.798633][T27950] fuse: Unknown parameter '000000000000000000000x0000000000000004' [ 2367.218221][ T31] audit: type=1400 audit(2367.150:595): avc: denied { remount } for pid=27949 comm="syz.3.5906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2370.207525][T27958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=27958 comm=syz.2.5909 [ 2376.092953][T27974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=27974 comm=syz.3.5914 [ 2377.927309][T27990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=27990 comm=syz.3.5919 [ 2378.698277][ T31] audit: type=1400 audit(2378.630:596): avc: denied { mounton } for pid=27992 comm="syz.3.5920" path="/proc/691/task" dev="proc" ino=69929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2378.733216][ T31] audit: type=1400 audit(2378.660:597): avc: denied { mount } for pid=27992 comm="syz.3.5920" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2381.549436][T27999] FAULT_INJECTION: forcing a failure. [ 2381.549436][T27999] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.550809][T27999] CPU: 0 UID: 0 PID: 27999 Comm: syz.3.5922 Not tainted syzkaller #0 PREEMPT [ 2381.550921][T27999] Hardware name: ARM-Versatile Express [ 2381.550954][T27999] Call trace: [ 2381.551005][T27999] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2381.551114][T27999] r7:83ad8c00 r6:00000000 r5:60000013 r4:82260500 [ 2381.551161][T27999] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2381.551225][T27999] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2381.551293][T27999] r5:83ad8c00 r4:82917c00 [ 2381.551313][T27999] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2381.551392][T27999] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2381.551459][T27999] r8:00000000 r7:83ad8c00 r6:00000cc0 r5:200001c0 r4:830a2a80 [ 2381.551476][T27999] [<8051f1f4>] (should_failslab) from [<80503870>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2381.551529][T27999] [<80503824>] (kmem_cache_alloc_noprof) from [<80562b84>] (getname_flags.part.0+0x28/0x18c) [ 2381.551610][T27999] r10:000000e3 r9:83ad8c00 r8:00000000 r7:00000000 r6:82465858 r5:200001c0 [ 2381.551635][T27999] r4:200001c0 [ 2381.551651][T27999] [<80562b5c>] (getname_flags.part.0) from [<80567b20>] (getname_flags+0x3c/0x50) [ 2381.551724][T27999] r9:83ad8c00 r8:00000000 r7:ffffff9c r6:00000100 r5:00000000 r4:200001c0 [ 2381.551745][T27999] [<80567ae4>] (getname_flags) from [<8058c21c>] (path_setxattrat+0x14c/0x17c) [ 2381.551808][T27999] r5:200001c0 r4:00000000 [ 2381.551825][T27999] [<8058c0d0>] (path_setxattrat) from [<8058c414>] (sys_lsetxattr+0x34/0x3c) [ 2381.551890][T27999] r8:8020029c r7:000000e3 r6:00130270 r5:00000000 r4:20000240 [ 2381.551907][T27999] [<8058c3e0>] (sys_lsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2381.551958][T27999] Exception stack(0xdfda5fa8 to 0xdfda5ff0) [ 2381.551999][T27999] 5fa0: 00000000 00000000 200001c0 20000240 00000000 00000000 [ 2381.552038][T27999] 5fc0: 00000000 00000000 00130270 000000e3 002e0000 00000000 00006364 76fdb0bc [ 2381.552067][T27999] 5fe0: 76fdaec0 76fdaeb0 0001948c 001322c0 [ 2381.552091][T27999] r4:00000000 [ 2383.972510][T28003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28003 comm=syz.3.5924 [ 2384.915198][T28010] FAULT_INJECTION: forcing a failure. [ 2384.915198][T28010] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.920515][T28010] CPU: 0 UID: 0 PID: 28010 Comm: syz.2.5927 Not tainted syzkaller #0 PREEMPT [ 2384.920663][T28010] Hardware name: ARM-Versatile Express [ 2384.920694][T28010] Call trace: [ 2384.920742][T28010] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2384.920862][T28010] r7:83add400 r6:00000000 r5:60000013 r4:82260500 [ 2384.920883][T28010] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2384.920939][T28010] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2384.921005][T28010] r5:83add400 r4:82917c00 [ 2384.921024][T28010] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2384.921087][T28010] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2384.921160][T28010] r8:00000000 r7:83add400 r6:00000cc0 r5:ffffffff r4:830a7c00 [ 2384.921180][T28010] [<8051f1f4>] (should_failslab) from [<80503204>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2384.921237][T28010] [<805031b4>] (kmem_cache_alloc_node_noprof) from [<815515ec>] (__alloc_skb+0x138/0x160) [ 2384.921315][T28010] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830a7c00 r5:ffffffff [ 2384.921337][T28010] r4:828060c0 [ 2384.921355][T28010] [<815514b4>] (__alloc_skb) from [<8167194c>] (netlink_ack+0x70/0x214) [ 2384.921427][T28010] r8:857a50c0 r7:8586f440 r6:00000100 r5:81673518 r4:00000014 [ 2384.921448][T28010] [<816718dc>] (netlink_ack) from [<81671bdc>] (netlink_rcv_skb+0xec/0x120) [ 2384.921516][T28010] r10:00000000 r9:00000000 r8:85bd3b00 r7:00000028 r6:8586f440 r5:81673518 [ 2384.921540][T28010] r4:857a50c0 [ 2384.921557][T28010] [<81671af0>] (netlink_rcv_skb) from [<81672da8>] (genl_rcv+0x2c/0x3c) [ 2384.921619][T28010] r7:857a50c0 r6:85d54ac0 r5:829e8ee8 r4:857a50c0 [ 2384.921639][T28010] [<81672d7c>] (genl_rcv) from [<8167137c>] (netlink_unicast+0x1f0/0x30c) [ 2384.921710][T28010] r5:00000028 r4:84904000 [ 2384.921728][T28010] [<8167118c>] (netlink_unicast) from [<81671664>] (netlink_sendmsg+0x1cc/0x444) [ 2384.921800][T28010] r9:00000000 r8:00000000 r7:86178000 r6:00000028 r5:857a50c0 r4:dfd95f20 [ 2384.921823][T28010] [<81671498>] (netlink_sendmsg) from [<81543360>] (__sock_sendmsg+0x44/0x78) [ 2384.921901][T28010] r10:00000000 r9:dfd95dc4 r8:dfd95dc4 r7:00000000 r6:85302780 r5:dfd95f20 [ 2384.921925][T28010] r4:00000000 [ 2384.921943][T28010] [<8154331c>] (__sock_sendmsg) from [<815446b4>] (____sys_sendmsg+0x298/0x2cc) [ 2384.922011][T28010] r7:00000000 r6:85302780 r5:00000800 r4:dfd95f20 [ 2384.922030][T28010] [<8154441c>] (____sys_sendmsg) from [<8154667c>] (___sys_sendmsg+0x9c/0xd0) [ 2384.922103][T28010] r10:dfd95e24 r9:20001280 r8:00000800 r7:00000000 r6:85302780 r5:dfd95f20 [ 2384.922125][T28010] r4:00000000 [ 2384.922142][T28010] [<815465e0>] (___sys_sendmsg) from [<81546b14>] (__sys_sendmsg+0x8c/0xe0) [ 2384.922212][T28010] r10:00000128 r9:83add400 r8:847bd240 r7:00000800 r6:20001280 r5:847bd241 [ 2384.922233][T28010] r4:00000003 [ 2384.922249][T28010] [<81546a88>] (__sys_sendmsg) from [<81546b7c>] (sys_sendmsg+0x14/0x18) [ 2384.922309][T28010] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 2384.922327][T28010] [<81546b68>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2384.922376][T28010] Exception stack(0xdfd95fa8 to 0xdfd95ff0) [ 2384.922416][T28010] 5fa0: 00000000 00000000 00000003 20001280 00000800 00000000 [ 2384.922455][T28010] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8e0bc [ 2384.922484][T28010] 5fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2393.029426][T28016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28016 comm=syz.2.5929 [ 2393.053999][ T31] audit: type=1400 audit(2392.970:598): avc: denied { getopt } for pid=28014 comm="syz.3.5930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2393.149268][ T31] audit: type=1400 audit(2393.080:599): avc: denied { connect } for pid=28014 comm="syz.3.5930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2393.758032][ T31] audit: type=1400 audit(2393.690:600): avc: denied { ioctl } for pid=28022 comm="syz.3.5933" path="socket:[70831]" dev="sockfs" ino=70831 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2394.063446][T28027] SELinux: syz.2.5934 (28027) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2394.174270][T28028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28028 comm=syz.3.5935 [ 2397.987598][T28045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.992543][T28045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.411253][T28058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.412097][T28058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2404.247681][T28078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2404.250363][T28078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2406.043760][ T31] audit: type=1400 audit(2405.950:601): avc: denied { lock } for pid=28089 comm="syz.2.5955" path="socket:[70079]" dev="sockfs" ino=70079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2406.078147][T28090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2406.080363][T28090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.107433][T28096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2407.108259][T28096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.610827][T28102] FAULT_INJECTION: forcing a failure. [ 2407.610827][T28102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.611265][T28102] CPU: 1 UID: 0 PID: 28102 Comm: syz.3.5959 Not tainted syzkaller #0 PREEMPT [ 2407.611369][T28102] Hardware name: ARM-Versatile Express [ 2407.611408][T28102] Call trace: [ 2407.611461][T28102] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2407.611573][T28102] r7:dfe31e20 r6:00000000 r5:60000013 r4:82260500 [ 2407.611595][T28102] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2407.611740][T28102] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2407.611867][T28102] r5:8609d400 r4:8294f190 [ 2407.611936][T28102] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2407.612282][T28102] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2407.612463][T28102] r8:20000000 r7:dfe31e20 r6:20000080 r5:00000000 r4:dfe31f20 [ 2407.612817][T28102] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2407.613005][T28102] [<80972800>] (should_fail_usercopy) from [<81546500>] (copy_msghdr_from_user+0x50/0x130) [ 2407.613085][T28102] [<815464b0>] (copy_msghdr_from_user) from [<81546658>] (___sys_sendmsg+0x78/0xd0) [ 2407.613162][T28102] r8:20000000 r7:00000000 r6:8537d400 r5:dfe31f20 r4:dfe31e64 [ 2407.613466][T28102] [<815465e0>] (___sys_sendmsg) from [<81546b14>] (__sys_sendmsg+0x8c/0xe0) [ 2407.613787][T28102] r10:00000128 r9:8609d400 r8:84938cc0 r7:20000000 r6:20000080 r5:84938cc1 [ 2407.614009][T28102] r4:00000004 [ 2407.614224][T28102] [<81546a88>] (__sys_sendmsg) from [<81546b7c>] (sys_sendmsg+0x14/0x18) [ 2407.614472][T28102] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 2407.614623][T28102] [<81546b68>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2407.614837][T28102] Exception stack(0xdfe31fa8 to 0xdfe31ff0) [ 2407.614882][T28102] 1fa0: 00000000 00000000 00000004 20000080 20000000 00000000 [ 2407.614994][T28102] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76ffc0bc [ 2407.615293][T28102] 1fe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2407.922692][ T31] audit: type=1400 audit(2407.850:602): avc: denied { create } for pid=28103 comm="syz.2.5960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2408.912436][T28112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.914296][T28112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2411.423381][T28128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2411.425563][T28128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.567580][T28142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2415.569139][T28142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.749378][ T31] audit: type=1400 audit(2415.680:603): avc: denied { write } for pid=28146 comm="syz.3.5975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2417.768130][T28157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2417.769717][T28157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2419.977367][T28172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2419.980593][T28172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2422.456716][ T31] audit: type=1400 audit(2422.360:604): avc: denied { ioctl } for pid=28187 comm="syz.2.5988" path="socket:[70191]" dev="sockfs" ino=70191 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2423.546998][T28194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2423.553326][T28194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.703182][T28204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28204 comm=syz.3.5994 [ 2427.107174][T28212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2427.107821][T28212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2428.120084][ T31] audit: type=1400 audit(2428.050:605): avc: denied { setattr } for pid=28216 comm="syz.2.5998" name="NFC_LLCP" dev="sockfs" ino=71164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2430.198396][T28227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28227 comm=syz.2.5999 [ 2432.238256][T28234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2432.240860][T28234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2434.186880][T28242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28242 comm=syz.3.6004 [ 2434.488705][ T31] audit: type=1400 audit(2434.420:606): avc: denied { create } for pid=28243 comm="syz.3.6005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2434.978113][T28248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2434.979200][T28248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.101915][T28255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28255 comm=syz.3.6009 [ 2437.317702][T28267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2437.319778][T28267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2438.977577][T28274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28274 comm=syz.2.6015 [ 2439.737707][T28281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.740382][T28281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.410869][T28302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28302 comm=syz.3.6023 [ 2444.058056][T28304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.059756][T28304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.575191][ T31] audit: type=1400 audit(2445.490:607): avc: denied { setattr } for pid=28310 comm="syz.2.6027" name="NETLINK" dev="sockfs" ino=71277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2446.397036][T28318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28318 comm=syz.2.6029 [ 2448.233060][T28325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.234221][T28325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2450.200644][T28334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28334 comm=syz.2.6034 [ 2451.127310][T28342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2451.128464][T28342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.252982][T28354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28354 