last executing test programs: 1m43.729633282s ago: executing program 0 (id=1503): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}}, 0x408d4) 1m43.19003583s ago: executing program 0 (id=1504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0xfffffd03}]}}}}}}}, 0x0) 1m42.852513588s ago: executing program 0 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="03"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_PMK={0x4}]]}, 0x2c}}, 0x0) 1m41.608566521s ago: executing program 0 (id=1506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x3c}}, 0x890) 1m40.970974204s ago: executing program 0 (id=1507): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 1m40.601041163s ago: executing program 0 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1, 0x7, 0x8, 0x100}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r0, r1, 0x0) 54.863071021s ago: executing program 32 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1, 0x7, 0x8, 0x100}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r0, r1, 0x0) 27.132278316s ago: executing program 1 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 26.600996873s ago: executing program 1 (id=1519): unshare(0x20000400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) 26.4506201s ago: executing program 1 (id=1520): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, &(0x7f0000001040)=""/4114, 0x34f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getdents64(r0, 0x0, 0x0) 10.037969854s ago: executing program 1 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 9.428367885s ago: executing program 1 (id=1523): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x3) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x3554, 0x13291, 0x0, 0x11d, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 9.209850476s ago: executing program 1 (id=1524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000"], 0x4c}}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x20044044) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, 0x0, 0x100, 0x0) 5.537573845s ago: executing program 2 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 5.24582267s ago: executing program 2 (id=1527): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x8ed3, 0xc, 0x1, 0x960, 0x19, "0300000001000000000000000000be00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) 5.117226457s ago: executing program 2 (id=1528): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x8820) 4.978405444s ago: executing program 2 (id=1529): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0], 0x0, r1, 0x0, '\x00', 0x1}) 559.547861ms ago: executing program 2 (id=1530): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x0, 0x0}], 0x1}) 0s ago: executing program 2 (id=1531): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x0, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): <805542cc>] (ksys_read+0x74/0xe8) [ 636.546775][ T6921] r10:00000003 r9:84a20c00 r8:8020029c r7:00000000 r6:00000000 r5:85f98d80 [ 636.547003][ T6921] r4:85f98d83 [ 636.547030][ T6921] [<80554258>] (ksys_read) from [<80554350>] (sys_read+0x10/0x14) [ 636.547360][ T6921] r7:00000003 r6:00000004 r5:76f8ff30 r4:0000000f [ 636.547668][ T6921] [<80554340>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 636.547772][ T6921] Exception stack(0xea7e9fa8 to 0xea7e9ff0) [ 636.548144][ T6921] 9fa0: 0000000f 76f8ff30 00000004 76f8ff30 0000000f 00000000 [ 636.548250][ T6921] 9fc0: 0000000f 76f8ff30 00000004 00000003 002e0000 00000000 00006364 76f900bc [ 636.548558][ T6921] 9fe0: 00000158 76f8fed0 000d80f4 00130194 [ 637.660944][ T31] audit: type=1400 audit(637.570:289): avc: denied { setattr } for pid=6923 comm="syz.0.899" name="RAW" dev="sockfs" ino=11351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.803812][ T31] audit: type=1400 audit(637.710:290): avc: denied { lock } for pid=6923 comm="syz.0.899" path="socket:[11351]" dev="sockfs" ino=11351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.296944][ T31] audit: type=1400 audit(644.200:291): avc: denied { read } for pid=6962 comm="syz.1.912" name="timer" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 645.300909][ T31] audit: type=1400 audit(645.210:292): avc: denied { listen } for pid=6964 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 647.210923][ T31] audit: type=1400 audit(647.120:293): avc: denied { connect } for pid=6992 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.833000][ T31] audit: type=1400 audit(651.740:294): avc: denied { ioctl } for pid=7014 comm="syz.0.919" path="ipc:[4026532638]" dev="nsfs" ino=4026532638 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 652.247147][ T7019] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7019 comm=syz.1.921 [ 652.567694][ T7025] FAULT_INJECTION: forcing a failure. [ 652.567694][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.571116][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.1.924 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 652.571267][ T7025] Hardware name: ARM-Versatile Express [ 652.571296][ T7025] Call trace: [ 652.571374][ T7025] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 652.571509][ T7025] r7:200034c0 r6:00000000 r5:60000013 r4:822602a4 [ 652.571532][ T7025] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 652.571590][ T7025] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 652.571645][ T7025] r5:8417a400 r4:8294f150 [ 652.571662][ T7025] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 652.571723][ T7025] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 652.571801][ T7025] r8:8020029c r7:200034c0 r6:200034c0 r5:8603f700 r4:00000007 [ 652.571819][ T7025] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 652.571883][ T7025] [<80972440>] (should_fail_usercopy) from [<8049c738>] (memdup_user+0x44/0x170) [ 652.571942][ T7025] [<8049c6f4>] (memdup_user) from [<8049c8a0>] (strndup_user+0x3c/0x58) [ 652.572019][ T7025] r9:8417a400 r8:8020029c r7:00000000 r6:200034c0 r5:00001000 r4:00000007 [ 652.572041][ T7025] [<8049c864>] (strndup_user) from [<80586834>] (sys_mount+0x40/0x260) [ 652.572118][ T7025] r7:00000000 r6:00130270 r5:20003500 r4:20003500 [ 652.572139][ T7025] [<805867f4>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 652.572254][ T7025] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 652.572317][ T7025] 9fa0: 20003500 00000000 00000000 20003480 200034c0 0300480e [ 652.572364][ T7025] 9fc0: 20003500 00000000 00130270 00000015 002e0000 00000000 00006364 76f900bc [ 652.572400][ T7025] 9fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 652.572447][ T7025] r10:00000015 r9:8417a400 r8:8020029c r7:00000015 r6:00130270 r5:00000000 [ 652.572472][ T7025] r4:20003500 [ 652.706742][ T7028] 8021q: VLANs not supported on vcan0 [ 657.114718][ T7064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7064 comm=syz.0.937 [ 658.342794][ T7066] ======================================================= [ 658.342794][ T7066] WARNING: The mand mount option has been deprecated and [ 658.342794][ T7066] and is ignored by this kernel. Remove the mand [ 658.342794][ T7066] option from the mount to silence this warning. [ 658.342794][ T7066] ======================================================= [ 658.348128][ T31] audit: type=1400 audit(658.250:295): avc: denied { mount } for pid=7065 comm="syz.1.938" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 658.370626][ T7066] binder: Unknown parameter 'dont_hash' [ 658.394674][ T31] audit: type=1400 audit(658.300:296): avc: denied { unmount } for pid=3124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 662.066990][ T7111] FAULT_INJECTION: forcing a failure. [ 662.066990][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 662.074677][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.0.955 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 662.074841][ T7111] Hardware name: ARM-Versatile Express [ 662.074872][ T7111] Call trace: [ 662.074918][ T7111] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 662.075098][ T7111] r7:85b11800 r6:00000000 r5:60000013 r4:822602a4 [ 662.075125][ T7111] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 662.075187][ T7111] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 662.075248][ T7111] r5:85b11800 r4:82917bc0 [ 662.075265][ T7111] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 662.075362][ T7111] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 662.075432][ T7111] r8:00000000 r7:85b11800 r6:00000cc0 r5:85c25000 r4:830a2c00 [ 662.075449][ T7111] [<8051f3e4>] (should_failslab) from [<8050372c>] (kmem_cache_alloc_lru_noprof+0x50/0x338) [ 662.075532][ T7111] [<805036dc>] (kmem_cache_alloc_lru_noprof) from [<80579f04>] (alloc_inode+0x68/0xcc) [ 662.075613][ T7111] r10:85b11800 r9:00000000 r8:85c25000 r7:00000001 r6:81c20640 r5:85c25000 [ 662.075634][ T7111] r4:85c25000 [ 662.075651][ T7111] [<80579e9c>] (alloc_inode) from [<80579f78>] (new_inode+0x10/0x68) [ 662.075709][ T7111] r7:00000001 r6:81c20640 r5:81c176a8 r4:85c25000 [ 662.075726][ T7111] [<80579f68>] (new_inode) from [<8058e4e8>] (simple_fill_super+0x54/0x18c) [ 662.075795][ T7111] r9:00000000 r8:85c25000 r7:00000001 r6:81c20640 r5:81c176a8 r4:85c25000 [ 662.075813][ T7111] [<8058e494>] (simple_fill_super) from [<803fd068>] (bpf_fill_super+0x64/0x360) [ 662.075888][ T7111] r9:00000000 r8:858e2100 r7:803fd004 r6:00000000 r5:85c25000 r4:85c25000 [ 662.075907][ T7111] [<803fd004>] (bpf_fill_super) from [<805597ac>] (get_tree_nodev+0x60/0x90) [ 662.075976][ T7111] r10:85b11800 r9:00000000 r8:85cc4300 r7:803fd004 r6:00000000 r5:85cc4300 [ 662.075997][ T7111] r4:85c25000 [ 662.076014][ T7111] [<8055974c>] (get_tree_nodev) from [<803fc814>] (bpf_get_tree+0x18/0x1c) [ 662.076073][ T7111] r7:00000000 r6:85cc4300 r5:00000020 r4:00000000 [ 662.076091][ T7111] [<803fc7fc>] (bpf_get_tree) from [<805569ac>] (vfs_get_tree+0x2c/0x108) [ 662.076138][ T7111] [<80556980>] (vfs_get_tree) from [<80585dc8>] (path_mount+0x42c/0xa50) [ 662.076195][ T7111] r6:dfa9df6c r5:00000020 r4:00000000 [ 662.076213][ T7111] [<8058599c>] (path_mount) from [<8058696c>] (sys_mount+0x178/0x260) [ 662.076278][ T7111] r10:00000015 r9:85b11800 r8:00000000 r7:00000000 r6:85c34480 r5:00000000 [ 662.076298][ T7111] r4:00000000 [ 662.076314][ T7111] [<805867f4>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 662.076364][ T7111] Exception stack(0xdfa9dfa8 to 0xdfa9dff0) [ 662.076407][ T7111] dfa0: 00000000 00000000 00000000 20001100 20001140 00000000 [ 662.076447][ T7111] dfc0: 00000000 00000000 00130270 00000015 002e0000 00000000 00006364 76f510bc [ 662.076477][ T7111] dfe0: 76f50ec0 76f50eb0 0001948c 001322c0 [ 662.076514][ T7111] r10:00000015 r9:85b11800 r8:8020029c r7:00000015 r6:00130270 r5:00000000 [ 662.076534][ T7111] r4:00000000 [ 662.241464][ T7114] FAULT_INJECTION: forcing a failure. [ 662.241464][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 662.242787][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.0.956 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 662.242904][ T7114] Hardware name: ARM-Versatile Express [ 662.242931][ T7114] Call trace: [ 662.242974][ T7114] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 662.243092][ T7114] r7:84a23c00 r6:00000000 r5:60000013 r4:822602a4 [ 662.243113][ T7114] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 662.243295][ T7114] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 662.243509][ T7114] r5:84a23c00 r4:82917bc0 [ 662.243606][ T7114] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 662.243713][ T7114] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 662.243825][ T7114] r8:00000000 r7:84a23c00 r6:00000cc0 r5:ffffffff r4:832c8240 [ 662.243864][ T7114] [<8051f3e4>] (should_failslab) from [<805033f4>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 662.243958][ T7114] [<805033a4>] (kmem_cache_alloc_node_noprof) from [<815508bc>] (__alloc_skb+0x138/0x160) [ 662.244082][ T7114] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:832c8240 r5:ffffffff [ 662.244156][ T7114] r4:828060c0 [ 662.244485][ T7114] [<81550784>] (__alloc_skb) from [<8166fbcc>] (netlink_alloc_large_skb+0x88/0xa0) [ 662.244617][ T7114] r8:00000000 r7:85c25800 r6:00000028 r5:837eaf00 r4:00000140 [ 662.244732][ T7114] [<8166fb44>] (netlink_alloc_large_skb) from [<81670314>] (netlink_sendmsg+0x134/0x444) [ 662.244875][ T7114] r5:837eaf00 r4:dfa91f20 [ 662.245367][ T7114] [<816701e0>] (netlink_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 662.246134][ T7114] r10:00000000 r9:dfa91dc4 r8:dfa91dc4 r7:00000000 r6:837eaf00 r5:dfa91f20 [ 662.246164][ T7114] r4:00000000 [ 662.246181][ T7114] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 662.246971][ T7114] r7:00000000 r6:837eaf00 r5:04000080 r4:dfa91f20 [ 662.247171][ T7114] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 662.247435][ T7114] r10:dfa91e24 r9:200013c0 r8:04000080 r7:00000000 r6:837eaf00 r5:dfa91f20 [ 662.247457][ T7114] r4:00000000 [ 662.247474][ T7114] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 662.247544][ T7114] r10:00000128 r9:84a23c00 r8:85c94900 r7:04000080 r6:200013c0 r5:85c94901 [ 662.247564][ T7114] r4:00000003 [ 662.247594][ T7114] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 662.247667][ T7114] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 662.247684][ T7114] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 662.247832][ T7114] Exception stack(0xdfa91fa8 to 0xdfa91ff0) [ 662.247881][ T7114] 1fa0: 00000000 00000000 00000003 200013c0 04000080 00000000 [ 662.247919][ T7114] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f510bc [ 662.247947][ T7114] 1fe0: 76f50ec0 76f50eb0 0001948c 001322c0 [ 662.906101][ T31] audit: type=1400 audit(662.810:297): avc: denied { connect } for pid=7129 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 