last executing test programs: 1m28.001349541s ago: executing program 0 (id=652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a84f028100400008004556001c006100000001"], 0x32) 1m27.530299066s ago: executing program 0 (id=653): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00\"E'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m25.859719284s ago: executing program 0 (id=658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000904000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m25.629310491s ago: executing program 0 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 1m25.3810163s ago: executing program 0 (id=661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x7, "c400"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.039627976s ago: executing program 0 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYBLOB="5ac569480d9e409fa8108234098156a91fcc7bc2fc87"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m25.039250996s ago: executing program 32 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYBLOB="5ac569480d9e409fa8108234098156a91fcc7bc2fc87"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.60039504s ago: executing program 2 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 4.121667047s ago: executing program 2 (id=855): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.469673056s ago: executing program 1 (id=857): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r0, &(0x7f0000000a00), 0xfc8b) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'net'}]}, 0x5) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 3.391881002s ago: executing program 2 (id=858): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000400000000", @ANYRES32=0x0, @ANYRES32], 0x50) 2.658021708s ago: executing program 1 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{0x1d, 0x0, 0x2}, {0x3, 0x0, 0x6}, {0x0, 0xc, 0x3, 0x8}, {0x6, 0x0, 0x0, 0x5}]}) 1.913126984s ago: executing program 1 (id=860): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044}, 0x802) 941.537419ms ago: executing program 2 (id=861): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x5b, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="14"], 0x18, 0x40091}, 0x4008041) 562.626217ms ago: executing program 2 (id=862): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000000000000000200000085200000fb550100"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 562.298277ms ago: executing program 1 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d0000009500000000000000402bca7352f843c77c504b24b7d19994c053aa2e05a39c8b013943758ebfa1c64325881f2fd51114e58e8bd2151d63fa757156212bce58457287eac9860d86"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) 295.208788ms ago: executing program 1 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 243.85µs ago: executing program 1 (id=865): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) 0s ago: executing program 2 (id=866): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f000000}, 0x48) kernel console output (not intermixed with test programs): sys_write+0x74/0xec) [ 183.888602][ T4266] r10:00000004 r9:85144980 r8:8020029c r7:00000000 r6:00000002 r5:85346480 [ 183.888667][ T4266] r4:85346483 [ 183.888785][ T4266] [<8057651c>] (ksys_write) from [<80576618>] (sys_write+0x10/0x14) [ 183.888868][ T4266] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 183.888979][ T4266] [<80576608>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 183.889057][ T4266] Exception stack(0xe0455fa8 to 0xe0455ff0) [ 183.889100][ T4266] 5fa0: 00000000 00000000 00000004 76fc8f08 00000001 00000000 [ 183.889139][ T4266] 5fc0: 00000000 00000000 00000000 00000004 003462d8 00000000 00000001 76fc90dc [ 183.889170][ T4266] 5fe0: 76fc8e58 76fc8e44 0010b524 00112108 [ 186.470825][ T4298] FAULT_INJECTION: forcing a failure. [ 186.470825][ T4298] name failslab, interval 1, probability 0, space 0, times 0 [ 186.471433][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT [ 186.471559][ T4298] Hardware name: ARM-Versatile Express [ 186.471590][ T4298] Call trace: [ 186.471650][ T4298] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 186.471794][ T4298] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 186.471821][ T4298] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 186.471886][ T4298] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 186.471960][ T4298] r7:00000000 r6:00000000 r5:831fe200 r4:82919720 [ 186.471983][ T4298] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 186.472052][ T4298] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 186.472178][ T4298] r8:ffffffff r7:00000000 r6:83001180 r5:00000cc0 r4:00000008 [ 186.472213][ T4298] [<80544404>] (should_failslab) from [<80524438>] (__kmalloc_node_track_caller_noprof+0xa8/0x3bc) [ 186.472352][ T4298] [<80524390>] (__kmalloc_node_track_caller_noprof) from [<804b40c4>] (kstrdup+0x3c/0x60) [ 186.472441][ T4298] r10:000001ae r9:831fe200 r8:828f5eb4 r7:ea749ef8 r6:8031f564 r5:00000007 [ 186.472473][ T4298] r4:00000cc0 [ 186.472497][ T4298] [<804b4088>] (kstrdup) from [<8031f564>] (__request_module+0xfc/0x2ec) [ 186.472575][ T4298] r7:805a2460 r6:831fe200 r5:00000002 r4:85ef5ac0 [ 186.472601][ T4298] [<8031f468>] (__request_module) from [<805a2460>] (get_fs_type+0x8c/0xe8) [ 186.472678][ T4298] r3:85f78080 r2:00000004 r1:822cae80 [ 186.472715][ T4298] r8:8020029c r7:000001ae r6:00000004 r5:00000000 r4:85f78080 [ 186.472739][ T4298] [<805a23d4>] (get_fs_type) from [<805cbfdc>] (sys_fsopen+0x44/0x128) [ 186.472893][ T4298] r7:000001ae r6:00000000 r5:00000000 r4:85f78080 [ 186.472922][ T4298] [<805cbf98>] (sys_fsopen) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 186.473005][ T4298] Exception stack(0xea749fa8 to 0xea749ff0) [ 186.473112][ T4298] 9fa0: 00000000 00000000 20000280 00000000 00000000 00000000 [ 186.473157][ T4298] 9fc0: 00000000 00000000 0012ed04 000001ae 00346378 00000000 00000001 76fa80dc [ 186.473190][ T4298] 9fe0: 76fa7e88 76fa7e78 00018bc4 00130300 [ 186.473236][ T4298] r7:000001ae r6:0012ed04 r5:00000000 r4:00000000 [ 195.635386][ T4320] FAULT_INJECTION: forcing a failure. [ 195.635386][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 195.636422][ T4320] CPU: 1 UID: 0 PID: 4320 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT [ 195.636484][ T4320] Hardware name: ARM-Versatile Express [ 195.636501][ T4320] Call trace: [ 195.636567][ T4320] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 195.636641][ T4320] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 195.636652][ T4320] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 195.636684][ T4320] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 195.636721][ T4320] r7:00400dd0 r6:00000000 r5:85183d40 r4:82919720 [ 195.636730][ T4320] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 195.636763][ T4320] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 195.636804][ T4320] r8:00000018 r7:00400dd0 r6:00000000 r5:00000000 r4:83001600 [ 195.636829][ T4320] [<80544404>] (should_failslab) from [<8051ebd0>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 195.636861][ T4320] [<8051eb7c>] (__kmalloc_cache_noprof) from [<8076d984>] (fuse_dentry_init+0x2c/0x4c) [ 195.636904][ T4320] r10:0000000c r9:824ae8b8 r8:00000005 r7:00000000 r6:00000000 r5:ea819ea8 [ 195.636915][ T4320] r4:8368a330 [ 195.636925][ T4320] [<8076d958>] (fuse_dentry_init) from [<8059583c>] (__d_alloc+0x100/0x21c) [ 195.636962][ T4320] r5:ea819ea8 r4:8368a330 [ 195.636971][ T4320] [<8059573c>] (__d_alloc) from [<80598d38>] (d_alloc_parallel+0x60/0x4f0) [ 195.637012][ T4320] r9:83689b28 r8:82ad9b28 r7:01e305db r6:6a236761 r5:82ad9b44 r4:ea819e20 [ 195.637022][ T4320] [<80598cd8>] (d_alloc_parallel) from [<80585354>] (__lookup_slow+0x60/0x144) [ 195.637064][ T4320] r10:0000000c r9:00000000 r8:ea819ea8 r7:00000003 r6:8379bb80 r5:83689b28 [ 195.637075][ T4320] r4:8379bc00 [ 195.637083][ T4320] [<805852f4>] (__lookup_slow) from [<80585470>] (lookup_slow+0x38/0x50) [ 195.637123][ T4320] r9:00000000 r8:ea819f74 r7:00000003 r6:ea819ea8 r5:83689b28 r4:8379bc00 [ 195.637133][ T4320] [<80585438>] (lookup_slow) from [<805896a0>] (path_lookupat+0x198/0x2a4) [ 195.637169][ T4320] r7:00000103 r6:ea819f74 r5:00000000 r4:ea819ea0 [ 195.637179][ T4320] [<80589508>] (path_lookupat) from [<8058ae78>] (filename_lookup+0xd8/0x1a8) [ 195.637221][ T4320] r9:00000000 r8:ea819f74 r7:00000003 r6:85183d40 r5:8334e9c0 r4:ffffff9c [ 195.637231][ T4320] [<8058ada0>] (filename_lookup) from [<80571764>] (sys_chdir+0x54/0xe8) [ 195.637275][ T4320] r9:85183d40 r8:00000002 r7:85183d40 r6:00000000 r5:8334e9c0 r4:00000000 [ 195.637293][ T4320] [<80571710>] (sys_chdir) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 195.637324][ T4320] Exception stack(0xea819fa8 to 0xea819ff0) [ 195.637352][ T4320] 9fa0: 00000000 00000000 200000c0 00000000 00000000 00000000 [ 195.637372][ T4320] 9fc0: 00000000 00000000 0012ed04 0000000c 00346378 00000000 00000001 76f8b0dc [ 195.637388][ T4320] 9fe0: 76f8ae88 76f8ae78 00018bc4 00130300 [ 195.637407][ T4320] r8:8020029c r7:0000000c r6:0012ed04 r5:00000000 r4:00000000 [ 196.565528][ T28] audit: type=1400 audit(196.480:195): avc: denied { nlmsg_write } for pid=4321 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 201.003809][ T4341] FAULT_INJECTION: forcing a failure. [ 201.003809][ T4341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.004488][ T4341] CPU: 1 UID: 0 PID: 4341 Comm: syz.1.174 Not tainted syzkaller #0 PREEMPT [ 201.004626][ T4341] Hardware name: ARM-Versatile Express [ 201.004658][ T4341] Call trace: [ 201.004710][ T4341] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 201.004838][ T4341] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 201.004861][ T4341] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 201.004921][ T4341] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 201.004987][ T4341] r7:0000000c r6:00000000 r5:85143100 r4:8295161c [ 201.005004][ T4341] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 201.005137][ T4341] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 201.005253][ T4341] r8:855ca280 r7:0000000c r6:76faade4 r5:df9c5ee4 r4:0000000c [ 201.005271][ T4341] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 201.005437][ T4341] [<809bd8a4>] (should_fail_usercopy) from [<815c647c>] (move_addr_to_kernel+0x34/0xf8) [ 201.005555][ T4341] [<815c6448>] (move_addr_to_kernel) from [<815c810c>] (__sys_sendto+0xd0/0x160) [ 201.005654][ T4341] r7:76faade4 r6:838e2901 r5:00000000 r4:00000000 [ 201.005691][ T4341] [<815c803c>] (__sys_sendto) from [<815c81b8>] (sys_sendto+0x1c/0x24) [ 201.005931][ T4341] r9:85143100 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76faade4 [ 201.006017][ T4341] [<815c819c>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 201.006345][ T4341] Exception stack(0xdf9c5fa8 to 0xdf9c5ff0) [ 201.006460][ T4341] 5fa0: 76faade4 0000000c 00000005 76faae78 00000024 00000000 [ 201.006600][ T4341] 5fc0: 76faade4 0000000c 00000000 00000122 76faae9c 00000000 76faae78 76fac0dc [ 201.006638][ T4341] 5fe0: 76faad78 76faad64 0010b524 00112108 [ 207.521269][ T4360] FAULT_INJECTION: forcing a failure. [ 207.521269][ T4360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.524833][ T4360] CPU: 0 UID: 0 PID: 4360 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT [ 207.524995][ T4360] Hardware name: ARM-Versatile Express [ 207.525118][ T4360] Call trace: [ 207.525222][ T4360] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 207.525379][ T4360] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 207.525404][ T4360] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 207.525468][ T4360] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 207.525545][ T4360] r7:20009440 r6:00000000 r5:83fb6200 r4:8295161c [ 207.525565][ T4360] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 207.525665][ T4360] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 207.525793][ T4360] r8:00000000 r7:20009440 r6:00003d8c r5:00000000 r4:df9d1f30 [ 207.525816][ T4360] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 207.525879][ T4360] [<809bd8a4>] (should_fail_usercopy) from [<808f7b84>] (_copy_from_iter+0x64/0x7c4) [ 207.525945][ T4360] [<808f7b20>] (_copy_from_iter) from [<816f9508>] (netlink_sendmsg+0x188/0x440) [ 207.526028][ T4360] r10:00000000 r9:00000000 r8:df9d1f30 r7:85b21400 r6:00003d8c r5:833ad0c0 [ 207.526052][ T4360] r4:df9d1f20 [ 207.526093][ T4360] [<816f9380>] (netlink_sendmsg) from [<815c54fc>] (__sock_sendmsg+0x44/0x78) [ 207.526182][ T4360] r10:04000014 r9:00000000 r8:df9d1dcc r7:00000000 r6:855cac80 r5:df9d1f20 [ 207.526206][ T4360] r4:00000000 [ 207.526256][ T4360] [<815c54b8>] (__sock_sendmsg) from [<815c63bc>] (____sys_sendmsg+0x238/0x2c4) [ 207.526398][ T4360] r7:00000000 r6:00000000 r5:855cac80 r4:df9d1f20 [ 207.526421][ T4360] [<815c6184>] (____sys_sendmsg) from [<815c67bc>] (___sys_sendmsg+0x9c/0xd0) [ 207.526533][ T4360] r10:00000128 r9:20000100 r8:04000014 r7:00000000 r6:855cac80 r5:df9d1f20 [ 207.526563][ T4360] r4:00000000 [ 207.526606][ T4360] [<815c6720>] (___sys_sendmsg) from [<815c8824>] (__sys_sendmsg+0x8c/0xe0) [ 207.526686][ T4360] r9:83fb6200 r8:85346c00 r7:04000014 r6:20000100 r5:85346c01 r4:00000003 [ 207.526710][ T4360] [<815c8798>] (__sys_sendmsg) from [<815c888c>] (sys_sendmsg+0x14/0x18) [ 207.526779][ T4360] r8:8020029c r7:00000128 r6:0012ed04 r5:00000000 r4:00000000 [ 207.526801][ T4360] [<815c8878>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 207.526854][ T4360] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 207.527116][ T4360] 1fa0: 00000000 00000000 00000003 20000100 04000014 00000000 [ 207.527165][ T4360] 1fc0: 00000000 00000000 0012ed04 00000128 003462d8 00000000 00000001 76fc90dc [ 207.527225][ T4360] 1fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 213.555621][ T4380] FAULT_INJECTION: forcing a failure. [ 213.555621][ T4380] name failslab, interval 1, probability 0, space 0, times 0 [ 213.571836][ T4380] CPU: 0 UID: 0 PID: 4380 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT [ 213.572019][ T4380] Hardware name: ARM-Versatile Express [ 213.572052][ T4380] Call trace: [ 213.572109][ T4380] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 213.572278][ T4380] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 213.572335][ T4380] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 213.572400][ T4380] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 213.572471][ T4380] r7:00000dc0 r6:00000000 r5:851abd40 r4:82919720 [ 213.572491][ T4380] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 