last executing test programs: 21.329386343s ago: executing program 0 (id=3036): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff16000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 18.759865235s ago: executing program 0 (id=3037): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x560d, 0x0) 18.67875892s ago: executing program 0 (id=3038): socket(0x1d, 0x2, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 7.650000278s ago: executing program 0 (id=3044): r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f00000010c0)) 7.276206259s ago: executing program 0 (id=3045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x8, 0x6, "aae75371"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x404c010}, 0x0) 7.037254602s ago: executing program 0 (id=3046): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x65) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) 492.898393ms ago: executing program 1 (id=3048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10500, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}}, 0x50) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 312.022763ms ago: executing program 1 (id=3049): r0 = syz_open_dev$admmidi(0x0, 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f00000010c0)) 311.665663ms ago: executing program 1 (id=3050): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x4c) 190.51881ms ago: executing program 1 (id=3051): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x488}], 0x1) 100.409715ms ago: executing program 1 (id=3052): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000940)={@rand_addr=0x64010100, @empty}, 0xc) 0s ago: executing program 1 (id=3053): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) kernel console output (not intermixed with test programs): aller #0 PREEMPT [ 968.571364][T11182] Hardware name: ARM-Versatile Express [ 968.571393][T11182] Call trace: [ 968.571432][T11182] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 968.571544][T11182] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 968.571567][T11182] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 968.571622][T11182] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 968.571677][T11182] r5:8382bc00 r4:82950650 [ 968.571696][T11182] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 968.571764][T11182] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 968.571856][T11182] r8:76b0bf30 r7:00000000 r6:00000000 r5:e04f9f68 r4:00000002 [ 968.572113][T11182] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 968.572242][T11182] [<8096b0d8>] (should_fail_usercopy) from [<8058ff08>] (simple_read_from_buffer+0x80/0x13c) [ 968.572480][T11182] [<8058fe88>] (simple_read_from_buffer) from [<80607d48>] (proc_fail_nth_read+0xb8/0x100) [ 968.572927][T11182] r10:00000001 r9:80607c90 r8:00000002 r7:e04f9f68 r6:0000000f r5:76b0bf30 [ 968.572963][T11182] r4:8382bc00 r3:e04f9e9f [ 968.573019][T11182] [<80607c90>] (proc_fail_nth_read) from [<80554580>] (vfs_read+0x98/0x320) [ 968.573299][T11182] r8:76b0bf30 r7:e04f9f68 r6:8382bc00 r5:0000000f r4:85681840 [ 968.573564][T11182] [<805544e8>] (vfs_read) from [<80555228>] (ksys_read+0x74/0xe8) [ 968.574160][T11182] r10:00000003 r9:8382bc00 r8:8020029c r7:00000000 r6:00000000 r5:85681840 [ 968.574640][T11182] r4:85681843 [ 968.575158][T11182] [<805551b4>] (ksys_read) from [<805552ac>] (sys_read+0x10/0x14) [ 968.575787][T11182] r7:00000003 r6:00000004 r5:76b0bf30 r4:0000000f [ 968.576072][T11182] [<8055529c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 968.576156][T11182] Exception stack(0xe04f9fa8 to 0xe04f9ff0) [ 968.576210][T11182] 9fa0: 0000000f 76b0bf30 00000004 76b0bf30 0000000f 00000000 [ 968.576253][T11182] 9fc0: 0000000f 76b0bf30 00000004 00000003 002e0000 00000000 00006364 76b0c0bc [ 968.576287][T11182] 9fe0: 00000158 76b0bed0 000d7d70 0012fe14 [ 968.685389][T11184] FAULT_INJECTION: forcing a failure. [ 968.685389][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 968.687068][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.1.1878 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 968.687189][T11184] Hardware name: ARM-Versatile Express [ 968.687219][T11184] Call trace: [ 968.687259][T11184] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 968.687411][T11184] r7:8382bc00 r6:00000000 r5:60000013 r4:8225c0c4 [ 968.687444][T11184] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 968.687508][T11184] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 968.687568][T11184] r5:8382bc00 r4:82919c00 [ 968.687588][T11184] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 968.687658][T11184] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 968.687734][T11184] r8:00000000 r7:8382bc00 r6:00000820 r5:85896cc0 r4:830adb40 [ 968.687757][T11184] [<80522b18>] (should_failslab) from [<80507590>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 968.687810][T11184] [<80507544>] (kmem_cache_alloc_noprof) from [<81544508>] (skb_clone+0x60/0x1c8) [ 968.687893][T11184] r10:000001a2 r9:856a3800 r8:854efc00 r7:85896cc0 r6:85725ec0 r5:85896cc0 [ 968.687922][T11184] r4:00000820 [ 968.687941][T11184] [<815444a8>] (skb_clone) from [<8165b170>] (__netlink_deliver_tap+0x1f4/0x28c) [ 968.688010][T11184] r5:00000014 r4:85725800 [ 968.688031][T11184] [<8165af7c>] (__netlink_deliver_tap) from [<8165e214>] (netlink_unicast+0x280/0x29c) [ 968.688094][T11184] r10:00000000 r9:00000000 r8:84fa0d00 r7:85896cc0 r6:856a3800 r5:00000014 [ 968.688121][T11184] r4:854efc00 [ 968.688140][T11184] [<8165df94>] (netlink_unicast) from [<8165e3fc>] (netlink_sendmsg+0x1cc/0x444) [ 968.688238][T11184] r9:00000000 r8:00000000 r7:840c6c00 r6:00000014 r5:85896cc0 r4:dff21f20 [ 968.688375][T11184] [<8165e230>] (netlink_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 968.688456][T11184] r10:00000000 r9:dff21dc4 r8:dff21dc4 r7:00000000 r6:850b6f00 r5:dff21f20 [ 968.688487][T11184] r4:00000000 [ 968.688529][T11184] [<81530870>] (__sock_sendmsg) from [<81531124>] (____sys_sendmsg+0x298/0x2cc) [ 968.688599][T11184] r7:00000000 r6:850b6f00 r5:10004040 r4:dff21f20 [ 968.688630][T11184] [<81530e8c>] (____sys_sendmsg) from [<81532f30>] (___sys_sendmsg+0x9c/0xd0) [ 968.688705][T11184] r10:dff21e24 r9:20000140 r8:10004040 r7:00000000 r6:850b6f00 r5:dff21f20 [ 968.688731][T11184] r4:00000000 [ 968.688748][T11184] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 968.688825][T11184] r10:00000128 r9:8382bc00 r8:85aafa80 r7:10004040 r6:20000140 r5:85aafa81 [ 968.688854][T11184] r4:00000003 [ 968.688870][T11184] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 968.688943][T11184] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 968.688968][T11184] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 968.689016][T11184] Exception stack(0xdff21fa8 to 0xdff21ff0) [ 968.689058][T11184] 1fa0: 00000000 00000000 00000003 20000140 10004040 00000000 [ 968.689103][T11184] 1fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76b0c0bc [ 968.689137][T11184] 1fe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 971.400221][ T31] audit: type=1400 audit(971.310:370): avc: denied { accept } for pid=11191 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 975.997742][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.534460][ T31] audit: type=1400 audit(976.450:371): avc: denied { write } for pid=11217 comm="syz.1.1889" path="socket:[21988]" dev="sockfs" ino=21988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 978.954348][T11237] fuse: Bad value for 'user_id' [ 978.955624][T11237] fuse: Bad value for 'user_id' [ 979.205569][T11241] FAULT_INJECTION: forcing a failure. [ 979.205569][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 979.207245][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.1.1897 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 979.207336][T11241] Hardware name: ARM-Versatile Express [ 979.207365][T11241] Call trace: [ 979.207404][T11241] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 979.207508][T11241] r7:856e6c00 r6:00000000 r5:60000013 r4:8225c0c4 [ 979.207531][T11241] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 979.207579][T11241] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 979.207631][T11241] r5:856e6c00 r4:82919c00 [ 979.207651][T11241] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 979.207705][T11241] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 979.207775][T11241] r8:00000000 r7:856e6c00 r6:00000cc0 r5:ffffffff r4:830adb40 [ 979.207799][T11241] [<80522b18>] (should_failslab) from [<80506f24>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 979.207854][T11241] [<80506ed4>] (kmem_cache_alloc_node_noprof) from [<8153dc60>] (__alloc_skb+0x138/0x160) [ 979.207946][T11241] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 979.207977][T11241] r4:828060c0 [ 979.207995][T11241] [<8153db28>] (__alloc_skb) from [<8165dd40>] (netlink_alloc_large_skb+0x88/0xa0) [ 979.208062][T11241] r8:00000000 r7:840c6400 r6:0000011c r5:850b7680 r4:00000240 [ 979.208084][T11241] [<8165dcb8>] (netlink_alloc_large_skb) from [<8165e364>] (netlink_sendmsg+0x134/0x444) [ 979.208133][T11241] r5:850b7680 r4:dff21e68 [ 979.208151][T11241] [<8165e230>] (netlink_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 979.208217][T11241] r10:81e53f00 r9:20000080 r8:00000000 r7:850b7680 r6:850b7680 r5:dff21e68 [ 979.208241][T11241] r4:00000000 [ 979.208258][T11241] [<81530870>] (__sock_sendmsg) from [<81530988>] (sock_write_iter+0xa0/0xfc) [ 979.208319][T11241] r7:850b7680 r6:85aafd80 r5:dff21f08 r4:dff21ef0 [ 979.208339][T11241] [<815308e8>] (sock_write_iter) from [<8055510c>] (vfs_write+0x3a4/0x44c) [ 979.208398][T11241] r7:856e6c00 r6:0000011c r5:85aafd80 r4:00000000 [ 979.208420][T11241] [<80554d68>] (vfs_write) from [<80555378>] (ksys_write+0xc8/0xe8) [ 979.208479][T11241] r10:00000004 r9:856e6c00 r8:8020029c r7:0000011c r6:20000080 r5:85aafd80 [ 979.208505][T11241] r4:85aafd81 [ 979.208521][T11241] [<805552b0>] (ksys_write) from [<805553a8>] (sys_write+0x10/0x14) [ 979.208575][T11241] r7:00000004 r6:0012fef0 r5:00000000 r4:00000000 [ 979.208595][T11241] [<80555398>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 979.208643][T11241] Exception stack(0xdff21fa8 to 0xdff21ff0) [ 979.208685][T11241] 1fa0: 00000000 00000000 00000003 20000080 0000011c 00000000 [ 979.208726][T11241] 1fc0: 00000000 00000000 0012fef0 00000004 002e0000 00000000 00006364 76b0c0bc [ 979.208762][T11241] 1fe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 979.375922][T11243] fuse: Bad value for 'group_id' [ 979.376355][T11243] fuse: Bad value for 'group_id' [ 980.225248][T11250] FAULT_INJECTION: forcing a failure. [ 980.225248][T11250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.225738][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.0.1901 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 980.225811][T11250] Hardware name: ARM-Versatile Express [ 980.225834][T11250] Call trace: [ 980.225874][T11250] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 980.225980][T11250] r7:20000640 r6:00000000 r5:60000013 r4:8225c0c4 [ 980.226000][T11250] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 980.226128][T11250] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 980.226185][T11250] r5:856e3c00 r4:82950650 [ 980.226254][T11250] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 980.226339][T11250] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 980.226395][T11250] r8:00000000 r7:20000640 r6:eaae9e04 r5:00000004 r4:00000004 [ 980.226415][T11250] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 980.226516][T11250] [<8096b0d8>] (should_fail_usercopy) from [<81534480>] (copy_from_sockptr_offset.constprop.0+0x5c/0x11c) [ 980.226996][T11250] [<81534424>] (copy_from_sockptr_offset.constprop.0) from [<8153b29c>] (sk_getsockopt+0x68/0xe84) [ 980.227181][T11250] r8:00000000 r7:840b8c00 r6:0000002a r5:eaae9e14 r4:b5403587 [ 980.227203][T11250] [<8153b238>] (sk_getsockopt) from [<81530e44>] (do_sock_getsockopt+0x254/0x29c) [ 980.227286][T11250] r10:00000127 r9:20000640 r8:00000000 r7:850edb80 r6:0000002a r5:00000001 [ 980.227590][T11250] r4:b5403587 [ 980.227621][T11250] [<81530bf0>] (do_sock_getsockopt) from [<81532af4>] (__sys_getsockopt+0x94/0xdc) [ 980.227686][T11250] r9:856e3c00 r8:856810c0 r7:eaae9f50 r6:0000002a r5:eaae9f58 r4:856810c1 [ 980.227779][T11250] [<81532a60>] (__sys_getsockopt) from [<81532b58>] (sys_getsockopt+0x1c/0x24) [ 980.228169][T11250] r8:8020029c r7:00000127 r6:0012fef0 r5:00000000 r4:20000640 [ 980.228359][T11250] [<81532b3c>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 980.228406][T11250] Exception stack(0xeaae9fa8 to 0xeaae9ff0) [ 980.228517][T11250] 9fa0: 20000640 00000000 00000003 00000001 0000002a 00000000 [ 980.228608][T11250] 9fc0: 20000640 00000000 0012fef0 00000127 002e0000 00000000 00006364 76b1a0bc [ 980.228755][T11250] 9fe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 982.358812][T11265] FAULT_INJECTION: forcing a failure. [ 982.358812][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 982.360446][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.0.1908 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 982.360563][T11265] Hardware name: ARM-Versatile Express [ 982.360592][T11265] Call trace: [ 982.360632][T11265] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 982.360732][T11265] r7:00000c40 r6:00000000 r5:60000013 r4:8225c0c4 [ 982.360756][T11265] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 982.360830][T11265] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 982.360904][T11265] r5:856e3000 r4:82919c00 [ 982.360941][T11265] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 982.360999][T11265] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 982.361065][T11265] r8:856e3000 r7:00000c40 r6:85aaf1a8 r5:00001000 r4:830016c0 [ 982.361087][T11265] [<80522b18>] (should_failslab) from [<80507914>] (__kmalloc_noprof+0x9c/0x458) [ 982.361141][T11265] [<80507878>] (__kmalloc_noprof) from [<807c115c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 982.361210][T11265] r10:856e3000 r9:8309e400 r8:00000000 r7:834cfee0 r6:85aaf1a8 r5:00001000 [ 982.361235][T11265] r4:00000000 [ 982.361251][T11265] [<807c1120>] (tomoyo_realpath_from_path) from [<807bd2a0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 982.361318][T11265] r10:856e3000 r9:00000000 r8:00000004 r7:c028aa05 r6:00000004 r5:81cd65f8 [ 982.361382][T11265] r4:85aaf1a8 r3:826c0200 [ 982.361403][T11265] [<807bd1d4>] (tomoyo_path_number_perm) from [<807c1b80>] (tomoyo_file_ioctl+0x1c/0x20) [ 982.361467][T11265] r9:85aaf180 r8:00000004 r7:00000000 r6:00000000 r5:c028aa05 r4:85aaf180 [ 982.361492][T11265] [<807c1b64>] (tomoyo_file_ioctl) from [<8076eb04>] (security_file_ioctl+0x64/0x1e4) [ 982.361544][T11265] [<8076eaa0>] (security_file_ioctl) from [<8056e1f8>] (sys_ioctl+0x4c/0xdc8) [ 982.361606][T11265] r7:00000000 r6:85aaf181 r5:00000000 r4:c028aa05 [ 982.361628][T11265] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 982.361675][T11265] Exception stack(0xeabddfa8 to 0xeabddff0) [ 982.361715][T11265] dfa0: 00000000 00000000 00000004 c028aa05 00000000 00000000 [ 982.361758][T11265] dfc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b1a0bc [ 