last executing test programs: 2m0.080008507s ago: executing program 1 (id=5576): syz_emit_ethernet(0x27, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@generic={0x18, "c8e4738cda8e51925070bcbe4a81ddc5d6f639ee2d1c9230fb"}}}, 0x0) 2m0.018809381s ago: executing program 1 (id=5577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000004600)=""/4126, 0x101e}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 1m59.929804325s ago: executing program 1 (id=5578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x34}}, 0x0) 1m59.686633419s ago: executing program 1 (id=5579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m59.397726535s ago: executing program 1 (id=5580): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000280)) 1m59.090796932s ago: executing program 1 (id=5581): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) 1m59.090599582s ago: executing program 32 (id=5581): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) 51.728389545s ago: executing program 0 (id=5622): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x448, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x28, "c9e40ceccaf2cf18c1312929801b2dbcb95e8b2725d2e3c38bc20f1acdd8"}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote, [0x0, 0xff, 0x0, 0xff]}, {@ipv6=@dev, [0x0, 0x0, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [0x0, 0x0, 0x0, 0xff], @ipv6=@loopback}, {@ipv4=@multicast1, [], @ipv6=@loopback}], 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020730a00ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10000a006) 35.689640547s ago: executing program 0 (id=5629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a", 0x6c}], 0x2}], 0x1, 0x40800) recvmsg$can_j1939(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/15, 0xf}, {&(0x7f0000000740)=""/62, 0x3e}], 0x2}, 0x40000001) 35.279483619s ago: executing program 0 (id=5630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200c0004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000380)={0xfffffffa, 0x6000003, 0xd83f}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 10.97830542s ago: executing program 2 (id=5636): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="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", 0x3e7}], 0x1}}], 0x1, 0x40011) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18fbd9"]) 10.869502796s ago: executing program 2 (id=5637): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='afs_send_data\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 10.748927413s ago: executing program 2 (id=5638): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 10.689292206s ago: executing program 0 (id=5639): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) connect$can_j1939(r0, 0x0, 0x0) 10.63016613s ago: executing program 0 (id=5640): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000006600)=0x222000, 0x4) 10.539441294s ago: executing program 0 (id=5641): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 10.099614709s ago: executing program 2 (id=5642): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 10.099207619s ago: executing program 2 (id=5643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200c0004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, 0x0) 0s ago: executing program 2 (id=5644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x418180, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): r=1, Product=2, SerialNumber=3 [ 2207.632130][ T9] usb 2-1: Product: syz [ 2207.632191][ T9] usb 2-1: Manufacturer: 鍭䮭獯芠眩﹎ῖ侳鏙້捷栵ҫভ쫪⤮悱㞛㽾䕍頱ꍩృ䘆騽揄㥩獮䇥勾헔薃걑糋뭃鱆攷䩦ධ鵞莳醊࣓捅㖪棸國㦁㏛२ [ 2207.632231][ T9] usb 2-1: SerialNumber: syz [ 2207.896312][ T9] cdc_ncm 2-1:1.0: bind() failure [ 2207.900335][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2207.900628][ T9] cdc_ncm 2-1:1.1: bind() failure [ 2207.906987][ T9] usb 2-1: USB disconnect, device number 30 [ 2210.189370][T21484] fuse: Unknown parameter 'grou00000000000000000000' [ 2211.783303][T21493] fuse: Bad value for 'group_id' [ 2211.783553][T21493] fuse: Bad value for 'group_id' [ 2212.781628][T21498] fuse: Unknown parameter 'grou00000000000000000000' [ 2216.297448][T21512] FAULT_INJECTION: forcing a failure. [ 2216.297448][T21512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2216.304384][T21512] CPU: 1 UID: 0 PID: 21512 Comm: syz.1.4710 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2216.304463][T21512] Hardware name: ARM-Versatile Express [ 2216.304477][T21512] Call trace: [ 2216.304499][T21512] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2216.304558][T21512] r7:81d2c414 r6:00000000 r5:60000013 r4:82257c70 [ 2216.304568][T21512] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2216.304596][T21512] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2216.304624][T21512] r5:83256c00 r4:82951710 [ 2216.304631][T21512] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2216.304660][T21512] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2216.304690][T21512] r8:85503e40 r7:81d2c414 r6:000000b0 r5:20000080 r4:00000010 [ 2216.304698][T21512] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2216.304721][T21512] [<8095f694>] (should_fail_usercopy) from [<80a87848>] (iommufd_fops_ioctl+0x124/0x280) [ 2216.304749][T21512] [<80a87724>] (iommufd_fops_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 2216.304790][T21512] r8:85503e40 r7:20000080 r6:85503e41 r5:00000000 r4:00003b8b [ 2216.304798][T21512] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2216.304820][T21512] Exception stack(0xdfc6dfa8 to 0xdfc6dff0) [ 2216.304839][T21512] dfa0: 00000000 00000000 00000003 00003b8b 20000080 00000000 [ 2216.304855][T21512] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b100bc [ 2216.304869][T21512] dfe0: 76b0fec0 76b0feb0 0001939c 00131f30 [ 2216.304886][T21512] r10:00000036 r9:83256c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 2216.304895][T21512] r4:00000000 [ 2216.420919][T21516] fuse: Unknown parameter 'grou00000000000000000000' [ 2216.589210][ T31] audit: type=1400 audit(2216.557:359): avc: denied { write } for pid=21517 comm="syz.0.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2219.610804][T21529] fuse: Bad value for 'group_id' [ 2219.611208][T21529] fuse: Bad value for 'group_id' [ 2222.025469][T21552] fuse: Bad value for 'group_id' [ 2222.036942][T21552] fuse: Bad value for 'group_id' [ 2224.077804][T21560] FAULT_INJECTION: forcing a failure. [ 2224.077804][T21560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2224.078095][T21560] CPU: 1 UID: 0 PID: 21560 Comm: syz.0.4722 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2224.078137][T21560] Hardware name: ARM-Versatile Express [ 2224.078151][T21560] Call trace: [ 2224.078180][T21560] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2224.078238][T21560] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2224.078248][T21560] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2224.078340][T21560] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2224.078401][T21560] r5:83a7bc00 r4:82951710 [ 2224.078435][T21560] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2224.078470][T21560] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2224.078527][T21560] r8:76b37f30 r7:00000000 r6:00000000 r5:e0015f68 r4:00000002 [ 2224.078541][T21560] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2224.078644][T21560] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2224.078720][T21560] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2224.078797][T21560] r10:00000001 r9:8060401c r8:00000002 r7:e0015f68 r6:0000000f r5:76b37f30 [ 2224.078853][T21560] r4:83a7bc00 r3:e0015e9f [ 2224.078916][T21560] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2224.078994][T21560] r8:76b37f30 r7:e0015f68 r6:83a7bc00 r5:0000000f r4:855039c0 [ 2224.079028][T21560] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2224.079086][T21560] r10:00000003 r9:83a7bc00 r8:8020029c r7:00000000 r6:00000000 r5:855039c0 [ 2224.079122][T21560] r4:855039c3 [ 2224.079131][T21560] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2224.079161][T21560] r7:00000003 r6:00000004 r5:76b37f30 r4:0000000f [ 2224.079197][T21560] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2224.079236][T21560] Exception stack(0xe0015fa8 to 0xe0015ff0) [ 2224.079284][T21560] 5fa0: 0000000f 76b37f30 00000004 76b37f30 0000000f 00000000 [ 2224.079305][T21560] 5fc0: 0000000f 76b37f30 00000004 00000003 002d0000 00000000 00006364 76b380bc [ 2224.079319][T21560] 5fe0: 00000158 76b37ed0 000d7d68 0012fe04 [ 2225.339101][T21570] fuse: Bad value for 'group_id' [ 2225.339889][T21570] fuse: Bad value for 'group_id' [ 2228.371419][T21587] fuse: Unknown parameter 'grou00000000000000000000' [ 2229.409459][T21599] fuse: Unknown parameter 'grou00000000000000000000' [ 2230.078373][T21610] fuse: Unknown parameter 'grou00000000000000000000' [ 2233.107377][T21626] fuse: Unknown parameter 'group_i00000000000000000000' [ 2238.738345][ T7927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.792672][ T7927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.859874][ T7927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.913789][ T7927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.138648][ T7927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2239.142998][ T7927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2239.150861][ T7927] bond0 (unregistering): Released all slaves [ 2239.217075][ T7927] hsr_slave_0: left promiscuous mode [ 2239.219634][ T7927] hsr_slave_1: left promiscuous mode [ 2239.229641][ T7927] veth1_macvtap: left promiscuous mode [ 2239.230183][ T7927] veth0_macvtap: left promiscuous mode [ 2239.230455][ T7927] veth1_vlan: left promiscuous mode [ 2239.230679][ T7927] veth0_vlan: left promiscuous mode [ 2240.299336][T21808] FAULT_INJECTION: forcing a failure. [ 2240.299336][T21808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2240.356495][T21808] CPU: 1 UID: 0 PID: 21808 Comm: syz.1.4756 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2240.356575][T21808] Hardware name: ARM-Versatile Express [ 2240.356590][T21808] Call trace: [ 2240.356615][T21808] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2240.356677][T21808] r7:00000000 r6:00000000 r5:60000113 r4:82257c70 [ 2240.356687][T21808] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2240.356715][T21808] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2240.356744][T21808] r5:838b8000 r4:82951710 [ 2240.356759][T21808] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2240.356792][T21808] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2240.356823][T21808] r8:76b0ff30 r7:00000000 r6:00000000 r5:e893df68 r4:00000002 [ 2240.356831][T21808] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2240.356856][T21808] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2240.356886][T21808] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2240.356923][T21808] r10:00000001 r9:8060401c r8:00000002 r7:e893df68 r6:0000000f r5:76b0ff30 [ 2240.356935][T21808] r4:838b8000 r3:e893de9f [ 2240.356943][T21808] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2240.356976][T21808] r8:76b0ff30 r7:e893df68 r6:838b8000 r5:0000000f r4:85f06d80 [ 2240.356985][T21808] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2240.357017][T21808] r10:00000003 r9:838b8000 r8:8020029c r7:00000000 r6:00000000 r5:85f06d80 [ 2240.357026][T21808] r4:85f06d83 [ 2240.357033][T21808] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2240.357062][T21808] r7:00000003 r6:00000004 r5:76b0ff30 r4:0000000f [ 2240.357070][T21808] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2240.357094][T21808] Exception stack(0xe893dfa8 to 0xe893dff0) [ 2240.357115][T21808] dfa0: 0000000f 76b0ff30 00000004 76b0ff30 0000000f 00000000 [ 2240.357132][T21808] dfc0: 0000000f 76b0ff30 00000004 00000003 002d0000 00000000 00006364 76b100bc [ 2240.357146][T21808] dfe0: 00000158 76b0fed0 000d7d68 0012fe04 [ 2240.710273][T21653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.728786][T21653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2241.507861][T21653] hsr_slave_0: entered promiscuous mode [ 2241.509806][T21653] hsr_slave_1: entered promiscuous mode [ 2241.510866][T21653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2241.511403][T21653] Cannot create hsr debugfs directory [ 2242.034558][T21653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2242.041983][T21653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2242.048272][T21653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2242.054176][T21653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2242.698979][T21653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2243.927823][T22050] 8021q: VLANs not supported on ip6gre0 [ 2243.992758][T22050] 8021q: VLANs not supported on ip6gre0 [ 2244.452204][T22069] FAULT_INJECTION: forcing a failure. [ 2244.452204][T22069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2244.452631][T22069] CPU: 0 UID: 0 PID: 22069 Comm: syz.1.4760 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2244.452671][T22069] Hardware name: ARM-Versatile Express [ 2244.452685][T22069] Call trace: [ 2244.452709][T22069] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2244.452780][T22069] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2244.452790][T22069] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2244.452825][T22069] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2244.452858][T22069] r5:84486c00 r4:82951710 [ 2244.452867][T22069] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2244.452900][T22069] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2244.452956][T22069] r8:76b0ff30 r7:00000000 r6:00000000 r5:ead8df68 r4:00000002 [ 2244.452967][T22069] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2244.453028][T22069] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2244.453063][T22069] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2244.453104][T22069] r10:00000001 r9:8060401c r8:00000002 r7:ead8df68 r6:0000000f r5:76b0ff30 [ 2244.453126][T22069] r4:84486c00 r3:ead8de9f [ 2244.453135][T22069] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2244.453174][T22069] r8:76b0ff30 r7:ead8df68 r6:84486c00 r5:0000000f r4:85503300 [ 2244.453184][T22069] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2244.453220][T22069] r10:00000003 r9:84486c00 r8:8020029c r7:00000000 r6:00000000 r5:85503300 [ 2244.453231][T22069] r4:85503303 [ 2244.453238][T22069] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2244.453271][T22069] r7:00000003 r6:00000004 r5:76b0ff30 r4:0000000f [ 2244.453302][T22069] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2244.453331][T22069] Exception stack(0xead8dfa8 to 0xead8dff0) [ 2244.453352][T22069] dfa0: 0000000f 76b0ff30 00000004 76b0ff30 0000000f 00000000 [ 2244.453372][T22069] dfc0: 0000000f 76b0ff30 00000004 00000003 002d0000 00000000 00006364 76b100bc [ 2244.453397][T22069] dfe0: 00000158 76b0fed0 000d7d68 0012fe04 [ 2245.530485][T21653] veth0_vlan: entered promiscuous mode [ 2245.539309][T21653] veth1_vlan: entered promiscuous mode [ 2245.573674][T21653] veth0_macvtap: entered promiscuous mode [ 2245.581641][T21653] veth1_macvtap: entered promiscuous mode [ 2245.617935][T21653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2245.618300][T21653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2245.618386][T21653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2245.618501][T21653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2245.730043][ T31] audit: type=1400 audit(2245.697:360): avc: denied { mounton } for pid=21653 comm="syz-executor" path="/syzkaller.Aa0Rbp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2245.747266][ T31] audit: type=1400 audit(2245.717:361): avc: denied { mount } for pid=21653 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2245.748781][ T31] audit: type=1400 audit(2245.717:362): avc: denied { mounton } for pid=21653 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2246.152968][T22105] fuse: Bad value for 'user_id' [ 2246.153211][T22105] fuse: Bad value for 'user_id' [ 2247.887648][T22122] fuse: Bad value for 'user_id' [ 2247.888863][T22122] fuse: Bad value for 'user_id' [ 2247.994923][T22124] fuse: Unknown parameter 'grou00000000000000000000' [ 2249.778746][T22141] fuse: Unknown parameter 'grou00000000000000000000' [ 2251.670180][T22157] fuse: Unknown parameter 'grou00000000000000000000' [ 2252.711731][ T31] audit: type=1400 audit(2252.677:363): avc: denied { getopt } for pid=22165 comm="syz.0.