last executing test programs: 23.098623258s ago: executing program 1 (id=713): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @random="fdf17fa5cdb5"}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000003a0600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 22.90030259s ago: executing program 1 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x20, 0xfc, 0x43}, {0x6, 0x0, 0x8}]}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x24000880) 22.462191135s ago: executing program 1 (id=715): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010044ae0000540012800c0001006d6163766c616e004400028006000200010000080800010001000000080006"], 0x84}}, 0x20008040) 22.391725439s ago: executing program 1 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 19.090496486s ago: executing program 1 (id=717): unshare(0x22020600) r0 = memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vv\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\xb0#\x15)\xf9\xe10\xc7\xb262\xb3\x00\x00\x00\x00\x00\x00\x00Nz\x1bu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"\x06\x00\x00\x00\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x06\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\xbe\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa67\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A,\xea\xb6\xa0\xeb)r\x1a\xce\x18(\x185LL\xbc\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\xff\b\xa9\x13\xe6ZQ\x84\xcd\x05O\xfe\x0e\xd2N\xfb\xb7\"5\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;m\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xd2L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}%s\xc8(\xc1$\x9dL,;\xd1\xf6gH\xe9\xee\xc2/D&\t\x8ac\xb1\xeb\xc0O\t\xe90\xccY\xb3e\x03\xa3\xf4y\xdc\xdc\xa5\xa6\xbc\xe3\xfbQ\x05\x80x\xd0\xe6\xb6\x83\x8fo\x99P-\xf5\x9d\x9a6\a\xb5\xa6\xd2\x14H\x9c\x1e\xb0\x15\xd7{;\xda\xc5#\x99\x94\xeaG~$\xba5\x14\xb2* \x13\xea\xca.p\xb4^U\')\x1b\x1c\xcc\xda\xb7/k\x1b\x02\xd0\x00/>\xa5\xfa[\xaf\xb116\\\xbd\xc0\xc1\x06\xa1\xed\xa51\xb1F\xaaT\xd0u\xf7\xc9\x16\x80\xe3\xa0\xad\x01\xf7\xcao\xfevH\xb7~\x9e\t\x1c\xa3\xa8o\xe6\xb3\xddl\xf4\xd7e\xc5\xf0\xb7 \xcd\x8f\xaa\xc0\x83S3\xbf=\x97\x82S\xf0\x945\x9f\xacm\xbby%\xc5\xd4-]\xd8\x01\xad\x9e\xa8S\v\xe5\xfd\x00\x00\xa9\x18\x83\xf7)\x17\x84\xa5\xc9\x8b\xb7\xc2\xc9\xc3\xb9\xf6\x00\xacUr\xf1\xac0\xc1\xb1L5\xa7hMA9`\xedMe\x13\x87\xeb\xbc\x1a\x9e\xc2\xc3\x8ek@4\xf1\x83\t\x17\xc25T\x87``0k\xaab\x02L\xf9joY\xd4\xa4\xe4\xb7\xbc7\xad\xceV\xa6/\xc4$\x83zx\f\xb8M6\x0eL\xbcM\xd8X\xc6?\xcb\x8f-[\xa9^ \xa4c\x1b\v\xa3;\xc1\xf8\xdd\x18\x03.\xfd\xe8\xdf\x9as\xe6\xf3X\x04o\xc9\xf2\xe9j}\xe8\x9b\xb8?pa\x0f\xbcG\x8f>\n\x12\x0etGq\xe06\xf8\xd4l>\x0fNO\\\rT\xcc\xbf\x96\x03\xe7\xe3\xbe\xfc\xc4i\x95\x96\xf3\x04\xf6\xa2Y)iNL\xca\xdci3\xadr+\tb\x9a\xdb+V\xe6\a\xa8\xbebs!hu\xb5\xaad\b\xb2t\xfcM\xe3\x1e\xb7z!\xeb\xe7\xadwF\xfb\x19\xe1\xa1\xd7\v4\xa9\xbc\xd1\xe89\xf7AuQ\xb3\x1f\x80\xebh\x9f\x99T\xb4', 0x4) fcntl$addseals(r0, 0x409, 0x1a) 17.100609079s ago: executing program 1 (id=718): socket(0x28, 0x5, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.860398125s ago: executing program 0 (id=734): add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffd) 1.507871864s ago: executing program 0 (id=735): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x67b}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 1.177956563s ago: executing program 0 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x4b, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40095}, 0x0) 520.07097ms ago: executing program 0 (id=737): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dbdbfe, {0x2, 0x0, 0x0, 0x0, 0x25}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008840) 319.056082ms ago: executing program 0 (id=738): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, &(0x7f0000000000)) 0s ago: executing program 0 (id=739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) kernel console output (not intermixed with test programs): ff0) [ 120.977761][ T4133] 5fa0: 00000002 0018562c ffffff9c 0018562c 00000002 00000000 [ 120.977808][ T4133] 5fc0: 00000002 0018562c 00000000 00000142 00000000 00000000 00006364 76b9c0bc [ 120.977832][ T4133] 5fe0: 00000000 76b99dd8 000d7d68 0012fd28 [ 120.977883][ T4133] r5:0018562c r4:00000002 [ 121.083926][ T31] audit: type=1400 audit(121.020:162): avc: denied { associate } for pid=4134 comm="syz.1.122" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.293166][ T31] audit: type=1400 audit(121.230:163): avc: denied { read } for pid=4139 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.017936][ T4153] fuse: Bad value for 'user_id' [ 123.018366][ T4153] fuse: Bad value for 'user_id' [ 125.774799][ T31] audit: type=1400 audit(125.710:164): avc: denied { listen } for pid=4163 comm="syz.0.132" lport=43460 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.872329][ T31] audit: type=1400 audit(125.810:165): avc: denied { accept } for pid=4163 comm="syz.0.132" lport=43460 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.880107][ T31] audit: type=1400 audit(125.820:166): avc: denied { setopt } for pid=4163 comm="syz.0.132" lport=43460 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.880773][ T4164] sctp: [Deprecated]: syz.0.132 (pid 4164) Use of int in maxseg socket option. [ 125.880773][ T4164] Use struct sctp_assoc_value instead [ 125.929785][ T4170] fuse: Bad value for 'user_id' [ 125.930005][ T4170] fuse: Bad value for 'user_id' [ 127.908010][ T2888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.067379][ T2888] usb 2-1: Using ep0 maxpacket: 32 [ 128.085283][ T2888] usb 2-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 128.085785][ T2888] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.085947][ T2888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 128.103823][ T2888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.104216][ T2888] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.107021][ T2888] usb 2-1: Manufacturer: syz [ 128.355959][ T2888] usb 2-1: USB disconnect, device number 2 [ 128.457141][ T4199] fuse: Bad value for 'fd' [ 131.119774][ T31] audit: type=1400 audit(131.060:167): avc: denied { ioctl } for pid=4208 comm="syz.1.142" path="socket:[2945]" dev="sockfs" ino=2945 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.121402][ T4209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4209 comm=syz.1.142 [ 132.610966][ T4215] fuse: Bad value for 'fd' [ 133.895226][ T31] audit: type=1400 audit(133.830:168): avc: denied { map } for pid=4222 comm="syz.1.147" path="socket:[2965]" dev="sockfs" ino=2965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.895977][ T31] audit: type=1400 audit(133.830:169): avc: denied { read } for pid=4222 comm="syz.1.147" path="socket:[2965]" dev="sockfs" ino=2965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.009864][ T4233] fuse: Bad value for 'fd' [ 134.141160][ T4237] Zero length message leads to an empty skb [ 134.426756][ T1459] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.587614][ T1459] usb 2-1: Using ep0 maxpacket: 8 [ 134.595441][ T1459] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 134.597297][ T1459] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.603769][ T1459] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.605150][ T1459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.607080][ T1459] usb 2-1: Product: 㧕唺⺡䧩㞗聝塮嘤훡꧰襶磡훧韓恑▧뤝⬽⿝Ԓ歓燩婆䉧䉬圭鼉⡔⬊䫹猘ᑡ襴猼⟇仁髢튗睠駜쌀沗꙲招ᴸ詌収쒞࿀⋽圻쯾叠ꉚ쬐 [ 134.608398][ T1459] usb 2-1: Manufacturer: з [ 134.608798][ T1459] usb 2-1: SerialNumber: ࠄ [ 134.836050][ T1459] usb 2-1: 0:2 : does not exist [ 134.848509][ T1459] usb 2-1: USB disconnect, device number 3 [ 134.946145][ T4267] fuse: Bad value for 'fd' [ 135.063735][ T31] audit: type=1400 audit(135.000:170): avc: denied { create } for pid=4270 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.388477][ T1459] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.591221][ T1459] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.591983][ T1459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.592356][ T1459] usb 2-1: Product: syz [ 135.592602][ T1459] usb 2-1: Manufacturer: syz [ 135.592817][ T1459] usb 2-1: SerialNumber: syz [ 136.124596][ T31] audit: type=1400 audit(136.060:171): avc: denied { block_suspend } for pid=4278 comm="syz.0.158" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.493334][ T4293] FAULT_INJECTION: forcing a failure. [ 137.493334][ T4293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.493884][ T4293] CPU: 0 UID: 0 PID: 4293 Comm: syz.0.161 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 137.493949][ T4293] Hardware name: ARM-Versatile Express [ 137.493973][ T4293] Call trace: [ 137.494019][ T4293] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 137.494136][ T4293] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 137.494160][ T4293] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 137.494221][ T4293] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 137.494306][ T4293] r5:84b45400 r4:82951710 [ 137.494330][ T4293] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 137.494395][ T4293] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 137.494482][ T4293] r8:76bc5f30 r7:00000000 r6:00000000 r5:eae51f68 r4:00000002 [ 137.494528][ T4293] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 137.494586][ T4293] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 137.494648][ T4293] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 137.494729][ T4293] r10:00000001 r9:80604138 r8:00000002 r7:eae51f68 r6:0000000f r5:76bc5f30 [ 137.494770][ T4293] r4:84b45400 r3:eae51e9f [ 137.494788][ T4293] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 137.494868][ T4293] r8:76bc5f30 r7:eae51f68 r6:84b45400 r5:0000000f r4:849a3540 [ 137.494892][ T4293] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 137.494968][ T4293] r10:00000003 r9:84b45400 r8:8020029c r7:00000000 r6:00000000 r5:849a3540 [ 137.495001][ T4293] r4:849a3543 [ 137.495062][ T4293] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 137.495139][ T4293] r7:00000003 r6:00000004 r5:76bc5f30 r4:0000000f [ 137.495167][ T4293] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 137.495220][ T4293] Exception stack(0xeae51fa8 to 0xeae51ff0) [ 137.495266][ T4293] 1fa0: 0000000f 76bc5f30 00000004 76bc5f30 0000000f 00000000 [ 137.495329][ T4293] 1fc0: 0000000f 76bc5f30 00000004 00000003 002d0000 00000000 00006364 76bc60bc [ 137.495373][ T4293] 1fe0: 00000158 76bc5ed0 000d7d68 0012fe04 [ 140.249309][ T31] audit: type=1400 audit(140.190:172): avc: denied { create } for pid=4298 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.255956][ T31] audit: type=1400 audit(140.190:173): avc: denied { bind } for pid=4298 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.261247][ T31] audit: type=1400 audit(140.200:174): avc: denied { getopt } for pid=4298 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.545792][ T4305] FAULT_INJECTION: forcing a failure. [ 140.545792][ T4305] name failslab, interval 1, probability 0, space 0, times 0 [ 140.546097][ T4305] CPU: 0 UID: 0 PID: 4305 Comm: syz.0.166 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 140.546148][ T4305] Hardware name: ARM-Versatile Express [ 140.546162][ T4305] Call trace: [ 140.546185][ T4305] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 140.546353][ T4305] r7:00000d40 r6:00000000 r5:60000013 r4:82257d0c [ 140.546369][ T4305] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 140.546409][ T4305] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 140.546443][ T4305] r5:84b40c00 r4:8291bcc0 [ 140.546451][ T4305] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 140.546484][ T4305] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 140.546527][ T4305] r8:84b40c00 r7:00000d40 r6:849a3928 r5:00000027 r4:83001240 [ 140.546537][ T4305] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 140.546601][ T4305] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 140.546647][ T4305] r10:00000fff r9:848de400 r8:00000000 r7:85022440 r6:849a3928 r5:84ca8ffc [ 140.546658][ T4305] r4:84ca8fe0 [ 140.546666][ T4305] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 140.546707][ T4305] r9:848de400 r8:00000000 r7:85022440 r6:849a3928 r5:00001000 r4:84ca8fe1 [ 140.546716][ T4305] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 140.546750][ T4305] r5:00001000 r4:84ca8000 [ 140.546758][ T4305] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 140.546800][ T4305] r10:84b40c00 r9:00000000 r8:849a3900 r7:00005450 r6:00000004 r5:81cd56c4 [ 140.546812][ T4305] r4:849a3928 r3:826c0240 [ 140.546820][ T4305] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 140.546861][ T4305] r9:00000003 r8:849a3900 r7:00000000 r6:00000000 r5:00005450 r4:849a3900 [ 140.546871][ T4305] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 140.546904][ T4305] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 140.546941][ T4305] r7:00000000 r6:849a3901 r5:00000000 r4:00005450 [ 140.546950][ T4305] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 140.546976][ T4305] Exception stack(0xeb23dfa8 to 0xeb23dff0) [ 140.547000][ T4305] dfa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 140.547020][ T4305] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bc60bc [ 140.547034][ T4305] dfe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 140.547055][ T4305] r10:00000036 r9:84b40c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 140.547064][ T4305] r4:00000000 [ 140.558364][ T4305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.961778][ T31] audit: type=1400 audit(140.900:175): avc: denied { create } for pid=4313 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.964028][ T31] audit: type=1400 audit(140.900:176): avc: denied { bind } for pid=4313 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.973432][ T31] audit: type=1400 audit(140.910:177): avc: denied { accept } for pid=4313 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.640396][ T31] audit: type=1326 audit(142.580:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.0.172" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 144.851967][ T4326] FAULT_INJECTION: forcing a failure. [ 144.851967][ T4326] name failslab, interval 1, probability 0, space 0, times 0 [ 144.852563][ T4326] CPU: 0 UID: 0 PID: 4326 Comm: syz.0.174 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 144.852652][ T4326] Hardware name: ARM-Versatile Express [ 144.852688][ T4326] Call trace: [ 144.852729][ T4326] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 144.852843][ T4326] r7:00000c40 r6:00000000 r5:60000013 r4:82257d0c [ 144.852860][ T4326] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 144.852916][ T4326] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 144.852996][ T4326] r5:84b44800 r4:8291bcc0 [ 144.853017][ T4326] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 