last executing test programs: 19m42.922152652s ago: executing program 0 (id=8841): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20040011}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19m42.831771977s ago: executing program 0 (id=8842): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282c01, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r2, r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x20000004) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000003c0)='.pending_reads\x00', 0x40440, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x5450, 0x0) r5 = dup3(r3, r0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r5, &(0x7f0000000340)={0x2, 0x0, @remote, 0x4}, 0x10) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4008641c, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20044844, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, r6, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x9, 0x3, 0x4, 0x41c66340, 0xe85d, 0x40, 0x3, 0x80, 0x401}) 19m39.593485027s ago: executing program 0 (id=8846): pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockname$unix(r0, 0x0, &(0x7f00000001c0)) (fail_nth: 2) 19m39.492233052s ago: executing program 0 (id=8847): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282c01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @remote, 0x4}, 0x10) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4008641c, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) 19m36.312370469s ago: executing program 0 (id=8848): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282c01, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="140000007200000005001deb7ab58d50bb6d1914821b6f22c29b0004b7a34920daab68c568f500"], &(0x7f0000000180), 0x1000) connect$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @remote, 0x4}, 0x10) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4008641c, 0x0) 19m36.193134565s ago: executing program 0 (id=8849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x32, 0x0, 0x0) (fail_nth: 1) 18m50.835556952s ago: executing program 32 (id=8849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x32, 0x0, 0x0) (fail_nth: 1) 1m31.032305452s ago: executing program 1 (id=10240): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 1m28.822715062s ago: executing program 1 (id=10241): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1m26.051195402s ago: executing program 1 (id=10242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) 1m14.29273857s ago: executing program 1 (id=10246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x6, 0x5, 0x2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x4848) 1m10.103142937s ago: executing program 1 (id=10247): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 56.263017858s ago: executing program 1 (id=10253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) 27.663848629s ago: executing program 2 (id=10266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r0, 0x5749d4c5, 0x6, 0x5, 0x4, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.554868804s ago: executing program 2 (id=10267): mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/197, 0xc5}], 0x1, 0x2, 0x4) 12.393864398s ago: executing program 2 (id=10268): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "38fafefa"}]}}, 0x0}, 0x0) 12.391059348s ago: executing program 2 (id=10269): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x0) socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff, 0x100002}, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) 10.372329327s ago: executing program 33 (id=10253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) 9.783023829s ago: executing program 2 (id=10271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) 7.403910688s ago: executing program 2 (id=10272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) 0s ago: executing program 3 (id=10270): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) kernel console output (not intermixed with test programs): ) [ 5756.268629][T11987] r10:000001a2 r9:84eeaf00 r8:85418000 r7:86621600 r6:855bcec0 r5:86621600 [ 5756.268648][T11987] r4:00000820 [ 5756.268662][T11987] [<815573f8>] (skb_clone) from [<8166d87c>] (__netlink_deliver_tap+0x1f4/0x28c) [ 5756.268720][T11987] r5:00000014 r4:855bc800 [ 5756.268735][T11987] [<8166d688>] (__netlink_deliver_tap) from [<81670bdc>] (netlink_unicast+0x2f0/0x30c) [ 5756.268796][T11987] r10:00000000 r9:00000000 r8:84da49c0 r7:86621600 r6:84eeaf00 r5:00000014 [ 5756.268813][T11987] r4:85418000 [ 5756.268827][T11987] [<816708ec>] (netlink_unicast) from [<81670dc4>] (netlink_sendmsg+0x1cc/0x444) [ 5756.268889][T11987] r9:00000000 r8:00000000 r7:84a23c00 r6:00000014 r5:86621600 r4:e0361f20 [ 5756.268904][T11987] [<81670bf8>] (netlink_sendmsg) from [<81542d20>] (__sock_sendmsg+0x44/0x78) [ 5756.268973][T11987] r10:00000000 r9:e0361dc4 r8:e0361dc4 r7:00000000 r6:85090780 r5:e0361f20 [ 5756.268991][T11987] r4:00000000 [ 5756.269006][T11987] [<81542cdc>] (__sock_sendmsg) from [<81544074>] (____sys_sendmsg+0x298/0x2cc) [ 5756.269063][T11987] r7:00000000 r6:85090780 r5:00008000 r4:e0361f20 [ 5756.269078][T11987] [<81543ddc>] (____sys_sendmsg) from [<8154603c>] (___sys_sendmsg+0x9c/0xd0) [ 5756.269141][T11987] r10:e0361e24 r9:20000200 r8:00008000 r7:00000000 r6:85090780 r5:e0361f20 [ 5756.269159][T11987] r4:00000000 [ 5756.269174][T11987] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 5756.269238][T11987] r10:00000128 r9:849b8000 r8:855e79c0 r7:00008000 r6:20000200 r5:855e79c1 [ 5756.269256][T11987] r4:00000003 [ 5756.269270][T11987] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 5756.269331][T11987] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 5756.269345][T11987] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5756.269392][T11987] Exception stack(0xe0361fa8 to 0xe0361ff0) [ 5756.269426][T11987] 1fa0: 00000000 00000000 00000003 20000200 00008000 00000000 [ 5756.269459][T11987] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8a0bc [ 5756.269483][T11987] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 5767.351442][T12060] fuse: Unknown parameter 'Ì0x000000000000000700000000000000000000003000000000000000000000x000000000000000400000000000000000000' [ 5772.964687][T12082] FAULT_INJECTION: forcing a failure. [ 5772.964687][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 5772.965826][T12082] CPU: 1 UID: 0 PID: 12082 Comm: syz.2.9381 Not tainted syzkaller #0 PREEMPT [ 5772.965916][T12082] Hardware name: ARM-Versatile Express [ 5772.965931][T12082] Call trace: [ 5772.965954][T12082] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5772.966027][T12082] r7:00000c40 r6:00000000 r5:60000013 r4:8226023c [ 5772.966037][T12082] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5772.966067][T12082] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5772.966132][T12082] r5:84050000 r4:82917bc0 [ 5772.966141][T12082] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5772.966178][T12082] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 5772.966217][T12082] r8:84050000 r7:00000c40 r6:855e7928 r5:00001000 r4:830016c0 [ 5772.966226][T12082] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 5772.966252][T12082] [<80503b8c>] (__kmalloc_noprof) from [<807c352c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 5772.966290][T12082] r10:84050000 r9:83318000 r8:00000000 r7:83415990 r6:855e7928 r5:00001000 [ 5772.966300][T12082] r4:00000000 [ 5772.966308][T12082] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 5772.966344][T12082] r10:84050000 r9:00000000 r8:855e7900 r7:00003ba0 r6:00000004 r5:81cd6504 [ 5772.966356][T12082] r4:855e7928 r3:826c0200 [ 5772.966364][T12082] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 5772.966399][T12082] r9:00000004 r8:855e7900 r7:00000000 r6:00000000 r5:00003ba0 r4:855e7900 [ 5772.966408][T12082] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 5772.966438][T12082] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 5772.966474][T12082] r7:00000000 r6:855e7901 r5:00000000 r4:00003ba0 [ 5772.966483][T12082] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5772.966510][T12082] Exception stack(0xe0375fa8 to 0xe0375ff0) [ 5772.966533][T12082] 5fa0: 00000000 00000000 00000004 00003ba0 00000000 00000000 [ 5772.966552][T12082] 5fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f430bc [ 5772.966567][T12082] 5fe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 5772.966587][T12082] r10:00000036 r9:84050000 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 5772.966598][T12082] r4:00000000 [ 5772.968746][T12082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5777.348908][T12108] FAULT_INJECTION: forcing a failure. [ 5777.348908][T12108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5777.350741][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.2.9387 Not tainted syzkaller #0 PREEMPT [ 5777.350855][T12108] Hardware name: ARM-Versatile Express [ 5777.350870][T12108] Call trace: [ 5777.350892][T12108] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5777.350964][T12108] r7:e04a1e20 r6:00000000 r5:60000013 r4:8226023c [ 5777.350975][T12108] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5777.351003][T12108] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5777.351034][T12108] r5:8546ec00 r4:8294f150 [ 5777.351042][T12108] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5777.351075][T12108] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5777.351110][T12108] r8:00044000 r7:e04a1e20 r6:20000180 r5:00000000 r4:e04a1f20 [ 5777.351118][T12108] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5777.351145][T12108] [<809725c0>] (should_fail_usercopy) from [<81545ec0>] (copy_msghdr_from_user+0x50/0x130) [ 5777.351177][T12108] [<81545e70>] (copy_msghdr_from_user) from [<81546018>] (___sys_sendmsg+0x78/0xd0) [ 5777.351212][T12108] r8:00044000 r7:00000000 r6:835a7400 r5:e04a1f20 r4:e04a1e64 [ 5777.351220][T12108] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 5777.351257][T12108] r10:00000128 r9:8546ec00 r8:855e7180 r7:00044000 r6:20000180 r5:855e7181 [ 5777.351266][T12108] r4:00000004 [ 5777.351274][T12108] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 5777.351364][T12108] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 5777.351374][T12108] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5777.351402][T12108] Exception stack(0xe04a1fa8 to 0xe04a1ff0) [ 5777.351423][T12108] 1fa0: 00000000 00000000 00000004 20000180 00044000 00000000 [ 5777.351441][T12108] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f220bc [ 5777.351455][T12108] 1fe0: 76f21ec0 76f21eb0 0001948c 001322c0 [ 5793.084402][T12192] FAULT_INJECTION: forcing a failure. [ 5793.084402][T12192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5793.087363][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.1.9408 Not tainted syzkaller #0 PREEMPT [ 5793.087453][T12192] Hardware name: ARM-Versatile Express [ 5793.087467][T12192] Call trace: [ 5793.087489][T12192] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5793.087549][T12192] r7:00000004 r6:00000000 r5:60000013 r4:8226023c [ 5793.087559][T12192] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5793.087586][T12192] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5793.087614][T12192] r5:84050c00 r4:8294f150 [ 5793.087622][T12192] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5793.087652][T12192] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5793.087690][T12192] r8:83a51000 r7:00000004 r6:84050c00 r5:20000140 r4:e04e1e90 [ 5793.087699][T12192] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5793.087726][T12192] [<809725c0>] (should_fail_usercopy) from [<8055b5f4>] (cp_statx+0x174/0x1ec) [ 5793.087754][T12192] [<8055b480>] (cp_statx) from [<8055bfb8>] (do_statx+0x88/0xb4) [ 5793.087783][T12192] r6:20000140 r5:00002000 r4:00000010 [ 5793.087791][T12192] [<8055bf30>] (do_statx) from [<8055c1b8>] (sys_statx+0x70/0xd0) [ 5793.087823][T12192] r8:8020029c r7:00000010 r6:00000004 r5:00002000 r4:83a51000 [ 5793.087831][T12192] [<8055c148>] (sys_statx) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5793.087855][T12192] Exception stack(0xe04e1fa8 to 0xe04e1ff0) [ 5793.087875][T12192] 1fa0: 20000140 00000000 00000004 20000100 00002000 00000010 [ 5793.087893][T12192] 1fc0: 20000140 00000000 00130270 0000018d 002e0000 00000000 00006364 76f8a0bc [ 5793.087907][T12192] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 5793.087922][T12192] r7:0000018d r6:00130270 r5:00000000 r4:20000140 [ 5795.554648][T12203] FAULT_INJECTION: forcing a failure. [ 5795.554648][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 5795.555890][T12203] CPU: 1 UID: 0 PID: 12203 Comm: syz.2.9411 Not tainted syzkaller #0 PREEMPT [ 5795.555994][T12203] Hardware name: ARM-Versatile Express [ 5795.556026][T12203] Call trace: [ 5795.556070][T12203] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5795.556184][T12203] r7:00000d40 r6:00000000 r5:60000013 r4:8226023c [ 5795.556205][T12203] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5795.556258][T12203] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5795.556315][T12203] r5:84056000 r4:82917bc0 [ 5795.556331][T12203] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5795.556392][T12203] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 5795.556466][T12203] r8:84056000 r7:00000d40 r6:85840aa8 r5:0000001a r4:83001240 [ 5795.556485][T12203] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 5795.556535][T12203] [<80503b8c>] (__kmalloc_noprof) from [<807c3434>] (tomoyo_encode2+0x64/0xf0) [ 5795.556605][T12203] r10:00000fff r9:83319400 r8:00000000 r7:850213b8 r6:85840aa8 r5:83b10ffd [ 5795.556628][T12203] r4:83b10fee [ 5795.556647][T12203] [<807c33d0>] (tomoyo_encode2) from [<807c34e4>] (tomoyo_encode+0x24/0x30) [ 5795.556771][T12203] r9:83319400 r8:00000000 r7:850213b8 r6:85840aa8 r5:00001000 r4:83b10fef [ 5795.557230][T12203] [<807c34c0>] (tomoyo_encode) from [<807c3570>] (tomoyo_realpath_from_path+0x80/0x17c) [ 5795.557309][T12203] r5:00001000 r4:83b10000 [ 5795.557402][T12203] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bfa74>] (tomoyo_path_perm+0xe4/0x200) [ 5795.557591][T12203] r10:000000c5 r9:84056000 r8:00000001 r7:00000000 r6:00000005 r5:00000000 [ 5795.557620][T12203] r4:00000000 r3:00000000 [ 5795.557638][T12203] [<807bf990>] (tomoyo_path_perm) from [<807c3d7c>] (tomoyo_inode_getattr+0x1c/0x20) [ 5795.557733][T12203] r8:8020029c r7:85840a80 r6:85840aa8 r5:e0539eb8 r4:85840aa8 [ 5795.557944][T12203] [<807c3d60>] (tomoyo_inode_getattr) from [<8077ca50>] (security_inode_getattr+0x64/0x1ac) [ 5795.558150][T12203] [<8077c9ec>] (security_inode_getattr) from [<8055b8f4>] (vfs_fstat+0x30/0x8c) [ 5795.558224][T12203] r5:e0539eb8 r4:85840a81 [ 5795.558243][T12203] [<8055b8c4>] (vfs_fstat) from [<8055ba10>] (__do_sys_fstat64+0x44/0x80) [ 5795.558407][T12203] r7:000000c5 r6:00130270 r5:20001380 r4:00000003 [ 5795.558434][T12203] [<8055b9cc>] (__do_sys_fstat64) from [<8055bf18>] (sys_fstat64+0x10/0x14) [ 5795.558533][T12203] r5:00000000 r4:00000000 [ 5795.558647][T12203] [<8055bf08>] (sys_fstat64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5795.558804][T12203] Exception stack(0xe0539fa8 to 0xe0539ff0) [ 5795.558877][T12203] 9fa0: 00000000 00000000 00000003 20001380 00000000 00000000 [ 5795.558986][T12203] 9fc0: 00000000 00000000 00130270 000000c5 002e0000 00000000 00006364 76f430bc [ 5795.559076][T12203] 9fe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 5795.559419][T12203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5795.758623][T12207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12207 comm=syz.2.9413 [ 5795.966145][T12214] FAULT_INJECTION: forcing a failure. [ 5795.966145][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 5795.966415][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.2.9416 Not tainted syzkaller #0 PREEMPT [ 5795.966477][T12214] Hardware name: ARM-Versatile Express [ 5795.966491][T12214] Call trace: [ 