comm=syz.2.6042 [ 2459.118798][T28366] FAULT_INJECTION: forcing a failure. [ 2459.118798][T28366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.119231][T28366] CPU: 0 UID: 0 PID: 28366 Comm: syz.2.6046 Not tainted syzkaller #0 PREEMPT [ 2459.119341][T28366] Hardware name: ARM-Versatile Express [ 2459.119374][T28366] Call trace: [ 2459.119422][T28366] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2459.119537][T28366] r7:85eb8000 r6:00000000 r5:60000013 r4:82260500 [ 2459.119638][T28366] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2459.119820][T28366] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2459.120000][T28366] r5:83ae6c00 r4:8294f190 [ 2459.120118][T28366] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2459.120194][T28366] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2459.120265][T28366] r8:85bd3b00 r7:85eb8000 r6:e02b9e3c r5:00000004 r4:20000040 [ 2459.120336][T28366] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2459.120401][T28366] [<80972800>] (should_fail_usercopy) from [<8173e65c>] (copy_from_sockptr_offset+0x60/0x128) [ 2459.120477][T28366] [<8173e5fc>] (copy_from_sockptr_offset) from [<817454bc>] (do_tcp_setsockopt+0x88/0xc5c) [ 2459.120597][T28366] r7:85eb8000 r6:83ae6c00 r5:00000004 r4:00000013 [ 2459.120661][T28366] [<81745438>] (do_tcp_setsockopt) from [<817460e0>] (tcp_setsockopt+0x50/0x58) [ 2459.120854][T28366] r10:00000126 r9:83ae6c00 r8:00000004 r7:85303b80 r6:00000013 r5:00000006 [ 2459.121075][T28366] r4:81746090 [ 2459.121399][T28366] [<81746094>] (tcp_setsockopt) from [<815474e8>] (sock_common_setsockopt+0x38/0x40) [ 2459.121765][T28366] r4:81746090 [ 2459.121986][T28366] [<815474b4>] (sock_common_setsockopt) from [<81542b88>] (do_sock_setsockopt+0x70/0xc8) [ 2459.122197][T28366] r4:815474b0 [ 2459.122619][T28366] [<81542b18>] (do_sock_setsockopt) from [<81546140>] (__sys_setsockopt+0x7c/0xc4) [ 2459.123183][T28366] r8:00000000 r7:87144a80 r6:87144a81 r5:00000013 r4:00000006 [ 2459.123432][T28366] [<815460c4>] (__sys_setsockopt) from [<815461a4>] (sys_setsockopt+0x1c/0x24) [ 2459.123562][T28366] r8:8020029c r7:00000126 r6:00130270 r5:00000000 r4:00000004 [ 2459.123586][T28366] [<81546188>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2459.123833][T28366] Exception stack(0xe02b9fa8 to 0xe02b9ff0) [ 2459.123884][T28366] 9fa0: 00000004 00000000 00000003 00000006 00000013 20000040 [ 2459.123919][T28366] 9fc0: 00000004 00000000 00130270 00000126 002e0000 00000000 00006364 76f8e0bc [ 2459.124182][T28366] 9fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2460.767840][T28370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28370 comm=syz.2.6048 [ 2466.397583][T28381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28381 comm=syz.2.6053 [ 2480.722334][T28393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28393 comm=syz.3.6058 [ 2483.430889][T28404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28404 comm=syz.3.6063 [ 2485.668195][ T31] audit: type=1400 audit(2485.600:608): avc: denied { accept } for pid=28413 comm="syz.3.6066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2486.450691][T28418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28418 comm=syz.3.6068 [ 2487.378046][T28422] FAULT_INJECTION: forcing a failure. [ 2487.378046][T28422] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.427017][T28422] CPU: 1 UID: 0 PID: 28422 Comm: syz.3.6069 Not tainted syzkaller #0 PREEMPT [ 2487.427117][T28422] Hardware name: ARM-Versatile Express [ 2487.427160][T28422] Call trace: [ 2487.427208][T28422] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2487.427276][T28422] r7:00000d40 r6:00000000 r5:60000113 r4:82260500 [ 2487.427286][T28422] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2487.427315][T28422] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2487.427370][T28422] r5:83ad9800 r4:82917c00 [ 2487.427378][T28422] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2487.427422][T28422] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2487.427492][T28422] r8:83ad9800 r7:00000d40 r6:83d293e8 r5:00000019 r4:83001240 [ 2487.427504][T28422] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2487.427532][T28422] [<80503b58>] (__kmalloc_noprof) from [<807c3524>] (tomoyo_encode2+0x64/0xf0) [ 2487.427570][T28422] r10:00000fff r9:8309f800 r8:00000000 r7:836a1aa0 r6:83d293e8 r5:85df6ffd [ 2487.427592][T28422] r4:85df6fef [ 2487.427600][T28422] [<807c34c0>] (tomoyo_encode2) from [<807c35d4>] (tomoyo_encode+0x24/0x30) [ 2487.427636][T28422] r9:8309f800 r8:00000000 r7:836a1aa0 r6:83d293e8 r5:00001000 r4:85df6ff0 [ 2487.427645][T28422] [<807c35b0>] (tomoyo_encode) from [<807c3660>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2487.427673][T28422] r5:00001000 r4:85df6000 [ 2487.427680][T28422] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2487.427714][T28422] r10:83ad9800 r9:00000000 r8:83d293c0 r7:00004c81 r6:00000004 r5:81cd6504 [ 2487.427728][T28422] r4:83d293e8 r3:826c0200 [ 2487.427736][T28422] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2487.427771][T28422] r9:00000003 r8:83d293c0 r7:00000000 r6:00000000 r5:00004c81 r4:83d293c0 [ 2487.427780][T28422] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2487.427812][T28422] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2487.427845][T28422] r7:00000000 r6:83d293c1 r5:00000000 r4:00004c81 [ 2487.427854][T28422] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2487.427879][T28422] Exception stack(0xe0309fa8 to 0xe0309ff0) [ 2487.427900][T28422] 9fa0: 00000000 00000000 00000003 00004c81 00000000 00000000 [ 2487.427918][T28422] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76fdb0bc [ 2487.427941][T28422] 9fe0: 76fdaec0 76fdaeb0 0001948c 001322c0 [ 2487.427982][T28422] r10:00000036 r9:83ad9800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2487.427994][T28422] r4:00000000 [ 2487.440906][T28422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2491.179909][T28433] FAULT_INJECTION: forcing a failure. [ 2491.179909][T28433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2491.181267][T28433] CPU: 1 UID: 0 PID: 28433 Comm: syz.3.6071 Not tainted syzkaller #0 PREEMPT [ 2491.181385][T28433] Hardware name: ARM-Versatile Express [ 2491.181409][T28433] Call trace: [ 2491.181446][T28433] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2491.181536][T28433] r7:00000000 r6:00000000 r5:60000013 r4:82260500 [ 2491.181552][T28433] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2491.181600][T28433] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2491.181650][T28433] r5:83885400 r4:8294f190 [ 2491.181664][T28433] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2491.181715][T28433] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2491.181774][T28433] r8:76ffbf30 r7:00000000 r6:00000000 r5:e02e5f68 r4:00000002 [ 2491.181788][T28433] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2491.181834][T28433] [<80972800>] (should_fail_usercopy) from [<8058e61c>] (simple_read_from_buffer+0x80/0x13c) [ 2491.181888][T28433] [<8058e59c>] (simple_read_from_buffer) from [<80608614>] (proc_fail_nth_read+0xb8/0x108) [ 2491.181952][T28433] r10:00000001 r9:8060855c r8:00000002 r7:e02e5f68 r6:0000000f r5:76ffbf30 [ 2491.181972][T28433] r4:83885400 r3:e02e5e9f [ 2491.181986][T28433] [<8060855c>] (proc_fail_nth_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2491.182047][T28433] r8:76ffbf30 r7:e02e5f68 r6:83885400 r5:0000000f r4:83d29900 [ 2491.182062][T28433] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2491.182123][T28433] r10:00000003 r9:83885400 r8:8020029c r7:00000000 r6:00000000 r5:83d29900 [ 2491.182141][T28433] r4:83d29903 [ 2491.182155][T28433] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2491.182210][T28433] r7:00000003 r6:00000004 r5:76ffbf30 r4:0000000f [ 2491.182225][T28433] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2491.182269][T28433] Exception stack(0xe02e5fa8 to 0xe02e5ff0) [ 2491.182302][T28433] 5fa0: 0000000f 76ffbf30 00000004 76ffbf30 0000000f 00000000 [ 2491.182338][T28433] 5fc0: 0000000f 76ffbf30 00000004 00000003 002e0000 00000000 00006364 76ffc0bc [ 2491.182363][T28433] 5fe0: 00000158 76ffbed0 000d80f0 00130194 [ 2491.877310][T28437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28437 comm=syz.3.6073 [ 2495.398973][T28448] fuse: Bad value for 'rootmode' [ 2500.588472][T28472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2500.591101][T28472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2501.397769][T28477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28477 comm=syz.3.6078 [ 2510.408391][ T31] audit: type=1400 audit(2510.340:609): avc: denied { bind } for pid=28484 comm="syz.2.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2510.527365][ T31] audit: type=1400 audit(2510.440:610): avc: denied { listen } for pid=28484 comm="syz.2.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2510.531072][ T31] audit: type=1400 audit(2510.460:611): avc: denied { connect } for pid=28484 comm="syz.2.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2510.599417][ T31] audit: type=1400 audit(2510.530:612): avc: denied { read } for pid=28484 comm="syz.2.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.487431][T28492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28492 comm=syz.2.6083 [ 2517.937836][T28497] FAULT_INJECTION: forcing a failure. [ 2517.937836][T28497] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.938054][T28497] CPU: 0 UID: 0 PID: 28497 Comm: syz.2.6085 Not tainted syzkaller #0 PREEMPT [ 2517.938106][T28497] Hardware name: ARM-Versatile Express [ 2517.938122][T28497] Call trace: [ 2517.938152][T28497] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2517.938215][T28497] r7:00000c40 r6:00000000 r5:60000013 r4:82260500 [ 2517.938225][T28497] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2517.938254][T28497] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2517.938284][T28497] r5:84b61800 r4:82917c00 [ 2517.938292][T28497] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2517.938324][T28497] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2517.938360][T28497] r8:84b61800 r7:00000c40 r6:85687f28 r5:00001000 r4:830016c0 [ 2517.938370][T28497] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2517.938396][T28497] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2517.938434][T28497] r10:84b61800 r9:8309e400 r8:00000000 r7:834d6660 r6:85687f28 r5:00001000 [ 2517.938444][T28497] r4:00000000 [ 2517.938453][T28497] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2517.938488][T28497] r10:84b61800 r9:00000000 r8:85687f00 r7:c0186416 r6:00000004 r5:81cd6504 [ 2517.938500][T28497] r4:85687f28 r3:826c0200 [ 2517.938509][T28497] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2517.938964][T28497] r9:00000003 r8:85687f00 r7:00000000 r6:00000000 r5:c0186416 r4:85687f00 [ 2517.939267][T28497] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2517.940402][T28497] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2517.940442][T28497] r7:00000000 r6:85687f01 r5:00000000 r4:c0186416 [ 2517.940751][T28497] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2517.941275][T28497] Exception stack(0xe03c5fa8 to 0xe03c5ff0) [ 2517.941386][T28497] 5fa0: 00000000 00000000 00000003 c0186416 00000000 00000000 [ 2517.941436][T28497] 5fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 2517.941451][T28497] 5fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2517.941471][T28497] r10:00000036 r9:84b61800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2517.941499][T28497] r4:00000000 [ 2518.147200][T28497] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2519.717229][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2519.720723][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.288003][T28525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.291997][T28525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.112095][ T31] audit: type=1400 audit(2527.020:613): avc: denied { setopt } for pid=28534 comm="syz.3.6095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2530.837222][T28546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28546 comm=syz.3.6096 [ 2532.067193][T28551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2532.072050][T28551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2539.460526][ T31] audit: type=1400 audit(2539.370:614): avc: denied { read } for pid=28561 comm="syz.3.6100" path="socket:[71892]" dev="sockfs" ino=71892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2540.238785][T28574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28574 comm=syz.2.6101 [ 2540.327666][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2540.329450][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2541.097354][ T31] audit: type=1400 audit(2541.020:615): avc: denied { map } for pid=28561 comm="syz.3.6100" path="socket:[71892]" dev="sockfs" ino=71892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2552.089587][ T31] audit: type=1400 audit(2552.020:616): avc: denied { map_create } for pid=28592 comm="syz.3.6105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2552.097365][ T31] audit: type=1400 audit(2552.020:617): avc: denied { map_read map_write } for pid=28592 comm="syz.3.6105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2552.249145][T28593] FAULT_INJECTION: forcing a failure. [ 2552.249145][T28593] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.277401][T28593] CPU: 1 UID: 0 PID: 28593 Comm: syz.3.6105 Not tainted syzkaller #0 PREEMPT [ 2552.277580][T28593] Hardware name: ARM-Versatile Express [ 2552.277624][T28593] Call trace: [ 2552.277685][T28593] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2552.277817][T28593] r7:00000c40 r6:00000000 r5:60000113 r4:82260500 [ 2552.277841][T28593] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2552.277987][T28593] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2552.278101][T28593] r5:83885400 r4:82917c00 [ 2552.278121][T28593] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2552.278186][T28593] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2552.278270][T28593] r8:83885400 r7:00000c40 r6:87144028 r5:00001000 r4:830016c0 [ 2552.278294][T28593] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2552.278356][T28593] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2552.278436][T28593] r10:83885400 r9:833d2800 r8:00000000 r7:8365e880 r6:87144028 r5:00001000 [ 2552.278458][T28593] r4:00000000 [ 2552.278475][T28593] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2552.278557][T28593] r10:83885400 r9:00000000 r8:87144000 r7:00005452 r6:00000004 r5:81cd6504 [ 2552.278586][T28593] r4:87144028 r3:826c0200 [ 2552.278622][T28593] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2552.278696][T28593] r9:00000003 r8:87144000 r7:20000800 r6:20000800 r5:00005452 r4:87144000 [ 2552.278716][T28593] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2552.278771][T28593] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2552.278839][T28593] r7:20000800 r6:87144001 r5:00000000 r4:00005452 [ 2552.278857][T28593] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2552.278907][T28593] Exception stack(0xe03fdfa8 to 0xe03fdff0) [ 2552.278946][T28593] dfa0: 00000000 00000000 00000003 00005452 20000800 00000000 [ 2552.278984][T28593] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76ffc0bc [ 2552.279013][T28593] dfe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2552.279053][T28593] r10:00000036 r9:83885400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2552.279074][T28593] r4:00000000 [ 2552.308597][T28593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2553.197891][T28595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37644 sclass=netlink_route_socket pid=28595 comm=syz.3.6106 [ 2556.336690][ T31] audit: type=1400 audit(2556.260:618): avc: denied { setopt } for pid=28601 comm="syz.3.