213.572560][ T4380] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 213.572636][ T4380] r8:00000040 r7:00000dc0 r6:00000000 r5:00000000 r4:83001180 [ 213.572656][ T4380] [<80544404>] (should_failslab) from [<8051ebd0>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 213.572717][ T4380] [<8051eb7c>] (__kmalloc_cache_noprof) from [<80b0585c>] (drm_atomic_state_alloc+0x48/0x78) [ 213.572800][ T4380] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:df9e5d88 r5:83169040 [ 213.572825][ T4380] r4:8398b800 [ 213.572843][ T4380] [<80b05814>] (drm_atomic_state_alloc) from [<80b4ecf8>] (drm_atomic_helper_disable_plane+0x1c/0xe8) [ 213.572922][ T4380] r7:00000002 r6:df9e5d88 r5:83169040 r4:83169040 [ 213.572943][ T4380] [<80b4ecdc>] (drm_atomic_helper_disable_plane) from [<80b2f74c>] (__setplane_atomic+0x110/0x134) [ 213.573016][ T4380] r7:00000002 r6:831de040 r5:00000000 r4:83169040 [ 213.573036][ T4380] [<80b2f63c>] (__setplane_atomic) from [<80b2fa74>] (drm_mode_cursor_universal+0x168/0x300) [ 213.573115][ T4380] r10:0000000f r9:8398b800 r8:df9e5d88 r7:83169040 r6:00000000 r5:831de040 [ 213.573137][ T4380] r4:df9e5e64 [ 213.573155][ T4380] [<80b2f90c>] (drm_mode_cursor_universal) from [<80b2fd14>] (drm_mode_cursor_common+0x108/0x260) [ 213.573234][ T4380] r10:85f00f00 r9:831de040 r8:85f00f00 r7:831de054 r6:831de074 r5:df9e5e64 [ 213.573260][ T4380] r4:00000000 [ 213.573295][ T4380] [<80b2fc0c>] (drm_mode_cursor_common) from [<80b31108>] (drm_mode_cursor2_ioctl+0x10/0x14) [ 213.573374][ T4380] r10:85f00f00 r9:851abd40 r8:85f00f00 r7:8398b800 r6:df9e5e64 r5:80b310f8 [ 213.573397][ T4380] r4:00000002 [ 213.573416][ T4380] [<80b310f8>] (drm_mode_cursor2_ioctl) from [<80b23b44>] (drm_ioctl_kernel+0xb8/0x120) [ 213.573478][ T4380] [<80b23a8c>] (drm_ioctl_kernel) from [<80b23e0c>] (drm_ioctl+0x260/0x580) [ 213.573552][ T4380] r8:81d3d0c4 r7:8398b800 r6:c02464bb r5:00000024 r4:851ac528 [ 213.573573][ T4380] [<80b23bac>] (drm_ioctl) from [<80590fe8>] (sys_ioctl+0x244/0xb5c) [ 213.573660][ T4380] r10:851abd40 r9:00000003 r8:85346f00 r7:20000040 r6:c02464bb r5:85346f01 [ 213.573687][ T4380] r4:00000000 [ 213.573707][ T4380] [<80590da4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 213.573762][ T4380] Exception stack(0xdf9e5fa8 to 0xdf9e5ff0) [ 213.573814][ T4380] 5fa0: 00000000 00000000 00000003 c02464bb 20000040 00000000 [ 213.573856][ T4380] 5fc0: 00000000 00000000 0012ed04 00000036 003462d8 00000000 00000001 76fc90dc [ 213.573889][ T4380] 5fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 213.573929][ T4380] r10:00000036 r9:851abd40 r8:8020029c r7:00000036 r6:0012ed04 r5:00000000 [ 213.573953][ T4380] r4:00000000 [ 215.991174][ T28] audit: type=1400 audit(215.910:196): avc: denied { setopt } for pid=4393 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.109685][ T4394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 216.459685][ T28] audit: type=1400 audit(216.370:197): avc: denied { bind } for pid=4393 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.829873][ T4396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4396 comm=syz.0.194 [ 216.872843][ T4396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4396 comm=syz.0.194 [ 217.430303][ T4402] FAULT_INJECTION: forcing a failure. [ 217.430303][ T4402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.452136][ T4402] CPU: 1 UID: 0 PID: 4402 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT [ 217.452404][ T4402] Hardware name: ARM-Versatile Express [ 217.452437][ T4402] Call trace: [ 217.452495][ T4402] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 217.452631][ T4402] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 217.452654][ T4402] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 217.452745][ T4402] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 217.452859][ T4402] r7:00000000 r6:00000000 r5:85180000 r4:8295161c [ 217.452880][ T4402] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 217.452948][ T4402] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 217.453017][ T4402] r8:00000000 r7:00000000 r6:000000b4 r5:200003c0 r4:8334e9c0 [ 217.453094][ T4402] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 217.453160][ T4402] [<809bd8a4>] (should_fail_usercopy) from [<809c3820>] (strncpy_from_user+0x20/0x1b0) [ 217.453222][ T4402] [<809c3800>] (strncpy_from_user) from [<80584f14>] (do_getname+0x4c/0x14c) [ 217.453314][ T4402] r10:8334e9cc r9:85180000 r8:00000000 r7:00000000 r6:200003c0 r5:824ae8b0 [ 217.453338][ T4402] r4:8334e9c0 [ 217.453498][ T4402] [<80584ec8>] (do_getname) from [<8058e750>] (sys_linkat+0x48/0x88) [ 217.453611][ T4402] r10:0000014a r9:85180000 r8:00001000 r7:ffffff9c r6:ffffff9c r5:200003c0 [ 217.453643][ T4402] r4:8334e840 r3:200003c0 [ 217.453662][ T4402] [<8058e708>] (sys_linkat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 217.453747][ T4402] Exception stack(0xdfa8dfa8 to 0xdfa8dff0) [ 217.453827][ T4402] dfa0: 00001000 00000000 ffffff9c 200001c0 ffffff9c 200003c0 [ 217.453869][ T4402] dfc0: 00001000 00000000 0012ed04 0000014a 00346378 00000000 003d0f00 76f8b0dc [ 217.453900][ T4402] dfe0: 76f8ae88 76f8ae78 00018bc4 00130300 [ 217.453939][ T4402] r8:8020029c r7:0000014a r6:0012ed04 r5:00000000 r4:00001000 [ 220.339887][ T28] audit: type=1400 audit(220.260:198): avc: denied { lock } for pid=4421 comm="syz.0.203" path="/dev/fuse" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.480230][ T4427] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 220.482458][ T4427] audit: out of memory in audit_log_start [ 220.928469][ T28] audit: type=1400 audit(220.840:199): avc: denied { ioctl } for pid=4434 comm="syz.0.208" path="socket:[4525]" dev="sockfs" ino=4525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.667477][ T4465] FAULT_INJECTION: forcing a failure. [ 222.667477][ T4465] name failslab, interval 1, probability 0, space 0, times 0 [ 222.668112][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT [ 222.668192][ T4465] Hardware name: ARM-Versatile Express [ 222.668217][ T4465] Call trace: [ 222.668267][ T4465] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 222.668419][ T4465] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 222.668486][ T4465] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 222.668571][ T4465] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 222.668730][ T4465] r7:00000000 r6:00000000 r5:83803d40 r4:82919720 [ 222.668769][ T4465] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 222.668936][ T4465] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 222.669203][ T4465] r8:ffffffff r7:00000000 r6:83001180 r5:00000dc0 r4:00000004 [ 222.669400][ T4465] [<80544404>] (should_failslab) from [<80523a68>] (__kmalloc_node_noprof+0xa8/0x3bc) [ 222.669576][ T4465] [<805239c0>] (__kmalloc_node_noprof) from [<80501860>] (__vmalloc_node_range_noprof+0x14c/0x668) [ 222.669669][ T4465] r10:00001000 r9:00000000 r8:ffffffff r7:00000001 r6:00500dc0 r5:85f81100 [ 222.669692][ T4465] r4:00000004 [ 222.669709][ T4465] [<80501714>] (__vmalloc_node_range_noprof) from [<805021c8>] (__vmalloc_noprof+0x88/0xa0) [ 222.669788][ T4465] r10:00000000 r9:83803d40 r8:00000018 r7:00100cc0 r6:00001000 r5:00001000 [ 222.669813][ T4465] r4:00000000 [ 222.669830][ T4465] [<80502140>] (__vmalloc_noprof) from [<803cded0>] (bpf_prog_alloc_no_stats+0x38/0x1c8) [ 222.669914][ T4465] r5:00100dc0 r4:dfac5eb0 [ 222.669934][ T4465] [<803cde98>] (bpf_prog_alloc_no_stats) from [<803ce078>] (bpf_prog_alloc+0x18/0xc8) [ 222.670101][ T4465] r9:83803d40 r8:00000018 r7:dfac5d18 r6:00000000 r5:00500cc0 r4:dfac5eb0 [ 222.670130][ T4465] [<803ce060>] (bpf_prog_alloc) from [<803da26c>] (bpf_prog_load+0x2b4/0xdec) [ 222.670210][ T4465] r7:dfac5d18 r6:00000000 r5:00000000 r4:dfac5eb0 [ 222.670230][ T4465] [<803d9fb8>] (bpf_prog_load) from [<803dbd98>] (__sys_bpf+0x2d8/0x2038) [ 222.670304][ T4465] r10:00000005 r9:00000000 r8:dfac5e50 r7:000000a8 r6:83803d40 r5:20000480 [ 222.670327][ T4465] r4:00000000 [ 222.670346][ T4465] [<803dbac0>] (__sys_bpf) from [<803de090>] (sys_bpf+0x2c/0x48) [ 222.670419][ T4465] r10:00000182 r9:83803d40 r8:8020029c r7:00000182 r6:0012ed04 r5:00000000 [ 222.670439][ T4465] r4:00000000 [ 222.670454][ T4465] [<803de064>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 222.670508][ T4465] Exception stack(0xdfac5fa8 to 0xdfac5ff0) [ 222.670561][ T4465] 5fa0: 00000000 00000000 00000005 20000480 000000a8 00000000 [ 222.670600][ T4465] 5fc0: 00000000 00000000 0012ed04 00000182 003462d8 00000000 00000001 76fc90dc [ 222.670629][ T4465] 5fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 222.708489][ T4465] syz.0.221: vmalloc error: size 4096, failed to allocated page array size 4, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 222.713102][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT [ 222.713198][ T4465] Hardware name: ARM-Versatile Express [ 222.713224][ T4465] Call trace: [ 222.713260][ T4465] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 222.713399][ T4465] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 222.713530][ T4465] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 222.713602][ T4465] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 222.713760][ T4465] r7:00000000 r6:822c44c4 r5:83803d40 r4:00000000 [ 222.713781][ T4465] [<8021e424>] (dump_stack) from [<80513ff8>] (warn_alloc+0xe0/0x188) [ 222.713841][ T4465] [<80513f18>] (warn_alloc) from [<80501d38>] (__vmalloc_node_range_noprof+0x624/0x668) [ 222.713914][ T4465] r3:00001000 r2:822c44c4 [ 222.713941][ T4465] r7:00000001 r6:00500dc0 r5:85f81100 r4:00000004 [ 222.714061][ T4465] [<80501714>] (__vmalloc_node_range_noprof) from [<805021c8>] (__vmalloc_noprof+0x88/0xa0) [ 222.714147][ T4465] r10:00000000 r9:83803d40 r8:00000018 r7:00100cc0 r6:00001000 r5:00001000 [ 222.714166][ T4465] r4:00000000 [ 222.714183][ T4465] [<80502140>] (__vmalloc_noprof) from [<803cded0>] (bpf_prog_alloc_no_stats+0x38/0x1c8) [ 222.714257][ T4465] r5:00100dc0 r4:dfac5eb0 [ 222.714292][ T4465] [<803cde98>] (bpf_prog_alloc_no_stats) from [<803ce078>] (bpf_prog_alloc+0x18/0xc8) [ 222.714467][ T4465] r9:83803d40 r8:00000018 r7:dfac5d18 r6:00000000 r5:00500cc0 r4:dfac5eb0 [ 222.714505][ T4465] [<803ce060>] (bpf_prog_alloc) from [<803da26c>] (bpf_prog_load+0x2b4/0xdec) [ 222.714592][ T4465] r7:dfac5d18 r6:00000000 r5:00000000 r4:dfac5eb0 [ 222.714608][ T4465] [<803d9fb8>] (bpf_prog_load) from [<803dbd98>] (__sys_bpf+0x2d8/0x2038) [ 222.715031][ T4465] r10:00000005 r9:00000000 r8:dfac5e50 r7:000000a8 r6:83803d40 r5:20000480 [ 222.715059][ T4465] r4:00000000 [ 222.715076][ T4465] [<803dbac0>] (__sys_bpf) from [<803de090>] (sys_bpf+0x2c/0x48) [ 222.715148][ T4465] r10:00000182 r9:83803d40 r8:8020029c r7:00000182 r6:0012ed04 r5:00000000 [ 222.715191][ T4465] r4:00000000 [ 222.715211][ T4465] [<803de064>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 222.715292][ T4465] Exception stack(0xdfac5fa8 to 0xdfac5ff0) [ 222.715339][ T4465] 5fa0: 00000000 00000000 00000005 20000480 000000a8 00000000 [ 222.715375][ T4465] 5fc0: 00000000 00000000 0012ed04 00000182 003462d8 00000000 00000001 76fc90dc [ 222.715404][ T4465] 5fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 222.715626][ T4465] Mem-Info: [ 222.716117][ T4465] active_anon:1312 inactive_anon:0 isolated_anon:0 [ 222.716117][ T4465] active_file:6144 inactive_file:35374 isolated_file:0 [ 222.716117][ T4465] unevictable:768 dirty:15 writeback:0 [ 222.716117][ T4465] slab_reclaimable:1141 slab_unreclaimable:6191 [ 222.716117][ T4465] mapped:2348 shmem:777 pagetables:355 [ 222.716117][ T4465] sec_pagetables:0 bounce:0 [ 222.716117][ T4465] kernel_misc_reclaimable:0 [ 222.716117][ T4465] free:433790 free_pcp:2437 free_cma:4032 [ 222.716612][ T4465] Node 0 active_anon:5248kB inactive_anon:0kB active_file:24576kB inactive_file:141496kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:9392kB dirty:60kB writeback:0kB shmem:3108kB kernel_stack:1544kB pagetables:1420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.717106][ T4465] Normal free:1376112kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1040kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426876kB mlocked:0kB bounce:0kB free_pcp:5472kB local_pcp:2828kB free_cma:0kB [ 222.717247][ T4465] lowmem_reserve[]: 0 4224 4224 [ 222.717385][ T4465] HighMem free:359048kB boost:0kB min:512kB low:1052kB high:1592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5196kB inactive_anon:0kB active_file:24576kB inactive_file:140456kB unevictable:3072kB writepending:36kB zspages:0kB present:540672kB managed:540672kB mlocked:0kB bounce:0kB free_pcp:4276kB local_pcp:2688kB free_cma:16128kB [ 222.717461][ T4465] lowmem_reserve[]: 0 0 0 [ 222.717637][ T4465] Normal: 2*4kB (UE) 3*8kB (UME) 3*16kB (UME) 1*32kB (E) 0*64kB 4*128kB (UM) 5*256kB (UM) 4*512kB (M) 4*1024kB (M) 4*2048kB (UME) 332*4096kB (UM) = 1376112kB [ 222.824504][ T4465] HighMem: 28*4kB (UM) 95*8kB (UM) 79*16kB (UM) 80*32kB (UM) 53*64kB (UM) 28*128kB (UM) 13*256kB (UMC) 16*512kB (UMC) 12*1024kB (UMC) 2*2048kB (MC) 78*4096kB (MC) = 359064kB [ 222.825144][ T4465] 42295 total pagecache pages [ 222.825352][ T4465] 0 pages in swap cache [ 222.825514][ T4465] Free swap = 124996kB [ 222.825579][ T4465] Total swap = 124996kB [ 222.825756][ T4465] 524288 pages RAM [ 222.825794][ T4465] 135168 pages HighMem/MovableOnly [ 222.825959][ T4465] 32401 pages reserved [ 222.825999][ T4465] 4096 pages cma reserved [ 223.016104][ T4471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16458 sclass=netlink_audit_socket pid=4471 comm=syz.1.224 [ 224.039372][ T4484] fuse: root generation should be zero [ 224.387135][ T4489] FAULT_INJECTION: forcing a failure. [ 224.387135][ T4489] name failslab, interval 1, probability 0, space 0, times 0 [ 224.396073][ T4489] CPU: 0 UID: 0 PID: 4489 Comm: syz.1.229 Not tainted syzkaller #0 PREEMPT [ 224.396240][ T4489] Hardware name: ARM-Versatile Express [ 224.396272][ T4489] Call trace: [ 224.396355][ T4489] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 224.396488][ T4489] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 224.396511][ T4489] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 224.396585][ T4489] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 224.396655][ T4489] r7:00400dd0 r6:00000000 r5:85144980 r4:82919720 [ 224.396673][ T4489] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 224.396735][ T4489] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 224.396817][ T4489] r8:00000018 r7:00400dd0 r6:00000000 r5:00000000 r4:83001600 [ 224.396842][ T4489] [<80544404>] (should_failslab) from [<8051ebd0>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 224.396908][ T4489] [<8051eb7c>] (__kmalloc_cache_noprof) from [<8076d984>] (fuse_dentry_init+0x2c/0x4c) [ 224.396997][ T4489] r10:00000001 r9:824ae8b8 r8:00000005 r7:00000000 r6:00000000 r5:dfb39e58 [ 224.397022][ T4489] r4:83689dd0 [ 224.397041][ T4489] [<8076d958>] (fuse_dentry_init) from [<8059583c>] (__d_alloc+0x100/0x21c) [ 224.397112][ T4489] r5:dfb39e58 r4:83689dd0 [ 224.397133][ T4489] [<8059573c>] (__d_alloc) from [<80598d38>] (d_alloc_parallel+0x60/0x4f0) [ 224.397208][ T4489] r9:8368a2a8 r8:82ad9b28 r7:c45d2682 r6:e93949e4 r5:82ada76c r4:dfb39dd0 [ 224.397229][ T4489] [<80598cd8>] (d_alloc_parallel) from [<80585354>] (__lookup_slow+0x60/0x144) [ 224.397352][ T4489] r10:00000001 r9:00000000 r8:dfb39e58 r7:00000005 r6:855d0c80 r5:8368a2a8 [ 224.397376][ T4489] r4:855d0d00 [ 224.397398][ T4489] [<805852f4>] (__lookup_slow) from [<80585470>] (lookup_slow+0x38/0x50) [ 224.397568][ T4489] r9:00000000 r8:dfb39f3c r7:00000005 r6:dfb39e58 r5:8368a2a8 r4:855d0d00 [ 224.397594][ T4489] [<80585438>] (lookup_slow) from [<805896a0>] (path_lookupat+0x198/0x2a4) [ 224.397669][ T4489] r7:00000105 r6:dfb39f3c r5:00000000 r4:dfb39e50 [ 224.397691][ T4489] [<80589508>] (path_lookupat) from [<8058ae78>] (filename_lookup+0xd8/0x1a8) [ 224.397802][ T4489] r9:00000000 r8:dfb39f3c r7:00000005 r6:85144980 r5:8334ea80 r4:00000004 [ 224.397826][ T4489] [<8058ada0>] (filename_lookup) from [<805a8c40>] (vfs_open_tree+0x10c/0x530) [ 224.397915][ T4489] r9:00000000 r8:85144980 r7:8334ea80 r6:00000005 r5:00000004 r4:00080001 [ 224.397937][ T4489] [<805a8b34>] (vfs_open_tree) from [<805a9db0>] (sys_open_tree+0x38/0x74) [ 224.398015][ T4489] r10:000001ac r9:85144980 r8:8020029c r7:20000040 r6:00000004 r5:00080001 [ 224.398038][ T4489] r4:00000006 [ 224.398058][ T4489] [<805a9d78>] (sys_open_tree) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 224.398117][ T4489] Exception stack(0xdfb39fa8 to 0xdfb39ff0) [ 224.398207][ T4489] 9fa0: 00000000 00000000 00000004 20000040 00080001 00000000 [ 224.398278][ T4489] 9fc0: 00000000 00000000 0012ed04 000001ac 003462d8 00000000 00000001 76fac0dc [ 224.398384][ T4489] 9fe0: 76fabe88 76fabe78 00018bc4 00130300 [ 224.398424][ T4489] r7:000001ac r6:0012ed04 r5:00000000 r4:00000000 [ 225.804582][ T28] audit: type=1400 audit(225.720:200): avc: denied { write } for pid=4510 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 226.706153][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4524 comm=syz.0.237 [ 226.714220][ T4524] FAULT_INJECTION: forcing a failure. [ 226.714220][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 226.721921][ T4524] CPU: 1 UID: 0 PID: 4524 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT [ 226.722037][ T4524] Hardware name: ARM-Versatile Express [ 226.722060][ T4524] Call trace: [ 226.722120][ T4524] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 226.722278][ T4524] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 226.722299][ T4524] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 226.722356][ T4524] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 226.722413][ T4524] r7:00000820 r6:00000000 r5:85183100 r4:82919720 [ 226.722428][ T4524] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 226.722487][ T4524] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 226.722566][ T4524] r8:8483a000 r7:00000820 r6:00000000 r5:00000000 r4:830e9780 [ 226.722585][ T4524] [<80544404>] (should_failslab) from [<80522ec8>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 226.722648][ T4524] [<80522e74>] (kmem_cache_alloc_noprof) from [<815da16c>] (skb_clone+0x60/0x1c8) [ 226.722719][ T4524] r10:85b20d84 r9:85c73200 r8:8483a000 r7:85fdff00 r6:85a7e6c0 r5:85fdff00 [ 226.722739][ T4524] r4:00000820 [ 226.722756][ T4524] [<815da10c>] (skb_clone) from [<816f72c8>] (__netlink_deliver_tap+0x1e4/0x27c) [ 226.722820][ T4524] r7:85fdff00 r6:85a7e6c0 r5:8483a064 r4:85a7e000 [ 226.722837][ T4524] [<816f70e4>] (__netlink_deliver_tap) from [<816f935c>] (netlink_unicast+0x360/0x384) [ 226.722899][ T4524] r10:85b20d84 r9:859e30c0 r8:85fdff00 r7:85c73200 r6:0000001c r5:8483a064 [ 226.722919][ T4524] r4:8483a000 [ 226.722935][ T4524] [<816f8ffc>] (netlink_unicast) from [<816f9548>] (netlink_sendmsg+0x1c8/0x440) [ 226.722999][ T4524] r10:00000000 r9:00000000 r8:00000000 r7:85b20c00 r6:0000001c r5:85fdff00 [ 226.723020][ T4524] r4:e03f1f20 [ 226.723032][ T4524] [<816f9380>] (netlink_sendmsg) from [<815c54fc>] (__sock_sendmsg+0x44/0x78) [ 226.723080][ T4524] r10:00040000 r9:00000000 r8:e03f1dcc r7:00000000 r6:8555fb80 r5:e03f1f20 [ 226.723091][ T4524] r4:00000000 [ 226.723099][ T4524] [<815c54b8>] (__sock_sendmsg) from [<815c63bc>] (____sys_sendmsg+0x238/0x2c4) [ 226.723134][ T4524] r7:00000000 r6:00000000 r5:8555fb80 r4:e03f1f20 [ 226.723143][ T4524] [<815c6184>] (____sys_sendmsg) from [<815c67bc>] (___sys_sendmsg+0x9c/0xd0) [ 226.723181][ T4524] r10:00000128 r9:20000640 r8:00040000 r7:00000000 r6:8555fb80 r5:e03f1f20 [ 226.723191][ T4524] r4:00000000 [ 226.723199][ T4524] [<815c6720>] (___sys_sendmsg) from [<815c8824>] (__sys_sendmsg+0x8c/0xe0) [ 226.723235][ T4524] r9:85183100 r8:85345c00 r7:00040000 r6:20000640 r5:85345c01 r4:00000003 [ 226.723245][ T4524] [<815c8798>] (__sys_sendmsg) from [<815c888c>] (sys_sendmsg+0x14/0x18) [ 226.723279][ T4524] r8:8020029c r7:00000128 r6:0012ed04 r5:00000000 r4:00000000 [ 226.723288][ T4524] [<815c8878>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 226.723313][ T4524] Exception stack(0xe03f1fa8 to 0xe03f1ff0) [ 226.723337][ T4524] 1fa0: 00000000 00000000 00000003 20000640 00040000 00000000 [ 226.723356][ T4524] 1fc0: 00000000 00000000 0012ed04 00000128 003462d8 00000000 00000001 76fc90dc [ 226.723370][ T4524] 1fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 227.626983][ T4544] FAULT_INJECTION: forcing a failure. [ 227.626983][ T4544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.627539][ T4544] CPU: 1 UID: 0 PID: 4544 Comm: syz.1.242 Not tainted syzkaller #0 PREEMPT [ 227.627656][ T4544] Hardware name: ARM-Versatile Express [ 227.627688][ T4544] Call trace: [ 227.627740][ T4544] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 227.627868][ T4544] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 227.627890][ T4544] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 227.628048][ T4544] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 227.628248][ T4544] r7:20001b40 r6:00000000 r5:83e8c980 r4:8295161c [ 227.628358][ T4544] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 227.628443][ T4544] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 227.628557][ T4544] r8:00000000 r7:20001b40 r6:00000014 r5:00000000 r4:e44edf30 [ 227.628929][ T4544] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 227.629005][ T4544] [<809bd8a4>] (should_fail_usercopy) from [<808f7b84>] (_copy_from_iter+0x64/0x7c4) [ 227.629174][ T4544] [<808f7b20>] (_copy_from_iter) from [<816f9508>] (netlink_sendmsg+0x188/0x440) [ 227.629292][ T4544] r10:00000000 r9:00000000 r8:e44edf30 r7:85978c00 r6:00000014 r5:85f2c0c0 [ 227.629318][ T4544] r4:e44edf20 [ 227.629336][ T4544] [<816f9380>] (netlink_sendmsg) from [<815c54fc>] (__sock_sendmsg+0x44/0x78) [ 227.629426][ T4544] r10:00000000 r9:00000000 r8:e44eddcc r7:00000000 r6:855ca500 r5:e44edf20 [ 227.629447][ T4544] r4:00000000 [ 227.629465][ T4544] [<815c54b8>] (__sock_sendmsg) from [<815c63bc>] (____sys_sendmsg+0x238/0x2c4) [ 227.629543][ T4544] r7:00000000 r6:00000000 r5:855ca500 r4:e44edf20 [ 227.629585][ T4544] [<815c6184>] (____sys_sendmsg) from [<815c67bc>] (___sys_sendmsg+0x9c/0xd0) [ 227.629667][ T4544] r10:00000128 r9:20001b00 r8:00000000 r7:00000000 r6:855ca500 r5:e44edf20 [ 227.629689][ T4544] r4:00000000 [ 227.629708][ T4544] [<815c6720>] (___sys_sendmsg) from [<815c8824>] (__sys_sendmsg+0x8c/0xe0) [ 227.629780][ T4544] r9:83e8c980 r8:85345c00 r7:00000000 r6:20001b00 r5:85345c01 r4:00000003 [ 227.629800][ T4544] [<815c8798>] (__sys_sendmsg) from [<815c888c>] (sys_sendmsg+0x14/0x18) [ 227.629865][ T4544] r8:8020029c r7:00000128 r6:0012ed04 r5:00000000 r4:00000000 [ 227.629883][ T4544] [<815c8878>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 227.629934][ T4544] Exception stack(0xe44edfa8 to 0xe44edff0) [ 227.629985][ T4544] dfa0: 00000000 00000000 00000003 20001b00 00000000 00000000 [ 227.630026][ T4544] dfc0: 00000000 00000000 0012ed04 00000128 003462d8 00000000 00000001 76fac0dc [ 227.630059][ T4544] dfe0: 76fabe88 76fabe78 00018bc4 00130300 [ 227.707785][ T4546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4546 comm=syz.0.243 [ 227.924862][ T4551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4551 comm=syz.0.245 [ 227.937704][ T4551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4551 comm=syz.0.245 [ 228.629318][ T708] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.769454][ T708] usb 2-1: device descriptor read/64, error -71 [ 229.029401][ T708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.169487][ T708] usb 2-1: device descriptor read/64, error -71 [ 229.213927][ T4565] FAULT_INJECTION: forcing a failure. [ 229.213927][ T4565] name failslab, interval 1, probability 0, space 0, times 0 [ 229.222744][ T4565] CPU: 0 UID: 0 PID: 4565 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT [ 229.222915][ T4565] Hardware name: ARM-Versatile Express [ 229.222947][ T4565] Call trace: [ 229.222998][ T4565] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 229.223132][ T4565] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 229.223154][ T4565] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 229.223216][ T4565] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 229.223293][ T4565] r7:00000dc0 r6:00000000 r5:83e8c980 r4:82919720 [ 229.223313][ T4565] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 229.223379][ T4565] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 229.223459][ T4565] r8:85345c00 r7:00000dc0 r6:00000000 r5:00000000 r4:83019880 [ 229.223479][ T4565] [<80544404>] (should_failslab) from [<80522ec8>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 229.223541][ T4565] [<80522e74>] (kmem_cache_alloc_noprof) from [<807b81d4>] (security_file_alloc+0x30/0x184) [ 229.223632][ T4565] r10:ea609f18 r9:83e8c980 r8:85345c00 r7:83342500 r6:82aec490 r5:85345c00 [ 229.223655][ T4565] r4:85345c00 [ 229.223673][ T4565] [<807b81a4>] (security_file_alloc) from [<805778d4>] (init_file+0x48/0xfc) [ 229.223745][ T4565] r7:83342500 r6:00000000 r5:8291c8dc r4:85345c00 [ 229.223763][ T4565] [<8057788c>] (init_file) from [<805780b8>] (alloc_empty_file+0x68/0x13c) [ 229.223833][ T4565] r7:83342500 r6:00000000 r5:8291c8dc r4:824ae8a0 [ 229.223852][ T4565] [<80578050>] (alloc_empty_file) from [<8058c05c>] (path_openat+0x44/0x1214) [ 229.223931][ T4565] r8:ea609e50 r7:ffffff9c r6:ea609f18 r5:83e8c980 r4:8334e9c0 [ 229.223951][ T4565] [<8058c018>] (path_openat) from [<8058d2e4>] (do_file_open+0xb8/0x150) [ 229.224029][ T4565] r10:00000142 r9:83e8c980 r8:00000001 r7:ffffff9c r6:ea609f18 r5:83e8c980 [ 229.224055][ T4565] r4:8334e9c0 [ 229.224081][ T4565] [<8058d22c>] (do_file_open) from [<80572708>] (do_sys_openat2+0x8c/0xf0) [ 229.224157][ T4565] r8:8020029c r7:20000080 r6:ffffff9c r5:8334e9c0 r4:00000005 [ 229.224177][ T4565] [<8057267c>] (do_sys_openat2) from [<80572ae4>] (sys_openat+0x80/0xd0) [ 229.224241][ T4565] r7:00000142 r6:00000000 r5:20000080 r4:ffffff9c [ 229.224259][ T4565] [<80572a64>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 229.224352][ T4565] Exception stack(0xea609fa8 to 0xea609ff0) [ 229.224417][ T4565] 9fa0: 00000000 00000000 ffffff9c 20000080 00000000 00000000 [ 229.224462][ T4565] 9fc0: 00000000 00000000 0012ed04 00000142 00346418 00000000 00000001 76f870dc [ 229.224493][ T4565] 9fe0: 76f86e88 76f86e78 00018bc4 00130300 [ 229.224525][ T4565] r6:0012ed04 r5:00000000 r4:00000000 [ 229.280642][ T708] usb usb2-port1: attempt power cycle [ 229.619714][ T708] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.651008][ T708] usb 2-1: device descriptor read/8, error -71 [ 229.889817][ T708] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.924579][ T708] usb 2-1: device descriptor read/8, error -71 [ 229.973573][ T28] audit: type=1400 audit(229.890:201): avc: denied { relabelfrom } for pid=4574 comm="syz.0.253" name="NETLINK" dev="sockfs" ino=4759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.973731][ T4576] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 229.981719][ T28] audit: type=1400 audit(229.900:202): avc: denied { relabelto } for pid=4574 comm="syz.0.253" name="NETLINK" dev="sockfs" ino=4759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 230.030194][ T708] usb usb2-port1: unable to enumerate USB device [ 231.525165][ T4593] FAULT_INJECTION: forcing a failure. [ 231.525165][ T4593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.525840][ T4593] CPU: 1 UID: 0 PID: 4593 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT [ 231.525946][ T4593] Hardware name: ARM-Versatile Express [ 231.525974][ T4593] Call trace: [ 231.526022][ T4593] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 231.526138][ T4593] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 231.526160][ T4593] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 231.526385][ T4593] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 231.526457][ T4593] r7:00000000 r6:00000000 r5:851a6e40 r4:8295161c [ 231.526666][ T4593] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 231.526781][ T4593] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 231.526850][ T4593] r8:00000000 r7:00000000 r6:000000b4 r5:20000140 r4:8334eb40 [ 231.526869][ T4593] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 231.527107][ T4593] [<809bd8a4>] (should_fail_usercopy) from [<809c3820>] (strncpy_from_user+0x20/0x1b0) [ 231.527249][ T4593] [<809c3800>] (strncpy_from_user) from [<80584f14>] (do_getname+0x4c/0x14c) [ 231.527338][ T4593] r10:8334eb4c r9:851a6e40 r8:00000000 r7:00000000 r6:20000140 r5:824ae8b0 [ 231.527362][ T4593] r4:8334eb40 [ 231.527380][ T4593] [<80584ec8>] (do_getname) from [<8058ed80>] (sys_rename+0x34/0x78) [ 231.528616][ T4593] r10:00000026 r9:851a6e40 r8:8020029c r7:00000026 r6:0012ed04 r5:20000140 [ 231.530782][ T4593] r4:8334ed80 r3:00000000 [ 231.530839][ T4593] [<8058ed4c>] (sys_rename) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 231.530935][ T4593] Exception stack(0xea679fa8 to 0xea679ff0) [ 231.530996][ T4593] 9fa0: 00000000 00000000 20000100 20000140 00000000 00000000 [ 