663.235138][ T7137] FAULT_INJECTION: forcing a failure. [ 663.235138][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.239476][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.1.967 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 663.239632][ T7137] Hardware name: ARM-Versatile Express [ 663.239661][ T7137] Call trace: [ 663.239712][ T7137] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 663.239828][ T7137] r7:fffffdfd r6:00000000 r5:60000013 r4:822602a4 [ 663.239851][ T7137] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 663.239915][ T7137] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 663.239980][ T7137] r5:84a25400 r4:8294f150 [ 663.240003][ T7137] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 663.240062][ T7137] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 663.240124][ T7137] r8:dfaa9ecc r7:fffffdfd r6:85b58000 r5:20000180 r4:00008933 [ 663.240141][ T7137] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 663.240200][ T7137] [<80972440>] (should_fail_usercopy) from [<815441e0>] (sock_ioctl+0x4ec/0x600) [ 663.240268][ T7137] [<81543cf4>] (sock_ioctl) from [<8056cf18>] (sys_ioctl+0x130/0xba0) [ 663.240349][ T7137] r9:00000005 r8:85c94c00 r7:20000180 r6:85c94c01 r5:00000000 r4:00008933 [ 663.240372][ T7137] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 663.240430][ T7137] Exception stack(0xdfaa9fa8 to 0xdfaa9ff0) [ 663.240477][ T7137] 9fa0: 00000000 00000000 00000005 00008933 20000180 00000000 [ 663.240517][ T7137] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 663.240549][ T7137] 9fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 663.240601][ T7137] r10:00000036 r9:84a25400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 663.240625][ T7137] r4:00000000 [ 668.116620][ T7190] FAULT_INJECTION: forcing a failure. [ 668.116620][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 668.118258][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.0.983 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 668.118417][ T7190] Hardware name: ARM-Versatile Express [ 668.118439][ T7190] Call trace: [ 668.118463][ T7190] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 668.118541][ T7190] r7:84a22400 r6:00000000 r5:60000013 r4:822602a4 [ 668.118563][ T7190] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 668.118597][ T7190] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 668.118633][ T7190] r5:84a22400 r4:82917bc0 [ 668.118640][ T7190] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 668.118719][ T7190] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 668.118765][ T7190] r8:00000000 r7:84a22400 r6:00000dc0 r5:dfa9df20 r4:83001240 [ 668.118826][ T7190] [<8051f3e4>] (should_failslab) from [<80502e14>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 668.118859][ T7190] [<80502dc8>] (__kmalloc_cache_noprof) from [<8173f640>] (tcp_sendmsg_fastopen+0x94/0x188) [ 668.118902][ T7190] r10:20041045 r9:dfa9df20 r8:00000000 r7:dfa9dcbc r6:00000000 r5:dfa9df20 [ 668.118913][ T7190] r4:8595e4c0 [ 668.118922][ T7190] [<8173f5ac>] (tcp_sendmsg_fastopen) from [<8174012c>] (tcp_sendmsg_locked+0x9f8/0xfd8) [ 668.118960][ T7190] r8:8595e4c0 r7:00000000 r6:00000000 r5:00000000 r4:00000000 [ 668.118968][ T7190] [<8173f734>] (tcp_sendmsg_locked) from [<8174073c>] (tcp_sendmsg+0x30/0x44) [ 668.119007][ T7190] r10:00000000 r9:dfa9ddc4 r8:dfa9ddc4 r7:00000000 r6:00000000 r5:dfa9df20 [ 668.119018][ T7190] r4:8595e4c0 [ 668.119026][ T7190] [<8174070c>] (tcp_sendmsg) from [<817863e0>] (inet_sendmsg+0x40/0x4c) [ 668.119063][ T7190] r7:00000000 r6:8595e4c0 r5:00000000 r4:dfa9df20 [ 668.119072][ T7190] [<817863a0>] (inet_sendmsg) from [<81937374>] (smc_sendmsg+0x84/0x278) [ 668.119108][ T7190] r7:00000000 r6:dfa9df20 r5:00000000 r4:85c1aa00 [ 668.119117][ T7190] [<819372f0>] (smc_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 668.119159][ T7190] r9:dfa9ddc4 r8:dfa9ddc4 r7:00000000 r6:837eb680 r5:dfa9df20 r4:00000000 [ 668.119245][ T7190] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 668.119288][ T7190] r7:00000000 r6:837eb680 r5:20041045 r4:dfa9df20 [ 668.119297][ T7190] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 668.119386][ T7190] r10:dfa9de24 r9:20000300 r8:20041045 r7:00000000 r6:837eb680 r5:dfa9df20 [ 668.119397][ T7190] r4:00000000 [ 668.119407][ T7190] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 668.119450][ T7190] r10:00000128 r9:84a22400 r8:85c94600 r7:20041045 r6:20000300 r5:85c94601 [ 668.119462][ T7190] r4:00000003 [ 668.119470][ T7190] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 668.119532][ T7190] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 668.119542][ T7190] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 668.119578][ T7190] Exception stack(0xdfa9dfa8 to 0xdfa9dff0) [ 668.119610][ T7190] dfa0: 00000000 00000000 00000003 20000300 20041045 00000000 [ 668.119630][ T7190] dfc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f510bc [ 668.119646][ T7190] dfe0: 76f50ec0 76f50eb0 0001948c 001322c0 [ 669.322673][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7212 comm=syz.0.992 [ 669.556119][ T7215] block nbd0: shutting down sockets [ 671.357415][ T7234] random: crng reseeded on system resumption [ 672.840229][ T31] audit: type=1400 audit(672.740:298): avc: denied { setattr } for pid=7257 comm="syz.0.1009" name="CAN_ISOTP" dev="sockfs" ino=11958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.092299][ T7327] FAULT_INJECTION: forcing a failure. [ 676.092299][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 676.094064][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.1.1029 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 676.094181][ T7327] Hardware name: ARM-Versatile Express [ 676.094206][ T7327] Call trace: [ 676.094246][ T7327] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 676.094370][ T7327] r7:00000d40 r6:00000000 r5:60000013 r4:822602a4 [ 676.094393][ T7327] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 676.094455][ T7327] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 676.094520][ T7327] r5:85b15400 r4:82917bc0 [ 676.094536][ T7327] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 676.094719][ T7327] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 676.094803][ T7327] r8:85b15400 r7:00000d40 r6:85c947a8 r5:00000019 r4:83001240 [ 676.094823][ T7327] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 676.094882][ T7327] [<80503d48>] (__kmalloc_noprof) from [<807c33dc>] (tomoyo_encode2+0x64/0xf0) [ 676.094958][ T7327] r10:00000fff r9:83351000 r8:00000000 r7:852f55d8 r6:85c947a8 r5:859d2ffd [ 676.094979][ T7327] r4:859d2fef [ 676.094995][ T7327] [<807c3378>] (tomoyo_encode2) from [<807c348c>] (tomoyo_encode+0x24/0x30) [ 676.095067][ T7327] r9:83351000 r8:00000000 r7:852f55d8 r6:85c947a8 r5:00001000 r4:859d2ff0 [ 676.095087][ T7327] [<807c3468>] (tomoyo_encode) from [<807c3518>] (tomoyo_realpath_from_path+0x80/0x17c) [ 676.095146][ T7327] r5:00001000 r4:859d2000 [ 676.095163][ T7327] [<807c3498>] (tomoyo_realpath_from_path) from [<807bf618>] (tomoyo_path_number_perm+0xcc/0x22c) [ 676.095234][ T7327] r10:85b15400 r9:00000000 r8:85c94780 r7:00005450 r6:00000004 r5:81cd6544 [ 676.095260][ T7327] r4:85c947a8 r3:826c0200 [ 676.095278][ T7327] [<807bf54c>] (tomoyo_path_number_perm) from [<807c3ef8>] (tomoyo_file_ioctl+0x1c/0x20) [ 676.095381][ T7327] r9:00000004 r8:85c94780 r7:00000000 r6:00000000 r5:00005450 r4:85c94780 [ 676.095403][ T7327] [<807c3edc>] (tomoyo_file_ioctl) from [<8077074c>] (security_file_ioctl+0x64/0x1e4) [ 676.095464][ T7327] [<807706e8>] (security_file_ioctl) from [<8056ce34>] (sys_ioctl+0x4c/0xba0) [ 676.095552][ T7327] r7:00000000 r6:85c94781 r5:00000000 r4:00005450 [ 676.095570][ T7327] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 676.095641][ T7327] Exception stack(0xdfb6dfa8 to 0xdfb6dff0) [ 676.095683][ T7327] dfa0: 00000000 00000000 00000004 00005450 00000000 00000000 [ 676.095722][ T7327] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 676.095753][ T7327] dfe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 676.095793][ T7327] r10:00000036 r9:85b15400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 676.095814][ T7327] r4:00000000 [ 676.124608][ T7327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 676.203297][ T31] audit: type=1400 audit(676.110:299): avc: denied { audit_write } for pid=7326 comm="syz.0.1030" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 678.065226][ T7353] FAULT_INJECTION: forcing a failure. [ 678.065226][ T7353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.067075][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.1.1039 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 678.067195][ T7353] Hardware name: ARM-Versatile Express [ 678.067221][ T7353] Call trace: [ 678.067262][ T7353] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 678.067401][ T7353] r7:00000000 r6:00000000 r5:60000113 r4:822602a4 [ 678.067422][ T7353] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 678.067475][ T7353] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 678.067542][ T7353] r5:85b15400 r4:82917c14 [ 678.067561][ T7353] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 678.067620][ T7353] [<80972200>] (should_fail_ex) from [<8051f4e0>] (should_fail_alloc_page+0x68/0x74) [ 678.067688][ T7353] r8:00000001 r7:00000000 r6:00000000 r5:00440dc2 r4:dfb6dc58 [ 678.067707][ T7353] [<8051f478>] (should_fail_alloc_page) from [<804ed790>] (prepare_alloc_pages.constprop.0+0x94/0x1b0) [ 678.067765][ T7353] [<804ed6fc>] (prepare_alloc_pages.constprop.0) from [<804f5cb8>] (__alloc_frozen_pages_noprof+0xac/0x10d0) [ 678.067838][ T7353] r10:dfb6de70 r9:00000000 r8:85b15400 r7:00000000 r6:00440dc2 r5:84baf0c0 [ 678.067863][ T7353] r4:00000000 r3:dfb6dc58 [ 678.067882][ T7353] [<804f5c0c>] (__alloc_frozen_pages_noprof) from [<804f6cec>] (__alloc_pages_noprof+0x10/0x60) [ 678.067954][ T7353] r10:dfb6de70 r9:85955400 r8:85d70b00 r7:00000000 r6:20000000 r5:84baf0c0 [ 678.067974][ T7353] r4:84baf0c0 [ 678.067991][ T7353] [<804f6cdc>] (__alloc_pages_noprof) from [<804c0ae0>] (pte_alloc_one+0x28/0x114) [ 678.068049][ T7353] [<804c0ab8>] (pte_alloc_one) from [<804c234c>] (__pte_alloc+0x2c/0x104) [ 678.068108][ T7353] r5:85987800 r4:84baf0c0 [ 678.068125][ T7353] [<804c2320>] (__pte_alloc) from [<804c7a44>] (handle_mm_fault+0xfc0/0x14dc) [ 678.068185][ T7353] r5:85b15400 r4:00000215 [ 678.068206][ T7353] [<804c6a84>] (handle_mm_fault) from [<80234214>] (do_page_fault+0xec/0x49c) [ 678.068279][ T7353] r10:00000002 r9:84baf0c0 r8:00000215 r7:20000000 r6:00000a06 r5:20000b00 [ 678.068301][ T7353] r4:dfb6de70 [ 678.068319][ T7353] [<80234128>] (do_page_fault) from [<80234744>] (do_translation_fault+0xfc/0x12c) [ 678.068391][ T7353] r10:85b15400 r9:85b15400 r8:80234648 r7:dfb6de70 r6:20000b00 r5:00000a06 [ 678.068413][ T7353] r4:8281cee0 [ 678.068431][ T7353] [<80234648>] (do_translation_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8) [ 678.068500][ T7353] r9:85b15400 r8:80234648 r7:dfb6de70 r6:20000b00 r5:00000a06 r4:8281cee0 [ 678.068526][ T7353] [<80234774>] (do_DataAbort) from [<80200b2c>] (__dabt_svc+0x4c/0x80) [ 678.068582][ T7353] Exception stack(0xdfb6de70 to 0xdfb6deb8) [ 678.068620][ T7353] de60: 20000b00 7effffff 00000000 b5003500 [ 678.068659][ T7353] de80: b5403587 20000b00 82c1e600 8541aa00 85c943c0 00000004 85b15400 dfb6df14 [ 678.068755][ T7353] dea0: a1000b03 dfb6dec0 81544028 81a09948 80000013 ffffffff [ 678.068794][ T7353] r8:85c943c0 r7:dfb6dea4 r6:ffffffff r5:80000013 r4:81a09948 [ 678.068814][ T7353] [<81543cf4>] (sock_ioctl) from [<8056cf18>] (sys_ioctl+0x130/0xba0) [ 678.068903][ T7353] r9:00000004 r8:85c943c0 r7:20000b00 r6:85c943c1 r5:00000000 r4:00008903 [ 678.068924][ T7353] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 678.068975][ T7353] Exception stack(0xdfb6dfa8 to 0xdfb6dff0) [ 678.069012][ T7353] dfa0: 00000000 00000000 00000004 00008903 20000b00 00000000 [ 678.069053][ T7353] dfc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 678.069083][ T7353] dfe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 678.069122][ T7353] r10:00000036 r9:85b15400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 678.069143][ T7353] r4:00000000 [ 683.594253][ T7391] FAULT_INJECTION: forcing a failure. [ 683.594253][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 683.594655][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.1.1049 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 683.594755][ T7391] Hardware name: ARM-Versatile Express [ 683.594782][ T7391] Call trace: [ 683.594839][ T7391] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 683.594964][ T7391] r7:83a90000 r6:00000000 r5:60000013 r4:822602a4 [ 683.594986][ T7391] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 683.595043][ T7391] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 683.595209][ T7391] r5:83a90000 r4:82917bc0 [ 683.595248][ T7391] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 683.595425][ T7391] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 683.595582][ T7391] r8:00000000 r7:83a90000 r6:00000cc0 r5:ffffffff r4:832c8240 [ 683.595622][ T7391] [<8051f3e4>] (should_failslab) from [<805033f4>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 683.595754][ T7391] [<805033a4>] (kmem_cache_alloc_node_noprof) from [<815508bc>] (__alloc_skb+0x138/0x160) [ 683.595862][ T7391] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:832c8240 r5:ffffffff [ 683.596007][ T7391] r4:828060c0 [ 683.596048][ T7391] [<81550784>] (__alloc_skb) from [<8166fbcc>] (netlink_alloc_large_skb+0x88/0xa0) [ 683.596136][ T7391] r8:00000000 r7:85d8e400 r6:00000014 r5:837e0500 r4:00000140 [ 683.596157][ T7391] [<8166fb44>] (netlink_alloc_large_skb) from [<81670314>] (netlink_sendmsg+0x134/0x444) [ 