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2556.850268][ T31] audit: type=1400 audit(2556.780:619): avc: denied { create } for pid=28601 comm="syz.3.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2561.227361][ T31] audit: type=1400 audit(2561.130:620): avc: denied { write } for pid=28608 comm="syz.3.6111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2562.781757][T28614] FAULT_INJECTION: forcing a failure. [ 2562.781757][T28614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2562.807104][T28614] CPU: 1 UID: 0 PID: 28614 Comm: syz.3.6113 Not tainted syzkaller #0 PREEMPT [ 2562.807292][T28614] Hardware name: ARM-Versatile Express [ 2562.807318][T28614] Call trace: [ 2562.807382][T28614] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2562.807483][T28614] r7:00000000 r6:00000000 r5:60000113 r4:82260500 [ 2562.807499][T28614] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2562.807547][T28614] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2562.807597][T28614] r5:83875400 r4:8294f190 [ 2562.807610][T28614] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2562.807661][T28614] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2562.807719][T28614] r8:76ffbf30 r7:00000000 r6:00000000 r5:e047df68 r4:00000002 [ 2562.807734][T28614] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2562.807779][T28614] [<80972800>] (should_fail_usercopy) from [<8058e61c>] (simple_read_from_buffer+0x80/0x13c) [ 2562.807831][T28614] [<8058e59c>] (simple_read_from_buffer) from [<80608614>] (proc_fail_nth_read+0xb8/0x108) [ 2562.807893][T28614] r10:00000001 r9:8060855c r8:00000002 r7:e047df68 r6:0000000f r5:76ffbf30 [ 2562.807913][T28614] r4:83875400 r3:e047de9f [ 2562.807927][T28614] [<8060855c>] (proc_fail_nth_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2562.807986][T28614] r8:76ffbf30 r7:e047df68 r6:83875400 r5:0000000f r4:884f9000 [ 2562.808001][T28614] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2562.808061][T28614] r10:00000003 r9:83875400 r8:8020029c r7:00000000 r6:00000000 r5:884f9000 [ 2562.808078][T28614] r4:884f9003 [ 2562.808091][T28614] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2562.808146][T28614] r7:00000003 r6:00000004 r5:76ffbf30 r4:0000000f [ 2562.808160][T28614] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2562.808202][T28614] Exception stack(0xe047dfa8 to 0xe047dff0) [ 2562.808235][T28614] dfa0: 0000000f 76ffbf30 00000004 76ffbf30 0000000f 00000000 [ 2562.808265][T28614] dfc0: 0000000f 76ffbf30 00000004 00000003 002e0000 00000000 00006364 76ffc0bc [ 2562.808288][T28614] dfe0: 00000158 76ffbed0 000d80f0 00130194 [ 2569.998484][ T31] audit: type=1400 audit(2569.930:621): avc: denied { write } for pid=28629 comm="syz.3.6118" path="socket:[71673]" dev="sockfs" ino=71673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2571.180334][ T31] audit: type=1400 audit(2571.110:622): avc: denied { create } for pid=28635 comm="syz.2.6121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2577.169155][ T31] audit: type=1400 audit(2577.100:623): avc: denied { create } for pid=28654 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2578.400626][T28659] FAULT_INJECTION: forcing a failure. [ 2578.400626][T28659] name failslab, interval 1, probability 0, space 0, times 0 [ 2578.447655][T28659] CPU: 1 UID: 0 PID: 28659 Comm: syz.3.6129 Not tainted syzkaller #0 PREEMPT [ 2578.447806][T28659] Hardware name: ARM-Versatile Express [ 2578.447830][T28659] Call trace: [ 2578.447878][T28659] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2578.447978][T28659] r7:00000c40 r6:00000000 r5:60000013 r4:82260500 [ 2578.447994][T28659] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2578.448040][T28659] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2578.448090][T28659] r5:83875400 r4:82917c00 [ 2578.448103][T28659] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2578.448154][T28659] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2578.448215][T28659] r8:83875400 r7:00000c40 r6:884f9028 r5:00001000 r4:830016c0 [ 2578.448230][T28659] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2578.448273][T28659] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2578.448336][T28659] r10:83875400 r9:8309e400 r8:00000000 r7:834f33b8 r6:884f9028 r5:00001000 [ 2578.448353][T28659] r4:00000000 [ 2578.448367][T28659] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2578.448425][T28659] r10:83875400 r9:00000000 r8:884f9000 r7:c01864b0 r6:00000004 r5:81cd6504 [ 2578.448452][T28659] r4:884f9028 r3:826c0200 [ 2578.448466][T28659] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2578.448524][T28659] r9:00000004 r8:884f9000 r7:00000000 r6:00000000 r5:c01864b0 r4:884f9000 [ 2578.448540][T28659] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2578.448586][T28659] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2578.448641][T28659] r7:00000000 r6:884f9001 r5:00000000 r4:c01864b0 [ 2578.448656][T28659] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2578.448697][T28659] Exception stack(0xe04c9fa8 to 0xe04c9ff0) [ 2578.448731][T28659] 9fa0: 00000000 00000000 00000004 c01864b0 00000000 00000000 [ 2578.448761][T28659] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76ffc0bc [ 2578.448785][T28659] 9fe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2578.448817][T28659] r10:00000036 r9:83875400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2578.448834][T28659] r4:00000000 [ 2578.487563][T28659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2580.317354][ T31] audit: type=1400 audit(2580.160:624): avc: denied { write } for pid=28667 comm="syz.2.6133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2582.067015][T28672] FAULT_INJECTION: forcing a failure. [ 2582.067015][T28672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2582.067290][T28672] CPU: 0 UID: 0 PID: 28672 Comm: syz.2.6135 Not tainted syzkaller #0 PREEMPT [ 2582.067397][T28672] Hardware name: ARM-Versatile Express [ 2582.067413][T28672] Call trace: [ 2582.067447][T28672] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2582.067526][T28672] r7:00000000 r6:00000000 r5:60000013 r4:82260500 [ 2582.067548][T28672] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2582.067586][T28672] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2582.067616][T28672] r5:84b61800 r4:8294f190 [ 2582.067623][T28672] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2582.067654][T28672] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2582.067705][T28672] r8:e0489eb8 r7:00000000 r6:00000001 r5:76f8df30 r4:00000001 [ 2582.067729][T28672] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2582.067782][T28672] [<80972800>] (should_fail_usercopy) from [<808bedf0>] (kstrtouint_from_user+0x54/0x13c) [ 2582.067815][T28672] [<808bed9c>] (kstrtouint_from_user) from [<80609bdc>] (proc_fail_nth_write+0x40/0xf0) [ 2582.068016][T28672] r8:e0489f68 r7:84b61800 r6:00000001 r5:87144180 r4:00000001 [ 2582.068225][T28672] [<80609b9c>] (proc_fail_nth_write) from [<80553d68>] (vfs_write+0xac/0x44c) [ 2582.068332][T28672] r5:87144180 r4:80609b9c [ 2582.068498][T28672] [<80553cbc>] (vfs_write) from [<80554278>] (ksys_write+0x74/0xe8) [ 2582.068562][T28672] r10:00000004 r9:84b61800 r8:8020029c r7:00000000 r6:00000002 r5:87144180 [ 2582.069066][T28672] r4:87144183 [ 2582.069279][T28672] [<80554204>] (ksys_write) from [<805542fc>] (sys_write+0x10/0x14) [ 2582.069397][T28672] r7:00000004 r6:00000004 r5:76f8df30 r4:00000001 [ 2582.069504][T28672] [<805542ec>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2582.069552][T28672] Exception stack(0xe0489fa8 to 0xe0489ff0) [ 2582.069623][T28672] 9fa0: 00000001 76f8df30 00000004 76f8df30 00000001 00000000 [ 2582.069659][T28672] 9fc0: 00000001 76f8df30 00000004 00000004 002e0000 00000000 00006364 76f8e0bc [ 2582.069673][T28672] 9fe0: 00000158 76f8ded0 000d80f0 0013025c [ 2583.762823][ T31] audit: type=1400 audit(2583.690:625): avc: denied { getopt } for pid=28674 comm="syz.2.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2593.178907][T28702] FAULT_INJECTION: forcing a failure. [ 2593.178907][T28702] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.179323][T28702] CPU: 0 UID: 0 PID: 28702 Comm: syz.3.6146 Not tainted syzkaller #0 PREEMPT [ 2593.179420][T28702] Hardware name: ARM-Versatile Express [ 2593.179451][T28702] Call trace: [ 2593.179508][T28702] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2593.179623][T28702] r7:00000dc0 r6:00000000 r5:60000013 r4:82260500 [ 2593.179701][T28702] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2593.179857][T28702] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2593.179949][T28702] r5:83a52400 r4:82917c00 [ 2593.179986][T28702] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2593.180079][T28702] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2593.180160][T28702] r8:83a52400 r7:00000dc0 r6:8617bd94 r5:00000064 r4:83001300 [ 2593.180184][T28702] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2593.180287][T28702] [<80503b58>] (__kmalloc_noprof) from [<8144ff2c>] (constrain_params_by_rules+0x88/0x500) [ 2593.180373][T28702] r10:e0511cf8 r9:8617bc00 r8:0000000c r7:86179800 r6:8617bd94 r5:00000014 [ 2593.180424][T28702] r4:00000000 [ 2593.180454][T28702] [<8144fea4>] (constrain_params_by_rules) from [<8145058c>] (snd_pcm_hw_refine+0x1e8/0x41c) [ 2593.180573][T28702] r10:e0511cf8 r9:824656d0 r8:0000000c r7:86179a30 r6:8617bd94 r5:00000014 [ 2593.180601][T28702] r4:8617bc00 [ 2593.180648][T28702] [<814503a4>] (snd_pcm_hw_refine) from [<814577c0>] (snd_pcm_hw_param_last+0x188/0x1fc) [ 2593.180737][T28702] r10:00001000 r9:824656d0 r8:00000003 r7:8463bd00 r6:00000000 r5:0000000f [ 2593.180759][T28702] r4:8617bc00 [ 2593.180778][T28702] [<81457638>] (snd_pcm_hw_param_last) from [<814693b4>] (snd_pcm_hw_param_near.constprop.0+0x240/0x274) [ 2593.180862][T28702] r10:00001000 r9:824656d0 r8:8463bd00 r7:0000000f r6:86179c00 r5:00000100 [ 2593.180889][T28702] r4:8617bc00 r3:00000000 [ 2593.180908][T28702] [<81469174>] (snd_pcm_hw_param_near.constprop.0) from [<81469d60>] (snd_pcm_oss_change_params_locked+0x6c0/0xc84) [ 2593.181008][T28702] r10:00001000 r9:00200000 r8:86179800 r7:00000001 r6:00001000 r5:8463bd00 [ 2593.181055][T28702] r4:8617bc00 [ 2593.181092][T28702] [<814696a0>] (snd_pcm_oss_change_params_locked) from [<8146a360>] (snd_pcm_oss_make_ready_locked+0x3c/0x54) [ 2593.181206][T28702] r10:200061c0 r9:00000000 r8:00002020 r7:83a52400 r6:86179ab8 r5:86179800 [ 2593.181232][T28702] r4:8463bd00 [ 2593.181248][T28702] [<8146a324>] (snd_pcm_oss_make_ready_locked) from [<8146cc00>] (snd_pcm_oss_read+0x164/0x2e8) [ 2593.181342][T28702] r5:86179800 r4:83a52400 [ 2593.181367][T28702] [<8146ca9c>] (snd_pcm_oss_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2593.181488][T28702] r10:00000001 r9:8146ca9c r8:200061c0 r7:e0511f68 r6:83a52400 r5:00002020 [ 2593.181520][T28702] r4:884f9000 [ 2593.181569][T28702] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2593.181664][T28702] r10:00000003 r9:83a52400 r8:8020029c r7:00000000 r6:00000000 r5:884f9000 [ 2593.181713][T28702] r4:884f9001 [ 2593.181759][T28702] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2593.181826][T28702] r7:00000003 r6:00130270 r5:00000000 r4:00000000 [ 2593.181847][T28702] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2593.181964][T28702] Exception stack(0xe0511fa8 to 0xe0511ff0) [ 2593.182024][T28702] 1fa0: 00000000 00000000 00000003 200061c0 00002020 00000000 [ 2593.182095][T28702] 1fc0: 00000000 00000000 00130270 00000003 002e0000 00000000 00006364 76ffc0bc [ 2593.182148][T28702] 1fe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2608.981764][T28717] FAULT_INJECTION: forcing a failure. [ 2608.981764][T28717] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.982166][T28717] CPU: 0 UID: 0 PID: 28717 Comm: syz.3.6151 Not tainted syzkaller #0 PREEMPT [ 2608.982276][T28717] Hardware name: ARM-Versatile Express [ 2608.982307][T28717] Call trace: [ 2608.982361][T28717] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2608.982479][T28717] r7:00000d40 r6:00000000 r5:60000013 r4:82260500 [ 2608.982504][T28717] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2608.982564][T28717] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2608.982629][T28717] r5:83ac2400 r4:82917c00 [ 2608.982648][T28717] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2608.982722][T28717] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2608.982801][T28717] r8:83ac2400 r7:00000d40 r6:884f93e8 r5:00000024 r4:83001240 [ 2608.982822][T28717] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2608.982879][T28717] [<80503b58>] (__kmalloc_noprof) from [<807c3524>] (tomoyo_encode2+0x64/0xf0) [ 2608.982955][T28717] r10:00000fff r9:8309e400 r8:00000000 r7:8341ac38 r6:884f93e8 r5:884ceffc [ 2608.982979][T28717] r4:884cefe3 [ 2608.982998][T28717] [<807c34c0>] (tomoyo_encode2) from [<807c35d4>] (tomoyo_encode+0x24/0x30) [ 2608.983072][T28717] r9:8309e400 r8:00000000 r7:8341ac38 r6:884f93e8 r5:00001000 r4:884cefe4 [ 2608.983095][T28717] [<807c35b0>] (tomoyo_encode) from [<807c3660>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2608.983190][T28717] r5:00001000 r4:884ce000 [ 2608.983210][T28717] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2608.983285][T28717] r10:83ac2400 r9:00000000 r8:884f93c0 r7:40044591 r6:00000004 r5:81cd6504 [ 2608.983313][T28717] r4:884f93e8 r3:826c0200 [ 2608.983333][T28717] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2608.983410][T28717] r9:00000003 r8:884f93c0 r7:00000000 r6:00000000 r5:40044591 r4:884f93c0 [ 2608.983434][T28717] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2608.983496][T28717] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2608.983566][T28717] r7:00000000 r6:884f93c1 r5:00000000 r4:40044591 [ 2608.983588][T28717] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2608.983641][T28717] Exception stack(0xe052dfa8 to 0xe052dff0) [ 2608.983694][T28717] dfa0: 00000000 00000000 00000003 40044591 00000000 00000000 [ 2608.983736][T28717] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76ffc0bc [ 2608.983767][T28717] dfe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2608.983808][T28717] r10:00000036 r9:83ac2400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2608.983832][T28717] r4:00000000 [ 2609.167080][T28717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2611.887499][ T31] audit: type=1400 audit(2611.810:626): avc: denied { create } for pid=28731 comm="syz.3.6156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2611.948390][T28732] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 2611.948682][T28732] audit: out of memory in audit_log_start [ 2616.263111][ T31] audit: type=1400 audit(2616.190:627): avc: denied { setopt } for pid=28742 comm="syz.3.