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2252.739244][T22173] fuse: Unknown parameter 'group_i00000000000000000000' [ 2257.066989][ T31] audit: type=1400 audit(2257.027:364): avc: denied { map } for pid=22192 comm="syz.0.4792" path="socket:[50989]" dev="sockfs" ino=50989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2257.087391][ T31] audit: type=1400 audit(2257.057:365): avc: denied { mounton } for pid=22192 comm="syz.0.4792" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2257.088948][T22193] binder: Unknown parameter 'euid<00000000000000000000' [ 2261.438977][T22218] fuse: Unknown parameter 'group_id00000000000000000000' [ 2263.313858][T22232] fuse: Unknown parameter 'group_id00000000000000000000' [ 2266.227891][T22248] fuse: Unknown parameter 'group_id00000000000000000000' [ 2266.547866][T22242] FAULT_INJECTION: forcing a failure. [ 2266.547866][T22242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.548121][T22242] CPU: 0 UID: 0 PID: 22242 Comm: syz.1.4809 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2266.548164][T22242] Hardware name: ARM-Versatile Express [ 2266.548179][T22242] Call trace: [ 2266.548200][T22242] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2266.548256][T22242] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2266.548266][T22242] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2266.548294][T22242] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2266.548321][T22242] r5:84486c00 r4:82951710 [ 2266.548328][T22242] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2266.548429][T22242] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2266.548554][T22242] r8:76b0ff30 r7:00000000 r6:00000000 r5:eae69f68 r4:00000002 [ 2266.548765][T22242] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2266.548824][T22242] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2266.548973][T22242] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2266.549070][T22242] r10:00000001 r9:8060401c r8:00000002 r7:eae69f68 r6:0000000f r5:76b0ff30 [ 2266.549112][T22242] r4:84486c00 r3:eae69e9f [ 2266.549382][T22242] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2266.549529][T22242] r8:76b0ff30 r7:eae69f68 r6:84486c00 r5:0000000f r4:84c7b840 [ 2266.549694][T22242] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2266.549839][T22242] r10:00000003 r9:84486c00 r8:8020029c r7:00000000 r6:00000000 r5:84c7b840 [ 2266.549855][T22242] r4:84c7b843 [ 2266.549862][T22242] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2266.549891][T22242] r7:00000003 r6:00000004 r5:76b0ff30 r4:0000000f [ 2266.549898][T22242] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2266.549970][T22242] Exception stack(0xeae69fa8 to 0xeae69ff0) [ 2266.550045][T22242] 9fa0: 0000000f 76b0ff30 00000004 76b0ff30 0000000f 00000000 [ 2266.550106][T22242] 9fc0: 0000000f 76b0ff30 00000004 00000003 002d0000 00000000 00006364 76b100bc [ 2266.550150][T22242] 9fe0: 00000158 76b0fed0 000d7d68 0012fe04 [ 2267.918508][T22263] fuse: Bad value for 'user_id' [ 2267.922563][T22263] fuse: Bad value for 'user_id' [ 2269.277207][T22274] fuse: Bad value for 'user_id' [ 2269.277563][T22274] fuse: Bad value for 'user_id' [ 2270.918904][T22285] fuse: Bad value for 'user_id' [ 2270.926823][T22285] fuse: Bad value for 'user_id' [ 2271.372922][ T31] audit: type=1400 audit(2271.337:366): avc: denied { accept } for pid=22291 comm="syz.1.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2271.416261][ T31] audit: type=1400 audit(2271.377:367): avc: denied { shutdown } for pid=22291 comm="syz.1.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2272.770066][T22300] fuse: Bad value for 'fd' [ 2273.397324][T22312] fuse: Bad value for 'fd' [ 2277.034198][T22329] fuse: Bad value for 'fd' [ 2282.680521][T22354] fuse: Unknown parameter 'user_id00000000000000000000' [ 2283.032451][T22358] fuse: Invalid rootmode [ 2285.338335][T22370] fuse: Unknown parameter 'user_id00000000000000000000' [ 2285.798851][T22376] fuse: Invalid rootmode [ 2288.641271][T22391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22391 comm=syz.0.4861 [ 2288.648745][T22392] fuse: Invalid rootmode [ 2288.649309][T22391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22391 comm=syz.0.4861 [ 2289.999658][T16772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.052799][T16772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.103601][T16772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.171955][T16772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.371055][T16772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2290.374985][T16772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2290.380244][T16772] bond0 (unregistering): Released all slaves [ 2290.439979][T16772] hsr_slave_0: left promiscuous mode [ 2290.441113][T16772] hsr_slave_1: left promiscuous mode [ 2290.450711][T16772] veth1_macvtap: left promiscuous mode [ 2290.451028][T16772] veth0_macvtap: left promiscuous mode [ 2290.451174][T16772] veth1_vlan: left promiscuous mode [ 2290.451261][T16772] veth0_vlan: left promiscuous mode [ 2291.722223][T22402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2291.728028][T22402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.444622][T22402] hsr_slave_0: entered promiscuous mode [ 2292.457050][T22402] hsr_slave_1: entered promiscuous mode [ 2292.970025][T22402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2292.974801][T22402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2292.992941][T22402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2293.009347][T22402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2293.608500][T22402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.004360][T22402] veth0_vlan: entered promiscuous mode [ 2296.043595][T22402] veth1_vlan: entered promiscuous mode [ 2296.159885][T22402] veth0_macvtap: entered promiscuous mode [ 2296.180619][T22402] veth1_macvtap: entered promiscuous mode [ 2296.292682][T22402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.293175][T22402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.293289][T22402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.293387][T22402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.762481][ T31] audit: type=1400 audit(2298.727:368): avc: denied { lock } for pid=22822 comm="syz.0.4870" path="socket:[51736]" dev="sockfs" ino=51736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2307.396357][T22861] fuse: Unknown parameter 'user_id00000000000000000000' [ 2310.766408][T22876] fuse: Unknown parameter 'user_id00000000000000000000' [ 2311.836041][T22878] FAULT_INJECTION: forcing a failure. [ 2311.836041][T22878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.846318][T22878] CPU: 1 UID: 0 PID: 22878 Comm: syz.0.4882 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2311.846442][T22878] Hardware name: ARM-Versatile Express [ 2311.846472][T22878] Call trace: [ 2311.846514][T22878] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2311.846652][T22878] r7:00000000 r6:00000000 r5:60000113 r4:82257c70 [ 2311.846674][T22878] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2311.846728][T22878] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2311.846788][T22878] r5:84486000 r4:82951710 [ 2311.846808][T22878] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2311.846866][T22878] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2311.846929][T22878] r8:76b6ff30 r7:00000000 r6:00000000 r5:eca29f68 r4:00000002 [ 2311.846949][T22878] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2311.847001][T22878] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2311.847059][T22878] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2311.847130][T22878] r10:00000001 r9:8060401c r8:00000002 r7:eca29f68 r6:0000000f r5:76b6ff30 [ 2311.847153][T22878] r4:84486000 r3:eca29e9f [ 2311.847169][T22878] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2311.847238][T22878] r8:76b6ff30 r7:eca29f68 r6:84486000 r5:0000000f r4:847876c0 [ 2311.847259][T22878] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2311.847323][T22878] r10:00000003 r9:84486000 r8:8020029c r7:00000000 r6:00000000 r5:847876c0 [ 2311.847345][T22878] r4:847876c3 [ 2311.847362][T22878] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2311.847420][T22878] r7:00000003 r6:00000004 r5:76b6ff30 r4:0000000f [ 2311.847437][T22878] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2311.847485][T22878] Exception stack(0xeca29fa8 to 0xeca29ff0) [ 2311.847526][T22878] 9fa0: 0000000f 76b6ff30 00000004 76b6ff30 0000000f 00000000 [ 2311.847559][T22878] 9fc0: 0000000f 76b6ff30 00000004 00000003 002d0000 00000000 00006364 76b700bc [ 2311.847590][T22878] 9fe0: 00000158 76b6fed0 000d7d68 0012fe04 [ 2311.955356][T22882] FAULT_INJECTION: forcing a failure. [ 2311.955356][T22882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.957542][T22882] CPU: 1 UID: 0 PID: 22882 Comm: syz.0.4884 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2311.957663][T22882] Hardware name: ARM-Versatile Express [ 2311.957690][T22882] Call trace: [ 2311.957731][T22882] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2311.957825][T22882] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2311.957845][T22882] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2311.957896][T22882] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2311.957948][T22882] r5:83a50c00 r4:82951710 [ 2311.957964][T22882] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2311.958026][T22882] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2311.958089][T22882] r8:8020029c r7:00000000 r6:8245d848 r5:20000280 r4:20000280 [ 2311.958108][T22882] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2311.958161][T22882] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 2311.958217][T22882] [<80965728>] (strncpy_from_user) from [<80560c80>] (getname_flags.part.0+0x44/0x18c) [ 2311.958295][T22882] r10:000000c3 r9:83a50c00 r8:8020029c r7:00000000 r6:8245d848 r5:20000280 [ 2311.958318][T22882] r4:85cdf000 [ 2311.958334][T22882] [<80560c3c>] (getname_flags.part.0) from [<80565d4c>] (getname_flags+0x3c/0x50) [ 2311.958403][T22882] r9:83a50c00 r8:8020029c r7:000000c3 r6:00000000 r5:00000000 r4:20000280 [ 2311.958423][T22882] [<80565d10>] (getname_flags) from [<80559a58>] (__do_sys_stat64+0x44/0xb4) [ 2311.958478][T22882] r5:00000000 r4:20000280 [ 2311.958495][T22882] [<80559a14>] (__do_sys_stat64) from [<80559e08>] (sys_stat64+0x10/0x14) [ 2311.958550][T22882] r6:0012fee0 r5:00000000 r4:00000000 [ 2311.958604][T22882] [<80559df8>] (sys_stat64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2311.958657][T22882] Exception stack(0xec8adfa8 to 0xec8adff0) [ 2311.958696][T22882] dfa0: 00000000 00000000 20000280 00000000 00000000 00000000 [ 2311.958733][T22882] dfc0: 00000000 00000000 0012fee0 000000c3 002d0000 00000000 00006364 76b700bc [ 2311.958763][T22882] dfe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2312.414398][T22888] fuse: Bad value for 'fd' [ 2312.481975][T22890] fuse: Unknown parameter '0x0000000000000003' [ 2313.664992][T22898] fuse: Unknown parameter '' [ 2319.570002][T22919] fuse: Bad value for 'fd' [ 2320.967902][ T31] audit: type=1400 audit(2320.937:369): avc: denied { create } for pid=22928 comm="syz.1.4900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 2321.143030][T22934] fuse: Unknown parameter '0x0000000000000003' [ 2325.307776][T22948] fuse: Unknown parameter '0x0000000000000003' [ 2336.032536][T22987] fuse: Unknown parameter '0x0000000000000003' [ 2342.140354][T23022] raw_sendmsg: syz.0.4928 forgot to set AF_INET. Fix it! [ 2342.337878][T23030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23030 comm=syz.0.4930 [ 2345.143914][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 2350.481193][T23081] FAULT_INJECTION: forcing a failure. [ 2350.481193][T23081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.486158][T23081] CPU: 1 UID: 0 PID: 23081 Comm: syz.0.4944 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2350.486219][T23081] Hardware name: ARM-Versatile Express [ 2350.486232][T23081] Call trace: [ 2350.486254][T23081] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2350.486318][T23081] r7:00000000 r6:00000000 r5:60000113 r4:82257c70 [ 2350.486327][T23081] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2350.486374][T23081] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2350.486401][T23081] r5:84e7b000 r4:82951710 [ 2350.486408][T23081] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2350.486437][T23081] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2350.486466][T23081] r8:76b6ff30 r7:00000000 r6:00000000 r5:dfb95f68 r4:00000002 [ 2350.486474][T23081] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2350.486497][T23081] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2350.486525][T23081] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2350.486558][T23081] r10:00000001 r9:8060401c r8:00000002 r7:dfb95f68 r6:0000000f r5:76b6ff30 [ 2350.486600][T23081] r4:84e7b000 r3:dfb95e9f [ 2350.486609][T23081] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2350.486642][T23081] r8:76b6ff30 r7:dfb95f68 r6:84e7b000 r5:0000000f r4:855030c0 [ 2350.486650][T23081] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2350.486680][T23081] r10:00000003 r9:84e7b000 r8:8020029c r7:00000000 r6:00000000 r5:855030c0 [ 2350.486689][T23081] r4:855030c3 [ 2350.486696][T23081] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2350.486723][T23081] r7:00000003 r6:00000004 r5:76b6ff30 r4:0000000f [ 2350.486730][T23081] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2350.486752][T23081] Exception stack(0xdfb95fa8 to 0xdfb95ff0) [ 2350.486770][T23081] 5fa0: 0000000f 76b6ff30 00000004 76b6ff30 0000000f 00000000 [ 2350.486786][T23081] 5fc0: 0000000f 76b6ff30 00000004 00000003 002d0000 00000000 00006364 76b700bc [ 2350.486798][T23081] 5fe0: 00000158 76b6fed0 000d7d68 0012fe04 [ 2371.118971][T23176] FAULT_INJECTION: forcing a failure. [ 2371.118971][T23176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.119274][T23176] CPU: 1 UID: 0 PID: 23176 Comm: syz.1.4974 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2371.119318][T23176] Hardware name: ARM-Versatile Express [ 2371.119332][T23176] Call trace: [ 2371.119354][T23176] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2371.119425][T23176] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2371.119435][T23176] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2371.119464][T23176] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2371.119494][T23176] r5:84e7d400 r4:82951710 [ 2371.119502][T23176] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2371.119533][T23176] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2371.119567][T23176] r8:76b13f30 r7:00000000 r6:00000000 r5:dff8df68 r4:00000002 [ 2371.119575][T23176] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2371.119602][T23176] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2371.119633][T23176] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2371.119671][T23176] r10:00000001 r9:8060401c r8:00000002 