5795.966514][T12214] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5795.966571][T12214] r7:84b6b000 r6:00000000 r5:60000013 r4:8226023c [ 5795.966581][T12214] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5795.966608][T12214] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5795.966638][T12214] r5:84b6b000 r4:82917bc0 [ 5795.966646][T12214] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5795.966676][T12214] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 5795.966717][T12214] r8:00000000 r7:84b6b000 r6:00000cc0 r5:ffffffff r4:8329d300 [ 5795.966876][T12214] [<8051f22c>] (should_failslab) from [<80503238>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 5795.967106][T12214] [<805031e8>] (kmem_cache_alloc_node_noprof) from [<81550fac>] (__alloc_skb+0x138/0x160) [ 5795.967217][T12214] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:8329d300 r5:ffffffff [ 5795.967546][T12214] r4:828060c0 [ 5795.967574][T12214] [<81550e74>] (__alloc_skb) from [<816705e4>] (netlink_alloc_large_skb+0x88/0xa0) [ 5795.967765][T12214] r8:00000000 r7:876b6400 r6:00000018 r5:835b0c80 r4:00000140 [ 5795.967788][T12214] [<8167055c>] (netlink_alloc_large_skb) from [<81670d2c>] (netlink_sendmsg+0x134/0x444) [ 5795.968003][T12214] r5:835b0c80 r4:e0539e68 [ 5795.968027][T12214] [<81670bf8>] (netlink_sendmsg) from [<81542d20>] (__sock_sendmsg+0x44/0x78) [ 5795.968300][T12214] r10:81e54cc0 r9:20000340 r8:00000000 r7:835b0c80 r6:835b0c80 r5:e0539e68 [ 5795.968433][T12214] r4:00000000 [ 5795.968452][T12214] [<81542cdc>] (__sock_sendmsg) from [<81542df4>] (sock_write_iter+0xa0/0xfc) [ 5795.968716][T12214] r7:835b0c80 r6:85840480 r5:e0539f08 r4:e0539ef0 [ 5795.968900][T12214] [<81542d54>] (sock_write_iter) from [<80553ff8>] (vfs_write+0x3a4/0x44c) [ 5795.969091][T12214] r7:84b6b000 r6:00000018 r5:85840480 r4:00004004 [ 5795.969111][T12214] [<80553c54>] (vfs_write) from [<80554264>] (ksys_write+0xc8/0xe8) [ 5795.969205][T12214] r10:00000004 r9:84b6b000 r8:8020029c r7:00000018 r6:20000340 r5:85840480 [ 5795.969228][T12214] r4:85840481 [ 5795.969310][T12214] [<8055419c>] (ksys_write) from [<80554294>] (sys_write+0x10/0x14) [ 5795.969380][T12214] r7:00000004 r6:00130270 r5:00000000 r4:00000000 [ 5795.969463][T12214] [<80554284>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5795.970128][T12214] Exception stack(0xe0539fa8 to 0xe0539ff0) [ 5795.970177][T12214] 9fa0: 00000000 00000000 00000003 20000340 00000018 00000000 [ 5795.970404][T12214] 9fc0: 00000000 00000000 00130270 00000004 002e0000 00000000 00006364 76f430bc [ 5795.970755][T12214] 9fe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 5796.821808][T12234] FAULT_INJECTION: forcing a failure. [ 5796.821808][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 5796.822231][T12234] CPU: 1 UID: 0 PID: 12234 Comm: syz.1.9423 Not tainted syzkaller #0 PREEMPT [ 5796.822330][T12234] Hardware name: ARM-Versatile Express [ 5796.822353][T12234] Call trace: [ 5796.822399][T12234] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5796.822510][T12234] r7:84b6bc00 r6:00000000 r5:60000013 r4:8226023c [ 5796.822531][T12234] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5796.822694][T12234] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5796.822777][T12234] r5:84b6bc00 r4:82917bc0 [ 5796.822869][T12234] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5796.822946][T12234] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 5796.823182][T12234] r8:00000000 r7:84b6bc00 r6:00000cc0 r5:ffffffff r4:8329d300 [ 5796.823259][T12234] [<8051f22c>] (should_failslab) from [<80503238>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 5796.823388][T12234] [<805031e8>] (kmem_cache_alloc_node_noprof) from [<81550fac>] (__alloc_skb+0x138/0x160) [ 5796.823463][T12234] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:8329d300 r5:ffffffff [ 5796.823673][T12234] r4:828060c0 [ 5796.823841][T12234] [<81550e74>] (__alloc_skb) from [<816705e4>] (netlink_alloc_large_skb+0x88/0xa0) [ 5796.824187][T12234] r8:00000000 r7:876b5c00 r6:0000003c r5:835b1180 r4:00000140 [ 5796.824372][T12234] [<8167055c>] (netlink_alloc_large_skb) from [<81670d2c>] (netlink_sendmsg+0x134/0x444) [ 5796.824576][T12234] r5:835b1180 r4:e0535f20 [ 5796.824600][T12234] [<81670bf8>] (netlink_sendmsg) from [<81542d20>] (__sock_sendmsg+0x44/0x78) [ 5796.824682][T12234] r10:00000000 r9:e0535dc4 r8:e0535dc4 r7:00000000 r6:835b1180 r5:e0535f20 [ 5796.824759][T12234] r4:00000000 [ 5796.824942][T12234] [<81542cdc>] (__sock_sendmsg) from [<81544074>] (____sys_sendmsg+0x298/0x2cc) [ 5796.825217][T12234] r7:00000000 r6:835b1180 r5:00000000 r4:e0535f20 [ 5796.825413][T12234] [<81543ddc>] (____sys_sendmsg) from [<8154603c>] (___sys_sendmsg+0x9c/0xd0) [ 5796.825613][T12234] r10:e0535e24 r9:200025c0 r8:00000000 r7:00000000 r6:835b1180 r5:e0535f20 [ 5796.825636][T12234] r4:00000000 [ 5796.825692][T12234] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 5796.825769][T12234] r10:00000128 r9:84b6bc00 r8:85840c00 r7:00000000 r6:200025c0 r5:85840c01 [ 5796.825790][T12234] r4:00000003 [ 5796.825805][T12234] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 5796.825872][T12234] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 5796.825891][T12234] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5796.825951][T12234] Exception stack(0xe0535fa8 to 0xe0535ff0) [ 5796.826073][T12234] 5fa0: 00000000 00000000 00000003 200025c0 00000000 00000000 [ 5796.826168][T12234] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8a0bc [ 5796.826198][T12234] 5fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 5804.968410][T12280] FAULT_INJECTION: forcing a failure. [ 5804.968410][T12280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5804.968728][T12280] CPU: 1 UID: 0 PID: 12280 Comm: syz.2.9431 Not tainted syzkaller #0 PREEMPT [ 5804.968825][T12280] Hardware name: ARM-Versatile Express [ 5804.968852][T12280] Call trace: [ 5804.968894][T12280] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5804.969084][T12280] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5804.969145][T12280] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5804.969296][T12280] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5804.969366][T12280] r5:84051800 r4:8294f150 [ 5804.969385][T12280] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5804.969490][T12280] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5804.969954][T12280] r8:76ebef30 r7:00000000 r6:00000000 r5:e0569f68 r4:00000002 [ 5804.970041][T12280] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5804.970109][T12280] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5804.970306][T12280] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5804.970387][T12280] r10:00000001 r9:806084f4 r8:00000002 r7:e0569f68 r6:0000000f r5:76ebef30 [ 5804.970466][T12280] r4:84051800 r3:e0569e9f [ 5804.970633][T12280] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5804.970845][T12280] r8:76ebef30 r7:e0569f68 r6:84051800 r5:0000000f r4:858406c0 [ 5804.970946][T12280] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5804.971206][T12280] r10:00000003 r9:84051800 r8:8020029c r7:00000000 r6:00000000 r5:858406c0 [ 5804.971496][T12280] r4:858406c3 [ 5804.971564][T12280] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5804.971674][T12280] r7:00000003 r6:00000006 r5:76ebef30 r4:0000000f [ 5804.971694][T12280] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5804.971747][T12280] Exception stack(0xe0569fa8 to 0xe0569ff0) [ 5804.971790][T12280] 9fa0: 0000000f 76ebef30 00000006 76ebef30 0000000f 00000000 [ 5804.971827][T12280] 9fc0: 0000000f 76ebef30 00000006 00000003 002e0000 00000000 00006364 76ebf0bc [ 5804.971854][T12280] 9fe0: 00000158 76ebeed0 000d80f4 00130194 [ 5806.945995][T11855] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 5807.110347][T11855] usb 2-1: config 0 has no interfaces? [ 5807.112599][T11855] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 5807.114493][T11855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5807.121289][T11855] usb 2-1: config 0 descriptor?? [ 5807.337116][T11855] usb 2-1: USB disconnect, device number 50 [ 5820.054356][T12382] FAULT_INJECTION: forcing a failure. [ 5820.054356][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5820.054713][T12382] CPU: 1 UID: 0 PID: 12382 Comm: syz.2.9460 Not tainted syzkaller #0 PREEMPT [ 5820.054807][T12382] Hardware name: ARM-Versatile Express [ 5820.054831][T12382] Call trace: [ 5820.054871][T12382] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5820.055117][T12382] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5820.055193][T12382] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5820.055343][T12382] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5820.055539][T12382] r5:83a73000 r4:8294f150 [ 5820.055640][T12382] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5820.055922][T12382] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5820.056318][T12382] r8:e461deb8 r7:00000000 r6:00000001 r5:76f42f30 r4:00000001 [ 5820.056339][T12382] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5820.056396][T12382] [<809725c0>] (should_fail_usercopy) from [<808beb8c>] (kstrtouint_from_user+0x54/0x13c) [ 5820.056450][T12382] [<808beb38>] (kstrtouint_from_user) from [<80609b74>] (proc_fail_nth_write+0x40/0xf0) [ 5820.056510][T12382] r8:e461df68 r7:83a73000 r6:00000001 r5:85840600 r4:00000001 [ 5820.056527][T12382] [<80609b34>] (proc_fail_nth_write) from [<80553d00>] (vfs_write+0xac/0x44c) [ 5820.056584][T12382] r5:85840600 r4:80609b34 [ 5820.056600][T12382] [<80553c54>] (vfs_write) from [<80554210>] (ksys_write+0x74/0xe8) [ 5820.056677][T12382] r10:00000004 r9:83a73000 r8:8020029c r7:00000000 r6:00000002 r5:85840600 [ 5820.056699][T12382] r4:85840603 [ 5820.056719][T12382] [<8055419c>] (ksys_write) from [<80554294>] (sys_write+0x10/0x14) [ 5820.056778][T12382] r7:00000004 r6:00000005 r5:76f42f30 r4:00000001 [ 5820.056794][T12382] [<80554284>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5820.056842][T12382] Exception stack(0xe461dfa8 to 0xe461dff0) [ 5820.056877][T12382] dfa0: 00000001 76f42f30 00000005 76f42f30 00000001 00000000 [ 5820.056911][T12382] dfc0: 00000001 76f42f30 00000005 00000004 002e0000 00000000 00006364 76f430bc [ 5820.056941][T12382] dfe0: 00000158 76f42ed0 000d80f4 0013025c [ 5838.100437][T12506] FAULT_INJECTION: forcing a failure. [ 5838.100437][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5838.102722][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.1.9491 Not tainted syzkaller #0 PREEMPT [ 5838.102851][T12506] Hardware name: ARM-Versatile Express [ 5838.102879][T12506] Call trace: [ 5838.102924][T12506] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5838.103032][T12506] r7:b5403587 r6:00000000 r5:60000013 r4:8226023c [ 5838.103052][T12506] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5838.103273][T12506] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5838.103448][T12506] r5:84b68c00 r4:8294f150 [ 5838.103471][T12506] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5838.103544][T12506] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5838.103654][T12506] r8:00000000 r7:b5403587 r6:00000000 r5:84b69430 r4:76f68ca0 [ 5838.103722][T12506] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5838.103779][T12506] [<809725c0>] (should_fail_usercopy) from [<8022b2e4>] (preserve_vfp_context+0x78/0xc4) [ 5838.103841][T12506] [<8022b26c>] (preserve_vfp_context) from [<8022b6ac>] (setup_sigframe+0x16c/0x1c4) [ 5838.103922][T12506] r5:84b69430 r4:76f68bb8 [ 5838.103991][T12506] [<8022b540>] (setup_sigframe) from [<8022bacc>] (do_work_pending+0x2f4/0x4f8) [ 5838.104073][T12506] r10:00000128 r9:b5403587 r8:00000000 r7:84b69430 r6:76f68bb8 r5:ea785fb0 [ 5838.104098][T12506] r4:84b68c00 [ 5838.104114][T12506] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5838.104164][T12506] Exception stack(0xea785fb0 to 0xea785ff8) [ 5838.104203][T12506] 5fa0: fffffffc 200002c0 04004805 00000000 [ 5838.104300][T12506] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f690bc [ 5838.104341][T12506] 5fe0: 76f68ec0 76f68eb0 0001948c 001322c0 60000010 00000004 [ 5838.104383][T12506] r10:00000128 r9:84b68c00 r8:8020029c r7:00000128 r6:00130270 r5:00000000 [ 5838.104425][T12506] r4:00000000 [ 5847.871811][ T31] audit: type=1400 audit(5847.770:748): avc: denied { getopt } for pid=12576 comm="syz.2.9512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 5848.104421][T12588] fuse: Bad value for 'user_id' [ 5848.118797][T12588] fuse: Bad value for 'user_id' [ 5863.532279][T12678] FAULT_INJECTION: forcing a failure. [ 5863.532279][T12678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5863.532604][T12678] CPU: 1 UID: 0 PID: 12678 Comm: syz.1.9541 Not tainted syzkaller #0 PREEMPT [ 5863.532701][T12678] Hardware name: ARM-Versatile Express [ 5863.532733][T12678] Call trace: [ 5863.533105][T12678] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5863.533352][T12678] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5863.533498][T12678] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5863.533647][T12678] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5863.533723][T12678] r5:83a66c00 r4:8294f150 [ 5863.533774][T12678] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5863.533847][T12678] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5863.533999][T12678] r8:ea88deb8 r7:00000000 r6:00000001 r5:76f05f30 r4:00000001 [ 5863.534086][T12678] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5863.534150][T12678] [<809725c0>] (should_fail_usercopy) from [<808beb8c>] (kstrtouint_from_user+0x54/0x13c) [ 5863.534281][T12678] [<808beb38>] (kstrtouint_from_user) from [<80609b74>] (proc_fail_nth_write+0x40/0xf0) [ 5863.534513][T12678] r8:ea88df68 r7:83a66c00 r6:00000001 r5:8488a240 r4:00000001 [ 5863.534587][T12678] [<80609b34>] (proc_fail_nth_write) from [<80553d00>] (vfs_write+0xac/0x44c) [ 5863.534908][T12678] r5:8488a240 r4:80609b34 [ 5863.534948][T12678] [<80553c54>] (vfs_write) from [<80554210>] (ksys_write+0x74/0xe8) [ 5863.535358][T12678] r10:00000004 r9:83a66c00 r8:8020029c r7:00000000 r6:00000002 r5:8488a240 [ 5863.535400][T12678] r4:8488a243 [ 5863.535431][T12678] [<8055419c>] (ksys_write) from [<80554294>] (sys_write+0x10/0x14) [ 5863.535606][T12678] r7:00000004 r6:00000005 r5:76f05f30 r4:00000001 [ 5863.535627][T12678] [<80554284>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5863.535687][T12678] Exception stack(0xea88dfa8 to 0xea88dff0) [ 5863.535741][T12678] dfa0: 00000001 76f05f30 00000005 76f05f30 00000001 00000000 [ 5863.535793][T12678] dfc0: 00000001 76f05f30 00000005 00000004 002e0000 00000000 00006364 76f060bc [ 5863.535831][T12678] dfe0: 00000158 76f05ed0 000d80f4 0013025c [ 5869.437334][ T31] audit: type=1400 audit(5869.340:749): avc: denied { write } for pid=12701 comm="syz.1.9548" name="ubi_ctrl" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:policy_src_t:s0" [ 5875.990912][T12743] FAULT_INJECTION: forcing a failure. [ 5875.990912][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5875.993534][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.1.9559 Not tainted syzkaller #0 PREEMPT [ 5875.993675][T12743] Hardware name: ARM-Versatile Express [ 5875.993701][T12743] Call trace: [ 5875.993744][T12743] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5875.993872][T12743] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5875.993893][T12743] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5875.993948][T12743] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5875.994004][T12743] r5:85532400 r4:8294f150 [ 5875.994021][T12743] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5875.994079][T12743] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5875.994143][T12743] r8:76f89f30 r7:00000000 r6:00000000 r5:ea8adf68 r4:00000002 [ 5875.994162][T12743] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5875.994215][T12743] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5875.994274][T12743] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5875.994345][T12743] r10:00000001 