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2617.808117][T28747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28747 comm=syz.3.6162 [ 2617.868439][ T31] audit: type=1400 audit(2617.800:628): avc: denied { nlmsg_read } for pid=28746 comm="syz.3.6162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2629.309108][T28784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1540 sclass=netlink_audit_socket pid=28784 comm=syz.2.6176 [ 2641.682279][T28811] FAULT_INJECTION: forcing a failure. [ 2641.682279][T28811] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.682600][T28811] CPU: 0 UID: 0 PID: 28811 Comm: syz.2.6187 Not tainted syzkaller #0 PREEMPT [ 2641.682659][T28811] Hardware name: ARM-Versatile Express [ 2641.682674][T28811] Call trace: [ 2641.682703][T28811] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2641.682807][T28811] r7:00000c40 r6:00000000 r5:60000013 r4:82260500 [ 2641.682831][T28811] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2641.682865][T28811] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2641.682894][T28811] r5:84b62400 r4:82917c00 [ 2641.682902][T28811] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2641.682935][T28811] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2641.682972][T28811] r8:84b62400 r7:00000c40 r6:884f9568 r5:00001000 r4:830016c0 [ 2641.682982][T28811] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2641.683009][T28811] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2641.683080][T28811] r10:84b62400 r9:8309e400 r8:00000000 r7:83415a18 r6:884f9568 r5:00001000 [ 2641.683116][T28811] r4:00000000 [ 2641.683127][T28811] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2641.683317][T28811] r10:84b62400 r9:00000000 r8:884f9540 r7:80041272 r6:00000004 r5:81cd6504 [ 2641.683347][T28811] r4:884f9568 r3:826c0200 [ 2641.683373][T28811] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2641.683607][T28811] r9:00000003 r8:884f9540 r7:20000180 r6:20000180 r5:80041272 r4:884f9540 [ 2641.683691][T28811] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2641.683730][T28811] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2641.683823][T28811] r7:20000180 r6:884f9541 r5:00000000 r4:80041272 [ 2641.683867][T28811] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2641.683901][T28811] Exception stack(0xe0579fa8 to 0xe0579ff0) [ 2641.683922][T28811] 9fa0: 00000000 00000000 00000003 80041272 20000180 00000000 [ 2641.683940][T28811] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 2641.683955][T28811] 9fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2641.684003][T28811] r10:00000036 r9:84b62400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2641.684017][T28811] r4:00000000 [ 2641.684223][T28811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2641.684729][ T31] audit: type=1400 audit(2641.610:629): avc: denied { ioctl } for pid=28810 comm="syz.2.6187" path="/dev/nbd2" dev="devtmpfs" ino=637 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2647.067012][ T31] audit: type=1400 audit(2646.980:630): avc: denied { ioctl } for pid=28817 comm="syz.2.6190" path="socket:[72380]" dev="sockfs" ino=72380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2647.367738][ T31] audit: type=1400 audit(2647.300:631): avc: denied { getopt } for pid=28817 comm="syz.2.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2649.707971][ T31] audit: type=1400 audit(2649.620:632): avc: denied { ioctl } for pid=28826 comm="syz.3.6192" path="socket:[73038]" dev="sockfs" ino=73038 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2656.212177][T28856] FAULT_INJECTION: forcing a failure. [ 2656.212177][T28856] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.212586][T28856] CPU: 0 UID: 0 PID: 28856 Comm: syz.2.6199 Not tainted syzkaller #0 PREEMPT [ 2656.212700][T28856] Hardware name: ARM-Versatile Express [ 2656.212731][T28856] Call trace: [ 2656.212785][T28856] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2656.212964][T28856] r7:00000c40 r6:00000000 r5:60000013 r4:82260500 [ 2656.213009][T28856] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2656.213112][T28856] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2656.213225][T28856] r5:83ac2400 r4:82917c00 [ 2656.213307][T28856] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2656.213375][T28856] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2656.213507][T28856] r8:83ac2400 r7:00000c40 r6:884f99e8 r5:00001000 r4:830016c0 [ 2656.213567][T28856] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2656.213651][T28856] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2656.213725][T28856] r10:83ac2400 r9:8309e400 r8:00000000 r7:8340fe58 r6:884f99e8 r5:00001000 [ 2656.213812][T28856] r4:00000000 [ 2656.213920][T28856] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2656.214069][T28856] r10:83ac2400 r9:00000000 r8:884f99c0 r7:00005450 r6:00000004 r5:81cd6504 [ 2656.214135][T28856] r4:884f99e8 r3:826c0200 [ 2656.214219][T28856] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2656.214296][T28856] r9:00000003 r8:884f99c0 r7:00000000 r6:00000000 r5:00005450 r4:884f99c0 [ 2656.214319][T28856] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2656.214450][T28856] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2656.214622][T28856] r7:00000000 r6:884f99c1 r5:00000000 r4:00005450 [ 2656.214730][T28856] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2656.214868][T28856] Exception stack(0xe8651fa8 to 0xe8651ff0) [ 2656.214970][T28856] 1fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 2656.215048][T28856] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 2656.215080][T28856] 1fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2656.215180][T28856] r10:00000036 r9:83ac2400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2656.215296][T28856] r4:00000000 [ 2656.446952][T28856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2664.450929][ T31] audit: type=1400 audit(2664.380:633): avc: denied { mounton } for pid=28878 comm="syz.2.6207" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2667.554713][ T31] audit: type=1400 audit(2667.480:634): avc: denied { getopt } for pid=28889 comm="syz.3.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2679.801068][T28934] FAULT_INJECTION: forcing a failure. [ 2679.801068][T28934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2679.817240][T28934] CPU: 1 UID: 0 PID: 28934 Comm: syz.3.6221 Not tainted syzkaller #0 PREEMPT [ 2679.817339][T28934] Hardware name: ARM-Versatile Express [ 2679.817355][T28934] Call trace: [ 2679.817386][T28934] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2679.817467][T28934] r7:00000000 r6:00000000 r5:60000013 r4:82260500 [ 2679.817477][T28934] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2679.817507][T28934] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2679.817537][T28934] r5:8320ec00 r4:8294f190 [ 2679.817545][T28934] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2679.817577][T28934] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2679.817611][T28934] r8:76ffbf30 r7:00000000 r6:00000000 r5:ea6b9f68 r4:00000002 [ 2679.817620][T28934] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2679.817648][T28934] [<80972800>] (should_fail_usercopy) from [<8058e61c>] (simple_read_from_buffer+0x80/0x13c) [ 2679.817680][T28934] [<8058e59c>] (simple_read_from_buffer) from [<80608614>] (proc_fail_nth_read+0xb8/0x108) [ 2679.817719][T28934] r10:00000001 r9:8060855c r8:00000002 r7:ea6b9f68 r6:0000000f r5:76ffbf30 [ 2679.817731][T28934] r4:8320ec00 r3:ea6b9e9f [ 2679.817740][T28934] [<8060855c>] (proc_fail_nth_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2679.817777][T28934] r8:76ffbf30 r7:ea6b9f68 r6:8320ec00 r5:0000000f r4:847bd000 [ 2679.817787][T28934] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2679.817823][T28934] r10:00000003 r9:8320ec00 r8:8020029c r7:00000000 r6:00000000 r5:847bd000 [ 2679.817834][T28934] r4:847bd003 [ 2679.817842][T28934] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2679.817875][T28934] r7:00000003 r6:00000005 r5:76ffbf30 r4:0000000f [ 2679.817883][T28934] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2679.817909][T28934] Exception stack(0xea6b9fa8 to 0xea6b9ff0) [ 2679.817929][T28934] 9fa0: 0000000f 76ffbf30 00000005 76ffbf30 0000000f 00000000 [ 2679.817947][T28934] 9fc0: 0000000f 76ffbf30 00000005 00000003 002e0000 00000000 00006364 76ffc0bc [ 2679.817961][T28934] 9fe0: 00000158 76ffbed0 000d80f0 00130194 [ 2696.877536][ T31] audit: type=1400 audit(2696.800:635): avc: denied { name_bind } for pid=28942 comm="syz.3.6224" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2697.540293][ T31] audit: type=1400 audit(2697.470:636): avc: denied { getopt } for pid=28942 comm="syz.3.6224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2697.879057][ T31] audit: type=1400 audit(2697.810:637): avc: denied { ioctl } for pid=28942 comm="syz.3.6224" path="socket:[73202]" dev="sockfs" ino=73202 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2698.206844][ T31] audit: type=1400 audit(2698.130:638): avc: denied { bind } for pid=28942 comm="syz.3.6224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2700.011677][ T31] audit: type=1400 audit(2699.940:639): avc: denied { setopt } for pid=28953 comm="syz.2.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2706.209054][T28970] FAULT_INJECTION: forcing a failure. [ 2706.209054][T28970] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.209393][T28970] CPU: 0 UID: 0 PID: 28970 Comm: syz.2.6231 Not tainted syzkaller #0 PREEMPT [ 2706.209488][T28970] Hardware name: ARM-Versatile Express [ 2706.209517][T28970] Call trace: [ 2706.209626][T28970] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2706.209753][T28970] r7:83a52400 r6:00000000 r5:60000013 r4:82260500 [ 2706.209779][T28970] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2706.209889][T28970] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2706.210550][T28970] r5:83a52400 r4:82917c00 [ 2706.210609][T28970] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2706.210691][T28970] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2706.210770][T28970] r8:00000000 r7:83a52400 r6:00000cc0 r5:8462cd00 r4:83001540 [ 2706.210896][T28970] [<8051f1f4>] (should_failslab) from [<80502c24>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 2706.210961][T28970] [<80502bd8>] (__kmalloc_cache_noprof) from [<81469750>] (snd_pcm_oss_change_params_locked+0xb0/0xc84) [ 2706.211133][T28970] r10:83a52400 r9:ea6f9ea8 r8:8496ac00 r7:8496a800 r6:824656d0 r5:8462cd00 [ 2706.211474][T28970] r4:859cb700 [ 2706.211499][T28970] [<814696a0>] (snd_pcm_oss_change_params_locked) from [<8146a594>] (snd_pcm_oss_get_active_substream+0x94/0xc0) [ 2706.211635][T28970] r10:83a52400 r9:ea6f9ea8 r8:8496aeb8 r7:854c8b04 r6:854c8b04 r5:8462cd00 [ 2706.211691][T28970] r4:8462cd00 [ 2706.211725][T28970] [<8146a500>] (snd_pcm_oss_get_active_substream) from [<8146a5ec>] (snd_pcm_oss_get_formats+0x2c/0x110) [ 2706.211831][T28970] r9:00000003 r8:884f99c0 r7:854c8b00 r6:20007040 r5:00000000 r4:8004500b [ 2706.211906][T28970] [<8146a5c0>] (snd_pcm_oss_get_formats) from [<8146bf84>] (snd_pcm_oss_ioctl+0xb28/0x1004) [ 2706.212029][T28970] r5:00000000 r4:8004500b [ 2706.212115][T28970] [<8146b45c>] (snd_pcm_oss_ioctl) from [<8056cdc8>] (sys_ioctl+0x130/0xba0) [ 2706.212249][T28970] r10:83a52400 r9:00000003 r8:884f99c0 r7:20007040 r6:884f99c1 r5:00000000 [ 2706.212291][T28970] r4:8004500b [ 2706.212424][T28970] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2706.212626][T28970] Exception stack(0xea6f9fa8 to 0xea6f9ff0) [ 2706.212698][T28970] 9fa0: 00000000 00000000 00000003 8004500b 20007040 00000000 [ 2706.212773][T28970] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 2706.212822][T28970] 9fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2706.212916][T28970] r10:00000036 r9:83a52400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2706.213014][T28970] r4:00000000 [ 2718.534075][T29006] FAULT_INJECTION: forcing a failure. [ 2718.534075][T29006] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.637264][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.3.6244 Not tainted syzkaller #0 PREEMPT [ 2718.637451][T29006] Hardware name: ARM-Versatile Express [ 2718.637483][T29006] Call trace: [ 2718.637538][T29006] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2718.637657][T29006] r7:84113000 r6:00000000 r5:60000113 r4:82260500 [ 2718.637678][T29006] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2718.637734][T29006] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2718.637793][T29006] r5:84113000 r4:82917c00 [ 