683.596237][ T7391] r5:837e0500 r4:dfcd9f20 [ 683.596483][ T7391] [<816701e0>] (netlink_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 683.596719][ T7391] r10:00000000 r9:dfcd9dc4 r8:dfcd9dc4 r7:00000000 r6:837e0500 r5:dfcd9f20 [ 683.596750][ T7391] r4:00000000 [ 683.596824][ T7391] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 683.596981][ T7391] r7:00000000 r6:837e0500 r5:00008086 r4:dfcd9f20 [ 683.597056][ T7391] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 683.597230][ T7391] r10:dfcd9e24 r9:20000180 r8:00008086 r7:00000000 r6:837e0500 r5:dfcd9f20 [ 683.597288][ T7391] r4:00000000 [ 683.597471][ T7391] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 683.597592][ T7391] r10:00000128 r9:83a90000 r8:85954180 r7:00008086 r6:20000180 r5:85954181 [ 683.597618][ T7391] r4:00000003 [ 683.597638][ T7391] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 683.597816][ T7391] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 683.597937][ T7391] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 683.598176][ T7391] Exception stack(0xdfcd9fa8 to 0xdfcd9ff0) [ 683.598269][ T7391] 9fa0: 00000000 00000000 00000003 20000180 00008086 00000000 [ 683.598364][ T7391] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f900bc [ 683.598420][ T7391] 9fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 689.090860][ T728] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 689.366753][ T728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.367266][ T728] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 689.385835][ T728] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.387823][ T728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.388127][ T728] usb 2-1: Product: syz [ 689.388182][ T728] usb 2-1: Manufacturer: syz [ 689.388473][ T728] usb 2-1: SerialNumber: syz [ 689.896067][ T728] usb 2-1: USB disconnect, device number 42 [ 691.233447][ T31] audit: type=1400 audit(691.140:300): avc: denied { nlmsg_read } for pid=7440 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 692.416034][ T7458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7458 comm=syz.0.1067 [ 692.824020][ T31] audit: type=1400 audit(692.730:301): avc: denied { accept } for pid=7460 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 696.226834][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7481 comm=syz.1.1075 [ 696.373598][ T31] audit: type=1400 audit(696.280:302): avc: denied { create } for pid=7482 comm="syz.1.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 696.377736][ T31] audit: type=1400 audit(696.280:303): avc: denied { module_request } for pid=7482 comm="syz.1.1076" kmod="net-pf-34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 696.940348][ T43] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 697.111593][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 697.113772][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.117258][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 697.120123][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.130921][ T43] usb 2-1: config 0 descriptor?? [ 697.240099][ T11] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 697.414432][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 697.414801][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.415482][ T11] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 697.415643][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.425089][ T11] usb 1-1: config 0 descriptor?? [ 697.592222][ T43] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 697.872413][ T7488] FAULT_INJECTION: forcing a failure. [ 697.872413][ T7488] name failslab, interval 1, probability 0, space 0, times 0 [ 697.873194][ T7488] CPU: 0 UID: 0 PID: 7488 Comm: syz.1.1078 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 697.873347][ T7488] Hardware name: ARM-Versatile Express [ 697.873373][ T7488] Call trace: [ 697.873472][ T7488] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 697.873669][ T7488] r7:00000c40 r6:00000000 r5:60000013 r4:822602a4 [ 697.873726][ T7488] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 697.873808][ T7488] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 697.873888][ T7488] r5:83a96c00 r4:82917bc0 [ 697.873925][ T7488] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 697.874011][ T7488] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 697.874091][ T7488] r8:83a96c00 r7:00000c40 r6:85c94b68 r5:00001000 r4:830016c0 [ 697.874184][ T7488] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 697.874284][ T7488] [<80503d48>] (__kmalloc_noprof) from [<807c34d4>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 697.874421][ T7488] r10:83a96c00 r9:8309e400 r8:00000000 r7:852f5110 r6:85c94b68 r5:00001000 [ 697.874484][ T7488] r4:00000000 [ 697.874509][ T7488] [<807c3498>] (tomoyo_realpath_from_path) from [<807bf618>] (tomoyo_path_number_perm+0xcc/0x22c) [ 697.874656][ T7488] r10:83a96c00 r9:00000000 r8:85c94b40 r7:801c4803 r6:00000004 r5:81cd6544 [ 697.874727][ T7488] r4:85c94b68 r3:826c0200 [ 697.874756][ T7488] [<807bf54c>] (tomoyo_path_number_perm) from [<807c3ef8>] (tomoyo_file_ioctl+0x1c/0x20) [ 697.874848][ T7488] r9:00000004 r8:85c94b40 r7:20000a80 r6:20000a80 r5:801c4803 r4:85c94b40 [ 697.874946][ T7488] [<807c3edc>] (tomoyo_file_ioctl) from [<8077074c>] (security_file_ioctl+0x64/0x1e4) [ 697.875072][ T7488] [<807706e8>] (security_file_ioctl) from [<8056ce34>] (sys_ioctl+0x4c/0xba0) [ 697.875196][ T7488] r7:20000a80 r6:85c94b41 r5:00000000 r4:801c4803 [ 697.875294][ T7488] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 697.875446][ T7488] Exception stack(0xdf9e9fa8 to 0xdf9e9ff0) [ 697.875693][ T7488] 9fa0: 00000000 00000000 00000004 801c4803 20000a80 00000000 [ 697.875828][ T7488] 9fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 697.875963][ T7488] 9fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 697.876108][ T7488] r10:00000036 r9:83a96c00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 697.876331][ T7488] r4:00000000 [ 697.897012][ T7488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.904630][ T43] usb 2-1: USB disconnect, device number 43 [ 697.912820][ T11] savu 0003:1E7D:2D5A.000E: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 698.124845][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.128156][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.172093][ T11] usb 1-1: USB disconnect, device number 43 [ 700.871150][ T31] audit: type=1400 audit(700.770:304): avc: denied { nlmsg_write } for pid=7556 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 700.961237][ T31] audit: type=1400 audit(700.860:305): avc: denied { write } for pid=7556 comm="syz.0.1085" path="socket:[13365]" dev="sockfs" ino=13365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 702.457310][ T7565] FAULT_INJECTION: forcing a failure. [ 702.457310][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.460811][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.0.1088 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 702.460988][ T7565] Hardware name: ARM-Versatile Express [ 702.461021][ T7565] Call trace: [ 702.461072][ T7565] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 702.461209][ T7565] r7:dfb0de20 r6:00000000 r5:60000013 r4:822602a4 [ 702.461237][ T7565] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 702.461303][ T7565] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 702.461371][ T7565] r5:83ad8c00 r4:8294f150 [ 702.461389][ T7565] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 702.461460][ T7565] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 702.461536][ T7565] r8:00040800 r7:dfb0de20 r6:20000940 r5:00000000 r4:dfb0df20 [ 702.461559][ T7565] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 702.461625][ T7565] [<80972440>] (should_fail_usercopy) from [<815457d0>] (copy_msghdr_from_user+0x50/0x130) [ 702.461851][ T7565] [<81545780>] (copy_msghdr_from_user) from [<81545928>] (___sys_sendmsg+0x78/0xd0) [ 702.461939][ T7565] r8:00040800 r7:00000000 r6:85435680 r5:dfb0df20 r4:dfb0de64 [ 702.461962][ T7565] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 702.462043][ T7565] r10:00000128 r9:83ad8c00 r8:85c94900 r7:00040800 r6:20000940 r5:85c94901 [ 702.462068][ T7565] r4:00000003 [ 702.462086][ T7565] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 702.462165][ T7565] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 702.462184][ T7565] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 702.462243][ T7565] Exception stack(0xdfb0dfa8 to 0xdfb0dff0) [ 702.462290][ T7565] dfa0: 00000000 00000000 00000003 20000940 00040800 00000000 [ 702.462333][ T7565] dfc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f300bc [ 702.462365][ T7565] dfe0: 76f2fec0 76f2feb0 0001948c 001322c0 [ 705.303780][ T7587] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7587 comm=syz.0.1098 [ 706.042373][ T7603] FAULT_INJECTION: forcing a failure. [ 706.042373][ T7603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.043611][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.1.1104 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 706.043775][ T7603] Hardware name: ARM-Versatile Express [ 706.043804][ T7603] Call trace: [ 706.043853][ T7603] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 706.043986][ T7603] r7:00000000 r6:00000000 r5:60000013 r4:822602a4 [ 706.044011][ T7603] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 706.044076][ T7603] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 706.044138][ T7603] r5:83adbc00 r4:8294f150 [ 706.044155][ T7603] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 706.044219][ T7603] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 706.044287][ T7603] r8:76f8ff30 r7:00000000 r6:00000000 r5:dfaf5f68 r4:00000002 [ 706.044310][ T7603] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 706.044366][ T7603] [<80972440>] (should_fail_usercopy) from [<8058e7a0>] (simple_read_from_buffer+0x80/0x13c) [ 706.044430][ T7603] [<8058e720>] (simple_read_from_buffer) from [<806086c4>] (proc_fail_nth_read+0xb8/0x108) [ 706.044501][ T7603] r10:00000001 r9:8060860c r8:00000002 r7:dfaf5f68 r6:0000000f r5:76f8ff30 [ 706.044524][ T7603] r4:83adbc00 r3:dfaf5e9f [ 706.044539][ T7603] [<8060860c>] (proc_fail_nth_read) from [<805535bc>] (vfs_read+0x98/0x324) [ 706.044617][ T7603] r8:76f8ff30 r7:dfaf5f68 r6:83adbc00 r5:0000000f r4:85cd4c00 [ 706.044638][ T7603] [<80553524>] (vfs_read) from [<805542cc>] (ksys_read+0x74/0xe8) [ 706.044708][ T7603] r10:00000003 r9:83adbc00 r8:8020029c r7:00000000 r6:00000000 r5:85cd4c00 [ 706.044729][ T7603] r4:85cd4c03 [ 706.044746][ T7603] [<80554258>] (ksys_read) from [<80554350>] (sys_read+0x10/0x14) [ 706.044809][ T7603] r7:00000003 r6:00000004 r5:76f8ff30 r4:0000000f [ 706.044826][ T7603] [<80554340>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 706.044880][ T7603] Exception stack(0xdfaf5fa8 to 0xdfaf5ff0) [ 706.044922][ T7603] 5fa0: 0000000f 76f8ff30 00000004 76f8ff30 0000000f 00000000 [ 706.044957][ T7603] 5fc0: 0000000f 76f8ff30 00000004 00000003 002e0000 00000000 00006364 76f900bc [ 706.044988][ T7603] 5fe0: 00000158 76f8fed0 000d80f4 00130194 [ 708.059779][ T5008] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 708.235219][ T5008] usb 2-1: not running at top speed; connect to a high speed hub [ 708.264281][ T5008] usb 2-1: config 4 has an invalid interface number: 59 but max is 1 [ 708.265769][ T5008] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 708.271119][ T5008] usb 2-1: config 4 has an invalid interface number: 106 but max is 1 [ 708.274768][ T5008] usb 2-1: config 4 has no interface number 0 [ 708.277939][ T5008] usb 2-1: config 4 has no interface number 1 [ 708.283799][ T5008] usb 2-1: config 4 interface 59 altsetting 255 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 708.288254][ T5008] usb 2-1: config 4 interface 59 altsetting 255 endpoint 0x4 has invalid maxpacket 44505, setting to 64 [ 708.292677][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 708.296202][ T5008] usb 2-1: config 4 interface 59 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 708.300947][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 708.305684][ T5008] usb 2-1: config 4 interface 59 altsetting 255 endpoint 0x86 has invalid maxpacket 20867, setting to 64 [ 708.308258][ T5008] usb 2-1: config 4 interface 59 altsetting 255 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 708.311053][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 708.312382][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 708.313652][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 708.316535][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 708.318073][ T5008] usb 2-1: config 4 interface 59 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 708.329540][ T5008] usb 2-1: config 4 interface 106 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 708.330021][ T5008] usb 2-1: config 4 interface 106 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 708.330274][ T5008] usb 2-1: config 4 interface 59 has no altsetting 0 [ 708.330463][ T5008] usb 2-1: config 4 interface 106 has no altsetting 0 [ 708.359129][ T5008] usb 2-1: New USB device found, idVendor=0af0, idProduct=6200, bcdDevice=29.45 [ 708.359563][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.359993][ T5008] usb 2-1: Product: 砸ܘ콼풝䫗丄곊蝧嵾翐㺬庣靠㕬걆笜귳芁쩧ᔈ몱鉥䆴ⱛ㦐灶蛘핎ꋞ꯺慾Ƿȥ枠῕땇핑즶푴祫ꨈ܄ꕈ팿ﻟ폣歹寉傊⶯㾎爂髨䬇葐䍍댨랂鎺궨말ௌ㹺洺ಠ搛䧞䥀笡貑톽ㇼ⃟৖⯪᭣㲴쁑 [ 708.360222][ T5008] usb 2-1: Manufacturer: 莋댥ገ榳玬幅呤ᴾ绥⭓렄曜㵺嗖ﴭ묕崣ᅈ쌗绻娌쇇示㑜Ṟ펊鵰喁솋⅋䷁낑❷겿奕푈僾ⴶ躨疦冺טꀎ௖酯ᯊ䄩ꊏ扝┰⑵嬁㺠픅苡諔錝䀘ꈐ驱謾鷒蘐怚齂빿 [ 708.360404][ T5008] usb 2-1: SerialNumber: 鑝웰瑃喽ﯸ﹢ᗥ声兽墒졚ꎜ㈲ᗈ怚恫߉뢥欴頻㥫ᄤ쨲䣆矲档䡍놙噒者쨙靖Ꝁ쓚鑛듻໤祰嶭뙂槹쓊闀澾뱴节嫑奙訛劄ᯊ쯅祔ࢩ斸⏛勳޿㥊ሱ啫Ố砛ﺧ踲ᕝ﫮┋婥ⷿ [ 708.386303][ T7615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.387725][ T7615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.392543][ T7615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.393660][ T7615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.846898][ T5008] option 2-1:4.59: GSM modem (1-port) converter detected [ 709.058648][ T5008] option 2-1:4.106: GSM modem (1-port) converter detected [ 712.437352][ T31] audit: type=1400 audit(712.340:306): avc: denied { read write } for pid=7634 comm="syz.0.1112" dev="anon_inodefs" ino=13008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 712.443221][ T31] audit: type=1400 audit(712.350:307): avc: denied { open } for pid=7634 comm="syz.0.1112" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 712.961039][ T7637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7637 comm=syz.0.1113 [ 718.150065][ T31] audit: type=1400 audit(4813.054:308): avc: denied { accept } for pid=7663 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 718.283391][ T31] audit: type=1400 audit(4813.184:309): avc: denied { create } for pid=7666 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 720.560728][ T31] audit: type=1400 audit(4815.454:310): avc: denied { map } for pid=7690 comm="syz.0.1135" path="socket:[13098]" dev="sockfs" ino=13098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 722.651925][ T5008] usb 2-1: USB disconnect, device number 44 [ 722.690803][ T5008] option 2-1:4.59: device disconnected [ 722.702936][ T5008] option 2-1:4.106: device disconnected [ 722.834529][ T31] audit: type=1400 audit(4817.734:311): avc: denied { getopt } for pid=7718 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 722.846457][ T31] audit: type=1400 audit(4817.744:312): avc: denied { ioctl } for pid=7718 comm="syz.1.1142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13656 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 722.854239][ T31] audit: type=1400 audit(4817.754:313): avc: denied { read } for pid=7718 comm="syz.1.1142" path="socket:[13649]" dev="sockfs" ino=13649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 724.141880][ T5008] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 724.279991][ T5008] usb 2-1: device descriptor read/64, error -71 [ 724.540011][ T5008] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 724.689965][ T5008] usb 2-1: device descriptor read/64, error -71 [ 724.800785][ T5008] usb usb2-port1: attempt power cycle [ 725.139530][ T5008] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 725.163187][ T5008] usb 2-1: device descriptor read/8, error -71 [ 725.409771][ T5008] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 725.431210][ T5008] usb 2-1: device descriptor read/8, error -71 [ 725.540884][ T5008] usb usb2-port1: unable to enumerate USB device [ 728.110252][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.111841][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.132602][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.135902][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.210605][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.213222][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.225029][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.230204][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.330553][ T5008] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 728.489859][ T5008] usb 1-1: device descriptor read/64, error -71 [ 728.730676][ T5008] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 728.900345][ T5008] usb 1-1: device descriptor read/64, error -71 [ 729.011793][ T5008] usb usb1-port1: attempt power cycle [ 729.360372][ T5008] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 729.392629][ T5008] usb 1-1: device descriptor read/8, error -71 [ 729.651664][ T5008] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 729.685146][ T5008] usb 1-1: device descriptor read/8, error -71 [ 729.800770][ T5008] usb usb1-port1: unable to enumerate USB device [ 735.026340][ T7780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7780 comm=syz.1.1158 [ 738.601510][ T7803] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 738.604374][ T31] audit: type=1400 audit(4833.504:314): avc: denied { relabelfrom } for pid=7801 comm="syz.0.1166" name="CAN_J1939" dev="sockfs" ino=13765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 738.608276][ T31] audit: type=1400 audit(4833.504:315): avc: denied { relabelto } for pid=7801 comm="syz.0.1166" name="CAN_J1939" dev="sockfs" ino=13765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=can_socket permissive=1 trawcon="system_u:object_r:event_device_t:s0" [ 741.301723][ T31] audit: type=1400 audit(4836.194:316): avc: denied { create } for pid=7812 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 741.890292][ T7843] FAULT_INJECTION: forcing a failure. [ 741.890292][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.890718][ T7843] CPU: 1 UID: 0 PID: 7843 Comm: syz.1.1174 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 741.890816][ T7843] Hardware name: ARM-Versatile Express [ 741.890847][ T7843] Call trace: [ 741.890900][ T7843] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 741.891064][ T7843] r7:dfd55e20 r6:00000000 r5:60000013 r4:822602a4 [ 741.891177][ T7843] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 741.891414][ T7843] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 741.891608][ T7843] r5:84a22400 r4:8294f150 [ 741.891683][ T7843] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 741.891855][ T7843] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 741.892025][ T7843] r8:24040090 r7:dfd55e20 r6:200005c0 r5:00000000 r4:dfd55f20 [ 741.892055][ T7843] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 741.892161][ T7843] [<80972440>] (should_fail_usercopy) from [<815457d0>] (copy_msghdr_from_user+0x50/0x130) [ 741.892229][ T7843] [<81545780>] (copy_msghdr_from_user) from [<81545928>] (___sys_sendmsg+0x78/0xd0) [ 741.892369][ T7843] r8:24040090 r7:00000000 r6:837e6a00 r5:dfd55f20 r4:dfd55e64 [ 741.892486][ T7843] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 741.892842][ T7843] r10:00000128 r9:84a22400 r8:85f98c00 r7:24040090 r6:200005c0 r5:85f98c01 [ 741.892979][ T7843] r4:00000003 [ 741.893043][ T7843] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 741.893255][ T7843] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 741.893277][ T7843] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 741.893458][ T7843] Exception stack(0xdfd55fa8 to 0xdfd55ff0) [ 741.893538][ T7843] 5fa0: 00000000 00000000 00000003 200005c0 24040090 00000000 [ 741.893773][ T7843] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f900bc [ 741.893854][ T7843] 5fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 742.110957][ T7847] FAULT_INJECTION: forcing a failure. [ 742.110957][ T7847] name failslab, interval 1, probability 0, space 0, times 0 [ 742.111406][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: syz.0.1176 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 742.111502][ T7847] Hardware name: ARM-Versatile Express [ 742.111533][ T7847] Call trace: [ 742.111589][ T7847] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 742.111707][ T7847] r7:00000d40 r6:00000000 r5:60000013 r4:822602a4 [ 742.111728][ T7847] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 742.111787][ T7847] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 742.111903][ T7847] r5:85ad6c00 r4:82917bc0 [ 742.111923][ T7847] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 742.112048][ T7847] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 742.112203][ T7847] r8:85ad6c00 r7:00000d40 r6:85f986e8 r5:0000001c r4:83001240 [ 742.112415][ T7847] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 742.112641][ T7847] [<80503d48>] (__kmalloc_noprof) from [<807c33dc>] (tomoyo_encode2+0x64/0xf0) [ 742.112895][ T7847] r10:00000fff r9:8337a800 r8:00000000 r7:834c8880 r6:85f986e8 r5:85aa1ffc [ 742.112937][ T7847] r4:85aa1feb [ 742.113006][ T7847] [<807c3378>] (tomoyo_encode2) from [<807c348c>] (tomoyo_encode+0x24/0x30) [ 742.113282][ T7847] r9:8337a800 r8:00000000 r7:834c8880 r6:85f986e8 r5:00001000 r4:85aa1fec [ 742.113311][ T7847] [<807c3468>] (tomoyo_encode) from [<807c3518>] (tomoyo_realpath_from_path+0x80/0x17c) [ 742.113430][ T7847] r5:00001000 r4:85aa1000 [ 742.113467][ T7847] [<807c3498>] (tomoyo_realpath_from_path) from [<807bf618>] (tomoyo_path_number_perm+0xcc/0x22c) [ 742.113545][ T7847] r10:85ad6c00 r9:00000000 r8:85f986c0 r7:00005450 r6:00000004 r5:81cd6544 [ 742.113571][ T7847] r4:85f986e8 r3:826c0200 [ 742.113598][ T7847] [<807bf54c>] (tomoyo_path_number_perm) from [<807c3ef8>] (tomoyo_file_ioctl+0x1c/0x20) [ 742.113710][ T7847] r9:00000003 r8:85f986c0 r7:00000000 r6:00000000 r5:00005450 r4:85f986c0 [ 742.113735][ T7847] [<807c3edc>] (tomoyo_file_ioctl) from [<8077074c>] (security_file_ioctl+0x64/0x1e4) [ 742.113796][ T7847] [<807706e8>] (security_file_ioctl) from [<8056ce34>] (sys_ioctl+0x4c/0xba0) [ 742.113914][ T7847] r7:00000000 r6:85f986c1 r5:00000000 r4:00005450 [ 742.114045][ T7847] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 742.114186][ T7847] Exception stack(0xdfd65fa8 to 0xdfd65ff0) [ 742.114334][ T7847] 5fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 742.114456][ T7847] 5fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f510bc [ 742.114548][ T7847] 5fe0: 76f50ec0 76f50eb0 0001948c 001322c0 [ 742.114825][ T7847] r10:00000036 r9:85ad6c00 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 742.114960][ T7847] r4:00000000 [ 742.142297][ T7847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.814698][ T7860] FAULT_INJECTION: forcing a failure. [ 742.814698][ T7860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.824100][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.0.1181 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 742.824271][ T7860] Hardware name: ARM-Versatile Express [ 742.824301][ T7860] Call trace: [ 742.824350][ T7860] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 742.824480][ T7860] r7:00000000 r6:00000000 r5:60000013 r4:822602a4 [ 742.824504][ T7860] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 742.824565][ T7860] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 742.824644][ T7860] r5:83abc800 r4:8294f150 [ 742.824664][ T7860] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 742.824733][ T7860] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 742.824808][ T7860] r8:76f50f30 r7:00000000 r6:00000000 r5:dfd4df68 r4:00000002 [ 742.824832][ T7860] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 742.824894][ T7860] [<80972440>] (should_fail_usercopy) from [<8058e7a0>] (simple_read_from_buffer+0x80/0x13c) [ 742.824965][ T7860] [<8058e720>] (simple_read_from_buffer) from [<806086c4>] (proc_fail_nth_read+0xb8/0x108) [ 742.825048][ T7860] r10:00000001 r9:8060860c r8:00000002 r7:dfd4df68 r6:0000000f r5:76f50f30 [ 742.825077][ T7860] r4:83abc800 r3:dfd4de9f [ 742.825097][ T7860] [<8060860c>] (proc_fail_nth_read) from [<805535bc>] (vfs_read+0x98/0x324) [ 742.825175][ T7860] r8:76f50f30 r7:dfd4df68 r6:83abc800 r5:0000000f r4:85d7a240 [ 742.825199][ T7860] [<80553524>] (vfs_read) from [<805542cc>] (ksys_read+0x74/0xe8) [ 742.825282][ T7860] r10:00000003 r9:83abc800 r8:8020029c r7:00000000 r6:00000000 r5:85d7a240 [ 742.825304][ T7860] r4:85d7a243 [ 742.825319][ T7860] [<80554258>] (ksys_read) from [<80554350>] (sys_read+0x10/0x14) [ 742.825387][ T7860] r7:00000003 r6:00000005 r5:76f50f30 r4:0000000f [ 742.825410][ T7860] [<80554340>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 742.825469][ T7860] Exception stack(0xdfd4dfa8 to 0xdfd4dff0) [ 742.825515][ T7860] dfa0: 0000000f 76f50f30 00000005 76f50f30 0000000f 00000000 [ 742.825557][ T7860] dfc0: 0000000f 76f50f30 00000005 00000003 002e0000 00000000 00006364 76f510bc [ 742.825707][ T7860] dfe0: 00000158 76f50ed0 000d80f4 00130194 [ 743.200419][ T11] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 743.330113][ T11] usb 1-1: device descriptor read/64, error -71 [ 743.579903][ T11] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 743.709783][ T11] usb 1-1: device descriptor read/64, error -71 [ 743.820188][ T11] usb usb1-port1: attempt power cycle [ 744.170050][ T11] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 744.192406][ T11] usb 1-1: device descriptor read/8, error -71 [ 744.440277][ T11] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 744.462708][ T11] usb 1-1: device descriptor read/8, error -71 [ 744.570780][ T11] usb usb1-port1: unable to enumerate USB device [ 745.125170][ T7874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7874 comm=syz.1.1186 [ 749.639699][ T102] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 749.810683][ T102] usb 2-1: Using ep0 maxpacket: 8 [ 749.841536][ T102] usb 2-1: config 0 has no interfaces? [ 749.884068][ T102] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 749.884399][ T102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.884729][ T102] usb 2-1: Product: syz [ 749.884894][ T102] usb 2-1: Manufacturer: syz [ 749.884949][ T102] usb 2-1: SerialNumber: syz [ 749.898367][ T102] usb 2-1: config 0 descriptor?? [ 750.121142][ T7893] FAULT_INJECTION: forcing a failure. [ 750.121142][ T7893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.121501][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.1.1190 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 750.121602][ T7893] Hardware name: ARM-Versatile Express [ 750.121629][ T7893] Call trace: [ 750.121681][ T7893] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 750.121800][ T7893] r7:20000200 r6:00000000 r5:60000013 r4:822602a4 [ 750.121821][ T7893] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 750.121875][ T7893] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 750.122167][ T7893] r5:84a22400 r4:8294f150 [ 