982.361793][T11265] dfe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 982.361937][T11265] r10:00000036 r9:856e3000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 982.361969][T11265] r4:00000000 [ 982.367067][T11265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 984.429418][T11284] FAULT_INJECTION: forcing a failure. [ 984.429418][T11284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.432870][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.0.1917 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 984.432994][T11284] Hardware name: ARM-Versatile Express [ 984.433022][T11284] Call trace: [ 984.433060][T11284] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 984.433175][T11284] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 984.433201][T11284] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 984.433255][T11284] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 984.433314][T11284] r5:84ef6c00 r4:82950650 [ 984.433335][T11284] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 984.433440][T11284] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 984.433498][T11284] r8:76b19f30 r7:00000000 r6:00000000 r5:ead91f68 r4:00000002 [ 984.433522][T11284] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 984.433588][T11284] [<8096b0d8>] (should_fail_usercopy) from [<8058ff08>] (simple_read_from_buffer+0x80/0x13c) [ 984.433644][T11284] [<8058fe88>] (simple_read_from_buffer) from [<80607d48>] (proc_fail_nth_read+0xb8/0x100) [ 984.433710][T11284] r10:00000001 r9:80607c90 r8:00000002 r7:ead91f68 r6:0000000f r5:76b19f30 [ 984.433740][T11284] r4:84ef6c00 r3:ead91e9f [ 984.433759][T11284] [<80607c90>] (proc_fail_nth_read) from [<80554580>] (vfs_read+0x98/0x320) [ 984.433826][T11284] r8:76b19f30 r7:ead91f68 r6:84ef6c00 r5:0000000f r4:85aafd80 [ 984.433861][T11284] [<805544e8>] (vfs_read) from [<80555228>] (ksys_read+0x74/0xe8) [ 984.433928][T11284] r10:00000003 r9:84ef6c00 r8:8020029c r7:00000000 r6:00000000 r5:85aafd80 [ 984.433958][T11284] r4:85aafd83 [ 984.433976][T11284] [<805551b4>] (ksys_read) from [<805552ac>] (sys_read+0x10/0x14) [ 984.434033][T11284] r7:00000003 r6:00000004 r5:76b19f30 r4:0000000f [ 984.434055][T11284] [<8055529c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 984.434102][T11284] Exception stack(0xead91fa8 to 0xead91ff0) [ 984.434146][T11284] 1fa0: 0000000f 76b19f30 00000004 76b19f30 0000000f 00000000 [ 984.434232][T11284] 1fc0: 0000000f 76b19f30 00000004 00000003 002e0000 00000000 00006364 76b1a0bc [ 984.434271][T11284] 1fe0: 00000158 76b19ed0 000d7d70 0012fe14 [ 988.430002][T11304] selinux_netlink_send: 55 callbacks suppressed [ 988.433021][T11304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11304 comm=syz.1.1924 [ 988.859329][T11311] FAULT_INJECTION: forcing a failure. [ 988.859329][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 988.859733][T11311] CPU: 0 UID: 0 PID: 11311 Comm: syz.0.1926 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 988.859795][T11311] Hardware name: ARM-Versatile Express [ 988.859817][T11311] Call trace: [ 988.859853][T11311] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 988.859962][T11311] r7:00100cc0 r6:00000000 r5:60000013 r4:8225c0c4 [ 988.859988][T11311] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 988.860046][T11311] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 988.860106][T11311] r5:84060000 r4:82919c00 [ 988.860126][T11311] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 988.860184][T11311] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 988.860258][T11311] r8:00100cc0 r7:00100cc0 r6:00000000 r5:83001240 r4:00000002 [ 988.860306][T11311] [<80522b18>] (should_failslab) from [<805060f4>] (__kvmalloc_node_noprof+0xe4/0x5a0) [ 988.860372][T11311] [<80506010>] (__kvmalloc_node_noprof) from [<804a118c>] (vmemdup_user+0x28/0x16c) [ 988.860572][T11311] r10:000000e4 r9:84060000 r8:20000240 r7:20000240 r6:00001000 r5:00000000 [ 988.860658][T11311] r4:00000002 [ 988.860933][T11311] [<804a1164>] (vmemdup_user) from [<8058d880>] (setxattr_copy+0x58/0x90) [ 988.861044][T11311] r9:84060000 r8:20000240 r7:00000003 r6:00001000 r5:00000000 r4:eaeade48 [ 988.861363][T11311] [<8058d828>] (setxattr_copy) from [<8058da8c>] (path_setxattrat+0x7c/0x17c) [ 988.861574][T11311] r5:00000000 r4:20000200 [ 988.861600][T11311] [<8058da10>] (path_setxattrat) from [<8058dd8c>] (sys_fsetxattr+0x30/0x38) [ 988.861676][T11311] r8:8020029c r7:000000e4 r6:0012fef0 r5:00000000 r4:00000000 [ 988.861700][T11311] [<8058dd5c>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 988.861749][T11311] Exception stack(0xeaeadfa8 to 0xeaeadff0) [ 988.861867][T11311] dfa0: 00000000 00000000 00000003 20000200 20000240 00000002 [ 988.861919][T11311] dfc0: 00000000 00000000 0012fef0 000000e4 002e0000 00000000 00006364 76b1a0bc [ 988.861988][T11311] dfe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 988.973002][T11313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=11313 comm=syz.0.1927 [ 993.354930][ T31] audit: type=1400 audit(993.270:372): avc: denied { read write } for pid=11330 comm="syz.0.1933" name="vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 993.365785][ T31] audit: type=1400 audit(993.280:373): avc: denied { open } for pid=11330 comm="syz.0.1933" path="/dev/vhost-net" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 993.380387][ T31] audit: type=1400 audit(993.290:374): avc: denied { ioctl } for pid=11330 comm="syz.0.1933" path="/dev/vhost-net" dev="devtmpfs" ino=707 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 999.030325][T11360] FAULT_INJECTION: forcing a failure. [ 999.030325][T11360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.030855][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.1.1943 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 999.030953][T11360] Hardware name: ARM-Versatile Express [ 999.030981][T11360] Call trace: [ 999.031021][T11360] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 999.031150][T11360] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 999.031174][T11360] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 999.031230][T11360] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 999.031381][T11360] r5:84ef6c00 r4:82950650 [ 999.031406][T11360] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 999.031562][T11360] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 999.031680][T11360] r8:76b0bf30 r7:00000000 r6:00000000 r5:eafb1f68 r4:00000002 [ 999.031789][T11360] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 999.032000][T11360] [<8096b0d8>] (should_fail_usercopy) from [<8058ff08>] (simple_read_from_buffer+0x80/0x13c) [ 999.032271][T11360] [<8058fe88>] (simple_read_from_buffer) from [<80607d48>] (proc_fail_nth_read+0xb8/0x100) [ 999.032494][T11360] r10:00000001 r9:80607c90 r8:00000002 r7:eafb1f68 r6:0000000f r5:76b0bf30 [ 999.032568][T11360] r4:84ef6c00 r3:eafb1e9f [ 999.032608][T11360] [<80607c90>] (proc_fail_nth_read) from [<80554580>] (vfs_read+0x98/0x320) [ 999.032699][T11360] r8:76b0bf30 r7:eafb1f68 r6:84ef6c00 r5:0000000f r4:85681180 [ 999.032720][T11360] [<805544e8>] (vfs_read) from [<80555228>] (ksys_read+0x74/0xe8) [ 999.032774][T11360] r10:00000003 r9:84ef6c00 r8:8020029c r7:00000000 r6:00000000 r5:85681180 [ 999.032798][T11360] r4:85681183 [ 999.032813][T11360] [<805551b4>] (ksys_read) from [<805552ac>] (sys_read+0x10/0x14) [ 999.032860][T11360] r7:00000003 r6:00000004 r5:76b0bf30 r4:0000000f [ 999.032885][T11360] [<8055529c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 999.032999][T11360] Exception stack(0xeafb1fa8 to 0xeafb1ff0) [ 999.033050][T11360] 1fa0: 0000000f 76b0bf30 00000004 76b0bf30 0000000f 00000000 [ 999.033092][T11360] 1fc0: 0000000f 76b0bf30 00000004 00000003 002e0000 00000000 00006364 76b0c0bc [ 999.033196][T11360] 1fe0: 00000158 76b0bed0 000d7d70 0012fe14 [ 999.477163][T11368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=11368 comm=syz.1.1947 [ 1010.141519][T11450] FAULT_INJECTION: forcing a failure. [ 1010.141519][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.144724][T11450] CPU: 1 UID: 0 PID: 11450 Comm: syz.1.1976 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1010.144829][T11450] Hardware name: ARM-Versatile Express [ 1010.144862][T11450] Call trace: [ 1010.144901][T11450] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1010.145011][T11450] r7:00000c40 r6:00000000 r5:60000013 r4:8225c0c4 [ 1010.145034][T11450] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1010.145082][T11450] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1010.145134][T11450] r5:85570000 r4:82919c00 [ 1010.145151][T11450] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1010.145203][T11450] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1010.145269][T11450] r8:85570000 r7:00000c40 r6:85aafe68 r5:00001000 r4:830016c0 [ 1010.145290][T11450] [<80522b18>] (should_failslab) from [<80507914>] (__kmalloc_noprof+0x9c/0x458) [ 1010.145339][T11450] [<80507878>] (__kmalloc_noprof) from [<807c115c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1010.145443][T11450] r10:85570000 r9:8309e400 r8:00000000 r7:83439088 r6:85aafe68 r5:00001000 [ 1010.145468][T11450] r4:00000000 [ 1010.145485][T11450] [<807c1120>] (tomoyo_realpath_from_path) from [<807bd2a0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1010.145552][T11450] r10:85570000 r9:00000000 r8:00000003 r7:40085511 r6:00000004 r5:81cd65f8 [ 1010.145580][T11450] r4:85aafe68 r3:826c0200 [ 1010.145598][T11450] [<807bd1d4>] (tomoyo_path_number_perm) from [<807c1b80>] (tomoyo_file_ioctl+0x1c/0x20) [ 1010.145686][T11450] r9:85aafe40 r8:00000003 r7:00000000 r6:00000000 r5:40085511 r4:85aafe40 [ 1010.145715][T11450] [<807c1b64>] (tomoyo_file_ioctl) from [<8076eb04>] (security_file_ioctl+0x64/0x1e4) [ 1010.145767][T11450] [<8076eaa0>] (security_file_ioctl) from [<8056e1f8>] (sys_ioctl+0x4c/0xdc8) [ 1010.145831][T11450] r7:00000000 r6:85aafe41 r5:00000000 r4:40085511 [ 1010.145858][T11450] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1010.145904][T11450] Exception stack(0xdfa3dfa8 to 0xdfa3dff0) [ 1010.145945][T11450] dfa0: 00000000 00000000 00000003 40085511 00000000 00000000 [ 1010.145985][T11450] dfc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b0c0bc [ 1010.146017][T11450] dfe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 1010.146056][T11450] r10:00000036 r9:85570000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 1010.146080][T11450] r4:00000000 [ 1010.166098][T11450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.365417][T11455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=11455 comm=syz.1.1978 [ 1022.557231][T11510] FAULT_INJECTION: forcing a failure. [ 1022.557231][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.557728][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.0.1993 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1022.557793][T11510] Hardware name: ARM-Versatile Express [ 1022.557819][T11510] Call trace: [ 1022.557855][T11510] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1022.557969][T11510] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1022.558052][T11510] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1022.558110][T11510] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1022.558208][T11510] r5:83a83000 r4:82950650 [ 1022.558231][T11510] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1022.558288][T11510] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1022.558343][T11510] r8:dfe2deb8 r7:00000000 r6:00000001 r5:76ab6f30 r4:00000001 [ 1022.558387][T11510] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1022.558438][T11510] [<8096b0d8>] (should_fail_usercopy) from [<808c3238>] (kstrtouint_from_user+0x54/0x13c) [ 1022.558487][T11510] [<808c31e4>] (kstrtouint_from_user) from [<80609088>] (proc_fail_nth_write+0x40/0xe8) [ 1022.558550][T11510] r8:dfe2df68 r7:83a83000 r6:00000001 r5:85681600 r4:00000001 [ 1022.558572][T11510] [<80609048>] (proc_fail_nth_write) from [<80554e14>] (vfs_write+0xac/0x44c) [ 1022.558800][T11510] r5:85681600 r4:80609048 [ 1022.558848][T11510] [<80554d68>] (vfs_write) from [<80555324>] (ksys_write+0x74/0xe8) [ 1022.558925][T11510] r10:00000004 r9:83a83000 r8:8020029c r7:00000000 r6:00000002 r5:85681600 [ 1022.558950][T11510] r4:85681603 [ 1022.558966][T11510] [<805552b0>] (ksys_write) from [<805553a8>] (sys_write+0x10/0x14) [ 1022.559020][T11510] r7:00000004 r6:00000005 r5:76ab6f30 r4:00000001 [ 1022.559044][T11510] [<80555398>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1022.559087][T11510] Exception stack(0xdfe2dfa8 to 0xdfe2dff0) [ 1022.559127][T11510] dfa0: 00000001 76ab6f30 00000005 76ab6f30 00000001 00000000 [ 1022.559168][T11510] dfc0: 00000001 76ab6f30 00000005 00000004 002e0000 00000000 00006364 76ab70bc [ 1022.559202][T11510] dfe0: 00000158 76ab6ed0 000d7d70 0012fedc [ 1023.283536][T11519] FAULT_INJECTION: forcing a failure. [ 1023.283536][T11519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.284948][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.0.1997 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1023.285034][T11519] Hardware name: ARM-Versatile Express [ 1023.285063][T11519] Call trace: [ 1023.285103][T11519] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1023.285202][T11519] r7:b5403587 r6:00000000 r5:60000013 r4:8225c0c4 [ 1023.285225][T11519] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1023.285280][T11519] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1023.285336][T11519] r5:8383e000 r4:82950650 [ 1023.285387][T11519] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1023.285449][T11519] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1023.285515][T11519] r8:00000000 r7:b5403587 r6:00000000 r5:8383e830 r4:76b19ca0 [ 1023.285538][T11519] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1023.285585][T11519] [<8096b0d8>] (should_fail_usercopy) from [<8022b2dc>] (preserve_vfp_context+0x78/0xc4) [ 1023.285646][T11519] [<8022b264>] (preserve_vfp_context) from [<8022b6a4>] (setup_sigframe+0x16c/0x1c4) [ 1023.285702][T11519] r5:8383e830 r4:76b19bb8 [ 1023.285721][T11519] [<8022b538>] (setup_sigframe) from [<8022bac4>] (do_work_pending+0x2f4/0x4f8) [ 1023.285785][T11519] r10:00000077 r9:b5403587 r8:00000000 r7:8383e830 r6:76b19bb8 r5:dfdc1fb0 [ 1023.285812][T11519] r4:8383e000 [ 1023.285827][T11519] [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1023.285877][T11519] Exception stack(0xdfdc1fb0 to 0xdfdc1ff8) [ 1023.285917][T11519] 1fa0: fffffffc 00000003 00000000 00000004 [ 1023.285962][T11519] 1fc0: 00000000 00000000 0012fef0 00000118 002e0000 00000000 00006364 76b1a0bc [ 1023.286001][T11519] 1fe0: 76b19ec0 76b19eb0 000193a4 00131f40 60000010 00000011 [ 1023.286041][T11519] r10:00000077 r9:8383e000 r8:00000000 r7:00000077 r6:0012fef0 r5:00000000 [ 1023.286065][T11519] r4:00000000 [ 1025.135079][T11532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11532 comm=syz.1.2001 [ 1026.358602][ T31] audit: type=1400 audit(1026.270:375): avc: denied { create } for pid=11544 comm="syz.0.