2718.637811][T29006] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2718.637871][T29006] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2718.637942][T29006] r8:00000000 r7:84113000 r6:00000cc0 r5:ffffffff r4:830a7c00 [ 2718.637963][T29006] [<8051f1f4>] (should_failslab) from [<80503204>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2718.638020][T29006] [<805031b4>] (kmem_cache_alloc_node_noprof) from [<815515ec>] (__alloc_skb+0x138/0x160) [ 2718.638100][T29006] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830a7c00 r5:ffffffff [ 2718.638127][T29006] r4:828060c0 [ 2718.638147][T29006] [<815514b4>] (__alloc_skb) from [<81670e84>] (netlink_alloc_large_skb+0x88/0xa0) [ 2718.638222][T29006] r8:00000000 r7:85c1a000 r6:00000014 r5:852f0500 r4:00000140 [ 2718.638242][T29006] [<81670dfc>] (netlink_alloc_large_skb) from [<816715cc>] (netlink_sendmsg+0x134/0x444) [ 2718.638298][T29006] r5:852f0500 r4:ea705f20 [ 2718.638315][T29006] [<81671498>] (netlink_sendmsg) from [<81543360>] (__sock_sendmsg+0x44/0x78) [ 2718.638390][T29006] r10:00000000 r9:ea705dc4 r8:ea705dc4 r7:00000000 r6:852f0500 r5:ea705f20 [ 2718.638419][T29006] r4:00000000 [ 2718.638437][T29006] [<8154331c>] (__sock_sendmsg) from [<815446b4>] (____sys_sendmsg+0x298/0x2cc) [ 2718.638501][T29006] r7:00000000 r6:852f0500 r5:04040010 r4:ea705f20 [ 2718.638520][T29006] [<8154441c>] (____sys_sendmsg) from [<8154667c>] (___sys_sendmsg+0x9c/0xd0) [ 2718.638589][T29006] r10:ea705e24 r9:20002840 r8:04040010 r7:00000000 r6:852f0500 r5:ea705f20 [ 2718.638612][T29006] r4:00000000 [ 2718.638629][T29006] [<815465e0>] (___sys_sendmsg) from [<81546b14>] (__sys_sendmsg+0x8c/0xe0) [ 2718.638708][T29006] r10:00000128 r9:84113000 r8:847bd180 r7:04040010 r6:20002840 r5:847bd181 [ 2718.638730][T29006] r4:00000003 [ 2718.638746][T29006] [<81546a88>] (__sys_sendmsg) from [<81546b7c>] (sys_sendmsg+0x14/0x18) [ 2718.638810][T29006] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 2718.638829][T29006] [<81546b68>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2718.638881][T29006] Exception stack(0xea705fa8 to 0xea705ff0) [ 2718.638921][T29006] 5fa0: 00000000 00000000 00000003 20002840 04040010 00000000 [ 2718.638959][T29006] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76ffc0bc [ 2718.638987][T29006] 5fe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2723.319103][T29023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29023 comm=syz.2.6250 [ 2724.589076][T29025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29025 comm=syz.2.6251 [ 2729.329906][T29042] FAULT_INJECTION: forcing a failure. [ 2729.329906][T29042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2729.330286][T29042] CPU: 0 UID: 0 PID: 29042 Comm: syz.2.6255 Not tainted syzkaller #0 PREEMPT [ 2729.330411][T29042] Hardware name: ARM-Versatile Express [ 2729.330441][T29042] Call trace: [ 2729.330486][T29042] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2729.330596][T29042] r7:00000000 r6:00000000 r5:60000013 r4:82260500 [ 2729.331026][T29042] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2729.331233][T29042] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2729.331455][T29042] r5:83ad8c00 r4:8294f190 [ 2729.332021][T29042] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2729.332124][T29042] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 2729.332272][T29042] r8:76f8df30 r7:00000000 r6:00000000 r5:ea765f68 r4:00000002 [ 2729.332367][T29042] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 2729.332585][T29042] [<80972800>] (should_fail_usercopy) from [<8058e61c>] (simple_read_from_buffer+0x80/0x13c) [ 2729.332689][T29042] [<8058e59c>] (simple_read_from_buffer) from [<80608614>] (proc_fail_nth_read+0xb8/0x108) [ 2729.332916][T29042] r10:00000001 r9:8060855c r8:00000002 r7:ea765f68 r6:0000000f r5:76f8df30 [ 2729.333087][T29042] r4:83ad8c00 r3:ea765e9f [ 2729.333255][T29042] [<8060855c>] (proc_fail_nth_read) from [<8055346c>] (vfs_read+0x98/0x324) [ 2729.333341][T29042] r8:76f8df30 r7:ea765f68 r6:83ad8c00 r5:0000000f r4:884f9840 [ 2729.333474][T29042] [<805533d4>] (vfs_read) from [<8055417c>] (ksys_read+0x74/0xe8) [ 2729.333939][T29042] r10:00000003 r9:83ad8c00 r8:8020029c r7:00000000 r6:00000000 r5:884f9840 [ 2729.334012][T29042] r4:884f9843 [ 2729.334078][T29042] [<80554108>] (ksys_read) from [<80554200>] (sys_read+0x10/0x14) [ 2729.334342][T29042] r7:00000003 r6:00000004 r5:76f8df30 r4:0000000f [ 2729.334610][T29042] [<805541f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2729.334759][T29042] Exception stack(0xea765fa8 to 0xea765ff0) [ 2729.335198][T29042] 5fa0: 0000000f 76f8df30 00000004 76f8df30 0000000f 00000000 [ 2729.335282][T29042] 5fc0: 0000000f 76f8df30 00000004 00000003 002e0000 00000000 00006364 76f8e0bc [ 2729.335364][T29042] 5fe0: 00000158 76f8ded0 000d80f0 00130194 [ 2739.959229][T29079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29079 comm=syz.3.6267 [ 2741.467642][T29085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.470707][T29085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2741.517107][T29086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.517764][T29086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2741.618030][T29085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.619167][T29085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2741.717414][ T31] audit: type=1400 audit(2741.620:640): avc: denied { setattr } for pid=29084 comm="syz.3.6270" name="PING" dev="sockfs" ino=72699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2757.638636][T29121] FAULT_INJECTION: forcing a failure. [ 2757.638636][T29121] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.638897][T29121] CPU: 0 UID: 0 PID: 29121 Comm: syz.2.6277 Not tainted syzkaller #0 PREEMPT [ 2757.638949][T29121] Hardware name: ARM-Versatile Express [ 2757.638964][T29121] Call trace: [ 2757.639019][T29121] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2757.639080][T29121] r7:00000c40 r6:00000000 r5:60000013 r4:82260500 [ 2757.639090][T29121] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2757.639119][T29121] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2757.639200][T29121] r5:83875400 r4:82917c00 [ 2757.639219][T29121] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2757.639258][T29121] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2757.639317][T29121] r8:83875400 r7:00000c40 r6:884f9568 r5:00001000 r4:830016c0 [ 2757.639413][T29121] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2757.639520][T29121] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2757.639839][T29121] r10:83875400 r9:8309e400 r8:00000000 r7:834d77f8 r6:884f9568 r5:00001000 [ 2757.639922][T29121] r4:00000000 [ 2757.639974][T29121] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2757.640045][T29121] r10:83875400 r9:00000000 r8:884f9540 r7:8004f50c r6:00000004 r5:81cd6504 [ 2757.640148][T29121] r4:884f9568 r3:826c0200 [ 2757.640371][T29121] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2757.640598][T29121] r9:00000005 r8:884f9540 r7:00000000 r6:00000000 r5:8004f50c r4:884f9540 [ 2757.640798][T29121] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2757.640830][T29121] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2757.640865][T29121] r7:00000000 r6:884f9541 r5:00000000 r4:8004f50c [ 2757.640966][T29121] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2757.641189][T29121] Exception stack(0xea799fa8 to 0xea799ff0) [ 2757.641380][T29121] 9fa0: 00000000 00000000 00000005 8004f50c 00000000 00000000 [ 2757.641471][T29121] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 2757.641588][T29121] 9fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 2757.641931][T29121] r10:00000036 r9:83875400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2757.642008][T29121] r4:00000000 [ 2757.787968][T29121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2774.667597][T29145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2774.767367][T29145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.588127][T29173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.590451][T29173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.727739][T29194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.748429][T29194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2803.297530][T29220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.299397][T29220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2848.927842][ T31] audit: type=1400 audit(2848.860:641): avc: denied { execute } for pid=29335 comm="syz.3.6329" name="file0" dev="tmpfs" ino=2705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2864.588355][ T31] audit: type=1400 audit(2864.510:642): avc: denied { setattr } for pid=29378 comm="syz.2.6339" name="RAW" dev="sockfs" ino=74962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2865.028343][ T31] audit: type=1400 audit(2864.950:643): avc: denied { setopt } for pid=29378 comm="syz.2.6339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2865.052100][ T31] audit: type=1400 audit(2864.980:644): avc: denied { setattr } for pid=29378 comm="syz.2.6339" name="NETLINK" dev="sockfs" ino=74961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2883.547220][T29427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2883.548481][T29427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2889.001245][T29439] fuse: Bad value for 'fd' [ 2889.840751][T29442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.841357][T29442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.477554][T29464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2896.481471][T29464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2898.168048][T29474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6366'. [ 2903.447918][T29490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2903.450062][T29490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2908.679270][T29508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.681121][T29508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2912.998211][T29523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2912.999202][T29523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2920.687928][T29539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2920.690656][T29539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2922.679107][ T31] audit: type=1400 audit(2922.610:645): avc: denied { mount } for pid=29543 comm="syz.3.6389" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2929.937549][T29554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2929.940030][T29554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2932.198754][T29559] fuse: Bad value for 'group_id' [ 2932.199236][T29559] fuse: Bad value for 'group_id' [ 2932.411360][ T31] audit: type=1400 audit(2932.340:646): avc: denied { write } for pid=29558 comm="syz.3.6394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2937.046963][T29571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2937.047939][T29571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.447553][T29589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2943.450505][T29589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2944.810692][T29594] FAULT_INJECTION: forcing a failure. [ 2944.810692][T29594] name failslab, interval 1, probability 0, space 0, times 0 [ 2944.857315][T29594] CPU: 0 UID: 0 PID: 29594 Comm: syz.3.6405 Not tainted syzkaller #0 PREEMPT [ 2944.857490][T29594] Hardware name: ARM-Versatile Express [ 2944.857525][T29594] Call trace: [ 2944.857578][T29594] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 2944.857719][T29594] r7:00000c40 r6:00000000 r5:60000113 r4:82260500 [ 2944.857744][T29594] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 2944.857807][T29594] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 2944.857869][T29594] r5:84b61800 r4:82917c00 [ 2944.857888][T29594] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 2944.857949][T29594] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 2944.858021][T29594] r8:84b61800 r7:00000c40 r6:83d29868 r5:00001000 r4:830016c0 [ 2944.858043][T29594] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 2944.858099][T29594] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2944.858178][T29594] r10:84b61800 r9:8309f800 r8:00000000 r7:852d1cc0 r6:83d29868 r5:00001000 [ 2944.858200][T29594] r4:00000000 [ 2944.858219][T29594] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2944.858294][T29594] r10:84b61800 r9:00000000 r8:83d29840 r7:00008933 r6:00000004 r5:81cd6504 [ 2944.858322][T29594] r4:83d29868 r3:826c0200 [ 2944.858341][T29594] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 2944.858409][T29594] r9:00000003 r8:83d29840 r7:200000c0 r6:200000c0 r5:00008933 r4:83d29840 [ 2944.858432][T29594] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 2944.858539][T29594] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 2944.858615][T29594] r7:200000c0 r6:83d29841 r5:00000000 r4:00008933 [ 2944.858635][T29594] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2944.858694][T29594] Exception stack(0xeac9dfa8 to 0xeac9dff0) [ 2944.858735][T29594] dfa0: 00000000 00000000 00000003 00008933 200000c0 00000000 [ 2944.858768][T29594] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76ffc0bc [ 2944.858794][T29594] dfe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 2944.858835][T29594] r10:00000036 r9:84b61800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 2944.858859][T29594] r4:00000000 [ 2945.048122][T29594] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2953.579205][T29615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2953.581772][T29615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.907397][T29629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2965.908367][T29629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.387881][T29634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29634 comm=syz.2.6418 [ 2975.337110][T29646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2975.338242][T29646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.898493][T29655] fuse: Bad value for 'fd' [ 2986.087012][T29672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2986.088438][T29672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2992.087758][T29681] fuse: Bad value for 'fd' [ 2994.827721][T29690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2994.829485][T29690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2996.968928][T29698] fuse: Bad value for 'fd' [ 3000.827412][T29707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3000.848429][T29707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.018374][T29724] FAULT_INJECTION: forcing a failure. [ 3006.018374][T29724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3006.032904][T29724] CPU: 0 UID: 0 PID: 29724 Comm: syz.3.6443 Not tainted syzkaller #0 PREEMPT [ 3006.033005][T29724] Hardware name: ARM-Versatile Express [ 3006.033021][T29724] Call trace: [ 3006.033045][T29724] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3006.033110][T29724] r7:ead65e20 r6:00000000 r5:60000113 r4:82260500 [ 3006.033120][T29724] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 3006.033149][T29724] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 3006.033178][T29724] r5:884abc00 r4:8294f190 [ 3006.033186][T29724] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 3006.033217][T29724] [<809725c0>] (should_fail_ex) from [<809727fc>] (should_fail+0x14/0x18) [ 3006.033264][T29724] r8:0000808c r7:ead65e20 r6:20000180 r5:00000000 r4:ead65f20 [ 3006.033286][T29724] [<809727e8>] (should_fail) from [<8097281c>] (should_fail_usercopy+0x1c/0x20) [ 3006.033334][T29724] [<80972800>] (should_fail_usercopy) from [<81546500>] (copy_msghdr_from_user+0x50/0x130) [ 3006.033368][T29724] [<815464b0>] (copy_msghdr_from_user) from [<81546658>] (___sys_sendmsg+0x78/0xd0) [ 3006.033415][T29724] r8:0000808c r7:00000000 r6:85302a00 r5:ead65f20 r4:ead65e64 [ 3006.033424][T29724] [<815465e0>] (___sys_sendmsg) from [<81546b14>] (__sys_sendmsg+0x8c/0xe0) [ 3006.033460][T29724] r10:00000128 r9:884abc00 r8:85687480 r7:0000808c r6:20000180 r5:85687481 [ 3006.033471][T29724] r4:00000003 [ 3006.033478][T29724] [<81546a88>] (__sys_sendmsg) from [<81546b7c>] (sys_sendmsg+0x14/0x18) [ 3006.033508][T29724] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 3006.033517][T29724] [<81546b68>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3006.033540][T29724] Exception stack(0xead65fa8 to 0xead65ff0) [ 3006.033560][T29724] 5fa0: 00000000 00000000 00000003 20000180 0000808c 00000000 [ 3006.033577][T29724] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76ffc0bc [ 3006.033591][T29724] 5fe0: 76ffbec0 76ffbeb0 0001948c 001322c0 [ 3007.108101][T29725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3007.110084][T29725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.167893][T29748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.170929][T29748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.509132][T29763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.509772][T29763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.549036][T29774] FAULT_INJECTION: forcing a failure. [ 3028.549036][T29774] name failslab, interval 1, probability 0, space 0, times 0 [ 3028.667434][T29774] CPU: 1 UID: 0 PID: 29774 Comm: syz.2.6459 Not tainted syzkaller #0 PREEMPT [ 3028.667603][T29774] Hardware name: ARM-Versatile Express [ 3028.667635][T29774] Call trace: [ 3028.667684][T29774] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3028.667820][T29774] r7:00000c40 r6:00000000 r5:60000113 r4:82260500 [ 3028.667843][T29774] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 3028.667908][T29774] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 3028.667969][T29774] r5:884abc00 r4:82917c00 [ 3028.667988][T29774] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 3028.668055][T29774] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 3028.668132][T29774] r8:884abc00 r7:00000c40 r6:8714cb68 r5:00001000 r4:830016c0 [ 3028.668153][T29774] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 3028.668211][T29774] [<80503b58>] (__kmalloc_noprof) from [<807c361c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 3028.668289][T29774] r10:884abc00 r9:8309f800 r8:00000000 r7:836bcdd0 r6:8714cb68 r5:00001000 [ 3028.668316][T29774] r4:00000000 [ 3028.668335][T29774] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3028.668429][T29774] r10:884abc00 r9:00000000 r8:8714cb40 r7:00008983 r6:00000004 r5:81cd6504 [ 3028.668461][T29774] r4:8714cb68 r3:826c0200 [ 3028.668480][T29774] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 3028.668555][T29774] r9:00000003 r8:8714cb40 r7:200013c0 r6:200013c0 r5:00008983 r4:8714cb40 [ 3028.668576][T29774] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 3028.668636][T29774] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 3028.668710][T29774] r7:200013c0 r6:8714cb41 r5:00000000 r4:00008983 [ 3028.668732][T29774] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3028.668785][T29774] Exception stack(0xeada1fa8 to 0xeada1ff0) [ 3028.668824][T29774] 1fa0: 00000000 00000000 00000003 00008983 200013c0 00000000 [ 3028.668859][T29774] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 3028.668887][T29774] 1fe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 3028.668928][T29774] r10:00000036 r9:884abc00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 3028.668952][T29774] r4:00000000 [ 3028.790408][T29774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3032.566907][T29782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3032.568993][T29782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.637099][T29803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3038.639687][T29803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3043.284814][ T31] audit: type=1400 audit(3043.210:647): avc: denied { create } for pid=29815 comm="syz.3.6475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3043.577239][ T31] audit: type=1400 audit(3043.500:648): avc: denied { write } for pid=29815 comm="syz.3.6475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3044.149661][ T31] audit: type=1400 audit(3044.080:649): avc: denied { name_bind } for pid=29815 comm="syz.3.6475" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 3046.288832][ T31] audit: type=1400 audit(3046.210:650): avc: denied { read } for pid=29824 comm="syz.2.6477" path="socket:[74527]" dev="sockfs" ino=74527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3053.098892][T29840] FAULT_INJECTION: forcing a failure. [ 3053.098892][T29840] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.100090][T29840] CPU: 0 UID: 0 PID: 29840 Comm: syz.2.6484 Not tainted syzkaller #0 PREEMPT [ 3053.100207][T29840] Hardware name: ARM-Versatile Express [ 3053.100224][T29840] Call trace: [ 3053.100248][T29840] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3053.100313][T29840] r7:00000d40 r6:00000000 r5:60000013 r4:82260500 [ 3053.100335][T29840] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 3053.100416][T29840] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 3053.100466][T29840] r5:884ae000 r4:82917c00 [ 3053.100474][T29840] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 3053.100508][T29840] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 3053.100546][T29840] r8:884ae000 r7:00000d40 r6:8714c7a8 r5:00000019 r4:83001240 [ 3053.100555][T29840] [<8051f1f4>] (should_failslab) from [<80503bf4>] (__kmalloc_noprof+0x9c/0x458) [ 3053.100583][T29840] [<80503b58>] (__kmalloc_noprof) from [<807c3524>] (tomoyo_encode2+0x64/0xf0) [ 3053.100620][T29840] r10:00000fff r9:8309f800 r8:00000000 r7:836bc198 r6:8714c7a8 r5:884cbffd [ 3053.100631][T29840] r4:884cbfef [ 3053.100639][T29840] [<807c34c0>] (tomoyo_encode2) from [<807c35d4>] (tomoyo_encode+0x24/0x30) [ 3053.100674][T29840] r9:8309f800 r8:00000000 r7:836bc198 r6:8714c7a8 r5:00001000 r4:884cbff0 [ 3053.100682][T29840] [<807c35b0>] (tomoyo_encode) from [<807c3660>] (tomoyo_realpath_from_path+0x80/0x17c) [ 3053.100712][T29840] r5:00001000 r4:884cb000 [ 3053.100720][T29840] [<807c35e0>] (tomoyo_realpath_from_path) from [<807bf760>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3053.100755][T29840] r10:884ae000 r9:00000000 r8:8714c780 r7:400854d5 r6:00000004 r5:81cd6504 [ 3053.100766][T29840] r4:8714c7a8 r3:826c0200 [ 3053.100774][T29840] [<807bf694>] (tomoyo_path_number_perm) from [<807c4040>] (tomoyo_file_ioctl+0x1c/0x20) [ 3053.100810][T29840] r9:00000003 r8:8714c780 r7:00000000 r6:00000000 r5:400854d5 r4:8714c780 [ 3053.100819][T29840] [<807c4024>] (tomoyo_file_ioctl) from [<80770894>] (security_file_ioctl+0x64/0x1e4) [ 3053.100849][T29840] [<80770830>] (security_file_ioctl) from [<8056cce4>] (sys_ioctl+0x4c/0xba0) [ 3053.100883][T29840] r7:00000000 r6:8714c781 r5:00000000 r4:400854d5 [ 3053.100892][T29840] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3053.100918][T29840] Exception stack(0xeadedfa8 to 0xeadedff0) [ 3053.100937][T29840] dfa0: 00000000 00000000 00000003 400854d5 00000000 00000000 [ 3053.100955][T29840] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8e0bc [ 3053.100983][T29840] dfe0: 76f8dec0 76f8deb0 0001948c 001322c0 [ 3053.101027][T29840] r10:00000036 r9:884ae000 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 3053.101040][T29840] r4:00000000 [ 3053.101261][T29840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3058.618345][ T31] audit: type=1400 audit(3058.550:651): avc: denied { accept } for pid=29852 comm="syz.2.6485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3060.507915][T29856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3060.509671][T29856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3068.762366][T29878] cgroup: fork rejected by pids controller in /syz2 [ 3073.517473][ T31] audit: type=1400 audit(3073.430:652): avc: denied { map } for pid=29943 comm="syz.3.6496" path="/dev/uhid" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3074.038503][ T31] audit: type=1400 audit(3073.970:653): avc: denied { ioctl } for pid=29943 comm="syz.3.6496" path="socket:[75662]" dev="sockfs" ino=75662 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3074.221157][ T31] audit: type=1400 audit(3074.140:654): avc: denied { execute } for pid=29989 comm="syz-executor" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 3074.264782][ T31] audit: type=1400 audit(3074.180:655): avc: denied { execute_no_trans } for pid=29989 comm="syz-executor" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 3074.368129][ T31] audit: type=1400 audit(3074.290:656): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 3074.609972][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3074.661049][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3074.721097][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3074.791234][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3075.134039][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3075.150058][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3075.154369][ T2972] bond0 (unregistering): Released all slaves [ 3075.232935][ T2972] hsr_slave_0: left promiscuous mode [ 3075.234447][ T2972] hsr_slave_1: left promiscuous mode [ 3075.259758][ T2972] veth1_macvtap: left promiscuous mode [ 3075.260120][ T2972] veth0_macvtap: left promiscuous mode [ 3075.260376][ T2972] veth1_vlan: left promiscuous mode [ 3075.260469][ T2972] veth0_vlan: left promiscuous mode [ 3077.471941][T29990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3077.478953][T29990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3078.823693][T29990] hsr_slave_0: entered promiscuous mode [ 3078.824576][T29990] hsr_slave_1: entered promiscuous mode [ 3079.555615][T29990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3079.573576][T29990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3079.589191][T29990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3079.594456][T29990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3080.114499][T29990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3082.611595][T29990] veth0_vlan: entered promiscuous mode [ 3082.630370][T29990] veth1_vlan: entered promiscuous mode [ 3082.678827][T29990] veth0_macvtap: entered promiscuous mode [ 3082.692640][T29990] veth1_macvtap: entered promiscuous mode [ 3082.745849][T29997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.748199][T29997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.748633][T29997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.748859][T29997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.878553][ T31] audit: type=1400 audit(3082.810:657): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/syzkaller.cKsAPi/syz-tmp" dev="vda" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 3082.878755][ T31] audit: type=1400 audit(3082.810:658): avc: denied { mount } for pid=29990 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3082.883416][ T31] audit: type=1400 audit(3082.810:659): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/syzkaller.cKsAPi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 3082.884877][ T31] audit: type=1400 audit(3082.810:660): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/syzkaller.cKsAPi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=75754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 3082.910361][ T31] audit: type=1400 audit(3082.840:661): avc: denied { unmount } for pid=29990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3082.925263][ T31] audit: type=1400 audit(3082.840:662): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 3082.925492][ T31] audit: type=1400 audit(3082.840:663): avc: denied { mount } for pid=29990 comm="syz-executor" name="/" dev="gadgetfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 3082.925612][ T31] audit: type=1400 audit(3082.840:664): avc: denied { mount } for pid=29990 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3082.925731][ T31] audit: type=1400 audit(3082.840:665): avc: denied { mounton } for pid=29990 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 3085.799320][T30455] block nbd2: shutting down sockets [ 3085.885849][ T31] audit: type=1400 audit(3085.810:666): avc: denied { write } for pid=30438 comm="syz.2.6504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3086.911239][T30465] FAULT_INJECTION: forcing a failure. [ 3086.911239][T30465] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.911623][T30465] CPU: 0 UID: 0 PID: 30465 Comm: syz.2.6510 Not tainted syzkaller #0 PREEMPT [ 3086.911724][T30465] Hardware name: ARM-Versatile Express [ 3086.911755][T30465] Call trace: [ 3086.911836][T30465] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 3086.911949][T30465] r7:884ae000 r6:00000000 r5:60000013 r4:82260500 [ 3086.911970][T30465] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 