231.531034][ T4593] 9fc0: 00000000 00000000 0012ed04 00000026 00346418 00000000 003d0f00 76f870dc [ 231.531062][ T4593] 9fe0: 76f86e88 76f86e78 00018bc4 00130300 [ 231.531092][ T4593] r5:00000000 r4:00000000 [ 233.948093][ T28] audit: type=1400 audit(233.860:203): avc: denied { remount } for pid=4602 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.111697][ T28] audit: type=1400 audit(234.030:204): avc: denied { setattr } for pid=4604 comm="syz.0.263" name="" dev="pipefs" ino=4802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 234.421084][ T4612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4612 comm=syz.0.266 [ 234.433865][ T4612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4612 comm=syz.0.266 [ 234.607912][ T4616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4616 comm=syz.0.268 [ 234.859982][ T4622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4622 comm=syz.0.271 [ 234.871826][ T4622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4622 comm=syz.0.271 [ 235.069484][ T4626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4626 comm=syz.0.273 [ 235.331976][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4632 comm=syz.0.276 [ 235.343064][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4632 comm=syz.0.276 [ 235.437989][ T4634] fuse: Bad value for 'fd' [ 235.539466][ T4636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4636 comm=syz.0.278 [ 235.797625][ T4642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=4642 comm=syz.0.281 [ 236.108436][ T4650] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 236.112268][ T28] audit: type=1400 audit(236.030:205): avc: denied { relabelto } for pid=4649 comm="syz.0.285" name="cgroup.procs" dev="cgroup" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 236.115292][ T28] audit: type=1400 audit(236.030:206): avc: denied { associate } for pid=4649 comm="syz.0.285" name="cgroup.procs" dev="cgroup" ino=43 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0" [ 236.849900][ T2869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.013524][ T2869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.013884][ T2869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.014236][ T2869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.014321][ T2869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.014409][ T2869] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.014475][ T2869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.023436][ T2869] usb 1-1: config 0 descriptor?? [ 237.462619][ T2869] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 241.717381][ T4689] selinux_netlink_send: 5 callbacks suppressed [ 241.717778][ T4689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4689 comm=syz.1.296 [ 242.409288][ T2869] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 245.491736][ T28] audit: type=1400 audit(245.400:207): avc: denied { bind } for pid=4696 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.500130][ T28] audit: type=1400 audit(245.400:208): avc: denied { node_bind } for pid=4696 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 245.909801][ T4702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4702 comm=syz.1.301 [ 247.571550][ T2869] usb 1-1: device descriptor read/64, error -110 [ 247.820180][ T2869] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 247.949975][ T2869] usb 1-1: device descriptor read/64, error -32 [ 248.189917][ T2869] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 248.210230][ T2869] usb 1-1: device descriptor read/8, error -32 [ 248.450426][ T2869] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 248.470502][ T2869] usb 1-1: device descriptor read/8, error -32 [ 248.583292][ T41] usb 1-1: USB disconnect, device number 8 [ 248.607548][ T4659] raw-gadget.1 gadget.0: failed to queue disconnect event [ 248.754550][ T28] audit: type=1400 audit(248.670:209): avc: denied { create } for pid=4720 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.044009][ T4730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4730 comm=syz.0.307 [ 249.067991][ T28] audit: type=1400 audit(248.980:210): avc: denied { write } for pid=4729 comm="syz.0.307" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.071373][ T4730] raw_sendmsg: syz.0.307 forgot to set AF_INET. Fix it! [ 249.189381][ T28] audit: type=1400 audit(249.100:211): avc: denied { connect } for pid=4735 comm="syz.0.311" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.301771][ T4740] FAULT_INJECTION: forcing a failure. [ 249.301771][ T4740] name failslab, interval 1, probability 0, space 0, times 0 [ 249.302114][ T4740] CPU: 1 UID: 0 PID: 4740 Comm: syz.0.312 Not tainted syzkaller #0 PREEMPT [ 249.302169][ T4740] Hardware name: ARM-Versatile Express [ 249.302183][ T4740] Call trace: [ 249.302209][ T4740] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 249.302285][ T4740] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 249.302297][ T4740] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 249.302329][ T4740] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 249.302361][ T4740] r7:00000000 r6:00000000 r5:840055c0 r4:82919720 [ 249.302369][ T4740] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 249.302402][ T4740] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 249.302443][ T4740] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 249.302451][ T4740] [<80544404>] (should_failslab) from [<80523e20>] (__kmalloc_noprof+0xa4/0x39c) [ 249.302479][ T4740] [<80523d7c>] (__kmalloc_noprof) from [<807fc7a8>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 249.302520][ T4740] r10:00000000 r9:830bc400 r8:00000000 r7:834def68 r6:8335d628 r5:00001000 [ 249.302530][ T4740] r4:00000000 [ 249.302538][ T4740] [<807fc76c>] (tomoyo_realpath_from_path) from [<807f8870>] (tomoyo_path_number_perm+0xcc/0x22c) [ 249.302573][ T4740] r10:00000000 r9:00000003 r8:8335d600 r7:8400941f r6:81cda024 r5:00000004 [ 249.302585][ T4740] r4:8335d628 r3:826ca380 [ 249.302593][ T4740] [<807f87a4>] (tomoyo_path_number_perm) from [<807fd1c4>] (tomoyo_file_ioctl+0x1c/0x20) [ 249.302628][ T4740] r10:840055c0 r9:00000003 r8:8335d600 r7:200001c0 r6:200001c0 r5:8400941f [ 249.302638][ T4740] r4:8335d600 [ 249.302645][ T4740] [<807fd1a8>] (tomoyo_file_ioctl) from [<807a8d28>] (security_file_ioctl+0x80/0x1d4) [ 249.302677][ T4740] [<807a8ca8>] (security_file_ioctl) from [<80590df0>] (sys_ioctl+0x4c/0xb5c) [ 249.302710][ T4740] r7:200001c0 r6:8400941f r5:8335d601 r4:00000000 [ 249.302718][ T4740] [<80590da4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 249.302742][ T4740] Exception stack(0xea67dfa8 to 0xea67dff0) [ 249.302764][ T4740] dfa0: 00000000 00000000 00000003 8400941f 200001c0 00000000 [ 249.302782][ T4740] dfc0: 00000000 00000000 0012ed04 00000036 003462d8 00000000 00000001 76fc90dc [ 249.302797][ T4740] dfe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 249.302815][ T4740] r10:00000036 r9:840055c0 r8:8020029c r7:00000036 r6:0012ed04 r5:00000000 [ 249.302825][ T4740] r4:00000000 [ 249.319496][ T4740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.024408][ T4785] fuse: Bad value for 'fd' [ 253.516797][ T4804] FAULT_INJECTION: forcing a failure. [ 253.516797][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 253.522564][ T4804] CPU: 0 UID: 0 PID: 4804 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT [ 253.522728][ T4804] Hardware name: ARM-Versatile Express [ 253.522767][ T4804] Call trace: [ 253.522830][ T4804] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 253.523029][ T4804] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 253.523096][ T4804] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 253.523174][ T4804] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 253.523251][ T4804] r7:00000cc0 r6:00000000 r5:83e8c980 r4:82919720 [ 253.523274][ T4804] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 253.523379][ T4804] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 253.523508][ T4804] r8:00000000 r7:00000cc0 r6:00000000 r5:00000000 r4:83019c00 [ 253.523582][ T4804] [<80544404>] (should_failslab) from [<80522ec8>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 253.523654][ T4804] [<80522e74>] (kmem_cache_alloc_noprof) from [<80584ef4>] (do_getname+0x2c/0x14c) [ 253.523743][ T4804] r10:00000009 r9:83e8c980 r8:00000000 r7:00000000 r6:00000000 r5:824ae8b0 [ 253.523769][ T4804] r4:8334e840 [ 253.523789][ T4804] [<80584ec8>] (do_getname) from [<8058e7c4>] (sys_link+0x34/0x78) [ 253.523926][ T4804] r10:00000009 r9:83e8c980 r8:8020029c r7:00000009 r6:0012ed04 r5:00000000 [ 253.523980][ T4804] r4:8334e840 r3:00000000 [ 253.524009][ T4804] [<8058e790>] (sys_link) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 253.524139][ T4804] Exception stack(0xeb0e1fa8 to 0xeb0e1ff0) [ 253.524201][ T4804] 1fa0: 00000000 00000000 20000280 00000000 00000000 00000000 [ 253.524250][ T4804] 1fc0: 00000000 00000000 0012ed04 00000009 003462d8 00000000 00000001 76fc90dc [ 253.524288][ T4804] 1fe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 253.524344][ T4804] r5:00000000 r4:00000000 [ 254.136523][ T4809] fuse: Bad value for 'fd' [ 254.519955][ T2869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.669871][ T2869] usb 1-1: Using ep0 maxpacket: 8 [ 254.680396][ T2869] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.680735][ T2869] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.681024][ T2869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.681133][ T2869] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 254.681177][ T2869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.691618][ T2869] usb 1-1: config 0 descriptor?? [ 255.056585][ T4821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4821 comm=syz.1.333 [ 255.093618][ T4821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4821 comm=syz.1.333 [ 255.523570][ T2869] usbhid 1-1:0.0: can't add hid device: -71 [ 255.524243][ T2869] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.540051][ T2869] usb 1-1: USB disconnect, device number 10 [ 255.548357][ T4825] fuse: Bad value for 'fd' [ 255.961012][ T28] audit: type=1400 audit(255.880:212): avc: denied { write } for pid=4838 comm="syz.1.338" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 256.372057][ T28] audit: type=1400 audit(256.280:213): avc: denied { ioctl } for pid=4849 comm="syz.1.341" path="socket:[6201]" dev="sockfs" ino=6201 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.612220][ T4902] fuse: Bad value for 'fd' [ 260.545571][ T4914] FAULT_INJECTION: forcing a failure. [ 260.545571][ T4914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.545869][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.1.358 Not tainted syzkaller #0 PREEMPT [ 260.546014][ T4914] Hardware name: ARM-Versatile Express [ 260.546033][ T4914] Call trace: [ 260.546060][ T4914] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 260.546130][ T4914] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 260.546141][ T4914] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 260.546174][ T4914] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 260.546209][ T4914] r7:20000780 r6:00000000 r5:83fb6200 r4:8295161c [ 260.546217][ T4914] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 260.546250][ T4914] [<809bd668>] (should_fail_ex) from [<809bd8a0>] (should_fail+0x14/0x18) [ 260.546292][ T4914] r8:00000002 r7:20000780 r6:eb2e9e28 r5:00000000 r4:eb2e9f20 [ 260.546301][ T4914] [<809bd88c>] (should_fail) from [<809bd8c0>] (should_fail_usercopy+0x1c/0x20) [ 260.546331][ T4914] [<809bd8a4>] (should_fail_usercopy) from [<815c6590>] (copy_msghdr_from_user+0x50/0x1e0) [ 260.546370][ T4914] [<815c6540>] (copy_msghdr_from_user) from [<815c6798>] (___sys_sendmsg+0x78/0xd0) [ 260.546406][ T4914] r8:00000002 r7:00000000 r6:855caf00 r5:eb2e9f20 r4:eb2e9e6c [ 260.546415][ T4914] [<815c6720>] (___sys_sendmsg) from [<815c8824>] (__sys_sendmsg+0x8c/0xe0) [ 260.546450][ T4914] r9:83fb6200 r8:83361e40 r7:00000002 r6:20000780 r5:83361e41 r4:00000004 [ 260.546459][ T4914] [<815c8798>] (__sys_sendmsg) from [<815c888c>] (sys_sendmsg+0x14/0x18) [ 260.546489][ T4914] r8:8020029c r7:00000128 r6:0012ed04 r5:00000000 r4:00000000 [ 260.546498][ T4914] [<815c8878>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 260.546522][ T4914] Exception stack(0xeb2e9fa8 to 0xeb2e9ff0) [ 260.546938][ T4914] 9fa0: 00000000 00000000 00000004 20000780 00000002 00000000 [ 260.547845][ T4914] 9fc0: 00000000 00000000 0012ed04 00000128 00346378 00000000 003d0f00 76f8b0dc [ 260.548362][ T4914] 9fe0: 76f8ae88 76f8ae78 00018bc4 00130300 [ 261.175828][ T28] audit: type=1400 audit(261.090:214): avc: denied { bind } for pid=4918 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.180344][ T28] audit: type=1400 audit(261.100:215): avc: denied { listen } for pid=4918 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.484765][ T4940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.510633][ T4940] block device autoloading is deprecated and will be removed. [ 275.864814][ T4980] mmap: syz.1.382 (4980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.879639][ T28] audit: type=1400 audit(281.790:216): avc: denied { setattr } for pid=5002 comm="syz.0.391" name="NETLINK" dev="sockfs" ino=6466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 287.838443][ T5015] syz.1.395 (5015): drop_caches: 0 [ 289.245518][ T5023] FAULT_INJECTION: forcing a failure. [ 289.245518][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 289.246223][ T5023] CPU: 1 UID: 0 PID: 5023 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT [ 289.246316][ T5023] Hardware name: ARM-Versatile Express [ 289.246343][ T5023] Call trace: [ 289.246391][ T5023] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 289.246553][ T5023] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 289.246582][ T5023] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 289.246653][ T5023] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 289.246723][ T5023] r7:00000000 r6:00000000 r5:83e8bd40 r4:82919720 [ 289.246743][ T5023] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 289.246813][ T5023] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 289.246892][ T5023] r8:85f83500 r7:00000000 r6:83001180 r5:00000d40 r4:00000010 [ 289.246925][ T5023] [<80544404>] (should_failslab) from [<80523e20>] (__kmalloc_noprof+0xa4/0x39c) [ 289.246991][ T5023] [<80523d7c>] (__kmalloc_noprof) from [<807fc6b4>] (tomoyo_encode2+0x64/0xec) [ 289.247100][ T5023] r10:83e8bd40 r9:dfb79f6c r8:85f83500 r7:85f83500 r6:00000000 r5:85f83504 [ 289.247128][ T5023] r4:85f834ff [ 289.247145][ T5023] [<807fc650>] (tomoyo_encode2) from [<807fc760>] (tomoyo_encode+0x24/0x30) [ 289.247226][ T5023] r9:dfb79f6c r8:85f83500 r7:85f83500 r6:00000000 r5:00000000 r4:85f83500 [ 289.247246][ T5023] [<807fc73c>] (tomoyo_encode) from [<807facfc>] (tomoyo_mount_acl+0x80/0x388) [ 289.247312][ T5023] r5:00000000 r4:dfb79e58 [ 289.247342][ T5023] [<807fac7c>] (tomoyo_mount_acl) from [<807fb0ec>] (tomoyo_mount_permission+0xe8/0x208) [ 289.247417][ T5023] r10:83e8bd40 r9:807fd160 r8:85f83500 r7:dfb79f6c r6:00000000 r5:00000000 [ 289.247440][ T5023] r4:00000000 [ 289.247457][ T5023] [<807fb004>] (tomoyo_mount_permission) from [<807fd17c>] (tomoyo_sb_mount+0x1c/0x24) [ 289.247574][ T5023] r8:00000000 r7:00000000 r6:85f83500 r5:dfb79f6c r4:00000000 [ 289.247603][ T5023] [<807fd160>] (tomoyo_sb_mount) from [<807b253c>] (security_sb_mount+0xa4/0x238) [ 289.247706][ T5023] [<807b2498>] (security_sb_mount) from [<805a9f64>] (path_mount+0x78/0xb60) [ 289.247801][ T5023] r9:00000000 r8:85f83500 r7:00000000 r6:dfb79f6c r5:00000000 r4:00000000 [ 289.247824][ T5023] [<805a9eec>] (path_mount) from [<805ab084>] (sys_mount+0x1dc/0x260) [ 289.247902][ T5023] r10:00000015 r9:83e8bd40 r8:00000000 r7:00000000 r6:85f83500 r5:00000000 [ 289.247924][ T5023] r4:00000000 [ 289.247943][ T5023] [<805aaea8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 289.248025][ T5023] Exception stack(0xdfb79fa8 to 0xdfb79ff0) [ 289.248081][ T5023] 9fa0: 00000000 00000000 00000000 20000040 20000080 00000000 [ 289.248130][ T5023] 9fc0: 00000000 00000000 0012ed04 00000015 00346378 00000000 003d0f00 76fa80dc [ 289.248164][ T5023] 9fe0: 76fa7e88 76fa7e78 00018bc4 00130300 [ 289.248213][ T5023] r10:00000015 r9:83e8bd40 r8:8020029c r7:00000015 r6:0012ed04 r5:00000000 [ 289.248236][ T5023] r4:00000000 [ 296.342833][ T5049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5049 comm=syz.0.407 [ 296.580435][ T28] audit: type=1400 audit(296.490:217): avc: denied { execute } for pid=5053 comm="syz.1.408" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.599482][ T28] audit: type=1400 audit(296.490:218): avc: denied { execute_no_trans } for pid=5053 comm="syz.1.408" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.641078][ T28] audit: type=1400 audit(296.560:219): avc: denied { execute } for pid=5053 comm="syz.1.408" name="file0" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 297.421692][ T28] audit: type=1400 audit(297.340:220): avc: denied { accept } for pid=5055 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.382785][ T5058] fuse: Unknown parameter 'grou00000000000000000000' [ 305.924493][ T5079] fuse: Unknown parameter 'grou00000000000000000000' [ 310.104053][ T3698] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 310.313236][ T3698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 310.314245][ T3698] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 310.340266][ T3698] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.342783][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.342866][ T3698] usb 2-1: Product: syz [ 310.342901][ T3698] usb 2-1: Manufacturer: 标롭檸㴺듥嚩筟ሲ橫粺红鰥땑㎪응㡃尞໘㧱ᖍ屄ۙ爈㵗攣백㚤饔ఌ挤깤㎬쯸ꂉࢸꐃ䳃⇘뀡ﵒ埣䋦ﶢ㢴캲ꄬ亩纻ᔬ广翜悡⍭ṃꋀ肗祶๱芷镺멿ផ턂ူᓠ噟궝켉⼧⼄繄긹׼ⳅꙷጿ䋺뎢婟磌㢥年쇈⚌新㈭⟼同ᛁᦣ뷇㑵䷖☸싪⤵㙀 [ 310.342940][ T3698] usb 2-1: SerialNumber: syz [ 310.600484][ T28] audit: type=1400 audit(310.520:221): avc: denied { create } for pid=5083 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.934743][ T3698] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 310.938367][ T3698] usb 2-1: found format II with max.bitrate = 255, frame size=0 [ 310.939247][ T3698] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 310.968583][ T3698] usb 2-1: USB disconnect, device number 8 [ 311.755911][ T5118] ======================================================= [ 311.755911][ T5118] WARNING: The mand mount option has been deprecated and [ 311.755911][ T5118] and is ignored by this kernel. Remove the mand [ 311.755911][ T5118] option from the mount to silence this warning. [ 311.755911][ T5118] ======================================================= [ 311.784950][ T5118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5118 comm=syz.1.422 [ 312.302133][ T5120] fuse: Unknown parameter 'grou00000000000000000000' [ 312.410266][ T28] audit: type=1400 audit(312.320:222): avc: denied { mount } for pid=5121 comm="syz.1.424" name="/" dev="ramfs" ino=6623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 312.609693][ T5124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5124 comm=syz.0.425 [ 312.726996][ T5127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5127 comm=syz.0.427 [ 312.846180][ T5130] fuse: Unknown parameter 'grou00000000000000000000' [ 313.430131][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 313.622934][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.623782][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.626651][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.631779][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.634418][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.643272][ T23] usb 2-1: config 0 descriptor?? [ 313.657156][ T5143] fuse: Unknown parameter 'group_i00000000000000000000' [ 314.085105][ T5147] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5147 comm=syz.0.434 [ 314.427130][ T23] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 315.500966][ T5164] fuse: Unknown parameter 'group_i00000000000000000000' [ 315.526761][ T2869] usb 2-1: USB disconnect, device number 9 [ 316.858587][ T5185] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.177324][ T28] audit: type=1400 audit(317.090:223): avc: denied { write } for pid=5186 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 318.567505][ T5195] fuse: Unknown parameter 'group_id00000000000000000000' [ 318.764616][ T28] audit: type=1400 audit(318.680:224): avc: denied { ioctl } for pid=5193 comm="syz.1.446" path="socket:[6715]" dev="sockfs" ino=6715 ioctlcmd=0x6437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.307660][ T5200] fuse: Bad value for 'group_id' [ 319.315783][ T5200] fuse: Bad value for 'group_id' [ 327.350551][ T28] audit: type=1400 audit(326.820:225): avc: denied { create } for pid=5218 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.132565][ T5230] FAULT_INJECTION: forcing a failure. [ 334.132565][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 334.132965][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: syz.1.459 Not tainted syzkaller #0 PREEMPT [ 334.133070][ T5230] Hardware name: ARM-Versatile Express [ 334.133102][ T5230] Call trace: [ 334.133161][ T5230] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 334.133314][ T5230] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 334.133339][ T5230] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 334.133404][ T5230] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 334.133479][ T5230] r7:00000dc0 r6:00000000 r5:85148c40 r4:82919720 [ 334.133498][ T5230] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 334.133572][ T5230] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 334.133658][ T5230] r8:00000034 r7:00000dc0 r6:00000000 r5:00000000 r4:83001180 [ 334.133681][ T5230] [<80544404>] (should_failslab) from [<8051ebd0>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 334.133747][ T5230] [<8051eb7c>] (__kmalloc_cache_noprof) from [<80270540>] (call_usermodehelper_setup+0x48/0xb8) [ 334.133827][ T5230] r10:00000119 r9:85ae8000 r8:828f5eb4 r7:828f5eb4 r6:85f318c0 r5:828f5fe4 [ 334.133840][ T5230] r4:85f318c0 [ 334.133850][ T5230] [<802704f8>] (call_usermodehelper_setup) from [<8031f5b8>] (__request_module+0x150/0x2ec) [ 334.133897][ T5230] r7:815c4618 r6:86031740 r5:00000002 r4:85f318c0 [ 334.133908][ T5230] [<8031f468>] (__request_module) from [<815c4618>] (__sock_create+0x144/0x22c) [ 334.133953][ T5230] r3:00000000 r2:0000001e r1:8246ccf4 [ 334.133972][ T5230] r8:8356ef00 r7:00000000 r6:8280ec50 r5:00000005 r4:0000001e [ 334.133983][ T5230] [<815c44d4>] (__sock_create) from [<815c73f8>] (__sys_socket+0x94/0x118) [ 334.134030][ T5230] r10:00000119 r9:85148c40 r8:8020029c r7:00000119 r6:85148c40 r5:0000001e [ 334.134042][ T5230] r4:00000805 [ 334.134056][ T5230] [<815c7364>] (__sys_socket) from [<815c748c>] (sys_socket+0x10/0x14) [ 334.134098][ T5230] r6:0012ed04 r5:00000000 r4:00000000 [ 334.134108][ T5230] [<815c747c>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 334.134141][ T5230] Exception stack(0xdfe7dfa8 to 0xdfe7dff0) [ 334.134172][ T5230] dfa0: 00000000 00000000 0000001e 00000805 00000000 00000000 [ 334.134205][ T5230] dfc0: 00000000 00000000 0012ed04 00000119 00346378 00000000 003d0f00 76f8b0dc [ 334.134223][ T5230] dfe0: 76f8ae88 76f8ae78 00018bc4 00130300 [ 334.511487][ T5232] FAULT_INJECTION: forcing a failure. [ 334.511487][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 334.519944][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT [ 334.520139][ T5232] Hardware name: ARM-Versatile Express [ 334.520174][ T5232] Call trace: [ 334.520238][ T5232] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 334.520452][ T5232] r7:60000013 r6:60000013 r5:822a865c r4:00000000 [ 334.520478][ T5232] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 334.520545][ T5232] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 334.520619][ T5232] r7:00000000 r6:00000000 r5:851abd40 r4:82919720 [ 334.520639][ T5232] [<8021e424>] (dump_stack) from [<809bd828>] (should_fail_ex+0x1c0/0x224) [ 334.520708][ T5232] [<809bd668>] (should_fail_ex) from [<80544470>] (should_failslab+0x6c/0x94) [ 334.520794][ T5232] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 334.520816][ T5232] [<80544404>] (should_failslab) from [<80523e20>] (__kmalloc_noprof+0xa4/0x39c) [ 334.520879][ T5232] [<80523d7c>] (__kmalloc_noprof) from [<807fc7a8>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 334.520966][ T5232] r10:00000000 r9:830bb400 r8:00000000 r7:8558b6e8 r6:853454a8 r5:00001000 [ 334.520989][ T5232] r4:00000000 [ 334.521009][ T5232] [<807fc76c>] (tomoyo_realpath_from_path) from [<807f8870>] (tomoyo_path_number_perm+0xcc/0x22c) [ 334.521092][ T5232] r10:00000000 r9:00000004 r8:85345480 r7:00008904 r6:81cda024 r5:00000004 [ 334.521118][ T5232] r4:853454a8 r3:826ca380 [ 334.521137][ T5232] [<807f87a4>] (tomoyo_path_number_perm) from [<807fd1c4>] (tomoyo_file_ioctl+0x1c/0x20) [ 334.521219][ T5232] r10:851abd40 r9:00000004 r8:85345480 r7:200003c0 r6:200003c0 r5:00008904 [ 334.521245][ T5232] r4:85345480 [ 334.521281][ T5232] [<807fd1a8>] (tomoyo_file_ioctl) from [<807a8d28>] (security_file_ioctl+0x80/0x1d4) [ 334.521353][ T5232] [<807a8ca8>] (security_file_ioctl) from [<80590df0>] (sys_ioctl+0x4c/0xb5c) [ 334.521433][ T5232] r7:200003c0 r6:00008904 r5:85345481 r4:00000000 [ 334.521456][ T5232] [<80590da4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 334.521523][ T5232] Exception stack(0xe03fdfa8 to 0xe03fdff0) [ 334.521575][ T5232] dfa0: 00000000 00000000 00000004 00008904 200003c0 00000000 [ 334.521617][ T5232] dfc0: 00000000 00000000 0012ed04 00000036 003462d8 00000000 00000001 76fc90dc [ 334.521650][ T5232] dfe0: 76fc8e88 76fc8e78 00018bc4 00130300 [ 334.521696][ T5232] r10:00000036 r9:851abd40 r8:8020029c r7:00000036 r6:0012ed04 r5:00000000 [ 334.521721][ T5232] r4:00000000 [ 334.579546][ T5232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 336.062139][ T5238] fuse: Invalid rootmode [ 336.426563][ T28] audit: type=1400 audit(336.310:226): avc: denied { setopt } for pid=5239 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.852172][ T28] audit: type=1400 audit(336.770:227): avc: denied { read } for pid=5241 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 338.831447][ T28] audit: type=1400 audit(338.750:228): avc: denied { ioctl } for pid=5252 comm="syz.1.470" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.838197][ T5253] binder: 5252:5253 ioctl 400c620e 20001540 returned -22 [ 339.033581][ T28] audit: type=1400 audit(338.950:229): avc: denied { allowed } for pid=5254 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.031960][ T28] audit: type=1400 audit(339.950:230): avc: denied { sqpoll } for pid=5256 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 342.664095][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 345.800816][ T5301] netlink: 45 bytes leftover after parsing attributes in process `syz.1.487'. [ 345.820335][ T28] audit: type=1400 audit(345.740:231): avc: denied { name_bind } for pid=5300 comm="syz.1.487" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 345.828484][ T28] audit: type=1400 audit(345.740:232): avc: denied { write } for pid=5300 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 345.853650][ T28] audit: type=1400 audit(345.770:233): avc: denied { read } for pid=5300 comm="syz.1.487" path="socket:[7416]" dev="sockfs" ino=7416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 355.976126][ T28] audit: type=1400 audit(355.890:234): avc: denied { write } for pid=5361 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.007976][ T28] audit: type=1400 audit(355.920:235): avc: denied { nlmsg_write } for pid=5361 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.183855][ T5362] netlink: 165 bytes leftover after parsing attributes in process `syz.0.501'. [ 360.542286][ T5371] comedi: valid board names for 8255 driver are: [ 360.546034][ T5371] 8255 [ 360.550905][ T5371] comedi: valid board names for vmk80xx driver are: [ 360.553309][ T5371] vmk80xx [ 360.555038][ T5371] comedi: valid board names for usbduxsigma driver are: [ 360.559209][ T5371] usbduxsigma [ 360.561572][ T5371] comedi: valid board names for usbduxfast driver are: [ 360.563361][ T5371] usbduxfast [ 360.569498][ T5371] comedi: valid board names for usbdux driver are: [ 360.571824][ T5371] usbdux [ 360.573857][ T5371] comedi: valid board names for ni6501 driver are: [ 360.575514][ T5371] ni6501 [ 360.579011][ T5371] comedi: valid board names for dt9812 driver are: [ 360.639585][ T5371] dt9812 [ 360.642008][ T5371] comedi: valid board names for ni_labpc_cs driver are: [ 360.657160][ T5371] ni_labpc_cs [ 360.669271][ T5371] comedi: valid board names for ni_daq_700 driver are: [ 360.680251][ T5371] ni_daq_700 [ 360.689876][ T5371] comedi: valid board names for labpc_pci driver are: [ 360.722232][ T5371] labpc_pci [ 360.723163][ T5371] comedi: valid board names for adl_pci9118 driver are: [ 360.723984][ T5371] pci9118dg [ 360.725445][ T5371] pci9118hg [ 360.728210][ T5371] pci9118hr [ 360.782210][ T5371] comedi: valid board names for 8255_pci driver are: [ 360.782785][ T5371] 8255_pci [ 360.782868][ T5371] comedi: valid board names for comedi_parport driver are: [ 360.782993][ T5371] comedi_parport [ 360.783109][ T5371] comedi: valid board names for comedi_test driver are: [ 360.783187][ T5371] comedi_test [ 360.783309][ T5371] comedi: valid board names for comedi_bond driver are: [ 360.783400][ T5371] comedi_bond [ 361.045546][ T28] audit: type=1400 audit(360.960:236): avc: denied { kexec_image_load } for pid=5373 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 363.451474][ T28] audit: type=1400 audit(363.370:237): avc: denied { read } for pid=5396 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 368.851736][ T28] audit: type=1400 audit(368.770:238): avc: denied { setopt } for pid=5440 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.275789][ T28] audit: type=1400 audit(369.190:239): avc: denied { read } for pid=5454 comm="syz.1.533" path="socket:[7037]" dev="sockfs" ino=7037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.130621][ T5467] netlink: 56 bytes leftover after parsing attributes in process `syz.0.535'. [ 370.296524][ T5467] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 370.310692][ T5467] bond1 (unregistering): Released all slaves [ 370.545272][ T5467] netlink: 56 bytes leftover after parsing attributes in process `syz.0.535'. [ 370.761641][ T5467] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 370.775098][ T5467] bond1 (unregistering): Released all slaves [ 379.521662][ T5627] bridge_slave_1: default FDB implementation only supports local addresses [ 381.523794][ T28] audit: type=1326 audit(381.440:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.569439][ T28] audit: type=1326 audit(381.480:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.572137][ T28] audit: type=1326 audit(381.480:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.577508][ T28] audit: type=1326 audit(381.480:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.627370][ T28] audit: type=1326 audit(381.540:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.630933][ T28] audit: type=1326 audit(381.540:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.636630][ T28] audit: type=1326 audit(381.540:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 381.704336][ T28] audit: type=1400 audit(381.620:247): avc: denied { name_bind } for pid=5656 comm="syz.0.551" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 382.032753][ T5659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.552'. [ 383.829627][ T28] audit: type=1326 audit(383.740:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.557" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 383.833637][ T28] audit: type=1326 audit(383.750:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.557" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x7ffc0000 [ 389.325577][ T5696] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.565' sets config #1 [ 392.221470][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 392.724201][ T5700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5700 comm=syz.0.567 [ 398.620785][ T5748] tc_dump_action: action bad kind [ 408.149823][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 408.150389][ T28] audit: type=1400 audit(408.050:400): avc: denied { block_suspend } for pid=5792 comm="syz.1.597" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.868222][ T5804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.600'. [ 410.940251][ T5812] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 411.001069][ T5812] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 413.983756][ T28] audit: type=1400 audit(413.880:401): avc: denied { mounton } for pid=5829 comm="syz.0.609" path="/331/file0" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 422.572116][ T28] audit: type=1400 audit(422.490:402): avc: denied { lock } for pid=5860 comm="syz.0.620" path="socket:[8049]" dev="sockfs" ino=8049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 429.350008][ T41] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 429.519232][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.532905][ T41] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.534139][ T41] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 429.535456][ T41] usb 1-1: Product: syz [ 429.536269][ T41] usb 1-1: SerialNumber: syz [ 430.582614][ T41] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 430.583176][ T41] cdc_ncm 1-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 430.583455][ T41] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 430.803892][ T41] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 430.991675][ T3698] usb 1-1: USB disconnect, device number 11 [ 430.994475][ T3698] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 431.670450][ T3698] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 431.832844][ T3698] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 431.833247][ T3698] usb 1-1: config 1 has no interface number 0 [ 431.833374][ T3698] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 8297, setting to 1024 [ 431.833449][ T3698] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 431.833596][ T3698] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 431.833722][ T3698] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 431.885768][ T3698] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 431.886181][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.886260][ T3698] usb 1-1: Product: syz [ 431.886345][ T3698] usb 1-1: Manufacturer: syz [ 431.886419][ T3698] usb 1-1: SerialNumber: syz [ 431.907643][ T5914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.918145][ T5914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.930315][ T3698] usb 1-1: Expected 3 endpoints, found: 2 [ 432.153721][ T3698] usb 1-1: USB disconnect, device number 12 [ 432.530069][ T28] audit: type=1400 audit(432.440:403): avc: denied { unmount } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 433.483832][ T5945] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 433.483865][ T28] audit: type=1400 audit(433.400:404): avc: denied { load_policy } for pid=5944 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 433.485178][ T5945] SELinux: failed to load policy [ 435.259886][ T41] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 435.409284][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 435.413885][ T41] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.414843][ T41] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.415708][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 435.416479][ T41] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 435.417955][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.421854][ T41] usb 1-1: config 0 descriptor?? [ 435.850364][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.852614][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.891053][ T41] hid (null): unknown global tag 0xc [ 436.019838][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 436.083320][ T41] usb 1-1: USB disconnect, device number 13 [ 436.213810][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.248248][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 436.249198][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.249432][ T10] usb 2-1: Product: syz [ 436.249628][ T10] usb 2-1: Manufacturer: syz [ 436.249802][ T10] usb 2-1: SerialNumber: syz [ 436.272889][ T10] usb 2-1: selecting invalid altsetting 1 [ 436.276385][ T10] usb 2-1: unit 6 not found! [ 436.681156][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 436.686980][ T10] usb 2-1: selecting invalid altsetting 1 [ 436.698580][ T10] usb 2-1: unit 6 not found! [ 436.702666][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 436.712646][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 436.723022][ T10] usb 2-1: selecting invalid altsetting 1 [ 436.725969][ T10] usb 2-1: unit 6 not found! [ 436.730654][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 436.766405][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 436.775563][ T10] usb 2-1: USB disconnect, device number 10 [ 438.484119][ T6021] binder: 6020:6021 ioctl 40049421 2 returned -22 [ 438.488503][ T28] audit: type=1326 audit(438.400:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.0.649" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130300 code=0x0 [ 440.644357][ T28] audit: type=1400 audit(440.560:406): avc: denied { watch watch_reads } for pid=6024 comm="syz.1.650" path="/286" dev="tmpfs" ino=1534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.909882][ T40] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 442.074479][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.076532][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.082952][ T40] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 442.088080][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.097729][ T40] usb 1-1: config 0 descriptor?? [ 442.290642][ T41] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 442.501006][ T41] usb 2-1: unable to get BOS descriptor or descriptor too short [ 442.541962][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.543625][ T41] usb 2-1: config 1 interface 1 has no altsetting 1 [ 442.554757][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.556014][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.557428][ T41] usb 2-1: Product: syz [ 442.558237][ T41] usb 2-1: Manufacturer: syz [ 442.563808][ T41] usb 2-1: SerialNumber: syz [ 442.577353][ T40] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 442.583608][ T40] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 442.587121][ T40] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 442.600058][ T40] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 442.605189][ T40] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 442.794940][ T41] usb 2-1: selecting invalid altsetting 1 [ 442.803152][ T41] cdc_ncm 2-1:1.0: bind() failure [ 442.862156][ T41] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 442.864611][ T41] cdc_ncm 2-1:1.1: bind() failure [ 442.931796][ T41] usb 2-1: USB disconnect, device number 11 [ 442.950989][ T40] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 442.965874][ T40] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 443.151842][ T5631] usb 1-1: USB disconnect, device number 14 [ 443.333480][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 443.702063][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.765440][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.825208][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.893889][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.116774][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.128156][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.155170][ T37] bond0 (unregistering): Released all slaves [ 444.250328][ T37] hsr_slave_0: left promiscuous mode [ 444.262042][ T37] hsr_slave_1: left promiscuous mode [ 444.288252][ T37] veth1_macvtap: left promiscuous mode [ 444.291915][ T37] veth0_macvtap: left promiscuous mode [ 444.296570][ T37] veth1_vlan: left promiscuous mode [ 444.298361][ T37] veth0_vlan: left promiscuous mode [ 448.178035][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.190610][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.861950][ T28] audit: type=1400 audit(449.780:407): avc: denied { read } for pid=6324 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 450.367482][ T6140] hsr_slave_0: entered promiscuous mode [ 450.382208][ T6140] hsr_slave_1: entered promiscuous mode [ 450.383717][ T6140] debugfs: 'hsr0' already exists in 'hsr' [ 450.383937][ T6140] Cannot create hsr debugfs directory [ 450.961779][ T28] audit: type=1400 audit(450.880:408): avc: denied { create } for pid=6397 comm="syz.1.666" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.984818][ T28] audit: type=1400 audit(450.900:409): avc: denied { mounton } for pid=6397 comm="syz.1.666" path="/295/file0" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 451.194337][ T6140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.208101][ T6140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.230164][ T6140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.242586][ T6140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.217855][ T28] audit: type=1400 audit(452.130:410): avc: denied { unlink } for pid=3092 comm="syz-executor" name="file0" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.357983][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.451081][ T2869] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 457.616423][ T2869] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 457.616797][ T2869] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 457.617132][ T2869] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 457.617294][ T2869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.803399][ T6140] veth0_vlan: entered promiscuous mode [ 457.845884][ T6140] veth1_vlan: entered promiscuous mode [ 457.985078][ T6140] veth0_macvtap: entered promiscuous mode [ 458.008023][ T6140] veth1_macvtap: entered promiscuous mode [ 458.123745][ T2148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.124213][ T2148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.124349][ T2148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.124421][ T2148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.289209][ T28] audit: type=1400 audit(458.200:411): avc: denied { unmount } for pid=6140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 458.983679][ T6527] ksmbd: Unknown IPC event: 4, ignore. [ 459.370362][ T2869] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 459.372564][ T2869] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 459.392526][ T2869] input: failed to attach handler kbd to device input6, error: -5 [ 459.440716][ T2869] usb 2-1: USB disconnect, device number 12 [ 459.682286][ T28] audit: type=1400 audit(459.600:412): avc: denied { map } for pid=6554 comm="syz.1.674" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 460.137924][ T6562] syzkaller1: entered promiscuous mode [ 460.230908][ T6562] syzkaller1: entered allmulticast mode [ 460.811980][ T5631] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 460.832378][ T5631] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.649254][ T5631] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 461.869778][ T5631] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 461.870288][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.870634][ T5631] usb 2-1: Product: syz [ 