r9:806084f4 r8:00000002 r7:ea8adf68 r6:0000000f r5:76f89f30 [ 5875.994370][T12743] r4:85532400 r3:ea8ade9f [ 5875.994387][T12743] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5875.994453][T12743] r8:76f89f30 r7:ea8adf68 r6:85532400 r5:0000000f r4:855e7c00 [ 5875.994474][T12743] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5875.994544][T12743] r10:00000003 r9:85532400 r8:8020029c r7:00000000 r6:00000000 r5:855e7c00 [ 5875.994565][T12743] r4:855e7c03 [ 5875.994581][T12743] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5875.994643][T12743] r7:00000003 r6:00000004 r5:76f89f30 r4:0000000f [ 5875.994661][T12743] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5875.994711][T12743] Exception stack(0xea8adfa8 to 0xea8adff0) [ 5875.994750][T12743] dfa0: 0000000f 76f89f30 00000004 76f89f30 0000000f 00000000 [ 5875.994786][T12743] dfc0: 0000000f 76f89f30 00000004 00000003 002e0000 00000000 00006364 76f8a0bc [ 5875.994816][T12743] dfe0: 00000158 76f89ed0 000d80f4 00130194 [ 5879.356420][T12767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9568'. [ 5886.076720][T12804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12804 comm=syz.1.9577 [ 5892.650787][T12851] FAULT_INJECTION: forcing a failure. [ 5892.650787][T12851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5892.651059][T12851] CPU: 1 UID: 0 PID: 12851 Comm: syz.1.9589 Not tainted syzkaller #0 PREEMPT [ 5892.651114][T12851] Hardware name: ARM-Versatile Express [ 5892.651128][T12851] Call trace: [ 5892.651151][T12851] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5892.651218][T12851] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5892.651229][T12851] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5892.651260][T12851] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5892.651337][T12851] r5:84050c00 r4:8294f150 [ 5892.651359][T12851] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5892.651402][T12851] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5892.651441][T12851] r8:76f89f30 r7:00000000 r6:00000000 r5:ea97df68 r4:00000002 [ 5892.651451][T12851] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5892.651483][T12851] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5892.651519][T12851] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5892.651561][T12851] r10:00000001 r9:806084f4 r8:00000002 r7:ea97df68 r6:0000000f r5:76f89f30 [ 5892.651575][T12851] r4:84050c00 r3:ea97de9f [ 5892.651595][T12851] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5892.652239][T12851] r8:76f89f30 r7:ea97df68 r6:84050c00 r5:0000000f r4:8488a780 [ 5892.652629][T12851] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5892.653021][T12851] r10:00000003 r9:84050c00 r8:8020029c r7:00000000 r6:00000000 r5:8488a780 [ 5892.653286][T12851] r4:8488a783 [ 5892.653307][T12851] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5892.653537][T12851] r7:00000003 r6:00000004 r5:76f89f30 r4:0000000f [ 5892.653903][T12851] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5892.654062][T12851] Exception stack(0xea97dfa8 to 0xea97dff0) [ 5892.654284][T12851] dfa0: 0000000f 76f89f30 00000004 76f89f30 0000000f 00000000 [ 5892.654488][T12851] dfc0: 0000000f 76f89f30 00000004 00000003 002e0000 00000000 00006364 76f8a0bc [ 5892.654511][T12851] dfe0: 00000158 76f89ed0 000d80f4 00130194 [ 5896.960552][T12885] FAULT_INJECTION: forcing a failure. [ 5896.960552][T12885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5896.960980][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.2.9600 Not tainted syzkaller #0 PREEMPT [ 5896.961098][T12885] Hardware name: ARM-Versatile Express [ 5896.961125][T12885] Call trace: [ 5896.961168][T12885] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5896.961292][T12885] r7:ea96de20 r6:00000000 r5:60000013 r4:8226023c [ 5896.961437][T12885] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5896.961569][T12885] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5896.961734][T12885] r5:8404e000 r4:8294f150 [ 5896.961811][T12885] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5896.961881][T12885] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5896.962056][T12885] r8:00000001 r7:ea96de20 r6:20000100 r5:00000000 r4:ea96df20 [ 5896.962082][T12885] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5896.962184][T12885] [<809725c0>] (should_fail_usercopy) from [<81545ec0>] (copy_msghdr_from_user+0x50/0x130) [ 5896.962319][T12885] [<81545e70>] (copy_msghdr_from_user) from [<81546018>] (___sys_sendmsg+0x78/0xd0) [ 5896.962403][T12885] r8:00000001 r7:00000000 r6:85058500 r5:ea96df20 r4:ea96de64 [ 5896.962449][T12885] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 5896.962550][T12885] r10:00000128 r9:8404e000 r8:8488a900 r7:00000001 r6:20000100 r5:8488a901 [ 5896.962578][T12885] r4:00000004 [ 5896.962656][T12885] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 5896.962763][T12885] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 5896.962796][T12885] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5896.963159][T12885] Exception stack(0xea96dfa8 to 0xea96dff0) [ 5896.963485][T12885] dfa0: 00000000 00000000 00000004 20000100 00000001 00000000 [ 5896.963618][T12885] dfc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f430bc [ 5896.963654][T12885] dfe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 5899.423590][T12899] fuse: Unknown parameter 'fd0x0000000000000003' [ 5901.439924][ T31] audit: type=1400 audit(5901.340:750): avc: denied { nlmsg_read } for pid=12909 comm="syz.1.9608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 5908.400523][ T31] audit: type=1400 audit(5908.300:751): avc: denied { read } for pid=12939 comm="syz.2.9615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 5912.383777][ T31] audit: type=1400 audit(5912.280:752): avc: denied { setopt } for pid=12974 comm="syz.1.9624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 5914.482733][T13017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13017 comm=syz.1.9628 [ 5916.328964][T13021] FAULT_INJECTION: forcing a failure. [ 5916.328964][T13021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5916.329146][T13021] CPU: 1 UID: 0 PID: 13021 Comm: syz.2.9626 Not tainted syzkaller #0 PREEMPT [ 5916.329203][T13021] Hardware name: ARM-Versatile Express [ 5916.329216][T13021] Call trace: [ 5916.329264][T13021] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5916.329331][T13021] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5916.329341][T13021] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5916.329372][T13021] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5916.329405][T13021] r5:8404a400 r4:8294f150 [ 5916.329413][T13021] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5916.329448][T13021] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5916.329488][T13021] r8:76edff30 r7:00000000 r6:00000000 r5:ea9f1f68 r4:00000002 [ 5916.329496][T13021] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5916.329524][T13021] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5916.329557][T13021] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5916.329821][T13021] r10:00000001 r9:806084f4 r8:00000002 r7:ea9f1f68 r6:0000000f r5:76edff30 [ 5916.330077][T13021] r4:8404a400 r3:ea9f1e9f [ 5916.330245][T13021] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5916.330693][T13021] r8:76edff30 r7:ea9f1f68 r6:8404a400 r5:0000000f r4:874c5b40 [ 5916.330980][T13021] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5916.331061][T13021] r10:00000003 r9:8404a400 r8:8020029c r7:00000000 r6:00000000 r5:874c5b40 [ 5916.331085][T13021] r4:874c5b43 [ 5916.331311][T13021] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5916.331756][T13021] r7:00000003 r6:00000005 r5:76edff30 r4:0000000f [ 5916.331965][T13021] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5916.332043][T13021] Exception stack(0xea9f1fa8 to 0xea9f1ff0) [ 5916.332134][T13021] 1fa0: 0000000f 76edff30 00000005 76edff30 0000000f 00000000 [ 5916.332326][T13021] 1fc0: 0000000f 76edff30 00000005 00000003 002e0000 00000000 00006364 76ee00bc [ 5916.332380][T13021] 1fe0: 00000158 76edfed0 000d80f4 00130194 [ 5916.611741][T13037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13037 comm=syz.2.9633 [ 5918.476927][T13035] FAULT_INJECTION: forcing a failure. [ 5918.476927][T13035] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5918.477115][T13035] CPU: 1 UID: 0 PID: 13035 Comm: syz.1.9631 Not tainted syzkaller #0 PREEMPT [ 5918.477200][T13035] Hardware name: ARM-Versatile Express [ 5918.477242][T13035] Call trace: [ 5918.477268][T13035] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5918.477327][T13035] r7:eaa35dd0 r6:00000000 r5:60000013 r4:8226023c [ 5918.477378][T13035] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5918.477410][T13035] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5918.477441][T13035] r5:841c9800 r4:828f8658 [ 5918.477449][T13035] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5918.477483][T13035] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5918.477520][T13035] r8:00000000 r7:eaa35dd0 r6:00000004 r5:00000000 r4:76f69628 [ 5918.477528][T13035] [<809725a8>] (should_fail) from [<803459cc>] (get_futex_key+0xa4/0x580) [ 5918.477559][T13035] [<80345928>] (get_futex_key) from [<8034a054>] (futex_wake+0x64/0x1dc) [ 5918.477596][T13035] r10:84f6af40 r9:eaa35dc8 r8:eaa35e90 r7:858ab900 r6:00000001 r5:ffffffff [ 5918.477606][T13035] r4:00000012 [ 5918.477615][T13035] [<80349ff0>] (futex_wake) from [<80346cc0>] (do_futex+0x100/0x1b4) [ 5918.477652][T13035] r10:84f6af40 r9:00000001 r8:eaa35e90 r7:858ab900 r6:00000000 r5:b5403587 [ 5918.477663][T13035] r4:00000001 [ 5918.477671][T13035] [<80346bc0>] (do_futex) from [<80250438>] (mm_release+0xc4/0xc8) [ 5918.477711][T13035] r4:841c9800 [ 5918.477719][T13035] [<80250374>] (mm_release) from [<80251d6c>] (exit_mm_release+0x24/0x28) [ 5918.477750][T13035] r5:8619f400 r4:841c9800 [ 5918.477758][T13035] [<80251d48>] (exit_mm_release) from [<8025b724>] (do_exit+0x1c8/0xaac) [ 5918.477791][T13035] r5:841c9800 r4:8619f400 [ 5918.477799][T13035] [<8025b55c>] (do_exit) from [<8025c1cc>] (do_group_exit+0x40/0x8c) [ 5918.478673][T13035] r7:001322c0 [ 5918.478866][T13035] [<8025c18c>] (do_group_exit) from [<8026ccd0>] (get_signal+0xa14/0xa38) [ 5918.479138][T13035] r7:001322c0 r4:841c9800 [ 5918.479587][T13035] [<8026c2bc>] (get_signal) from [<8022b8f0>] (do_work_pending+0x118/0x4f8) [ 5918.480220][T13035] r10:00000128 r9:ffffff95 r8:8020029c r7:001322c0 r6:8020029c r5:eaa35fb0 [ 5918.480243][T13035] r4:841c9800 [ 5918.480253][T13035] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5918.480701][T13035] Exception stack(0xeaa35fb0 to 0xeaa35ff8) [ 5918.481299][T13035] 5fa0: ffffff95 20000200 00000000 00000000 [ 5918.481439][T13035] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f690bc [ 5918.481570][T13035] 5fe0: 76f68ec0 76f68eb0 0001948c 001322c0 60000010 00000004 [ 5918.481652][T13035] r10:00000128 r9:841c9800 r8:8020029c r7:00000128 r6:00130270 r5:00000000 [ 5918.481712][T13035] r4:00000000 [ 5918.590955][T13050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13050 comm=syz.1.9638 [ 5919.371961][T13060] FAULT_INJECTION: forcing a failure. [ 5919.371961][T13060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5919.376043][T13060] CPU: 0 UID: 0 PID: 13060 Comm: syz.1.9643 Not tainted syzkaller #0 PREEMPT [ 5919.376299][T13060] Hardware name: ARM-Versatile Express [ 5919.376339][T13060] Call trace: [ 5919.376392][T13060] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5919.376516][T13060] r7:b5403587 r6:00000000 r5:60010113 r4:8226023c [ 5919.376539][T13060] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5919.376634][T13060] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5919.376809][T13060] r5:841c9800 r4:8294f150 [ 5919.376833][T13060] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5919.376945][T13060] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5919.377027][T13060] r8:00000000 r7:b5403587 r6:00000000 r5:841ca030 r4:76f89bb8 [ 5919.377078][T13060] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5919.377138][T13060] [<809725c0>] (should_fail_usercopy) from [<8022b664>] (setup_sigframe+0x124/0x1c4) [ 5919.377209][T13060] [<8022b540>] (setup_sigframe) from [<8022bacc>] (do_work_pending+0x2f4/0x4f8) [ 5919.377277][T13060] r10:00000004 r9:b5403587 r8:00000000 r7:841ca030 r6:76f89bb8 r5:eaa51fb0 [ 5919.377301][T13060] r4:841c9800 [ 5919.377316][T13060] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5919.377363][T13060] Exception stack(0xeaa51fb0 to 0xeaa51ff8) [ 5919.377397][T13060] 1fa0: fffffffc 00000000 00000000 00000000 [ 5919.377428][T13060] 1fc0: 00000000 00000000 00130270 00000004 002e0000 00000000 00006364 76f8a0bc [ 5919.377459][T13060] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 60000010 00000004 [ 5919.377494][T13060] r10:00000004 r9:841c9800 r8:8020029c r7:00000004 r6:00130270 r5:00000000 [ 5919.377514][T13060] r4:00000000 [ 5922.942700][T13088] FAULT_INJECTION: forcing a failure. [ 5922.942700][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5922.944327][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.1.9651 Not tainted syzkaller #0 PREEMPT [ 5922.944435][T13088] Hardware name: ARM-Versatile Express [ 5922.944461][T13088] Call trace: [ 5922.944502][T13088] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5922.944614][T13088] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5922.944639][T13088] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5922.944701][T13088] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5922.944760][T13088] r5:8404e000 r4:8294f150 [ 5922.944778][T13088] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5922.944848][T13088] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5922.944938][T13088] r8:76f89f30 r7:00000000 r6:00000000 r5:eaa65f68 r4:00000002 [ 5922.944959][T13088] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5922.945118][T13088] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5922.945199][T13088] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5922.945280][T13088] r10:00000001 r9:806084f4 r8:00000002 r7:eaa65f68 r6:0000000f r5:76f89f30 [ 5922.945306][T13088] r4:8404e000 r3:eaa65e9f [ 5922.945326][T13088] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5922.945403][T13088] r8:76f89f30 r7:eaa65f68 r6:8404e000 r5:0000000f r4:855e7240 [ 5922.945425][T13088] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5922.945506][T13088] r10:00000003 r9:8404e000 r8:8020029c r7:00000000 r6:00000000 r5:855e7240 [ 5922.945529][T13088] r4:855e7243 [ 5922.945547][T13088] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5922.945612][T13088] r7:00000003 r6:00000004 r5:76f89f30 r4:0000000f [ 5922.945630][T13088] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5922.945693][T13088] Exception stack(0xeaa65fa8 to 0xeaa65ff0) [ 5922.945738][T13088] 5fa0: 0000000f 76f89f30 00000004 76f89f30 0000000f 00000000 [ 5922.945780][T13088] 5fc0: 0000000f 76f89f30 00000004 00000003 002e0000 00000000 00006364 76f8a0bc [ 5922.945812][T13088] 5fe0: 00000158 76f89ed0 000d80f4 00130194 [ 5924.949841][T13107] fuse: Unknown parameter 'fl' [ 5925.469415][T13108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13108 comm=syz.2.9656 [ 5927.559388][T13119] FAULT_INJECTION: forcing a failure. [ 5927.559388][T13119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 5927.561195][T13119] CPU: 0 UID: 0 PID: 13119 Comm: syz.2.9660 Not tainted syzkaller #0 PREEMPT [ 5927.561309][T13119] Hardware name: ARM-Versatile Express [ 5927.561335][T13119] Call trace: [ 5927.561376][T13119] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5927.561482][T13119] r7:00000000 r6:00000000 r5:60000113 r4:8226023c [ 5927.561501][T13119] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5927.561552][T13119] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5927.561609][T13119] r5:8404ec00 r4:82917c14 [ 