144.853079][ T4326] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 144.853175][ T4326] r8:84b44800 r7:00000c40 r6:85620628 r5:00001000 r4:830016c0 [ 144.853226][ T4326] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 144.853298][ T4326] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 144.853377][ T4326] r10:84b44800 r9:8309fc00 r8:00000000 r7:85057990 r6:85620628 r5:00001000 [ 144.853399][ T4326] r4:00000000 [ 144.853438][ T4326] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 144.853523][ T4326] r10:84b44800 r9:00000000 r8:85620600 r7:c020aa00 r6:00000004 r5:81cd56c4 [ 144.853547][ T4326] r4:85620628 r3:826c0240 [ 144.853564][ T4326] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 144.853642][ T4326] r9:00000004 r8:85620600 r7:00000000 r6:00000000 r5:c020aa00 r4:85620600 [ 144.853662][ T4326] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 144.853722][ T4326] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 144.853790][ T4326] r7:00000000 r6:85620601 r5:00000000 r4:c020aa00 [ 144.853808][ T4326] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 144.853860][ T4326] Exception stack(0xeb241fa8 to 0xeb241ff0) [ 144.853905][ T4326] 1fa0: 00000000 00000000 00000004 c020aa00 00000000 00000000 [ 144.853967][ T4326] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bc60bc [ 144.854020][ T4326] 1fe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 144.854064][ T4326] r10:00000036 r9:84b44800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 144.854087][ T4326] r4:00000000 [ 144.854256][ T4326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.178744][ T47] usb 2-1: USB disconnect, device number 4 [ 145.321854][ T4336] fuse: Invalid rootmode [ 146.766806][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.926763][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 146.933969][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.943780][ T23] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 146.944673][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.945249][ T23] usb 2-1: Product: syz [ 146.945615][ T23] usb 2-1: Manufacturer: syz [ 146.946014][ T23] usb 2-1: SerialNumber: syz [ 146.949719][ T23] usb 2-1: config 0 descriptor?? [ 148.207284][ T23] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 148.207988][ T23] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 148.404290][ T4367] fuse: Invalid rootmode [ 150.900275][ T4375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.903775][ T4375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.910345][ T31] audit: type=1400 audit(150.850:179): avc: denied { setopt } for pid=4342 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.598750][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 152.727520][ T23] usb 1-1: device descriptor read/64, error -71 [ 152.967685][ T23] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 153.097241][ T23] usb 1-1: device descriptor read/64, error -71 [ 153.207980][ T23] usb usb1-port1: attempt power cycle [ 153.546685][ T23] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 153.568390][ T23] usb 1-1: device descriptor read/8, error -71 [ 153.806926][ T23] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 153.828607][ T23] usb 1-1: device descriptor read/8, error -71 [ 153.937438][ T23] usb usb1-port1: unable to enumerate USB device [ 161.070377][ T23] usb 2-1: USB disconnect, device number 5 [ 161.135918][ T4394] fuse: Unknown parameter '00000000000000000000' [ 162.767579][ T3779] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 162.943771][ T3779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.954888][ T3779] usb 1-1: not running at top speed; connect to a high speed hub [ 162.969922][ T3779] usb 1-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 162.971767][ T3779] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.973319][ T3779] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.998811][ T3779] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.000522][ T3779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.001491][ T3779] usb 1-1: Product: syz [ 163.003960][ T3779] usb 1-1: Manufacturer: syz [ 163.004934][ T3779] usb 1-1: SerialNumber: syz [ 163.279961][ T3779] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 163.280980][ T3779] cdc_ncm 1-1:1.0: bind() failure [ 163.288570][ T3779] usb 1-1: USB disconnect, device number 6 [ 163.703391][ T4422] fuse: Unknown parameter '00000000000000000000' [ 163.814818][ T4424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.031354][ T31] audit: type=1400 audit(163.970:180): avc: denied { create } for pid=4429 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.099099][ T31] audit: type=1400 audit(164.040:181): avc: denied { ioctl } for pid=4429 comm="syz.0.195" path="socket:[5208]" dev="sockfs" ino=5208 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.104054][ T31] audit: type=1400 audit(164.040:182): avc: denied { create } for pid=4429 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.201652][ T31] audit: type=1400 audit(164.140:183): avc: denied { setopt } for pid=4429 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.271592][ T4433] fuse: Unknown parameter '00000000000000000000' [ 164.984979][ T4439] FAULT_INJECTION: forcing a failure. [ 164.984979][ T4439] name failslab, interval 1, probability 0, space 0, times 0 [ 164.988126][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.0.198 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 164.988257][ T4439] Hardware name: ARM-Versatile Express [ 164.988288][ T4439] Call trace: [ 164.988369][ T4439] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 164.988504][ T4439] r7:84b42400 r6:00000000 r5:60000013 r4:82257d0c [ 164.988527][ T4439] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 164.988591][ T4439] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 164.988658][ T4439] r5:84b42400 r4:8291bcc0 [ 164.988678][ T4439] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 164.988747][ T4439] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 164.988834][ T4439] r8:00000000 r7:84b42400 r6:00000cc0 r5:200001c0 r4:830a8a80 [ 164.988858][ T4439] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 164.988923][ T4439] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80560b4c>] (getname_flags.part.0+0x28/0x18c) [ 164.989110][ T4439] r10:00000008 r9:84b42400 r8:8020029c r7:00000000 r6:8245d848 r5:200001c0 [ 164.989138][ T4439] r4:200001c0 [ 164.989157][ T4439] [<80560b24>] (getname_flags.part.0) from [<80565c34>] (getname_flags+0x3c/0x50) [ 164.989248][ T4439] r9:84b42400 r8:8020029c r7:ffffff9c r6:eba79f58 r5:00000000 r4:200001c0 [ 164.989270][ T4439] [<80565bf8>] (getname_flags) from [<8054e734>] (do_sys_openat2+0x60/0xe0) [ 164.989337][ T4439] r5:200001c0 r4:00000000 [ 164.989359][ T4439] [<8054e6d4>] (do_sys_openat2) from [<8054ed8c>] (sys_creat+0x6c/0x90) [ 164.989427][ T4439] r7:00000008 r6:0012fee0 r5:00000000 r4:200001c0 [ 164.989448][ T4439] [<8054ed20>] (sys_creat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 164.989504][ T4439] Exception stack(0xeba79fa8 to 0xeba79ff0) [ 164.989548][ T4439] 9fa0: 00000000 00000000 200001c0 00000008 00000000 00000000 [ 164.989590][ T4439] 9fc0: 00000000 00000000 0012fee0 00000008 002d0000 00000000 00006364 76ba50bc [ 164.989622][ T4439] 9fe0: 76ba4ec0 76ba4eb0 0001939c 00131f30 [ 164.989649][ T4439] r4:00000000 [ 165.169026][ T4445] fuse: Unknown parameter 'user00000000000000000000' [ 167.944254][ T31] audit: type=1400 audit(167.880:184): avc: denied { ioctl } for pid=4456 comm="syz.1.205" path="socket:[4191]" dev="sockfs" ino=4191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.024444][ T31] audit: type=1400 audit(167.960:185): avc: denied { write } for pid=4456 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.030499][ T31] audit: type=1400 audit(167.970:186): avc: denied { read } for pid=4456 comm="syz.1.205" path="socket:[4191]" dev="sockfs" ino=4191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.124609][ T4462] fuse: Unknown parameter 'user00000000000000000000' [ 169.694615][ T4476] fuse: Unknown parameter 'user00000000000000000000' [ 169.793164][ T4480] FAULT_INJECTION: forcing a failure. [ 169.793164][ T4480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.794804][ T4480] CPU: 0 UID: 0 PID: 4480 Comm: syz.0.213 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 169.794880][ T4480] Hardware name: ARM-Versatile Express [ 169.794896][ T4480] Call trace: [ 169.794921][ T4480] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 169.795003][ T4480] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 169.795014][ T4480] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 169.795046][ T4480] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 169.795080][ T4480] r5:84b46000 r4:82951710 [ 169.795089][ T4480] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 169.795124][ T4480] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 169.795173][ T4480] r8:76bc5f30 r7:00000000 r6:00000000 r5:ec50df68 r4:00000002 [ 169.795182][ T4480] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 169.795212][ T4480] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 169.795245][ T4480] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 169.795289][ T4480] r10:00000001 r9:80604138 r8:00000002 r7:ec50df68 r6:0000000f r5:76bc5f30 [ 169.795304][ T4480] r4:84b46000 r3:ec50de9f [ 169.795312][ T4480] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 169.795353][ T4480] r8:76bc5f30 r7:ec50df68 r6:84b46000 r5:0000000f r4:85670f00 [ 169.795362][ T4480] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 169.795402][ T4480] r10:00000003 r9:84b46000 r8:8020029c r7:00000000 r6:00000000 r5:85670f00 [ 169.795414][ T4480] r4:85670f03 [ 169.795422][ T4480] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 169.795458][ T4480] r7:00000003 r6:00000004 r5:76bc5f30 r4:0000000f [ 169.795467][ T4480] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 169.795496][ T4480] Exception stack(0xec50dfa8 to 0xec50dff0) [ 169.795519][ T4480] dfa0: 0000000f 76bc5f30 00000004 76bc5f30 0000000f 00000000 [ 169.795540][ T4480] dfc0: 0000000f 76bc5f30 00000004 00000003 002d0000 00000000 00006364 76bc60bc [ 169.795555][ T4480] dfe0: 00000158 76bc5ed0 000d7d68 0012fe04 [ 171.452257][ T31] audit: type=1326 audit(171.390:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.0.214" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 173.895989][ T4494] fuse: Unknown parameter 'user_i00000000000000000000' [ 174.425516][ T4504] fuse: Unknown parameter 'user_i00000000000000000000' [ 174.727167][ T31] audit: type=1400 audit(174.660:188): avc: denied { ioctl } for pid=4508 comm="syz.1.224" path="socket:[4287]" dev="sockfs" ino=4287 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.732060][ T31] audit: type=1400 audit(174.670:189): avc: denied { setopt } for pid=4508 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.269475][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4515 comm=syz.0.226 [ 176.525840][ T4517] fuse: Unknown parameter 'user_i00000000000000000000' [ 177.615216][ T4527] fuse: Unknown parameter 'user_id00000000000000000000' [ 177.781509][ T31] audit: type=1400 audit(177.720:190): avc: denied { write } for pid=4530 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.794441][ T4531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1094 sclass=netlink_route_socket pid=4531 comm=syz.0.234 [ 178.033703][ T4539] fuse: Unknown parameter 'user_id00000000000000000000' [ 178.110005][ T31] audit: type=1400 audit(178.040:191): avc: denied { getopt } for pid=4540 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.558351][ T31] audit: type=1400 audit(178.480:192): avc: denied { write } for pid=4555 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.621013][ T4559] fuse: Unknown parameter 'user_id00000000000000000000' [ 178.758894][ T31] audit: type=1400 audit(178.700:193): avc: denied { shutdown } for pid=4555 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.761703][ T4556] FAULT_INJECTION: forcing a failure. [ 178.761703][ T4556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.762641][ T4556] CPU: 0 UID: 0 PID: 4556 Comm: syz.1.244 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 178.762730][ T4556] Hardware name: ARM-Versatile Express [ 178.762746][ T4556] Call trace: [ 178.762771][ T4556] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 178.762867][ T4556] r7:84810000 r6:00000000 r5:60000013 r4:82257d0c [ 178.762877][ T4556] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 178.762910][ T4556] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 178.762945][ T4556] r5:84b40000 r4:82951710 [ 178.762953][ T4556] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 178.763022][ T4556] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 178.763068][ T4556] r8:85670a80 r7:84810000 r6:20000900 r5:20000900 r4:82c1f8e4 [ 178.763078][ T4556] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 178.763108][ T4556] [<8095f694>] (should_fail_usercopy) from [<818eb7e4>] (vlan_ioctl_handler+0x3c/0x4a0) [ 178.763145][ T4556] [<818eb7a8>] (vlan_ioctl_handler) from [<8151a8d8>] (sock_ioctl+0x1f8/0x600) [ 178.763190][ T4556] r9:00000003 r8:85670a80 r7:837fd400 r6:84810000 r5:20000900 r4:82c1f8e4 [ 178.763234][ T4556] [<8151a6e0>] (sock_ioctl) from [<8056b418>] (sys_ioctl+0x138/0xd84) [ 178.763302][ T4556] r9:00000003 r8:85670a80 r7:20000900 r6:85670a81 r5:00000000 r4:00008982 [ 178.763315][ T4556] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 178.763350][ T4556] Exception stack(0xec585fa8 to 0xec585ff0) [ 178.763374][ T4556] 5fa0: 00000000 00000000 00000003 00008982 20000900 00000000 [ 178.763395][ T4556] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b9c0bc [ 178.763412][ T4556] 5fe0: 76b9bec0 76b9beb0 0001939c 00131f30 [ 178.763436][ T4556] r10:00000036 r9:84b40000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 178.763448][ T4556] r4:00000000 [ 179.152352][ T4576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4576 comm=syz.0.252 [ 179.397538][ T2888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.578404][ T2888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.579013][ T2888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.579558][ T2888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.579721][ T2888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.579818][ T2888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.589370][ T2888] usb 1-1: config 0 descriptor?? [ 179.895714][ T4576] fuse: Bad value for 'fd' [ 