750.122366][ T7893] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 750.122549][ T7893] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 750.122809][ T7893] r8:85f98d80 r7:20000200 r6:00000001 r5:20000200 r4:dfd81edc [ 750.122871][ T7893] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 750.123048][ T7893] [<80972440>] (should_fail_usercopy) from [<810549c8>] (raw_alloc_io_data+0x1c/0xe4) [ 750.123414][ T7893] [<810549ac>] (raw_alloc_io_data) from [<81055238>] (raw_ioctl+0x7a8/0x1094) [ 750.123708][ T7893] r7:20000200 r6:20000200 r5:00000000 r4:84e00000 [ 750.123997][ T7893] [<81054a90>] (raw_ioctl) from [<8056cf18>] (sys_ioctl+0x130/0xba0) [ 750.124263][ T7893] r10:84a22400 r9:00000003 r8:85f98d80 r7:20000200 r6:85f98d81 r5:00000000 [ 750.124302][ T7893] r4:40085503 [ 750.124364][ T7893] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 750.124742][ T7893] Exception stack(0xdfd81fa8 to 0xdfd81ff0) [ 750.124922][ T7893] 1fa0: 00000000 00000000 00000003 40085503 20000200 00000000 [ 750.125461][ T7893] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 750.125526][ T7893] 1fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 750.125632][ T7893] r10:00000036 r9:84a22400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 750.125720][ T7893] r4:00000000 [ 750.134847][ T102] usb 2-1: USB disconnect, device number 49 [ 751.272988][ T7911] binder: Unknown parameter 'fowner>00000000000000000000' [ 753.312370][ T2967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.391993][ T2967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.441380][ T2967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.532386][ T2967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.756303][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.765953][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.774911][ T2967] bond0 (unregistering): Released all slaves [ 753.870993][ T2967] hsr_slave_0: left promiscuous mode [ 753.873879][ T2967] hsr_slave_1: left promiscuous mode [ 753.890825][ T2967] veth1_macvtap: left promiscuous mode [ 753.891923][ T2967] veth0_macvtap: left promiscuous mode [ 753.892694][ T2967] veth1_vlan: left promiscuous mode [ 753.894656][ T2967] veth0_vlan: left promiscuous mode [ 754.878133][ T7961] FAULT_INJECTION: forcing a failure. [ 754.878133][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 754.878565][ T7961] CPU: 1 UID: 0 PID: 7961 Comm: syz.1.1200 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 754.878682][ T7961] Hardware name: ARM-Versatile Express [ 754.878783][ T7961] Call trace: [ 754.878859][ T7961] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 754.879047][ T7961] r7:00000c40 r6:00000000 r5:60000013 r4:822602a4 [ 754.879147][ T7961] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 754.879258][ T7961] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 754.879371][ T7961] r5:84a25400 r4:82917bc0 [ 754.879410][ T7961] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 754.879548][ T7961] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 754.879759][ T7961] r8:84a25400 r7:00000c40 r6:859547a8 r5:00001000 r4:830016c0 [ 754.879901][ T7961] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 754.879969][ T7961] [<80503d48>] (__kmalloc_noprof) from [<807c34d4>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 754.880057][ T7961] r10:84a25400 r9:83351000 r8:00000000 r7:852eacc0 r6:859547a8 r5:00001000 [ 754.880080][ T7961] r4:00000000 [ 754.880096][ T7961] [<807c3498>] (tomoyo_realpath_from_path) from [<807bf618>] (tomoyo_path_number_perm+0xcc/0x22c) [ 754.880172][ T7961] r10:84a25400 r9:00000000 r8:85954780 r7:00008902 r6:00000004 r5:81cd6544 [ 754.880200][ T7961] r4:859547a8 r3:826c0200 [ 754.880217][ T7961] [<807bf54c>] (tomoyo_path_number_perm) from [<807c3ef8>] (tomoyo_file_ioctl+0x1c/0x20) [ 754.880291][ T7961] r9:00000003 r8:85954780 r7:20001280 r6:20001280 r5:00008902 r4:85954780 [ 754.880311][ T7961] [<807c3edc>] (tomoyo_file_ioctl) from [<8077074c>] (security_file_ioctl+0x64/0x1e4) [ 754.880371][ T7961] [<807706e8>] (security_file_ioctl) from [<8056ce34>] (sys_ioctl+0x4c/0xba0) [ 754.880440][ T7961] r7:20001280 r6:85954781 r5:00000000 r4:00008902 [ 754.880460][ T7961] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 754.880517][ T7961] Exception stack(0xdfd35fa8 to 0xdfd35ff0) [ 754.880561][ T7961] 5fa0: 00000000 00000000 00000003 00008902 20001280 00000000 [ 754.880606][ T7961] 5fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76f900bc [ 754.880639][ T7961] 5fe0: 76f8fec0 76f8feb0 0001948c 001322c0 [ 754.880680][ T7961] r10:00000036 r9:84a25400 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 754.880699][ T7961] r4:00000000 [ 754.897769][ T7961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 755.290663][ T7970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7970 comm=syz.1.1201 [ 757.051760][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.064365][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.052528][ T7926] hsr_slave_0: entered promiscuous mode [ 758.055432][ T7926] hsr_slave_1: entered promiscuous mode [ 758.793929][ T7926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 758.805783][ T7926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 758.816076][ T7926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 758.828388][ T7926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 759.936234][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.190283][ T7926] veth0_vlan: entered promiscuous mode [ 764.252657][ T7926] veth1_vlan: entered promiscuous mode [ 764.358093][ T7926] veth0_macvtap: entered promiscuous mode [ 764.375711][ T7926] veth1_macvtap: entered promiscuous mode [ 764.487653][ T7928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.487999][ T7928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.493358][ T7928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.493552][ T7928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.101385][ T8414] FAULT_INJECTION: forcing a failure. [ 768.101385][ T8414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.104292][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.0.1213 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 768.104436][ T8414] Hardware name: ARM-Versatile Express [ 768.104464][ T8414] Call trace: [ 768.104508][ T8414] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 768.104655][ T8414] r7:20000180 r6:00000000 r5:60000013 r4:822602a4 [ 768.104675][ T8414] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 768.104738][ T8414] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 768.104804][ T8414] r5:83a96c00 r4:8294f150 [ 768.104825][ T8414] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 768.104895][ T8414] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 768.104975][ T8414] r8:00000000 r7:20000180 r6:847dfd40 r5:00000000 r4:e0489f20 [ 768.104997][ T8414] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 768.105060][ T8414] [<80972440>] (should_fail_usercopy) from [<808b5d9c>] (_copy_from_iter+0x6c/0x7c8) [ 768.105132][ T8414] [<808b5d30>] (_copy_from_iter) from [<8167036c>] (netlink_sendmsg+0x18c/0x444) [ 768.105221][ T8414] r10:00000000 r9:00000000 r8:e0489f30 r7:848d1400 r6:00000014 r5:85c889c0 [ 768.105245][ T8414] r4:e0489f20 [ 768.105263][ T8414] [<816701e0>] (netlink_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 768.105347][ T8414] r10:00000000 r9:e0489dc4 r8:e0489dc4 r7:00000000 r6:837e1b80 r5:e0489f20 [ 768.105370][ T8414] r4:00000000 [ 768.105386][ T8414] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 768.105455][ T8414] r7:00000000 r6:837e1b80 r5:00000020 r4:e0489f20 [ 768.105473][ T8414] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 768.105546][ T8414] r10:e0489e24 r9:200002c0 r8:00000020 r7:00000000 r6:837e1b80 r5:e0489f20 [ 768.105583][ T8414] r4:00000000 [ 768.105600][ T8414] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 768.105672][ T8414] r10:00000128 r9:83a96c00 r8:85cd4540 r7:00000020 r6:200002c0 r5:85cd4541 [ 768.105693][ T8414] r4:00000003 [ 768.105711][ T8414] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 768.105790][ T8414] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 768.105810][ T8414] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 768.105870][ T8414] Exception stack(0xe0489fa8 to 0xe0489ff0) [ 768.105915][ T8414] 9fa0: 00000000 00000000 00000003 200002c0 00000020 00000000 [ 768.105957][ T8414] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fe50bc [ 768.105988][ T8414] 9fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 768.528050][ T31] audit: type=1400 audit(4863.424:317): avc: denied { accept } for pid=8415 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 769.608064][ T7928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.699864][ T7928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.776312][ T7928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.875129][ T7928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.393830][ T7928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.410308][ T7928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.415541][ T7928] bond0 (unregistering): Released all slaves [ 770.501595][ T7928] hsr_slave_0: left promiscuous mode [ 770.506107][ T7928] hsr_slave_1: left promiscuous mode [ 770.541052][ T7928] veth1_macvtap: left promiscuous mode [ 770.541442][ T7928] veth0_macvtap: left promiscuous mode [ 770.541843][ T7928] veth1_vlan: left promiscuous mode [ 770.542148][ T7928] veth0_vlan: left promiscuous mode [ 773.121901][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.130693][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.724270][ T8436] hsr_slave_0: entered promiscuous mode [ 774.726288][ T8436] hsr_slave_1: entered promiscuous mode [ 774.743302][ T8436] debugfs: 'hsr0' already exists in 'hsr' [ 774.743691][ T8436] Cannot create hsr debugfs directory [ 775.670900][ T8436] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.687010][ T8436] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 775.720076][ T8436] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 775.732829][ T8436] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 777.119708][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.009798][ T31] audit: type=1400 audit(4873.904:318): avc: denied { shutdown } for pid=8819 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 780.106243][ T8436] veth0_vlan: entered promiscuous mode [ 780.138758][ T8436] veth1_vlan: entered promiscuous mode [ 780.263172][ T8436] veth0_macvtap: entered promiscuous mode [ 780.295718][ T8436] veth1_macvtap: entered promiscuous mode [ 780.428599][ T2967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.431196][ T2967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.434017][ T2967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.435212][ T2967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.531722][ T8883] FAULT_INJECTION: forcing a failure. [ 780.531722][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 780.539655][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.0.1224 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 780.539819][ T8883] Hardware name: ARM-Versatile Express [ 780.539849][ T8883] Call trace: [ 780.539896][ T8883] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 780.540030][ T8883] r7:85ab9800 r6:00000000 r5:60000113 r4:822602a4 [ 780.540055][ T8883] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 780.540119][ T8883] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 780.540179][ T8883] r5:85ab9800 r4:82917bc0 [ 780.540199][ T8883] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 780.540266][ T8883] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 780.540346][ T8883] r8:00000000 r7:85ab9800 r6:00000820 r5:848506c0 r4:832c8240 [ 780.540369][ T8883] [<8051f3e4>] (should_failslab) from [<80503a60>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 780.540429][ T8883] [<80503a14>] (kmem_cache_alloc_noprof) from [<81556d68>] (skb_clone+0x60/0x1c8) [ 780.540513][ T8883] r10:848506c0 r9:00000000 r8:00000000 r7:00000001 r6:84fc7c80 r5:848506c0 [ 780.540534][ T8883] r4:00000820 [ 780.540551][ T8883] [<81556d08>] (skb_clone) from [<818ec594>] (can_send+0xe8/0x388) [ 780.540618][ T8883] r5:00000010 r4:848506c0 [ 780.540637][ T8883] [<818ec4ac>] (can_send) from [<818ff1c8>] (isotp_sendmsg+0x3f4/0x820) [ 780.540713][ T8883] r9:00000000 r8:00000000 r7:00000000 r6:84d00000 r5:84d02000 r4:84d00280 [ 780.540733][ T8883] [<818fedd4>] (isotp_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 780.540817][ T8883] r10:00000000 r9:ea8a5dc4 r8:ea8a5dc4 r7:00000000 r6:8541bb80 r5:ea8a5f20 [ 780.540839][ T8883] r4:00000000 [ 780.540856][ T8883] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 780.540925][ T8883] r7:00000000 r6:8541bb80 r5:00040804 r4:ea8a5f20 [ 780.540944][ T8883] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 780.541013][ T8883] r10:ea8a5e24 r9:20000200 r8:00040804 r7:00000000 r6:8541bb80 r5:ea8a5f20 [ 780.541035][ T8883] r4:00000000 [ 780.541051][ T8883] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 780.541121][ T8883] r10:00000128 r9:85ab9800 r8:85f980c0 r7:00040804 r6:20000200 r5:85f980c1 [ 780.541145][ T8883] r4:00000003 [ 780.541162][ T8883] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 780.541244][ T8883] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 780.541263][ T8883] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 780.541325][ T8883] Exception stack(0xea8a5fa8 to 0xea8a5ff0) [ 780.541375][ T8883] 5fa0: 00000000 00000000 00000003 20000200 00040804 00000000 [ 780.541420][ T8883] 5fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fe50bc [ 780.541454][ T8883] 5fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 