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1041.502715][T11619] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 1041.505966][T11619] FAULT_INJECTION: forcing a failure. [ 1041.505966][T11619] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.506396][T11619] CPU: 0 UID: 0 PID: 11619 Comm: syz.0.2021 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1041.506477][T11619] Hardware name: ARM-Versatile Express [ 1041.506504][T11619] Call trace: [ 1041.506543][T11619] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1041.506806][T11619] r7:00000820 r6:00000000 r5:60030013 r4:8225c0c4 [ 1041.507045][T11619] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1041.507113][T11619] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1041.507171][T11619] r5:83aa2400 r4:82919c00 [ 1041.507487][T11619] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1041.507814][T11619] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1041.507916][T11619] r8:83aa2400 r7:00000820 r6:848c82d8 r5:0000001e r4:83001240 [ 1041.508138][T11619] [<80522b18>] (should_failslab) from [<805085c8>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 1041.508306][T11619] [<80508528>] (__kmalloc_node_track_caller_noprof) from [<804a03fc>] (kmemdup_noprof+0x28/0x44) [ 1041.508572][T11619] r10:830cbe00 r9:84bc8c04 r8:e0419bc8 r7:84b63000 r6:848c82d8 r5:e0419bc0 [ 1041.508946][T11619] r4:0000001e [ 1041.508977][T11619] [<804a03d4>] (kmemdup_noprof) from [<8079fb88>] (sidtab_sid2str_get+0x54/0xa4) [ 1041.509269][T11619] r7:84b63000 r6:e0419bc8 r5:e0419bc0 r4:84b630bc [ 1041.509314][T11619] [<8079fb34>] (sidtab_sid2str_get) from [<807a7028>] (sidtab_entry_to_string+0x34/0x94) [ 1041.509441][T11619] r7:84b63000 r6:84b630bc r5:e0419bc0 r4:00000079 [ 1041.509704][T11619] [<807a6ff4>] (sidtab_entry_to_string) from [<807a71a0>] (security_sid_to_context_core+0x118/0x17c) [ 1041.509844][T11619] r9:e0419cec r8:84b63000 r7:84bc8c04 r6:e0419bc8 r5:e0419bc0 r4:00000079 [ 1041.509935][T11619] [<807a7088>] (security_sid_to_context_core) from [<807aa160>] (security_sid_to_context+0x1c/0x24) [ 1041.510125][T11619] r8:8078a634 r7:8078b638 r6:83aa2400 r5:84cdb220 r4:e0419c50 [ 1041.510179][T11619] [<807aa144>] (security_sid_to_context) from [<8078b6b8>] (avc_audit_post_callback+0x80/0x2f4) [ 1041.510375][T11619] [<8078b638>] (avc_audit_post_callback) from [<807b271c>] (common_lsm_audit+0x104/0x148) [ 1041.510475][T11619] r10:830cbe00 r9:e0419cec r8:8078a634 r7:8078b638 r6:e0419cec r5:84cdb220 [ 1041.510554][T11619] r4:83aa2bf0 [ 1041.510598][T11619] [<807b2618>] (common_lsm_audit) from [<8078bb44>] (slow_avc_audit+0xbc/0x114) [ 1041.510855][T11619] r8:0000000b r7:00000079 r6:0000005f r5:0000005f r4:00000079 [ 1041.510893][T11619] [<8078ba88>] (slow_avc_audit) from [<8078c5c4>] (avc_has_perm+0xd4/0xe4) [ 1041.510977][T11619] r5:00000000 r4:00000100 [ 1041.511026][T11619] [<8078c4f0>] (avc_has_perm) from [<807974b0>] (selinux_inode_setxattr+0x188/0x364) [ 1041.511351][T11619] r9:0000005f r8:83aa2400 r7:00000004 r6:8386263c r5:8340d110 r4:00000000 [ 1041.511640][T11619] [<80797328>] (selinux_inode_setxattr) from [<8077b300>] (security_inode_setxattr+0x408/0x418) [ 1041.511742][T11619] r10:80797328 r9:00000001 r8:00000025 r7:82920b60 r6:8421ee40 r5:8340d110 [ 1041.511772][T11619] r4:e0419e5c [ 1041.511864][T11619] [<8077aef8>] (security_inode_setxattr) from [<8058d418>] (__vfs_setxattr_locked+0x64/0x118) [ 1041.512265][T11619] r10:e0419dc0 r9:00000025 r8:8393ec58 r7:8421ee40 r6:e0419e5c r5:82920b60 [ 1041.512390][T11619] r4:8340d110 [ 1041.512765][T11619] [<8058d3b4>] (__vfs_setxattr_locked) from [<8058d55c>] (vfs_setxattr+0x90/0x180) [ 1041.512862][T11619] r8:82920b60 r7:e0419e5c r6:8340d110 r5:8393ecd8 r4:e0419e48 [ 1041.512896][T11619] [<8058d4cc>] (vfs_setxattr) from [<8058d6e0>] (do_setxattr+0x94/0x9c) [ 1041.512984][T11619] r10:000000e4 r9:8340d110 r8:82920b60 r7:8421ee40 r6:00000025 r5:e0419e5c [ 1041.513011][T11619] r4:e0419e48 [ 1041.513026][T11619] [<8058d64c>] (do_setxattr) from [<8058d910>] (file_setxattr+0x58/0x78) [ 1041.513089][T11619] r9:83aa2400 r8:20002180 r7:00000004 r6:e0419e48 r5:846e2b40 r4:00000000 [ 1041.513111][T11619] [<8058d8b8>] (file_setxattr) from [<8058db14>] (path_setxattrat+0x104/0x17c) [ 1041.513172][T11619] r7:00000004 r6:846e2b40 r5:846e2b41 r4:00000000 [ 1041.513193][T11619] [<8058da10>] (path_setxattrat) from [<8058dd8c>] (sys_fsetxattr+0x30/0x38) [ 1041.513256][T11619] r8:8020029c r7:000000e4 r6:0012fef0 r5:00000000 r4:00000001 [ 1041.513292][T11619] [<8058dd5c>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1041.513370][T11619] Exception stack(0xe0419fa8 to 0xe0419ff0) [ 1041.513415][T11619] 9fa0: 00000001 00000000 00000004 20002140 20002180 00000025 [ 1041.513455][T11619] 9fc0: 00000001 00000000 0012fef0 000000e4 002e0000 00000000 00006364 76b1a0bc [ 1041.513509][T11619] 9fe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 1041.550042][ T31] audit: type=1400 audit(1041.420:376): avc: denied { relabelto } for pid=11618 comm="syz.0.2021" name="cuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tsid=121 tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 1041.551405][ T31] audit: type=1400 audit(1041.460:377): avc: denied { associate } for pid=11618 comm="syz.0.2021" name="cuse" dev="devtmpfs" ino=90 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:bsdpty_device_t:s0" [ 1042.814660][T11624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11624 comm=syz.0.2023 [ 1042.817959][T11624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11624 comm=syz.0.2023 [ 1042.826032][T11624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=11624 comm=syz.0.2023 [ 1042.829759][T11624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11624 comm=syz.0.2023 [ 1045.666015][T11638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11638 comm=syz.1.2028 [ 1045.668201][T11638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11638 comm=syz.1.2028 [ 1061.735035][T11719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11719 comm=syz.1.2048 [ 1067.481061][ T31] audit: type=1400 audit(1067.390:378): avc: denied { sqpoll } for pid=11757 comm="syz.0.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1067.497888][T11758] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11758 comm=syz.0.2061 [ 1070.608749][ T31] audit: type=1400 audit(1070.520:379): avc: denied { read write } for pid=11795 comm="syz.1.2075" name="ttynull" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 1070.609284][ T31] audit: type=1400 audit(1070.520:380): avc: denied { open } for pid=11795 comm="syz.1.2075" path="/dev/ttynull" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 1074.740072][T11871] FAULT_INJECTION: forcing a failure. [ 1074.740072][T11871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.740455][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.0.2093 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1074.740536][T11871] Hardware name: ARM-Versatile Express [ 1074.740560][T11871] Call trace: [ 1074.740607][T11871] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1074.740729][T11871] r7:84fa1a00 r6:00000000 r5:60000013 r4:8225c0c4 [ 1074.740836][T11871] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1074.741000][T11871] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1074.741082][T11871] r5:83aa4800 r4:82950650 [ 1074.741103][T11871] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1074.741193][T11871] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1074.741375][T11871] r8:00000004 r7:84fa1a00 r6:20000180 r5:20000180 r4:82c1c750 [ 1074.741528][T11871] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1074.741811][T11871] [<8096b0d8>] (should_fail_usercopy) from [<8190627c>] (vlan_ioctl_handler+0x3c/0x4a0) [ 1074.741890][T11871] [<81906240>] (vlan_ioctl_handler) from [<815314d0>] (sock_ioctl+0x1f8/0x600) [ 1074.741983][T11871] r9:85681000 r8:00000004 r7:850c0500 r6:84fa1a00 r5:20000180 r4:82c1c750 [ 1074.742009][T11871] [<815312d8>] (sock_ioctl) from [<8056e2dc>] (sys_ioctl+0x130/0xdc8) [ 1074.742076][T11871] r9:85681000 r8:00000004 r7:20000180 r6:85681001 r5:00000000 r4:00008982 [ 1074.742097][T11871] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1074.742143][T11871] Exception stack(0xeb115fa8 to 0xeb115ff0) [ 1074.742186][T11871] 5fa0: 00000000 00000000 00000004 00008982 20000180 00000000 [ 1074.742346][T11871] 5fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76af90bc [ 1074.742379][T11871] 5fe0: 76af8ec0 76af8eb0 000193a4 00131f40 [ 1074.742408][T11871] r10:00000036 r9:83aa4800 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 1074.742424][T11871] r4:00000000 [ 1074.994665][ T31] audit: type=1400 audit(1074.910:381): avc: denied { accept } for pid=11863 comm="syz.1.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1077.173569][T11882] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11882 comm=syz.0.2098 [ 1077.177524][ T31] audit: type=1400 audit(1077.090:382): avc: denied { bind } for pid=11881 comm="syz.0.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1077.591132][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11897 comm=syz.0.2102 [ 1079.704431][T11901] fuse: Unknown parameter 'grou00000000000000000000' [ 1079.886351][T11905] FAULT_INJECTION: forcing a failure. [ 1079.886351][T11905] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.886923][T11905] CPU: 0 UID: 0 PID: 11905 Comm: syz.1.2105 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1079.886996][T11905] Hardware name: ARM-Versatile Express [ 1079.887022][T11905] Call trace: [ 1079.887059][T11905] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1079.887187][T11905] r7:83aa5400 r6:00000000 r5:60000013 r4:8225c0c4 [ 1079.887210][T11905] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1079.887298][T11905] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1079.887365][T11905] r5:83aa5400 r4:82919c00 [ 1079.887386][T11905] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1079.887444][T11905] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1079.887514][T11905] r8:00000000 r7:83aa5400 r6:00000cc0 r5:ffffffff r4:830adb40 [ 1079.887563][T11905] [<80522b18>] (should_failslab) from [<80506f24>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1079.887625][T11905] [<80506ed4>] (kmem_cache_alloc_node_noprof) from [<8153dc60>] (__alloc_skb+0x138/0x160) [ 1079.887700][T11905] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 1079.887778][T11905] r4:828060c0 [ 1079.887943][T11905] [<8153db28>] (__alloc_skb) from [<8165dd40>] (netlink_alloc_large_skb+0x88/0xa0) [ 1079.888026][T11905] r8:00000000 r7:855ea000 r6:00000028 r5:8356fb80 r4:00000140 [ 1079.888052][T11905] [<8165dcb8>] (netlink_alloc_large_skb) from [<8165e364>] (netlink_sendmsg+0x134/0x444) [ 1079.888105][T11905] r5:8356fb80 r4:eba95f20 [ 1079.888122][T11905] [<8165e230>] (netlink_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 1079.888187][T11905] r10:00000000 r9:eba95dc4 r8:eba95dc4 r7:00000000 r6:8356fb80 r5:eba95f20 [ 1079.888215][T11905] r4:00000000 [ 1079.888231][T11905] [<81530870>] (__sock_sendmsg) from [<81531124>] (____sys_sendmsg+0x298/0x2cc) [ 1079.888290][T11905] r7:00000000 r6:8356fb80 r5:00008000 r4:eba95f20 [ 1079.888309][T11905] [<81530e8c>] (____sys_sendmsg) from [<81532f30>] (___sys_sendmsg+0x9c/0xd0) [ 1079.888372][T11905] r10:eba95e24 r9:20000400 r8:00008000 r7:00000000 r6:8356fb80 r5:eba95f20 [ 1079.888396][T11905] r4:00000000 [ 1079.888411][T11905] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 1079.888474][T11905] r10:00000128 r9:83aa5400 r8:85681e40 r7:00008000 r6:20000400 r5:85681e41 [ 1079.888502][T11905] r4:00000003 [ 1079.888517][T11905] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 1079.888617][T11905] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 1079.888643][T11905] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1079.888692][T11905] Exception stack(0xeba95fa8 to 0xeba95ff0) [ 1079.888743][T11905] 5fa0: 00000000 00000000 00000003 20000400 00008000 00000000 [ 1079.888784][T11905] 5fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76b0c0bc [ 1079.888819][T11905] 5fe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 1080.548221][T11917] FAULT_INJECTION: forcing a failure. [ 1080.548221][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.548562][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.1.2111 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1080.548614][T11917] Hardware name: ARM-Versatile Express [ 1080.548630][T11917] Call trace: [ 1080.548653][T11917] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1080.548719][T11917] r7:83aa1800 r6:00000000 r5:60000013 r4:8225c0c4 [ 1080.548733][T11917] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1080.548765][T11917] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1080.548799][T11917] r5:83aa1800 r4:82919c00 [ 1080.548813][T11917] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1080.548887][T11917] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1080.548942][T11917] r8:00000000 r7:83aa1800 r6:00000cc0 r5:85925880 r4:830a8300 [ 1080.548956][T11917] [<80522b18>] (should_failslab) from [<80507590>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1080.548991][T11917] [<80507544>] (kmem_cache_alloc_noprof) from [<804c2328>] (vm_area_dup+0x24/0x148) [ 1080.549155][T11917] r10:000000ff r9:00000000 r8:eb83dcc8 r7:20b36000 r6:82c2e4c8 r5:85925880 [ 1080.549401][T11917] r4:85925880 [ 1080.550503][T11917] [<804c2304>] (vm_area_dup) from [<804eafa0>] (__split_vma+0x8c/0x438) [ 1080.550728][T11917] r5:85925880 r4:85925880 [ 1080.550810][T11917] [<804eaf14>] (__split_vma) from [<804eb42c>] (vms_gather_munmap_vmas+0xe0/0x404) [ 1080.550895][T11917] r10:000000ff r9:eb83df18 r8:eb83ddb8 r7:82c2e4c4 r6:82c2e4c8 r5:85925880 [ 1080.550923][T11917] r4:eb83dd74 [ 1080.551040][T11917] [<804eb34c>] (vms_gather_munmap_vmas) from [<804ed6d4>] (__mmap_region+0x18c/0xccc) [ 1080.551163][T11917] r9:eb83df18 r8:840b6700 r7:00000000 r6:20000000 r5:eb83dcc8 r4:85925880 [ 1080.551657][T11917] [<804ed548>] (__mmap_region) from [<804eee64>] (mmap_region+0x88/0x160) [ 1080.551810][T11917] r10:00000000 r9:840b6700 r8:83aa1800 r7:00b36000 r6:20000000 r5:00000000 [ 1080.551845][T11917] r4:000000ff [ 1080.551872][T11917] [<804eeddc>] (mmap_region) from [<804d4128>] (do_mmap+0x368/0x538) [ 1080.551944][T11917] r8:20000000 r7:83aa1800 r6:06ebbeef r5:00008031 r4:00b36000 [ 1080.551968][T11917] [<804d3dc0>] (do_mmap) from [<804a1884>] (vm_mmap_pgoff+0x124/0x1ec) [ 1080.552038][T11917] r10:840b6700 r9:20000000 r8:00b36000 r7:eb83df18 r6:00000000 r5:06ebbeef [ 1080.552067][T11917] r4:00000000 [ 1080.552085][T11917] [<804a1760>] (vm_mmap_pgoff) from [<804d32d8>] (ksys_mmap_pgoff+0x48/0xec) [ 1080.552151][T11917] r10:000000c0 r9:83aa1800 r8:8020029c r7:20000000 r6:00b36000 r5:06ebbeef [ 1080.552178][T11917] r4:00008031 [ 1080.552194][T11917] [<804d3290>] (ksys_mmap_pgoff) from [<804d3398>] (sys_mmap_pgoff+0x1c/0x24) [ 1080.552252][T11917] r8:8020029c r7:000000c0 r6:0012fef0 r5:00000000 r4:00000003 [ 1080.552274][T11917] [<804d337c>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1080.552327][T11917] Exception stack(0xeb83dfa8 to 0xeb83dff0) [ 1080.552371][T11917] dfa0: 00000003 00000000 20000000 00b36000 06ebbeef 00008031 [ 1080.552416][T11917] dfc0: 00000003 00000000 0012fef0 000000c0 002e0000 00000000 00006364 76b0c0bc [ 1080.552449][T11917] dfe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 