180.155211][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.155791][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.155944][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.156075][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.156200][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.168006][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.168559][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.168904][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.169052][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.169184][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.169324][ T2888] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 180.171786][ T2888] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 180.192141][ T2888] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 181.661544][ T31] audit: type=1400 audit(181.600:194): avc: denied { name_bind } for pid=4596 comm="syz.0.254" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 181.663873][ T31] audit: type=1400 audit(181.600:195): avc: denied { node_bind } for pid=4596 comm="syz.0.254" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 182.241721][ T2888] usb 1-1: USB disconnect, device number 7 [ 182.722018][ T4618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4618 comm=syz.1.258 [ 185.851884][ T4624] FAULT_INJECTION: forcing a failure. [ 185.851884][ T4624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.852293][ T4624] CPU: 1 UID: 0 PID: 4624 Comm: syz.0.259 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 185.852353][ T4624] Hardware name: ARM-Versatile Express [ 185.852367][ T4624] Call trace: [ 185.852408][ T4624] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 185.852799][ T4624] r7:ecf91e20 r6:00000000 r5:60000013 r4:82257d0c [ 185.852810][ T4624] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 185.852839][ T4624] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 185.852869][ T4624] r5:84b43000 r4:82951710 [ 185.852876][ T4624] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 185.852909][ T4624] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 185.852943][ T4624] r8:00004000 r7:ecf91e20 r6:200027c0 r5:00000000 r4:ecf91f20 [ 185.852951][ T4624] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 185.853020][ T4624] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 185.853092][ T4624] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 185.853128][ T4624] r8:00004000 r7:00000000 r6:83611180 r5:ecf91f20 r4:ecf91e64 [ 185.853158][ T4624] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 185.853215][ T4624] r10:00000128 r9:84b43000 r8:8562e9c0 r7:00004000 r6:200027c0 r5:8562e9c1 [ 185.853251][ T4624] r4:00000004 [ 185.853282][ T4624] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 185.853317][ T4624] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 185.853324][ T4624] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 185.853362][ T4624] Exception stack(0xecf91fa8 to 0xecf91ff0) [ 185.853411][ T4624] 1fa0: 00000000 00000000 00000004 200027c0 00004000 00000000 [ 185.853431][ T4624] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 185.853444][ T4624] 1fe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 186.051105][ T31] audit: type=1400 audit(185.990:196): avc: denied { setattr } for pid=4627 comm="syz.0.261" name="SMC" dev="sockfs" ino=5523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.128193][ T31] audit: type=1400 audit(186.070:197): avc: denied { getopt } for pid=4627 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.112789][ T31] audit: type=1400 audit(189.050:198): avc: denied { setopt } for pid=4646 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.305281][ T31] audit: type=1400 audit(189.240:199): avc: denied { ioctl } for pid=4656 comm="syz.0.269" path="socket:[4480]" dev="sockfs" ino=4480 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.313003][ T31] audit: type=1400 audit(189.250:200): avc: denied { accept } for pid=4656 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 189.578342][ T4663] FAULT_INJECTION: forcing a failure. [ 189.578342][ T4663] name failslab, interval 1, probability 0, space 0, times 0 [ 189.580696][ T4663] CPU: 0 UID: 0 PID: 4663 Comm: syz.0.272 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 189.580827][ T4663] Hardware name: ARM-Versatile Express [ 189.580850][ T4663] Call trace: [ 189.580885][ T4663] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 189.581016][ T4663] r7:84b44800 r6:00000000 r5:60000013 r4:82257d0c [ 189.581033][ T4663] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 189.581084][ T4663] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 189.581137][ T4663] r5:84b44800 r4:8291bcc0 [ 189.581150][ T4663] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 189.581203][ T4663] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 189.581273][ T4663] r8:00000000 r7:84b44800 r6:00000cc0 r5:ffffffff r4:830ad9c0 [ 189.581289][ T4663] [<80525620>] (should_failslab) from [<80509a90>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 189.581340][ T4663] [<80509a40>] (kmem_cache_alloc_node_noprof) from [<81526ff8>] (__alloc_skb+0x138/0x160) [ 189.581407][ T4663] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830ad9c0 r5:ffffffff [ 189.581425][ T4663] r4:82806040 [ 189.581438][ T4663] [<81526ec0>] (__alloc_skb) from [<81644d3c>] (netlink_alloc_large_skb+0x88/0xa0) [ 189.581507][ T4663] r8:00000000 r7:85706800 r6:00000014 r5:837fea00 r4:00000140 [ 189.581522][ T4663] [<81644cb4>] (netlink_alloc_large_skb) from [<81645360>] (netlink_sendmsg+0x134/0x444) [ 189.581576][ T4663] r5:837fea00 r4:ecef5f20 [ 189.581590][ T4663] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 189.581655][ T4663] r10:00000000 r9:ecef5dc4 r8:ecef5dc4 r7:00000000 r6:837fea00 r5:ecef5f20 [ 189.581673][ T4663] r4:00000000 [ 189.581687][ T4663] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 189.581740][ T4663] r7:00000000 r6:837fea00 r5:04000080 r4:ecef5f20 [ 189.581754][ T4663] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 189.581814][ T4663] r10:ecef5e24 r9:20000180 r8:04000080 r7:00000000 r6:837fea00 r5:ecef5f20 [ 189.581831][ T4663] r4:00000000 [ 189.581844][ T4663] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 189.581905][ T4663] r10:00000128 r9:84b44800 r8:85670b40 r7:04000080 r6:20000180 r5:85670b41 [ 189.581922][ T4663] r4:00000004 [ 189.581935][ T4663] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 189.581993][ T4663] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 189.582006][ T4663] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 189.582051][ T4663] Exception stack(0xecef5fa8 to 0xecef5ff0) [ 189.582084][ T4663] 5fa0: 00000000 00000000 00000004 20000180 04000080 00000000 [ 189.582116][ T4663] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 189.582140][ T4663] 5fe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 190.209313][ T4666] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 190.213641][ T31] audit: type=1400 audit(190.150:201): avc: denied { relabelto } for pid=4664 comm="syz.0.273" name=".log" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 190.215386][ T31] audit: type=1400 audit(190.150:202): avc: denied { associate } for pid=4664 comm="syz.0.273" name=".log" dev="tmpfs" ino=822 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0" [ 190.719899][ T31] audit: type=1400 audit(190.660:203): avc: denied { unlink } for pid=3100 comm="syz-executor" name=".log" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 191.431089][ T4685] fuse: Bad value for 'fd' [ 193.719792][ T4693] fuse: Unknown parameter 'fd0x0000000000000004' [ 194.219973][ T31] audit: type=1400 audit(194.160:204): avc: denied { write } for pid=4698 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.224755][ T4699] FAULT_INJECTION: forcing a failure. [ 194.224755][ T4699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.225061][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: syz.0.285 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 194.225153][ T4699] Hardware name: ARM-Versatile Express [ 194.225169][ T4699] Call trace: [ 194.225198][ T4699] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 194.225322][ T4699] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 194.225333][ T4699] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 194.225368][ T4699] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 194.225405][ T4699] r5:84b40000 r4:82951710 [ 194.225414][ T4699] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 194.225451][ T4699] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 194.225493][ T4699] r8:ed3b9eb8 r7:00000000 r6:00000001 r5:76bc5f30 r4:00000001 [ 194.225502][ T4699] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 194.225557][ T4699] [<8095f694>] (should_fail_usercopy) from [<808b7810>] (kstrtouint_from_user+0x54/0x13c) [ 194.225668][ T4699] [<808b77bc>] (kstrtouint_from_user) from [<80605630>] (proc_fail_nth_write+0x40/0xe8) [ 194.225831][ T4699] r8:ed3b9f68 r7:84b40000 r6:00000001 r5:8562ed80 r4:00000001 [ 194.226255][ T4699] [<806055f0>] (proc_fail_nth_write) from [<80552030>] (vfs_write+0xac/0x448) [ 194.226401][ T4699] r5:8562ed80 r4:806055f0 [ 194.226468][ T4699] [<80551f84>] (vfs_write) from [<80552538>] (ksys_write+0x74/0xe4) [ 194.226544][ T4699] r10:00000004 r9:84b40000 r8:8020029c r7:00000000 r6:00000002 r5:8562ed80 [ 194.226597][ T4699] r4:8562ed83 [ 194.226676][ T4699] [<805524c4>] (ksys_write) from [<805525b8>] (sys_write+0x10/0x14) [ 194.226792][ T4699] r7:00000004 r6:00000005 r5:76bc5f30 r4:00000001 [ 194.226922][ T4699] [<805525a8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 194.227179][ T4699] Exception stack(0xed3b9fa8 to 0xed3b9ff0) [ 194.227366][ T4699] 9fa0: 00000001 76bc5f30 00000005 76bc5f30 00000001 00000000 [ 194.227412][ T4699] 9fc0: 00000001 76bc5f30 00000005 00000004 002d0000 00000000 00006364 76bc60bc [ 194.227430][ T4699] 9fe0: 00000158 76bc5ed0 000d7d68 0012fecc [ 194.411258][ T4709] fuse: Unknown parameter 'fd0x0000000000000004' [ 194.860406][ T4719] fuse: Unknown parameter 'fd0x0000000000000004' [ 195.810514][ T31] audit: type=1400 audit(195.750:205): avc: denied { create } for pid=4727 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.156984][ T3046] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.323625][ T3046] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 196.324520][ T3046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.325174][ T3046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.325757][ T3046] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.329892][ T3046] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 196.330524][ T3046] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 196.331086][ T3046] usb 2-1: Manufacturer: syz [ 196.338947][ T3046] usb 2-1: config 0 descriptor?? [ 196.770361][ T3046] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 196.777751][ T3046] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 196.797363][ T3046] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 196.983137][ T4733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.983803][ T4733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.986878][ T4733] capability: warning: `syz.1.297' uses 32-bit capabilities (legacy support in use) [ 197.481677][ T4754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4754 comm=syz.0.300 [ 197.559794][ T4758] FAULT_INJECTION: forcing a failure. [ 197.559794][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 197.563562][ T4758] CPU: 0 UID: 0 PID: 4758 Comm: syz.0.301 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 197.563698][ T4758] Hardware name: ARM-Versatile Express [ 197.563728][ T4758] Call trace: [ 197.563793][ T4758] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 197.563921][ T4758] r7:84b46000 r6:00000000 r5:60000013 r4:82257d0c [ 197.563945][ T4758] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 197.564069][ T4758] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 197.564133][ T4758] r5:84b46000 r4:8291bcc0 [ 197.564145][ T4758] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 197.564238][ T4758] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 197.564361][ T4758] r8:00000000 r7:84b46000 r6:00000820 r5:849a4240 r4:830ad9c0 [ 197.564386][ T4758] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 197.564436][ T4758] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<8152d64c>] (skb_clone+0x60/0x1c8) [ 197.564555][ T4758] r10:000001a2 r9:84c01480 r8:8495ac00 r7:849a4240 r6:84bcaec0 r5:849a4240 [ 197.564636][ T4758] r4:00000820 [ 197.564655][ T4758] [<8152d5ec>] (skb_clone) from [<81642018>] (__netlink_deliver_tap+0x1f4/0x28c) [ 197.564713][ T4758] r5:00000010 r4:84bca800 [ 197.564721][ T4758] [<81641e24>] (__netlink_deliver_tap) from [<81645210>] (netlink_unicast+0x280/0x29c) [ 197.564841][ T4758] r10:00000000 r9:00000000 r8:84f70000 r7:849a4240 r6:84c01480 r5:00000010 [ 197.564892][ T4758] r4:8495ac00 [ 197.564908][ T4758] [<81644f90>] (netlink_unicast) from [<816453f8>] (netlink_sendmsg+0x1cc/0x444) [ 197.564966][ T4758] r9:00000000 r8:00000000 r7:83ce4c00 r6:00000010 r5:849a4240 r4:ed88df20 [ 197.564975][ T4758] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 197.565125][ T4758] r10:00000000 r9:ed88ddc4 r8:ed88ddc4 r7:00000000 r6:850d7680 r5:ed88df20 [ 197.565162][ T4758] r4:00000000 [ 197.565178][ T4758] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 197.565256][ T4758] r7:00000000 r6:850d7680 r5:00000000 r4:ed88df20 [ 197.565322][ T4758] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 197.565450][ T4758] r10:ed88de24 r9:200007c0 r8:00000000 r7:00000000 r6:850d7680 r5:ed88df20 [ 197.565474][ T4758] r4:00000000 [ 197.565490][ T4758] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 197.565541][ T4758] r10:00000128 r9:84b46000 r8:849a3b40 r7:00000000 r6:200007c0 r5:849a3b41 [ 197.565593][ T4758] r4:00000003 [ 197.565638][ T4758] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 197.565733][ T4758] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 197.565750][ T4758] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 197.565778][ T4758] Exception stack(0xed88dfa8 to 0xed88dff0) [ 197.565847][ T4758] dfa0: 00000000 00000000 00000003 200007c0 00000000 00000000 [ 197.565942][ T4758] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 197.565969][ T4758] dfe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 197.628067][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.630124][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.877160][ T2888] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 199.017236][ T2888] usb 2-1: device descriptor read/64, error -71 [ 199.266911][ T2888] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 199.416932][ T2888] usb 2-1: device descriptor read/64, error -71 [ 199.677224][ T2888] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 199.700193][ T2888] usb 2-1: device descriptor read/8, error -71 [ 199.745018][ T4763] FAULT_INJECTION: forcing a failure. [ 199.745018][ T4763] name failslab, interval 1, probability 0, space 0, times 0 [ 199.746004][ T4763] CPU: 0 UID: 0 PID: 4763 Comm: syz.0.302 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 199.746055][ T4763] Hardware name: ARM-Versatile Express [ 199.746069][ T4763] Call trace: [ 199.746090][ T4763] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 199.746158][ T4763] r7:84b46c00 r6:00000000 r5:60000013 r4:82257d0c [ 199.746168][ T4763] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 199.746196][ T4763] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 199.746249][ T4763] r5:84b46c00 r4:8291bcc0 [ 199.746260][ T4763] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 199.746294][ T4763] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 199.746332][ T4763] r8:00000000 r7:84b46c00 r6:00000820 r5:849accc0 r4:830ad9c0 [ 199.746340][ T4763] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 199.746369][ T4763] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<8152d64c>] (skb_clone+0x60/0x1c8) [ 199.746407][ T4763] r10:849accc0 r9:00000000 r8:00000000 r7:00000001 r6:84c10540 r5:849accc0 [ 199.746417][ T4763] r4:00000820 [ 199.746425][ T4763] [<8152d5ec>] (skb_clone) from [<818c6da0>] (can_send+0xe8/0x388) [ 199.746456][ T4763] r5:00000010 r4:849accc0 [ 199.746473][ T4763] [<818c6cb8>] (can_send) from [<818d9828>] (isotp_sendmsg+0x3f4/0x820) [ 199.746510][ T4763] r9:00000000 r8:00000000 r7:00000000 r6:84bc0000 r5:84bc2000 r4:84bc0280 [ 199.746518][ T4763] [<818d9434>] (isotp_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 199.746555][ T4763] r10:00000000 r9:ed8dddc4 r8:ed8dddc4 r7:00000000 r6:83611180 r5:ed8ddf20 [ 199.746564][ T4763] r4:00000000 [ 199.746572][ T4763] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 199.746601][ T4763] r7:00000000 r6:83611180 r5:00000800 r4:ed8ddf20 [ 199.746610][ T4763] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 199.746643][ T4763] r10:ed8dde24 r9:20000140 r8:00000800 r7:00000000 r6:83611180 r5:ed8ddf20 [ 199.746652][ T4763] r4:00000000 [ 199.746659][ T4763] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 199.746693][ T4763] r10:00000128 r9:84b46c00 r8:8562e780 r7:00000800 r6:20000140 r5:8562e781 [ 199.746702][ T4763] r4:00000003 [ 199.746709][ T4763] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 199.746740][ T4763] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 199.746749][ T4763] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 199.746774][ T4763] Exception stack(0xed8ddfa8 to 0xed8ddff0) [ 199.746795][ T4763] dfa0: 00000000 00000000 00000003 20000140 00000800 00000000 [ 199.746812][ T4763] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 199.746826][ T4763] dfe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 199.757677][ T4763] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 199.952480][ T2888] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 199.980636][ T2888] usb 2-1: device descriptor read/8, error -71 [ 200.098687][ T2889] usb 2-1: USB disconnect, device number 6 [ 200.246962][ T2889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.376923][ T2889] usb 2-1: device descriptor read/64, error -71 [ 200.637109][ T2889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.767244][ T2889] usb 2-1: device descriptor read/64, error -71 [ 200.877416][ T2889] usb usb2-port1: attempt power cycle [ 201.217343][ T2889] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.239854][ T2889] usb 2-1: device descriptor read/8, error -71 [ 201.477423][ T2889] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.509643][ T2889] usb 2-1: device descriptor read/8, error -71 [ 201.618786][ T2889] usb usb2-port1: unable to enumerate USB device [ 202.984532][ T4801] 8021q: VLANs not supported on ip6gre0 [ 208.403944][ T4821] FAULT_INJECTION: forcing a failure. [ 208.403944][ T4821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.405607][ T4821] CPU: 0 UID: 0 PID: 4821 Comm: syz.0.316 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 208.405730][ T4821] Hardware name: ARM-Versatile Express [ 208.405764][ T4821] Call trace: [ 208.405824][ T4821] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 208.405957][ T4821] r7:eda6de20 r6:00000000 r5:60000013 r4:82257d0c [ 208.405981][ T4821] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 208.406047][ T4821] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 208.406115][ T4821] r5:84b43000 r4:82951710 [ 208.406135][ T4821] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 208.406203][ T4821] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 208.406352][ T4821] r8:00040004 r7:eda6de20 r6:20000680 r5:00000000 r4:eda6df20 [ 208.406378][ T4821] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 208.406444][ T4821] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 208.406516][ T4821] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 208.406599][ T4821] r8:00040004 r7:00000000 r6:850d6780 r5:eda6df20 r4:eda6de64 [ 208.406618][ T4821] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 208.406697][ T4821] r10:00000128 r9:84b43000 r8:849a30c0 r7:00040004 r6:20000680 r5:849a30c1 [ 208.406721][ T4821] r4:00000003 [ 208.406767][ T4821] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 208.406842][ T4821] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 208.406861][ T4821] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 208.406917][ T4821] Exception stack(0xeda6dfa8 to 0xeda6dff0) [ 208.406964][ T4821] dfa0: 00000000 00000000 00000003 20000680 00040004 00000000 [ 208.407005][ T4821] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 208.407034][ T4821] dfe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 211.205593][ T4841] FAULT_INJECTION: forcing a failure. [ 211.205593][ T4841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.206140][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.1.321 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 211.206210][ T4841] Hardware name: ARM-Versatile Express [ 211.206236][ T4841] Call trace: [ 211.206280][ T4841] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 211.206421][ T4841] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 211.206477][ T4841] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 211.206567][ T4841] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 211.206635][ T4841] r5:84f0a400 r4:82951710 [ 211.206653][ T4841] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 211.206718][ T4841] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 211.206911][ T4841] r8:76b9bf30 r7:00000000 r6:00000000 r5:ed689f68 r4:00000002 [ 211.206974][ T4841] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 211.207082][ T4841] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 211.207301][ T4841] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 211.207456][ T4841] r10:00000001 r9:80604138 r8:00000002 r7:ed689f68 r6:0000000f r5:76b9bf30 [ 211.207542][ T4841] r4:84f0a400 r3:ed689e9f [ 211.207685][ T4841] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 211.207829][ T4841] r8:76b9bf30 r7:ed689f68 r6:84f0a400 r5:0000000f r4:8562e3c0 [ 211.207854][ T4841] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 211.207972][ T4841] r10:00000003 r9:84f0a400 r8:8020029c r7:00000000 r6:00000000 r5:8562e3c0 [ 211.208030][ T4841] r4:8562e3c3 [ 211.208064][ T4841] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 211.208179][ T4841] r7:00000003 r6:00000003 r5:76b9bf30 r4:0000000f [ 211.208265][ T4841] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 211.208400][ T4841] Exception stack(0xed689fa8 to 0xed689ff0) [ 211.208490][ T4841] 9fa0: 0000000f 76b9bf30 00000003 76b9bf30 0000000f 00000000 [ 211.208574][ T4841] 9fc0: 0000000f 76b9bf30 00000003 00000003 002d0000 00000000 00006364 76b9c0bc [ 211.208643][ T4841] 9fe0: 00000158 76b9bed0 000d7d68 0012fe04 [ 211.478585][ T31] audit: type=1400 audit(211.420:206): avc: denied { read } for pid=4842 comm="syz.0.322" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.485012][ T31] audit: type=1400 audit(211.420:207): avc: denied { open } for pid=4842 comm="syz.0.322" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.396034][ T31] audit: type=1400 audit(214.310:208): avc: denied { ioctl } for pid=4861 comm="syz.1.328" path="socket:[4795]" dev="sockfs" ino=4795 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.541258][ T31] audit: type=1400 audit(214.480:209): avc: denied { mount } for pid=4861 comm="syz.1.328" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 214.632732][ T31] audit: type=1400 audit(214.570:210): avc: denied { create } for pid=4869 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.639956][ T31] audit: type=1400 audit(214.580:211): avc: denied { ioctl } for pid=4869 comm="syz.0.330" path="socket:[4807]" dev="sockfs" ino=4807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 219.888629][ T31] audit: type=1326 audit(219.830:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.0.338" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 225.471419][ T31] audit: type=1326 audit(225.410:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.1.346" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 228.137300][ T31] audit: type=1400 audit(228.070:214): avc: denied { setattr } for pid=4932 comm="syz.1.353" path="socket:[4947]" dev="sockfs" ino=4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.082139][ T31] audit: type=1326 audit(229.020:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.0.352" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 230.387433][ T31] audit: type=1400 audit(230.330:216): avc: denied { execute } for pid=4966 comm="syz.1.363" path="/156/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.548737][ T4986] FAULT_INJECTION: forcing a failure. [ 232.548737][ T4986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.551446][ T4986] CPU: 0 UID: 0 PID: 4986 Comm: syz.1.365 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 232.551581][ T4986] Hardware name: ARM-Versatile Express [ 232.551611][ T4986] Call trace: [ 232.551655][ T4986] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 232.551784][ T4986] r7:854dd644 r6:00000000 r5:60000013 r4:82257d0c [ 232.551806][ T4986] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 232.551868][ T4986] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 232.551932][ T4986] r5:84f0b000 r4:82951710 [ 232.551951][ T4986] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 232.552019][ T4986] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 232.552122][ T4986] r8:0000001c r7:854dd644 r6:ffffffa4 r5:ee09dec4 r4:20000040 [ 232.552143][ T4986] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 232.552201][ T4986] [<8095f694>] (should_fail_usercopy) from [<8194f320>] (copy_from_sockptr_offset.constprop.0+0x48/0xd4) [ 232.552272][ T4986] [<8194f2d8>] (copy_from_sockptr_offset.constprop.0) from [<8194f49c>] (smc_setsockopt+0xf0/0x3cc) [ 232.552383][ T4986] r6:ffffffa4 r5:854dd200 r4:00000064 [ 232.552403][ T4986] [<8194f3b0>] (smc_setsockopt) from [<81518900>] (do_sock_setsockopt+0xb0/0x17c) [ 232.552491][ T4986] r9:84f0b000 r8:00000000 r7:8562e180 r6:83610c80 r5:00000000 r4:8194f3ac [ 232.552515][ T4986] [<81518850>] (do_sock_setsockopt) from [<8151bdbc>] (__sys_setsockopt+0x7c/0xb4) [ 232.552580][ T4986] r6:8562e181 r5:00000064 r4:00000084 [ 232.552600][ T4986] [<8151bd40>] (__sys_setsockopt) from [<8151be10>] (sys_setsockopt+0x1c/0x24) [ 232.552674][ T4986] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:0000001c [ 232.552692][ T4986] [<8151bdf4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 232.552748][ T4986] Exception stack(0xee09dfa8 to 0xee09dff0) [ 232.552793][ T4986] dfa0: 0000001c 00000000 00000004 00000084 00000064 20000040 [ 232.552835][ T4986] dfc0: 0000001c 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b180bc [ 232.552865][ T4986] dfe0: 76b17ec0 76b17eb0 0001939c 00131f30 [ 233.735206][ T31] audit: type=1400 audit(233.670:217): avc: denied { append } for pid=4988 comm="syz.1.369" name="nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.439311][ T31] audit: type=1326 audit(235.380:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.1.370" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 237.539132][ T31] audit: type=1400 audit(237.480:219): avc: denied { bind } for pid=5011 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.587997][ T31] audit: type=1400 audit(237.520:220): avc: denied { nlmsg_tty_audit } for pid=5011 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 237.591090][ T5012] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 237.592330][ T31] audit: type=1400 audit(237.530:221): avc: denied { relabelto } for pid=5011 comm="syz.0.375" name="rtc0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 237.595581][ T31] audit: type=1400 audit(237.530:222): avc: denied { associate } for pid=5011 comm="syz.0.375" name="rtc0" dev="devtmpfs" ino=697 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 239.445591][ T31] audit: type=1326 audit(239.380:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.0.380" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 241.432078][ T31] audit: type=1400 audit(241.370:224): avc: denied { nlmsg_read } for pid=5040 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 242.381213][ T31] audit: type=1400 audit(242.320:225): avc: denied { getopt } for pid=5050 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.715066][ T31] audit: type=1400 audit(242.650:226): avc: denied { getopt } for pid=5064 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.818802][ T31] audit: type=1400 audit(243.760:227): avc: denied { setopt } for pid=5080 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.100771][ T31] audit: type=1400 audit(246.040:228): avc: denied { create } for pid=5102 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.503999][ T31] audit: type=1326 audit(247.440:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.0.410" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 249.613985][ T5133] FAULT_INJECTION: forcing a failure. [ 249.613985][ T5133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.617254][ T5133] CPU: 0 UID: 0 PID: 5133 Comm: syz.0.425 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 249.617378][ T5133] Hardware name: ARM-Versatile Express [ 249.617406][ T5133] Call trace: [ 249.617449][ T5133] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 249.617584][ T5133] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 249.617607][ T5133] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 249.617669][ T5133] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 249.617739][ T5133] r5:84b46000 r4:8291bd14 [ 249.617757][ T5133] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 249.617814][ T5133] [<8095f454>] (should_fail_ex) from [<8052571c>] (should_fail_alloc_page+0x68/0x74) [ 249.617885][ T5133] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:ee345df0 [ 249.617904][ T5133] [<805256b4>] (should_fail_alloc_page) from [<804f445c>] (prepare_alloc_pages.constprop.0+0x94/0x1b4) [ 249.617962][ T5133] [<804f43c8>] (prepare_alloc_pages.constprop.0) from [<804fc3a0>] (__alloc_frozen_pages_noprof+0xb8/0x1138) [ 249.618046][ T5133] r10:ee345fb0 r9:00000000 r8:00140cca r7:00000040 r6:76bc4e69 r5:84b46000 [ 249.618074][ T5133] r4:00000000 r3:ee345df0 [ 249.618092][ T5133] [<804fc2e8>] (__alloc_frozen_pages_noprof) from [<804fd494>] (__folio_alloc_noprof+0x14/0x6c) [ 249.618180][ T5133] r10:ee345fb0 r9:8488e180 r8:00000000 r7:00000040 r6:76bc4e69 r5:84b46000 [ 249.618203][ T5133] r4:00001255 [ 249.618221][ T5133] [<804fd480>] (__folio_alloc_noprof) from [<804cf120>] (handle_mm_fault+0xd00/0x14e4) [ 249.618295][ T5133] r5:84b46000 r4:00001255 [ 249.618314][ T5133] [<804ce420>] (handle_mm_fault) from [<802342d0>] (do_page_fault+0x1c8/0x49c) [ 249.618392][ T5133] r10:00000002 r9:8403b000 r8:00000255 r7:84b46000 r6:00000a07 r5:76bc4e69 [ 249.618413][ T5133] r4:ee345fb0 [ 249.618432][ T5133] [<80234108>] (do_page_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 249.618503][ T5133] r10:00410000 r9:76bc4e60 r8:80234108 r7:ee345fb0 r6:76bc4e69 r5:00000a07 [ 249.618525][ T5133] r4:8281d170 [ 249.618540][ T5133] [<80234754>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 249.618606][ T5133] Exception stack(0xee345fb0 to 0xee345ff8) [ 249.618648][ T5133] 5fa0: 76bc4e69 00000000 00000077 76bc4e69 [ 249.618691][ T5133] 5fc0: 00000009 00000080 00189b94 76bc4e60 00000002 76bc4e60 00410000 00000000 [ 249.618729][ T5133] 5fe0: 00189b9d 76bc3df0 001197d0 00117f70 20000010 ffffffff [ 249.618764][ T5133] r8:826b7044 r7:84b46000 r6:ffffffff r5:20000010 r4:00117f70 [ 249.645444][ T5133] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 249.888128][ T3046] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 250.052813][ T3046] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.054264][ T3046] usb 1-1: config 1 interface 0 has no altsetting 0 [ 250.075501][ T3046] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.079893][ T3046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.082513][ T3046] usb 1-1: Product: syz [ 250.084282][ T3046] usb 1-1: Manufacturer: syz [ 250.085067][ T3046] usb 1-1: SerialNumber: syz [ 250.355118][ T3046] usb 1-1: USB disconnect, device number 8 [ 250.536827][ T31] audit: type=1326 audit(250.470:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.429" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 251.635765][ T5168] FAULT_INJECTION: forcing a failure. [ 251.635765][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.637785][ T5168] CPU: 1 UID: 0 PID: 5168 Comm: syz.1.434 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 251.637853][ T5168] Hardware name: ARM-Versatile Express [ 251.637866][ T5168] Call trace: [ 251.637888][ T5168] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 251.637950][ T5168] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 251.637959][ T5168] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 251.637988][ T5168] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 251.638018][ T5168] r5:84f39800 r4:82951710 [ 251.638025][ T5168] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 251.638056][ T5168] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 251.638089][ T5168] r8:76b9bf30 r7:00000000 r6:00000000 r5:df9d5f68 r4:00000002 [ 251.638098][ T5168] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 251.638124][ T5168] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 251.638153][ T5168] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 251.638193][ T5168] r10:00000001 r9:80604138 r8:00000002 r7:df9d5f68 r6:0000000f r5:76b9bf30 [ 251.638206][ T5168] r4:84f39800 r3:df9d5e9f [ 251.638214][ T5168] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 251.638261][ T5168] r8:76b9bf30 r7:df9d5f68 r6:84f39800 r5:0000000f r4:8562e540 [ 251.638269][ T5168] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 251.638303][ T5168] r10:00000003 r9:84f39800 r8:8020029c r7:00000000 r6:00000000 r5:8562e540 [ 251.638313][ T5168] r4:8562e543 [ 251.638320][ T5168] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 251.638350][ T5168] r7:00000003 r6:00000004 r5:76b9bf30 r4:0000000f [ 251.638359][ T5168] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 251.638383][ T5168] Exception stack(0xdf9d5fa8 to 0xdf9d5ff0) [ 251.638403][ T5168] 5fa0: 0000000f 76b9bf30 00000004 76b9bf30 0000000f 00000000 [ 251.638421][ T5168] 5fc0: 0000000f 76b9bf30 00000004 00000003 002d0000 00000000 00006364 76b9c0bc [ 251.638435][ T5168] 5fe0: 00000158 76b9bed0 000d7d68 0012fe04 [ 253.484491][ T31] audit: type=1326 audit(253.420:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.0.446" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 254.249414][ T31] audit: type=1326 audit(254.190:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.441" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 256.399844][ T31] audit: type=1326 audit(256.340:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.451" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 258.213993][ T31] audit: type=1326 audit(258.150:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.1.454" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 259.451649][ T5223] FAULT_INJECTION: forcing a failure. [ 259.451649][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.452730][ T5223] CPU: 1 UID: 0 PID: 5223 Comm: syz.0.455 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 259.452804][ T5223] Hardware name: ARM-Versatile Express [ 259.452819][ T5223] Call trace: [ 259.452842][ T5223] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 259.452920][ T5223] r7:dfc81e20 r6:00000000 r5:60000013 r4:82257d0c [ 259.452931][ T5223] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 259.452966][ T5223] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 259.453003][ T5223] r5:84f0bc00 r4:82951710 [ 259.453012][ T5223] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 259.453048][ T5223] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 259.453089][ T5223] r8:00008000 r7:dfc81e20 r6:20000600 r5:00000000 r4:dfc81f20 [ 259.453099][ T5223] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 259.453131][ T5223] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 259.453166][ T5223] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 259.453207][ T5223] r8:00008000 r7:00000000 r6:850d6780 r5:dfc81f20 r4:dfc81e64 [ 259.453216][ T5223] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 259.453260][ T5223] r10:00000128 r9:84f0bc00 r8:8571eb40 r7:00008000 r6:20000600 r5:8571eb41 [ 259.453272][ T5223] r4:00000003 [ 259.453281][ T5223] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 259.453329][ T5223] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 259.453339][ T5223] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 259.453369][ T5223] Exception stack(0xdfc81fa8 to 0xdfc81ff0) [ 259.453393][ T5223] 1fa0: 00000000 00000000 00000003 20000600 00008000 00000000 [ 259.453416][ T5223] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76ba50bc [ 259.453433][ T5223] 1fe0: 76ba4ec0 76ba4eb0 0001939c 00131f30 [ 262.098380][ T31] audit: type=1326 audit(262.030:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 262.238050][ T2888] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 262.397099][ T2888] usb 1-1: Using ep0 maxpacket: 8 [ 262.415015][ T2888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.417062][ T2888] usb 1-1: config 0 has no interfaces? [ 262.440069][ T2888] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 262.442102][ T2888] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 262.447730][ T2888] usb 1-1: Product: syz [ 262.449701][ T2888] usb 1-1: SerialNumber: syz [ 262.459865][ T2888] usb 1-1: config 0 descriptor?? [ 262.688972][ T2888] usb 1-1: USB disconnect, device number 9 [ 263.147696][ T2888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 263.307869][ T2888] usb 1-1: Using ep0 maxpacket: 8 [ 263.326858][ T2888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.328816][ T2888] usb 1-1: config 0 has no interfaces? [ 263.347782][ T2888] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 263.349367][ T2888] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 263.351198][ T2888] usb 1-1: Product: syz [ 263.354696][ T2888] usb 1-1: SerialNumber: syz [ 263.365103][ T2888] usb 1-1: config 0 descriptor?? [ 263.585725][ T2888] usb 1-1: USB disconnect, device number 10 [ 264.885443][ T31] audit: type=1400 audit(264.820:236): avc: denied { create } for pid=5294 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.899401][ T31] audit: type=1400 audit(264.840:237): avc: denied { getopt } for pid=5294 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.137049][ T3779] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.287194][ T3779] usb 2-1: Using ep0 maxpacket: 8 [ 265.296135][ T3779] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.298760][ T3779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.298886][ T3779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.298966][ T3779] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.299081][ T3779] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.299154][ T3779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.538139][ T3779] usb 2-1: usb_control_msg returned -71 [ 265.538393][ T3779] usbtmc 2-1:16.0: can't read capabilities [ 265.550632][ T3779] usb 2-1: USB disconnect, device number 11 [ 265.753811][ T31] audit: type=1400 audit(265.690:238): avc: denied { kexec_image_load } for pid=5318 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 266.965917][ T31] audit: type=1400 audit(266.900:239): avc: denied { listen } for pid=5322 comm="syz.0.483" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.939012][ T31] audit: type=1400 audit(268.880:240): avc: denied { connect } for pid=5331 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.371514][ T31] audit: type=1400 audit(270.310:241): avc: denied { ioctl } for pid=5334 comm="syz.0.488" path="socket:[7594]" dev="sockfs" ino=7594 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 271.253381][ T31] audit: type=1400 audit(271.190:242): avc: denied { create } for pid=5351 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 271.266952][ T31] audit: type=1400 audit(271.200:243): avc: denied { ioctl } for pid=5351 comm="syz.0.494" path="socket:[6500]" dev="sockfs" ino=6500 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 271.552592][ T31] audit: type=1400 audit(271.490:244): avc: denied { read } for pid=5360 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.252679][ T31] audit: type=1400 audit(274.190:245): avc: denied { write } for pid=5373 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.300354][ T31] audit: type=1326 audit(274.240:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.500" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 276.604946][ T31] audit: type=1400 audit(276.540:247): avc: denied { load_policy } for pid=5387 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 276.607600][ T5388] SELinux: failed to load policy [ 276.878735][ T31] audit: type=1326 audit(276.820:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.0.508" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 277.199123][ T31] audit: type=1400 audit(277.140:249): avc: denied { lock } for pid=5397 comm="syz.1.509" path="socket:[6605]" dev="sockfs" ino=6605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.201645][ T31] audit: type=1400 audit(277.140:250): avc: denied { map } for pid=5397 comm="syz.1.509" path="socket:[6605]" dev="sockfs" ino=6605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.246250][ T31] audit: type=1400 audit(277.180:251): avc: denied { create } for pid=5402 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.254242][ T31] audit: type=1400 audit(277.190:252): avc: denied { setopt } for pid=5402 comm="syz.1.510" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.343761][ T5407] FAULT_INJECTION: forcing a failure. [ 277.343761][ T5407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.344240][ T5407] CPU: 0 UID: 0 PID: 5407 Comm: syz.1.512 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 277.344324][ T5407] Hardware name: ARM-Versatile Express [ 277.344353][ T5407] Call trace: [ 277.344400][ T5407] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 277.344492][ T5407] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 277.344503][ T5407] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 277.344532][ T5407] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 277.344561][ T5407] r5:84f0bc00 r4:82951710 [ 277.344575][ T5407] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 277.344606][ T5407] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 277.344645][ T5407] r8:e06b9eb8 r7:00000000 r6:00000001 r5:76b9bf30 r4:00000001 [ 277.344662][ T5407] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 277.344717][ T5407] [<8095f694>] (should_fail_usercopy) from [<808b7810>] (kstrtouint_from_user+0x54/0x13c) [ 277.344774][ T5407] [<808b77bc>] (kstrtouint_from_user) from [<80605630>] (proc_fail_nth_write+0x40/0xe8) [ 277.344847][ T5407] r8:e06b9f68 r7:84f0bc00 r6:00000001 r5:8571e600 r4:00000001 [ 277.344864][ T5407] [<806055f0>] (proc_fail_nth_write) from [<80552030>] (vfs_write+0xac/0x448) [ 277.344926][ T5407] r5:8571e600 r4:806055f0 [ 277.344943][ T5407] [<80551f84>] (vfs_write) from [<80552538>] (ksys_write+0x74/0xe4) [ 277.345010][ T5407] r10:00000004 r9:84f0bc00 r8:8020029c r7:00000000 r6:00000002 r5:8571e600 [ 277.345031][ T5407] r4:8571e603 [ 277.345052][ T5407] [<805524c4>] (ksys_write) from [<805525b8>] (sys_write+0x10/0x14) [ 277.345138][ T5407] r7:00000004 r6:00000004 r5:76b9bf30 r4:00000001 [ 277.345176][ T5407] [<805525a8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 277.345251][ T5407] Exception stack(0xe06b9fa8 to 0xe06b9ff0) [ 277.345301][ T5407] 9fa0: 00000001 76b9bf30 00000004 76b9bf30 00000001 00000000 [ 277.345342][ T5407] 9fc0: 00000001 76b9bf30 00000004 00000004 002d0000 00000000 00006364 76b9c0bc [ 277.345389][ T5407] 9fe0: 00000158 76b9bed0 000d7d68 0012fecc [ 279.048731][ T31] audit: type=1400 audit(278.990:253): avc: denied { shutdown } for pid=5423 comm="syz.1.517" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.050979][ T31] audit: type=1400 audit(278.990:254): avc: denied { ioctl } for pid=5423 comm="syz.1.517" path="socket:[6641]" dev="sockfs" ino=6641 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.986862][ T3046] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 280.116927][ T3046] usb 1-1: device descriptor