3086.912030][T30465] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 3086.912096][T30465] r5:884ae000 r4:82917c00 [ 3086.912118][T30465] [<8021fb9c>] (dump_stack) from [<80972784>] (should_fail_ex+0x1c4/0x228) [ 3086.912278][T30465] [<809725c0>] (should_fail_ex) from [<8051f260>] (should_failslab+0x6c/0x94) [ 3086.912453][T30465] r8:00000000 r7:884ae000 r6:00000cc0 r5:76f8ce60 r4:83001240 [ 3086.912575][T30465] [<8051f1f4>] (should_failslab) from [<80502c24>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 3086.912873][T30465] [<80502bd8>] (__kmalloc_cache_noprof) from [<810540b0>] (raw_ioctl_init+0x10c/0x340) [ 3086.913094][T30465] r10:884ae000 r9:824656d0 r8:87144d80 r7:b5403587 r6:86147800 r5:76f8ce60 [ 3086.913268][T30465] r4:00000000 [ 3086.913301][T30465] [<81053fa4>] (raw_ioctl_init) from [<81055740>] (raw_ioctl+0x3f0/0x1094) [ 3086.913679][T30465] r10:884ae000 r9:00000004 r8:87144d80 r7:76f8ce60 r6:76f8ce60 r5:00000000 [ 3086.913841][T30465] r4:86147800 [ 3086.914016][T30465] [<81055350>] (raw_ioctl) from [<8056cdc8>] (sys_ioctl+0x130/0xba0) [ 3086.914169][T30465] r10:884ae000 r9:00000004 r8:87144d80 r7:76f8ce60 r6:87144d81 r5:00000000 [ 3086.914398][T30465] r4:41015500 [ 3086.914781][T30465] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3086.914860][T30465] Exception stack(0xeb7fdfa8 to 0xeb7fdff0) [ 3086.914935][T30465] dfa0: 00000004 76f8ce70 00000004 41015500 76f8ce60 76f8be00 [ 3086.915308][T30465] dfc0: 00000004 76f8ce70 76f8be70 00000036 00000002 76f8ce60 00420418 00000000 [ 3086.915352][T30465] dfe0: 00000000 76f8bde8 002b9000 00131c8c [ 3086.915434][T30465] r10:00000036 r9:884ae000 r8:8020029c r7:00000036 r6:76f8be70 r5:76f8ce70 [ 3086.916065][T30465] r4:00000004 [ 3094.091770][ T31] audit: type=1400 audit(3094.020:667): avc: denied { map } for pid=30492 comm="syz.2.6520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3094.176991][ T31] audit: type=1400 audit(3094.110:668): avc: denied { read write } for pid=30492 comm="syz.2.6520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3104.179315][T30541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2561 sclass=netlink_tcpdiag_socket pid=30541 comm=syz.3.6538 [ 3117.841412][ T31] audit: type=1400 audit(3117.770:669): avc: denied { ioctl } for pid=30587 comm="syz.2.6555" path="socket:[76384]" dev="sockfs" ino=76384 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3121.147544][T30606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=30606 comm=syz.2.6561 [ 3133.396112][T30777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3133.397547][T30777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3133.950289][T30790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3133.958553][T30790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3134.749275][T30806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.750044][T30806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.080023][T30819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3137.108083][T30819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.692525][T30834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.695653][T30834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3142.761728][T30851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3142.762716][T30851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3148.597279][T30874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3148.599716][T30874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3154.186867][T30889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3154.190483][T30889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3167.659078][ T31] audit: type=1326 audit(3167.590:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30923 comm="syz.2.6628" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x0 [ 3178.517568][ T31] audit: type=1400 audit(3178.440:671): avc: denied { mount } for pid=30939 comm="syz.2.6633" name="/" dev="ramfs" ino=77706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 3209.328115][T31073] netlink: 'syz.2.6646': attribute type 10 has an invalid length. [ 3209.577896][T31073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6646'. [ 3212.365660][ T31] audit: type=1400 audit(3212.290:672): avc: denied { bind } for pid=31090 comm="syz.2.6649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3212.950128][T31081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3212.956282][T31081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3213.040426][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.115807][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.181154][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.258026][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.547701][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3213.555952][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3213.563641][ T2972] bond0 (unregistering): Released all slaves [ 3213.647094][ T2972] hsr_slave_0: left promiscuous mode [ 3213.649085][ T2972] hsr_slave_1: left promiscuous mode [ 3213.693891][ T2972] veth1_macvtap: left promiscuous mode [ 3213.694241][ T2972] veth0_macvtap: left promiscuous mode [ 3213.694648][ T2972] veth1_vlan: left promiscuous mode [ 3213.694826][ T2972] veth0_vlan: left promiscuous mode [ 3214.700716][T31081] hsr_slave_0: entered promiscuous mode [ 3214.703072][T31081] hsr_slave_1: entered promiscuous mode [ 3215.154649][T31081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3215.163355][T31081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3215.168946][T31081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3215.175548][T31081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3216.311458][T31081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3220.818892][T31081] veth0_vlan: entered promiscuous mode [ 3220.861364][T31081] veth1_vlan: entered promiscuous mode [ 3220.953775][T31081] veth0_macvtap: entered promiscuous mode [ 3220.965567][T31081] veth1_macvtap: entered promiscuous mode [ 3221.039788][T29997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3221.040143][T29997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3221.040226][T29997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3221.040286][T29997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3235.982065][T31754] block device autoloading is deprecated and will be removed. [ 3244.198349][ T31] audit: type=1400 audit(3244.120:673): avc: denied { watch } for pid=31763 comm="syz.4.6666" path="/proc/26" dev="proc" ino=78053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3244.352060][ T31] audit: type=1400 audit(3244.280:674): avc: denied { set_context_mgr } for pid=31767 comm="syz.4.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3244.367711][ T31] audit: type=1400 audit(3244.290:675): avc: denied { map } for pid=31767 comm="syz.4.6668" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3244.388414][ T31] audit: type=1400 audit(3244.310:676): avc: denied { call } for pid=31767 comm="syz.4.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3244.390262][ T31] audit: type=1400 audit(3244.310:677): avc: denied { transfer } for pid=31767 comm="syz.4.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3247.207595][T31777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3247.209907][T31777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3260.057821][T31846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6691'. [ 3260.059857][T31846] vlan0: entered promiscuous mode [ 3264.620028][T31871] syzkaller1: entered promiscuous mode [ 3264.621212][T31871] syzkaller1: entered allmulticast mode [ 3264.625414][T31871] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 3268.079203][ T31] audit: type=1400 audit(3268.010:678): avc: denied { audit_write } for pid=31903 comm="syz.4.6709" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3271.873660][ T31] audit: type=1400 audit(3271.800:679): avc: denied { write } for pid=31926 comm="syz.4.6719" path="socket:[78316]" dev="sockfs" ino=78316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3279.458960][T31948] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6730'. [ 3282.228658][T31982] input: syz0 as /devices/virtual/input/input12 [ 3282.513598][T31988] syzkaller0: entered promiscuous mode [ 3282.513897][T31988] syzkaller0: entered allmulticast mode [ 3282.855778][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6744'. [ 3282.863554][T31998] vlan2: entered allmulticast mode [ 3282.866737][T31998] bridge_slave_0: entered allmulticast mode [ 3283.417289][ T31] audit: type=1400 audit(3283.350:680): avc: denied { connect } for pid=31994 comm="syz.2.6742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3284.403272][ T31] audit: type=1400 audit(3284.330:681): avc: denied { bind } for pid=32006 comm="syz.4.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3284.418456][ T31] audit: type=1400 audit(3284.350:682): avc: denied { listen } for pid=32006 comm="syz.4.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3284.422896][ T31] audit: type=1400 audit(3284.350:683): avc: denied { accept } for pid=32006 comm="syz.4.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3286.954437][ T31] audit: type=1400 audit(3286.880:684): avc: denied { create } for pid=32017 comm="syz.4.6751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3301.368898][ T31] audit: type=1400 audit(3301.300:685): avc: denied { create } for pid=32052 comm="syz.4.6762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3308.798706][ T31] audit: type=1400 audit(3308.730:686): avc: denied { create } for pid=32125 comm="syz.4.6764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3319.910531][T32245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6766'. [ 3319.927751][T32245] syz_tun: entered promiscuous mode [ 3322.049355][ T31] audit: type=1400 audit(3321.980:687): avc: denied { block_suspend } for pid=32293 comm="syz.4.6773" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3323.886896][ T31] audit: type=1400 audit(3323.800:688): avc: denied { write } for pid=32300 comm="syz.4.6774" name="ptype" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 3324.276757][T32304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3324.277405][T32304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3331.801042][ T31] audit: type=1400 audit(3331.730:689): avc: denied { nlmsg_write } for pid=32308 comm="syz.2.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3336.938319][ T31] audit: type=1400 audit(3336.870:690): avc: denied { remount } for pid=32318 comm="syz.2.6778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3346.569889][ T31] audit: type=1400 audit(3346.490:691): avc: denied { append } for pid=32434 comm="syz.4.6782" name="timer" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 3346.908350][T32439] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6782'. [ 3353.531502][T32553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3353.533124][T32553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3353.770328][T32553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3353.771211][T32553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3367.709877][T32701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6789'. [ 3372.717090][ T31] audit: type=1400 audit(3372.640:692): avc: denied { create } for pid=32767 comm="syz.4.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3372.729999][ T31] audit: type=1400 audit(3372.660:693): avc: denied { read } for pid=32767 comm="syz.4.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3373.560292][ T317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3373.642796][ T317] vlan3: entered promiscuous mode [ 3373.643804][ T317] dummy0: entered promiscuous mode [ 3383.876939][ T31] audit: type=1326 audit(3383.800:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.878848][ T31] audit: type=1326 audit(3383.800:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.880438][ T31] audit: type=1326 audit(3383.810:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=323 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.885074][ T31] audit: type=1326 audit(3383.810:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.888076][ T31] audit: type=1326 audit(3383.810:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.893784][ T31] audit: type=1326 audit(3383.820:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=61 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.897187][ T31] audit: type=1326 audit(3383.820:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3383.904159][ T31] audit: type=1326 audit(3383.820:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.4.6803" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x7ffc0000 [ 3384.060088][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3384.061968][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3394.324499][ T551] process 'syz.4.6807' launched './file1' with NULL argv: empty string added [ 3394.328860][ T31] audit: type=1400 audit(3394.250:702): avc: denied { execute_no_trans } for pid=550 comm="syz.4.6807" path="/118/file1" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3443.540290][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3443.828633][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.388940][ T31] audit: type=1400 audit(3446.320:703): avc: denied { mount } for pid=1186 comm="syz.2.6837" name="/" dev="configfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3446.622583][ T31] audit: type=1400 audit(3446.550:704): avc: denied { search } for pid=1186 comm="syz.2.6837" name="/" dev="configfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3446.624861][ T31] audit: type=1400 audit(3446.550:705): avc: denied { search } for pid=1186 comm="syz.2.6837" name="/" dev="configfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3446.627246][ T31] audit: type=1400 audit(3446.550:706): avc: denied { read open } for pid=1186 comm="syz.2.6837" path="/" dev="configfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3447.108872][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6837'. [ 3447.408061][ T1187] bond0: (slave bond_slave_1): Releasing backup interface [ 3459.584938][ T1449] syz_tun: entered allmulticast mode [ 3459.602086][ T1449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6841'. [ 3459.619866][ T1449] syz_tun (unregistering): left allmulticast mode [ 3459.621198][ T1449] syz_tun (unregistering): left promiscuous mode [ 3460.449612][ T1494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3460.452299][ T1494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3461.880374][ T1527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3461.940415][ T1527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3463.111622][ T31] audit: type=1400 audit(3463.040:707): avc: denied { bind } for pid=1533 comm="syz.4.6849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3463.190529][ T1534] netlink: 'syz.4.6849': attribute type 10 has an invalid length. [ 3463.190879][ T1534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6849'. [ 3463.192936][ T1534] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 3464.706147][ T1546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3464.720970][ T1546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3491.897203][ T31] audit: type=1400 audit(3491.820:708): avc: denied { mounton } for pid=2049 comm="syz.4.6874" path="/file0" dev="ramfs" ino=81038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 3500.864230][T29997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3500.912002][T29997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3500.975450][T29997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3501.033508][T29997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3501.402135][T29997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3501.412377][T29997] bond0 (unregistering): Released all slaves [ 3501.541973][T29997] hsr_slave_0: left promiscuous mode [ 3501.543838][T29997] hsr_slave_1: left promiscuous mode [ 3501.556049][T29997] veth1_macvtap: left promiscuous mode [ 3501.559416][T29997] veth0_macvtap: left promiscuous mode [ 3501.564103][T29997] veth1_vlan: left promiscuous mode [ 3501.564439][T29997] veth0_vlan: left promiscuous mode [ 3501.835354][T25037] hid_parser_main: 1 callbacks suppressed [ 3501.841698][T25037] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 3501.860665][T25037] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3503.720676][ T2181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3503.740469][ T2181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3504.753203][ T2181] hsr_slave_0: entered promiscuous mode [ 3504.758316][ T2181] hsr_slave_1: entered promiscuous mode [ 3504.760282][ T2181] debugfs: 'hsr0' already exists in 'hsr' [ 3504.761067][ T2181] Cannot create hsr debugfs directory [ 3505.508471][ T2181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3505.527260][ T2181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3505.535609][ T2181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3505.543973][ T2181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3506.802191][ T2181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3507.984487][ T2181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3511.211343][ T2181] veth0_vlan: entered promiscuous mode [ 3511.245696][ T2181] veth1_vlan: entered promiscuous mode [ 3511.344450][ T2181] veth0_macvtap: entered promiscuous mode [ 3511.357859][ T2181] veth1_macvtap: entered promiscuous mode [ 3511.419074][T31316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3511.419329][T31316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3511.419510][T31316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3511.419821][T31316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3514.281251][ T31] audit: type=1400 audit(3514.210:709): avc: denied { name_bind } for pid=2624 comm="syz.4.6882" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 3520.481910][ T2665] input: syz0 as /devices/virtual/input/input13 [ 3521.054133][ T31] audit: type=1400 audit(3520.980:710): avc: denied { setopt } for pid=2672 comm="syz.2.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3522.323101][ T2682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6901'. [ 3524.925064][ T31] audit: type=1400 audit(3524.840:711): avc: denied { setopt } for pid=2685 comm="syz.2.6902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3525.403007][ T2692] vlan2: entered promiscuous mode [ 3525.403336][ T2692] dummy0: entered promiscuous mode [ 3532.837933][ T2698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6903'. [ 3532.873057][ T2698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2698 comm=syz.4.6903 [ 3537.508721][ T2717] bond_slave_0: entered promiscuous mode [ 3537.509055][ T2717] bond_slave_1: entered promiscuous mode [ 3537.514618][ T2717] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 3538.811627][ T2727] binder: 2724:2727 unknown command 0 [ 3538.812047][ T2727] binder: 2724:2727 ioctl c0306201 20000480 returned -22 [ 3548.308455][ T2738] input: syz0 as /devices/virtual/input/input14 [ 3548.342889][ T2738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6911'. [ 3548.404712][ T2738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2738 comm=syz.4.6911 [ 3553.478228][ T2765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3553.480032][ T2765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3553.522644][ T2765] pimreg: entered allmulticast mode [ 3553.524946][ T2765] pimreg: left allmulticast mode [ 3553.620144][ T31] audit: type=1400 audit(3553.540:712): avc: denied { bind } for pid=2762 comm="syz.4.6914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3555.028181][ T2773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3555.030877][ T2773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3556.986738][ T2784] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3944. macoff=96 [ 3563.193197][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3563.194160][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3568.809697][ T2823] syzkaller0: entered promiscuous mode [ 3568.812097][ T2823] syzkaller0: entered allmulticast mode [ 3594.492205][ T2864] syzkaller0: entered promiscuous mode [ 3594.492565][ T2864] syzkaller0: entered allmulticast mode [ 3598.845260][ T2886] fuse: Bad value for 'fd' [ 3601.345659][ T31] audit: type=1400 audit(3601.270:713): avc: denied { getopt } for pid=2891 comm="syz.4.6956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3602.620696][ T2897] fuse: Bad value for 'fd' [ 3603.451453][ T2908] fuse: Bad value for 'fd' [ 3603.998401][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3604.000505][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3604.021578][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3604.023654][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3605.294560][ T2928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3628.295382][ T2994] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3628.299041][ T2994] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3654.232363][ T3049] 8<--- cut here --- [ 3654.232562][ T3049] Unable to handle kernel paging request at virtual address fee04f2a when write [ 3654.232635][ T3049] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 3654.234947][ T3049] Internal error: Oops: a06 [#1] SMP ARM [ 3654.245177][ T3049] Modules linked in: [ 3654.245720][ T3049] CPU: 0 UID: 0 PID: 3049 Comm: syz.2.6998 Not tainted syzkaller #0 PREEMPT [ 3654.246046][ T3049] Hardware name: ARM-Versatile Express [ 3654.246271][ T3049] PC is at subdev_8255_io+0x60/0x6c [ 3654.246997][ T3049] LR is at subdev_8255_io+0x4c/0x6c [ 3654.247835][ T3049] pc : [<813b8ba0>] lr : [<813b8b8c>] psr: 60000013 [ 3654.248022][ T3049] sp : dfa29cb8 ip : dfa29cb8 fp : dfa29cd4 [ 3654.248450][ T3049] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 3654.248711][ T3049] r7 : 00004f27 r6 : 0000009b r5 : 83e95f00 r4 : 00004f2a [ 3654.249022][ T3049] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 83e95f00 [ 3654.249385][ T3049] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 3654.249759][ T3049] Control: 30c5387d Table: 85e566c0 DAC: fffffffd [ 3654.250081][ T3049] Register r0 information: slab kmalloc-192 start 83e95f00 pointer offset 0 size 192 [ 3654.250940][ T3049] Register r1 information: non-paged memory [ 3654.251316][ T3049] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 3654.251771][ T3049] Register r3 information: non-paged memory [ 3654.252001][ T3049] Register r4 information: non-paged memory [ 3654.252238][ T3049] Register r5 information: slab kmalloc-192 start 83e95f00 pointer offset 0 size 192 [ 3654.252672][ T3049] Register r6 information: non-paged memory [ 3654.252926][ T3049] Register r7 information: non-paged memory [ 3654.253168][ T3049] Register r8 information: non-paged memory [ 3654.253412][ T3049] Register r9 information: NULL pointer [ 3654.253659][ T3049] Register r10 information: NULL pointer [ 3654.253895][ T3049] Register r11 information: 2-page vmalloc region starting at 0xdfa28000 allocated at kernel_clone+0xac/0x3ec [ 3654.254496][ T3049] Register r12 information: 2-page vmalloc region starting at 0xdfa28000 allocated at kernel_clone+0xac/0x3ec [ 3654.255126][ T3049] Process syz.2.6998 (pid: 3049, stack limit = 0xdfa28000) [ 3654.256634][ T3049] Stack: (0xdfa29cb8 to 0xdfa2a000) [ 3654.257686][ T3049] 9ca0: 813b8b40 83e95f00 [ 3654.260286][ T3049] 9cc0: 00004f27 00004f27 dfa29cf4 dfa29cd8 813b8878 813b8b4c 00004f27 80503b64 [ 3654.260797][ T3049] 9ce0: 84904800 84904800 dfa29d14 dfa29cf8 813b8c38 813b882c 84904800 83e95f00 [ 3654.261164][ T3049] 9d00: dfa29da4 00004f27 dfa29d54 dfa29d18 813b8e2c 813b8bb8 82ae3da0 83b48080 [ 3654.261542][ T3049] 9d20: 828215b0 00000000 00000000 829d0144 83e95f00 83e95f44 dfa29d90 83e95f00 [ 3654.261791][ T3049] 9d40: 00000000 82b16f40 dfa29d8c dfa29d58 813a7d34 813b8d7c 200000c0 00000000 [ 3654.262038][ T3049] 9d60: dfa29d7c 200000c0 83e95f00 b5403587 200000c0 83a70000 40946400 00000002 [ 3654.262253][ T3049] 9d80: dfa29e4c dfa29d90 813a3880 813a7c38 35353238 00000000 00000000 00000000 [ 3654.262454][ T3049] 9da0: 00000000 00004f27 00000005 00000002 00000411 00000000 00000cc7 00000fff [ 3654.262643][ T3049] 9dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000001 0000000c [ 3654.262851][ T3049] 9de0: 0000e1cb 00000006 00000004 00000003 00000395 80000089 fffffffd 00000000 [ 3654.263035][ T3049] 9e00: fffffff5 ffffeadb 00000007 0000003c 00000008 00000004 08000000 dffffffa [ 3654.263269][ T3049] 9e20: 00000000 1e944231 00000000 8714c900 83e95f00 200000c0 200000c0 83a70000 [ 3654.263474][ T3049] 9e40: dfa29f14 dfa29e50 813a484c 813a378c 00000000 00000000 00000000 1e944231 [ 3654.263674][ T3049] 9e60: 00000000 00000000 8247054c 0000005f 83d0f458 83e95f30 8418f36c 83a70000 [ 3654.263866][ T3049] 9e80: dfa29ee4 dfa29e90 80797aa4 8078de08 00000064 00000001 00000000 dfa29eac [ 3654.264053][ T3049] 9ea0: 85962190 834f36e8 00006400 0000000b dfa29ea0 00000000 00000000 1e944231 [ 3654.264236][ T3049] 9ec0: 8714c900 40946400 200000c0 200000c0 8714c900 00000003 dfa29ef4 dfa29ee8 [ 3654.264429][ T3049] 9ee0: 80797bc4 1e944231 dfa29f14 40946400 00000000 8714c901 200000c0 8714c900 [ 3654.264621][ T3049] 9f00: 00000003 83a70000 dfa29fa4 dfa29f18 8056cdc8 813a427c ecac8b10 83a70000 [ 3654.264820][ T3049] 9f20: dfa29f3c dfa29f30 81a39db8 81a39c88 dfa29f54 dfa29f40 8025e490 8028ef6c [ 3654.265010][ T3049] 9f40: dfa29fb0 40000000 dfa29f84 dfa29f58 802229ec 8025e44c 00000000 8281cddc [ 3654.265195][ T3049] 9f60: dfa29fb0 0014c820 ecac8b10 80222940 00000000 1e944231 dfa29fac 00000000 [ 3654.265380][ T3049] 9f80: 00000000 002f6308 00000036 8020029c 83a70000 00000036 00000000 dfa29fa8 [ 3654.265567][ T3049] 9fa0: 80200060 8056cca4 00000000 00000000 00000003 40946400 200000c0 00000000 [ 3654.265763][ T3049] 9fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f2e0bc [ 3654.265961][ T3049] 9fe0: 76f2dec0 76f2deb0 0001948c 001322c0 60000010 00000003 00000000 00000000 [ 3654.266188][ T3049] Call trace: [ 3654.266344][ T3049] [<813b8b40>] (subdev_8255_io) from [<813b8878>] (subdev_8255_do_config+0x58/0x60) [ 3654.266839][ T3049] r7:00004f27 r6:00004f27 r5:83e95f00 r4:813b8b40 [ 3654.268533][ T3049] [<813b8820>] (subdev_8255_do_config) from [<813b8c38>] (subdev_8255_io_init+0x8c/0x9c) [ 3654.271338][ T3049] r4:84904800 [ 3654.271610][ T3049] [<813b8bac>] (subdev_8255_io_init) from [<813b8e2c>] (dev_8255_attach+0xbc/0x114) [ 3654.274324][ T3049] r7:00004f27 r6:dfa29da4 r5:83e95f00 r4:84904800 [ 3654.276494][ T3049] [<813b8d70>] (dev_8255_attach) from [<813a7d34>] (comedi_device_attach+0x108/0x250) [ 3654.276902][ T3049] r10:82b16f40 r9:00000000 r8:83e95f00 r7:dfa29d90 r6:83e95f44 r5:83e95f00 [ 3654.277108][ T3049] r4:829d0144 [ 3654.277211][ T3049] [<813a7c2c>] (comedi_device_attach) from [<813a3880>] (do_devconfig_ioctl+0x100/0x220) [ 3654.277448][ T3049] r10:00000002 r9:40946400 r8:83a70000 r7:200000c0 r6:b5403587 r5:83e95f00 [ 3654.277624][ T3049] r4:200000c0 [ 3654.277709][ T3049] [<813a3780>] (do_devconfig_ioctl) from [<813a484c>] (comedi_unlocked_ioctl+0x5dc/0x1c50) [ 3654.278038][ T3049] r8:83a70000 r7:200000c0 r6:200000c0 r5:83e95f00 r4:8714c900 [ 3654.278271][ T3049] [<813a4270>] (comedi_unlocked_ioctl) from [<8056cdc8>] (sys_ioctl+0x130/0xba0) [ 3654.278505][ T3049] r10:83a70000 r9:00000003 r8:8714c900 r7:200000c0 r6:8714c901 r5:00000000 [ 3654.278676][ T3049] r4:40946400 [ 3654.278755][ T3049] [<8056cc98>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3654.278929][ T3049] Exception stack(0xdfa29fa8 to 0xdfa29ff0) [ 3654.279068][ T3049] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 3654.279357][ T3049] 9fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f2e0bc [ 3654.279686][ T3049] 9fe0: 76f2dec0 76f2deb0 0001948c 001322c0 [ 3654.279945][ T3049] r10:00000036 r9:83a70000 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 3654.280263][ T3049] r4:00000000 [ 3654.280758][ T3049] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 3654.281386][ T3049] ---[ end trace 0000000000000000 ]--- [ 3654.288115][ T3049] Kernel panic - not syncing: Fatal exception [ 3654.292745][ T3049] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:19:16 Registers: info registers vcpu 0 CPU#0 R00=841c7c40 R01=00000065 R02=eae05000 R03=00000000 R04=84b68024 R05=841c7c40 R06=80a7963c R07=84b68038 R08=82826ef8 R09=00000000 R10=00003af6 R11=dfa2991c R12=00000002 R13=dfa29910 R14=829590c4 R15=80a79694 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=81a46420 R04=83a9d818 R05=60000013 R06=83a9d818 R07=00000001 R08=dfb69ef4 R09=8789d400 R10=00000072 R11=dfb69e84 R12=dfb69e48 R13=dfb69e70 R14=802914ec R15=81a46440 PSR=60000093 -ZC- A S svc32 s00=62696c2f s01=646f6d2f d00=646f6d2f62696c2f s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000