r7:dff8df68 r6:0000000f r5:76b13f30 [ 2371.119684][T23176] r4:84e7d400 r3:dff8de9f [ 2371.119692][T23176] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2371.119729][T23176] r8:76b13f30 r7:dff8df68 r6:84e7d400 r5:0000000f r4:855036c0 [ 2371.119738][T23176] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2371.119780][T23176] r10:00000003 r9:84e7d400 r8:8020029c r7:00000000 r6:00000000 r5:855036c0 [ 2371.119791][T23176] r4:855036c3 [ 2371.119798][T23176] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2371.119829][T23176] r7:00000003 r6:00000004 r5:76b13f30 r4:0000000f [ 2371.119837][T23176] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2371.119863][T23176] Exception stack(0xdff8dfa8 to 0xdff8dff0) [ 2371.119886][T23176] dfa0: 0000000f 76b13f30 00000004 76b13f30 0000000f 00000000 [ 2371.119905][T23176] dfc0: 0000000f 76b13f30 00000004 00000003 002d0000 00000000 00006364 76b140bc [ 2371.119920][T23176] dfe0: 00000158 76b13ed0 000d7d68 0012fe04 [ 2376.880376][T23225] FAULT_INJECTION: forcing a failure. [ 2376.880376][T23225] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.880694][T23225] CPU: 1 UID: 0 PID: 23225 Comm: syz.1.4987 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2376.880743][T23225] Hardware name: ARM-Versatile Express [ 2376.880757][T23225] Call trace: [ 2376.880779][T23225] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2376.880834][T23225] r7:84e7d400 r6:00000000 r5:60000013 r4:82257c70 [ 2376.880843][T23225] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2376.880869][T23225] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2376.880895][T23225] r5:84e7d400 r4:8291bcc0 [ 2376.880902][T23225] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2376.880931][T23225] [<8095f454>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 2376.880964][T23225] r8:00000000 r7:84e7d400 r6:00000cc0 r5:8291e994 r4:830a8cc0 [ 2376.880972][T23225] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2376.880998][T23225] [<8050a184>] (kmem_cache_alloc_noprof) from [<8055403c>] (alloc_empty_file+0x54/0x13c) [ 2376.881031][T23225] r10:00000142 r9:85cde000 r8:82805c40 r7:84788380 r6:00000000 r5:8291e994 [ 2376.881041][T23225] r4:8245d828 [ 2376.881048][T23225] [<80553fe8>] (alloc_empty_file) from [<805668b0>] (path_openat+0x40/0x11a0) [ 2376.881079][T23225] r8:dfac9e58 r7:dfac9e58 r6:dfac9f20 r5:84e7d400 r4:ffffff9c [ 2376.881087][T23225] [<80566870>] (path_openat) from [<80567abc>] (do_filp_open+0xac/0x148) [ 2376.881119][T23225] r10:00000142 r9:85cde000 r8:00000001 r7:dfac9e58 r6:dfac9f20 r5:84e7d400 [ 2376.881128][T23225] r4:ffffff9c [ 2376.881135][T23225] [<80567a10>] (do_filp_open) from [<8054e87c>] (do_sys_openat2+0x90/0xe0) [ 2376.881167][T23225] r9:84e7d400 r8:8020029c r7:ffffff9c r6:dfac9f58 r5:85cde000 r4:00000005 [ 2376.881175][T23225] [<8054e7ec>] (do_sys_openat2) from [<8054eca4>] (sys_openat+0x98/0xd4) [ 2376.881202][T23225] r7:00000142 r6:0012fee0 r5:20000040 r4:ffffff9c [ 2376.881209][T23225] [<8054ec0c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2376.881231][T23225] Exception stack(0xdfac9fa8 to 0xdfac9ff0) [ 2376.881249][T23225] 9fa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 2376.881265][T23225] 9fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76b140bc [ 2376.881277][T23225] 9fe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2376.881288][T23225] r5:00000000 r4:00000000 [ 2382.818285][T23267] netlink: 'syz.0.4996': attribute type 1 has an invalid length. [ 2382.818526][T23267] netlink: 'syz.0.4996': attribute type 2 has an invalid length. [ 2382.818696][T23267] netlink: 'syz.0.4996': attribute type 2 has an invalid length. [ 2382.818816][T23267] netlink: 'syz.0.4996': attribute type 2 has an invalid length. [ 2382.818909][T23267] netlink: 'syz.0.4996': attribute type 1 has an invalid length. [ 2382.818940][T23267] netlink: 'syz.0.4996': attribute type 2 has an invalid length. [ 2382.818963][T23267] netlink: 'syz.0.4996': attribute type 1 has an invalid length. [ 2390.891915][T23319] FAULT_INJECTION: forcing a failure. [ 2390.891915][T23319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.892161][T23319] CPU: 0 UID: 0 PID: 23319 Comm: syz.1.5009 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2390.892200][T23319] Hardware name: ARM-Versatile Express [ 2390.892213][T23319] Call trace: [ 2390.892235][T23319] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2390.892289][T23319] r7:dfac9e20 r6:00000000 r5:60000013 r4:82257c70 [ 2390.892373][T23319] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2390.892413][T23319] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2390.892473][T23319] r5:838b9800 r4:82951710 [ 2390.892534][T23319] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2390.892584][T23319] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2390.892647][T23319] r8:200048c0 r7:dfac9e20 r6:200002c0 r5:00000000 r4:dfac9f20 [ 2390.892711][T23319] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2390.892845][T23319] [<8095f694>] (should_fail_usercopy) from [<8151bfb0>] (copy_msghdr_from_user+0x50/0x130) [ 2390.892902][T23319] [<8151bf60>] (copy_msghdr_from_user) from [<8151c108>] (___sys_sendmsg+0x78/0xd0) [ 2390.892933][T23319] r8:200048c0 r7:00000000 r6:8481cf00 r5:dfac9f20 r4:dfac9e64 [ 2390.892993][T23319] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2390.893068][T23319] r10:00000128 r9:838b9800 r8:85265600 r7:200048c0 r6:200002c0 r5:85265601 [ 2390.893132][T23319] r4:00000003 [ 2390.893207][T23319] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2390.893308][T23319] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2390.893433][T23319] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2390.893473][T23319] Exception stack(0xdfac9fa8 to 0xdfac9ff0) [ 2390.893535][T23319] 9fa0: 00000000 00000000 00000003 200002c0 200048c0 00000000 [ 2390.893625][T23319] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b140bc [ 2390.893738][T23319] 9fe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2410.885246][T23472] FAULT_INJECTION: forcing a failure. [ 2410.885246][T23472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.885518][T23472] CPU: 1 UID: 0 PID: 23472 Comm: syz.0.5051 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2410.885560][T23472] Hardware name: ARM-Versatile Express [ 2410.885581][T23472] Call trace: [ 2410.885603][T23472] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2410.885781][T23472] r7:00000001 r6:00000000 r5:60000013 r4:82257c70 [ 2410.885839][T23472] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2410.885897][T23472] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2410.885954][T23472] r5:84e7b000 r4:82951710 [ 2410.885978][T23472] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2410.886036][T23472] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2410.886115][T23472] r8:00000000 r7:00000001 r6:8245d848 r5:20000080 r4:20000080 [ 2410.886150][T23472] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2410.886210][T23472] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 2410.886242][T23472] [<80965728>] (strncpy_from_user) from [<80560c80>] (getname_flags.part.0+0x44/0x18c) [ 2410.886281][T23472] r10:000000b6 r9:00000000 r8:00000000 r7:00000001 r6:8245d848 r5:20000080 [ 2410.886292][T23472] r4:85cdc000 [ 2410.886299][T23472] [<80560c3c>] (getname_flags.part.0) from [<80565d4c>] (getname_flags+0x3c/0x50) [ 2410.886332][T23472] r9:00000000 r8:00000000 r7:20000080 r6:ffffff9c r5:00000001 r4:20000080 [ 2410.886340][T23472] [<80565d10>] (getname_flags) from [<80566304>] (user_path_at+0x2c/0x64) [ 2410.886430][T23472] r5:00000001 r4:e0159f54 [ 2410.886439][T23472] [<805662d8>] (user_path_at) from [<8054dfc8>] (do_fchownat+0x68/0xf0) [ 2410.886470][T23472] r6:ffffff9c r5:00000001 r4:00000000 [ 2410.886477][T23472] [<8054df60>] (do_fchownat) from [<80356ef0>] (sys_chown16+0x50/0x58) [ 2410.886509][T23472] r9:84e7b000 r8:8020029c r7:000000b6 r6:0012fee0 r5:00000000 r4:00000000 [ 2410.886517][T23472] [<80356ea0>] (sys_chown16) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2410.886539][T23472] Exception stack(0xe0159fa8 to 0xe0159ff0) [ 2410.886558][T23472] 9fa0: 00000000 00000000 20000080 00000000 00000000 00000000 [ 2410.886615][T23472] 9fc0: 00000000 00000000 0012fee0 000000b6 002d0000 00000000 00006364 76b700bc [ 2410.886631][T23472] 9fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2410.886644][T23472] r4:00000000 [ 2419.527533][T23544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23544 comm=syz.1.5073 [ 2419.618679][T23547] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=23547 comm=syz.1.5074 [ 2422.516410][T23589] 8021q: VLANs not supported on ip6_vti0 [ 2423.843751][T23607] FAULT_INJECTION: forcing a failure. [ 2423.843751][T23607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2423.846517][T23607] CPU: 0 UID: 0 PID: 23607 Comm: syz.1.5089 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2423.846609][T23607] Hardware name: ARM-Versatile Express [ 2423.846624][T23607] Call trace: [ 2423.846646][T23607] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2423.846702][T23607] r7:82c1f980 r6:00000000 r5:60000113 r4:82257c70 [ 2423.846711][T23607] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2423.846737][T23607] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2423.846763][T23607] r5:84484800 r4:82951710 [ 2423.846770][T23607] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2423.846798][T23607] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2423.846828][T23607] r8:84c1ec00 r7:82c1f980 r6:82c1f980 r5:200018c0 r4:00008912 [ 2423.846835][T23607] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2423.846859][T23607] [<8095f694>] (should_fail_usercopy) from [<8158a8f8>] (dev_ifconf+0x34/0x168) [ 2423.846887][T23607] [<8158a8c4>] (dev_ifconf) from [<8151a890>] (sock_ioctl+0x350/0x600) [ 2423.846919][T23607] r9:00000004 r8:84c1ec00 r7:83617680 r6:82c1f980 r5:200018c0 r4:00008912 [ 2423.846928][T23607] [<8151a540>] (sock_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 2423.846958][T23607] r9:00000004 r8:84c1ec00 r7:200018c0 r6:84c1ec01 r5:00000000 r4:00008912 [ 2423.846967][T23607] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2423.846988][T23607] Exception stack(0xeac5dfa8 to 0xeac5dff0) [ 2423.847007][T23607] dfa0: 00000000 00000000 00000004 00008912 200018c0 00000000 [ 2423.847023][T23607] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b140bc [ 2423.847035][T23607] dfe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2423.847051][T23607] r10:00000036 r9:84484800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 2423.847061][T23607] r4:00000000 [ 2429.597623][T23630] FAULT_INJECTION: forcing a failure. [ 2429.597623][T23630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.597879][T23630] CPU: 0 UID: 0 PID: 23630 Comm: syz.1.5094 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2429.597919][T23630] Hardware name: ARM-Versatile Express [ 2429.597932][T23630] Call trace: [ 2429.597952][T23630] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2429.598005][T23630] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2429.598014][T23630] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2429.598040][T23630] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2429.598067][T23630] r5:83a69800 r4:82951710 [ 2429.598074][T23630] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2429.598102][T23630] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2429.598131][T23630] r8:76a8ff30 r7:00000000 r6:00000000 r5:ead71f68 r4:00000002 [ 2429.598139][T23630] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2429.598163][T23630] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2429.598191][T23630] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2429.598226][T23630] r10:00000001 r9:8060401c r8:00000002 r7:ead71f68 r6:0000000f r5:76a8ff30 [ 2429.598236][T23630] r4:83a69800 r3:ead71e9f [ 2429.598244][T23630] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2429.598275][T23630] r8:76a8ff30 r7:ead71f68 r6:83a69800 r5:0000000f r4:84c1e300 [ 2429.598283][T23630] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2429.598313][T23630] r10:00000003 r9:83a69800 r8:8020029c r7:00000000 r6:00000000 r5:84c1e300 [ 2429.598322][T23630] r4:84c1e303 [ 2429.598329][T23630] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2429.598355][T23630] r7:00000003 r6:00000005 r5:76a8ff30 r4:0000000f [ 2429.598363][T23630] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2429.598385][T23630] Exception stack(0xead71fa8 to 0xead71ff0) [ 2429.598404][T23630] 1fa0: 0000000f 76a8ff30 00000005 76a8ff30 0000000f 00000000 [ 2429.598421][T23630] 1fc0: 0000000f 76a8ff30 00000005 00000003 002d0000 00000000 00006364 76a900bc [ 2429.598434][T23630] 1fe0: 00000158 76a8fed0 000d7d68 0012fe04 [ 2436.045515][T23666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=23666 comm=syz.1.5108 [ 2440.974239][T23691] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23691 comm=syz.1.5115 [ 2440.979515][T23691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=23691 comm=syz.1.5115 [ 2450.486515][ T31] audit: type=1400 audit(2450.447:370): avc: denied { setattr } for pid=23732 comm="syz.1.5127" name="NETLINK" dev="sockfs" ino=55172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2453.009247][ T31] audit: type=1400 audit(2452.977:371): avc: denied { listen } for pid=23788 comm="syz.0.