read/64, error -71 [ 280.356706][ T3046] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 280.486651][ T3046] usb 1-1: device descriptor read/64, error -71 [ 280.597372][ T3046] usb usb1-port1: attempt power cycle [ 280.936857][ T3046] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.958846][ T3046] usb 1-1: device descriptor read/8, error -71 [ 281.197017][ T3046] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.218646][ T3046] usb 1-1: device descriptor read/8, error -71 [ 281.327114][ T3046] usb usb1-port1: unable to enumerate USB device [ 281.863310][ T5442] proc: Unknown parameter 'usrquota' [ 283.449107][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 283.450395][ T31] audit: type=1326 audit(283.390:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.1.523" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 286.116930][ T2888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.271023][ T2888] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 286.271968][ T2888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.274336][ T2888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.275757][ T2888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 286.279587][ T2888] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 286.281171][ T2888] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 286.282468][ T2888] usb 2-1: Manufacturer: syz [ 286.287106][ T2888] usb 2-1: config 0 descriptor?? [ 286.700458][ T2888] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 286.702043][ T2888] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 286.708405][ T2888] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 288.698211][ T2888] usb 2-1: USB disconnect, device number 12 [ 290.987248][ T5503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5503 comm=syz.1.535 [ 291.338579][ T5513] SELinux: syz.0.538 (5513) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 291.986793][ T31] audit: type=1400 audit(291.920:257): avc: denied { map } for pid=5516 comm="syz.0.540" path="socket:[7793]" dev="sockfs" ino=7793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 292.602869][ T5525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5525 comm=syz.1.542 [ 292.648705][ T31] audit: type=1400 audit(292.590:258): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 295.346549][ C0] hrtimer: interrupt took 663184 ns [ 297.410732][ T31] audit: type=1400 audit(297.350:259): avc: denied { setopt } for pid=5554 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.007965][ T31] audit: type=1400 audit(298.950:260): avc: denied { write } for pid=5564 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.019800][ T5565] sctp: [Deprecated]: syz.1.556 (pid 5565) Use of int in maxseg socket option. [ 299.019800][ T5565] Use struct sctp_assoc_value instead [ 299.676858][ T2888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 299.800487][ T31] audit: type=1400 audit(299.740:261): avc: denied { write } for pid=5594 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.806958][ T2888] usb 2-1: device descriptor read/64, error -71 [ 300.047779][ T2888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 300.097157][ T3046] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 300.176776][ T2888] usb 2-1: device descriptor read/64, error -71 [ 300.272638][ T3046] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 300.272994][ T3046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.273089][ T3046] usb 1-1: Product: syz [ 300.273154][ T3046] usb 1-1: Manufacturer: syz [ 300.273212][ T3046] usb 1-1: SerialNumber: syz [ 300.282599][ T3046] usb 1-1: config 0 descriptor?? [ 300.291089][ T2888] usb usb2-port1: attempt power cycle [ 300.294453][ T3046] ch341 1-1:0.0: ch341-uart converter detected [ 300.636734][ T2888] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 300.658178][ T2888] usb 2-1: device descriptor read/8, error -71 [ 300.906775][ T2888] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 300.911568][ T3046] usb 1-1: failed to send control message: -71 [ 300.912231][ T3046] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 300.934444][ T2888] usb 2-1: device descriptor read/8, error -71 [ 300.937230][ T3046] usb 1-1: USB disconnect, device number 15 [ 300.941805][ T3046] ch341 1-1:0.0: device disconnected [ 301.039248][ T2888] usb usb2-port1: unable to enumerate USB device [ 302.653377][ T31] audit: type=1326 audit(302.590:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.569" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 308.403515][ T5647] FAULT_INJECTION: forcing a failure. [ 308.403515][ T5647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.403783][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.0.578 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 308.403816][ T5647] Hardware name: ARM-Versatile Express [ 308.403829][ T5647] Call trace: [ 308.403853][ T5647] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 308.403921][ T5647] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 308.403931][ T5647] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 308.403964][ T5647] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 308.403993][ T5647] r5:84f0bc00 r4:82951710 [ 308.404001][ T5647] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 308.404064][ T5647] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 308.404101][ T5647] r8:76bc5f30 r7:00000000 r6:00000000 r5:eae41f68 r4:00000002 [ 308.404121][ T5647] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 308.404149][ T5647] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 308.404179][ T5647] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 308.404227][ T5647] r10:00000001 r9:80604138 r8:00000002 r7:eae41f68 r6:0000000f r5:76bc5f30 [ 308.404240][ T5647] r4:84f0bc00 r3:eae41e9f [ 308.404248][ T5647] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 308.404293][ T5647] r8:76bc5f30 r7:eae41f68 r6:84f0bc00 r5:0000000f r4:849a3180 [ 308.404340][ T5647] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 308.404379][ T5647] r10:00000003 r9:84f0bc00 r8:8020029c r7:00000000 r6:00000000 r5:849a3180 [ 308.404389][ T5647] r4:849a3183 [ 308.404423][ T5647] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 308.404478][ T5647] r7:00000003 r6:00000004 r5:76bc5f30 r4:0000000f [ 308.404493][ T5647] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 308.404519][ T5647] Exception stack(0xeae41fa8 to 0xeae41ff0) [ 308.404538][ T5647] 1fa0: 0000000f 76bc5f30 00000004 76bc5f30 0000000f 00000000 [ 308.404583][ T5647] 1fc0: 0000000f 76bc5f30 00000004 00000003 002d0000 00000000 00006364 76bc60bc [ 308.404618][ T5647] 1fe0: 00000158 76bc5ed0 000d7d68 0012fe04 [ 308.529673][ T5649] sctp: [Deprecated]: syz.0.579 (pid 5649) Use of int in maxseg socket option. [ 308.529673][ T5649] Use struct sctp_assoc_value instead [ 309.100191][ T31] audit: type=1400 audit(309.040:263): avc: denied { write } for pid=5656 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 309.548048][ T5662] FAULT_INJECTION: forcing a failure. [ 309.548048][ T5662] name failslab, interval 1, probability 0, space 0, times 0 [ 309.549333][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.1.583 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 309.549407][ T5662] Hardware name: ARM-Versatile Express [ 309.549422][ T5662] Call trace: [ 309.549443][ T5662] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 309.549522][ T5662] r7:84185400 r6:00000000 r5:60000013 r4:82257d0c [ 309.549532][ T5662] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 309.549563][ T5662] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 309.549597][ T5662] r5:84185400 r4:8291bcc0 [ 309.549605][ T5662] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 309.549636][ T5662] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 309.549674][ T5662] r8:00000000 r7:84185400 r6:00000dc0 r5:85620d80 r4:830a8540 [ 309.549682][ T5662] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 309.549711][ T5662] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80779288>] (security_file_alloc+0x30/0x1dc) [ 309.549749][ T5662] r10:00000142 r9:832d9000 r8:82805c40 r7:84b1be00 r6:00000101 r5:85620d80 [ 309.549760][ T5662] r4:85620d80 [ 309.549767][ T5662] [<80779258>] (security_file_alloc) from [<805537f0>] (init_file+0x48/0x110) [ 309.549799][ T5662] r5:85620d80 r4:85620d80 [ 309.549807][ T5662] [<805537a8>] (init_file) from [<80553f38>] (alloc_empty_file+0x68/0x13c) [ 309.549840][ T5662] r7:84b1be00 r6:00000101 r5:85620d80 r4:8245d828 [ 309.549848][ T5662] [<80553ed0>] (alloc_empty_file) from [<80566798>] (path_openat+0x40/0x11a0) [ 309.549884][ T5662] r8:eb1c9e58 r7:eb1c9e58 r6:eb1c9f20 r5:84185400 r4:ffffff9c [ 309.549892][ T5662] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 309.549929][ T5662] r10:00000142 r9:832d9000 r8:00000001 r7:eb1c9e58 r6:eb1c9f20 r5:84185400 [ 309.549938][ T5662] r4:ffffff9c [ 309.549945][ T5662] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 309.549980][ T5662] r9:84185400 r8:8020029c r7:ffffff9c r6:eb1c9f58 r5:832d9000 r4:00000006 [ 309.549989][ T5662] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 309.550019][ T5662] r7:00000142 r6:0012fee0 r5:2000c380 r4:ffffff9c [ 309.550027][ T5662] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 309.550052][ T5662] Exception stack(0xeb1c9fa8 to 0xeb1c9ff0) [ 309.550073][ T5662] 9fa0: 00000000 00000000 ffffff9c 2000c380 00080101 00000000 [ 309.550091][ T5662] 9fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76b9c0bc [ 309.550105][ T5662] 9fe0: 76b9bec0 76b9beb0 0001939c 00131f30 [ 309.550118][ T5662] r5:00000000 r4:00000000 [ 309.614793][ T5666] FAULT_INJECTION: forcing a failure. [ 309.614793][ T5666] name failslab, interval 1, probability 0, space 0, times 0 [ 309.615682][ T5666] CPU: 1 UID: 0 PID: 5666 Comm: syz.1.584 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 309.615744][ T5666] Hardware name: ARM-Versatile Express [ 309.615757][ T5666] Call trace: [ 309.615779][ T5666] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 309.615841][ T5666] r7:84f09800 r6:00000000 r5:60000013 r4:82257d0c [ 309.615850][ T5666] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 309.615881][ T5666] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 309.615912][ T5666] r5:84f09800 r4:8291bcc0 [ 309.615920][ T5666] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 309.615952][ T5666] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 309.615993][ T5666] r8:00000000 r7:84f09800 r6:00000cc0 r5:ffffffff r4:830ad9c0 [ 309.616002][ T5666] [<80525620>] (should_failslab) from [<80509a90>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 309.616032][ T5666] [<80509a40>] (kmem_cache_alloc_node_noprof) from [<81526ff8>] (__alloc_skb+0x138/0x160) [ 309.616072][ T5666] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830ad9c0 r5:ffffffff [ 309.616083][ T5666] r4:82806040 [ 309.616090][ T5666] [<81526ec0>] (__alloc_skb) from [<81644d3c>] (netlink_alloc_large_skb+0x88/0xa0) [ 309.616128][ T5666] r8:00000000 r7:8579dc00 r6:00000014 r5:83611900 r4:00000140 [ 309.616137][ T5666] [<81644cb4>] (netlink_alloc_large_skb) from [<81645360>] (netlink_sendmsg+0x134/0x444) [ 309.616169][ T5666] r5:83611900 r4:eb24df20 [ 309.616177][ T5666] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 309.616215][ T5666] r10:00000000 r9:eb24ddc4 r8:eb24ddc4 r7:00000000 r6:83611900 r5:eb24df20 [ 309.616225][ T5666] r4:00000000 [ 309.616233][ T5666] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 309.616372][ T5666] r7:00000000 r6:83611900 r5:00008000 r4:eb24df20 [ 309.616396][ T5666] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 309.616439][ T5666] r10:eb24de24 r9:200003c0 r8:00008000 r7:00000000 r6:83611900 r5:eb24df20 [ 309.616449][ T5666] r4:00000000 [ 309.616457][ T5666] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 309.616495][ T5666] r10:00000128 r9:84f09800 r8:85620300 r7:00008000 r6:200003c0 r5:85620301 [ 309.616505][ T5666] r4:00000003 [ 309.616513][ T5666] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 309.616613][ T5666] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 309.616623][ T5666] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 309.616651][ T5666] Exception stack(0xeb24dfa8 to 0xeb24dff0) [ 309.616672][ T5666] dfa0: 00000000 00000000 00000003 200003c0 00008000 00000000 [ 309.616691][ T5666] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b9c0bc [ 309.616706][ T5666] dfe0: 76b9bec0 76b9beb0 0001939c 00131f30 [ 309.927134][ T47] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 310.086737][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 310.091398][ T47] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 310.091671][ T47] usb 1-1: config 0 has no interface number 0 [ 310.091820][ T47] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.092018][ T47] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 310.092172][ T47] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 310.092292][ T47] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 310.092432][ T47] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.107302][ T47] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 310.107846][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.109539][ T47] usb 1-1: Product: syz [ 310.110683][ T47] usb 1-1: Manufacturer: syz [ 310.112193][ T47] usb 1-1: SerialNumber: syz [ 310.116178][ T47] usb 1-1: config 0 descriptor?? [ 310.341167][ T47] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 310.541570][ T1459] usb 1-1: USB disconnect, device number 16 [ 311.052227][ T31] audit: type=1326 audit(310.990:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.590" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 311.436164][ T31] audit: type=1326 audit(311.370:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.1.587" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 314.833662][ T31] audit: type=1326 audit(314.770:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.0.596" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 316.119570][ T31] audit: type=1326 audit(316.060:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.595" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 319.942553][ T31] audit: type=1400 audit(319.880:268): avc: denied { listen } for pid=5734 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 320.477205][ T31] audit: type=1326 audit(320.400:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.1.602" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 321.107111][ T2888] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 321.262302][ T2888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.262558][ T2888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.262763][ T2888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 321.265327][ T2888] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.265474][ T2888] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.265524][ T2888] usb 1-1: Manufacturer: syz [ 321.270940][ T2888] usb 1-1: config 0 descriptor?? [ 321.530173][ T3779] usb 1-1: USB disconnect, device number 17 [ 321.842847][ T5775] FAULT_INJECTION: forcing a failure. [ 321.842847][ T5775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.843167][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.0.607 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 321.843203][ T5775] Hardware name: ARM-Versatile Express [ 321.843216][ T5775] Call trace: [ 321.843239][ T5775] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 321.843300][ T5775] r7:eb655e20 r6:00000000 r5:60000013 r4:82257d0c [ 321.843310][ T5775] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 321.843347][ T5775] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 321.843414][ T5775] r5:84b44800 r4:82951710 [ 321.843425][ T5775] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 321.843491][ T5775] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 321.843528][ T5775] r8:00000000 r7:eb655e20 r6:20000d00 r5:00000000 r4:eb655f20 [ 321.843536][ T5775] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 321.843588][ T5775] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 321.843621][ T5775] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 321.843653][ T5775] r8:00000000 r7:00000000 r6:83610780 r5:eb655f20 r4:eb655e64 [ 321.843662][ T5775] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 321.843695][ T5775] r10:00000128 r9:84b44800 r8:85620300 r7:00000000 r6:20000d00 r5:85620301 [ 321.843705][ T5775] r4:00000003 [ 321.843712][ T5775] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 321.843743][ T5775] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 321.843751][ T5775] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 321.843775][ T5775] Exception stack(0xeb655fa8 to 0xeb655ff0) [ 321.843800][ T5775] 5fa0: 00000000 00000000 00000003 20000d00 00000000 00000000 [ 321.843818][ T5775] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bc60bc [ 321.843831][ T5775] 5fe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 323.183593][ T5787] FAULT_INJECTION: forcing a failure. [ 323.183593][ T5787] name failslab, interval 1, probability 0, space 0, times 0 [ 323.184682][ T5787] CPU: 0 UID: 0 PID: 5787 Comm: syz.0.612 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 323.184743][ T5787] Hardware name: ARM-Versatile Express [ 323.184757][ T5787] Call trace: [ 323.184779][ T5787] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 323.184837][ T5787] r7:00000c40 r6:00000000 r5:60000013 r4:82257d0c [ 323.184847][ T5787] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 323.184875][ T5787] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 323.184903][ T5787] r5:84183c00 r4:8291bcc0 [ 323.184911][ T5787] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 323.184940][ T5787] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 323.184977][ T5787] r8:84183c00 r7:00000c40 r6:8571ef28 r5:00001000 r4:830016c0 [ 323.184985][ T5787] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 323.185013][ T5787] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 323.185051][ T5787] r10:84183c00 r9:8309fc00 r8:00000000 r7:85058088 r6:8571ef28 r5:00001000 [ 323.185061][ T5787] r4:00000000 [ 323.185069][ T5787] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 323.185106][ T5787] r10:84183c00 r9:00000000 r8:8571ef00 r7:00005451 r6:00000004 r5:81cd56c4 [ 323.185116][ T5787] r4:8571ef28 r3:826c0240 [ 323.185124][ T5787] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 323.185159][ T5787] r9:00000003 r8:8571ef00 r7:ffffffff r6:ffffffff r5:00005451 r4:8571ef00 [ 323.185168][ T5787] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 323.185197][ T5787] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 323.185229][ T5787] r7:ffffffff r6:8571ef01 r5:00000000 r4:00005451 [ 323.185236][ T5787] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 323.185260][ T5787] Exception stack(0xeb6c1fa8 to 0xeb6c1ff0) [ 323.185279][ T5787] 1fa0: 00000000 00000000 00000003 00005451 ffffffff 00000000 [ 323.185297][ T5787] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bc60bc [ 323.185311][ T5787] 1fe0: 76bc5ec0 76bc5eb0 0001939c 00131f30 [ 323.185331][ T5787] r10:00000036 r9:84183c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 323.185340][ T5787] r4:00000000 [ 323.205292][ T5787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 323.207264][ T31] audit: type=1400 audit(323.140:270): avc: denied { ioctl } for pid=5786 comm="syz.0.612" path="socket:[8205]" dev="sockfs" ino=8205 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.354813][ T31] audit: type=1326 audit(323.290:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5788 comm="syz.0.613" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 325.928927][ T31] audit: type=1400 audit(325.870:272): avc: denied { read } for pid=5795 comm="syz.0.614" path="socket:[7048]" dev="sockfs" ino=7048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.348998][ T5805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5805 comm=syz.0.617 [ 327.370221][ T31] audit: type=1326 audit(327.310:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.1.618" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 330.509766][ T31] audit: type=1326 audit(330.450:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.626" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 335.763813][ T31] audit: type=1326 audit(335.700:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.1.633" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 336.507027][ T31] audit: type=1400 audit(336.440:276): avc: denied { mount } for pid=5886 comm="syz.0.637" name="/" dev="ramfs" ino=9284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 338.240410][ T5892] fuse: Bad value for 'fd' [ 338.530667][ T31] audit: type=1400 audit(338.470:277): avc: denied { map } for pid=5893 comm="syz.1.639" path="socket:[9304]" dev="sockfs" ino=9304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.538432][ T31] audit: type=1400 audit(338.470:278): avc: denied { accept } for pid=5893 comm="syz.1.639" path="socket:[9304]" dev="sockfs" ino=9304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.850064][ T31] audit: type=1326 audit(338.790:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.642" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 341.477710][ T31] audit: type=1326 audit(341.410:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.0.644" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 341.833818][ T5926] sctp: [Deprecated]: syz.1.647 (pid 5926) Use of int in max_burst socket option deprecated. [ 341.833818][ T5926] Use struct sctp_assoc_value instead [ 342.198541][ T31] audit: type=1400 audit(342.140:281): avc: denied { write } for pid=5927 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 345.872538][ T31] audit: type=1326 audit(345.810:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.1.657" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 347.402305][ T5957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5957 comm=syz.0.659 [ 348.003460][ T5964] FAULT_INJECTION: forcing a failure. [ 348.003460][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.011543][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.1.661 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 348.011620][ T5964] Hardware name: ARM-Versatile Express [ 348.011634][ T5964] Call trace: [ 348.011654][ T5964] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 348.011721][ T5964] r7:ec4e9e20 r6:00000000 r5:60000013 r4:82257d0c [ 348.011730][ T5964] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 348.011767][ T5964] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 348.011832][ T5964] r5:84163c00 r4:82951710 [ 348.011852][ T5964] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 348.011914][ T5964] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 348.011983][ T5964] r8:00000800 r7:ec4e9e20 r6:20000c00 r5:00000000 r4:ec4e9f20 [ 348.012001][ T5964] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 348.012055][ T5964] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 348.012143][ T5964] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 348.012206][ T5964] r8:00000800 r7:00000000 r6:850d7900 r5:ec4e9f20 r4:ec4e9e64 [ 348.012238][ T5964] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 348.012343][ T5964] r10:00000128 r9:84163c00 r8:8571e6c0 r7:00000800 r6:20000c00 r5:8571e6c1 [ 348.012367][ T5964] r4:00000004 [ 348.012385][ T5964] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 348.012449][ T5964] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 348.012465][ T5964] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 348.012516][ T5964] Exception stack(0xec4e9fa8 to 0xec4e9ff0) [ 348.012559][ T5964] 9fa0: 00000000 00000000 00000004 20000c00 00000800 00000000 [ 348.012598][ T5964] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b9c0bc [ 348.012629][ T5964] 9fe0: 76b9bec0 76b9beb0 0001939c 00131f30 [ 348.190562][ T31] audit: type=1326 audit(348.130:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.662" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 354.908482][ T31] audit: type=1326 audit(354.850:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.1.668" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 356.702626][ T31] audit: type=1400 audit(356.640:285): avc: denied { write } for pid=5990 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 356.944524][ T5993] FAULT_INJECTION: forcing a failure. [ 356.944524][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.945021][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.0.670 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 356.945149][ T5993] Hardware name: ARM-Versatile Express [ 356.945198][ T5993] Call trace: [ 356.945257][ T5993] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 356.945401][ T5993] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 356.945446][ T5993] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 356.945512][ T5993] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 356.945574][ T5993] r5:84b40000 r4:82951710 [ 356.945590][ T5993] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 356.945670][ T5993] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 356.945743][ T5993] r8:76bc5f30 r7:00000000 r6:00000000 r5:ec76df68 r4:00000002 [ 356.945760][ T5993] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 356.945813][ T5993] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 356.945872][ T5993] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 356.945953][ T5993] r10:00000001 r9:80604138 r8:00000002 r7:ec76df68 r6:0000000f r5:76bc5f30 [ 356.945986][ T5993] r4:84b40000 r3:ec76de9f [ 356.946005][ T5993] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 356.946081][ T5993] r8:76bc5f30 r7:ec76df68 r6:84b40000 r5:0000000f r4:83c58300 [ 356.946102][ T5993] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 356.946165][ T5993] r10:00000003 r9:84b40000 r8:8020029c r7:00000000 r6:00000000 r5:83c58300 [ 356.946187][ T5993] r4:83c58303 [ 356.946204][ T5993] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 356.946359][ T5993] r7:00000003 r6:00000006 r5:76bc5f30 r4:0000000f [ 356.946424][ T5993] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 356.946488][ T5993] Exception stack(0xec76dfa8 to 0xec76dff0) [ 356.946559][ T5993] dfa0: 0000000f 76bc5f30 00000006 76bc5f30 0000000f 00000000 [ 356.946637][ T5993] dfc0: 0000000f 76bc5f30 00000006 00000003 002d0000 00000000 00006364 76bc60bc [ 356.946714][ T5993] dfe0: 00000158 76bc5ed0 000d7d68 0012fe04 [ 357.050020][ T31] audit: type=1400 audit(356.990:286): avc: denied { read } for pid=5996 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.570331][ T6008] FAULT_INJECTION: forcing a failure. [ 360.570331][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.571569][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.1.675 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 360.571633][ T6008] Hardware name: ARM-Versatile Express [ 360.571647][ T6008] Call trace: [ 360.571667][ T6008] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 360.571734][ T6008] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 360.571744][ T6008] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 360.571772][ T6008] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 360.571801][ T6008] r5:84160c00 r4:82951710 [ 360.571808][ T6008] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 360.571838][ T6008] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 360.571870][ T6008] r8:76b9bf30 r7:00000000 r6:00000000 r5:ec875f68 r4:00000002 [ 360.571877][ T6008] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 360.571903][ T6008] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 360.571932][ T6008] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 360.571969][ T6008] r10:00000001 r9:80604138 r8:00000002 r7:ec875f68 r6:0000000f r5:76b9bf30 [ 360.571983][ T6008] r4:84160c00 r3:ec875e9f [ 360.571991][ T6008] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 360.572025][ T6008] r8:76b9bf30 r7:ec875f68 r6:84160c00 r5:0000000f r4:8571e6c0 [ 360.572034][ T6008] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 360.572067][ T6008] r10:00000003 r9:84160c00 r8:8020029c r7:00000000 r6:00000000 r5:8571e6c0 [ 360.572077][ T6008] r4:8571e6c3 [ 360.572106][ T6008] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 360.572140][ T6008] r7:00000003 r6:00000005 r5:76b9bf30 r4:0000000f [ 360.572149][ T6008] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 360.572174][ T6008] Exception stack(0xec875fa8 to 0xec875ff0) [ 360.572193][ T6008] 5fa0: 0000000f 76b9bf30 00000005 76b9bf30 0000000f 00000000 [ 360.572211][ T6008] 5fc0: 0000000f 76b9bf30 00000005 00000003 002d0000 00000000 00006364 76b9c0bc [ 360.572225][ T6008] 5fe0: 00000158 76b9bed0 000d7d68 0012fe04 [ 360.700059][ T31] audit: type=1400 audit(360.640:287): avc: denied { ioctl } for pid=6009 comm="syz.1.676" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8498 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.016856][ T31] audit: type=1326 audit(362.950:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.0.677" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 363.077074][ T6021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6021 comm=syz.1.678 [ 363.084949][ T6021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=6021 comm=syz.1.678 [ 363.437424][ T1459] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 363.608675][ T1459] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 363.609106][ T1459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.609214][ T1459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.609302][ T1459] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 363.629280][ T1459] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 363.629652][ T1459] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 363.629789][ T1459] usb 2-1: Manufacturer: syz [ 363.638410][ T1459] usb 2-1: config 0 descriptor?? [ 364.093817][ T1459] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 364.094739][ T1459] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 364.100167][ T1459] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 365.546939][ T1459] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 366.378287][ T2888] usb 2-1: USB disconnect, device number 17 [ 370.911847][ T31] audit: type=1326 audit(370.850:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.684" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 374.054622][ T1459] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 374.055066][ T1459] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 374.055201][ T1459] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 374.064740][ T1459] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 374.797095][ T1459] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 374.963420][ T1459] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.963846][ T1459] usb 1-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 374.963996][ T1459] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.964102][ T1459] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42346, setting to 1024 [ 374.985374][ T1459] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.985751][ T1459] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.985885][ T1459] usb 1-1: Product: syz [ 374.985969][ T1459] usb 1-1: Manufacturer: syz [ 375.003480][ T6104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.017936][ T1459] cdc_wdm 1-1:1.0: skipping garbage [ 375.018237][ T1459] cdc_wdm 1-1:1.0: skipping garbage [ 375.027515][ T1459] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 381.275925][ T31] audit: type=1400 audit(381.210:290): avc: denied { name_bind } for pid=6117 comm="syz.1.695" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 382.117358][ T31] audit: type=1400 audit(382.060:291): avc: denied { name_connect } for pid=6120 comm="syz.1.696" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 382.427498][ T31] audit: type=1400 audit(382.370:292): avc: denied { bind } for pid=6124 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 382.432241][ T31] audit: type=1400 audit(382.370:293): avc: denied { connect } for pid=6124 comm="syz.1.698" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.021630][ T31] audit: type=1400 audit(382.960:294): avc: denied { create } for pid=6126 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.303872][ T6138] could not allocate digest TFM handle sha512-avx [ 388.751141][ T23] usb 1-1: USB disconnect, device number 18 [ 388.847315][ T1459] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.031106][ T1459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.032485][ T1459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.037066][ T1459] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.040513][ T1459] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.047250][ T1459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.053917][ T1459] usb 2-1: config 0 descriptor?? [ 389.495858][ T1459] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 389.508934][ T1459] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 390.186898][ T47] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 390.346891][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 390.358390][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 390.359000][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.372476][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.373489][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.374529][ T47] usb 1-1: Product: syz [ 390.375454][ T47] usb 1-1: Manufacturer: syz [ 390.376503][ T47] usb 1-1: SerialNumber: syz [ 390.389862][ T47] usb 1-1: config 0 descriptor?? [ 391.258108][ T31] audit: type=1400 audit(391.160:295): avc: denied { getopt } for pid=6189 comm="syz.1.710" lport=42406 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 391.550662][ T3779] usb 2-1: USB disconnect, device number 18 [ 391.779378][ T31] audit: type=1400 audit(391.720:296): avc: denied { bind } for pid=6204 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.794713][ T31] audit: type=1400 audit(391.730:297): avc: denied { setopt } for pid=6204 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.339295][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 392.339741][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'. [ 392.599428][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 405.811441][ T3779] usb 1-1: USB disconnect, device number 19 [ 406.249727][ T6232] netlink: 'syz.0.720': attribute type 7 has an invalid length. [ 406.457267][ T31] audit: type=1400 audit(406.380:298): avc: denied { bind } for pid=6233 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 406.457724][ T31] audit: type=1400 audit(406.380:299): avc: denied { name_bind } for pid=6233 comm="syz.0.721" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 406.458052][ T31] audit: type=1400 audit(406.380:300): avc: denied { node_bind } for pid=6233 comm="syz.0.721" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 408.346897][ T2888] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 408.516759][ T2888] usb 1-1: Using ep0 maxpacket: 32 [ 408.535954][ T2888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 408.629559][ T2888] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 408.629912][ T2888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.630004][ T2888] usb 1-1: Product: syz [ 408.630125][ T2888] usb 1-1: Manufacturer: syz [ 408.630228][ T2888] usb 1-1: SerialNumber: syz [ 408.638995][ T2888] usb 1-1: config 0 descriptor?? [ 408.850312][ T6255] syzkaller1: entered promiscuous mode [ 408.851144][ T6255] syzkaller1: entered allmulticast mode [ 408.888555][ T2888] usb 1-1: USB disconnect, device number 20 [ 411.246887][ T31] audit: type=1400 audit(411.180:301): avc: denied { lock } for pid=6279 comm="syz.0.730" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.003067][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 416.809991][ T6311] 8<--- cut here --- [ 416.810328][ T6311] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 416.810565][ T6311] [0000000e] *pgd=85761003, *pmd=df7a7003 [ 416.811554][ T6311] Internal error: Oops: 205 [#1] SMP ARM [ 416.814538][ T6311] Modules linked in: [ 416.814915][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.0.739 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 416.815195][ T6311] Hardware name: ARM-Versatile Express [ 416.815380][ T6311] PC is at io_ring_buffers_peek+0x24/0x258 [ 416.815607][ T6311] LR is at io_buffers_peek+0x68/0x8c [ 416.815793][ T6311] pc : [<80889608>] lr : [<80889d4c>] psr: 20000013 [ 416.815972][ T6311] sp : dfc41d90 ip : dfc41dd8 fp : dfc41dd4 [ 416.816146][ T6311] r10: 00000060 r9 : 00000000 r8 : 8575ca80 [ 416.816418][ T6311] r7 : 849b080c r6 : 849b0800 r5 : dfc41e14 r4 : 8567a000 [ 416.816713][ T6311] r3 : 00000001 r2 : 849b080c r1 : dfc41e14 r0 : 8567a000 [ 416.817477][ T6311] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 416.818315][ T6311] Control: 30c5387d Table: 8558a900 DAC: fffffffd [ 416.818907][ T6311] Register r0 information: slab io_kiocb start 8567a000 pointer offset 0 size 192 [ 416.819726][ T6311] Register r1 information: 2-page vmalloc region starting at 0xdfc40000 allocated at kernel_clone+0xac/0x3e4 [ 416.820362][ T6311] Register r2 information: slab kmalloc-256 start 849b0800 pointer offset 12 size 256 [ 416.820806][ T6311] Register r3 information: non-paged memory [ 416.821110][ T6311] Register r4 information: slab io_kiocb start 8567a000 pointer offset 0 size 192 [ 416.821535][ T6311] Register r5 information: 2-page vmalloc region starting at 0xdfc40000 allocated at kernel_clone+0xac/0x3e4 [ 416.821914][ T6311] Register r6 information: slab kmalloc-256 start 849b0800 pointer offset 0 size 256 [ 416.822267][ T6311] Register r7 information: slab kmalloc-256 start 849b0800 pointer offset 12 size 256 [ 416.822600][ T6311] Register r8 information: slab kmalloc-64 start 8575ca80 pointer offset 0 size 64 [ 416.822951][ T6311] Register r9 information: NULL pointer [ 416.823163][ T6311] Register r10 information: non-paged memory [ 416.823361][ T6311] Register r11 information: 2-page vmalloc region starting at 0xdfc40000 allocated at kernel_clone+0xac/0x3e4 [ 416.823697][ T6311] Register r12 information: 2-page vmalloc region starting at 0xdfc40000 allocated at kernel_clone+0xac/0x3e4 [ 416.824143][ T6311] Process syz.0.739 (pid: 6311, stack limit = 0xdfc40000) [ 416.824661][ T6311] Stack: (0xdfc41d90 to 0xdfc42000) [ 416.824900][ T6311] 1d80: 81a4c2d4 8030cb14 84c89900 00000001 [ 416.826518][ T6311] 1da0: 00010000 849b080c 00000000 8567a000 dfc41e14 849b0800 849b080c 00000000 [ 416.827015][ T6311] 1dc0: 80000001 00000060 dfc41dec dfc41dd8 80889d4c 808895f0 850d6f00 8567a000 [ 416.827284][ T6311] 1de0: dfc41e54 dfc41df0 8089327c 80889cf0 00000000 dfc41dd8 849b0800 daa82421 [ 416.827593][ T6311] 1e00: 00010001 00000001 84c89928 00000000 00000000 849b080c 00000000 00000000 [ 416.827882][ T6311] 1e20: 00010001 daa82421 dfc41e54 8567a000 81cf0ca0 00000000 00000000 00000000 [ 416.828110][ T6311] 1e40: 80000001 84160c00 dfc41e7c dfc41e58 8088225c 80892fd4 8567a000 80000001 [ 416.828405][ T6311] 1e60: 0000001b 81cf0b5c 8571e0c0 00000000 dfc41ebc dfc41e80 80886d2c 8088221c [ 416.828691][ T6311] 1e80: 8567a240 8567a300 8567a3c0 81cf0ca0 8567a540 84c89800 8567a06c 8567a000 [ 416.828991][ T6311] 1ea0: 85800000 00000000 00000000 84160c00 dfc41f14 dfc41ec0 80887844 80886cf0 [ 416.829282][ T6311] 1ec0: 8088e200 81a4c278 00000000 00000000 00000800 00000800 81cf0b5c 00000800 [ 416.829572][ T6311] 1ee0: 84c89800 daa82421 8571e600 00000042 84c89800 00003517 8571e600 00000000 [ 416.829856][ T6311] 1f00: 84160c00 00000000 dfc41fa4 dfc41f18 808882ec 80887644 ecac8b10 84c89840 [ 416.830150][ T6311] 1f20: 00000000 0000173d 81a50050 81a4ff20 dfc41f54 dfc41f40 8026b438 8029ce24 [ 416.830440][ T6311] 1f40: dfc41fb0 40000000 dfc41f84 dfc41f58 802229dc 8026b3f4 00000000 8281d05c [ 416.830775][ T6311] 1f60: dfc41fb0 0014c490 ecac8b10 80222930 00000000 daa82421 dfc41fac 00000000 [ 416.831065][ T6311] 1f80: 00000000 002e64d4 000001aa 8020029c 84160c00 000001aa 00000000 dfc41fa8 [ 416.831366][ T6311] 1fa0: 80200060 808881c0 00000000 00000000 00000007 00003517 0000173d 00000042 [ 416.831636][ T6311] 1fc0: 00000000 00000000 002e64d4 000001aa 002d0000 00000000 00006364 76b630bc [ 416.833672][ T6311] 1fe0: 76b62ec0 76b62eb0 0001939c 00131f30 60000010 00000007 00000000 00000000 [ 416.836409][ T6311] Call trace: [ 416.836742][ T6311] [<808895e4>] (io_ring_buffers_peek) from [<80889d4c>] (io_buffers_peek+0x68/0x8c) [ 416.837112][ T6311] r10:00000060 r9:80000001 r8:00000000 r7:849b080c r6:849b0800 r5:dfc41e14 [ 416.837357][ T6311] r4:8567a000 [ 416.837505][ T6311] [<80889ce4>] (io_buffers_peek) from [<8089327c>] (io_recv+0x2b4/0x46c) [ 416.837753][ T6311] r5:8567a000 r4:850d6f00 [ 416.837893][ T6311] [<80892fc8>] (io_recv) from [<8088225c>] (__io_issue_sqe+0x4c/0x1c0) [ 416.838138][ T6311] r10:84160c00 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0ca0 [ 416.838365][ T6311] r4:8567a000 [ 416.838477][ T6311] [<80882210>] (__io_issue_sqe) from [<80886d2c>] (io_issue_sqe+0x48/0x59c) [ 416.838712][ T6311] r9:00000000 r8:8571e0c0 r7:81cf0b5c r6:0000001b r5:80000001 r4:8567a000 [ 416.838923][ T6311] [<80886ce4>] (io_issue_sqe) from [<80887844>] (io_submit_sqes+0x20c/0x938) [ 416.839179][ T6311] r10:84160c00 r9:00000000 r8:00000000 r7:85800000 r6:8567a000 r5:8567a06c [ 416.839400][ T6311] r4:84c89800 [ 416.839506][ T6311] [<80887638>] (io_submit_sqes) from [<808882ec>] (sys_io_uring_enter+0x138/0x780) [ 416.839760][ T6311] r10:00000000 r9:84160c00 r8:00000000 r7:8571e600 r6:00003517 r5:84c89800 [ 416.839983][ T6311] r4:00000042 [ 416.840090][ T6311] [<808881b4>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 416.840394][ T6311] Exception stack(0xdfc41fa8 to 0xdfc41ff0) [ 416.840626][ T6311] 1fa0: 00000000 00000000 00000007 00003517 0000173d 00000042 [ 416.840869][ T6311] 1fc0: 00000000 00000000 002e64d4 000001aa 002d0000 00000000 00006364 76b630bc [ 416.841151][ T6311] 1fe0: 76b62ec0 76b62eb0 0001939c 00131f30 [ 416.841334][ T6311] r10:000001aa r9:84160c00 r8:8020029c r7:000001aa r6:002e64d4 r5:00000000 [ 416.841555][ T6311] r4:00000000 [ 416.841829][ T6311] Code: e1a08002 e5912000 e50b2030 e1a05001 (e1d920be) [ 416.843629][ T6311] ---[ end trace 0000000000000000 ]--- [ 416.844364][ T31] audit: type=1400 audit(416.750:302): avc: denied { read } for pid=2908 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 416.844705][ T31] audit: type=1400 audit(416.750:303): avc: denied { search } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.844863][ T31] audit: type=1400 audit(416.750:304): avc: denied { write } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.844992][ T31] audit: type=1400 audit(416.750:305): avc: denied { add_name } for pid=2908 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.845116][ T31] audit: type=1400 audit(416.750:306): avc: denied { create } for pid=2908 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 416.845240][ T31] audit: type=1400 audit(416.750:307): avc: denied { append open } for pid=2908 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 416.845374][ T31] audit: type=1400 audit(416.760:308): avc: denied { getattr } for pid=2908 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.897510][ T6311] Kernel panic - not syncing: Fatal exception [ 416.899514][ T6311] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:04:26 Registers: info registers vcpu 0 CPU#0 R00=8448dc40 R01=00000020 R02=ebadd000 R03=00000000 R04=8447c02b R05=8448dc40 R06=80a62868 R07=8447c058 R08=8282a2b8 R09=00000000 R10=000008f7 R11=dfc419cc R12=00000002 R13=dfc419c0 R14=8295b2ec R15=80a628c0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=7ecc26f8 R01=0000003e R02=00000000 R03=00000002 R04=00000010 R05=7ecc26f8 R06=7ecc27f4 R07=00000000 R08=00000000 R09=00000000 R10=7ecc27cc R11=00000000 R12=76e87e9c R13=7ecc2238 R14=76d79e18 R15=76d791c4 PSR=60010010 -ZC- A S usr32 s00=36303a30 s01=2036353a d00=2036353a36303a30 s02=54205b5d s03=31313336 d01=3131333654205b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=554e206c s11=70204c4c d05=70204c4c554e206c s12=746e696f s13=64207265 d06=64207265746e696f s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000