1082.565234][T11946] FAULT_INJECTION: forcing a failure. [ 1082.565234][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.565657][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.0.2122 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1082.565739][T11946] Hardware name: ARM-Versatile Express [ 1082.565756][T11946] Call trace: [ 1082.565778][T11946] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1082.565839][T11946] r7:83aa3000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1082.565863][T11946] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1082.565896][T11946] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1082.565930][T11946] r5:83aa3000 r4:82919c00 [ 1082.566125][T11946] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1082.566246][T11946] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1082.566344][T11946] r8:00000000 r7:83aa3000 r6:00000cc0 r5:ffffffff r4:830adb40 [ 1082.566363][T11946] [<80522b18>] (should_failslab) from [<80506f24>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1082.566488][T11946] [<80506ed4>] (kmem_cache_alloc_node_noprof) from [<8153dc60>] (__alloc_skb+0x138/0x160) [ 1082.566670][T11946] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 1082.567305][T11946] r4:828060c0 [ 1082.567316][T11946] [<8153db28>] (__alloc_skb) from [<8165dd40>] (netlink_alloc_large_skb+0x88/0xa0) [ 1082.567358][T11946] r8:00000000 r7:855ebc00 r6:00000030 r5:850b6280 r4:00000140 [ 1082.567559][T11946] [<8165dcb8>] (netlink_alloc_large_skb) from [<8165e364>] (netlink_sendmsg+0x134/0x444) [ 1082.567741][T11946] r5:850b6280 r4:ebc69e68 [ 1082.569056][T11946] [<8165e230>] (netlink_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 1082.569333][T11946] r10:81e53f00 r9:20000080 r8:00000000 r7:850b6280 r6:850b6280 r5:ebc69e68 [ 1082.569603][T11946] r4:00000000 [ 1082.569824][T11946] [<81530870>] (__sock_sendmsg) from [<81530988>] (sock_write_iter+0xa0/0xfc) [ 1082.570270][T11946] r7:850b6280 r6:85681780 r5:ebc69f08 r4:ebc69ef0 [ 1082.570877][T11946] [<815308e8>] (sock_write_iter) from [<8055510c>] (vfs_write+0x3a4/0x44c) [ 1082.570959][T11946] r7:83aa3000 r6:00000030 r5:85681780 r4:00002000 [ 1082.570985][T11946] [<80554d68>] (vfs_write) from [<80555378>] (ksys_write+0xc8/0xe8) [ 1082.571043][T11946] r10:00000004 r9:83aa3000 r8:8020029c r7:00000030 r6:20000080 r5:85681780 [ 1082.571241][T11946] r4:85681781 [ 1082.571263][T11946] [<805552b0>] (ksys_write) from [<805553a8>] (sys_write+0x10/0x14) [ 1082.571425][T11946] r7:00000004 r6:0012fef0 r5:00000000 r4:00000000 [ 1082.571542][T11946] [<80555398>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1082.571796][T11946] Exception stack(0xebc69fa8 to 0xebc69ff0) [ 1082.571890][T11946] 9fa0: 00000000 00000000 00000003 20000080 00000030 00000000 [ 1082.572081][T11946] 9fc0: 00000000 00000000 0012fef0 00000004 002e0000 00000000 00006364 76b1a0bc [ 1082.572334][T11946] 9fe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 1089.435321][T11971] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1094.843039][ T23] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1094.993008][ T23] usb 2-1: Invalid ep0 maxpacket: 32 [ 1095.122686][ T23] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1095.273331][ T23] usb 2-1: Invalid ep0 maxpacket: 32 [ 1095.277052][ T23] usb usb2-port1: attempt power cycle [ 1095.613718][ T23] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1095.637034][ T23] usb 2-1: Invalid ep0 maxpacket: 32 [ 1095.763236][ T23] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1095.785202][ T23] usb 2-1: Invalid ep0 maxpacket: 32 [ 1095.787519][ T23] usb usb2-port1: unable to enumerate USB device [ 1100.807033][T12042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1025 sclass=netlink_audit_socket pid=12042 comm=syz.0.2149 [ 1100.949299][ T31] audit: type=1400 audit(1100.860:383): avc: denied { ioctl } for pid=12043 comm="syz.0.2150" path="socket:[24747]" dev="sockfs" ino=24747 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1104.671265][T12059] fuse: Bad value for 'fd' [ 1105.435353][T12067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1551 sclass=netlink_audit_socket pid=12067 comm=syz.0.2158 [ 1105.533744][T12069] fuse: Bad value for 'fd' [ 1106.360058][T12083] fuse: Bad value for 'fd' [ 1107.936304][T12096] fuse: Bad value for 'fd' [ 1107.985834][T12098] FAULT_INJECTION: forcing a failure. [ 1107.985834][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.987338][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.0.2170 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1107.987465][T12098] Hardware name: ARM-Versatile Express [ 1107.987485][T12098] Call trace: [ 1107.987507][T12098] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1107.987573][T12098] r7:00000c40 r6:00000000 r5:60000013 r4:8225c0c4 [ 1107.987587][T12098] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1107.987617][T12098] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1107.987662][T12098] r5:856e2400 r4:82919c00 [ 1107.987672][T12098] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1107.987703][T12098] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1107.987739][T12098] r8:856e2400 r7:00000c40 r6:859a0e68 r5:00001000 r4:830016c0 [ 1107.987750][T12098] [<80522b18>] (should_failslab) from [<80507914>] (__kmalloc_noprof+0x9c/0x458) [ 1107.987778][T12098] [<80507878>] (__kmalloc_noprof) from [<807c115c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1107.987814][T12098] r10:856e2400 r9:8309e400 r8:00000000 r7:83431110 r6:859a0e68 r5:00001000 [ 1107.987827][T12098] r4:00000000 [ 1107.987835][T12098] [<807c1120>] (tomoyo_realpath_from_path) from [<807bd2a0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1107.987868][T12098] r10:856e2400 r9:00000000 r8:00000003 r7:80046601 r6:00000004 r5:81cd65f8 [ 1107.987886][T12098] r4:859a0e68 r3:826c0200 [ 1107.987894][T12098] [<807bd1d4>] (tomoyo_path_number_perm) from [<807c1b80>] (tomoyo_file_ioctl+0x1c/0x20) [ 1107.987927][T12098] r9:859a0e40 r8:00000003 r7:00000000 r6:00000000 r5:80046601 r4:859a0e40 [ 1107.987938][T12098] [<807c1b64>] (tomoyo_file_ioctl) from [<8076eb04>] (security_file_ioctl+0x64/0x1e4) [ 1107.987965][T12098] [<8076eaa0>] (security_file_ioctl) from [<8056e1f8>] (sys_ioctl+0x4c/0xdc8) [ 1107.987997][T12098] r7:00000000 r6:859a0e41 r5:00000000 r4:80046601 [ 1107.988008][T12098] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1107.988032][T12098] Exception stack(0xec7b9fa8 to 0xec7b9ff0) [ 1107.988052][T12098] 9fa0: 00000000 00000000 00000003 80046601 00000000 00000000 [ 1107.988073][T12098] 9fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b1a0bc [ 1107.988090][T12098] 9fe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 1107.988111][T12098] r10:00000036 r9:856e2400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 1107.988124][T12098] r4:00000000 [ 1108.003279][T12098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.154945][T12105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12105 comm=syz.1.2173 [ 1108.163242][T12105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=12105 comm=syz.1.2173 [ 1108.247809][T12108] fuse: Bad value for 'fd' [ 1111.725181][ T31] audit: type=1400 audit(1111.640:384): avc: denied { connect } for pid=12142 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1121.500246][T12213] fuse: Unknown parameter 'use00000000000000000000' [ 1121.743591][T12218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12218 comm=syz.0.2207 [ 1123.784241][T12231] fuse: Unknown parameter 'use00000000000000000000' [ 1124.120503][T12237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12237 comm=syz.1.2212 [ 1124.189811][T12239] FAULT_INJECTION: forcing a failure. [ 1124.189811][T12239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.190507][T12239] CPU: 0 UID: 0 PID: 12239 Comm: syz.0.2213 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1124.190607][T12239] Hardware name: ARM-Versatile Express [ 1124.190639][T12239] Call trace: [ 1124.190691][T12239] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1124.190928][T12239] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1124.190956][T12239] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1124.191027][T12239] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1124.191089][T12239] r5:83aa4800 r4:82950650 [ 1124.191108][T12239] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1124.191178][T12239] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1124.191246][T12239] r8:76b19f30 r7:00000000 r6:00000000 r5:ececdf68 r4:00000002 [ 1124.191269][T12239] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1124.191319][T12239] [<8096b0d8>] (should_fail_usercopy) from [<8058ff08>] (simple_read_from_buffer+0x80/0x13c) [ 1124.191378][T12239] [<8058fe88>] (simple_read_from_buffer) from [<80607d48>] (proc_fail_nth_read+0xb8/0x100) [ 1124.191452][T12239] r10:00000001 r9:80607c90 r8:00000002 r7:ececdf68 r6:0000000f r5:76b19f30 [ 1124.191483][T12239] r4:83aa4800 r3:ececde9f [ 1124.191503][T12239] [<80607c90>] (proc_fail_nth_read) from [<80554580>] (vfs_read+0x98/0x320) [ 1124.191571][T12239] r8:76b19f30 r7:ececdf68 r6:83aa4800 r5:0000000f r4:85681b40 [ 1124.191597][T12239] [<805544e8>] (vfs_read) from [<80555228>] (ksys_read+0x74/0xe8) [ 1124.191662][T12239] r10:00000003 r9:83aa4800 r8:8020029c r7:00000000 r6:00000000 r5:85681b40 [ 1124.191690][T12239] r4:85681b43 [ 1124.191708][T12239] [<805551b4>] (ksys_read) from [<805552ac>] (sys_read+0x10/0x14) [ 1124.191780][T12239] r7:00000003 r6:00000005 r5:76b19f30 r4:0000000f [ 1124.191918][T12239] [<8055529c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1124.191977][T12239] Exception stack(0xececdfa8 to 0xececdff0) [ 1124.192055][T12239] dfa0: 0000000f 76b19f30 00000005 76b19f30 0000000f 00000000 [ 1124.192110][T12239] dfc0: 0000000f 76b19f30 00000005 00000003 002e0000 00000000 00006364 76b1a0bc [ 1124.192147][T12239] dfe0: 00000158 76b19ed0 000d7d70 0012fe14 [ 1124.330415][T12243] fuse: Unknown parameter 'use00000000000000000000' [ 1124.457101][ T31] audit: type=1400 audit(1124.370:385): avc: denied { append } for pid=12245 comm="syz.0.2216" name="ttynull" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 1124.474514][ T31] audit: type=1400 audit(1124.380:386): avc: denied { lock } for pid=12245 comm="syz.0.2216" path="/dev/ttynull" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 1124.907311][T12254] fuse: Unknown parameter 'user_i00000000000000000000' [ 1127.250015][T12268] fuse: Unknown parameter 'user_i00000000000000000000' [ 1127.675289][T12274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12274 comm=syz.0.2228 [ 1128.234351][T12279] fuse: Unknown parameter 'user_i00000000000000000000' [ 1130.366311][ T31] audit: type=1400 audit(1130.280:387): avc: denied { nlmsg_read } for pid=12288 comm="syz.1.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1130.417861][ T31] audit: type=1400 audit(1130.330:388): avc: denied { ioctl } for pid=12288 comm="syz.1.2233" path="socket:[25168]" dev="sockfs" ino=25168 ioctlcmd=0x640f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1130.938772][T12291] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12291 comm=syz.1.2233 [ 1131.054592][ T31] audit: type=1400 audit(1130.970:389): avc: denied { getopt } for pid=12288 comm="syz.1.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1131.054878][T12291] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12291 comm=syz.1.2233 [ 1131.910274][T12298] fuse: Unknown parameter 'user_id00000000000000000000' [ 1134.116245][T12310] fuse: Unknown parameter 'user_id00000000000000000000' [ 1134.668506][T12323] fuse: Unknown parameter 'user_id00000000000000000000' [ 1134.747007][T12325] FAULT_INJECTION: forcing a failure. [ 1134.747007][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.747495][T12325] CPU: 0 UID: 0 PID: 12325 Comm: syz.0.2246 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1134.747581][T12325] Hardware name: ARM-Versatile Express [ 1134.747624][T12325] Call trace: [ 1134.747668][T12325] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1134.747789][T12325] r7:856e3000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1134.747817][T12325] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1134.747878][T12325] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1134.747936][T12325] r5:856e3000 r4:82919c00 [ 1134.747955][T12325] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1134.748015][T12325] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1134.748232][T12325] r8:00000000 r7:856e3000 r6:00400cc0 r5:ffffffff r4:830adb40 [ 1134.748382][T12325] [<80522b18>] (should_failslab) from [<80506f24>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1134.748452][T12325] [<80506ed4>] (kmem_cache_alloc_node_noprof) from [<8153dc60>] (__alloc_skb+0x138/0x160) [ 1134.748583][T12325] r10:ed36dd1c r9:00000000 r8:00400cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 1134.748688][T12325] r4:828060c0 [ 1134.748792][T12325] [<8153db28>] (__alloc_skb) from [<81546204>] (alloc_skb_with_frags+0x44/0x1ec) [ 1134.748911][T12325] r8:802c5d70 r7:ed36dcc4 r6:00000000 r5:00001000 r4:00000003 [ 1134.748945][T12325] [<815461c0>] (alloc_skb_with_frags) from [<81536a6c>] (sock_alloc_send_pskb+0x1f4/0x228) [ 1134.749012][T12325] r10:ed36dd1c r9:00000000 r8:802c5d70 r7:ed36dcc4 r6:856e3000 r5:7fffffff [ 1134.749029][T12325] r4:833ec000 [ 1134.749059][T12325] [<81536878>] (sock_alloc_send_pskb) from [<8180b1b8>] (unix_dgram_sendmsg+0x134/0x764) [ 1134.749151][T12325] r10:00000000 r9:ed36ddc4 r8:856e3000 r7:833ec000 r6:00000000 r5:00000000 [ 1134.749423][T12325] r4:ed36df20 [ 1134.749460][T12325] [<8180b084>] (unix_dgram_sendmsg) from [<8180b82c>] (unix_seqpacket_sendmsg+0x44/0x84) [ 1134.749570][T12325] r10:00000000 r9:ed36ddc4 r8:ed36ddc4 r7:00000000 r6:850b6000 r5:ed36df20 [ 1134.749761][T12325] r4:00000000 [ 1134.749906][T12325] [<8180b7e8>] (unix_seqpacket_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 1134.749975][T12325] r5:ed36df20 r4:00000000 [ 1134.749995][T12325] [<81530870>] (__sock_sendmsg) from [<81531124>] (____sys_sendmsg+0x298/0x2cc) [ 1134.750104][T12325] r7:00000000 r6:850b6000 r5:00000000 r4:ed36df20 [ 1134.750250][T12325] [<81530e8c>] (____sys_sendmsg) from [<81532f30>] (___sys_sendmsg+0x9c/0xd0) [ 1134.750424][T12325] r10:ed36de24 r9:20000280 r8:00000000 r7:00000000 r6:850b6000 r5:ed36df20 [ 1134.750486][T12325] r4:00000000 [ 1134.750506][T12325] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 1134.750659][T12325] r10:00000128 r9:856e3000 r8:85681d80 r7:00000000 r6:20000280 r5:85681d81 [ 1134.750730][T12325] r4:00000003 [ 1134.750830][T12325] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 1134.750921][T12325] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 1134.751035][T12325] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1134.751195][T12325] Exception stack(0xed36dfa8 to 0xed36dff0) [ 1134.751301][T12325] dfa0: 00000000 00000000 00000003 20000280 00000000 00000000 [ 1134.751393][T12325] dfc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76b1a0bc [ 1134.751520][T12325] dfe0: 76b19ec0 76b19eb0 000193a4 00131f40 [ 1136.173581][T12342] fuse: Bad value for 'fd' [ 1136.778394][T12355] fuse: Bad value for 'fd' [ 1137.035657][T12360] mmap: syz.0.2258 (12360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1137.690005][T12370] fuse: Bad value for 'fd' [ 1137.927778][T12366] FAULT_INJECTION: forcing a failure. [ 1137.927778][T12366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.928273][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.1.2259 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1137.928361][T12366] Hardware name: ARM-Versatile Express [ 1137.928392][T12366] Call trace: [ 1137.928435][T12366] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1137.928618][T12366] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1137.928650][T12366] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1137.928845][T12366] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1137.929035][T12366] r5:83aa5400 r4:82950650 [ 1137.929297][T12366] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1137.929387][T12366] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1137.929532][T12366] r8:dfc3deb8 r7:00000000 r6:00000001 r5:76aeaf30 r4:00000001 [ 1137.930111][T12366] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1137.930434][T12366] [<8096b0d8>] (should_fail_usercopy) from [<808c3238>] (kstrtouint_from_user+0x54/0x13c) [ 1137.930552][T12366] [<808c31e4>] (kstrtouint_from_user) from [<80609088>] (proc_fail_nth_write+0x40/0xe8) [ 1137.930722][T12366] r8:dfc3df68 r7:83aa5400 r6:00000001 r5:85681a80 r4:00000001 [ 1137.930769][T12366] [<80609048>] (proc_fail_nth_write) from [<80554e14>] (vfs_write+0xac/0x44c) [ 1137.930831][T12366] r5:85681a80 r4:80609048 [ 1137.930851][T12366] [<80554d68>] (vfs_write) from [<80555324>] (ksys_write+0x74/0xe8) [ 1137.930920][T12366] r10:00000004 r9:83aa5400 r8:8020029c r7:00000000 r6:00000002 r5:85681a80 [ 1137.930954][T12366] r4:85681a83 [ 1137.930973][T12366] [<805552b0>] (ksys_write) from [<805553a8>] (sys_write+0x10/0x14) [ 1137.931037][T12366] r7:00000004 r6:00000005 r5:76aeaf30 r4:00000001 [ 1137.931057][T12366] [<80555398>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1137.931104][T12366] Exception stack(0xdfc3dfa8 to 0xdfc3dff0) [ 1137.931151][T12366] dfa0: 00000001 76aeaf30 00000005 76aeaf30 00000001 00000000 [ 1137.931194][T12366] dfc0: 00000001 76aeaf30 00000005 00000004 002e0000 00000000 00006364 76aeb0bc [ 1137.931231][T12366] dfe0: 00000158 76aeaed0 000d7d70 0012fedc [ 1139.013069][T12389] fuse: Unknown parameter '0x0000000000000003' [ 1139.765136][ T31] audit: type=1400 audit(1139.680:390): avc: denied { create } for pid=12398 comm="syz.1.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1140.365653][T12410] fuse: Unknown parameter '0x0000000000000003' [ 1143.008497][T12426] fuse: Unknown parameter '0x0000000000000003' [ 1143.753128][ T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1144.044385][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.052359][ T23] usb 2-1: config 0 has no interfaces? [ 1144.053758][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1144.054905][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.064981][ T23] usb 2-1: config 0 descriptor?? [ 1147.448374][T12449] fuse: Unknown parameter '0x0000000000000003' [ 1147.951499][T12460] fuse: Unknown parameter '0x0000000000000003' [ 1149.410988][T12470] fuse: Unknown parameter '0x0000000000000003' [ 1151.541425][T12485] fuse: Unknown parameter 'fd0x0000000000000003' [ 1151.893809][ T11] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1152.053516][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1152.076948][ T11] usb 1-1: config 0 has no interfaces? [ 1152.077542][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1152.077934][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.084874][ T11] usb 1-1: config 0 descriptor?? [ 1154.285659][ T23] usb 2-1: USB disconnect, device number 35 [ 1154.399458][T12499] fuse: Unknown parameter '0x0000000000000003' [ 1156.726770][T12511] fuse: Unknown parameter 'fd0x0000000000000003' [ 1160.983565][T12528] fuse: Unknown parameter 'fd0x0000000000000003' [ 1161.100932][T12530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12530 comm=syz.1.2311 [ 1161.121399][T12530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12530 comm=syz.1.2311 [ 1166.620263][ T23] usb 1-1: USB disconnect, device number 35 [ 1169.308761][T12589] FAULT_INJECTION: forcing a failure. [ 1169.308761][T12589] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.309294][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.0.2327 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1169.309406][T12589] Hardware name: ARM-Versatile Express [ 1169.309437][T12589] Call trace: [ 1169.309477][T12589] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1169.309591][T12589] r7:00000c40 r6:00000000 r5:60000013 r4:8225c0c4 [ 1169.309615][T12589] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1169.309673][T12589] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1169.309935][T12589] r5:85574800 r4:82919c00 [ 1169.310003][T12589] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1169.310132][T12589] [<8096ae98>] (should_fail_ex) from [<80522b84>] (should_failslab+0x6c/0x94) [ 1169.310445][T12589] r8:85574800 r7:00000c40 r6:859a0628 r5:00001000 r4:830016c0 [ 1169.310524][T12589] [<80522b18>] (should_failslab) from [<80507914>] (__kmalloc_noprof+0x9c/0x458) [ 1169.310668][T12589] [<80507878>] (__kmalloc_noprof) from [<807c115c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1169.310813][T12589] r10:85574800 r9:8309f800 r8:00000000 r7:83632f68 r6:859a0628 r5:00001000 [ 1169.310843][T12589] r4:00000000 [ 1169.310862][T12589] [<807c1120>] (tomoyo_realpath_from_path) from [<807bd2a0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1169.311020][T12589] r10:85574800 r9:00000000 r8:00000003 r7:4018f50b r6:00000004 r5:81cd65f8 [ 1169.311281][T12589] r4:859a0628 r3:826c0200 [ 1169.311393][T12589] [<807bd1d4>] (tomoyo_path_number_perm) from [<807c1b80>] (tomoyo_file_ioctl+0x1c/0x20) [ 1169.311635][T12589] r9:859a0600 r8:00000003 r7:20000200 r6:20000200 r5:4018f50b r4:859a0600 [ 1169.311922][T12589] [<807c1b64>] (tomoyo_file_ioctl) from [<8076eb04>] (security_file_ioctl+0x64/0x1e4) [ 1169.312180][T12589] [<8076eaa0>] (security_file_ioctl) from [<8056e1f8>] (sys_ioctl+0x4c/0xdc8) [ 1169.312260][T12589] r7:20000200 r6:859a0601 r5:00000000 r4:4018f50b [ 1169.312282][T12589] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1169.312331][T12589] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 1169.312376][T12589] 1fa0: 00000000 00000000 00000003 4018f50b 20000200 00000000 [ 1169.312418][T12589] 1fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76ab70bc [ 1169.312454][T12589] 1fe0: 76ab6ec0 76ab6eb0 000193a4 00131f40 [ 1169.312500][T12589] r10:00000036 r9:85574800 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 1169.312633][T12589] r4:00000000 [ 1169.322724][T12589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1171.480693][T12600] FAULT_INJECTION: forcing a failure. [ 1171.480693][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.483530][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.1.2332 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1171.483672][T12600] Hardware name: ARM-Versatile Express [ 1171.483705][T12600] Call trace: [ 1171.483748][T12600] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1171.483860][T12600] r7:200000c0 r6:00000000 r5:60000013 r4:8225c0c4 [ 1171.483890][T12600] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1171.483950][T12600] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1171.484014][T12600] r5:856e2400 r4:82950650 [ 1171.484035][T12600] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1171.484096][T12600] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1171.484163][T12600] r8:00000000 r7:200000c0 r6:858d2480 r5:00000000 r4:dfb79f20 [ 1171.484189][T12600] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1171.484243][T12600] [<8096b0d8>] (should_fail_usercopy) from [<808ba628>] (_copy_from_iter+0x6c/0x7c8) [ 1171.484312][T12600] [<808ba5bc>] (_copy_from_iter) from [<8165e3bc>] (netlink_sendmsg+0x18c/0x444) [ 1171.484393][T12600] r10:00000000 r9:00000000 r8:dfb79f30 r7:840c5c00 r6:00000014 r5:85896900 [ 1171.484424][T12600] r4:dfb79f20 [ 1171.484444][T12600] [<8165e230>] (netlink_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 1171.484517][T12600] r10:00000000 r9:dfb79dc4 r8:dfb79dc4 r7:00000000 r6:85101680 r5:dfb79f20 [ 1171.484545][T12600] r4:00000000 [ 1171.484563][T12600] [<81530870>] (__sock_sendmsg) from [<81531124>] (____sys_sendmsg+0x298/0x2cc) [ 1171.484640][T12600] r7:00000000 r6:85101680 r5:00044004 r4:dfb79f20 [ 1171.484666][T12600] [<81530e8c>] (____sys_sendmsg) from [<81532f30>] (___sys_sendmsg+0x9c/0xd0) [ 1171.484745][T12600] r10:dfb79e24 r9:200001c0 r8:00044004 r7:00000000 r6:85101680 r5:dfb79f20 [ 1171.484771][T12600] r4:00000000 [ 1171.484791][T12600] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 1171.484871][T12600] r10:00000128 r9:856e2400 r8:859a0000 r7:00044004 r6:200001c0 r5:859a0001 [ 1171.484902][T12600] r4:00000003 [ 1171.484923][T12600] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 1171.484999][T12600] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 1171.485027][T12600] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1171.485081][T12600] Exception stack(0xdfb79fa8 to 0xdfb79ff0) [ 1171.485125][T12600] 9fa0: 00000000 00000000 00000003 200001c0 00044004 00000000 [ 1171.485174][T12600] 9fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76b0c0bc [ 1171.485212][T12600] 9fe0: 76b0bec0 76b0beb0 000193a4 00131f40 [ 1174.110070][T12630] FAULT_INJECTION: forcing a failure. [ 1174.110070][T12630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.110705][T12630] CPU: 0 UID: 0 PID: 12630 Comm: syz.1.2342 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1174.110790][T12630] Hardware name: ARM-Versatile Express [ 1174.110821][T12630] Call trace: [ 1174.110861][T12630] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1174.110992][T12630] r7:dfdd1e20 r6:00000000 r5:60000013 r4:8225c0c4 [ 1174.111054][T12630] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1174.111174][T12630] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1174.111384][T12630] r5:85570000 r4:82950650 [ 1174.111437][T12630] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1174.111542][T12630] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1174.111699][T12630] r8:04004004 r7:dfdd1e20 r6:20000500 r5:00000000 r4:dfdd1f20 [ 1174.111755][T12630] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1174.111845][T12630] [<8096b0d8>] (should_fail_usercopy) from [<81532db4>] (copy_msghdr_from_user+0x50/0x130) [ 1174.111934][T12630] [<81532d64>] (copy_msghdr_from_user) from [<81532f0c>] (___sys_sendmsg+0x78/0xd0) [ 1174.112088][T12630] r8:04004004 r7:00000000 r6:850b7680 r5:dfdd1f20 r4:dfdd1e64 [ 1174.112119][T12630] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 1174.112194][T12630] r10:00000128 r9:85570000 r8:85681300 r7:04004004 r6:20000500 r5:85681301 [ 1174.112220][T12630] r4:00000004 [ 1174.112237][T12630] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 1174.112303][T12630] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 1174.112325][T12630] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1174.112456][T12630] Exception stack(0xdfdd1fa8 to 0xdfdd1ff0) [ 1174.112512][T12630] 1fa0: 00000000 00000000 00000004 20000500 04004004 00000000 [ 1174.112554][T12630] 1fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76aeb0bc [ 1174.112588][T12630] 1fe0: 76aeaec0 76aeaeb0 000193a4 00131f40 [ 1185.850748][T12702] FAULT_INJECTION: forcing a failure. [ 1185.850748][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.851280][T12702] CPU: 0 UID: 0 PID: 12702 Comm: syz.1.2362 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1185.851348][T12702] Hardware name: ARM-Versatile Express [ 1185.851376][T12702] Call trace: [ 1185.851412][T12702] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1185.851568][T12702] r7:00000000 r6:00000000 r5:60000013 r4:8225c0c4 [ 1185.851591][T12702] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1185.851656][T12702] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1185.851730][T12702] r5:856e4800 r4:82950650 [ 1185.851822][T12702] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1185.852385][T12702] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1185.852676][T12702] r8:76b0bf30 r7:00000000 r6:00000000 r5:dff89f68 r4:00000002 [ 1185.853585][T12702] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1185.853682][T12702] [<8096b0d8>] (should_fail_usercopy) from [<8058ff08>] (simple_read_from_buffer+0x80/0x13c) [ 1185.853777][T12702] [<8058fe88>] (simple_read_from_buffer) from [<80607d48>] (proc_fail_nth_read+0xb8/0x100) [ 1185.853844][T12702] r10:00000001 r9:80607c90 r8:00000002 r7:dff89f68 r6:0000000f r5:76b0bf30 [ 1185.853875][T12702] r4:856e4800 r3:dff89e9f [ 1185.853894][T12702] [<80607c90>] (proc_fail_nth_read) from [<80554580>] (vfs_read+0x98/0x320) [ 1185.853957][T12702] r8:76b0bf30 r7:dff89f68 r6:856e4800 r5:0000000f r4:85681480 [ 1185.853981][T12702] [<805544e8>] (vfs_read) from [<80555228>] (ksys_read+0x74/0xe8) [ 1185.854036][T12702] r10:00000003 r9:856e4800 r8:8020029c r7:00000000 r6:00000000 r5:85681480 [ 1185.854100][T12702] r4:85681483 [ 1185.854173][T12702] [<805551b4>] (ksys_read) from [<805552ac>] (sys_read+0x10/0x14) [ 1185.854235][T12702] r7:00000003 r6:00000006 r5:76b0bf30 r4:0000000f [ 1185.854255][T12702] [<8055529c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1185.854298][T12702] Exception stack(0xdff89fa8 to 0xdff89ff0) [ 1185.854345][T12702] 9fa0: 0000000f 76b0bf30 00000006 76b0bf30 0000000f 00000000 [ 1185.854387][T12702] 9fc0: 0000000f 76b0bf30 00000006 00000003 002e0000 00000000 00006364 76b0c0bc [ 1185.854456][T12702] 9fe0: 00000158 76b0bed0 000d7d70 0012fe14 [ 1197.329185][ T7708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.391562][ T7708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.457879][ T7708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.529317][ T7708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.755160][ T7708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.760095][ T7708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.766198][ T7708] bond0 (unregistering): Released all slaves [ 1197.853563][ T7708] hsr_slave_0: left promiscuous mode [ 1197.856369][ T7708] hsr_slave_1: left promiscuous mode [ 1197.869473][ T7708] veth0_macvtap: left promiscuous mode [ 1197.870104][ T7708] veth1_vlan: left promiscuous mode [ 1197.870344][ T7708] veth0_vlan: left promiscuous mode [ 1199.501051][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.511411][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.274138][T12772] hsr_slave_0: entered promiscuous mode [ 1200.275425][T12772] hsr_slave_1: entered promiscuous mode [ 1200.278853][T12772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1200.279078][T12772] Cannot create hsr debugfs directory [ 1200.930312][T12772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1200.946356][T12772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1200.957169][T12772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1200.967884][T12772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1201.610686][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.608280][T12772] veth0_vlan: entered promiscuous mode [ 1204.628620][T12772] veth1_vlan: entered promiscuous mode [ 1204.665905][T12772] veth0_macvtap: entered promiscuous mode [ 1204.673231][T12772] veth1_macvtap: entered promiscuous mode [ 1204.715278][T12772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.716015][T12772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.717856][T12772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.719079][T12772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.845591][ T31] audit: type=1400 audit(1204.760:391): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1211.583384][T13276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13276 comm=syz.0.2408 [ 1211.868789][ T7708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.930009][ T7708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.010657][ T7708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.070165][ T7708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.335436][ T7708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.341257][ T7708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.346253][ T7708] bond0 (unregistering): Released all slaves [ 1212.428120][ T7708] hsr_slave_0: left promiscuous mode [ 1212.430282][ T7708] hsr_slave_1: left promiscuous mode [ 1212.444379][ T7708] veth1_macvtap: left promiscuous mode [ 1212.444832][ T7708] veth0_macvtap: left promiscuous mode [ 1212.445164][ T7708] veth1_vlan: left promiscuous mode [ 1212.445340][ T7708] veth0_vlan: left promiscuous mode [ 1214.525956][T13280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.538975][T13280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.480562][T13280] hsr_slave_0: entered promiscuous mode [ 1215.483512][T13280] hsr_slave_1: entered promiscuous mode [ 1216.067139][T13280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1216.079810][T13280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1216.094206][T13280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1216.105268][T13280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1216.854626][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.797930][T13280] veth0_vlan: entered promiscuous mode [ 1219.843748][T13280] veth1_vlan: entered promiscuous mode [ 1219.939415][T13280] veth0_macvtap: entered promiscuous mode [ 1219.950064][T13280] veth1_macvtap: entered promiscuous mode [ 1220.009631][T13280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.010926][T13280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.012519][T13280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.015514][T13280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.124200][T13761] fuse: Bad value for 'fd' [ 1225.437168][T13772] fuse: Bad value for 'fd' [ 1227.046240][T13785] fuse: Bad value for 'fd' [ 1228.466803][T13802] fuse: Bad value for 'user_id' [ 1228.467267][T13802] fuse: Bad value for 'user_id' [ 1229.999580][T13816] FAULT_INJECTION: forcing a failure. [ 1229.999580][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.000162][T13816] CPU: 0 UID: 0 PID: 13816 Comm: syz.0.2450 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 1230.000254][T13816] Hardware name: ARM-Versatile Express [ 1230.000286][T13816] Call trace: [ 1230.000329][T13816] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1230.000460][T13816] r7:200004c0 r6:00000000 r5:60000013 r4:8225c0c4 [ 1230.000486][T13816] [<80201ae4>] (show_stack) from [<8021fd88>] (dump_stack_lvl+0x70/0x7c) [ 1230.000544][T13816] [<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c) [ 1230.000627][T13816] r5:8384ec00 r4:82950650 [ 1230.000733][T13816] [<8021fd94>] (dump_stack) from [<8096b05c>] (should_fail_ex+0x1c4/0x228) [ 1230.000936][T13816] [<8096ae98>] (should_fail_ex) from [<8096b0d4>] (should_fail+0x14/0x18) [ 1230.001055][T13816] r8:00000000 r7:200004c0 r6:84c10e00 r5:00000000 r4:00000084 [ 1230.001082][T13816] [<8096b0c0>] (should_fail) from [<8096b0f4>] (should_fail_usercopy+0x1c/0x20) [ 1230.001175][T13816] [<8096b0d8>] (should_fail_usercopy) from [<808ba628>] (_copy_from_iter+0x6c/0x7c8) [ 1230.001317][T13816] [<808ba5bc>] (_copy_from_iter) from [<8154ce78>] (skb_copy_datagram_from_iter+0x60/0x28c) [ 1230.001602][T13816] r10:84d82e40 r9:84d82e40 r8:00000000 r7:00000084 r6:00000084 r5:00000084 [ 1230.001674][T13816] r4:00000084 [ 1230.001909][T13816] [<8154ce18>] (skb_copy_datagram_from_iter) from [<8180b208>] (unix_dgram_sendmsg+0x184/0x764) [ 1230.002057][T13816] r10:00000084 r9:84d82e40 r8:8384ec00 r7:83a45500 r6:00000084 r5:00000084 [ 1230.002110][T13816] r4:eb705f20 [ 1230.002136][T13816] [<8180b084>] (unix_dgram_sendmsg) from [<8180b82c>] (unix_seqpacket_sendmsg+0x44/0x84) [ 1230.002208][T13816] r10:00000000 r9:eb705dc4 r8:eb705dc4 r7:00000000 r6:837d8a00 r5:eb705f20 [ 1230.002236][T13816] r4:00000000 [ 1230.002253][T13816] [<8180b7e8>] (unix_seqpacket_sendmsg) from [<815308b4>] (__sock_sendmsg+0x44/0x78) [ 1230.002314][T13816] r5:eb705f20 r4:00000000 [ 1230.002333][T13816] [<81530870>] (__sock_sendmsg) from [<81531124>] (____sys_sendmsg+0x298/0x2cc) [ 1230.002398][T13816] r7:00000000 r6:837d8a00 r5:20000800 r4:eb705f20 [ 1230.002442][T13816] [<81530e8c>] (____sys_sendmsg) from [<81532f30>] (___sys_sendmsg+0x9c/0xd0) [ 1230.002520][T13816] r10:eb705e24 r9:20000480 r8:20000800 r7:00000000 r6:837d8a00 r5:eb705f20 [ 1230.002548][T13816] r4:00000000 [ 1230.002566][T13816] [<81532e94>] (___sys_sendmsg) from [<815333c8>] (__sys_sendmsg+0x8c/0xe0) [ 1230.002654][T13816] r10:00000128 r9:8384ec00 r8:85aaf180 r7:20000800 r6:20000480 r5:85aaf181 [ 1230.002682][T13816] r4:00000003 [ 1230.002699][T13816] [<8153333c>] (__sys_sendmsg) from [<81533430>] (sys_sendmsg+0x14/0x18) [ 1230.002908][T13816] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 1230.002978][T13816] [<8153341c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1230.003074][T13816] Exception stack(0xeb705fa8 to 0xeb705ff0) [ 1230.003158][T13816] 5fa0: 00000000 00000000 00000003 20000480 20000800 00000000 [ 1230.003371][T13816] 5fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76bfa0bc [ 1230.003670][T13816] 5fe0: 76bf9ec0 76bf9eb0 000193a4 00131f40 [ 1230.634916][ T6233] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1230.807410][ T6233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1230.808147][ T6233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.808281][ T6233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1230.808349][ T6233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.036484][ T6233] usb 2-1: usb_control_msg returned -32 [ 1231.036980][ T6233] usbtmc 2-1:16.0: can't read capabilities [ 1232.044308][ T6233] usb 2-1: USB disconnect, device number 36 [ 1235.664669][ T31] audit: type=1400 audit(1235.580:392): avc: denied { execute } for pid=13865 comm="syz.0.2462" path="/30/cpuset.memory_pressure_enabled" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1236.252671][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1236.382680][ T9] usb 1-1: device descriptor read/64, error -71 [ 1236.623443][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1236.763827][ T9] usb 1-1: device descriptor read/64, error -71 [ 1236.875282][ T9] usb usb1-port1: attempt power cycle [ 1237.213258][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1237.237658][ T9] usb 1-1: device descriptor read/8, error -71 [ 1237.492803][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1237.515094][ T9] usb 1-1: device descriptor read/8, error -71 [ 1237.624301][ T9] usb usb1-port1: unable to enumerate USB device [ 1251.790340][T13920] bond1 (unregistering): Released all slaves [ 1256.473788][ T23] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1256.644376][ T23] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 1256.646383][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1256.673510][ T23] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1256.675011][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.677967][ T23] usb 1-1: Product: syz [ 1256.680055][ T23] usb 1-1: Manufacturer: syz [ 1256.681237][ T23] usb 1-1: SerialNumber: syz [ 1256.695665][ T23] usb 1-1: config 0 descriptor?? [ 1256.708660][ T23] hub 1-1:0.0: bad descriptor, ignoring hub [ 1256.709678][ T23] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1256.718149][ T23] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 1256.728292][ T23] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1256.743330][ T23] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1256.958168][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.959144][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.093580][ T11] usb 1-1: USB disconnect, device number 40 [ 1257.596824][ T31] audit: type=1400 audit(1257.510:393): avc: denied { lock } for pid=14028 comm="syz.0.2485" path="socket:[28860]" dev="sockfs" ino=28860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1260.203166][ T9024] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1260.332949][ T9024] usb 1-1: device descriptor read/64, error -71 [ 1260.572879][ T9024] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1260.723323][ T9024] usb 1-1: device descriptor read/64, error -71 [ 1260.833795][ T9024] usb usb1-port1: attempt power cycle [ 1261.182741][ T9024] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1261.216142][ T9024] usb 1-1: device descriptor read/8, error -71 [ 1261.472719][ T9024] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1261.505879][ T9024] usb 1-1: device descriptor read/8, error -71 [ 1261.616508][ T9024] usb usb1-port1: unable to enumerate USB device [ 1263.924213][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1264.274840][ T31] audit: type=1400 audit(1264.190:394): avc: denied { getattr } for pid=14085 comm="syz.1.2504" path="cgroup:[4026532720]" dev="nsfs" ino=4026532720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1299.235616][T14164] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 1299.299154][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 1299.509738][T14164] bond1 (unregistering): Released all slaves [ 1299.865761][T14236] input: syz0 as /devices/virtual/input/input9 [ 1300.365320][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2537'. [ 1302.528068][ T31] audit: type=1400 audit(1302.440:395): avc: denied { create } for pid=14240 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1304.066186][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'. [ 1331.798014][ T31] audit: type=1400 audit(1331.710:396): avc: denied { write } for pid=14316 comm="syz.0.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1332.566848][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1332.653329][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1346.979094][ T31] audit: type=1400 audit(1346.890:397): avc: denied { create } for pid=14365 comm="syz.0.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1347.370940][T14371] bond0: (slave bond_slave_0): Releasing backup interface [ 1347.384947][T14371] bond0: (slave bond_slave_1): Releasing backup interface [ 1348.041451][T14386] syz_tun: entered allmulticast mode [ 1348.223089][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2579'. [ 1348.689985][T14401] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1348.691557][T14401] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1358.080710][T14414] netlink: 'syz.0.2589': attribute type 20 has an invalid length. [ 1369.590739][T14462] could not allocate digest TFM handle xxhash64-generic [ 1371.896990][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1377.507935][ T23] Process accounting resumed [ 1390.126961][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1420.291177][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'. [ 1422.833108][ T11] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1423.005918][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.006342][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.006480][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1423.006556][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.013993][ T11] usb 1-1: config 0 descriptor?? [ 1423.476381][ T11] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0 [ 1423.476748][ T11] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0 [ 1423.479053][ T11] lg-g15 0003:046D:C222.0016: unknown main item tag 0x2 [ 1423.479340][ T11] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0 [ 1423.484189][ T11] lg-g15 0003:046D:C222.0016: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 1423.683417][ T11] usb 1-1: USB disconnect, device number 45 [ 1424.070050][T14689] netlink: 'syz.0.2669': attribute type 3 has an invalid length. [ 1425.856830][T14705] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1428.676310][ T31] audit: type=1400 audit(1428.590:398): avc: denied { write } for pid=14720 comm="syz.1.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1449.015473][ T31] audit: type=1400 audit(1448.930:399): avc: denied { lock } for pid=14764 comm="syz.1.2694" path="socket:[30581]" dev="sockfs" ino=30581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1449.891740][T14779] netlink: 'syz.1.2700': attribute type 1 has an invalid length. [ 1449.959155][T14779] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.959665][T14779] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.959782][T14779] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.959870][T14779] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.964334][T14779] bond1: (slave geneve2): making interface the new active one [ 1449.996551][T14779] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1450.315096][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1456.005824][T14825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2704'. [ 1469.440674][T14880] netlink: 'syz.0.2722': attribute type 1 has an invalid length. [ 1469.498588][T14880] bond1: entered promiscuous mode [ 1469.499486][T14880] bond1: entered allmulticast mode [ 1469.530043][T14880] bond1: (slave erspan1): making interface the new active one [ 1469.530667][T14880] erspan1: entered promiscuous mode [ 1469.531199][T14880] erspan1: entered allmulticast mode [ 1469.534655][T14880] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1469.645731][ T31] audit: type=1400 audit(1469.560:400): avc: denied { mount } for pid=14916 comm="syz.0.2723" name="/" dev="ramfs" ino=29661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1469.662939][ T31] audit: type=1400 audit(1469.570:401): avc: denied { execute } for pid=14916 comm="syz.0.2723" path="/file1" dev="ramfs" ino=29662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1484.695261][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1484.697087][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1509.944968][ T31] audit: type=1400 audit(1509.860:402): avc: denied { set_context_mgr } for pid=15125 comm="syz.1.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1509.961585][ T31] audit: type=1400 audit(1509.870:403): avc: denied { map } for pid=15125 comm="syz.1.2766" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1509.970159][ T31] audit: type=1400 audit(1509.880:404): avc: denied { call } for pid=15125 comm="syz.1.