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2453.223165][T23802] FAULT_INJECTION: forcing a failure. [ 2453.223165][T23802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2453.223422][T23802] CPU: 1 UID: 0 PID: 23802 Comm: syz.1.5133 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2453.223458][T23802] Hardware name: ARM-Versatile Express [ 2453.223470][T23802] Call trace: [ 2453.223490][T23802] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2453.223579][T23802] r7:00000000 r6:00000000 r5:60000113 r4:82257c70 [ 2453.223594][T23802] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2453.223621][T23802] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2453.223672][T23802] r5:83a6bc00 r4:8291bd14 [ 2453.223692][T23802] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2453.223725][T23802] [<8095f454>] (should_fail_ex) from [<80525834>] (should_fail_alloc_page+0x68/0x74) [ 2453.223798][T23802] r8:00000001 r7:00000000 r6:00000000 r5:00440dc2 r4:dfbedc58 [ 2453.223809][T23802] [<805257cc>] (should_fail_alloc_page) from [<804f4530>] (prepare_alloc_pages.constprop.0+0x94/0x1b4) [ 2453.223856][T23802] [<804f449c>] (prepare_alloc_pages.constprop.0) from [<804fc474>] (__alloc_frozen_pages_noprof+0xb8/0x1138) [ 2453.223895][T23802] r10:dfbede70 r9:00000000 r8:00440dc2 r7:00000000 r6:20001000 r5:84764800 [ 2453.223906][T23802] r4:00000000 r3:dfbedc58 [ 2453.223931][T23802] [<804fc3bc>] (__alloc_frozen_pages_noprof) from [<804fd504>] (__alloc_pages_noprof+0x10/0x60) [ 2453.223971][T23802] r10:dfbede70 r9:8632f280 r8:84dba340 r7:00000000 r6:20001000 r5:84764800 [ 2453.223980][T23802] r4:85ed0f00 [ 2453.223992][T23802] [<804fd4f4>] (__alloc_pages_noprof) from [<804c8248>] (pte_alloc_one+0x24/0xfc) [ 2453.224033][T23802] [<804c8224>] (pte_alloc_one) from [<804c99e8>] (__pte_alloc+0x2c/0x104) [ 2453.224066][T23802] r5:84764800 r4:85ed0f00 [ 2453.224075][T23802] [<804c99bc>] (__pte_alloc) from [<804cf550>] (handle_mm_fault+0xfc8/0x14e4) [ 2453.224106][T23802] r5:83a6bc00 r4:00000215 [ 2453.224113][T23802] [<804ce588>] (handle_mm_fault) from [<802341f4>] (do_page_fault+0xec/0x49c) [ 2453.224149][T23802] r10:00000002 r9:85ed0f00 r8:00000215 r7:20001000 r6:00000a06 r5:20001a40 [ 2453.224158][T23802] r4:dfbede70 [ 2453.224166][T23802] [<80234108>] (do_page_fault) from [<80234724>] (do_translation_fault+0xfc/0x12c) [ 2453.224200][T23802] r10:83a6bc00 r9:83a6bc00 r8:80234628 r7:dfbede70 r6:20001a40 r5:00000a06 [ 2453.224210][T23802] r4:8281d160 [ 2453.224218][T23802] [<80234628>] (do_translation_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 2453.224271][T23802] r9:83a6bc00 r8:80234628 r7:dfbede70 r6:20001a40 r5:00000a06 r4:8281d160 [ 2453.224281][T23802] [<80234754>] (do_DataAbort) from [<80200b0c>] (__dabt_svc+0x4c/0x80) [ 2453.224306][T23802] Exception stack(0xdfbede70 to 0xdfbedeb8) [ 2453.224326][T23802] de60: 20001a40 7effffff 00000000 b5003500 [ 2453.224345][T23802] de80: b5403587 20001a40 85011b00 83618f00 847280c0 00000003 83a6bc00 dfbedf14 [ 2453.224390][T23802] dea0: a1001a43 dfbedec0 8151a874 81a20548 80000013 ffffffff [ 2453.224410][T23802] r8:847280c0 r7:dfbedea4 r6:ffffffff r5:80000013 r4:81a20548 [ 2453.224418][T23802] [<8151a540>] (sock_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 2453.224456][T23802] r9:00000003 r8:847280c0 r7:20001a40 r6:847280c1 r5:00000000 r4:00008904 [ 2453.224464][T23802] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2453.224502][T23802] Exception stack(0xdfbedfa8 to 0xdfbedff0) [ 2453.224533][T23802] dfa0: 00000000 00000000 00000003 00008904 20001a40 00000000 [ 2453.224560][T23802] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b140bc [ 2453.224592][T23802] dfe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2453.224629][T23802] r10:00000036 r9:83a6bc00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 2453.224640][T23802] r4:00000000 [ 2460.689155][T23865] FAULT_INJECTION: forcing a failure. [ 2460.689155][T23865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.689462][T23865] CPU: 0 UID: 0 PID: 23865 Comm: syz.1.5158 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2460.689505][T23865] Hardware name: ARM-Versatile Express [ 2460.689518][T23865] Call trace: [ 2460.689539][T23865] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2460.689594][T23865] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2460.689603][T23865] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2460.689628][T23865] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2460.689656][T23865] r5:84484800 r4:82951710 [ 2460.689663][T23865] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2460.689691][T23865] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2460.689720][T23865] r8:76b13f30 r7:00000000 r6:00000000 r5:dfe45f68 r4:00000002 [ 2460.689728][T23865] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2460.689753][T23865] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2460.689782][T23865] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2460.689818][T23865] r10:00000001 r9:8060401c r8:00000002 r7:dfe45f68 r6:0000000f r5:76b13f30 [ 2460.689839][T23865] r4:84484800 r3:dfe45e9f [ 2460.689847][T23865] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2460.689882][T23865] r8:76b13f30 r7:dfe45f68 r6:84484800 r5:0000000f r4:85503780 [ 2460.689890][T23865] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2460.689922][T23865] r10:00000003 r9:84484800 r8:8020029c r7:00000000 r6:00000000 r5:85503780 [ 2460.689931][T23865] r4:85503783 [ 2460.689939][T23865] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2460.689967][T23865] r7:00000003 r6:00000004 r5:76b13f30 r4:0000000f [ 2460.689975][T23865] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2460.689998][T23865] Exception stack(0xdfe45fa8 to 0xdfe45ff0) [ 2460.690019][T23865] 5fa0: 0000000f 76b13f30 00000004 76b13f30 0000000f 00000000 [ 2460.690038][T23865] 5fc0: 0000000f 76b13f30 00000004 00000003 002d0000 00000000 00006364 76b140bc [ 2460.690051][T23865] 5fe0: 00000158 76b13ed0 000d7d68 0012fe04 [ 2461.049231][T23881] FAULT_INJECTION: forcing a failure. [ 2461.049231][T23881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2461.051467][T23881] CPU: 0 UID: 0 PID: 23881 Comm: syz.1.5162 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2461.051530][T23881] Hardware name: ARM-Versatile Express [ 2461.051543][T23881] Call trace: [ 2461.051564][T23881] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2461.051620][T23881] r7:0000000a r6:00000000 r5:60000113 r4:82257c70 [ 2461.051629][T23881] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2461.051655][T23881] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2461.051682][T23881] r5:83a6bc00 r4:82951710 [ 2461.051689][T23881] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2461.051718][T23881] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2461.051747][T23881] r8:20000140 r7:0000000a r6:00001000 r5:00000000 r4:20000000 [ 2461.051755][T23881] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2461.051778][T23881] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 2461.051804][T23881] [<80965728>] (strncpy_from_user) from [<8058a7ec>] (setxattr_copy+0x2c/0x90) [ 2461.051846][T23881] r10:000000e4 r9:83a6bc00 r8:20000140 r7:0000000a r6:00001000 r5:00000000 [ 2461.051857][T23881] r4:dff39e48 [ 2461.051864][T23881] [<8058a7c0>] (setxattr_copy) from [<8058aa24>] (path_setxattrat+0x7c/0x17c) [ 2461.051889][T23881] r5:00000000 r4:20000000 [ 2461.051896][T23881] [<8058a9a8>] (path_setxattrat) from [<8058ad24>] (sys_fsetxattr+0x30/0x38) [ 2461.051923][T23881] r8:8020029c r7:000000e4 r6:0012fee0 r5:00000000 r4:00000001 [ 2461.051932][T23881] [<8058acf4>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2461.051954][T23881] Exception stack(0xdff39fa8 to 0xdff39ff0) [ 2461.051972][T23881] 9fa0: 00000001 00000000 0000000a 20000000 20000140 00000014 [ 2461.051988][T23881] 9fc0: 00000001 00000000 0012fee0 000000e4 002d0000 00000000 00006364 76b140bc [ 2461.052000][T23881] 9fe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2461.524871][ T31] audit: type=1400 audit(2461.487:372): avc: denied { setcurrent } for pid=23895 comm="syz.1.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2465.494440][T23968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=23968 comm=syz.1.5176 [ 2465.507793][ T31] audit: type=1400 audit(2465.477:373): avc: denied { associate } for pid=23962 comm="syz.1.5176" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2470.196643][T23990] FAULT_INJECTION: forcing a failure. [ 2470.196643][T23990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2470.197437][T23990] CPU: 0 UID: 0 PID: 23990 Comm: syz.0.5185 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2470.197497][T23990] Hardware name: ARM-Versatile Express [ 2470.197510][T23990] Call trace: [ 2470.197533][T23990] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2470.197603][T23990] r7:e01b9e20 r6:00000000 r5:60000013 r4:82257c70 [ 2470.197612][T23990] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2470.197638][T23990] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2470.197669][T23990] r5:84486000 r4:82951710 [ 2470.197676][T23990] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2470.197704][T23990] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2470.197733][T23990] r8:00000010 r7:e01b9e20 r6:20000400 r5:00000000 r4:e01b9f20 [ 2470.197741][T23990] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2470.197764][T23990] [<8095f694>] (should_fail_usercopy) from [<8151bfb0>] (copy_msghdr_from_user+0x50/0x130) [ 2470.197792][T23990] [<8151bf60>] (copy_msghdr_from_user) from [<8151c108>] (___sys_sendmsg+0x78/0xd0) [ 2470.197820][T23990] r8:00000010 r7:00000000 r6:83617900 r5:e01b9f20 r4:e01b9e64 [ 2470.197828][T23990] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2470.197858][T23990] r10:00000128 r9:84486000 r8:847d9780 r7:00000010 r6:20000400 r5:847d9781 [ 2470.197867][T23990] r4:00000003 [ 2470.197874][T23990] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2470.197902][T23990] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2470.197910][T23990] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2470.197932][T23990] Exception stack(0xe01b9fa8 to 0xe01b9ff0) [ 2470.197949][T23990] 9fa0: 00000000 00000000 00000003 20000400 00000010 00000000 [ 2470.197965][T23990] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b700bc [ 2470.197977][T23990] 9fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2479.686887][T24041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24041 comm=syz.1.5194 [ 2479.996673][T17214] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2480.151243][T17214] usb 2-1: not running at top speed; connect to a high speed hub [ 2480.154946][T17214] usb 2-1: config 2 has an invalid interface number: 213 but max is 1 [ 2480.155207][T17214] usb 2-1: config 2 has an invalid interface association descriptor of length 4, skipping [ 2480.155271][T17214] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 2480.155314][T17214] usb 2-1: config 2 has no interface number 0 [ 2480.155392][T17214] usb 2-1: config 2 interface 213 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2480.155457][T17214] usb 2-1: config 2 interface 213 has no altsetting 0 [ 2480.167009][T17214] usb 2-1: New USB device found, idVendor=1e0e, idProduct=ce16, bcdDevice=18.ca [ 2480.167218][T17214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.167435][T17214] usb 2-1: Product: syz [ 2480.167474][T17214] usb 2-1: Manufacturer: syz [ 2480.167504][T17214] usb 2-1: SerialNumber: syz [ 2480.607464][T17214] option 2-1:2.213: GSM modem (1-port) converter detected [ 2480.613650][T17214] usb 2-1: USB disconnect, device number 31 [ 2480.621063][T17214] option 2-1:2.213: device disconnected [ 2483.477029][T24083] FAULT_INJECTION: forcing a failure. [ 2483.477029][T24083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2483.477322][T24083] CPU: 1 UID: 0 PID: 24083 Comm: syz.1.5202 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2483.477365][T24083] Hardware name: ARM-Versatile Express [ 2483.477378][T24083] Call trace: [ 2483.477401][T24083] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2483.477561][T24083] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2483.477589][T24083] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2483.477686][T24083] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2483.477737][T24083] r5:84e7c800 r4:82951710 [ 2483.477763][T24083] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2483.477845][T24083] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2483.477879][T24083] r8:76b13f30 r7:00000000 r6:00000000 r5:e07c9f68 r4:00000002 [ 2483.477925][T24083] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2483.477953][T24083] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2483.478004][T24083] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2483.478084][T24083] r10:00000001 r9:8060401c r8:00000002 r7:e07c9f68 r6:0000000f r5:76b13f30 [ 2483.478133][T24083] r4:84e7c800 r3:e07c9e9f [ 2483.478230][T24083] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2483.478327][T24083] r8:76b13f30 r7:e07c9f68 r6:84e7c800 r5:0000000f r4:844ea000 [ 2483.478360][T24083] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2483.478446][T24083] r10:00000003 r9:84e7c800 r8:8020029c r7:00000000 r6:00000000 r5:844ea000 [ 2483.478495][T24083] r4:844ea003 [ 2483.478592][T24083] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2483.478694][T24083] r7:00000003 r6:00000005 r5:76b13f30 r4:0000000f [ 2483.478704][T24083] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2483.478729][T24083] Exception stack(0xe07c9fa8 to 0xe07c9ff0) [ 2483.478763][T24083] 9fa0: 0000000f 76b13f30 00000005 76b13f30 0000000f 00000000 [ 2483.478803][T24083] 9fc0: 0000000f 76b13f30 00000005 00000003 002d0000 00000000 00006364 76b140bc [ 2483.478851][T24083] 9fe0: 00000158 76b13ed0 000d7d68 0012fe04 [ 2485.268501][T24088] fuse: Unknown parameter 'grou00000000000000000000' [ 2488.280026][T24106] fuse: Unknown parameter 'grou00000000000000000000' [ 2489.377569][T24111] FAULT_INJECTION: forcing a failure. [ 2489.377569][T24111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2489.377896][T24111] CPU: 1 UID: 0 PID: 24111 Comm: syz.0.5210 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2489.377932][T24111] Hardware name: ARM-Versatile Express [ 2489.377947][T24111] Call trace: [ 2489.377969][T24111] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2489.378070][T24111] r7:20000240 r6:00000000 r5:60000113 r4:82257c70 [ 2489.378084][T24111] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2489.378115][T24111] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2489.378144][T24111] r5:84e78c00 r4:82951710 [ 2489.378151][T24111] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2489.378181][T24111] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2489.378211][T24111] r8:00000000 r7:20000240 r6:85f5a3a3 r5:00000000 r4:00000000 [ 2489.378220][T24111] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2489.378245][T24111] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 2489.378274][T24111] [<808aeb30>] (_copy_from_iter) from [<818d94e8>] (isotp_sendmsg+0x254/0x820) [ 2489.378314][T24111] r10:e07c9f20 r9:85f5a3a3 r8:e07c9f30 r7:00000014 r6:85f58000 r5:85f5a000 [ 2489.378331][T24111] r4:00000000 [ 2489.378340][T24111] [<818d9294>] (isotp_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2489.378403][T24111] r10:00000000 r9:e07c9dc4 r8:e07c9dc4 r7:00000000 r6:8489f680 r5:e07c9f20 [ 2489.378415][T24111] r4:00000000 [ 2489.378423][T24111] [<81519ad8>] (__sock_sendmsg) from [<8151a38c>] (____sys_sendmsg+0x298/0x2cc) [ 2489.378451][T24111] r7:00000000 r6:8489f680 r5:00000001 r4:e07c9f20 [ 2489.378459][T24111] [<8151a0f4>] (____sys_sendmsg) from [<8151c12c>] (___sys_sendmsg+0x9c/0xd0) [ 2489.378491][T24111] r10:e07c9e24 r9:200002c0 r8:00000001 r7:00000000 r6:8489f680 r5:e07c9f20 [ 2489.378514][T24111] r4:00000000 [ 2489.378524][T24111] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2489.378556][T24111] r10:00000128 r9:84e78c00 r8:8631b0c0 r7:00000001 r6:200002c0 r5:8631b0c1 [ 2489.378582][T24111] r4:00000003 [ 2489.378607][T24111] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2489.378654][T24111] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2489.378663][T24111] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2489.378688][T24111] Exception stack(0xe07c9fa8 to 0xe07c9ff0) [ 2489.378708][T24111] 9fa0: 00000000 00000000 00000003 200002c0 00000001 00000000 [ 2489.378726][T24111] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b4f0bc [ 2489.378739][T24111] 9fe0: 76b4eec0 76b4eeb0 0001939c 00131f30 [ 2494.093382][T24136] FAULT_INJECTION: forcing a failure. [ 2494.093382][T24136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2494.093689][T24136] CPU: 1 UID: 0 PID: 24136 Comm: syz.0.5217 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2494.093734][T24136] Hardware name: ARM-Versatile Express [ 2494.093748][T24136] Call trace: [ 2494.093771][T24136] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2494.093830][T24136] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2494.093840][T24136] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2494.093868][T24136] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2494.093897][T24136] r5:84c58c00 r4:82951710 [ 2494.093905][T24136] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2494.093936][T24136] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2494.094025][T24136] r8:76b6ff30 r7:00000000 r6:00000000 r5:eaa69f68 r4:00000002 [ 2494.094035][T24136] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2494.094074][T24136] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2494.094138][T24136] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2494.094230][T24136] r10:00000001 r9:8060401c r8:00000002 r7:eaa69f68 r6:0000000f r5:76b6ff30 [ 2494.094289][T24136] r4:84c58c00 r3:eaa69e9f [ 2494.094323][T24136] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2494.094396][T24136] r8:76b6ff30 r7:eaa69f68 r6:84c58c00 