5927.561626][T13119] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5927.561679][T13119] [<80972380>] (should_fail_ex) from [<8051f328>] (should_fail_alloc_page+0x68/0x74) [ 5927.561751][T13119] r8:00000001 r7:00000000 r6:00000000 r5:00440dc2 r4:eaa6dd98 [ 5927.561769][T13119] [<8051f2c0>] (should_fail_alloc_page) from [<804ed5d4>] (prepare_alloc_pages.constprop.0+0x94/0x1b0) [ 5927.561822][T13119] [<804ed540>] (prepare_alloc_pages.constprop.0) from [<804f5afc>] (__alloc_frozen_pages_noprof+0xac/0x10d0) [ 5927.561891][T13119] r10:eaa6dfb0 r9:00000000 r8:8404ec00 r7:00000040 r6:00440dc2 r5:8619d6c0 [ 5927.561916][T13119] r4:00000000 r3:eaa6dd98 [ 5927.561932][T13119] [<804f5a50>] (__alloc_frozen_pages_noprof) from [<804f6b30>] (__alloc_pages_noprof+0x10/0x60) [ 5927.562006][T13119] r10:eaa6dfb0 r9:84b25c00 r8:84865240 r7:00000040 r6:00420004 r5:8619d6c0 [ 5927.562028][T13119] r4:8619d6c0 [ 5927.562044][T13119] [<804f6b20>] (__alloc_pages_noprof) from [<804c0a48>] (pte_alloc_one+0x28/0x114) [ 5927.562099][T13119] [<804c0a20>] (pte_alloc_one) from [<804c22b4>] (__pte_alloc+0x2c/0x104) [ 5927.562154][T13119] r5:85610010 r4:8619d6c0 [ 5927.562170][T13119] [<804c2288>] (__pte_alloc) from [<804c79ac>] (handle_mm_fault+0xfc0/0x14dc) [ 5927.562227][T13119] r5:8404ec00 r4:00001255 [ 5927.562244][T13119] [<804c69ec>] (handle_mm_fault) from [<802342f0>] (do_page_fault+0x1c8/0x49c) [ 5927.562315][T13119] r10:00000002 r9:8619d6c0 r8:00000255 r7:8404ec00 r6:00000a06 r5:00420004 [ 5927.562338][T13119] r4:eaa6dfb0 [ 5927.562355][T13119] [<80234128>] (do_page_fault) from [<80234744>] (do_translation_fault+0xfc/0x12c) [ 5927.562425][T13119] r10:00006364 r9:00000000 r8:80234648 r7:eaa6dfb0 r6:00420004 r5:00000a06 [ 5927.562446][T13119] r4:8281cee0 [ 5927.562461][T13119] [<80234648>] (do_translation_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8) [ 5927.562528][T13119] r9:00000000 r8:80234648 r7:eaa6dfb0 r6:00420004 r5:00000a06 r4:8281cee0 [ 5927.562546][T13119] [<80234774>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 5927.562593][T13119] Exception stack(0xeaa6dfb0 to 0xeaa6dff8) [ 5927.562627][T13119] dfa0: 00420004 00000000 00000840 00420004 [ 5927.562662][T13119] dfc0: 00000000 00420000 20000100 0000002d 00000005 00000000 00006364 00000000 [ 5927.562695][T13119] dfe0: 00000000 76f40e08 0002254c 00118320 20000010 ffffffff [ 5927.562730][T13119] r8:826b7044 r7:8404ec00 r6:ffffffff r5:20000010 r4:00118320 [ 5927.573261][T13119] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 5927.594376][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5927.601757][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5928.683741][T13136] FAULT_INJECTION: forcing a failure. [ 5928.683741][T13136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5928.684194][T13136] CPU: 1 UID: 0 PID: 13136 Comm: syz.2.9665 Not tainted syzkaller #0 PREEMPT [ 5928.684287][T13136] Hardware name: ARM-Versatile Express [ 5928.684311][T13136] Call trace: [ 5928.684349][T13136] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5928.684521][T13136] r7:eaa6de20 r6:00000000 r5:60000013 r4:8226023c [ 5928.684583][T13136] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5928.684867][T13136] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5928.685161][T13136] r5:8546c800 r4:8294f150 [ 5928.685201][T13136] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5928.685363][T13136] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5928.685660][T13136] r8:00000010 r7:eaa6de20 r6:200000c0 r5:00000000 r4:eaa6df20 [ 5928.685788][T13136] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5928.685902][T13136] [<809725c0>] (should_fail_usercopy) from [<81545ec0>] (copy_msghdr_from_user+0x50/0x130) [ 5928.685980][T13136] [<81545e70>] (copy_msghdr_from_user) from [<81546018>] (___sys_sendmsg+0x78/0xd0) [ 5928.686051][T13136] r8:00000010 r7:00000000 r6:8349ac80 r5:eaa6df20 r4:eaa6de64 [ 5928.686067][T13136] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 5928.686193][T13136] r10:00000128 r9:8546c800 r8:874c5b40 r7:00000010 r6:200000c0 r5:874c5b41 [ 5928.686214][T13136] r4:00000004 [ 5928.686230][T13136] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 5928.686300][T13136] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 5928.686319][T13136] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5928.686371][T13136] Exception stack(0xeaa6dfa8 to 0xeaa6dff0) [ 5928.686416][T13136] dfa0: 00000000 00000000 00000004 200000c0 00000010 00000000 [ 5928.686594][T13136] dfc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f430bc [ 5928.686907][T13136] dfe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 5940.421956][T13221] FAULT_INJECTION: forcing a failure. [ 5940.421956][T13221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5940.424580][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.1.9690 Not tainted syzkaller #0 PREEMPT [ 5940.424745][T13221] Hardware name: ARM-Versatile Express [ 5940.424777][T13221] Call trace: [ 5940.424821][T13221] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5940.424994][T13221] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5940.425019][T13221] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5940.425083][T13221] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5940.425144][T13221] r5:83a94800 r4:8294f150 [ 5940.425160][T13221] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5940.425220][T13221] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5940.425335][T13221] r8:76f89f30 r7:00000000 r6:00000000 r5:eaaf5f68 r4:00000002 [ 5940.425355][T13221] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5940.425410][T13221] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5940.425473][T13221] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5940.425549][T13221] r10:00000001 r9:806084f4 r8:00000002 r7:eaaf5f68 r6:0000000f r5:76f89f30 [ 5940.425575][T13221] r4:83a94800 r3:eaaf5e9f [ 5940.425593][T13221] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5940.425659][T13221] r8:76f89f30 r7:eaaf5f68 r6:83a94800 r5:0000000f r4:855e76c0 [ 5940.425679][T13221] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5940.425754][T13221] r10:00000003 r9:83a94800 r8:8020029c r7:00000000 r6:00000000 r5:855e76c0 [ 5940.425802][T13221] r4:855e76c3 [ 5940.425823][T13221] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5940.425893][T13221] r7:00000003 r6:00000003 r5:76f89f30 r4:0000000f [ 5940.425921][T13221] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5940.425974][T13221] Exception stack(0xeaaf5fa8 to 0xeaaf5ff0) [ 5940.426017][T13221] 5fa0: 0000000f 76f89f30 00000003 76f89f30 0000000f 00000000 [ 5940.426056][T13221] 5fc0: 0000000f 76f89f30 00000003 00000003 002e0000 00000000 00006364 76f8a0bc [ 5940.426085][T13221] 5fe0: 00000158 76f89ed0 000d80f4 00130194 [ 5941.434417][T13239] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 5943.457251][T13257] FAULT_INJECTION: forcing a failure. [ 5943.457251][T13257] name failslab, interval 1, probability 0, space 0, times 0 [ 5943.458755][T13257] CPU: 1 UID: 0 PID: 13257 Comm: syz.1.9699 Not tainted syzkaller #0 PREEMPT [ 5943.458871][T13257] Hardware name: ARM-Versatile Express [ 5943.458897][T13257] Call trace: [ 5943.458946][T13257] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5943.459067][T13257] r7:00000d40 r6:00000000 r5:60000013 r4:8226023c [ 5943.459087][T13257] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5943.459139][T13257] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5943.459197][T13257] r5:83a60000 r4:82917bc0 [ 5943.459213][T13257] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5943.459272][T13257] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 5943.459401][T13257] r8:83a60000 r7:00000d40 r6:874c5628 r5:0000001a r4:83001240 [ 5943.459424][T13257] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 5943.459479][T13257] [<80503b8c>] (__kmalloc_noprof) from [<807c3434>] (tomoyo_encode2+0x64/0xf0) [ 5943.459548][T13257] r10:00000fff r9:83319400 r8:00000000 r7:850faf68 r6:874c5628 r5:8403fffd [ 5943.459571][T13257] r4:8403ffee [ 5943.459588][T13257] [<807c33d0>] (tomoyo_encode2) from [<807c34e4>] (tomoyo_encode+0x24/0x30) [ 5943.459654][T13257] r9:83319400 r8:00000000 r7:850faf68 r6:874c5628 r5:00001000 r4:8403ffef [ 5943.459673][T13257] [<807c34c0>] (tomoyo_encode) from [<807c3570>] (tomoyo_realpath_from_path+0x80/0x17c) [ 5943.459732][T13257] r5:00001000 r4:8403f000 [ 5943.459747][T13257] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 5943.459813][T13257] r10:83a60000 r9:00000000 r8:874c5600 r7:000089f1 r6:00000004 r5:81cd6504 [ 5943.459840][T13257] r4:874c5628 r3:826c0200 [ 5943.459858][T13257] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 5943.459924][T13257] r9:00000003 r8:874c5600 r7:20000140 r6:20000140 r5:000089f1 r4:874c5600 [ 5943.459959][T13257] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 5943.460017][T13257] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 5943.460080][T13257] r7:20000140 r6:874c5601 r5:00000000 r4:000089f1 [ 5943.460097][T13257] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5943.460147][T13257] Exception stack(0xeaae1fa8 to 0xeaae1ff0) [ 5943.460187][T13257] 1fa0: 00000000 00000000 00000003 000089f1 20000140 00000000 [ 5943.460224][T13257] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8a0bc [ 5943.460251][T13257] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 5943.460288][T13257] r10:00000036 r9:83a60000 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 5943.460311][T13257] r4:00000000 [ 5943.491358][T13257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5950.629761][T13304] FAULT_INJECTION: forcing a failure. [ 5950.629761][T13304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5950.631557][T13304] CPU: 1 UID: 0 PID: 13304 Comm: syz.2.9711 Not tainted syzkaller #0 PREEMPT [ 5950.631697][T13304] Hardware name: ARM-Versatile Express [ 5950.631723][T13304] Call trace: [ 5950.631767][T13304] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5950.631890][T13304] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5950.631913][T13304] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5950.631973][T13304] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5950.632030][T13304] r5:8546a400 r4:8294f150 [ 5950.632046][T13304] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5950.632106][T13304] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5950.632175][T13304] r8:76f42f30 r7:00000000 r6:00000000 r5:eae15f68 r4:00000002 [ 5950.632193][T13304] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5950.632247][T13304] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5950.632312][T13304] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5950.632385][T13304] r10:00000001 r9:806084f4 r8:00000002 r7:eae15f68 r6:0000000f r5:76f42f30 [ 5950.632411][T13304] r4:8546a400 r3:eae15e9f [ 5950.632429][T13304] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5950.632498][T13304] r8:76f42f30 r7:eae15f68 r6:8546a400 r5:0000000f r4:874c59c0 [ 5950.632518][T13304] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5950.632592][T13304] r10:00000003 r9:8546a400 r8:8020029c r7:00000000 r6:00000000 r5:874c59c0 [ 5950.632616][T13304] r4:874c59c3 [ 5950.632635][T13304] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5950.632710][T13304] r7:00000003 r6:00000008 r5:76f42f30 r4:0000000f [ 5950.632728][T13304] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5950.632782][T13304] Exception stack(0xeae15fa8 to 0xeae15ff0) [ 5950.632825][T13304] 5fa0: 0000000f 76f42f30 00000008 76f42f30 0000000f 00000000 [ 5950.632861][T13304] 5fc0: 0000000f 76f42f30 00000008 00000003 002e0000 00000000 00006364 76f430bc [ 5950.632890][T13304] 5fe0: 00000158 76f42ed0 000d80f4 00130194 [ 5952.921778][T13318] FAULT_INJECTION: forcing a failure. [ 5952.921778][T13318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5952.925501][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.1.9716 Not tainted syzkaller #0 PREEMPT [ 5952.925599][T13318] Hardware name: ARM-Versatile Express [ 5952.925626][T13318] Call trace: [ 5952.925669][T13318] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5952.925779][T13318] r7:b5403587 r6:00000000 r5:60000113 r4:8226023c [ 5952.925800][T13318] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5952.925857][T13318] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5952.925928][T13318] r5:83a79800 r4:8294f150 [ 5952.925948][T13318] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5952.926016][T13318] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5952.926084][T13318] r8:00000000 r7:b5403587 r6:00000000 r5:83a7a030 r4:76f89bb8 [ 5952.926105][T13318] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5952.926158][T13318] [<809725c0>] (should_fail_usercopy) from [<8022b664>] (setup_sigframe+0x124/0x1c4) [ 5952.926212][T13318] [<8022b540>] (setup_sigframe) from [<8022bacc>] (do_work_pending+0x2f4/0x4f8) [ 5952.926276][T13318] r10:00000077 r9:b5403587 r8:00000000 r7:83a7a030 r6:76f89bb8 r5:eaba9fb0 [ 5952.926297][T13318] r4:83a79800 [ 5952.926314][T13318] [<8022b7d8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5952.926371][T13318] Exception stack(0xeaba9fb0 to 0xeaba9ff8) [ 5952.926411][T13318] 9fa0: fffffffc 20000180 00040004 00000000 [ 5952.926449][T13318] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8a0bc [ 5952.926483][T13318] 9fe0: 76f89ec0 76f89eb0 0001948c 001322c0 60000010 00000011 [ 5952.926523][T13318] r10:00000077 r9:83a79800 r8:00000000 r7:00000077 r6:00130270 r5:00000000 [ 5952.926544][T13318] r4:00000000 [ 5959.453083][ T31] audit: type=1400 audit(5959.350:753): avc: denied { connect } for pid=13341 comm="syz.2.9722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 5969.847393][T13386] FAULT_INJECTION: forcing a failure. [ 5969.847393][T13386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5969.848797][T13386] CPU: 1 UID: 0 PID: 13386 Comm: syz.1.9731 Not tainted syzkaller #0 PREEMPT [ 5969.848929][T13386] Hardware name: ARM-Versatile Express [ 5969.848947][T13386] Call trace: [ 5969.848969][T13386] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 5969.849032][T13386] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 5969.849041][T13386] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 5969.849068][T13386] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 5969.849098][T13386] r5:83a90c00 r4:8294f150 [ 5969.849107][T13386] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 5969.849138][T13386] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 5969.849171][T13386] r8:76f47f30 r7:00000000 r6:00000000 r5:eac11f68 r4:00000002 [ 5969.849179][T13386] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 5969.849205][T13386] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 5969.849237][T13386] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 5969.849273][T13386] r10:00000001 r9:806084f4 r8:00000002 r7:eac11f68 r6:0000000f r5:76f47f30 [ 5969.849285][T13386] r4:83a90c00 r3:eac11e9f [ 5969.849293][T13386] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 5969.849326][T13386] r8:76f47f30 r7:eac11f68 r6:83a90c00 r5:0000000f r4:874c5b40 [ 5969.849335][T13386] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 5969.849370][T13386] r10:00000003 r9:83a90c00 r8:8020029c r7:00000000 r6:00000000 r5:874c5b40 [ 5969.849380][T13386] r4:874c5b43 [ 5969.849388][T13386] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 5969.849420][T13386] r7:00000003 r6:00000005 r5:76f47f30 r4:0000000f [ 5969.849428][T13386] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5969.849453][T13386] Exception stack(0xeac11fa8 to 0xeac11ff0) [ 5969.849473][T13386] 1fa0: 0000000f 76f47f30 00000005 76f47f30 0000000f 00000000 [ 5969.849491][T13386] 1fc0: 0000000f 76f47f30 00000005 00000003 002e0000 00000000 00006364 76f480bc [ 5969.849505][T13386] 1fe0: 00000158 76f47ed0 000d80f4 00130194 [ 5994.090000][ T31] audit: type=1400 audit(5993.990:754): avc: denied { connect } for pid=13486 comm="syz.2.9758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 