461.870734][ T5631] usb 2-1: Manufacturer: syz [ 461.870773][ T5631] usb 2-1: SerialNumber: syz [ 462.264420][ T5631] rtl8150 2-1:1.0: couldn't reset the device [ 462.266643][ T5631] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 462.306345][ T5631] usb 2-1: USB disconnect, device number 13 [ 462.667352][ T28] audit: type=1400 audit(462.580:413): avc: denied { bind } for pid=6620 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 462.667944][ T28] audit: type=1400 audit(462.580:414): avc: denied { name_bind } for pid=6620 comm="syz.1.691" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 462.676153][ T28] audit: type=1400 audit(462.580:415): avc: denied { node_bind } for pid=6620 comm="syz.1.691" saddr=::ffff:172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 463.122617][ T41] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 463.293005][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 463.336033][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.337904][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.340625][ T41] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 463.340770][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.356102][ T41] usb 2-1: config 0 descriptor?? [ 463.887042][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.887700][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.888132][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.888450][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.892363][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.892817][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.893115][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.893429][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.893736][ T41] samsung 0003:0419:0600.0008: unknown main item tag 0x0 [ 463.902409][ T41] samsung 0003:0419:0600.0008: hidraw0: USB HID v0.0b Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 464.112921][ T3698] usb 2-1: USB disconnect, device number 14 [ 464.762585][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.764876][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.712420][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.713292][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.834697][ T28] audit: type=1400 audit(466.750:416): avc: denied { wake_alarm } for pid=6688 comm="syz.2.702" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 466.949273][ T2869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 467.109787][ T2869] usb 2-1: Using ep0 maxpacket: 8 [ 467.121266][ T2869] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.122673][ T2869] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.123790][ T2869] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.129674][ T2869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.131019][ T2869] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 467.132212][ T2869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.137100][ T2869] usb 2-1: config 0 descriptor?? [ 467.602389][ T2869] hid_parser_main: 29 callbacks suppressed [ 467.603701][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x1 [ 467.604903][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.606001][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.607051][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.608118][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.610364][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.611582][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.612725][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.619737][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.621129][ T2869] lenovo 0003:17EF:60A4.0009: unknown main item tag 0x0 [ 467.629464][ T2869] lenovo 0003:17EF:60A4.0009: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 467.787162][ T5631] usb 2-1: USB disconnect, device number 15 [ 468.060001][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.061542][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.469797][ T2869] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 468.629911][ T2869] usb 2-1: Using ep0 maxpacket: 32 [ 468.771532][ T2869] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.771865][ T2869] usb 2-1: config 0 has no interface number 0 [ 468.804082][ T2869] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.804851][ T2869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.805517][ T2869] usb 2-1: Product: syz [ 468.805912][ T2869] usb 2-1: Manufacturer: syz [ 468.806313][ T2869] usb 2-1: SerialNumber: syz [ 468.813764][ T2869] usb 2-1: config 0 descriptor?? [ 469.118572][ T6736] SELinux: failed to load policy [ 469.763953][ T2869] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 469.982323][ T2869] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 469.983880][ T2869] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 469.990488][ T2869] usb 2-1: USB disconnect, device number 16 [ 470.271990][ T2869] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.449608][ T3698] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 470.625017][ T3698] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 470.625522][ T3698] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 470.625866][ T3698] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 470.625935][ T3698] usb 2-1: config 220 has no interface number 2 [ 470.626037][ T3698] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 470.626095][ T3698] usb 2-1: config 220 interface 0 has no altsetting 0 [ 470.626132][ T3698] usb 2-1: config 220 interface 76 has no altsetting 0 [ 470.626199][ T3698] usb 2-1: config 220 interface 1 has no altsetting 0 [ 470.665781][ T3698] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 470.666124][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.666325][ T3698] usb 2-1: Product: syz [ 470.666501][ T3698] usb 2-1: Manufacturer: syz [ 470.666681][ T3698] usb 2-1: SerialNumber: syz [ 470.964338][ T3698] usb 2-1: USB disconnect, device number 17 [ 472.195335][ T6787] binder: 6786:6787 ioctl 40046210 0 returned -14 [ 472.741349][ T28] audit: type=1400 audit(472.650:417): avc: denied { name_bind 0x1000000 } for pid=6799 comm="syz.2.721" path="socket:[9098]" dev="sockfs" ino=9098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 472.893877][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.902985][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.939759][ T41] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 473.099743][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 473.161550][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.162952][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.167036][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.172560][ T41] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.175960][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.190269][ T41] usb 2-1: config 0 descriptor?? [ 473.542987][ T28] audit: type=1400 audit(473.450:418): avc: denied { create } for pid=6813 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 473.609720][ T28] audit: type=1400 audit(473.520:419): avc: denied { sys_admin } for pid=6813 comm="syz.2.724" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 473.620731][ T41] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 473.634799][ T41] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 473.638565][ T41] microsoft 0003:045E:07DA.000B: usage index exceeded [ 473.643437][ T41] microsoft 0003:045E:07DA.000B: item 0 4 2 2 parsing failed [ 473.650390][ T41] microsoft 0003:045E:07DA.000B: parse failed [ 473.655115][ T41] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 473.825414][ T10] usb 2-1: USB disconnect, device number 18 [ 473.904968][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.908754][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.601042][ T2869] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 475.772621][ T2869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.773052][ T2869] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 475.798189][ T2869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.798579][ T2869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.799300][ T2869] usb 2-1: Product: syz [ 475.799470][ T2869] usb 2-1: Manufacturer: syz [ 475.799530][ T2869] usb 2-1: SerialNumber: syz [ 476.023378][ T6842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.662359][ T6842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.883468][ T2869] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 476.883847][ T2869] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 476.884141][ T2869] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 477.089763][ T2869] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 477.095369][ T2869] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 477.131079][ T2869] usb 2-1: USB disconnect, device number 19 [ 477.134982][ T2869] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 477.820029][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 477.975764][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.053617][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.080490][ T6873] bond0 (unregistering): Released all slaves [ 478.251371][ T40] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 478.409728][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 478.448432][ T40] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.449230][ T40] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.449600][ T40] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.449794][ T40] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 478.449932][ T40] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.450065][ T40] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 478.450109][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.456176][ T40] usb 2-1: config 0 descriptor?? [ 479.053677][ T40] hid_parser_main: 24 callbacks suppressed [ 479.063291][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.063688][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.063781][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.063870][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.063957][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.064059][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.064162][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.064261][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.064397][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.064494][ T40] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 479.075956][ T40] lenovo 0003:17EF:60EE.000C: hidraw0: USB HID v0.0b Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 479.268035][ T40] usb 2-1: USB disconnect, device number 20 [ 483.219804][ T40] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 483.379589][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 483.408284][ T40] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.441454][ T40] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 483.506767][ T40] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 483.506979][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.509685][ T40] usb 2-1: Product: syz [ 483.509972][ T40] usb 2-1: Manufacturer: syz [ 483.510073][ T40] usb 2-1: SerialNumber: syz [ 483.737224][ T40] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 483.744523][ T40] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 483.744993][ T40] usb 2-1: applying playback min mute quirk [ 483.746712][ T40] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 483.767772][ T40] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 483.772725][ T40] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 483.797502][ T40] usb 2-1: USB disconnect, device number 21 [ 484.014950][ T28] audit: type=1400 audit(483.930:420): avc: denied { bind } for pid=6956 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 487.230592][ T5631] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 487.409979][ T5631] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 487.410299][ T5631] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 487.415074][ T5631] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 487.418332][ T5631] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 487.418554][ T5631] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.420430][ T5631] usb 2-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 487.420486][ T5631] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.420531][ T5631] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 487.420558][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.429047][ T5631] usb 2-1: config 0 descriptor?? [ 487.680803][ T5631] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 4 proto 3 vid 0x03F0 pid 0x6C17 [ 487.877767][ T5631] usb 2-1: USB disconnect, device number 22 [ 487.890468][ T5631] usblp0: removed [ 488.399788][ T5631] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 488.558081][ T5631] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.563888][ T5631] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 488.593969][ T5631] usb 2-1: string descriptor 0 read error: -22 [ 488.594461][ T5631] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 488.594582][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.471557][ T5631] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 489.504145][ T5631] usb 2-1: USB disconnect, device number 23 [ 489.858610][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.865518][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.124910][ T7016] pim6reg: entered allmulticast mode [ 490.527870][ T7025] binder: 7024:7025 ioctl c018620c 20000280 returned -1 [ 491.050365][ T5631] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 491.209874][ T7036] netlink: 'syz.2.759': attribute type 27 has an invalid length. [ 491.240172][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 491.260783][ T5631] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.275513][ T5631] usb 2-1: config 1 interface 0 has no altsetting 0 [ 491.463937][ T5631] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 491.464183][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.464419][ T5631] usb 2-1: Product: syz [ 491.464503][ T5631] usb 2-1: Manufacturer: syz [ 491.464525][ T5631] usb 2-1: SerialNumber: syz [ 491.731922][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.732425][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.732822][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.733068][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.734252][ T5631] usbhid 2-1:1.0: can't add hid device: -71 [ 491.734405][ T5631] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 491.740252][ T5631] usb 2-1: USB disconnect, device number 24 [ 491.864521][ T28] audit: type=1400 audit(491.760:421): avc: denied { getopt } for pid=7046 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.086831][ T28] audit: type=1400 audit(493.000:422): avc: denied { set_context_mgr } for pid=7067 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 493.098222][ T7068] binder: 7067:7068 ioctl c0306201 20000380 returned -22 [ 493.190167][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 493.479530][ T5631] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 493.881471][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.881831][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.882333][ T5631] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 493.882537][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.890101][ T5631] usb 2-1: config 0 descriptor?? [ 493.908589][ T5631] hub 2-1:0.0: USB hub found [ 494.129659][ T5631] hub 2-1:0.0: 1 port detected [ 494.713269][ T5631] usb 2-1: USB disconnect, device number 25 [ 495.439761][ T5631] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 495.609513][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 495.619644][ T5631] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 495.619944][ T5631] usb 2-1: config 2 has no interface number 0 [ 495.620154][ T5631] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 495.620381][ T5631] usb 2-1: config 2 interface 88 has no altsetting 0 [ 495.671676][ T5631] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 495.673050][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.674187][ T5631] usb 2-1: Product: syz [ 495.675391][ T5631] usb 2-1: Manufacturer: syz [ 495.676204][ T5631] usb 2-1: SerialNumber: syz [ 495.691579][ T7103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 495.904488][ T7103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.009223][ T5631] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 497.009672][ T5631] asix 2-1:2.88: probe with driver asix failed with error -71 [ 497.014501][ T5631] usb 2-1: USB disconnect, device number 26 [ 497.429566][ T5631] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 497.597736][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.600840][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.609403][ T5631] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 497.610788][ T5631] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 497.611884][ T5631] usb 2-1: Manufacturer: syz [ 497.622959][ T5631] usb 2-1: config 0 descriptor?? [ 498.711063][ T5631] uclogic 0003:256C:006D.000D: v1 frame probing failed: -71 [ 498.712878][ T5631] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 498.715078][ T5631] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 498.729199][ T5631] usb 2-1: USB disconnect, device number 27 [ 499.199863][ T5631] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 499.403102][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.409151][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.411092][ T5631] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 499.412367][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.419264][ T5631] usb 2-1: config 0 descriptor?? [ 499.920749][ T5631] hid_parser_main: 28 callbacks suppressed [ 499.921248][ T5631] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 499.921688][ T5631] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 499.922034][ T5631] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 499.922349][ T5631] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 499.922658][ T5631] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 499.932444][ T5631] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 500.568223][ T5631] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.000E/input/input7 [ 500.593137][ T5631] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.000E/input/input8 [ 500.611453][ T5631] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.000E/input/input9 [ 500.629366][ T5631] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.000E/input/input10 [ 500.673181][ T5631] playstation 0003:054C:0DF2.000E: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 500.831048][ T5631] usb 2-1: USB disconnect, device number 28 [ 501.819213][ T5631] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 501.979270][ T5631] usb 2-1: Using ep0 maxpacket: 16 [ 501.998400][ T5631] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 501.999655][ T5631] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.002251][ T5631] usb 2-1: config 0 has no interface number 0 [ 502.031956][ T5631] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 502.033002][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.034916][ T5631] usb 2-1: Product: syz [ 502.036200][ T5631] usb 2-1: Manufacturer: syz [ 502.037709][ T5631] usb 2-1: SerialNumber: syz [ 502.042237][ T5631] usb 2-1: config 0 descriptor?? [ 502.256348][ T2869] usb 2-1: USB disconnect, device number 29 [ 502.400707][ T7253] netlink: 220 bytes leftover after parsing attributes in process `syz.1.794'. [ 503.039894][ T2869] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 503.239533][ T2869] usb 2-1: Using ep0 maxpacket: 32 [ 503.246091][ T2869] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 503.259778][ T2869] usb 2-1: config 0 has no interfaces? [ 503.275003][ T2869] usb 2-1: config 0 has no interfaces? [ 503.303495][ T2869] usb 2-1: config 0 has no interfaces? [ 503.321205][ T2869] usb 2-1: config 0 has no interfaces? [ 503.329880][ T2869] usb 2-1: config 0 has no interfaces? [ 503.355214][ T2869] usb 2-1: config 0 has no interfaces? [ 503.375413][ T2869] usb 2-1: config 0 has no interfaces? [ 503.399085][ T2869] usb 2-1: config 0 has no interfaces? [ 503.425529][ T2869] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 503.428626][ T2869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.429458][ T2869] usb 2-1: Product: syz [ 503.429650][ T2869] usb 2-1: Manufacturer: syz [ 503.429731][ T2869] usb 2-1: SerialNumber: syz [ 503.442432][ T2869] usb 2-1: config 0 descriptor?? [ 503.662770][ T2869] usb 2-1: USB disconnect, device number 30 [ 504.119776][ T2869] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 504.279610][ T2869] usb 2-1: Using ep0 maxpacket: 16 [ 504.297454][ T2869] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 504.297765][ T2869] usb 2-1: config 0 has no interface number 0 [ 504.297944][ T2869] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 504.298005][ T2869] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 504.334935][ T2869] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 504.335344][ T2869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.335653][ T2869] usb 2-1: Product: syz [ 504.335714][ T2869] usb 2-1: Manufacturer: syz [ 504.335746][ T2869] usb 2-1: SerialNumber: syz [ 504.347270][ T2869] usb 2-1: config 0 descriptor?? [ 504.362813][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.366718][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.606014][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.611261][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 505.043961][ T2869] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 505.045803][ T2869] asix 2-1:0.251: probe with driver asix failed with error -524 [ 505.247012][ T2869] usb 2-1: USB disconnect, device number 31 [ 505.534485][ T28] audit: type=1400 audit(505.450:423): avc: denied { name_bind } for pid=7290 comm="syz.1.801" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 506.017346][ T28] audit: type=1400 audit(505.930:424): avc: denied { nlmsg_read } for pid=7295 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.026916][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 506.549554][ T40] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 506.851819][ T40] usb 2-1: config 1 has an invalid interface number: 253 but max is 1 [ 506.853074][ T40] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.857133][ T40] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 506.860816][ T40] usb 2-1: config 1 has no interface number 2 [ 506.869291][ T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.869818][ T40] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.870015][ T40] usb 2-1: config 1 interface 1 has no altsetting 0 [ 506.884624][ T40] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.884949][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.885257][ T40] usb 2-1: Product: syz [ 506.885433][ T40] usb 2-1: Manufacturer: syz [ 506.885594][ T40] usb 2-1: SerialNumber: syz [ 506.931174][ T40] cdc_ncm 2-1:1.253: CDC Union missing and no IAD found [ 506.932543][ T40] cdc_ncm 2-1:1.253: bind() failure [ 506.973765][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.975093][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.332476][ T5631] usb 2-1: USB disconnect, device number 32 [ 507.581370][ T7329] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 508.104708][ T5631] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 508.106719][ T5631] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.145941][ T28] audit: type=1400 audit(510.060:425): avc: denied { mounton } for pid=7340 comm="syz.2.814" path="/proc/156/task" dev="proc" ino=10474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 510.159681][ T2869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 510.371781][ T2869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.386985][ T2869] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 510.388086][ T2869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.389903][ T2869] usb 2-1: Product: syz [ 510.390847][ T2869] usb 2-1: Manufacturer: syz [ 510.391579][ T2869] usb 2-1: SerialNumber: syz [ 510.704572][ T2869] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 510.705831][ T2869] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 510.707134][ T2869] usb 2-1: unit 13 not found! [ 510.710913][ T2869] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 510.719991][ T2869] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 510.890553][ T2869] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 510.897669][ T2869] usb 2-1: USB disconnect, device number 33 [ 521.342914][ T28] audit: type=1400 audit(521.260:426): avc: denied { relabelfrom } for pid=7454 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 521.343438][ T28] audit: type=1400 audit(521.260:427): avc: denied { relabelto } for pid=7454 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 529.290251][ T7542] ------------[ cut here ]------------ [ 529.291006][ T7542] WARNING: kernel/bpf/verifier.c:2817 at reg_bounds_sanity_check+0x3c0/0x428, CPU#1: syz.2.866/7542 [ 529.293152][ T7542] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 529.294561][ T7542] Modules linked in: [ 529.295534][ T7542] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 529.296204][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.2.866 Not tainted syzkaller #0 PREEMPT [ 529.296956][ T7542] Hardware name: ARM-Versatile Express [ 529.297339][ T7542] Call trace: [ 529.297593][ T7542] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 529.298420][ T7542] r7:8281f9b4 r6:00000000 r5:822a865c r4:00000001 [ 529.299146][ T7542] [<80201af0>] (show_stack) from [<8021e410>] (dump_stack_lvl+0x5c/0x70) [ 529.299763][ T7542] [<8021e3b4>] (dump_stack_lvl) from [<8021e43c>] (dump_stack+0x18/0x1c) [ 529.300661][ T7542] r7:8281f9b4 r6:00000000 r5:840055c0 r4:82a80d14 [ 529.301369][ T7542] [<8021e424>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 529.302218][ T7542] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 529.302602][ T7542] r7:803e122c [ 529.302780][ T7542] [<80202818>] (panic) from [<80250a70>] (get_taint+0x0/0x1c) [ 529.303119][ T7542] r3:8280c544 r2:00000001 r1:8228f388 r0:82296c54 [ 529.303370][ T7542] [<802509f8>] (check_panic_on_warn) from [<80250bec>] (__warn+0x98/0x1ac) [ 529.303739][ T7542] [<80250b54>] (__warn) from [<80250ee8>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 529.304117][ T7542] r8:00000009 r7:822aefc0 r6:e01e58c4 r5:840055c0 r4:00000000 [ 529.304444][ T7542] [<80250d04>] (warn_slowpath_fmt) from [<803e122c>] (reg_bounds_sanity_check+0x3c0/0x428) [ 529.304877][ T7542] r10:86e68000 r9:ffffdfcd r8:80000000 r7:ffffdfcd r6:ffffdfcc r5:822af768 [ 529.305237][ T7542] r4:86196a30 [ 529.305405][ T7542] [<803e0e6c>] (reg_bounds_sanity_check) from [<803ee180>] (reg_set_min_max+0x1d4/0x298) [ 529.305816][ T7542] r10:00000001 r9:00000010 r8:86e68000 r7:85a7fb10 r6:86196b10 r5:86196a30 [ 529.306475][ T7542] r4:85a7fa30 [ 529.306936][ T7542] [<803edfac>] (reg_set_min_max) from [<803fedd8>] (check_cond_jmp_op+0xc84/0x1988) [ 529.307360][ T7542] r10:86196800 r9:00000010 r8:8339bd00 r7:ffffffff r6:80000000 r5:838813c0 [ 529.307701][ T7542] r4:e040b0c0 r3:85a7fa30 [ 529.307908][ T7542] [<803fe154>] (check_cond_jmp_op) from [<80405434>] (do_check_common+0x2584/0x3214) [ 529.308335][ T7542] r10:86e6c000 r9:86e68000 r8:e040b0c0 r7:86e6e000 r6:00000018 r5:e040b078 [ 529.308871][ T7542] r4:e040b000 [ 529.309052][ T7542] [<80402eb0>] (do_check_common) from [<80409038>] (bpf_check+0x2290/0x2d30) [ 529.309867][ T7542] r10:86e6e000 r9:00000001 r8:86e68000 r7:00000a7b r6:86e688bc r5:00000000 [ 529.310321][ T7542] r4:00000016 [ 529.310507][ T7542] [<80406da8>] (bpf_check) from [<803da570>] (bpf_prog_load+0x5b8/0xdec) [ 529.311244][ T7542] r10:e040b000 r9:840055c0 r8:85b8b330 r7:e01e5d18 r6:00000000 r5:00000000 [ 529.311943][ T7542] r4:e01e5eb0 [ 529.312096][ T7542] [<803d9fb8>] (bpf_prog_load) from [<803dbd98>] (__sys_bpf+0x2d8/0x2038) [ 529.312468][ T7542] r10:00000005 r9:00000000 r8:e01e5e50 r7:00000048 r6:840055c0 r5:200054c0 [ 529.312839][ T7542] r4:00000000 [ 529.313016][ T7542] [<803dbac0>] (__sys_bpf) from [<803de090>] (sys_bpf+0x2c/0x48) [ 529.313376][ T7542] r10:00000182 r9:840055c0 r8:8020029c r7:00000182 r6:00346310 r5:00000000 [ 529.313697][ T7542] r4:00000000 [ 529.314427][ T7542] [<803de064>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 529.315347][ T7542] Exception stack(0xe01e5fa8 to 0xe01e5ff0) [ 529.315671][ T7542] 5fa0: 00000000 00000000 00000005 200054c0 00000048 00000000 [ 529.316144][ T7542] 5fc0: 00000000 00000000 00346310 00000182 003462d8 00000000 003d0f00 76fe40dc [ 529.316972][ T7542] 5fe0: 76fe3e88 76fe3e78 00018bc4 00130300 [ 529.320372][ T7542] Rebooting in 86400 seconds..