r5:0000000f r4:8631b600 [ 2494.094406][T24136] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2494.094451][T24136] r10:00000003 r9:84c58c00 r8:8020029c r7:00000000 r6:00000000 r5:8631b600 [ 2494.094531][T24136] r4:8631b603 [ 2494.094550][T24136] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2494.094652][T24136] r7:00000003 r6:00000004 r5:76b6ff30 r4:0000000f [ 2494.094674][T24136] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2494.094741][T24136] Exception stack(0xeaa69fa8 to 0xeaa69ff0) [ 2494.094874][T24136] 9fa0: 0000000f 76b6ff30 00000004 76b6ff30 0000000f 00000000 [ 2494.094897][T24136] 9fc0: 0000000f 76b6ff30 00000004 00000003 002d0000 00000000 00006364 76b700bc [ 2494.094927][T24136] 9fe0: 00000158 76b6fed0 000d7d68 0012fe04 [ 2494.418801][ T31] audit: type=1400 audit(2494.387:374): avc: denied { accept } for pid=24139 comm="syz.0.5219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2509.956979][T24239] FAULT_INJECTION: forcing a failure. [ 2509.956979][T24239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.957926][T24239] CPU: 0 UID: 0 PID: 24239 Comm: syz.0.5245 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2509.957992][T24239] Hardware name: ARM-Versatile Express [ 2509.958005][T24239] Call trace: [ 2509.958028][T24239] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2509.958087][T24239] r7:20000000 r6:00000000 r5:60000013 r4:82257c70 [ 2509.958097][T24239] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2509.958126][T24239] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2509.958157][T24239] r5:84e78c00 r4:82951710 [ 2509.958165][T24239] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2509.958197][T24239] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2509.958231][T24239] r8:00000000 r7:20000000 r6:857423a3 r5:00000000 r4:00000000 [ 2509.958239][T24239] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2509.958267][T24239] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 2509.958297][T24239] [<808aeb30>] (_copy_from_iter) from [<818d94e8>] (isotp_sendmsg+0x254/0x820) [ 2509.958341][T24239] r10:df9d1e68 r9:857423a3 r8:df9d1e78 r7:00000018 r6:85740000 r5:85742000 [ 2509.958352][T24239] r4:00000000 [ 2509.958359][T24239] [<818d9294>] (isotp_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2509.958399][T24239] r10:81e4e040 r9:20000000 r8:00000000 r7:84812500 r6:84812500 r5:df9d1e68 [ 2509.958410][T24239] r4:00000000 [ 2509.958418][T24239] [<81519ad8>] (__sock_sendmsg) from [<81519bf0>] (sock_write_iter+0xa0/0xfc) [ 2509.958448][T24239] r7:84812500 r6:85265000 r5:df9d1f08 r4:df9d1ef0 [ 2509.958456][T24239] [<81519b50>] (sock_write_iter) from [<80552440>] (vfs_write+0x3a4/0x448) [ 2509.958490][T24239] r7:84e78c00 r6:00000018 r5:85265000 r4:00002004 [ 2509.958499][T24239] [<8055209c>] (vfs_write) from [<805526ac>] (ksys_write+0xd0/0xe4) [ 2509.958534][T24239] r10:00000004 r9:84e78c00 r8:8020029c r7:00000018 r6:20000000 r5:85265000 [ 2509.958544][T24239] r4:85265001 [ 2509.958552][T24239] [<805525dc>] (ksys_write) from [<805526d0>] (sys_write+0x10/0x14) [ 2509.958620][T24239] r7:00000004 r6:0012fee0 r5:00000000 r4:00000000 [ 2509.958629][T24239] [<805526c0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2509.958654][T24239] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 2509.958674][T24239] 1fa0: 00000000 00000000 00000003 20000000 00000018 00000000 [ 2509.958693][T24239] 1fc0: 00000000 00000000 0012fee0 00000004 002d0000 00000000 00006364 76b700bc [ 2509.958708][T24239] 1fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2511.241111][T24256] fuse: Bad value for 'group_id' [ 2511.241835][T24256] fuse: Bad value for 'group_id' [ 2519.074200][T24300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24300 comm=syz.0.5261 [ 2519.075119][T24300] FAULT_INJECTION: forcing a failure. [ 2519.075119][T24300] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.076692][T24300] CPU: 0 UID: 0 PID: 24300 Comm: syz.0.5261 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2519.076797][T24300] Hardware name: ARM-Versatile Express [ 2519.076815][T24300] Call trace: [ 2519.076863][T24300] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2519.076918][T24300] r7:83a50000 r6:00000000 r5:60000013 r4:82257c70 [ 2519.076927][T24300] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2519.076953][T24300] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2519.076980][T24300] r5:83a50000 r4:8291bcc0 [ 2519.076987][T24300] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2519.077016][T24300] [<8095f454>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 2519.077050][T24300] r8:00000000 r7:83a50000 r6:00000820 r5:856a3d80 r4:830ad9c0 [ 2519.077058][T24300] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2519.077084][T24300] [<8050a184>] (kmem_cache_alloc_noprof) from [<8152d4ac>] (skb_clone+0x60/0x1c8) [ 2519.077119][T24300] r10:000001a2 r9:8503cf40 r8:83d33c00 r7:856a3d80 r6:842c5ec0 r5:856a3d80 [ 2519.077129][T24300] r4:00000820 [ 2519.077137][T24300] [<8152d44c>] (skb_clone) from [<81641e78>] (__netlink_deliver_tap+0x1f4/0x28c) [ 2519.077166][T24300] r5:00000014 r4:842c5800 [ 2519.077174][T24300] [<81641c84>] (__netlink_deliver_tap) from [<81645070>] (netlink_unicast+0x280/0x29c) [ 2519.077206][T24300] r10:00000000 r9:00000000 r8:85010d80 r7:856a3d80 r6:8503cf40 r5:00000014 [ 2519.077215][T24300] r4:83d33c00 [ 2519.077222][T24300] [<81644df0>] (netlink_unicast) from [<81645258>] (netlink_sendmsg+0x1cc/0x444) [ 2519.077254][T24300] r9:00000000 r8:00000000 r7:859bb800 r6:00000014 r5:856a3d80 r4:dfa9df20 [ 2519.077262][T24300] [<8164508c>] (netlink_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2519.077294][T24300] r10:00000000 r9:dfa9ddc4 r8:dfa9ddc4 r7:00000000 r6:84813680 r5:dfa9df20 [ 2519.077321][T24300] r4:00000000 [ 2519.077330][T24300] [<81519ad8>] (__sock_sendmsg) from [<8151a38c>] (____sys_sendmsg+0x298/0x2cc) [ 2519.077359][T24300] r7:00000000 r6:84813680 r5:20000080 r4:dfa9df20 [ 2519.077366][T24300] [<8151a0f4>] (____sys_sendmsg) from [<8151c12c>] (___sys_sendmsg+0x9c/0xd0) [ 2519.077397][T24300] r10:dfa9de24 r9:20000240 r8:20000080 r7:00000000 r6:84813680 r5:dfa9df20 [ 2519.077406][T24300] r4:00000000 [ 2519.077413][T24300] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2519.077444][T24300] r10:00000128 r9:83a50000 r8:85265240 r7:20000080 r6:20000240 r5:85265241 [ 2519.077453][T24300] r4:00000003 [ 2519.077463][T24300] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2519.077516][T24300] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2519.077532][T24300] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2519.077620][T24300] Exception stack(0xdfa9dfa8 to 0xdfa9dff0) [ 2519.077663][T24300] dfa0: 00000000 00000000 00000003 20000240 20000080 00000000 [ 2519.077687][T24300] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b700bc [ 2519.077700][T24300] dfe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2520.160010][T24304] fuse: Bad value for 'fd' [ 2520.591910][T24318] fuse: Bad value for 'fd' [ 2521.833421][T24327] FAULT_INJECTION: forcing a failure. [ 2521.833421][T24327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2521.834743][T24327] CPU: 0 UID: 0 PID: 24327 Comm: syz.0.5271 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2521.834790][T24327] Hardware name: ARM-Versatile Express [ 2521.834804][T24327] Call trace: [ 2521.834825][T24327] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2521.834880][T24327] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2521.834891][T24327] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2521.834918][T24327] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2521.834945][T24327] r5:84e7c800 r4:82951710 [ 2521.834953][T24327] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2521.834983][T24327] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2521.835013][T24327] r8:76b6ff30 r7:00000000 r6:00000000 r5:df9e9f68 r4:00000002 [ 2521.835021][T24327] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2521.835045][T24327] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2521.835072][T24327] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2521.835106][T24327] r10:00000001 r9:8060401c r8:00000002 r7:df9e9f68 r6:0000000f r5:76b6ff30 [ 2521.835118][T24327] r4:84e7c800 r3:df9e9e9f [ 2521.835125][T24327] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2521.835156][T24327] r8:76b6ff30 r7:df9e9f68 r6:84e7c800 r5:0000000f r4:85265000 [ 2521.835165][T24327] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2521.835194][T24327] r10:00000003 r9:84e7c800 r8:8020029c r7:00000000 r6:00000000 r5:85265000 [ 2521.835204][T24327] r4:85265003 [ 2521.835210][T24327] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2521.835237][T24327] r7:00000003 r6:00000004 r5:76b6ff30 r4:0000000f [ 2521.835244][T24327] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2521.835303][T24327] Exception stack(0xdf9e9fa8 to 0xdf9e9ff0) [ 2521.835324][T24327] 9fa0: 0000000f 76b6ff30 00000004 76b6ff30 0000000f 00000000 [ 2521.835340][T24327] 9fc0: 0000000f 76b6ff30 00000004 00000003 002d0000 00000000 00006364 76b700bc [ 2521.835352][T24327] 9fe0: 00000158 76b6fed0 000d7d68 0012fe04 [ 2522.057090][T24337] fuse: Bad value for 'fd' [ 2523.303616][T24370] fuse: Invalid rootmode [ 2524.559393][T24382] FAULT_INJECTION: forcing a failure. [ 2524.559393][T24382] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.560990][T24382] CPU: 1 UID: 0 PID: 24382 Comm: syz.1.5283 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2524.561078][T24382] Hardware name: ARM-Versatile Express [ 2524.561097][T24382] Call trace: [ 2524.561126][T24382] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2524.561207][T24382] r7:00000d40 r6:00000000 r5:60000013 r4:82257c70 [ 2524.561222][T24382] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2524.561270][T24382] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2524.561322][T24382] r5:84e78000 r4:8291bcc0 [ 2524.561335][T24382] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2524.561387][T24382] [<8095f454>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 2524.561449][T24382] r8:84e78000 r7:00000d40 r6:8477d268 r5:00000019 r4:83001240 [ 2524.561464][T24382] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 2524.561511][T24382] [<8050a4b8>] (__kmalloc_noprof) from [<807bc09c>] (tomoyo_encode2+0x64/0xf0) [ 2524.561575][T24382] r10:00000fff r9:8309fc00 r8:00000000 r7:837fb000 r6:8477d268 r5:84ee6ffd [ 2524.561601][T24382] r4:84ee6fef [ 2524.561614][T24382] [<807bc038>] (tomoyo_encode2) from [<807bc14c>] (tomoyo_encode+0x24/0x30) [ 2524.561674][T24382] r9:8309fc00 r8:00000000 r7:837fb000 r6:8477d268 r5:00001000 r4:84ee6ff0 [ 2524.561688][T24382] [<807bc128>] (tomoyo_encode) from [<807bc1d8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2524.561739][T24382] r5:00001000 r4:84ee6000 [ 2524.561753][T24382] [<807bc158>] (tomoyo_realpath_from_path) from [<807b82d8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2524.561815][T24382] r10:84e78000 r9:00000000 r8:8477d240 r7:00005609 r6:00000004 r5:81cd56c4 [ 2524.561836][T24382] r4:8477d268 r3:826c0240 [ 2524.561848][T24382] [<807b820c>] (tomoyo_path_number_perm) from [<807bcbb8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2524.561910][T24382] r9:00000004 r8:8477d240 r7:00000000 r6:00000000 r5:00005609 r4:8477d240 [ 2524.561925][T24382] [<807bcb9c>] (tomoyo_file_ioctl) from [<8076a5f4>] (security_file_ioctl+0x64/0x1e4) [ 2524.561975][T24382] [<8076a590>] (security_file_ioctl) from [<8056b444>] (sys_ioctl+0x4c/0xd84) [ 2524.562029][T24382] r7:00000000 r6:8477d241 r5:00000000 r4:00005609 [ 2524.562043][T24382] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2524.562083][T24382] Exception stack(0xdfccdfa8 to 0xdfccdff0) [ 2524.562114][T24382] dfa0: 00000000 00000000 00000004 00005609 00000000 00000000 [ 2524.562144][T24382] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76af30bc [ 2524.562168][T24382] dfe0: 76af2ec0 76af2eb0 0001939c 00131f30 [ 2524.562198][T24382] r10:00000036 r9:84e78000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 2524.562215][T24382] r4:00000000 [ 2524.563042][T24382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2526.723270][T24389] fuse: Invalid rootmode [ 2527.928238][T24404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24404 comm=syz.1.5288 [ 2527.931192][ T31] audit: type=1400 audit(2527.897:375): avc: granted { setsecparam } for pid=24401 comm="syz.1.5288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2529.947890][T24408] fuse: Invalid rootmode [ 2530.622607][T24416] FAULT_INJECTION: forcing a failure. [ 2530.622607][T24416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2530.624525][T24416] CPU: 1 UID: 0 PID: 24416 Comm: syz.1.5293 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2530.624569][T24416] Hardware name: ARM-Versatile Express [ 2530.624595][T24416] Call trace: [ 2530.624616][T24416] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2530.624683][T24416] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2530.624693][T24416] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2530.624721][T24416] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2530.624752][T24416] r5:841ab000 r4:82951710 [ 2530.624760][T24416] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2530.624791][T24416] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2530.624825][T24416] r8:dfccdeb8 r7:00000000 r6:00000001 r5:76b13f30 r4:00000001 [ 2530.624847][T24416] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2530.624877][T24416] [<8095f694>] (should_fail_usercopy) from [<808b7810>] (kstrtouint_from_user+0x54/0x13c) [ 2530.624928][T24416] [<808b77bc>] (kstrtouint_from_user) from [<80605514>] (proc_fail_nth_write+0x40/0xe8) [ 2530.624969][T24416] r8:dfccdf68 r7:841ab000 r6:00000001 r5:8477d540 r4:00000001 [ 2530.624978][T24416] [<806054d4>] (proc_fail_nth_write) from [<80552148>] (vfs_write+0xac/0x448) [ 2530.625010][T24416] r5:8477d540 r4:806054d4 [ 2530.625018][T24416] [<8055209c>] (vfs_write) from [<80552650>] (ksys_write+0x74/0xe4) [ 2530.625079][T24416] r10:00000004 r9:841ab000 r8:8020029c r7:00000000 r6:00000002 r5:8477d540 [ 2530.625091][T24416] r4:8477d543 [ 2530.625099][T24416] [<805525dc>] (ksys_write) from [<805526d0>] (sys_write+0x10/0x14) [ 2530.625130][T24416] r7:00000004 r6:00000004 r5:76b13f30 r4:00000001 [ 2530.625139][T24416] [<805526c0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2530.625164][T24416] Exception stack(0xdfccdfa8 to 0xdfccdff0) [ 2530.625186][T24416] dfa0: 00000001 76b13f30 00000004 76b13f30 00000001 00000000 [ 2530.625204][T24416] dfc0: 00000001 76b13f30 00000004 00000004 002d0000 00000000 00006364 76b140bc [ 2530.625219][T24416] dfe0: 00000158 76b13ed0 000d7d68 0012fecc [ 2531.085983][T18055] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2531.256517][T18055] usb 1-1: Using ep0 maxpacket: 32 [ 2531.288922][T18055] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 2531.299119][T18055] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2531.299622][T18055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.300080][T18055] usb 1-1: Product: syz [ 2531.300412][T18055] usb 1-1: Manufacturer: syz [ 2531.300763][T18055] usb 1-1: SerialNumber: syz [ 2531.303249][T18055] usb 1-1: config 0 descriptor?? [ 2531.316227][T24420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2531.319716][T18055] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2531.673873][T24443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.727415][T24443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.750454][T18055] usb 1-1: USB disconnect, device number 31 [ 2532.108901][T24465] fuse: Bad value for 'rootmode' [ 2533.975223][T24473] FAULT_INJECTION: forcing a failure. [ 2533.975223][T24473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.975507][T24473] CPU: 1 UID: 0 PID: 24473 Comm: syz.1.5297 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2533.975550][T24473] Hardware name: ARM-Versatile Express [ 2533.975563][T24473] Call trace: [ 2533.975592][T24473] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2533.975665][T24473] r7:ffffff9c r6:00000000 r5:60000013 r4:82257c70 [ 2533.975740][T24473] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2533.975798][T24473] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2533.975841][T24473] r5:83941800 r4:82951710 [ 2533.975877][T24473] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2533.975911][T24473] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2533.975982][T24473] r8:00000000 r7:ffffff9c r6:00000000 r5:20000080 r4:20000140 [ 2533.976020][T24473] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2533.976073][T24473] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 2533.976103][T24473] [<80965728>] (strncpy_from_user) from [<8058a7ec>] (setxattr_copy+0x2c/0x90) [ 2533.976153][T24473] r10:000000e2 r9:83941800 r8:00000000 r7:ffffff9c r6:00000000 r5:20000080 [ 2533.976164][T24473] r4:dff7de40 [ 2533.976172][T24473] [<8058a7c0>] (setxattr_copy) from [<8058aa24>] (path_setxattrat+0x7c/0x17c) [ 2533.976197][T24473] r5:20000080 r4:20000140 [ 2533.976205][T24473] [<8058a9a8>] (path_setxattrat) from [<8058acb0>] (sys_setxattr+0x34/0x3c) [ 2533.976233][T24473] r8:8020029c r7:000000e2 r6:0012fee0 r5:00000000 r4:20000140 [ 2533.976241][T24473] [<8058ac7c>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2533.976263][T24473] Exception stack(0xdff7dfa8 to 0xdff7dff0) [ 2533.976306][T24473] dfa0: 00000001 00000000 20000080 20000140 00000000 00000000 [ 2533.976350][T24473] dfc0: 00000001 00000000 0012fee0 000000e2 002d0000 00000000 00006364 76af30bc [ 2533.976366][T24473] dfe0: 76af2ec0 76af2eb0 0001939c 00131f30 [ 2533.976377][T24473] r4:00000001 [ 2536.111759][T24481] fuse: Bad value for 'rootmode' [ 2539.073946][T24498] fuse: Bad value for 'rootmode' [ 2539.314865][ T31] audit: type=1400 audit(2539.277:376): avc: denied { listen } for pid=24501 comm="syz.0.