6005.248261][T13528] FAULT_INJECTION: forcing a failure. [ 6005.248261][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 6005.248993][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.1.9766 Not tainted syzkaller #0 PREEMPT [ 6005.249298][T13528] Hardware name: ARM-Versatile Express [ 6005.249334][T13528] Call trace: [ 6005.249388][T13528] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6005.249643][T13528] r7:8404ec00 r6:00000000 r5:60000013 r4:8226023c [ 6005.249692][T13528] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6005.249758][T13528] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6005.249861][T13528] r5:8404ec00 r4:82917bc0 [ 6005.249983][T13528] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6005.250315][T13528] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6005.250399][T13528] r8:00000000 r7:8404ec00 r6:00000cc0 r5:ead29ef8 r4:830a2b40 [ 6005.250422][T13528] [<8051f22c>] (should_failslab) from [<80503570>] (kmem_cache_alloc_lru_noprof+0x50/0x338) [ 6005.250604][T13528] [<80503520>] (kmem_cache_alloc_lru_noprof) from [<805714f8>] (__d_alloc+0x30/0x21c) [ 6005.250692][T13528] r10:829e8cac r9:8246584c r8:832a33d0 r7:83319400 r6:81e54cc0 r5:ead29ef8 [ 6005.250796][T13528] r4:00000002 [ 6005.250947][T13528] [<805714c8>] (__d_alloc) from [<80574664>] (d_alloc_pseudo+0x10/0x3c) [ 6005.251148][T13528] r9:83319400 r8:832a33d0 r7:8404ec00 r6:81e54cc0 r5:85034a80 r4:00000002 [ 6005.251176][T13528] [<80574654>] (d_alloc_pseudo) from [<80555dd8>] (alloc_file_pseudo+0x6c/0x104) [ 6005.251282][T13528] [<80555d6c>] (alloc_file_pseudo) from [<81541c68>] (sock_alloc_file+0x48/0xc4) [ 6005.251651][T13528] r10:00000119 r9:8404ec00 r8:8020029c r7:00000119 r6:85034a80 r5:85034a00 [ 6005.251855][T13528] r4:00000000 [ 6005.252010][T13528] [<81541c20>] (sock_alloc_file) from [<81544b74>] (__sys_socket+0xd4/0x10c) [ 6005.252212][T13528] r6:85034a00 r5:00000006 r4:00000000 [ 6005.252354][T13528] [<81544aa0>] (__sys_socket) from [<81544bbc>] (sys_socket+0x10/0x14) [ 6005.252509][T13528] r6:00000000 r5:ffffffff r4:76f46eb0 [ 6005.252704][T13528] [<81544bac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6005.252854][T13528] Exception stack(0xead29fa8 to 0xead29ff0) [ 6005.252922][T13528] 9fa0: 76f46eb0 ffffffff 00000010 00000003 00000010 00000000 [ 6005.253030][T13528] 9fc0: 76f46eb0 ffffffff 00000000 00000119 002e0000 00000000 00006364 76f480bc [ 6005.253259][T13528] 9fe0: 00000000 76f46e7c 0001bf38 0013497c [ 6006.681135][T13535] FAULT_INJECTION: forcing a failure. [ 6006.681135][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 6006.681654][T13535] CPU: 0 UID: 0 PID: 13535 Comm: syz.1.9770 Not tainted syzkaller #0 PREEMPT [ 6006.681753][T13535] Hardware name: ARM-Versatile Express [ 6006.681779][T13535] Call trace: [ 6006.681832][T13535] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6006.681952][T13535] r7:00000c40 r6:00000000 r5:60000013 r4:8226023c [ 6006.682004][T13535] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6006.682068][T13535] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6006.682127][T13535] r5:8404c800 r4:82917bc0 [ 6006.682145][T13535] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6006.682208][T13535] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6006.682284][T13535] r8:8404c800 r7:00000c40 r6:855e7328 r5:00001000 r4:830016c0 [ 6006.682325][T13535] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6006.682386][T13535] [<80503b8c>] (__kmalloc_noprof) from [<807c352c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 6006.682490][T13535] r10:8404c800 r9:8309d800 r8:00000000 r7:851bad48 r6:855e7328 r5:00001000 [ 6006.682515][T13535] r4:00000000 [ 6006.682539][T13535] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf920>] (tomoyo_check_open_permission+0x150/0x1c0) [ 6006.682629][T13535] r10:8404c800 r9:00000004 r8:84867d40 r7:00000000 r6:00000000 r5:855e7328 [ 6006.682660][T13535] r4:00000001 r3:00000001 [ 6006.682679][T13535] [<807bf7d0>] (tomoyo_check_open_permission) from [<807c43d4>] (tomoyo_file_open+0x34/0x38) [ 6006.682749][T13535] r9:00000003 r8:855e7328 r7:00000000 r6:8503eee8 r5:81c20f80 r4:855e7300 [ 6006.682770][T13535] [<807c43a0>] (tomoyo_file_open) from [<807808a0>] (security_file_open+0x54/0x194) [ 6006.682841][T13535] r5:81c20f80 r4:855e7300 [ 6006.682857][T13535] [<8078084c>] (security_file_open) from [<8054dea0>] (do_dentry_open+0xe4/0x4d0) [ 6006.682920][T13535] r5:81c20f80 r4:855e7300 [ 6006.682936][T13535] [<8054ddbc>] (do_dentry_open) from [<8054fde4>] (vfs_open+0x2c/0xe8) [ 6006.683097][T13535] r9:00000003 r8:855e7600 r7:85035900 r6:855e7328 r5:ead19e84 r4:855e7300 [ 6006.683157][T13535] [<8054fdb8>] (vfs_open) from [<8054fee0>] (dentry_open+0x40/0x68) [ 6006.683332][T13535] r6:8404c800 r5:ead19e84 r4:855e7300 [ 6006.683514][T13535] [<8054fea0>] (dentry_open) from [<805a3010>] (open_namespace+0x6c/0xbc) [ 6006.683634][T13535] r5:00000000 r4:00000005 [ 6006.683780][T13535] [<805a2fa4>] (open_namespace) from [<805a307c>] (open_related_ns+0x1c/0x20) [ 6006.684036][T13535] r6:84da49c0 r5:00000000 r4:0000894c [ 6006.684061][T13535] [<805a3060>] (open_related_ns) from [<81544760>] (sock_ioctl+0x37c/0x600) [ 6006.684147][T13535] [<815443e4>] (sock_ioctl) from [<8056cd60>] (sys_ioctl+0x130/0xba0) [ 6006.684338][T13535] r9:00000003 r8:855e7600 r7:00000000 r6:855e7601 r5:00000000 r4:0000894c [ 6006.684422][T13535] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6006.684503][T13535] Exception stack(0xead19fa8 to 0xead19ff0) [ 6006.684666][T13535] 9fa0: 00000000 00000000 00000003 0000894c 00000000 00000000 [ 6006.684741][T13535] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8a0bc [ 6006.684865][T13535] 9fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 6006.684919][T13535] r10:00000036 r9:8404c800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6006.684969][T13535] r4:00000000 [ 6006.701137][T13535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6008.016634][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9773'. [ 6012.820095][T13554] FAULT_INJECTION: forcing a failure. [ 6012.820095][T13554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6012.820966][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.2.9775 Not tainted syzkaller #0 PREEMPT [ 6012.821060][T13554] Hardware name: ARM-Versatile Express [ 6012.821084][T13554] Call trace: [ 6012.821125][T13554] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6012.821236][T13554] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 6012.821257][T13554] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6012.821312][T13554] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6012.821369][T13554] r5:8404ec00 r4:8294f150 [ 6012.821383][T13554] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6012.821443][T13554] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6012.821509][T13554] r8:76f21f30 r7:00000000 r6:00000000 r5:ead51f68 r4:00000002 [ 6012.821527][T13554] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6012.821579][T13554] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 6012.821642][T13554] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 6012.821719][T13554] r10:00000001 r9:806084f4 r8:00000002 r7:ead51f68 r6:0000000f r5:76f21f30 [ 6012.821747][T13554] r4:8404ec00 r3:ead51e9f [ 6012.821834][T13554] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 6012.821917][T13554] r8:76f21f30 r7:ead51f68 r6:8404ec00 r5:0000000f r4:855e79c0 [ 6012.821940][T13554] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 6012.822006][T13554] r10:00000003 r9:8404ec00 r8:8020029c r7:00000000 r6:00000000 r5:855e79c0 [ 6012.822024][T13554] r4:855e79c3 [ 6012.822040][T13554] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 6012.822125][T13554] r7:00000003 r6:00000005 r5:76f21f30 r4:0000000f [ 6012.822144][T13554] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6012.822198][T13554] Exception stack(0xead51fa8 to 0xead51ff0) [ 6012.822239][T13554] 1fa0: 0000000f 76f21f30 00000005 76f21f30 0000000f 00000000 [ 6012.822310][T13554] 1fc0: 0000000f 76f21f30 00000005 00000003 002e0000 00000000 00006364 76f220bc [ 6012.822342][T13554] 1fe0: 00000158 76f21ed0 000d80f4 00130194 [ 6014.643825][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9781'. [ 6017.937748][T13598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9789'. [ 6022.968483][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9796'. [ 6033.087338][T13684] FAULT_INJECTION: forcing a failure. [ 6033.087338][T13684] name failslab, interval 1, probability 0, space 0, times 0 [ 6033.089149][T13684] CPU: 0 UID: 0 PID: 13684 Comm: syz.2.9810 Not tainted syzkaller #0 PREEMPT [ 6033.089275][T13684] Hardware name: ARM-Versatile Express [ 6033.089301][T13684] Call trace: [ 6033.089343][T13684] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6033.089476][T13684] r7:00000c40 r6:00000000 r5:60000013 r4:8226023c [ 6033.089496][T13684] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6033.089552][T13684] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6033.089612][T13684] r5:85468c00 r4:82917bc0 [ 6033.089631][T13684] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6033.089703][T13684] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6033.089778][T13684] r8:85468c00 r7:00000c40 r6:874c5f28 r5:00001000 r4:830016c0 [ 6033.089797][T13684] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6033.089848][T13684] [<80503b8c>] (__kmalloc_noprof) from [<807c352c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 6033.089922][T13684] r10:85468c00 r9:83319400 r8:00000000 r7:851baee0 r6:874c5f28 r5:00001000 [ 6033.089945][T13684] r4:00000000 [ 6033.089962][T13684] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6033.090031][T13684] r10:85468c00 r9:00000000 r8:874c5f00 r7:00008919 r6:00000004 r5:81cd6504 [ 6033.090056][T13684] r4:874c5f28 r3:826c0200 [ 6033.090073][T13684] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 6033.090143][T13684] r9:00000006 r8:874c5f00 r7:20000100 r6:20000100 r5:00008919 r4:874c5f00 [ 6033.090161][T13684] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 6033.090218][T13684] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 6033.090286][T13684] r7:20000100 r6:874c5f01 r5:00000000 r4:00008919 [ 6033.090305][T13684] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6033.090355][T13684] Exception stack(0xeadddfa8 to 0xeadddff0) [ 6033.090397][T13684] dfa0: 00000000 00000000 00000006 00008919 20000100 00000000 [ 6033.090436][T13684] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f010bc [ 6033.090466][T13684] dfe0: 76f00ec0 76f00eb0 0001948c 001322c0 [ 6033.090505][T13684] r10:00000036 r9:85468c00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6033.090527][T13684] r4:00000000 [ 6033.100671][T13684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6035.946566][T13698] FAULT_INJECTION: forcing a failure. [ 6035.946566][T13698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6035.948840][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.1.9816 Not tainted syzkaller #0 PREEMPT [ 6035.949010][T13698] Hardware name: ARM-Versatile Express [ 6035.949044][T13698] Call trace: [ 6035.949091][T13698] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6035.949200][T13698] r7:eaddde20 r6:00000000 r5:60000013 r4:8226023c [ 6035.949224][T13698] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6035.949286][T13698] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6035.949351][T13698] r5:83a73000 r4:8294f150 [ 6035.949370][T13698] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6035.949439][T13698] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6035.949513][T13698] r8:04004000 r7:eaddde20 r6:20000640 r5:00000000 r4:eadddf20 [ 6035.949534][T13698] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6035.949597][T13698] [<809725c0>] (should_fail_usercopy) from [<81545ec0>] (copy_msghdr_from_user+0x50/0x130) [ 6035.949670][T13698] [<81545e70>] (copy_msghdr_from_user) from [<81546018>] (___sys_sendmsg+0x78/0xd0) [ 6035.949759][T13698] r8:04004000 r7:00000000 r6:85034f00 r5:eadddf20 r4:eaddde64 [ 6035.949780][T13698] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 6035.949862][T13698] r10:00000128 r9:83a73000 r8:855e7d80 r7:04004000 r6:20000640 r5:855e7d81 [ 6035.949887][T13698] r4:00000004 [ 6035.949906][T13698] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 6035.950000][T13698] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 6035.950023][T13698] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6035.950082][T13698] Exception stack(0xeadddfa8 to 0xeadddff0) [ 6035.950127][T13698] dfa0: 00000000 00000000 00000004 20000640 04004000 00000000 [ 6035.950169][T13698] dfc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8a0bc [ 6035.950204][T13698] dfe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 6039.291074][ T31] audit: type=1400 audit(6039.190:755): avc: denied { lock } for pid=13735 comm="syz.2.9826" path="socket:[109921]" dev="sockfs" ino=109921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 6040.511277][T13747] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13747 comm=syz.1.9830 [ 6044.559564][T13765] FAULT_INJECTION: forcing a failure. [ 6044.559564][T13765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6044.561239][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.2.9833 Not tainted syzkaller #0 PREEMPT [ 6044.561411][T13765] Hardware name: ARM-Versatile Express [ 6044.561440][T13765] Call trace: [ 6044.561481][T13765] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6044.561595][T13765] r7:eae29e20 r6:00000000 r5:60000013 r4:8226023c [ 6044.561616][T13765] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6044.561672][T13765] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6044.561737][T13765] r5:8546bc00 r4:8294f150 [ 6044.561753][T13765] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6044.561816][T13765] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6044.561886][T13765] r8:04000004 r7:eae29e20 r6:20000380 r5:00000000 r4:eae29f20 [ 6044.561903][T13765] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6044.561966][T13765] [<809725c0>] (should_fail_usercopy) from [<81545ec0>] (copy_msghdr_from_user+0x50/0x130) [ 6044.562031][T13765] [<81545e70>] (copy_msghdr_from_user) from [<81546018>] (___sys_sendmsg+0x78/0xd0) [ 6044.562103][T13765] r8:04000004 r7:00000000 r6:835e5b80 r5:eae29f20 r4:eae29e64 [ 6044.562121][T13765] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 6044.562197][T13765] r10:00000128 r9:8546bc00 r8:84ddd6c0 r7:04000004 r6:20000380 r5:84ddd6c1 [ 6044.562218][T13765] r4:00000003 [ 6044.562236][T13765] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 6044.562309][T13765] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 6044.562326][T13765] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6044.562378][T13765] Exception stack(0xeae29fa8 to 0xeae29ff0) [ 6044.562420][T13765] 9fa0: 00000000 00000000 00000003 20000380 04000004 00000000 [ 6044.562460][T13765] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76ebf0bc [ 6044.562489][T13765] 9fe0: 76ebeec0 76ebeeb0 0001948c 001322c0 [ 6069.517395][T13859] raw_sendmsg: syz.2.9856 forgot to set AF_INET. Fix it! [ 6074.831573][T13882] FAULT_INJECTION: forcing a failure. [ 6074.831573][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 6074.832047][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.1.9859 Not tainted syzkaller #0 PREEMPT [ 6074.832141][T13882] Hardware name: ARM-Versatile Express [ 6074.832173][T13882] Call trace: [ 6074.832222][T13882] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6074.832350][T13882] r7:00000c40 r6:00000000 r5:60000013 r4:8226023c [ 6074.832371][T13882] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6074.832431][T13882] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6074.832494][T13882] r5:841f1800 r4:82917bc0 [ 6074.832511][T13882] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6074.832808][T13882] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6074.833005][T13882] r8:841f1800 