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1509.988262][T15126] binder: 15125:15126 ioctl c0306201 0 returned -14 [ 1513.392913][ T6233] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1513.542920][ T6233] usb 1-1: Using ep0 maxpacket: 8 [ 1513.549846][ T6233] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1513.553458][ T6233] usb 1-1: config 0 has no interface number 0 [ 1513.555735][ T6233] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1513.557840][ T6233] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1513.558266][ T6233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.565632][ T6233] usb 1-1: config 0 descriptor?? [ 1513.583462][ T6233] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1513.798080][T14431] usb 1-1: USB disconnect, device number 46 [ 1542.561464][ T31] audit: type=1400 audit(1542.470:405): avc: denied { mount } for pid=15198 comm="syz.1.2785" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1542.567669][ T31] audit: type=1400 audit(1542.480:406): avc: denied { search } for pid=15198 comm="syz.1.2785" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1542.576796][ T31] audit: type=1400 audit(1542.490:407): avc: denied { search } for pid=15198 comm="syz.1.2785" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1542.581843][ T31] audit: type=1400 audit(1542.490:408): avc: denied { read open } for pid=15198 comm="syz.1.2785" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1552.702347][ T23] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1552.877734][ T23] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1552.878212][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1552.902519][ T23] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1552.903823][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.904799][ T23] usb 2-1: Product: syz [ 1552.905241][ T23] usb 2-1: Manufacturer: syz [ 1552.905719][ T23] usb 2-1: SerialNumber: syz [ 1553.228031][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 1553.251568][ T23] usb 2-1: USB disconnect, device number 37 [ 1553.546943][ T31] audit: type=1400 audit(1553.460:409): avc: denied { map } for pid=15249 comm="syz.1.2796" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1553.547522][ T31] audit: type=1400 audit(1553.460:410): avc: denied { execute } for pid=15249 comm="syz.1.2796" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1554.406685][ T31] audit: type=1400 audit(1554.300:411): avc: denied { kexec_image_load } for pid=15253 comm="syz.1.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1557.513124][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2800'. [ 1557.572949][T15258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2800'. [ 1561.773410][ T31] audit: type=1326 audit(1561.670:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.0.2802" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x0 [ 1578.208268][T15295] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 1578.247361][T15295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1578.288875][T15295] vlan2: entered allmulticast mode [ 1578.289323][T15295] geneve1: entered allmulticast mode [ 1578.307878][T15295] bond2: (slave vlan2): making interface the new active one [ 1578.319508][T15295] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1579.039279][T15336] binder_alloc: 15335: binder_alloc_buf, no vma [ 1579.193890][ T31] audit: type=1400 audit(1579.100:413): avc: denied { map } for pid=15337 comm="syz.0.2814" path="/dev/nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1579.195003][ T31] audit: type=1400 audit(1579.110:414): avc: denied { execute } for pid=15337 comm="syz.0.2814" path="/dev/nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1586.263865][T15347] binder: 15346:15347 ioctl c018620b 0 returned -14 [ 1594.549455][ T31] audit: type=1400 audit(1594.460:415): avc: denied { bind } for pid=15371 comm="syz.0.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1604.995680][ T31] audit: type=1400 audit(1604.910:416): avc: denied { read } for pid=15382 comm="syz.0.2830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1607.052955][T15388] netlink: 'syz.0.2831': attribute type 27 has an invalid length. [ 1608.316189][ T6233] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1608.597227][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.602428][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.603805][ T6233] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1608.605061][ T6233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.623338][ T6233] usb 1-1: config 0 descriptor?? [ 1609.049899][ T6233] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1609.051926][ T6233] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1609.063938][ T6233] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0017/input/input11 [ 1609.095214][ T6233] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1609.623763][T11486] usb 1-1: USB disconnect, device number 47 [ 1609.688336][ T31] audit: type=1326 audit(1609.600:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.0.2834" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x0 [ 1661.263911][T14830] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1661.535901][T14830] usb 1-1: config 118 interface 0 has no altsetting 0 [ 1661.563455][T14830] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1661.564604][T14830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.567027][T14830] usb 1-1: Product: syz [ 1661.568450][T14830] usb 1-1: Manufacturer: syz [ 1661.570690][T14830] usb 1-1: SerialNumber: syz [ 1661.883808][T14830] usb 1-1: USB disconnect, device number 48 [ 1662.352418][ T9024] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1662.534735][ T9024] usb 1-1: config 118 interface 0 has no altsetting 0 [ 1662.562773][ T9024] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1662.563227][ T9024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.563317][ T9024] usb 1-1: Product: syz [ 1662.563379][ T9024] usb 1-1: Manufacturer: syz [ 1662.563441][ T9024] usb 1-1: SerialNumber: syz [ 1662.824058][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.827288][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.884269][ T9024] usb 1-1: USB disconnect, device number 49 [ 1684.119215][T15537] netlink: 'syz.1.2864': attribute type 21 has an invalid length. [ 1684.120865][T15537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2864'. [ 1684.512508][ T31] audit: type=1326 audit(1684.400:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.2865" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.514563][ T31] audit: type=1326 audit(1684.430:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.2865" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.527913][ T31] audit: type=1326 audit(1684.440:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.547196][ T31] audit: type=1326 audit(1684.450:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.549398][ T31] audit: type=1326 audit(1684.460:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="" exe="/syz-executor" sig=0 arch=40000028 syscall=220 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.562805][ T31] audit: type=1326 audit(1684.460:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1684.565830][ T31] audit: type=1326 audit(1684.460:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1690.323926][ T31] audit: type=1400 audit(1690.240:425): avc: denied { watch watch_reads } for pid=15544 comm="syz.1.2868" path="/243" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1731.299819][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1731.992505][ T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1732.182825][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1732.303865][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1732.321676][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1732.327352][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1732.327472][ T43] usb 2-1: Product: syz [ 1732.327533][ T43] usb 2-1: Manufacturer: syz [ 1732.327586][ T43] usb 2-1: SerialNumber: syz [ 1732.374133][ T43] usb 2-1: config 0 descriptor?? [ 1732.378807][T15641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1732.413917][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 1732.416897][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1732.703162][T14431] usb 2-1: USB disconnect, device number 38 [ 1733.054724][T14431] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1733.227942][T14431] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1733.229257][T14431] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1733.250214][T14431] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1733.251348][T14431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.253496][T14431] usb 2-1: Product: syz [ 1733.263653][T14431] usb 2-1: Manufacturer: syz [ 1733.264592][T14431] usb 2-1: SerialNumber: syz [ 1733.504738][T14431] cdc_ncm 2-1:1.0: bind() failure [ 1733.515192][T14431] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1733.517169][T14431] cdc_ncm 2-1:1.1: bind() failure [ 1733.528257][T14431] usb 2-1: USB disconnect, device number 39 [ 1752.913729][T14431] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1753.063067][T14431] usb 2-1: Using ep0 maxpacket: 16 [ 1753.076366][T14431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.078122][T14431] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1753.080021][T14431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.085823][T14431] usb 2-1: config 0 descriptor?? [ 1753.513128][T14431] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 1753.514556][T14431] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 1753.515668][T14431] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 1753.516782][T14431] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 1753.518002][T14431] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 1753.519450][T14431] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1753.716372][T15693] i2c i2c-1: Invalid block write size 156 [ 1753.720190][ T43] usb 2-1: USB disconnect, device number 40 [ 1753.920823][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1754.486380][ T43] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1754.493161][ T43] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1759.764210][ T31] audit: type=1326 audit(1759.680:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15760 comm="syz.0.2904" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1759.767321][ T31] audit: type=1326 audit(1759.680:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15760 comm="syz.0.2904" exe="/syz-executor" sig=0 arch=40000028 syscall=282 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1759.771128][ T31] audit: type=1326 audit(1759.680:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15760 comm="syz.0.2904" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1779.973013][ T23] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1780.147585][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1780.151647][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 1780.164207][ T23] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 1780.164970][ T23] usb 2-1: config 8 has no interface number 0 [ 1780.166875][ T23] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 1780.168441][ T23] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1780.170750][ T23] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid maxpacket 256, setting to 64 [ 1780.173018][ T23] usb 2-1: config 8 interface 24 has no altsetting 0 [ 1780.187767][ T23] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1780.188976][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.191254][ T23] usb 2-1: Product: syz [ 1780.192976][ T23] usb 2-1: Manufacturer: syz [ 1780.193892][ T23] usb 2-1: SerialNumber: syz [ 1780.206147][T15783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1780.213899][T15783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1780.465221][ T23] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 1780.479416][ T23] usb 2-1: USB disconnect, device number 41 [ 1780.596484][ T31] audit: type=1400 audit(1780.510:429): avc: denied { create } for pid=15802 comm="syz.1.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1780.603285][ T31] audit: type=1400 audit(1780.510:430): avc: denied { sys_admin } for pid=15802 comm="syz.1.2913" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1792.703230][T14830] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1792.854520][T14830] usb 2-1: Using ep0 maxpacket: 8 [ 1792.875378][T14830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.876229][T14830] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1792.876325][T14830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.886700][T14830] usb 2-1: config 0 descriptor?? [ 1803.145257][ T23] usb 2-1: USB disconnect, device number 42 [ 1814.644107][ T43] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1814.644428][ T43] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1814.646663][ T43] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1814.649477][ T43] hid-generic 0003:0004:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1821.252586][T15948] batadv_slave_0: entered promiscuous mode [ 1821.257186][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1821.281290][T15948] batadv_slave_0 (unregistering): left promiscuous mode [ 1830.903257][T15961] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1830.903899][T15961] Error validating options; rc = [-22] [ 1844.154871][ T31] audit: type=1400 audit(1844.070:431): avc: denied { shutdown } for pid=15968 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1866.028296][ T31] audit: type=1326 audit(1865.940:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.032555][ T31] audit: type=1326 audit(1865.940:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.035390][ T31] audit: type=1326 audit(1865.950:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=448 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.037952][ T31] audit: type=1326 audit(1865.950:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.040945][ T31] audit: type=1326 audit(1865.950:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.044645][ T31] audit: type=1326 audit(1865.960:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.047313][ T31] audit: type=1326 audit(1865.960:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.050805][ T31] audit: type=1326 audit(1865.960:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.053426][ T31] audit: type=1326 audit(1865.960:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1866.057281][ T31] audit: type=1326 audit(1865.970:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.1.2953" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x131f40 code=0x7ffc0000 [ 1867.022771][ T23] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1867.226756][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1867.228072][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 111, setting to 64 [ 