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2541.525668][T24516] fuse: Unknown parameter 'use00000000000000000000' [ 2546.991228][T24559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2050 sclass=netlink_audit_socket pid=24559 comm=syz.1.5319 [ 2547.313890][T24578] FAULT_INJECTION: forcing a failure. [ 2547.313890][T24578] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.314175][T24578] CPU: 1 UID: 0 PID: 24578 Comm: syz.1.5321 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2547.314210][T24578] Hardware name: ARM-Versatile Express [ 2547.314222][T24578] Call trace: [ 2547.314243][T24578] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2547.314321][T24578] r7:838ae000 r6:00000000 r5:60000013 r4:82257c70 [ 2547.314334][T24578] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2547.314362][T24578] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2547.314389][T24578] r5:838ae000 r4:8291bcc0 [ 2547.314396][T24578] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2547.314424][T24578] [<8095f454>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 2547.314459][T24578] r8:00000000 r7:838ae000 r6:00400cc0 r5:ffffffff r4:830ad9c0 [ 2547.314467][T24578] [<80525738>] (should_failslab) from [<80509b64>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2547.314494][T24578] [<80509b14>] (kmem_cache_alloc_node_noprof) from [<81526e58>] (__alloc_skb+0x138/0x160) [ 2547.314528][T24578] r10:dfbe5d34 r9:00000000 r8:00400cc0 r7:00000000 r6:830ad9c0 r5:ffffffff [ 2547.314538][T24578] r4:82806040 [ 2547.314618][T24578] [<81526d20>] (__alloc_skb) from [<8152f260>] (alloc_skb_with_frags+0x44/0x1ec) [ 2547.314655][T24578] r8:802ce318 r7:dfbe5cd4 r6:00000000 r5:00001000 r4:00000003 [ 2547.314663][T24578] [<8152f21c>] (alloc_skb_with_frags) from [<8151fc4c>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2547.314697][T24578] r10:dfbe5d34 r9:00000000 r8:802ce318 r7:dfbe5cd4 r6:838ae000 r5:00000000 [ 2547.314711][T24578] r4:85558000 [ 2547.314718][T24578] [<8151fa58>] (sock_alloc_send_pskb) from [<817f0a5c>] (unix_dgram_sendmsg+0x134/0x774) [ 2547.314754][T24578] r10:00000000 r9:838ae000 r8:85558000 r7:00000000 r6:00000000 r5:83683400 [ 2547.314764][T24578] r4:dfbe5f20 [ 2547.314771][T24578] [<817f0928>] (unix_dgram_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2547.314803][T24578] r10:00000000 r9:dfbe5dc4 r8:dfbe5dc4 r7:00000000 r6:83683400 r5:dfbe5f20 [ 2547.314812][T24578] r4:00000000 [ 2547.314819][T24578] [<81519ad8>] (__sock_sendmsg) from [<8151a38c>] (____sys_sendmsg+0x298/0x2cc) [ 2547.314870][T24578] r7:00000000 r6:83683400 r5:00000040 r4:dfbe5f20 [ 2547.314880][T24578] [<8151a0f4>] (____sys_sendmsg) from [<8151c12c>] (___sys_sendmsg+0x9c/0xd0) [ 2547.314912][T24578] r10:dfbe5e24 r9:20000a40 r8:00000040 r7:00000000 r6:83683400 r5:dfbe5f20 [ 2547.314921][T24578] r4:00000000 [ 2547.314956][T24578] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2547.315011][T24578] r10:00000128 r9:838ae000 r8:8477d3c0 r7:00000040 r6:20000a40 r5:8477d3c1 [ 2547.315023][T24578] r4:00000003 [ 2547.315055][T24578] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2547.315087][T24578] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2547.315094][T24578] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2547.315118][T24578] Exception stack(0xdfbe5fa8 to 0xdfbe5ff0) [ 2547.315137][T24578] 5fa0: 00000000 00000000 00000003 20000a40 00000040 00000000 [ 2547.315155][T24578] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b140bc [ 2547.315168][T24578] 5fe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2548.337469][ T31] audit: type=1400 audit(2548.307:377): avc: denied { nlmsg_tty_audit } for pid=24590 comm="syz.1.5326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2549.419828][T24601] FAULT_INJECTION: forcing a failure. [ 2549.419828][T24601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2549.420164][T24601] CPU: 1 UID: 0 PID: 24601 Comm: syz.0.5327 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2549.420198][T24601] Hardware name: ARM-Versatile Express [ 2549.420211][T24601] Call trace: [ 2549.420231][T24601] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2549.420324][T24601] r7:dfdd1e20 r6:00000000 r5:60000013 r4:82257c70 [ 2549.420347][T24601] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2549.420399][T24601] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2549.420448][T24601] r5:83a7bc00 r4:82951710 [ 2549.420463][T24601] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2549.420534][T24601] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2549.420586][T24601] r8:00000000 r7:dfdd1e20 r6:20000300 r5:00000000 r4:dfdd1f20 [ 2549.420609][T24601] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2549.420672][T24601] [<8095f694>] (should_fail_usercopy) from [<8151bfb0>] (copy_msghdr_from_user+0x50/0x130) [ 2549.420775][T24601] [<8151bf60>] (copy_msghdr_from_user) from [<8151c108>] (___sys_sendmsg+0x78/0xd0) [ 2549.420834][T24601] r8:00000000 r7:00000000 r6:83617900 r5:dfdd1f20 r4:dfdd1e64 [ 2549.420847][T24601] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2549.420879][T24601] r10:00000128 r9:83a7bc00 r8:84c1e9c0 r7:00000000 r6:20000300 r5:84c1e9c1 [ 2549.420889][T24601] r4:00000003 [ 2549.420896][T24601] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2549.420949][T24601] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2549.420958][T24601] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2549.420988][T24601] Exception stack(0xdfdd1fa8 to 0xdfdd1ff0) [ 2549.421043][T24601] 1fa0: 00000000 00000000 00000003 20000300 00000000 00000000 [ 2549.421065][T24601] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b4f0bc [ 2549.421079][T24601] 1fe0: 76b4eec0 76b4eeb0 0001939c 00131f30 [ 2549.623217][T24604] fuse: Unknown parameter 'user_i00000000000000000000' [ 2551.046913][ T31] audit: type=1400 audit(2551.017:378): avc: denied { getopt } for pid=24609 comm="syz.1.5331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2551.659183][T24625] fuse: Unknown parameter 'user_i00000000000000000000' [ 2551.854806][T24629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24629 comm=syz.1.5336 [ 2552.012291][T24631] block nbd1: NBD_DISCONNECT [ 2552.170815][T24639] fuse: Unknown parameter 'user_i00000000000000000000' [ 2554.902210][T24659] fuse: Unknown parameter 'user_id00000000000000000000' [ 2555.379934][T24672] netlink: 'syz.1.5348': attribute type 1 has an invalid length. [ 2555.712325][T24679] fuse: Unknown parameter 'user_id00000000000000000000' [ 2556.024066][ T31] audit: type=1400 audit(2555.987:379): avc: denied { setopt } for pid=24684 comm="syz.1.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2559.872581][T24711] FAULT_INJECTION: forcing a failure. [ 2559.872581][T24711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2559.873556][T24711] CPU: 1 UID: 0 PID: 24711 Comm: syz.0.5355 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2559.873615][T24711] Hardware name: ARM-Versatile Express [ 2559.873628][T24711] Call trace: [ 2559.873650][T24711] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2559.873714][T24711] r7:20000140 r6:00000000 r5:60000013 r4:82257c70 [ 2559.873723][T24711] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2559.873749][T24711] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2559.873775][T24711] r5:83941800 r4:82951710 [ 2559.873782][T24711] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2559.873810][T24711] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2559.873839][T24711] r8:00000000 r7:20000140 r6:851623a3 r5:00000000 r4:00000000 [ 2559.873847][T24711] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2559.873870][T24711] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 2559.873898][T24711] [<808aeb30>] (_copy_from_iter) from [<818d94e8>] (isotp_sendmsg+0x254/0x820) [ 2559.873936][T24711] r10:e0629f20 r9:851623a3 r8:e0629f30 r7:00000014 r6:85160000 r5:85162000 [ 2559.873946][T24711] r4:00000000 [ 2559.873953][T24711] [<818d9294>] (isotp_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2559.873987][T24711] r10:00000000 r9:e0629dc4 r8:e0629dc4 r7:00000000 r6:83683b80 r5:e0629f20 [ 2559.873996][T24711] r4:00000000 [ 2559.874003][T24711] [<81519ad8>] (__sock_sendmsg) from [<8151a38c>] (____sys_sendmsg+0x298/0x2cc) [ 2559.874030][T24711] r7:00000000 r6:83683b80 r5:20000000 r4:e0629f20 [ 2559.874037][T24711] [<8151a0f4>] (____sys_sendmsg) from [<8151c12c>] (___sys_sendmsg+0x9c/0xd0) [ 2559.874067][T24711] r10:e0629e24 r9:200001c0 r8:20000000 r7:00000000 r6:83683b80 r5:e0629f20 [ 2559.874076][T24711] r4:00000000 [ 2559.874083][T24711] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2559.874113][T24711] r10:00000128 r9:83941800 r8:8477d300 r7:20000000 r6:200001c0 r5:8477d301 [ 2559.874122][T24711] r4:00000003 [ 2559.874129][T24711] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2559.874157][T24711] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2559.874165][T24711] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2559.874187][T24711] Exception stack(0xe0629fa8 to 0xe0629ff0) [ 2559.874206][T24711] 9fa0: 00000000 00000000 00000003 200001c0 20000000 00000000 [ 2559.874222][T24711] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b2e0bc [ 2559.874235][T24711] 9fe0: 76b2dec0 76b2deb0 0001939c 00131f30 [ 2560.367089][ T31] audit: type=1400 audit(2560.337:380): avc: denied { ioctl } for pid=24725 comm="syz.1.5364" path="socket:[58532]" dev="sockfs" ino=58532 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 2560.801292][T24734] FAULT_INJECTION: forcing a failure. [ 2560.801292][T24734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2560.801541][T24734] CPU: 1 UID: 0 PID: 24734 Comm: syz.1.5366 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2560.801591][T24734] Hardware name: ARM-Versatile Express [ 2560.801603][T24734] Call trace: [ 2560.801625][T24734] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2560.801679][T24734] r7:00000000 r6:00000000 r5:60000013 r4:82257c70 [ 2560.801688][T24734] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2560.801713][T24734] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2560.801741][T24734] r5:8416d400 r4:82951710 [ 2560.801748][T24734] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2560.801775][T24734] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2560.801804][T24734] r8:76b13f30 r7:00000000 r6:00000000 r5:e04c5f68 r4:00000002 [ 2560.801814][T24734] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2560.801839][T24734] [<8095f694>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 2560.801867][T24734] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 2560.801901][T24734] r10:00000001 r9:8060401c r8:00000002 r7:e04c5f68 r6:0000000f r5:76b13f30 [ 2560.801912][T24734] r4:8416d400 r3:e04c5e9f [ 2560.801920][T24734] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 2560.801979][T24734] r8:76b13f30 r7:e04c5f68 r6:8416d400 r5:0000000f r4:8477d9c0 [ 2560.801991][T24734] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 2560.802023][T24734] r10:00000003 r9:8416d400 r8:8020029c r7:00000000 r6:00000000 r5:8477d9c0 [ 2560.802050][T24734] r4:8477d9c3 [ 2560.802058][T24734] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 2560.802086][T24734] r7:00000003 r6:00000004 r5:76b13f30 r4:0000000f [ 2560.802122][T24734] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2560.802149][T24734] Exception stack(0xe04c5fa8 to 0xe04c5ff0) [ 2560.802169][T24734] 5fa0: 0000000f 76b13f30 00000004 76b13f30 0000000f 00000000 [ 2560.802189][T24734] 5fc0: 0000000f 76b13f30 00000004 00000003 002d0000 00000000 00006364 76b140bc [ 2560.802203][T24734] 5fe0: 00000158 76b13ed0 000d7d68 0012fe04 [ 2561.047446][ T31] audit: type=1400 audit(2561.017:381): avc: denied { getopt } for pid=24739 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2561.082494][T24719] FAULT_INJECTION: forcing a failure. [ 2561.082494][T24719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2561.083230][T24719] CPU: 0 UID: 0 PID: 24719 Comm: syz.0.5362 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2561.083273][T24719] Hardware name: ARM-Versatile Express [ 2561.083286][T24719] Call trace: [ 2561.083307][T24719] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2561.083361][T24719] r7:200001c0 r6:00000000 r5:60000113 r4:82257c70 [ 2561.083371][T24719] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2561.083396][T24719] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2561.083423][T24719] r5:8330a400 r4:82951710 [ 2561.083430][T24719] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2561.083458][T24719] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2561.083488][T24719] r8:00000000 r7:200001c0 r6:84e0a3a3 r5:00000000 r4:00000000 [ 2561.083495][T24719] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2561.083519][T24719] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 2561.083545][T24719] [<808aeb30>] (_copy_from_iter) from [<818d94e8>] (isotp_sendmsg+0x254/0x820) [ 2561.083583][T24719] r10:e0755f20 r9:84e0a3a3 r8:e0755f30 r7:00000028 r6:84e08000 r5:84e0a000 [ 2561.083599][T24719] r4:00000000 [ 2561.083606][T24719] [<818d9294>] (isotp_sendmsg) from [<81519b1c>] (__sock_sendmsg+0x44/0x78) [ 2561.083649][T24719] r10:00000000 r9:e0755dc4 r8:e0755dc4 r7:00000000 r6:83616000 r5:e0755f20 [ 2561.083659][T24719] r4:00000000 [ 2561.083667][T24719] [<81519ad8>] (__sock_sendmsg) from [<8151a38c>] (____sys_sendmsg+0x298/0x2cc) [ 2561.083694][T24719] r7:00000000 r6:83616000 r5:00004000 r4:e0755f20 [ 2561.083701][T24719] [<8151a0f4>] (____sys_sendmsg) from [<8151c12c>] (___sys_sendmsg+0x9c/0xd0) [ 2561.083731][T24719] r10:e0755e24 r9:200002c0 r8:00004000 r7:00000000 r6:83616000 r5:e0755f20 [ 2561.083740][T24719] r4:00000000 [ 2561.083747][T24719] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2561.083778][T24719] r10:00000128 r9:8330a400 r8:84c1e300 r7:00004000 r6:200002c0 r5:84c1e301 [ 2561.083787][T24719] r4:00000003 [ 2561.083794][T24719] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2561.083822][T24719] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2561.083830][T24719] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2561.083852][T24719] Exception stack(0xe0755fa8 to 0xe0755ff0) [ 2561.083871][T24719] 5fa0: 00000000 00000000 00000003 200002c0 00004000 00000000 [ 2561.083887][T24719] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b700bc [ 2561.083900][T24719] 5fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2561.366148][T13835] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2561.496296][T13835] usb 2-1: device descriptor read/64, error -71 [ 2561.736176][T13835] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2561.866057][T13835] usb 2-1: device descriptor read/64, error -71 [ 2561.976732][T13835] usb usb2-port1: attempt power cycle [ 2562.316044][T13835] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2562.337544][T13835] usb 2-1: device descriptor read/8, error -71 [ 2562.576116][T13835] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2562.597542][T13835] usb 2-1: device descriptor read/8, error -71 [ 2562.706843][T13835] usb usb2-port1: unable to enumerate USB device [ 2565.519527][T24765] FAULT_INJECTION: forcing a failure. [ 2565.519527][T24765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2565.519801][T24765] CPU: 1 UID: 0 PID: 24765 Comm: syz.0.5376 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2565.519831][T24765] Hardware name: ARM-Versatile Express [ 2565.519842][T24765] Call trace: [ 2565.519862][T24765] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2565.519944][T24765] r7:00000001 r6:00000000 r5:60000013 r4:82257c70 [ 2565.519956][T24765] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2565.519983][T24765] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2565.520011][T24765] r5:8416bc00 r4:82951710 [ 2565.520017][T24765] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2565.520045][T24765] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2565.520086][T24765] r8:00000000 r7:00000001 r6:8245d848 r5:20000200 r4:20000200 [ 2565.520095][T24765] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2565.520132][T24765] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 2565.520161][T24765] [<80965728>] (strncpy_from_user) from [<80560c80>] (getname_flags.part.0+0x44/0x18c) [ 2565.520208][T24765] r10:00000015 r9:8416bc00 r8:00000000 r7:00000001 r6:8245d848 r5:20000200 [ 2565.520243][T24765] r4:85cdb000 [ 2565.520252][T24765] [<80560c3c>] (getname_flags.part.0) from [<80565d4c>] (getname_flags+0x3c/0x50) [ 2565.520285][T24765] r9:8416bc00 r8:00000000 r7:00000000 r6:ffffff9c r5:00000001 r4:20000200 [ 2565.520293][T24765] [<80565d10>] (getname_flags) from [<80566304>] (user_path_at+0x2c/0x64) [ 2565.520341][T24765] r5:00000001 r4:e0879f6c [ 2565.520371][T24765] [<805662d8>] (user_path_at) from [<80585064>] (sys_mount+0x158/0x260) [ 2565.520403][T24765] r6:00000000 r5:00000000 r4:00000000 [ 2565.520410][T24765] [<80584f0c>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2565.520433][T24765] Exception stack(0xe0879fa8 to 0xe0879ff0) [ 2565.520461][T24765] 9fa0: 00000000 00000000 00000000 20000200 00000000 00000000 [ 2565.520499][T24765] 9fc0: 00000000 00000000 0012fee0 00000015 002d0000 00000000 00006364 76b700bc [ 2565.520521][T24765] 9fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2565.520560][T24765] r10:00000015 r9:8416bc00 r8:8020029c r7:00000015 r6:0012fee0 r5:00000000 [ 2565.520573][T24765] r4:00000000 [ 2568.397607][T24778] fuse: Unknown parameter '0x0000000000000003' [ 2568.497978][T24780] fuse: Bad value for 'fd' [ 2568.878302][T24788] fuse: Unknown parameter '0x0000000000000003' [ 2568.930456][T24790] fuse: Bad value for 'fd' [ 2571.118879][T24800] fuse: Unknown parameter '0x0000000000000003' [ 2571.359963][T24812] fuse: Bad value for 'fd' [ 2581.870055][T24882] fuse: Bad value for 'fd' [ 2584.684155][T24905] fuse: Bad value for 'fd' [ 2585.981912][T24916] fuse: Bad value for 'fd' [ 2589.764272][ T31] audit: type=1400 audit(2589.727:382): avc: denied { execute } for pid=24985 comm="syz.1.5431" path="/selinux/relabel" dev="selinuxfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 2591.874098][T25016] FAULT_INJECTION: forcing a failure. [ 2591.874098][T25016] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.874397][T25016] CPU: 1 UID: 0 PID: 25016 Comm: syz.1.5440 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2591.874449][T25016] Hardware name: ARM-Versatile Express [ 2591.874463][T25016] Call trace: [ 2591.874485][T25016] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2591.874547][T25016] r7:84e7ec00 r6:00000000 r5:60000013 r4:82257c70 [ 2591.874556][T25016] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2591.874625][T25016] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2591.874655][T25016] r5:84e7ec00 r4:8291bcc0 [ 2591.874663][T25016] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2591.874693][T25016] [<8095f454>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 2591.874730][T25016] r8:00000000 r7:84e7ec00 r6:00000cc0 r5:20000000 r4:830a8a80 [ 2591.874739][T25016] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2591.874767][T25016] [<8050a184>] (kmem_cache_alloc_noprof) from [<80560c64>] (getname_flags.part.0+0x28/0x18c) [ 2591.874804][T25016] r10:00000010 r9:0000ee00 r8:00000000 r7:00000000 r6:8245d848 r5:20000000 [ 2591.874815][T25016] r4:20000000 [ 2591.874822][T25016] [<80560c3c>] (getname_flags.part.0) from [<80565d4c>] (getname_flags+0x3c/0x50) [ 2591.874857][T25016] r9:0000ee00 r8:00000000 r7:20000000 r6:ffffff9c r5:00000000 r4:20000000 [ 2591.874866][T25016] [<80565d10>] (getname_flags) from [<80566304>] (user_path_at+0x2c/0x64) [ 2591.874895][T25016] r5:00000000 r4:eb22df54 [ 2591.874902][T25016] [<805662d8>] (user_path_at) from [<8054dfc8>] (do_fchownat+0x68/0xf0) [ 2591.874932][T25016] r6:ffffff9c r5:00000000 r4:00000000 [ 2591.874940][T25016] [<8054df60>] (do_fchownat) from [<80356f48>] (sys_lchown16+0x50/0x58) [ 2591.874973][T25016] r9:84e7ec00 r8:8020029c r7:00000010 r6:0012fee0 r5:00000000 r4:00000000 [ 2591.874982][T25016] [<80356ef8>] (sys_lchown16) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2591.875005][T25016] Exception stack(0xeb22dfa8 to 0xeb22dff0) [ 2591.875026][T25016] dfa0: 00000000 00000000 20000000 00000000 0000ee00 00000000 [ 2591.875044][T25016] dfc0: 00000000 00000000 0012fee0 00000010 002d0000 00000000 00006364 76b140bc [ 2591.875058][T25016] dfe0: 76b13ec0 76b13eb0 0001939c 00131f30 [ 2591.875068][T25016] r4:00000000 [ 2598.997229][T25075] FAULT_INJECTION: forcing a failure. [ 2598.997229][T25075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.998100][T25075] CPU: 1 UID: 0 PID: 25075 Comm: syz.0.5459 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2598.998161][T25075] Hardware name: ARM-Versatile Express [ 2598.998174][T25075] Call trace: [ 2598.998196][T25075] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2598.998250][T25075] r7:eb3b9e20 r6:00000000 r5:60000013 r4:82257c70 [ 2598.998260][T25075] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2598.998286][T25075] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2598.998313][T25075] r5:83a6bc00 r4:82951710 [ 2598.998321][T25075] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 2598.998349][T25075] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 2598.998379][T25075] r8:00004080 r7:eb3b9e20 r6:20000100 r5:00000000 r4:eb3b9f20 [ 2598.998387][T25075] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 2598.998411][T25075] [<8095f694>] (should_fail_usercopy) from [<8151bfb0>] (copy_msghdr_from_user+0x50/0x130) [ 2598.998439][T25075] [<8151bf60>] (copy_msghdr_from_user) from [<8151c108>] (___sys_sendmsg+0x78/0xd0) [ 2598.998470][T25075] r8:00004080 r7:00000000 r6:8489e500 r5:eb3b9f20 r4:eb3b9e64 [ 2598.998478][T25075] [<8151c090>] (___sys_sendmsg) from [<8151c5bc>] (__sys_sendmsg+0x8c/0xd8) [ 2598.998509][T25075] r10:00000128 r9:83a6bc00 r8:8477d240 r7:00004080 r6:20000100 r5:8477d241 [ 2598.998518][T25075] r4:00000003 [ 2598.998526][T25075] [<8151c530>] (__sys_sendmsg) from [<8151c61c>] (sys_sendmsg+0x14/0x18) [ 2598.998555][T25075] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 2598.998562][T25075] [<8151c608>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2598.998625][T25075] Exception stack(0xeb3b9fa8 to 0xeb3b9ff0) [ 2598.998643][T25075] 9fa0: 00000000 00000000 00000003 20000100 00004080 00000000 [ 2598.998660][T25075] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b700bc [ 2598.998673][T25075] 9fe0: 76b6fec0 76b6feb0 0001939c 00131f30 [ 2607.347611][T25139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25139 comm=syz.0.5478 [ 2607.891427][ T31] audit: type=1400 audit(2607.857:383): avc: denied { execute } for pid=25137 comm="syz.0.5478" path="/sys/power/pm_async" dev="sysfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 2612.660792][ T31] audit: type=1400 audit(2612.627:384): avc: denied { read write } for pid=25153 comm="syz.1.5481" name="udmabuf" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="IPVS" [ 2612.662008][ T31] audit: type=1400 audit(2612.627:385): avc: denied { open } for pid=25153 comm="syz.1.5481" path="/dev/udmabuf" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="IPVS" [ 2612.665354][ T31] audit: type=1400 audit(2612.627:386): avc: denied { ioctl } for pid=25153 comm="syz.1.5481" path="/dev/udmabuf" dev="devtmpfs" ino=662 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="IPVS" [ 2615.483823][T25175] fuse: Bad value for 'fd' [ 2618.596277][T13835] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2618.746343][T13835] usb 2-1: Using ep0 maxpacket: 16 [ 2618.752552][T13835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2618.752765][T13835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2618.752933][T13835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2618.753070][T13835] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2618.753177][T13835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.759235][T13835] usb 2-1: config 0 descriptor?? [ 2619.175533][T13835] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 2619.177134][T13835] koneplus 0003:1E7D:2E22.0006: unknown main item tag 0x0 [ 2619.181248][T13835] koneplus 0003:1E7D:2E22.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 2619.590257][T22093] usb 2-1: USB disconnect, device number 36 [ 2620.911252][ T31] audit: type=1400 audit(2620.877:387): avc: denied { execute } for pid=25309 comm="syz.1.5534" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2621.897643][T24228] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2622.075087][T24228] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2622.075318][T24228] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2622.076038][T24228] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2622.076161][T24228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.088649][T25313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2622.091763][T24228] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2634.877157][T17214] usb 2-1: USB disconnect, device number 37 [ 2641.506175][T13835] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2641.676118][T13835] usb 2-1: Using ep0 maxpacket: 8 [ 2641.681112][T13835] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2641.681789][T13835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2641.682347][T13835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2641.682871][T13835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2641.683400][T13835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2641.684068][T13835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2641.684626][T13835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.895251][T13835] usb 2-1: usb_control_msg returned -32 [ 2641.896100][T13835] usbtmc 2-1:16.0: can't read capabilities [ 2643.717474][ T31] audit: type=1400 audit(2643.687:388): avc: denied { map } for pid=25375 comm="syz.0.5542" path="socket:[59422]" dev="sockfs" ino=59422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2655.432433][T22094] usb 2-1: USB disconnect, device number 38 [ 2655.507768][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5549'. [ 2656.166992][T25411] GUP no longer grows the stack in syz.0.5548 (25411): 20004000-2000a000 (20002000) [ 2656.167992][T25411] CPU: 1 UID: 0 PID: 25411 Comm: syz.0.5548 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2656.168065][T25411] Hardware name: ARM-Versatile Express [ 2656.168080][T25411] Call trace: [ 2656.168102][T25411] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 2656.168167][T25411] r7:dfa6ddb8 r6:843d0600 r5:60000013 r4:82257c70 [ 2656.168176][T25411] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 2656.168203][T25411] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 2656.168231][T25411] r5:00000000 r4:20002000 [ 2656.168238][T25411] [<80220048>] (dump_stack) from [<804c0520>] (gup_vma_lookup+0xb4/0xb8) [ 2656.168266][T25411] [<804c046c>] (gup_vma_lookup) from [<804c23a4>] (__get_user_pages+0xec/0x664) [ 2656.168292][T25411] r4:00050082 [ 2656.168299][T25411] [<804c22b8>] (__get_user_pages) from [<804c2a20>] (get_user_pages_remote+0x104/0x494) [ 2656.168332][T25411] r10:00000000 r9:20002000 r8:00050082 r7:dfa6de20 r6:843d0600 r5:00000300 [ 2656.168342][T25411] r4:dfa6ddb8 [ 2656.168349][T25411] [<804c291c>] (get_user_pages_remote) from [<804c88ac>] (__access_remote_vm+0x148/0x3d0) [ 2656.168396][T25411] r10:84e07d00 r9:00000d00 r8:82a70528 r7:00000000 r6:20002000 r5:00000300 [ 2656.168406][T25411] r4:dee10e40 [ 2656.168414][T25411] [<804c8764>] (__access_remote_vm) from [<804d2ae8>] (access_remote_vm+0x1c/0x24) [ 2656.168449][T25411] r10:00000000 r9:20000080 r8:00001001 r7:84e07000 r6:20001300 r5:dfa6df88 [ 2656.168459][T25411] r4:843d0600 [ 2656.168466][T25411] [<804d2acc>] (access_remote_vm) from [<8060520c>] (proc_pid_cmdline_read+0x268/0x470) [ 2656.168506][T25411] [<80604fa4>] (proc_pid_cmdline_read) from [<80550120>] (vfs_readv+0x22c/0x298) [ 2656.168541][T25411] r10:00000169 r9:80604fa4 r8:00000001 r7:dfa6df88 r6:8477d780 r5:dfa6dee0 [ 2656.168551][T25411] r4:00000000 [ 2656.168558][T25411] [<8054fef4>] (vfs_readv) from [<80550368>] (do_preadv+0x98/0xec) [ 2656.168589][T25411] r9:842b4800 r8:8020029c r7:20000040 r6:00000001 r5:8477d780 r4:8477d781 [ 2656.168598][T25411] [<805502d0>] (do_preadv) from [<805529b4>] (sys_preadv+0x20/0x28) [ 2656.168628][T25411] r7:00000169 r6:002e6438 r5:00000000 r4:00000000 [ 2656.168636][T25411] [<80552994>] (sys_preadv) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2656.168660][T25411] Exception stack(0xdfa6dfa8 to 0xdfa6dff0) [ 2656.168679][T25411] dfa0: 00000000 00000000 00000005 20000040 00000001 00000300 [ 2656.168696][T25411] dfc0: 00000000 00000000 002e6438 00000169 002d0000 00000000 00006364 76b2e0bc [ 2656.168709][T25411] dfe0: 76b2dec0 76b2deb0 0001939c 00131f30 [ 2664.857540][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5557'. [ 2664.905611][T25431] bond1: entered promiscuous mode [ 2664.907590][T25431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2664.910941][T25431] bond1: left promiscuous mode [ 2665.956073][T17214] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2666.116099][T17214] usb 2-1: Using ep0 maxpacket: 8 [ 