r7:00000c40 r6:848196e8 r5:00001000 r4:830016c0 [ 6074.833106][T13882] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6074.833301][T13882] [<80503b8c>] (__kmalloc_noprof) from [<807c352c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 6074.833647][T13882] r10:841f1800 r9:83319400 r8:00000000 r7:83665660 r6:848196e8 r5:00001000 [ 6074.833672][T13882] r4:00000000 [ 6074.833699][T13882] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6074.833814][T13882] r10:841f1800 r9:00000000 r8:848196c0 r7:c02064b9 r6:00000004 r5:81cd6504 [ 6074.833966][T13882] r4:848196e8 r3:826c0200 [ 6074.834258][T13882] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 6074.834500][T13882] r9:00000003 r8:848196c0 r7:00000000 r6:00000000 r5:c02064b9 r4:848196c0 [ 6074.834525][T13882] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 6074.834712][T13882] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 6074.834829][T13882] r7:00000000 r6:848196c1 r5:00000000 r4:c02064b9 [ 6074.834984][T13882] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6074.835090][T13882] Exception stack(0xeaec9fa8 to 0xeaec9ff0) [ 6074.835142][T13882] 9fa0: 00000000 00000000 00000003 c02064b9 00000000 00000000 [ 6074.835181][T13882] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f060bc [ 6074.835214][T13882] 9fe0: 76f05ec0 76f05eb0 0001948c 001322c0 [ 6074.835252][T13882] r10:00000036 r9:841f1800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6074.835273][T13882] r4:00000000 [ 6074.838758][T13882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6080.291432][ T31] audit: type=1400 audit(6080.190:756): avc: denied { map } for pid=13950 comm="syz.1.9871" path="socket:[110985]" dev="sockfs" ino=110985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 6082.881821][T13965] FAULT_INJECTION: forcing a failure. [ 6082.881821][T13965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6082.883194][T13965] CPU: 0 UID: 0 PID: 13965 Comm: syz.2.9876 Not tainted syzkaller #0 PREEMPT [ 6082.883322][T13965] Hardware name: ARM-Versatile Express [ 6082.883347][T13965] Call trace: [ 6082.883373][T13965] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6082.883439][T13965] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 6082.883450][T13965] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6082.883480][T13965] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6082.883512][T13965] r5:85469800 r4:8294f150 [ 6082.883520][T13965] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6082.883553][T13965] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6082.883590][T13965] r8:76f42f30 r7:00000000 r6:00000000 r5:eaf65f68 r4:00000002 [ 6082.883599][T13965] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6082.883629][T13965] [<809725c0>] (should_fail_usercopy) from [<8058e5b4>] (simple_read_from_buffer+0x80/0x13c) [ 6082.883708][T13965] [<8058e534>] (simple_read_from_buffer) from [<806085ac>] (proc_fail_nth_read+0xb8/0x108) [ 6082.883753][T13965] r10:00000001 r9:806084f4 r8:00000002 r7:eaf65f68 r6:0000000f r5:76f42f30 [ 6082.883766][T13965] r4:85469800 r3:eaf65e9f [ 6082.883774][T13965] [<806084f4>] (proc_fail_nth_read) from [<80553404>] (vfs_read+0x98/0x324) [ 6082.883813][T13965] r8:76f42f30 r7:eaf65f68 r6:85469800 r5:0000000f r4:855e79c0 [ 6082.883822][T13965] [<8055336c>] (vfs_read) from [<80554114>] (ksys_read+0x74/0xe8) [ 6082.883859][T13965] r10:00000003 r9:85469800 r8:8020029c r7:00000000 r6:00000000 r5:855e79c0 [ 6082.883870][T13965] r4:855e79c3 [ 6082.883878][T13965] [<805540a0>] (ksys_read) from [<80554198>] (sys_read+0x10/0x14) [ 6082.883912][T13965] r7:00000003 r6:00000005 r5:76f42f30 r4:0000000f [ 6082.883921][T13965] [<80554188>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6082.883952][T13965] Exception stack(0xeaf65fa8 to 0xeaf65ff0) [ 6082.883973][T13965] 5fa0: 0000000f 76f42f30 00000005 76f42f30 0000000f 00000000 [ 6082.883993][T13965] 5fc0: 0000000f 76f42f30 00000005 00000003 002e0000 00000000 00006364 76f430bc [ 6082.884007][T13965] 5fe0: 00000158 76f42ed0 000d80f4 00130194 [ 6083.481513][T13969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13969 comm=syz.2.9877 [ 6092.906422][ T3055] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 6093.055990][ T3055] usb 2-1: Using ep0 maxpacket: 16 [ 6093.062078][ T3055] usb 2-1: config 1 has an invalid interface number: 255 but max is 0 [ 6093.062466][ T3055] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6093.062530][ T3055] usb 2-1: config 1 has no interface number 0 [ 6093.062799][ T3055] usb 2-1: config 1 interface 255 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 6093.062863][ T3055] usb 2-1: config 1 interface 255 has no altsetting 0 [ 6093.076881][ T3055] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 6093.077070][ T3055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6093.077307][ T3055] usb 2-1: Product: syz [ 6093.077339][ T3055] usb 2-1: Manufacturer: syz [ 6093.077354][ T3055] usb 2-1: SerialNumber: syz [ 6093.316518][ T3055] usb 2-1: USB disconnect, device number 51 [ 6112.868517][T14122] FAULT_INJECTION: forcing a failure. [ 6112.868517][T14122] name failslab, interval 1, probability 0, space 0, times 0 [ 6112.868916][T14122] CPU: 0 UID: 0 PID: 14122 Comm: syz.2.9919 Not tainted syzkaller #0 PREEMPT [ 6112.869015][T14122] Hardware name: ARM-Versatile Express [ 6112.869041][T14122] Call trace: [ 6112.869084][T14122] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6112.869278][T14122] r7:8546bc00 r6:00000000 r5:60000013 r4:8226023c [ 6112.869455][T14122] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6112.869556][T14122] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6112.869654][T14122] r5:8546bc00 r4:82917bc0 [ 6112.869731][T14122] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6112.869802][T14122] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6112.869918][T14122] r8:00000000 r7:8546bc00 r6:00000dc0 r5:00000000 r4:83001240 [ 6112.869943][T14122] [<8051f22c>] (should_failslab) from [<80502c58>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 6112.870015][T14122] [<80502c0c>] (__kmalloc_cache_noprof) from [<8056b100>] (file_f_owner_allocate+0x3c/0x88) [ 6112.870177][T14122] r10:8546bc00 r9:00000003 r8:855e7840 r7:00000001 r6:855e7840 r5:00000000 [ 6112.870288][T14122] r4:855e7840 [ 6112.870351][T14122] [<8056b0c4>] (file_f_owner_allocate) from [<8056b1c4>] (f_setown+0x78/0xac) [ 6112.870692][T14122] r5:20000080 r4:00000000 [ 6112.870723][T14122] [<8056b14c>] (f_setown) from [<815446e4>] (sock_ioctl+0x300/0x600) [ 6112.870850][T14122] r7:835b1b80 r6:84da3b00 r5:20000080 r4:b5403587 [ 6112.871082][T14122] [<815443e4>] (sock_ioctl) from [<8056cd60>] (sys_ioctl+0x130/0xba0) [ 6112.871279][T14122] r9:00000003 r8:855e7840 r7:20000080 r6:855e7841 r5:00000000 r4:00008902 [ 6112.871377][T14122] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6112.871593][T14122] Exception stack(0xeafe9fa8 to 0xeafe9ff0) [ 6112.871699][T14122] 9fa0: 00000000 00000000 00000003 00008902 20000080 00000000 [ 6112.871911][T14122] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f430bc [ 6112.872425][T14122] 9fe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 6112.872573][T14122] r10:00000036 r9:8546bc00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6112.872717][T14122] r4:00000000 [ 6128.392170][T14235] Process accounting resumed [ 6139.762955][T14314] fuse: Unknown parameter '1·G00000000000000000008' [ 6159.177111][T14413] FAULT_INJECTION: forcing a failure. [ 6159.177111][T14413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6159.177458][T14413] CPU: 0 UID: 0 PID: 14413 Comm: syz.2.10002 Not tainted syzkaller #0 PREEMPT [ 6159.177547][T14413] Hardware name: ARM-Versatile Express [ 6159.177573][T14413] Call trace: [ 6159.177616][T14413] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6159.178081][T14413] r7:00000000 r6:00000000 r5:60000013 r4:8226023c [ 6159.178335][T14413] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6159.178475][T14413] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6159.178604][T14413] r5:85469800 r4:8294f150 [ 6159.178693][T14413] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6159.179007][T14413] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6159.179221][T14413] r8:eb745eb8 r7:00000000 r6:00000001 r5:76f42f30 r4:00000001 [ 6159.179283][T14413] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6159.179360][T14413] [<809725c0>] (should_fail_usercopy) from [<808beb8c>] (kstrtouint_from_user+0x54/0x13c) [ 6159.179490][T14413] [<808beb38>] (kstrtouint_from_user) from [<80609b74>] (proc_fail_nth_write+0x40/0xf0) [ 6159.179598][T14413] r8:eb745f68 r7:85469800 r6:00000001 r5:855e7780 r4:00000001 [ 6159.180110][T14413] [<80609b34>] (proc_fail_nth_write) from [<80553d00>] (vfs_write+0xac/0x44c) [ 6159.180210][T14413] r5:855e7780 r4:80609b34 [ 6159.180302][T14413] [<80553c54>] (vfs_write) from [<80554210>] (ksys_write+0x74/0xe8) [ 6159.180376][T14413] r10:00000004 r9:85469800 r8:8020029c r7:00000000 r6:00000002 r5:855e7780 [ 6159.180398][T14413] r4:855e7783 [ 6159.180449][T14413] [<8055419c>] (ksys_write) from [<80554294>] (sys_write+0x10/0x14) [ 6159.181170][T14413] r7:00000004 r6:00000004 r5:76f42f30 r4:00000001 [ 6159.181346][T14413] [<80554284>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6159.181409][T14413] Exception stack(0xeb745fa8 to 0xeb745ff0) [ 6159.181621][T14413] 5fa0: 00000001 76f42f30 00000004 76f42f30 00000001 00000000 [ 6159.181768][T14413] 5fc0: 00000001 76f42f30 00000004 00000004 002e0000 00000000 00006364 76f430bc [ 6159.181834][T14413] 5fe0: 00000158 76f42ed0 000d80f4 0013025c [ 6165.198944][T14459] FAULT_INJECTION: forcing a failure. [ 6165.198944][T14459] name failslab, interval 1, probability 0, space 0, times 0 [ 6165.201140][T14459] CPU: 1 UID: 0 PID: 14459 Comm: syz.1.10016 Not tainted syzkaller #0 PREEMPT [ 6165.201278][T14459] Hardware name: ARM-Versatile Express [ 6165.201312][T14459] Call trace: [ 6165.201357][T14459] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6165.201483][T14459] r7:00000d40 r6:00000000 r5:60000013 r4:8226023c [ 6165.201507][T14459] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6165.201564][T14459] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6165.201627][T14459] r5:83a90c00 r4:82917bc0 [ 6165.201650][T14459] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6165.201718][T14459] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6165.201796][T14459] r8:83a90c00 r7:00000d40 r6:855e76e8 r5:0000001a r4:83001240 [ 6165.201818][T14459] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6165.201883][T14459] [<80503b8c>] (__kmalloc_noprof) from [<807c3434>] (tomoyo_encode2+0x64/0xf0) [ 6165.201961][T14459] r10:00000fff r9:83319400 r8:00000000 r7:8364ca18 r6:855e76e8 r5:8403effd [ 6165.201985][T14459] r4:8403efee [ 6165.202004][T14459] [<807c33d0>] (tomoyo_encode2) from [<807c34e4>] (tomoyo_encode+0x24/0x30) [ 6165.202076][T14459] r9:83319400 r8:00000000 r7:8364ca18 r6:855e76e8 r5:00001000 r4:8403efef [ 6165.202098][T14459] [<807c34c0>] (tomoyo_encode) from [<807c3570>] (tomoyo_realpath_from_path+0x80/0x17c) [ 6165.202158][T14459] r5:00001000 r4:8403e000 [ 6165.202176][T14459] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6165.202363][T14459] r10:83a90c00 r9:00000000 r8:855e76c0 r7:0000894b r6:00000004 r5:81cd6504 [ 6165.202426][T14459] r4:855e76e8 r3:826c0200 [ 6165.202449][T14459] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 6165.202540][T14459] r9:00000005 r8:855e76c0 r7:20000000 r6:20000000 r5:0000894b r4:855e76c0 [ 6165.202562][T14459] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 6165.202623][T14459] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 6165.202698][T14459] r7:20000000 r6:855e76c1 r5:00000000 r4:0000894b [ 6165.202720][T14459] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6165.202777][T14459] Exception stack(0xeb775fa8 to 0xeb775ff0) [ 6165.202824][T14459] 5fa0: 00000000 00000000 00000005 0000894b 20000000 00000000 [ 6165.202865][T14459] 5fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f060bc [ 6165.202909][T14459] 5fe0: 76f05ec0 76f05eb0 0001948c 001322c0 [ 6165.202953][T14459] r10:00000036 r9:83a90c00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6165.202976][T14459] r4:00000000 [ 6165.203364][T14459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6169.178479][T14491] FAULT_INJECTION: forcing a failure. [ 6169.178479][T14491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6169.179003][T14491] CPU: 0 UID: 0 PID: 14491 Comm: syz.1.10026 Not tainted syzkaller #0 PREEMPT [ 6169.179135][T14491] Hardware name: ARM-Versatile Express [ 6169.179217][T14491] Call trace: [ 6169.179311][T14491] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6169.179420][T14491] r7:20000000 r6:00000000 r5:60000013 r4:8226023c [ 6169.179441][T14491] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6169.179497][T14491] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6169.179553][T14491] r5:8404e000 r4:8294f150 [ 6169.179570][T14491] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6169.179754][T14491] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6169.179915][T14491] r8:eb7ddefc r7:20000000 r6:eb7dde88 r5:00000004 r4:00000004 [ 6169.180039][T14491] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6169.180130][T14491] [<809725c0>] (should_fail_usercopy) from [<815475a0>] (copy_from_sockptr_offset.constprop.0+0x5c/0x11c) [ 6169.180309][T14491] [<81547544>] (copy_from_sockptr_offset.constprop.0) from [<8154cce0>] (sk_setsockopt+0x90/0x1410) [ 6169.180519][T14491] r8:eb7ddefc r7:eb7ddeac r6:00000032 r5:8589b9c0 r4:00000000 [ 6169.180651][T14491] [<8154cc54>] (sk_setsockopt) from [<8154e08c>] (sock_setsockopt+0x2c/0x34) [ 6169.180731][T14491] r10:00000126 r9:8404e000 r8:00000004 r7:85035680 r6:00000032 r5:00000001 [ 6169.180781][T14491] r4:00000000 [ 6169.180929][T14491] [<8154e064>] (sock_setsockopt) from [<81542588>] (do_sock_setsockopt+0xb0/0xc8) [ 6169.181079][T14491] [<815424d8>] (do_sock_setsockopt) from [<81545b00>] (__sys_setsockopt+0x7c/0xc4) [ 6169.181245][T14491] r8:00000000 r7:8488acc0 r6:8488acc1 r5:00000032 r4:00000001 [ 6169.181421][T14491] [<81545a84>] (__sys_setsockopt) from [<81545b64>] (sys_setsockopt+0x1c/0x24) [ 6169.181593][T14491] r8:8020029c r7:00000126 r6:00130270 r5:00000000 r4:00000004 [ 6169.181613][T14491] [<81545b48>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6169.181669][T14491] Exception stack(0xeb7ddfa8 to 0xeb7ddff0) [ 6169.181803][T14491] dfa0: 00000004 00000000 00000004 00000001 00000032 20000000 [ 6169.181889][T14491] dfc0: 00000004 00000000 00130270 00000126 002e0000 00000000 00006364 76f060bc [ 6169.181969][T14491] dfe0: 76f05ec0 76f05eb0 0001948c 001322c0 [ 6184.603319][T14575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14575 comm=syz.1.10050 [ 6198.232276][T14684] FAULT_INJECTION: forcing a failure. [ 6198.232276][T14684] name failslab, interval 1, probability 0, space 0, times 0 [ 6198.236736][T14684] CPU: 0 UID: 0 PID: 14684 Comm: syz.1.10072 Not tainted syzkaller #0 PREEMPT [ 6198.236909][T14684] Hardware name: ARM-Versatile Express [ 6198.236943][T14684] Call trace: [ 6198.236987][T14684] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6198.237104][T14684] r7:849be000 r6:00000000 r5:60000013 r4:8226023c [ 6198.237123][T14684] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6198.237176][T14684] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6198.237235][T14684] r5:849be000 r4:82917bc0 [ 6198.237252][T14684] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6198.237429][T14684] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6198.237504][T14684] r8:00000000 r7:849be000 r6:00000dc0 r5:848796c0 r4:830a2540 [ 6198.237522][T14684] [<8051f22c>] (should_failslab) from [<805038a4>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 6198.237574][T14684] [<80503858>] (kmem_cache_alloc_noprof) from [<8077f698>] (security_file_alloc+0x30/0x1dc) [ 