1867.229818][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1867.230922][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.238178][ T23] usb 2-1: config 0 descriptor?? [ 1867.246431][T16002] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1867.602893][ T23] rc_core: IR keymap rc-xbox-dvd not found [ 1867.603409][ T23] Registered IR keymap rc-empty [ 1867.606195][ T23] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1867.609941][ T23] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 1867.647222][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1867.647937][ T23] usb 2-1: USB disconnect, device number 43 [ 1897.542620][T11486] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1897.702617][T11486] usb 1-1: Using ep0 maxpacket: 32 [ 1897.716017][T11486] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.717203][T11486] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1897.720429][T11486] usb 1-1: config 1 has no interface number 1 [ 1897.723242][T11486] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1897.740311][T11486] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1897.743471][T11486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.745676][T11486] usb 1-1: Product: syz [ 1897.748328][T11486] usb 1-1: Manufacturer: syz [ 1897.750046][T11486] usb 1-1: SerialNumber: syz [ 1898.024675][T11486] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1898.031212][T11486] usb 1-1: 2:1 : format type 6 is not supported yet [ 1898.064296][T11486] usb 1-1: USB disconnect, device number 50 [ 1936.288301][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1936.290697][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1948.099986][T16199] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3001' sets config #0 [ 1966.711524][T16249] macvtap0: entered allmulticast mode [ 1966.714368][T16249] veth0_macvtap: entered allmulticast mode [ 1967.013729][T16006] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1967.191228][T16006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1967.191616][T16006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1967.192141][T16006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1967.192804][T16006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.420768][T16006] usb 1-1: usb_control_msg returned -32 [ 1967.421228][T16006] usbtmc 1-1:16.0: can't read capabilities [ 1971.164460][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1981.210250][ T6233] usb 1-1: USB disconnect, device number 51 [ 1981.724057][ T6233] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1981.901549][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.904070][ T6233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.905329][ T6233] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1981.907790][ T6233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.914640][ T6233] usb 1-1: config 0 descriptor?? [ 1982.660083][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1982.677595][ T6233] usbhid 1-1:0.0: can't add hid device: -71 [ 1982.678147][ T6233] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1982.690070][ T6233] usb 1-1: USB disconnect, device number 52 [ 2001.042948][T16006] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2001.293052][T16006] usb 2-1: Using ep0 maxpacket: 8 [ 2001.367827][T16006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2001.385339][T16006] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 2001.385765][T16006] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.386048][T16006] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 2001.386131][T16006] usb 2-1: config 9 has no interface number 0 [ 2001.386474][T16006] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 2001.386571][T16006] usb 2-1: config 9 interface 5 has no altsetting 0 [ 2001.419068][T16006] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 2001.419460][T16006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.419720][T16006] usb 2-1: Product: syz [ 2001.419795][T16006] usb 2-1: Manufacturer: syz [ 2001.419856][T16006] usb 2-1: SerialNumber: syz [ 2001.692824][T16006] usb 2-1: USB disconnect, device number 44 [ 2002.381387][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 2003.173660][ T6233] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2003.344574][ T6233] usb 2-1: config 0 has no interfaces? [ 2003.359279][ T6233] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2003.361297][ T6233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.364204][ T6233] usb 2-1: Product: syz [ 2003.364976][ T6233] usb 2-1: Manufacturer: syz [ 2003.365733][ T6233] usb 2-1: SerialNumber: syz [ 2003.370289][ T6233] usb 2-1: config 0 descriptor?? [ 2003.606778][ T6233] usb 2-1: USB disconnect, device number 45 [ 2004.652564][T16006] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2004.792340][T16006] usb 2-1: device descriptor read/64, error -71 [ 2005.044054][T16006] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2005.202551][T16006] usb 2-1: device descriptor read/64, error -71 [ 2005.313043][T16006] usb usb2-port1: attempt power cycle [ 2005.672426][T16006] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2005.695203][T16006] usb 2-1: device descriptor read/8, error -71 [ 2005.952549][T16006] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2005.990983][T16006] usb 2-1: device descriptor read/8, error -71 [ 2006.103746][T16006] usb usb2-port1: unable to enumerate USB device [ 2007.083227][T16006] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2007.260048][T16006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2007.261329][T16006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2007.263582][T16006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2007.264830][T16006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.484131][T16006] usb 1-1: usb_control_msg returned -32 [ 2007.485206][T16006] usbtmc 1-1:16.0: can't read capabilities [ 2007.502276][T16006] usb 1-1: USB disconnect, device number 53 [ 2007.903512][T16006] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2008.059653][T16006] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2008.060988][T16006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.066043][T16006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.068855][T16006] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2008.076408][T16006] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2008.077663][T16006] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2008.081086][T16006] usb 1-1: Manufacturer: syz [ 2008.089916][T16006] usb 1-1: config 0 descriptor?? [ 2008.511714][T16006] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 2008.518208][T16006] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2009.493520][T16006] usb 1-1: USB disconnect, device number 54 [ 2009.838783][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 2009.839243][ T31] audit: type=1800 audit(2009.750:457): pid=16451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3035" name="/" dev="tmpfs" ino=131 res=0 errno=0 [ 2024.090165][T16486] netlink: 'syz.0.3045': attribute type 9 has an invalid length. [ 2024.091618][T16486] netlink: 'syz.0.3045': attribute type 6 has an invalid length. [ 2024.103067][T16486] netlink: 'syz.0.3045': attribute type 7 has an invalid length. [ 2024.104891][T16486] netlink: 'syz.0.3045': attribute type 8 has an invalid length. [ 2031.235695][T16505] 8<--- cut here --- [ 2031.235923][T16505] Unable to handle kernel paging request at virtual address fee04f27 when write [ 2031.236073][T16505] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 2031.237028][T16505] Internal error: Oops: a06 [#1] SMP ARM [ 2031.239213][T16505] Modules linked in: [ 2031.239764][T16505] CPU: 1 UID: 0 PID: 16505 Comm: syz.1.3053 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 2031.240067][T16505] Hardware name: ARM-Versatile Express [ 2031.240230][T16505] PC is at parport_attach+0x174/0x1d0 [ 2031.240472][T16505] LR is at parport_attach+0x164/0x1d0 [ 2031.240644][T16505] pc : [<81397d48>] lr : [<81397d38>] psr: 60000013 [ 2031.240855][T16505] sp : dfa45d38 ip : dfa45d38 fp : dfa45d5c [ 2031.241442][T16505] r10: 82b15078 r9 : 00000003 r8 : 83be5d80 [ 2031.241638][T16505] r7 : dfa45d98 r6 : 83be5d80 r5 : 00000000 r4 : 00000000 [ 2031.242200][T16505] r3 : fee04f27 r2 : 81e14f2c r1 : 00000001 r0 : 813979b8 [ 2031.242552][T16505] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 2031.242994][T16505] Control: 30c5387d Table: 8577f940 DAC: 00000000 [ 2031.243286][T16505] Register r0 information: non-slab/vmalloc memory [ 2031.243871][T16505] Register r1 information: non-paged memory [ 2031.244093][T16505] Register r2 information: non-slab/vmalloc memory [ 2031.244322][T16505] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 2031.244751][T16505] Register r4 information: NULL pointer [ 2031.244975][T16505] Register r5 information: NULL pointer [ 2031.245146][T16505] Register r6 information: slab kmalloc-192 start 83be5d80 pointer offset 0 size 192 [ 2031.245904][T16505] Register r7 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 2031.246551][T16505] Register r8 information: slab kmalloc-192 start 83be5d80 pointer offset 0 size 192 [ 2031.247222][T16505] Register r9 information: non-paged memory [ 2031.247555][T16505] Register r10 information: non-slab/vmalloc memory [ 2031.247914][T16505] Register r11 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 2031.248273][T16505] Register r12 information: 2-page vmalloc region starting at 0xdfa44000 allocated at kernel_clone+0xac/0x3e4 [ 2031.248666][T16505] Process syz.1.3053 (pid: 16505, stack limit = 0xdfa44000) [ 2031.248992][T16505] Stack: (0xdfa45d38 to 0xdfa46000) [ 2031.249296][T16505] 5d20: 823f8830 83be5d80 [ 2031.249785][T16505] 5d40: 829c4ad8 829c4ad8 81e153ec 00000000 dfa45d94 dfa45d60 81393e00 81397be0 [ 2031.250231][T16505] 5d60: b5403587 00000000 855a6000 200000c0 83be5d80 b5403587 200000c0 855a6000 [ 2031.250606][T16505] 5d80: 40946400 00000003 dfa45e4c dfa45d98 8138fa90 81393d08 656d6f63 705f6964 [ 2031.250883][T16505] 5da0: 6f707261 00007472 00000000 00004f27 00000005 00000004 00000004 00000005 [ 2031.251112][T16505] 5dc0: 00000006 00000006 00000007 0000000a 00000100 00000002 00080000 00000001 [ 2031.251364][T16505] 5de0: 00000008 0000001e 00000001 00000000 0001a449 00000003 00000006 00000081 [ 2031.251608][T16505] 5e00: 0000caa7 00000004 00001e58 0000000b 00000003 0000003c 00000008 00000006 [ 2031.251971][T16505] 5e20: 00000000 00000005 00000000 b9b6a1b8 00000000 85aaf180 83be5d80 200000c0 [ 2031.252443][T16505] 5e40: dfa45f14 dfa45e50 81390a44 8138f9c4 00000000 00000000 00000000 b9b6a1b8 [ 2031.252756][T16505] 5e60: 00000000 00000000 8246a3fc 0000005f 838f1858 83be5db0 841fe294 855a6000 [ 2031.253085][T16505] 5e80: dfa45ee4 dfa45e90 80795a0c 8078bcfc 00000064 00000001 00000000 dfa45eac [ 2031.253322][T16505] 5ea0: 856ae610 834cf5d8 00006400 0000000b dfa45ea0 00000000 00000000 b9b6a1b8 [ 2031.253691][T16505] 5ec0: 85aaf180 40946400 200000c0 200000c0 00000003 85aaf180 dfa45ef4 dfa45ee8 [ 2031.253928][T16505] 5ee0: 80795b2c b9b6a1b8 dfa45f14 40946400 00000000 85aaf181 200000c0 00000003 [ 2031.254273][T16505] 5f00: 85aaf180 855a6000 dfa45fa4 dfa45f18 8056e2dc 81390474 ecac8b10 855a6000 [ 2031.254588][T16505] 5f20: dfa45f3c dfa45f30 81a2cd08 81a2cbd8 dfa45f54 dfa45f40 80261ffc 80293598 [ 2031.254889][T16505] 5f40: dfa45fb0 40000000 dfa45f84 dfa45f58 802229ec 80261fb8 00000000 8281d09c [ 2031.255162][T16505] 5f60: dfa45fb0 0014c4a0 ecac8b10 80222940 00000000 b9b6a1b8 dfa45fac 00000000 [ 2031.255945][T16505] 5f80: 00000000 002f6300 00000036 8020029c 855a6000 00000036 00000000 dfa45fa8 [ 2031.256499][T16505] 5fa0: 80200060 8056e1b8 00000000 00000000 00000003 40946400 200000c0 00000000 [ 2031.256968][T16505] 5fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b490bc [ 2031.257503][T16505] 5fe0: 76b48ec0 76b48eb0 000193a4 00131f40 60000010 00000003 00000000 00000000 [ 2031.258062][T16505] Call trace: [ 2031.258369][T16505] [<81397bd4>] (parport_attach) from [<81393e00>] (comedi_device_attach+0x104/0x240) [ 2031.258879][T16505] r6:00000000 r5:81e153ec r4:829c4ad8 [ 2031.259164][T16505] [<81393cfc>] (comedi_device_attach) from [<8138fa90>] (do_devconfig_ioctl+0xd8/0x1e0) [ 2031.259634][T16505] r10:00000003 r9:40946400 r8:855a6000 r7:200000c0 r6:b5403587 r5:83be5d80 [ 2031.260032][T16505] r4:200000c0 [ 2031.260256][T16505] [<8138f9b8>] (do_devconfig_ioctl) from [<81390a44>] (comedi_unlocked_ioctl+0x5dc/0x1b94) [ 2031.260751][T16505] r6:200000c0 r5:83be5d80 r4:85aaf180 [ 2031.261029][T16505] [<81390468>] (comedi_unlocked_ioctl) from [<8056e2dc>] (sys_ioctl+0x130/0xdc8) [ 2031.261545][T16505] r10:855a6000 r9:85aaf180 r8:00000003 r7:200000c0 r6:85aaf181 r5:00000000 [ 2031.262188][T16505] r4:40946400 [ 2031.262506][T16505] [<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2031.262945][T16505] Exception stack(0xdfa45fa8 to 0xdfa45ff0) [ 2031.263261][T16505] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 2031.263682][T16505] 5fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b490bc [ 2031.264100][T16505] 5fe0: 76b48ec0 76b48eb0 000193a4 00131f40 [ 2031.264424][T16505] r10:00000036 r9:855a6000 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 2031.264841][T16505] r4:00000000 [ 2031.265326][T16505] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 2031.266237][T16505] ---[ end trace 0000000000000000 ]--- [ 2031.267084][T16505] Kernel panic - not syncing: Fatal exception [ 2031.268951][T16505] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:17:24 Registers: info registers vcpu 0 CPU#0 R00=81a38eec R01=84b3b000 R02=00000000 R03=00000001 R04=84b3b000 R05=00000001 R06=81a38eec R07=7ea751c0 R08=84b3b000 R09=00000002 R10=0000019e R11=df959eac R12=df959eb0 R13=df959e88 R14=80295ac4 R15=802d3934 PSR=60010093 -ZC- A S svc32 s00=00000000 s01=3a0c0000 d00=3a0c000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000014 d02=0000001400000000 s06=00000bf1 s07=00000000 d03=0000000000000bf1 s08=00000001 s09=00000001 d04=0000000100000001 s10=00000028 s11=00718604 d05=0071860400000028 s12=ffff0206 s13=0003ffff d06=0003ffffffff0206 s14=08000408 s15=8a208084 d07=8a20808408000408 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=e8031802 s33=fc020001 d16=fc020001e8031802 s34=01ea0303 s35=f2000200 d17=f200020001ea0303 s36=00080071 s37=08000008 d18=0800000800080071 s38=0180026c s39=ffffff02 d19=ffffff020180026c s40=71fa03ff s41=08060601 d20=0806060171fa03ff s42=01000000 s43=ffffff02 d21=ffffff0201000000 s44=ff0203ff s45=03ffffff d22=03ffffffff0203ff s46=000d8003 s47=88035808 d23=88035808000d8003 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=4df2ca4d s53=4474a09c d26=4474a09c4df2ca4d s54=d6f0b8a1 s55=11d72e7a d27=11d72e7ad6f0b8a1 s56=4a19463f s57=0b4947d2 d28=0b4947d24a19463f s58=27880054 s59=3a281a60 d29=3a281a6027880054 s60=80a6d7e8 s61=1b09e38b d30=1b09e38b80a6d7e8 s62=a09cd608 s63=f0d9b5be d31=f0d9b5bea09cd608 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000000 R02=00000000 R03=00000059 R04=82979ab8 R05=00000000 R06=60000193 R07=00000001 R08=00000001 R09=dfa45ac8 R10=00000001 R11=dfa45ab4 R12=00000020 R13=dfa45a38 R14=30353631 R15=802e4fec PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000