2666.120257][T17214] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2666.120855][T17214] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 2666.121329][T17214] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2666.121870][T17214] usb 2-1: config 0 has no interface number 0 [ 2666.122430][T17214] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2666.123020][T17214] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2666.123653][T17214] usb 2-1: config 0 interface 255 has no altsetting 0 [ 2666.127865][T17214] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2666.128379][T17214] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 2666.128871][T17214] usb 2-1: Product: syz [ 2666.129198][T17214] usb 2-1: Manufacturer: syz [ 2666.131976][T17214] usb 2-1: config 0 descriptor?? [ 2666.364394][T17214] usb 2-1: USB disconnect, device number 39 [ 2666.786034][T17214] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2666.936553][T17214] usb 2-1: Using ep0 maxpacket: 32 [ 2666.940943][T17214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2666.944592][T17214] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 2666.945999][T17214] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2666.947150][T17214] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.948143][T17214] usb 2-1: config 7 has no interface number 0 [ 2666.949080][T17214] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 2666.950178][T17214] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 2666.951235][T17214] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 2666.952275][T17214] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2666.953425][T17214] usb 2-1: config 7 interface 128 has no altsetting 0 [ 2666.958350][T17214] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2666.958894][T17214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.960046][T17214] usb 2-1: Product: syz [ 2666.960899][T17214] usb 2-1: Manufacturer: syz [ 2666.961716][T17214] usb 2-1: SerialNumber: syz [ 2666.965408][T25492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2667.177291][T17214] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2667.178039][T17214] usb 2-1: MIDIStreaming interface descriptor not found [ 2667.202588][T17214] usb 2-1: USB disconnect, device number 40 [ 2667.606090][T17214] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2667.756087][T17214] usb 2-1: Using ep0 maxpacket: 32 [ 2667.760361][T17214] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2667.761806][T17214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.766644][T17214] usb 2-1: config 0 descriptor?? [ 2673.454666][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2678.000967][ T23] usb 2-1: USB disconnect, device number 41 [ 2678.040304][ T31] audit: type=1400 audit(2678.007:389): avc: denied { create } for pid=25550 comm="syz.1.5567" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2684.529647][ T31] audit: type=1400 audit(2684.497:390): avc: denied { unlink } for pid=22402 comm="syz-executor" name="file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2697.996709][ T31] audit: type=1400 audit(2697.967:391): avc: denied { read } for pid=25579 comm="syz.1.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2698.889750][T16772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.979781][T16772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.057991][T16772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.128974][T16772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.340106][T16772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2699.343599][T16772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2699.357399][T16772] bond0 (unregistering): Released all slaves [ 2699.361680][T16772] bond1 (unregistering): Released all slaves [ 2699.414147][T16772] hsr_slave_0: left promiscuous mode [ 2699.415411][T16772] hsr_slave_1: left promiscuous mode [ 2699.420787][T16772] veth1_macvtap: left promiscuous mode [ 2699.421005][T16772] veth0_macvtap: left promiscuous mode [ 2699.421267][T16772] veth1_vlan: left promiscuous mode [ 2699.421452][T16772] veth0_vlan: left promiscuous mode [ 2702.160969][T25590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2702.180486][T25590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2703.201394][T25590] hsr_slave_0: entered promiscuous mode [ 2703.207784][T25590] hsr_slave_1: entered promiscuous mode [ 2703.527721][T25590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2703.549328][T25590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2703.561034][T25590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2703.569808][T25590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2704.171515][T25590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2704.656919][T25590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2705.887303][T25590] veth0_vlan: entered promiscuous mode [ 2705.897276][T25590] veth1_vlan: entered promiscuous mode [ 2705.933293][T25590] veth0_macvtap: entered promiscuous mode [ 2705.938810][T25590] veth1_macvtap: entered promiscuous mode [ 2705.973948][T25590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.977701][T25590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.978467][T25590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.979242][T25590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.103010][T25978] syzkaller0: entered allmulticast mode [ 2706.203992][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.204962][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.727963][ T31] audit: type=1800 audit(2720.697:392): pid=26038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5589" name="bus" dev="ramfs" ino=59970 res=0 errno=0 [ 2729.218386][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2729.218951][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.586147][T13835] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2730.756616][T13835] usb 1-1: Using ep0 maxpacket: 32 [ 2730.760931][T13835] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2730.761577][T13835] usb 1-1: config 0 has no interface number 0 [ 2730.762036][T13835] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2730.762663][T13835] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2730.778693][T13835] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2730.779298][T13835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.779898][T13835] usb 1-1: Product: syz [ 2730.780256][T13835] usb 1-1: Manufacturer: syz [ 2730.780619][T13835] usb 1-1: SerialNumber: syz [ 2730.782771][T13835] usb 1-1: config 0 descriptor?? [ 2734.761463][T13835] appletouch 1-1:0.85: Geyser mode initialized. [ 2734.763622][T13835] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input23 [ 2745.002845][T13835] usb 1-1: USB disconnect, device number 32 [ 2745.011303][T13835] appletouch 1-1:0.85: input: appletouch disconnected [ 2745.407047][T26122] netlink: 'syz.0.5610': attribute type 10 has an invalid length. [ 2754.144372][T26149] syzkaller0: entered promiscuous mode [ 2754.145312][T26149] syzkaller0: entered allmulticast mode [ 2764.107182][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.108782][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2789.281350][T26198] Process accounting resumed [ 2789.668285][T26211] syz_tun: entered allmulticast mode [ 2789.677314][T26211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5632'. [ 2789.691928][T26211] syz_tun (unregistering): left allmulticast mode [ 2807.069792][T26229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2807.070660][T26229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2807.142033][T26233] netlink: 'syz.2.5637': attribute type 39 has an invalid length. [ 2807.399049][ T31] audit: type=1400 audit(2807.367:393): avc: denied { bind } for pid=26242 comm="syz.0.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2807.478426][ T31] audit: type=1400 audit(2807.447:394): avc: denied { bind } for pid=26244 comm="syz.0.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2818.628123][T26256] 8<--- cut here --- [ 2818.628400][T26256] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 2818.628607][T26256] [0000000e] *pgd=850ef003, *pmd=eabcd003 [ 2818.629509][T26256] Internal error: Oops: 205 [#1] SMP ARM [ 2818.630291][ T31] audit: type=1400 audit(2818.597:395): avc: denied { read } for pid=2908 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2818.631071][ T31] audit: type=1400 audit(2818.597:396): avc: denied { search } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2818.631828][ T31] audit: type=1400 audit(2818.597:397): avc: denied { write } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2818.633716][T26256] Modules linked in: [ 2818.634003][T26256] CPU: 1 UID: 0 PID: 26256 Comm: syz.2.5644 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 2818.634265][T26256] Hardware name: ARM-Versatile Express [ 2818.634389][T26256] PC is at io_buffer_select+0x50/0x18c [ 2818.634817][T26256] LR is at xa_load+0x68/0xa4 [ 2818.634958][T26256] pc : [<80889aa8>] lr : [<81a4c134>] psr: 20000013 [ 2818.635509][T26256] sp : dfa9de00 ip : dfa9ddc0 fp : dfa9de1c [ 2818.636018][T26256] r10: 00000240 r9 : 80000001 r8 : 00000000 [ 2818.636231][T26256] r7 : dfa9de40 r6 : 00000000 r5 : 85c3f100 r4 : 85687000 [ 2818.636437][T26256] r3 : 00000001 r2 : 00000000 r1 : 8556be00 r0 : 00000000 [ 2818.636785][T26256] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 2818.637025][T26256] Control: 30c5387d Table: 8529ca00 DAC: 00000000 [ 2818.637312][T26256] Register r0 information: NULL pointer [ 2818.637730][T26256] Register r1 information: slab kmalloc-64 start 8556be00 pointer offset 0 size 64 [ 2818.638356][T26256] Register r2 information: NULL pointer [ 2818.638514][T26256] Register r3 information: non-paged memory [ 2818.638741][T26256] Register r4 information: slab io_kiocb start 85687000 pointer offset 0 size 192 [ 2818.639114][T26256] Register r5 information: slab kmalloc-2k start 85c3f000 pointer offset 256 size 2048 [ 2818.639407][T26256] Register r6 information: NULL pointer [ 2818.639555][T26256] Register r7 information: 2-page vmalloc region starting at 0xdfa9c000 allocated at kernel_clone+0xac/0x3e4 [ 2818.639951][T26256] Register r8 information: NULL pointer [ 2818.640219][T26256] Register r9 information: non-slab/vmalloc memory [ 2818.640666][T26256] Register r10 information: non-paged memory [ 2818.640907][T26256] Register r11 information: 2-page vmalloc region starting at 0xdfa9c000 allocated at kernel_clone+0xac/0x3e4 [ 2818.641189][T26256] Register r12 information: 2-page vmalloc region starting at 0xdfa9c000 allocated at kernel_clone+0xac/0x3e4 [ 2818.641458][T26256] Process syz.2.5644 (pid: 26256, stack limit = 0xdfa9c000) [ 2818.641680][T26256] Stack: (0xdfa9de00 to 0xdfa9e000) [ 2818.641877][T26256] de00: 83686500 85687000 84ce8600 80000001 dfa9de84 dfa9de20 80893310 80889a64 [ 2818.642116][T26256] de20: 00000000 0000001b 85687000 84ce8600 00010001 00000001 8057abbc 00000000 [ 2818.642299][T26256] de40: 00000000 00000005 85687000 80000001 dfa9de84 12855057 80886ad8 85687000 [ 2818.642473][T26256] de60: 81cf0ca0 00000000 80000001 81cf0b5c 0000001b 84e7a400 dfa9debc dfa9de88 [ 2818.642687][T26256] de80: 80886c70 80892fd0 856873c0 85687480 85687540 85c3f000 8568706c 85687000 [ 2818.642933][T26256] dea0: 85dc0000 00000000 00000000 84e7a400 dfa9df14 dfa9dec0 80887840 80886c14 [ 2818.643140][T26256] dec0: 8088e1fc 81a4c0d8 00000000 00000000 00000800 00000800 81cf0b5c 00000800 [ 2818.643338][T26256] dee0: 85c3f000 12855057 85265e40 00000000 85c3f000 00003516 85265e40 00000000 [ 2818.643625][T26256] df00: 84e7a400 00000000 dfa9dfa4 dfa9df18 808882e8 80887640 ecac8b10 85c3f040 [ 2818.643845][T26256] df20: 00000000 00000000 81a4feb0 81a4fd80 dfa9df54 dfa9df40 8026b438 8029ce1c [ 2818.644040][T26256] df40: dfa9dfb0 40000000 dfa9df84 dfa9df58 802229dc 8026b3f4 00000000 8281d05c [ 2818.644217][T26256] df60: dfa9dfb0 0014c490 ecac8b10 80222930 00000000 12855057 dfa9dfac 00000000 [ 2818.644394][T26256] df80: 00000000 002e630c 000001aa 8020029c 84e7a400 000001aa 00000000 dfa9dfa8 [ 2818.644645][T26256] dfa0: 80200060 808881bc 00000000 00000000 00000006 00003516 00000000 00000000 [ 2818.644923][T26256] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bc80bc [ 2818.645102][T26256] dfe0: 76bc7ec0 76bc7eb0 0001939c 00131f30 60000010 00000006 00000000 00000000 [ 2818.645287][T26256] Call trace: [ 2818.645419][T26256] [<80889a58>] (io_buffer_select) from [<80893310>] (io_recv+0x34c/0x46c) [ 2818.645686][T26256] r7:80000001 r6:84ce8600 r5:85687000 r4:83686500 [ 2818.645936][T26256] [<80892fc4>] (io_recv) from [<80886c70>] (io_issue_sqe+0x68/0x658) [ 2818.646162][T26256] r10:84e7a400 r9:0000001b r8:81cf0b5c r7:80000001 r6:00000000 r5:81cf0ca0 [ 2818.646330][T26256] r4:85687000 [ 2818.646448][T26256] [<80886c08>] (io_issue_sqe) from [<80887840>] (io_submit_sqes+0x20c/0x938) [ 2818.646711][T26256] r10:84e7a400 r9:00000000 r8:00000000 r7:85dc0000 r6:85687000 r5:8568706c [ 2818.646876][T26256] r4:85c3f000 [ 2818.646974][T26256] [<80887634>] (io_submit_sqes) from [<808882e8>] (sys_io_uring_enter+0x138/0x780) [ 2818.647179][T26256] r10:00000000 r9:84e7a400 r8:00000000 r7:85265e40 r6:00003516 r5:85c3f000 [ 2818.647341][T26256] r4:00000000 [ 2818.647505][T26256] [<808881b0>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2818.647759][T26256] Exception stack(0xdfa9dfa8 to 0xdfa9dff0) [ 2818.647995][T26256] dfa0: 00000000 00000000 00000006 00003516 00000000 00000000 [ 2818.648243][T26256] dfc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bc80bc [ 2818.648454][T26256] dfe0: 76bc7ec0 76bc7eb0 0001939c 00131f30 [ 2818.648596][T26256] r10:000001aa r9:84e7a400 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 2818.648778][T26256] r4:00000000 [ 2818.649023][T26256] Code: e3130001 0a00002f e5910000 e1d120be (e1d030be) [ 2818.650085][T26256] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2818.656382][T26256] Kernel panic - not syncing: Fatal exception [ 2818.658010][T26256] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:20:50 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000004 R03=81a506e8 R04=00000006 R05=828fac48 R06=00000000 R07=828fac40 R08=84133c00 R09=00000028 R10=828fac48 R11=df801a3c R12=df801a40 R13=df801a30 R14=803481f4 R15=81a506f8 PSR=60010093 -ZC- A S svc32 s00=64660608 s01=0186033d d00=0186033d64660608 s02=000ca406 s03=03010000 d01=03010000000ca406 s04=3a0e20b5 s05=a4eb3301 d02=a4eb33013a0e20b5 s06=b8019fbd s07=5abcd8d5 d03=5abcd8d5b8019fbd s08=18227ab1 s09=ef6f175f d04=ef6f175f18227ab1 s10=e27efac1 s11=8a8cf045 d05=8a8cf045e27efac1 s12=756cfbae s13=7437e924 d06=7437e924756cfbae s14=0011c003 s15=d0037e10 d07=d0037e100011c003 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=30080013 s33=00138803 d16=0013880330080013 s34=90030008 s35=04100013 d17=0410001390030008 s36=0013a003 s37=a8031008 d18=a80310080013a003 s38=00080013 s39=0247c003 d19=0247c00300080013 s40=ffffffff s41=47c80303 d20=47c80303ffffffff s42=ffffff02 s43=d00303ff d21=d00303ffffffff02 s44=ffff0247 s45=0303ffff d22=0303ffffffff0247 s46=ff0247d8 s47=03ffffff d23=03ffffffff0247d8 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=83e057c2 s53=a439231b d26=a439231b83e057c2 s54=014a7593 s55=144fe9d8 d27=144fe9d8014a7593 s56=e2a9650f s57=986c254c d28=986c254ce2a9650f s58=9385f37f s59=3285421d d29=3285421d9385f37f s60=8eded697 s61=a338f78b d30=a338f78b8eded697 s62=cf038704 s63=72cc78b1 d31=72cc78b1cf038704 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=843c5040 R01=0000000d R02=eb2f9000 R03=eb2f9018 R04=83cdd042 R05=843c5040 R06=80a62868 R07=83cdd042 R08=8282a2b8 R09=00000000 R10=00001d27 R11=dfa9da3c R12=00000002 R13=dfa9da30 R14=8295b2ec R15=80a62878 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000