6198.237645][T14684] r10:8226023c r9:83340000 r8:82805cc0 r7:84e10f80 r6:00000001 r5:848796c0 [ 6198.237665][T14684] r4:848796c0 [ 6198.237681][T14684] [<8077f668>] (security_file_alloc) from [<80555528>] (init_file+0x48/0x110) [ 6198.237755][T14684] r5:848796c0 r4:848796c0 [ 6198.237772][T14684] [<805554e0>] (init_file) from [<80555c98>] (alloc_empty_file+0x68/0x13c) [ 6198.237835][T14684] r7:84e10f80 r6:00000001 r5:848796c0 r4:82465838 [ 6198.237852][T14684] [<80555c30>] (alloc_empty_file) from [<80555e0c>] (alloc_file_pseudo+0xa0/0x104) [ 6198.237921][T14684] r8:832a36d0 r7:849be000 r6:81c1fdd0 r5:850be848 r4:00000001 [ 6198.237938][T14684] [<80555d6c>] (alloc_file_pseudo) from [<80560d10>] (create_pipe_files+0xd4/0x234) [ 6198.238014][T14684] r10:00000167 r9:81c1fdd0 r8:82465844 r7:00000000 r6:ec179f64 r5:849be000 [ 6198.238035][T14684] r4:850be848 [ 6198.238053][T14684] [<80560c3c>] (create_pipe_files) from [<80560ec0>] (do_pipe2+0x50/0x134) [ 6198.238121][T14684] r9:849be000 r8:8020029c r7:00000167 r6:00000000 r5:00000000 r4:00000000 [ 6198.238139][T14684] [<80560e70>] (do_pipe2) from [<8056106c>] (sys_pipe2+0x10/0x14) [ 6198.238199][T14684] r6:00130270 r5:00000000 r4:00000000 [ 6198.238216][T14684] [<8056105c>] (sys_pipe2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6198.238265][T14684] Exception stack(0xec179fa8 to 0xec179ff0) [ 6198.238306][T14684] 9fa0: 00000000 00000000 00000000 00000000 00000000 00000000 [ 6198.238342][T14684] 9fc0: 00000000 00000000 00130270 00000167 002e0000 00000000 00006364 76f480bc [ 6198.238370][T14684] 9fe0: 76f47ec0 76f47eb0 0001948c 001322c0 [ 6205.188719][T14714] FAULT_INJECTION: forcing a failure. [ 6205.188719][T14714] name failslab, interval 1, probability 0, space 0, times 0 [ 6205.190639][T14714] CPU: 1 UID: 0 PID: 14714 Comm: syz.2.10080 Not tainted syzkaller #0 PREEMPT [ 6205.190778][T14714] Hardware name: ARM-Versatile Express [ 6205.190806][T14714] Call trace: [ 6205.190851][T14714] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6205.190971][T14714] r7:00000c40 r6:00000000 r5:60000013 r4:8226023c [ 6205.190994][T14714] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6205.191048][T14714] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6205.191104][T14714] r5:84051800 r4:82917bc0 [ 6205.191122][T14714] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6205.191184][T14714] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6205.191257][T14714] r8:84051800 r7:00000c40 r6:84ee8ce8 r5:00001000 r4:830016c0 [ 6205.191279][T14714] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6205.191364][T14714] [<80503b8c>] (__kmalloc_noprof) from [<807c352c>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 6205.191442][T14714] r10:84051800 r9:83340400 r8:00000000 r7:8364cdd0 r6:84ee8ce8 r5:00001000 [ 6205.191463][T14714] r4:00000000 [ 6205.191481][T14714] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6205.191550][T14714] r10:84051800 r9:00000000 r8:84ee8cc0 r7:00005451 r6:00000004 r5:81cd6504 [ 6205.191576][T14714] r4:84ee8ce8 r3:826c0200 [ 6205.191594][T14714] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 6205.191657][T14714] r9:00000003 r8:84ee8cc0 r7:00000000 r6:00000000 r5:00005451 r4:84ee8cc0 [ 6205.191676][T14714] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 6205.191734][T14714] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 6205.191798][T14714] r7:00000000 r6:84ee8cc1 r5:00000000 r4:00005451 [ 6205.191816][T14714] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6205.191863][T14714] Exception stack(0xec181fa8 to 0xec181ff0) [ 6205.191899][T14714] 1fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 6205.191934][T14714] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f430bc [ 6205.191972][T14714] 1fe0: 76f42ec0 76f42eb0 0001948c 001322c0 [ 6205.192008][T14714] r10:00000036 r9:84051800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6205.192028][T14714] r4:00000000 [ 6205.220548][T14714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6209.468461][T14733] FAULT_INJECTION: forcing a failure. [ 6209.468461][T14733] name failslab, interval 1, probability 0, space 0, times 0 [ 6209.470089][T14733] CPU: 1 UID: 0 PID: 14733 Comm: syz.1.10087 Not tainted syzkaller #0 PREEMPT [ 6209.470217][T14733] Hardware name: ARM-Versatile Express [ 6209.470243][T14733] Call trace: [ 6209.470285][T14733] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6209.470383][T14733] r7:00000d40 r6:00000000 r5:60000013 r4:8226023c [ 6209.470402][T14733] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6209.470451][T14733] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6209.470502][T14733] r5:8546c800 r4:82917bc0 [ 6209.470518][T14733] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6209.470573][T14733] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6209.470638][T14733] r8:8546c800 r7:00000d40 r6:84827568 r5:0000001c r4:83001240 [ 6209.470658][T14733] [<8051f22c>] (should_failslab) from [<80503c28>] (__kmalloc_noprof+0x9c/0x458) [ 6209.470731][T14733] [<80503b8c>] (__kmalloc_noprof) from [<807c3434>] (tomoyo_encode2+0x64/0xf0) [ 6209.470808][T14733] r10:00000fff r9:83318000 r8:00000000 r7:834f1a18 r6:84827568 r5:8403effc [ 6209.470829][T14733] r4:8403efeb [ 6209.470846][T14733] [<807c33d0>] (tomoyo_encode2) from [<807c34e4>] (tomoyo_encode+0x24/0x30) [ 6209.470909][T14733] r9:83318000 r8:00000000 r7:834f1a18 r6:84827568 r5:00001000 r4:8403efec [ 6209.470932][T14733] [<807c34c0>] (tomoyo_encode) from [<807c3570>] (tomoyo_realpath_from_path+0x80/0x17c) [ 6209.470994][T14733] r5:00001000 r4:8403e000 [ 6209.471010][T14733] [<807c34f0>] (tomoyo_realpath_from_path) from [<807bf670>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6209.471081][T14733] r10:8546c800 r9:00000000 r8:84827540 r7:00005450 r6:00000004 r5:81cd6504 [ 6209.471111][T14733] r4:84827568 r3:826c0200 [ 6209.471128][T14733] [<807bf5a4>] (tomoyo_path_number_perm) from [<807c3f50>] (tomoyo_file_ioctl+0x1c/0x20) [ 6209.471199][T14733] r9:00000003 r8:84827540 r7:00000000 r6:00000000 r5:00005450 r4:84827540 [ 6209.471220][T14733] [<807c3f34>] (tomoyo_file_ioctl) from [<807707a4>] (security_file_ioctl+0x64/0x1e4) [ 6209.471277][T14733] [<80770740>] (security_file_ioctl) from [<8056cc7c>] (sys_ioctl+0x4c/0xba0) [ 6209.471378][T14733] r7:00000000 r6:84827541 r5:00000000 r4:00005450 [ 6209.471397][T14733] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6209.471444][T14733] Exception stack(0xec1b1fa8 to 0xec1b1ff0) [ 6209.471485][T14733] 1fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 6209.471521][T14733] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f8a0bc [ 6209.471548][T14733] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 6209.471584][T14733] r10:00000036 r9:8546c800 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6209.471603][T14733] r4:00000000 [ 6209.494391][T14733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6218.152587][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10099'. [ 6221.761313][ T7910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6221.812596][ T7910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6221.863476][ T7910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6221.934304][ T7910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6222.334185][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6222.341341][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6222.354813][ T7910] bond0 (unregistering): Released all slaves [ 6222.432899][ T7910] hsr_slave_0: left promiscuous mode [ 6222.439680][ T7910] hsr_slave_1: left promiscuous mode [ 6222.460376][ T7910] veth1_macvtap: left promiscuous mode [ 6222.460586][ T7910] veth0_macvtap: left promiscuous mode [ 6222.460937][ T7910] veth1_vlan: left promiscuous mode [ 6222.461073][ T7910] veth0_vlan: left promiscuous mode [ 6222.751798][T14850] FAULT_INJECTION: forcing a failure. [ 6222.751798][T14850] name failslab, interval 1, probability 0, space 0, times 0 [ 6222.756836][T14850] CPU: 0 UID: 0 PID: 14850 Comm: syz.1.10114 Not tainted syzkaller #0 PREEMPT [ 6222.756993][T14850] Hardware name: ARM-Versatile Express [ 6222.757025][T14850] Call trace: [ 6222.757075][T14850] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6222.757205][T14850] r7:84050c00 r6:00000000 r5:60000013 r4:8226023c [ 6222.757229][T14850] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6222.757291][T14850] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6222.757354][T14850] r5:84050c00 r4:82917bc0 [ 6222.757373][T14850] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6222.757441][T14850] [<80972380>] (should_fail_ex) from [<8051f298>] (should_failslab+0x6c/0x94) [ 6222.757523][T14850] r8:00000000 r7:84050c00 r6:00000cc0 r5:ffffffff r4:8329d300 [ 6222.757545][T14850] [<8051f22c>] (should_failslab) from [<80503238>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 6222.757606][T14850] [<805031e8>] (kmem_cache_alloc_node_noprof) from [<81550fac>] (__alloc_skb+0x138/0x160) [ 6222.757695][T14850] r10:00000000 r9:fffffffe r8:00000cc0 r7:00000000 r6:8329d300 r5:ffffffff [ 6222.757724][T14850] r4:828060c0 [ 6222.757744][T14850] [<81550e74>] (__alloc_skb) from [<816710ac>] (netlink_ack+0x70/0x214) [ 6222.757823][T14850] r8:85c5a3c0 r7:84f3efc0 r6:00000000 r5:81672c78 r4:00000018 [ 6222.757846][T14850] [<8167103c>] (netlink_ack) from [<8167133c>] (netlink_rcv_skb+0xec/0x120) [ 6222.757927][T14850] r10:00000000 r9:00000000 r8:84da49c0 r7:00000014 r6:84f3efc0 r5:81672c78 [ 6222.757995][T14850] r4:85c5a3c0 [ 6222.758016][T14850] [<81671250>] (netlink_rcv_skb) from [<81672508>] (genl_rcv+0x2c/0x3c) [ 6222.758087][T14850] r7:85c5a3c0 r6:84eeaf00 r5:829e8e68 r4:85c5a3c0 [ 6222.758109][T14850] [<816724dc>] (genl_rcv) from [<81670adc>] (netlink_unicast+0x1f0/0x30c) [ 6222.758173][T14850] r5:00000014 r4:85418000 [ 6222.758196][T14850] [<816708ec>] (netlink_unicast) from [<81670dc4>] (netlink_sendmsg+0x1cc/0x444) [ 6222.758271][T14850] r9:00000000 r8:00000000 r7:84983400 r6:00000014 r5:85c5a3c0 r4:dfea1f20 [ 6222.758293][T14850] [<81670bf8>] (netlink_sendmsg) from [<81542d20>] (__sock_sendmsg+0x44/0x78) [ 6222.758373][T14850] r10:00000000 r9:dfea1dc4 r8:dfea1dc4 r7:00000000 r6:837d8a00 r5:dfea1f20 [ 6222.758397][T14850] r4:00000000 [ 6222.758417][T14850] [<81542cdc>] (__sock_sendmsg) from [<81544074>] (____sys_sendmsg+0x298/0x2cc) [ 6222.758488][T14850] r7:00000000 r6:837d8a00 r5:00008000 r4:dfea1f20 [ 6222.758508][T14850] [<81543ddc>] (____sys_sendmsg) from [<8154603c>] (___sys_sendmsg+0x9c/0xd0) [ 6222.758579][T14850] r10:dfea1e24 r9:20000200 r8:00008000 r7:00000000 r6:837d8a00 r5:dfea1f20 [ 6222.758600][T14850] r4:00000000 [ 6222.758618][T14850] [<81545fa0>] (___sys_sendmsg) from [<815464d4>] (__sys_sendmsg+0x8c/0xe0) [ 6222.758692][T14850] r10:00000128 r9:84050c00 r8:84827540 r7:00008000 r6:20000200 r5:84827541 [ 6222.758714][T14850] r4:00000003 [ 6222.758730][T14850] [<81546448>] (__sys_sendmsg) from [<8154653c>] (sys_sendmsg+0x14/0x18) [ 6222.758792][T14850] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 6222.758808][T14850] [<81546528>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6222.758855][T14850] Exception stack(0xdfea1fa8 to 0xdfea1ff0) [ 6222.758892][T14850] 1fa0: 00000000 00000000 00000003 20000200 00008000 00000000 [ 6222.758934][T14850] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f8a0bc [ 6222.758958][T14850] 1fe0: 76f89ec0 76f89eb0 0001948c 001322c0 [ 6224.129700][T14820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6224.142877][T14820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6225.104813][T14820] hsr_slave_0: entered promiscuous mode [ 6225.108113][T14820] hsr_slave_1: entered promiscuous mode [ 6225.110782][T14820] debugfs: 'hsr0' already exists in 'hsr' [ 6225.112159][T14820] Cannot create hsr debugfs directory [ 6225.777348][T14820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6225.796394][T14820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6225.811640][T14820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6225.827788][T14820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6226.710857][T14820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6227.010244][T15220] cgroup: fork rejected by pids controller in /syz1 [ 6230.717275][T14820] veth0_vlan: entered promiscuous mode [ 6230.759503][T14820] veth1_vlan: entered promiscuous mode [ 6230.858457][T14820] veth0_macvtap: entered promiscuous mode [ 6230.876663][T14820] veth1_macvtap: entered promiscuous mode [ 6231.007208][ T7910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6231.007723][ T7910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6231.008113][ T7910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6231.008342][ T7910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6232.029049][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10123'. [ 6232.309864][T15368] FAULT_INJECTION: forcing a failure. [ 6232.309864][T15368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6232.310196][T15368] CPU: 1 UID: 0 PID: 15368 Comm: syz.2.10124 Not tainted syzkaller #0 PREEMPT [ 6232.310293][T15368] Hardware name: ARM-Versatile Express [ 6232.310322][T15368] Call trace: [ 6232.310409][T15368] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 6232.310533][T15368] r7:83a25c00 r6:00000000 r5:60000013 r4:8226023c [ 6232.310558][T15368] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 6232.310621][T15368] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 6232.310686][T15368] r5:8404bc00 r4:8294f150 [ 6232.310706][T15368] [<8021fb9c>] (dump_stack) from [<80972544>] (should_fail_ex+0x1c4/0x228) [ 6232.312472][T15368] [<80972380>] (should_fail_ex) from [<809725bc>] (should_fail+0x14/0x18) [ 6232.312797][T15368] r8:81d38980 r7:83a25c00 r6:c01064b5 r5:00000010 r4:00000010 [ 6232.312963][T15368] [<809725a8>] (should_fail) from [<809725dc>] (should_fail_usercopy+0x1c/0x20) [ 6232.313121][T15368] [<809725c0>] (should_fail_usercopy) from [<80ad0bdc>] (drm_ioctl+0x1c8/0x5b0) [ 6232.313364][T15368] [<80ad0a14>] (drm_ioctl) from [<8056cd60>] (sys_ioctl+0x130/0xba0) [ 6232.313485][T15368] r10:8404bc00 r9:00000003 r8:85c27d80 r7:20000080 r6:85c27d81 r5:00000000 [ 6232.313557][T15368] r4:c01064b5 [ 6232.313599][T15368] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6232.313719][T15368] Exception stack(0xec96dfa8 to 0xec96dff0) [ 6232.313794][T15368] dfa0: 00000000 00000000 00000003 c01064b5 20000080 00000000 [ 6232.313839][T15368] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76fcd0bc [ 6232.313887][T15368] dfe0: 76fccec0 76fcceb0 0001948c 001322c0 [ 6232.313929][T15368] r10:00000036 r9:8404bc00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 6232.314000][T15368] r4:00000000 [ 6237.597853][T15409] fuse: Unknown parameter ' ' [ 6242.156357][ T93] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 6242.476987][ T93] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 6242.478056][ T93] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 6242.479254][ T93] usb 2-1: config 220 has no interface number 2 [ 6242.480133][ T93] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6242.481757][ T93] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 6242.483170][ T93] usb 2-1: config 220 interface 0 has no altsetting 0 [ 6242.484474][ T93] usb 2-1: config 220 interface 76 has no altsetting 0 [ 6242.488254][ T93] usb 2-1: config 220 interface 1 has no altsetting 0 [ 6242.739455][ T93] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 6242.740303][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6242.741047][ T93] usb 2-1: Product: syz [ 6242.741607][ T93] usb 2-1: Manufacturer: syz [ 6242.742096][ T93] usb 2-1: SerialNumber: syz [ 6243.174122][ T93] usb 2-1: USB disconnect, device number 52 [ 6259.725767][T10831] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 6259.927086][T10831] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 6259.966969][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6259.967157][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6259.967365][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.013675][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.013909][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.014092][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.049798][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.049965][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.050123][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.227708][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.228017][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.229662][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.379312][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.379620][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.379937][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.521615][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.521948][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.522248][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6260.674537][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6260.674952][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6260.675798][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6261.117634][T10831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 6261.117954][T10831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 6261.118289][T10831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6261.179023][T10831] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 6261.179264][T10831] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 6261.181457][T10831] usb 2-1: Product: syz [ 6261.181733][T10831] usb 2-1: Manufacturer: syz [ 6261.181887][T10831] usb 2-1: SerialNumber: syz [ 6261.199056][T10831] usb 2-1: config 0 descriptor?? [ 6261.299222][T10831] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 6262.141019][ T3055] usb 2-1: USB disconnect, device number 53 [ 6262.156846][ T3055] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 6279.034467][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6279.046327][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6279.052730][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6279.053676][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6315.995936][ T31] audit: type=1400 audit(6315.890:757): avc: denied { create } for pid=15563 comm="syz.2.10162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 6315.996295][ T31] audit: type=1400 audit(6315.890:758): avc: denied { sys_admin } for pid=15563 comm="syz.2.10162" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 6408.105512][ T3055] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 6408.295874][ T3055] usb 2-1: Using ep0 maxpacket: 16 [ 6408.374599][ T3055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6408.376273][ T3055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6408.377241][ T3055] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 6408.378061][ T3055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6408.386603][ T3055] usb 2-1: config 0 descriptor?? [ 6409.335871][ T3055] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input30 [ 6409.350442][ T3055] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input31 [ 6409.417376][ T3055] kye 0003:0458:5012.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 6410.477867][ C0] kye 0003:0458:5012.0003: usb_submit_urb(ctrl) failed: -1 [ 6411.260157][T10831] usb 2-1: USB disconnect, device number 54 [ 6417.947684][T15706] veth0_to_team: entered promiscuous mode [ 6417.947854][T15706] veth0_to_team: entered allmulticast mode [ 6420.986588][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6420.989446][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6421.235932][T15719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6421.238960][T15719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6454.078415][T15801] syzkaller0: entered promiscuous mode [ 6454.078794][T15801] syzkaller0: entered allmulticast mode [ 6454.094043][ T31] audit: type=1400 audit(6453.990:759): avc: denied { relabelfrom } for pid=15800 comm="syz.2.10219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 6454.098669][ T31] audit: type=1400 audit(6453.990:760): avc: denied { relabelto } for pid=15800 comm="syz.2.10219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 6454.320026][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10221'. [ 6454.536006][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6454.544792][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6455.006322][ T670] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 6455.186480][ T670] usb 2-1: Using ep0 maxpacket: 32 [ 6455.359643][ T670] usb 2-1: config 0 interface 0 has no altsetting 0 [ 6456.269262][ T670] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 6456.269468][ T670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6456.269631][ T670] usb 2-1: Product: syz [ 6456.269724][ T670] usb 2-1: Manufacturer: syz [ 6456.269841][ T670] usb 2-1: SerialNumber: syz [ 6456.273479][ T670] usb 2-1: config 0 descriptor?? [ 6456.426781][ T670] gs_usb 2-1:0.0: Required endpoints not found [ 6458.932198][ T670] usb 2-1: USB disconnect, device number 55 [ 6462.802093][ T31] audit: type=1400 audit(6462.700:761): avc: denied { map } for pid=15838 comm="syz.2.10226" path="socket:[114387]" dev="sockfs" ino=114387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 6462.863209][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6462.864490][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6485.482126][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10231'. [ 6485.576150][T15858] hsr_slave_0: left promiscuous mode [ 6485.641341][T15858] hsr_slave_1: left promiscuous mode [ 6512.491483][T15904] netlink: 'syz.1.10246': attribute type 5 has an invalid length. [ 6547.202153][T16069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6547.203795][T16069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6547.256890][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6547.257405][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6563.362254][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6563.364027][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6571.516441][T16097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6571.517441][T16097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6576.259058][T16104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6576.278684][T16104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6577.429963][T16104] hsr_slave_0: entered promiscuous mode [ 6577.437508][T16104] hsr_slave_1: entered promiscuous mode [ 6577.772096][T16104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 6577.780748][T16104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 6577.821793][T16104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 6577.837629][T16104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 6578.842065][T16104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6579.190681][T16415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6579.251356][T16415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6579.331686][T16415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6579.528675][T16415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6579.871107][T16415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6579.891879][T16415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6579.909492][T16415] bond0 (unregistering): Released all slaves [ 6580.037734][T16415] veth1_macvtap: left promiscuous mode [ 6580.038108][T16415] veth0_macvtap: left promiscuous mode [ 6580.038598][T16415] veth1_vlan: left promiscuous mode [ 6580.039044][T16415] veth0_vlan: left promiscuous mode [ 6583.545424][T16104] veth0_vlan: entered promiscuous mode [ 6583.589525][T16104] veth1_vlan: entered promiscuous mode [ 6583.709030][T16104] veth0_macvtap: entered promiscuous mode [ 6583.719551][T16104] veth1_macvtap: entered promiscuous mode [ 6583.770906][ T7910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6583.771148][ T7910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6583.771367][ T7910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6583.771490][ T7910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6583.969025][T16491] 8<--- cut here --- [ 6583.969233][T16491] Unable to handle kernel paging request at virtual address fee04f2a when write [ 6583.969345][T16491] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 6583.970335][T16491] Internal error: Oops: a06 [#1] SMP ARM [ 6583.974683][T16491] Modules linked in: [ 6583.975712][T16491] CPU: 0 UID: 0 PID: 16491 Comm: syz.3.10270 Not tainted syzkaller #0 PREEMPT [ 6583.976226][T16491] Hardware name: ARM-Versatile Express [ 6583.976476][T16491] PC is at subdev_8255_io+0x60/0x6c [ 6583.977098][T16491] LR is at subdev_8255_io+0x4c/0x6c [ 6583.977393][T16491] pc : [<813b8568>] lr : [<813b8554>] psr: 60000013 [ 6583.978336][T16491] sp : dfd85cb8 ip : dfd85cb8 fp : dfd85cd4 [ 6583.978925][T16491] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 6583.979257][T16491] r7 : 00004f27 r6 : 0000009b r5 : 840ed180 r4 : 00004f2a [ 6583.979736][T16491] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 840ed180 [ 6583.980164][T16491] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 6583.980541][T16491] Control: 30c5387d Table: 876a9c80 DAC: fffffffd [ 6583.980891][T16491] Register r0 information: slab kmalloc-192 start 840ed180 pointer offset 0 size 192 [ 6583.982087][T16491] Register r1 information: non-paged memory [ 6583.982996][T16491] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 6583.983639][T16491] Register r3 information: non-paged memory [ 6583.983946][T16491] Register r4 information: non-paged memory [ 6583.984331][T16491] Register r5 information: slab kmalloc-192 start 840ed180 pointer offset 0 size 192 [ 6583.985140][T16491] Register r6 information: non-paged memory [ 6583.985415][T16491] Register r7 information: non-paged memory [ 6583.985757][T16491] Register r8 information: non-paged memory [ 6583.986073][T16491] Register r9 information: NULL pointer [ 6583.986335][T16491] Register r10 information: NULL pointer [ 6583.986615][T16491] Register r11 information: 2-page vmalloc region starting at 0xdfd84000 allocated at kernel_clone+0xac/0x3ec [ 6583.987247][T16491] Register r12 information: 2-page vmalloc region starting at 0xdfd84000 allocated at kernel_clone+0xac/0x3ec [ 6583.987940][T16491] Process syz.3.10270 (pid: 16491, stack limit = 0xdfd84000) [ 6583.988331][T16491] Stack: (0xdfd85cb8 to 0xdfd86000) [ 6583.988617][T16491] 5ca0: 813b8508 840ed180 [ 6583.989108][T16491] 5cc0: 00004f27 00004f27 dfd85cf4 dfd85cd8 813b8240 813b8514 00004f27 80503b98 [ 6583.989439][T16491] 5ce0: 85661800 85661800 dfd85d14 dfd85cf8 813b8600 813b81f4 85661800 840ed180 [ 6583.990077][T16491] 5d00: dfd85da4 00004f27 dfd85d54 dfd85d18 813b87f4 813b8580 82ae3d60 84ef1c00 [ 6583.990451][T16491] 5d20: 82821598 00000000 00000000 829d00c4 840ed180 840ed1c4 dfd85d90 840ed180 [ 6583.990803][T16491] 5d40: 00000000 82b16f00 dfd85d8c dfd85d58 813a76f8 813b8744 200000c0 00000000 [ 6583.991167][T16491] 5d60: dfd85d7c 200000c0 840ed180 b5403587 200000c0 8404b000 40946400 00000003 [ 6583.991542][T16491] 5d80: dfd85e4c dfd85d90 813a3278 813a75fc 35353238 00000000 00000000 00000000 [ 6583.991953][T16491] 5da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 6583.992307][T16491] 5dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000000 00000009 [ 6583.992705][T16491] 5de0: 0000e1cb 00000006 00000004 00000003 00000395 80000089 fffffffd 00000000 [ 6583.993061][T16491] 5e00: 00000006 ffffeadb 00000003 0001003c 00000008 00000004 08000000 00000005 [ 6583.993478][T16491] 5e20: 00000000 ef4ca71a 00000000 85932300 840ed180 200000c0 200000c0 8404b000 [ 6583.993826][T16491] 5e40: dfd85f14 dfd85e50 813a4244 813a3184 00000000 00000000 00000000 ef4ca71a [ 6583.994186][T16491] 5e60: 00000000 00000000 8247054c 0000005f 83e53a58 840ed1b0 840dd3b4 8404b000 [ 6583.994723][T16491] 5e80: dfd85ee4 dfd85e90 807979b4 8078dd18 00000064 00000001 00000000 dfd85eac [ 6583.995403][T16491] 5ea0: 84d89d90 834efbb0 00006400 0000000b dfd85ea0 00000000 00000000 ef4ca71a [ 6583.995914][T16491] 5ec0: 85932300 40946400 200000c0 200000c0 85932300 00000003 dfd85ef4 dfd85ee8 [ 6583.996500][T16491] 5ee0: 80797ad4 ef4ca71a dfd85f14 40946400 00000000 85932301 200000c0 85932300 [ 6583.996914][T16491] 5f00: 00000003 8404b000 dfd85fa4 dfd85f18 8056cd60 813a3c74 ecac8b10 8404b000 [ 6583.997280][T16491] 5f20: dfd85f3c dfd85f30 81a394b8 81a39388 dfd85f54 dfd85f40 8025e490 8028ef64 [ 6583.997626][T16491] 5f40: dfd85fb0 40000000 dfd85f84 dfd85f58 802229ec 8025e44c 00000000 8281cddc [ 6583.998172][T16491] 5f60: dfd85fb0 0014c820 ecac8b10 80222940 00000000 ef4ca71a dfd85fac 00000000 [ 6583.998550][T16491] 5f80: 00000000 002f6308 00000036 8020029c 8404b000 00000036 00000000 dfd85fa8 [ 6583.998912][T16491] 5fa0: 80200060 8056cc3c 00000000 00000000 00000003 40946400 200000c0 00000000 [ 6583.999574][T16491] 5fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76fe90bc [ 6584.000275][T16491] 5fe0: 76fe8ec0 76fe8eb0 0001948c 001322c0 60000010 00000003 00000000 00000000 [ 6584.000689][T16491] Call trace: [ 6584.000948][T16491] [<813b8508>] (subdev_8255_io) from [<813b8240>] (subdev_8255_do_config+0x58/0x60) [ 6584.001380][T16491] r7:00004f27 r6:00004f27 r5:840ed180 r4:813b8508 [ 6584.001650][T16491] [<813b81e8>] (subdev_8255_do_config) from [<813b8600>] (subdev_8255_io_init+0x8c/0x9c) [ 6584.002010][T16491] r4:85661800 [ 6584.002180][T16491] [<813b8574>] (subdev_8255_io_init) from [<813b87f4>] (dev_8255_attach+0xbc/0x114) [ 6584.002571][T16491] r7:00004f27 r6:dfd85da4 r5:840ed180 r4:85661800 [ 6584.002829][T16491] [<813b8738>] (dev_8255_attach) from [<813a76f8>] (comedi_device_attach+0x108/0x250) [ 6584.003256][T16491] r10:82b16f00 r9:00000000 r8:840ed180 r7:dfd85d90 r6:840ed1c4 r5:840ed180 [ 6584.003674][T16491] r4:829d00c4 [ 6584.003877][T16491] [<813a75f0>] (comedi_device_attach) from [<813a3278>] (do_devconfig_ioctl+0x100/0x220) [ 6584.004338][T16491] r10:00000003 r9:40946400 r8:8404b000 r7:200000c0 r6:b5403587 r5:840ed180 [ 6584.004685][T16491] r4:200000c0 [ 6584.004859][T16491] [<813a3178>] (do_devconfig_ioctl) from [<813a4244>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 6584.005473][T16491] r8:8404b000 r7:200000c0 r6:200000c0 r5:840ed180 r4:85932300 [ 6584.005856][T16491] [<813a3c68>] (comedi_unlocked_ioctl) from [<8056cd60>] (sys_ioctl+0x130/0xba0) [ 6584.006616][T16491] r10:8404b000 r9:00000003 r8:85932300 r7:200000c0 r6:85932301 r5:00000000 [ 6584.007161][T16491] r4:40946400 [ 6584.007424][T16491] [<8056cc30>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6584.007780][T16491] Exception stack(0xdfd85fa8 to 0xdfd85ff0) [ 6584.008062][T16491] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 6584.008537][T16491] 5fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76fe90bc [ 6584.008891][T16491] 5fe0: 76fe8ec0 76fe8eb0 0001948c 001322c0 [ 6584.009152][T16491] r10:00000036 r9:8404b000 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 6584.009464][T16491] r4:00000000 [ 6584.009888][T16491] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 6584.010617][T16491] ---[ end trace 0000000000000000 ]--- [ 6584.011424][T16491] Kernel panic - not syncing: Fatal exception [ 6584.013408][T16491] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:40:53 Registers: info registers vcpu 0 CPU#0 R00=83fa9040 R01=00000020 R02=eb787000 R03=eb787018 R04=83b11016 R05=83fa9040 R06=80a793fc R07=83b1104e R08=82826ee0 R09=00000000 R10=000043d2 R11=dfd8591c R12=00000002 R13=dfd85910 R14=82959084 R15=80a7940c PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=830a0518 R01=ddde6800 R02=00058780 R03=df80a000 R04=830a0518 R05=0000001b R06=81d0ec64 R07=0000001c R08=00000001 R09=84050c00 R10=00010106 R11=df805f64 R12=df805f68 R13=df805f50 R14=802ee0a4 R15=8097ea1c PSR=20000193 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000