780.589558][ T8883] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 781.400627][ T8902] FAULT_INJECTION: forcing a failure. [ 781.400627][ T8902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.400997][ T8902] CPU: 1 UID: 0 PID: 8902 Comm: syz.1.1228 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 781.401093][ T8902] Hardware name: ARM-Versatile Express [ 781.401119][ T8902] Call trace: [ 781.401162][ T8902] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 781.401384][ T8902] r7:20000740 r6:00000000 r5:60000013 r4:822602a4 [ 781.401462][ T8902] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 781.401618][ T8902] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 781.401827][ T8902] r5:85abec00 r4:8294f150 [ 781.402034][ T8902] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 781.402345][ T8902] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 781.402518][ T8902] r8:00000000 r7:20000740 r6:8413c240 r5:00000000 r4:ea8c1f20 [ 781.402687][ T8902] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 781.402752][ T8902] [<80972440>] (should_fail_usercopy) from [<808b5d9c>] (_copy_from_iter+0x6c/0x7c8) [ 781.402949][ T8902] [<808b5d30>] (_copy_from_iter) from [<8167036c>] (netlink_sendmsg+0x18c/0x444) [ 781.403078][ T8902] r10:00000000 r9:00000000 r8:ea8c1f30 r7:848dc000 r6:00000028 r5:85c920c0 [ 781.403678][ T8902] r4:ea8c1f20 [ 781.403736][ T8902] [<816701e0>] (netlink_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 781.404189][ T8902] r10:00000000 r9:ea8c1dc4 r8:ea8c1dc4 r7:00000000 r6:837e7b80 r5:ea8c1f20 [ 781.404272][ T8902] r4:00000000 [ 781.404296][ T8902] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 781.404559][ T8902] r7:00000000 r6:837e7b80 r5:04000800 r4:ea8c1f20 [ 781.404587][ T8902] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 781.404771][ T8902] r10:ea8c1e24 r9:20000180 r8:04000800 r7:00000000 r6:837e7b80 r5:ea8c1f20 [ 781.404954][ T8902] r4:00000000 [ 781.404979][ T8902] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 781.405357][ T8902] r10:00000128 r9:85abec00 r8:841acd80 r7:04000800 r6:20000180 r5:841acd81 [ 781.405421][ T8902] r4:00000003 [ 781.405475][ T8902] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 781.405634][ T8902] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 781.405720][ T8902] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 781.405865][ T8902] Exception stack(0xea8c1fa8 to 0xea8c1ff0) [ 781.405970][ T8902] 1fa0: 00000000 00000000 00000003 20000180 04000800 00000000 [ 781.406042][ T8902] 1fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76f450bc [ 781.406110][ T8902] 1fe0: 76f44ec0 76f44eb0 0001948c 001322c0 [ 781.837995][ T8910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8910 comm=syz.0.1230 [ 784.807583][ T8937] FAULT_INJECTION: forcing a failure. [ 784.807583][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 784.811477][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.1.1235 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 784.811615][ T8937] Hardware name: ARM-Versatile Express [ 784.811644][ T8937] Call trace: [ 784.811689][ T8937] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 784.811813][ T8937] r7:838e4800 r6:00000000 r5:60000013 r4:822602a4 [ 784.811836][ T8937] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 784.811897][ T8937] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 784.811959][ T8937] r5:838e4800 r4:82917bc0 [ 784.811977][ T8937] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 784.812035][ T8937] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 784.812112][ T8937] r8:00000000 r7:838e4800 r6:00000cc0 r5:00020000 r4:83002780 [ 784.812131][ T8937] [<8051f3e4>] (should_failslab) from [<80503a60>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 784.812183][ T8937] [<80503a14>] (kmem_cache_alloc_noprof) from [<80252c30>] (copy_process+0xd30/0x16f8) [ 784.812261][ T8937] r10:ea8b1f30 r9:84baed80 r8:00000000 r7:ea8b1ea4 r6:838e4800 r5:00020000 [ 784.812283][ T8937] r4:83ad8c00 [ 784.812300][ T8937] [<80251f00>] (copy_process) from [<8025373c>] (kernel_clone+0xac/0x3ec) [ 784.812375][ T8937] r10:838e4800 r9:838e4800 r8:00000000 r7:00000000 r6:ea8b1f30 r5:200009c0 [ 784.812397][ T8937] r4:00020000 [ 784.812416][ T8937] [<80253690>] (kernel_clone) from [<80253e30>] (sys_clone+0x78/0x9c) [ 784.812497][ T8937] r10:00000078 r9:838e4800 r8:8020029c r7:200008c0 r6:00000000 r5:200009c0 [ 784.812520][ T8937] r4:00000000 [ 784.812537][ T8937] [<80253db8>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 784.812600][ T8937] Exception stack(0xea8b1fa8 to 0xea8b1ff0) [ 784.812644][ T8937] 1fa0: 20000a40 200009c0 00020000 200008c0 200009c0 00000000 [ 784.812682][ T8937] 1fc0: 20000a40 200009c0 00000006 00000078 002e0000 00000000 00006364 76f450bc [ 784.812712][ T8937] 1fe0: 76f44e98 76f44e88 00019668 001322c0 [ 784.812747][ T8937] r7:00000078 r6:00000006 r5:200009c0 r4:20000a40 [ 784.846575][ T31] audit: type=1400 audit(4879.744:319): avc: denied { map } for pid=8908 comm="syz.0.1230" path="/dev/adsp1" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.707763][ T8963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8963 comm=syz.1.1244 [ 788.857053][ T31] audit: type=1400 audit(4883.754:320): avc: denied { shutdown } for pid=8964 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 788.903040][ T31] audit: type=1400 audit(4883.804:321): avc: denied { create } for pid=8964 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.610696][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8977 comm=syz.1.1250 [ 795.731852][ T9013] FAULT_INJECTION: forcing a failure. [ 795.731852][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.732291][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.0.1261 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 795.732398][ T9013] Hardware name: ARM-Versatile Express [ 795.732428][ T9013] Call trace: [ 795.732471][ T9013] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 795.732726][ T9013] r7:20000880 r6:00000000 r5:60000013 r4:822602a4 [ 795.732768][ T9013] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 795.732906][ T9013] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 795.732971][ T9013] r5:83aad400 r4:8294f150 [ 795.733053][ T9013] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 795.733138][ T9013] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 795.733299][ T9013] r8:00000000 r7:20000880 r6:85b823a3 r5:00000000 r4:00000000 [ 795.733483][ T9013] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 795.733641][ T9013] [<80972440>] (should_fail_usercopy) from [<808b5d9c>] (_copy_from_iter+0x6c/0x7c8) [ 795.733744][ T9013] [<808b5d30>] (_copy_from_iter) from [<818ff028>] (isotp_sendmsg+0x254/0x820) [ 795.733933][ T9013] r10:eabb9f20 r9:85b823a3 r8:eabb9f30 r7:00000014 r6:85b80000 r5:85b82000 [ 795.733971][ T9013] r4:00000000 [ 795.734049][ T9013] [<818fedd4>] (isotp_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 795.734260][ T9013] r10:00000000 r9:eabb9dc4 r8:eabb9dc4 r7:00000000 r6:853dc780 r5:eabb9f20 [ 795.734379][ T9013] r4:00000000 [ 795.734497][ T9013] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 795.734603][ T9013] r7:00000000 r6:853dc780 r5:00040800 r4:eabb9f20 [ 795.734687][ T9013] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 795.734859][ T9013] r10:eabb9e24 r9:20000940 r8:00040800 r7:00000000 r6:853dc780 r5:eabb9f20 [ 795.734982][ T9013] r4:00000000 [ 795.735072][ T9013] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 795.735269][ T9013] r10:00000128 r9:83aad400 r8:85cb6300 r7:00040800 r6:20000940 r5:85cb6301 [ 795.735366][ T9013] r4:00000003 [ 795.735466][ T9013] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 795.735590][ T9013] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 795.735686][ T9013] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 795.735747][ T9013] Exception stack(0xeabb9fa8 to 0xeabb9ff0) [ 795.735821][ T9013] 9fa0: 00000000 00000000 00000003 20000940 00040800 00000000 [ 795.735896][ T9013] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fc40bc [ 795.736035][ T9013] 9fe0: 76fc3ec0 76fc3eb0 0001948c 001322c0 [ 795.791007][ T31] audit: type=1400 audit(4890.694:322): avc: denied { listen } for pid=9003 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 795.798537][ T31] audit: type=1400 audit(4890.694:323): avc: denied { getopt } for pid=9003 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 798.742832][ T9035] FAULT_INJECTION: forcing a failure. [ 798.742832][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 798.748104][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.0.1268 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 798.748261][ T9035] Hardware name: ARM-Versatile Express [ 798.748290][ T9035] Call trace: [ 798.748335][ T9035] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 798.748463][ T9035] r7:84170000 r6:00000000 r5:60000013 r4:822602a4 [ 798.748484][ T9035] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 798.748545][ T9035] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 798.748613][ T9035] r5:84170000 r4:82917bc0 [ 798.748631][ T9035] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 798.748782][ T9035] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 798.748878][ T9035] r8:00000000 r7:84170000 r6:00400dc0 r5:82821538 r4:830020c0 [ 798.748901][ T9035] [<8051f3e4>] (should_failslab) from [<80502e14>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 798.748962][ T9035] [<80502dc8>] (__kmalloc_cache_noprof) from [<80560714>] (alloc_pipe_info+0x6c/0x238) [ 798.749044][ T9035] r10:85f98480 r9:8291b1d8 r8:85f98d80 r7:00100000 r6:84170000 r5:82821538 [ 798.749067][ T9035] r4:00000000 [ 798.749085][ T9035] [<805606a8>] (alloc_pipe_info) from [<8059d014>] (splice_direct_to_actor+0x24c/0x2d8) [ 798.749170][ T9035] r9:00000000 r8:85f98d80 r7:85f98d80 r6:84170000 r5:eab89ea0 r4:00000000 [ 798.749192][ T9035] [<8059cdc8>] (splice_direct_to_actor) from [<8059d2ec>] (do_splice_direct+0x88/0xc8) [ 798.749278][ T9035] r10:85f98480 r9:00000000 r8:85f98d80 r7:00000000 r6:00000000 r5:85f98d81 [ 798.749302][ T9035] r4:eab89f20 [ 798.749318][ T9035] [<8059d264>] (do_splice_direct) from [<80552640>] (do_sendfile+0x39c/0x43c) [ 798.749392][ T9035] r7:00000000 r6:84170000 r4:00000000 [ 798.749412][ T9035] [<805522a4>] (do_sendfile) from [<805548e4>] (sys_sendfile+0xec/0x100) [ 798.749491][ T9035] r10:000000bb r9:00000003 r8:00000004 r7:00000000 r6:00000000 r5:00000000 [ 798.749517][ T9035] r4:00000000 [ 798.749535][ T9035] [<805547f8>] (sys_sendfile) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 798.749593][ T9035] Exception stack(0xeab89fa8 to 0xeab89ff0) [ 798.749639][ T9035] 9fa0: 00000000 00000000 00000003 00000004 00000000 00000000 [ 798.749679][ T9035] 9fc0: 00000000 00000000 00130270 000000bb 002e0000 00000000 00006364 76fe50bc [ 798.749710][ T9035] 9fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 798.749750][ T9035] r9:84170000 r8:8020029c r7:000000bb r6:00130270 r5:00000000 r4:00000000 [ 805.027072][ T9074] FAULT_INJECTION: forcing a failure. [ 805.027072][ T9074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.027637][ T9074] CPU: 1 UID: 0 PID: 9074 Comm: syz.0.1281 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 805.027768][ T9074] Hardware name: ARM-Versatile Express [ 805.027797][ T9074] Call trace: [ 805.027848][ T9074] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 805.027997][ T9074] r7:eac39e20 r6:00000000 r5:60000013 r4:822602a4 [ 805.028019][ T9074] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 805.028079][ T9074] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 805.028140][ T9074] r5:84a26000 r4:8294f150 [ 805.028156][ T9074] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 805.028305][ T9074] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 805.028537][ T9074] r8:00040000 r7:eac39e20 r6:200002c0 r5:00000000 r4:eac39f20 [ 805.028850][ T9074] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 805.028977][ T9074] [<80972440>] (should_fail_usercopy) from [<815457d0>] (copy_msghdr_from_user+0x50/0x130) [ 805.029299][ T9074] [<81545780>] (copy_msghdr_from_user) from [<81545928>] (___sys_sendmsg+0x78/0xd0) [ 805.029432][ T9074] r8:00040000 r7:00000000 r6:853dd180 r5:eac39f20 r4:eac39e64 [ 805.029657][ T9074] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 805.029790][ T9074] r10:00000128 r9:84a26000 r8:85cb63c0 r7:00040000 r6:200002c0 r5:85cb63c1 [ 805.029839][ T9074] r4:00000003 [ 805.029907][ T9074] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 805.029994][ T9074] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 805.030012][ T9074] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 805.030069][ T9074] Exception stack(0xeac39fa8 to 0xeac39ff0) [ 805.030115][ T9074] 9fa0: 00000000 00000000 00000003 200002c0 00040000 00000000 [ 805.030155][ T9074] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fe50bc [ 805.030183][ T9074] 9fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 814.422606][ T31] audit: type=1326 audit(4909.324:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.0.1307" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1322c0 code=0x0 [ 815.290368][ T4393] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 815.450012][ T4393] usb 2-1: Using ep0 maxpacket: 32 [ 815.474111][ T4393] usb 2-1: config 0 interface 0 has no altsetting 0 [ 815.474729][ T4393] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 815.475480][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.551865][ T4393] usb 2-1: config 0 descriptor?? [ 816.617782][ T4393] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 816.620493][ T4393] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 816.621841][ T4393] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 816.623711][ T4393] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 816.629660][ T4393] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 816.691601][ T4393] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 817.084178][ T4393] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-110) [ 817.162811][ T4393] corsair-psu 0003:1B1C:1C09.000F: probe with driver corsair-psu failed with error -110 [ 821.059533][ T31] audit: type=1400 audit(4915.954:325): avc: denied { sqpoll } for pid=9182 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 822.955545][ T9190] FAULT_INJECTION: forcing a failure. [ 822.955545][ T9190] name failslab, interval 1, probability 0, space 0, times 0 [ 822.955980][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.0.1316 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 822.956091][ T9190] Hardware name: ARM-Versatile Express [ 822.956119][ T9190] Call trace: [ 822.956164][ T9190] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 822.956284][ T9190] r7:00000c40 r6:00000000 r5:60000013 r4:822602a4 [ 822.956304][ T9190] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 822.956360][ T9190] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 822.956419][ T9190] r5:85abb000 r4:82917bc0 [ 822.956434][ T9190] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 822.956494][ T9190] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 822.956587][ T9190] r8:85abb000 r7:00000c40 r6:858e46e8 r5:00001000 r4:830016c0 [ 822.956606][ T9190] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 822.956656][ T9190] [<80503d48>] (__kmalloc_noprof) from [<807c34d4>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 822.956727][ T9190] r10:85abb000 r9:8309e400 r8:00000000 r7:834f1f68 r6:858e46e8 r5:00001000 [ 822.956750][ T9190] r4:00000000 [ 822.956766][ T9190] [<807c3498>] (tomoyo_realpath_from_path) from [<807bf618>] (tomoyo_path_number_perm+0xcc/0x22c) [ 822.956837][ T9190] r10:85abb000 r9:00000000 r8:858e46c0 r7:50009417 r6:00000004 r5:81cd6544 [ 822.956861][ T9190] r4:858e46e8 r3:826c0200 [ 822.956879][ T9190] [<807bf54c>] (tomoyo_path_number_perm) from [<807c3ef8>] (tomoyo_file_ioctl+0x1c/0x20) [ 822.956955][ T9190] r9:00000003 r8:858e46c0 r7:20001a00 r6:20001a00 r5:50009417 r4:858e46c0 [ 822.956979][ T9190] [<807c3edc>] (tomoyo_file_ioctl) from [<8077074c>] (security_file_ioctl+0x64/0x1e4) [ 822.957039][ T9190] [<807706e8>] (security_file_ioctl) from [<8056ce34>] (sys_ioctl+0x4c/0xba0) [ 822.957105][ T9190] r7:20001a00 r6:858e46c1 r5:00000000 r4:50009417 [ 822.957123][ T9190] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 822.957175][ T9190] Exception stack(0xead91fa8 to 0xead91ff0) [ 822.957218][ T9190] 1fa0: 00000000 00000000 00000003 50009417 20001a00 00000000 [ 822.957264][ T9190] 1fc0: 00000000 00000000 00130270 00000036 002e0000 00000000 00006364 76fe50bc [ 822.957293][ T9190] 1fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 822.957331][ T9190] r10:00000036 r9:85abb000 r8:8020029c r7:00000036 r6:00130270 r5:00000000 [ 822.957350][ T9190] r4:00000000 [ 822.957982][ T9190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 823.149702][ T31] audit: type=1400 audit(4918.044:326): avc: denied { read } for pid=9191 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.202742][ T9201] FAULT_INJECTION: forcing a failure. [ 825.202742][ T9201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.203199][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.0.1319 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 825.203344][ T9201] Hardware name: ARM-Versatile Express [ 825.203373][ T9201] Call trace: [ 825.203421][ T9201] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 825.203535][ T9201] r7:00000158 r6:00000000 r5:60000013 r4:822602a4 [ 825.203556][ T9201] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 825.203620][ T9201] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 825.203752][ T9201] r5:85ab9800 r4:8294f150 [ 825.203836][ T9201] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 825.203991][ T9201] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 825.204108][ T9201] r8:85cfbe00 r7:00000158 r6:853dcf00 r5:00000000 r4:ead89f20 [ 825.204240][ T9201] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 825.204393][ T9201] [<80972440>] (should_fail_usercopy) from [<81543838>] (____sys_sendmsg+0x14c/0x2cc) [ 825.204564][ T9201] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 825.204810][ T9201] r10:ead89e24 r9:20000700 r8:00000000 r7:00000000 r6:853dcf00 r5:ead89f20 [ 825.204872][ T9201] r4:00000000 [ 825.204895][ T9201] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 825.205021][ T9201] r10:00000128 r9:85ab9800 r8:858e4480 r7:00000000 r6:20000700 r5:858e4481 [ 825.205114][ T9201] r4:00000003 [ 825.205212][ T9201] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 825.205418][ T9201] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 825.205523][ T9201] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 825.205680][ T9201] Exception stack(0xead89fa8 to 0xead89ff0) [ 825.205799][ T9201] 9fa0: 00000000 00000000 00000003 20000700 00000000 00000000 [ 825.205937][ T9201] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fe50bc [ 825.205971][ T9201] 9fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 825.554298][ T31] audit: type=1400 audit(4920.454:327): avc: denied { create } for pid=9204 comm="syz.0.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 827.105120][ T9210] FAULT_INJECTION: forcing a failure. [ 827.105120][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 827.113034][ T9210] CPU: 0 UID: 0 PID: 9210 Comm: syz.0.1322 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 827.113121][ T9210] Hardware name: ARM-Versatile Express [ 827.113136][ T9210] Call trace: [ 827.113160][ T9210] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 827.113238][ T9210] r7:00000dc0 r6:00000000 r5:60000013 r4:822602a4 [ 827.113249][ T9210] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 827.113279][ T9210] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 827.113310][ T9210] r5:8339a400 r4:82917bc0 [ 827.113318][ T9210] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 827.113351][ T9210] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 827.113390][ T9210] r8:8339a400 r7:00000dc0 r6:00000dc0 r5:00000300 r4:83001540 [ 827.113399][ T9210] [<8051f3e4>] (should_failslab) from [<80503de4>] (__kmalloc_noprof+0x9c/0x458) [ 827.113426][ T9210] [<80503d48>] (__kmalloc_noprof) from [<81546988>] (sk_prot_alloc+0xa4/0x104) [ 827.113463][ T9210] r10:8167199c r9:00000000 r8:00000000 r7:00000010 r6:00000dc0 r5:829e8b98 [ 827.113473][ T9210] r4:82c20790 [ 827.113482][ T9210] [<815468e4>] (sk_prot_alloc) from [<81549924>] (sk_alloc+0x30/0x20c) [ 827.113517][ T9210] r9:00000000 r8:00000010 r7:00000cc0 r6:829e8b98 r5:85a60ec0 r4:82c20790 [ 827.113525][ T9210] [<815498f4>] (sk_alloc) from [<8166b6a0>] (__netlink_create+0x38/0xa4) [ 827.113564][ T9210] r9:00000000 r8:00000000 r7:8541ef00 r6:00000010 r5:8541ef00 r4:82c20790 [ 827.113573][ T9210] [<8166b668>] (__netlink_create) from [<8166ca44>] (netlink_create+0x118/0x264) [ 827.113611][ T9210] r6:00000010 r5:82c20798 r4:82c20790 [ 827.113620][ T9210] [<8166c92c>] (netlink_create) from [<81541b74>] (__sock_create+0xfc/0x228) [ 827.113659][ T9210] r10:81e64c60 r9:85a60ec0 r8:8541ef00 r7:00000010 r6:8166c92c r5:00000003 [ 827.113668][ T9210] r4:00000010 [ 827.113676][ T9210] [<81541a78>] (__sock_create) from [<81544444>] (__sys_socket+0x94/0x10c) [ 827.113713][ T9210] r10:00000119 r9:8339a400 r8:8020029c r7:00000119 r6:8339a400 r5:00000010 [ 827.113723][ T9210] r4:00000003 [ 827.113730][ T9210] [<815443b0>] (__sys_socket) from [<815444cc>] (sys_socket+0x10/0x14) [ 827.113763][ T9210] r6:00000000 r5:ffffffff r4:76fe3eb0 [ 827.113771][ T9210] [<815444bc>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 827.113799][ T9210] Exception stack(0xdf985fa8 to 0xdf985ff0) [ 827.113821][ T9210] 5fa0: 76fe3eb0 ffffffff 00000010 00000003 00000010 00000000 [ 827.113840][ T9210] 5fc0: 76fe3eb0 ffffffff 00000000 00000119 002e0000 00000000 00006364 76fe50bc [ 827.113859][ T9210] 5fe0: 00000000 76fe3e7c 0001bf38 0013497c [ 827.725593][ T9214] FAULT_INJECTION: forcing a failure. [ 827.725593][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.727106][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.0.1323 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 827.727202][ T9214] Hardware name: ARM-Versatile Express [ 827.727227][ T9214] Call trace: [ 827.727266][ T9214] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 827.727405][ T9214] r7:b5403587 r6:00000000 r5:60000013 r4:822602a4 [ 827.727424][ T9214] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 827.727473][ T9214] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 827.727527][ T9214] r5:83398000 r4:8294f150 [ 827.727544][ T9214] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 827.727611][ T9214] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 827.727676][ T9214] r8:00000000 r7:b5403587 r6:76fe4bb8 r5:00000000 r4:df83dfb0 [ 827.727697][ T9214] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 827.727750][ T9214] [<80972440>] (should_fail_usercopy) from [<8022b3c4>] (restore_sigframe+0x94/0x210) [ 827.727812][ T9214] [<8022b330>] (restore_sigframe) from [<8022b7a8>] (sys_rt_sigreturn+0x44/0x74) [ 827.727880][ T9214] r7:000000ad r6:00130270 r5:76fe4b38 r4:df83dfb0 [ 827.727897][ T9214] [<8022b764>] (sys_rt_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 827.727945][ T9214] Exception stack(0xdf83dfa8 to 0xdf83dff0) [ 827.727986][ T9214] dfa0: 00000000 00000000 000000b8 76fe4b38 76fe4bb8 00000000 [ 827.728020][ T9214] dfc0: 00000000 00000000 00130270 000000ad 002e0000 00000000 00006364 76fe50bc [ 827.728048][ T9214] dfe0: 76fe4ec0 76fe4b38 0015ac50 000ef508 [ 827.728073][ T9214] r5:00000000 r4:00000000 [ 827.981012][ T5008] usb 2-1: USB disconnect, device number 50 [ 828.087386][ T9226] SELinux: Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped). [ 828.090392][ T31] audit: type=1400 audit(4922.984:328): avc: denied { relabelto } for pid=9225 comm="syz.1.1325" name="mice" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0" [ 828.093918][ T31] audit: type=1400 audit(4922.994:329): avc: denied { associate } for pid=9225 comm="syz.1.1325" name="mice" dev="devtmpfs" ino=695 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ld_so_t:s0" [ 829.353034][ T9253] FAULT_INJECTION: forcing a failure. [ 829.353034][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 829.360914][ T9253] CPU: 0 UID: 0 PID: 9253 Comm: syz.0.1335 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 829.361093][ T9253] Hardware name: ARM-Versatile Express [ 829.361122][ T9253] Call trace: [ 829.361166][ T9253] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 829.361284][ T9253] r7:83abb000 r6:00000000 r5:60000113 r4:822602a4 [ 829.361307][ T9253] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 829.361367][ T9253] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 829.361431][ T9253] r5:83abb000 r4:82917bc0 [ 829.361451][ T9253] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 829.361518][ T9253] [<80972200>] (should_fail_ex) from [<8051f450>] (should_failslab+0x6c/0x94) [ 829.361608][ T9253] r8:00000000 r7:83abb000 r6:00000820 r5:85c88300 r4:832c8240 [ 829.361630][ T9253] [<8051f3e4>] (should_failslab) from [<80503a60>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 829.361687][ T9253] [<80503a14>] (kmem_cache_alloc_noprof) from [<81556d68>] (skb_clone+0x60/0x1c8) [ 829.361761][ T9253] r10:000001a2 r9:84f9c400 r8:85c26000 r7:85c88300 r6:85945ec0 r5:85c88300 [ 829.361783][ T9253] r4:00000820 [ 829.361800][ T9253] [<81556d08>] (skb_clone) from [<8166ce64>] (__netlink_deliver_tap+0x1f4/0x28c) [ 829.361870][ T9253] r5:0000001c r4:85945800 [ 829.361887][ T9253] [<8166cc70>] (__netlink_deliver_tap) from [<816701c4>] (netlink_unicast+0x2f0/0x30c) [ 829.361956][ T9253] r10:00000000 r9:00000000 r8:85a60ec0 r7:85c88300 r6:84f9c400 r5:0000001c [ 829.361975][ T9253] r4:85c26000 [ 829.361993][ T9253] [<8166fed4>] (netlink_unicast) from [<816703ac>] (netlink_sendmsg+0x1cc/0x444) [ 829.362061][ T9253] r9:00000000 r8:00000000 r7:85c02400 r6:0000001c r5:85c88300 r4:dfa29f20 [ 829.362080][ T9253] [<816701e0>] (netlink_sendmsg) from [<81542630>] (__sock_sendmsg+0x44/0x78) [ 829.362154][ T9253] r10:00000000 r9:dfa29dc4 r8:dfa29dc4 r7:00000000 r6:8541e280 r5:dfa29f20 [ 829.362177][ T9253] r4:00000000 [ 829.362194][ T9253] [<815425ec>] (__sock_sendmsg) from [<81543984>] (____sys_sendmsg+0x298/0x2cc) [ 829.362265][ T9253] r7:00000000 r6:8541e280 r5:0004c010 r4:dfa29f20 [ 829.362286][ T9253] [<815436ec>] (____sys_sendmsg) from [<8154594c>] (___sys_sendmsg+0x9c/0xd0) [ 829.362365][ T9253] r10:dfa29e24 r9:20000300 r8:0004c010 r7:00000000 r6:8541e280 r5:dfa29f20 [ 829.362388][ T9253] r4:00000000 [ 829.362406][ T9253] [<815458b0>] (___sys_sendmsg) from [<81545de4>] (__sys_sendmsg+0x8c/0xe0) [ 829.362488][ T9253] r10:00000128 r9:83abb000 r8:85cd4240 r7:0004c010 r6:20000300 r5:85cd4241 [ 829.362511][ T9253] r4:00000003 [ 829.362529][ T9253] [<81545d58>] (__sys_sendmsg) from [<81545e4c>] (sys_sendmsg+0x14/0x18) [ 829.362617][ T9253] r8:8020029c r7:00000128 r6:00130270 r5:00000000 r4:00000000 [ 829.362637][ T9253] [<81545e38>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 829.362697][ T9253] Exception stack(0xdfa29fa8 to 0xdfa29ff0) [ 829.362740][ T9253] 9fa0: 00000000 00000000 00000003 20000300 0004c010 00000000 [ 829.362779][ T9253] 9fc0: 00000000 00000000 00130270 00000128 002e0000 00000000 00006364 76fe50bc [ 829.362812][ T9253] 9fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 830.130963][ T9263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9263 comm=syz.0.1340 [ 831.292101][ T9288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9288 comm=syz.1.1352 [ 831.473728][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9290 comm=syz.0.1353 [ 832.360434][ T9297] FAULT_INJECTION: forcing a failure. [ 832.360434][ T9297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.360826][ T9297] CPU: 1 UID: 0 PID: 9297 Comm: syz.0.1356 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 832.360932][ T9297] Hardware name: ARM-Versatile Express [ 832.360961][ T9297] Call trace: [ 832.361009][ T9297] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 832.361149][ T9297] r7:00000000 r6:00000000 r5:60000013 r4:822602a4 [ 832.361335][ T9297] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 832.361474][ T9297] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 832.361555][ T9297] r5:85abc800 r4:8294f150 [ 832.361608][ T9297] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 832.361843][ T9297] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 832.362054][ T9297] r8:76fe4f30 r7:00000000 r6:00000000 r5:dfa41f68 r4:00000002 [ 832.362123][ T9297] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 832.362315][ T9297] [<80972440>] (should_fail_usercopy) from [<8058e7a0>] (simple_read_from_buffer+0x80/0x13c) [ 832.362429][ T9297] [<8058e720>] (simple_read_from_buffer) from [<806086c4>] (proc_fail_nth_read+0xb8/0x108) [ 832.362563][ T9297] r10:00000001 r9:8060860c r8:00000002 r7:dfa41f68 r6:0000000f r5:76fe4f30 [ 832.362666][ T9297] r4:85abc800 r3:dfa41e9f [ 832.362710][ T9297] [<8060860c>] (proc_fail_nth_read) from [<805535bc>] (vfs_read+0x98/0x324) [ 832.362867][ T9297] r8:76fe4f30 r7:dfa41f68 r6:85abc800 r5:0000000f r4:830d9f00 [ 832.362949][ T9297] [<80553524>] (vfs_read) from [<805542cc>] (ksys_read+0x74/0xe8) [ 832.363093][ T9297] r10:00000003 r9:85abc800 r8:8020029c r7:00000000 r6:00000000 r5:830d9f00 [ 832.363124][ T9297] r4:830d9f03 [ 832.363269][ T9297] [<80554258>] (ksys_read) from [<80554350>] (sys_read+0x10/0x14) [ 832.363414][ T9297] r7:00000003 r6:00000004 r5:76fe4f30 r4:0000000f [ 832.363527][ T9297] [<80554340>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 832.363662][ T9297] Exception stack(0xdfa41fa8 to 0xdfa41ff0) [ 832.363747][ T9297] 1fa0: 0000000f 76fe4f30 00000004 76fe4f30 0000000f 00000000 [ 832.363844][ T9297] 1fc0: 0000000f 76fe4f30 00000004 00000003 002e0000 00000000 00006364 76fe50bc [ 832.363908][ T9297] 1fe0: 00000158 76fe4ed0 000d80f4 00130194 [ 832.872084][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz.0.1358 [ 833.961038][ T9310] FAULT_INJECTION: forcing a failure. [ 833.961038][ T9310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.961432][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.0.1362 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 833.961524][ T9310] Hardware name: ARM-Versatile Express [ 833.961551][ T9310] Call trace: [ 833.961609][ T9310] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 833.961719][ T9310] r7:20000a40 r6:00000000 r5:60000013 r4:822602a4 [ 833.961736][ T9310] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 833.961786][ T9310] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 833.961843][ T9310] r5:85ab9800 r4:8294f150 [ 833.961857][ T9310] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 833.961996][ T9310] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 833.962644][ T9310] r8:20000a40 r7:20000a40 r6:dfa41e0c r5:00000004 r4:00000004 [ 833.962670][ T9310] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 833.962759][ T9310] [<80972440>] (should_fail_usercopy) from [<81546eb0>] (copy_from_sockptr_offset.constprop.0+0x5c/0x11c) [ 833.962997][ T9310] [<81546e54>] (copy_from_sockptr_offset.constprop.0) from [<8154dc1c>] (sk_getsockopt+0x68/0xe84) [ 833.963145][ T9310] r8:20000a40 r7:848cec00 r6:00000039 r5:dfa41e1c r4:00000001 [ 833.963346][ T9310] [<8154dbb8>] (sk_getsockopt) from [<81543608>] (do_sock_getsockopt+0x108/0x1ec) [ 833.963426][ T9310] r10:00000127 r9:85ab9800 r8:20000a40 r7:b5403587 r6:8541ec80 r5:00000039 [ 833.963620][ T9310] r4:00000001 [ 833.963913][ T9310] [<81543500>] (do_sock_getsockopt) from [<81545510>] (__sys_getsockopt+0x94/0xdc) [ 833.964144][ T9310] r8:830d9480 r7:dfa41f50 r6:00000039 r5:dfa41f58 r4:830d9481 [ 833.964575][ T9310] [<8154547c>] (__sys_getsockopt) from [<81545574>] (sys_getsockopt+0x1c/0x24) [ 833.964887][ T9310] r8:8020029c r7:00000127 r6:00130270 r5:00000000 r4:20000a40 [ 833.964923][ T9310] [<81545558>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 833.965022][ T9310] Exception stack(0xdfa41fa8 to 0xdfa41ff0) [ 833.965169][ T9310] 1fa0: 20000a40 00000000 00000003 00000001 00000039 20000a00 [ 833.965220][ T9310] 1fc0: 20000a40 00000000 00130270 00000127 002e0000 00000000 00006364 76fe50bc [ 833.965687][ T9310] 1fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 842.613295][ T9345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9345 comm=syz.0.1376 [ 850.694226][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 852.223764][ T9422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.312634][ T9422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.388073][ T9422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.463140][ T9422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.563625][ T2967] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.577151][ T2967] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.600928][ T2967] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.601154][ T2967] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.955448][ T9466] FAULT_INJECTION: forcing a failure. [ 856.955448][ T9466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.955856][ T9466] CPU: 1 UID: 0 PID: 9466 Comm: syz.1.1413 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 856.955950][ T9466] Hardware name: ARM-Versatile Express [ 856.955972][ T9466] Call trace: [ 856.956012][ T9466] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 856.956124][ T9466] r7:00000000 r6:00000000 r5:60000013 r4:822602a4 [ 856.956144][ T9466] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 856.956199][ T9466] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 856.956282][ T9466] r5:83aa6c00 r4:8294f150 [ 856.956364][ T9466] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 856.956518][ T9466] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 856.956643][ T9466] r8:76f44f30 r7:00000000 r6:00000000 r5:dfb99f68 r4:00000002 [ 856.956706][ T9466] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 856.956789][ T9466] [<80972440>] (should_fail_usercopy) from [<8058e7a0>] (simple_read_from_buffer+0x80/0x13c) [ 856.956995][ T9466] [<8058e720>] (simple_read_from_buffer) from [<806086c4>] (proc_fail_nth_read+0xb8/0x108) [ 856.957118][ T9466] r10:00000001 r9:8060860c r8:00000002 r7:dfb99f68 r6:0000000f r5:76f44f30 [ 856.957163][ T9466] r4:83aa6c00 r3:dfb99e9f [ 856.957182][ T9466] [<8060860c>] (proc_fail_nth_read) from [<805535bc>] (vfs_read+0x98/0x324) [ 856.957378][ T9466] r8:76f44f30 r7:dfb99f68 r6:83aa6c00 r5:0000000f r4:85f98cc0 [ 856.957466][ T9466] [<80553524>] (vfs_read) from [<805542cc>] (ksys_read+0x74/0xe8) [ 856.957631][ T9466] r10:00000003 r9:83aa6c00 r8:8020029c r7:00000000 r6:00000000 r5:85f98cc0 [ 856.957686][ T9466] r4:85f98cc3 [ 856.957816][ T9466] [<80554258>] (ksys_read) from [<80554350>] (sys_read+0x10/0x14) [ 856.957976][ T9466] r7:00000003 r6:00000004 r5:76f44f30 r4:0000000f [ 856.958054][ T9466] [<80554340>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 856.958155][ T9466] Exception stack(0xdfb99fa8 to 0xdfb99ff0) [ 856.958222][ T9466] 9fa0: 0000000f 76f44f30 00000004 76f44f30 0000000f 00000000 [ 856.958320][ T9466] 9fc0: 0000000f 76f44f30 00000004 00000003 002e0000 00000000 00006364 76f450bc [ 856.958448][ T9466] 9fe0: 00000158 76f44ed0 000d80f4 00130194 [ 859.317408][ T9482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=152 sclass=netlink_route_socket pid=9482 comm=syz.0.1420 [ 864.015778][ T9505] can: request_module (can-proto-5) failed. [ 864.236706][ T31] audit: type=1400 audit(4959.134:330): avc: granted { setsecparam } for pid=9504 comm="syz.0.1428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 867.407609][ T9539] FAULT_INJECTION: forcing a failure. [ 867.407609][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.407994][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.0.1437 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 867.408083][ T9539] Hardware name: ARM-Versatile Express [ 867.408109][ T9539] Call trace: [ 867.408156][ T9539] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 867.408269][ T9539] r7:00000000 r6:00000000 r5:60000013 r4:822602a4 [ 867.408290][ T9539] [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c) [ 867.408350][ T9539] [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c) [ 867.408414][ T9539] r5:83aac800 r4:8294f150 [ 867.408430][ T9539] [<8021fb9c>] (dump_stack) from [<809723c4>] (should_fail_ex+0x1c4/0x228) [ 867.408559][ T9539] [<80972200>] (should_fail_ex) from [<8097243c>] (should_fail+0x14/0x18) [ 867.408755][ T9539] r8:8331b000 r7:00000000 r6:8590c000 r5:20003500 r4:20003500 [ 867.408827][ T9539] [<80972428>] (should_fail) from [<8097245c>] (should_fail_usercopy+0x1c/0x20) [ 867.409411][ T9539] [<80972440>] (should_fail_usercopy) from [<80586894>] (sys_mount+0xa0/0x260) [ 867.409832][ T9539] [<805867f4>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 867.409935][ T9539] Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) [ 867.410246][ T9539] 5fa0: 20003500 00000000 00000000 20003480 200034c0 0300480e [ 867.410445][ T9539] 5fc0: 20003500 00000000 00130270 00000015 002e0000 00000000 00006364 76fe50bc [ 867.410506][ T9539] 5fe0: 76fe4ec0 76fe4eb0 0001948c 001322c0 [ 867.410622][ T9539] r10:00000015 r9:83aac800 r8:8020029c r7:00000015 r6:00130270 r5:00000000 [ 867.410705][ T9539] r4:20003500 [ 867.569505][ T9539] binder: Unknown parameter 'fowner>00000000000000000000' [ 868.609534][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 868.759704][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 868.778260][ T43] usb 1-1: config 0 has no interfaces? [ 868.821440][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 868.821752][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.829162][ T43] usb 1-1: Product: syz [ 868.829431][ T43] usb 1-1: Manufacturer: syz [ 868.829607][ T43] usb 1-1: SerialNumber: syz [ 868.837704][ T43] usb 1-1: config 0 descriptor?? [ 869.086008][ T1806] usb 1-1: USB disconnect, device number 52 [ 871.728536][ T9605] syz_tun: entered allmulticast mode [ 871.776879][ T9604] syz_tun: left allmulticast mode [ 873.569923][ T43] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 873.791234][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 873.791562][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 873.792090][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 873.792169][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.798446][ T43] usb 1-1: config 0 descriptor?? [ 873.803536][ T9618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 878.410940][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 878.411479][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 878.417754][ T43] usb 1-1: USB disconnect, device number 53 [ 879.564565][ T9639] syz.1.1468 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 879.964342][ T31] audit: type=1400 audit(4974.864:331): avc: denied { read } for pid=9636 comm="syz.0.1469" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 879.967002][ T31] audit: type=1400 audit(4974.864:332): avc: denied { open } for pid=9636 comm="syz.0.1469" path="/142/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 880.084809][ T9640] block device autoloading is deprecated and will be removed. [ 880.422318][ T31] audit: type=1400 audit(4975.324:333): avc: denied { bind } for pid=9644 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 880.826699][ T31] audit: type=1400 audit(4975.724:334): avc: denied { map } for pid=9646 comm="syz.0.1471" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 880.914303][ T31] audit: type=1400 audit(4975.814:335): avc: denied { override_creds } for pid=9646 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 881.336220][ T31] audit: type=1400 audit(4976.234:336): avc: denied { set_context_mgr } for pid=9649 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 881.620609][ T31] audit: type=1400 audit(4976.514:337): avc: denied { write } for pid=9649 comm="syz.0.1472" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 881.662493][ T31] audit: type=1400 audit(4976.564:338): avc: denied { map } for pid=9649 comm="syz.0.1472" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 881.753844][ T31] audit: type=1400 audit(4976.654:339): avc: denied { call } for pid=9649 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 881.762255][ T31] audit: type=1400 audit(4976.664:340): avc: denied { transfer } for pid=9649 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 881.781524][ T9650] binder_alloc: 9649: binder_alloc_buf, no vma [ 889.459658][ T1806] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 889.621333][ T1806] usb 2-1: device descriptor read/64, error -71 [ 889.860172][ T1806] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 890.000258][ T1806] usb 2-1: device descriptor read/64, error -71 [ 890.120205][ T1806] usb usb2-port1: attempt power cycle [ 890.490201][ T1806] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 890.512557][ T1806] usb 2-1: device descriptor read/8, error -71 [ 890.780938][ T1806] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 890.805133][ T1806] usb 2-1: device descriptor read/8, error -71 [ 890.921013][ T1806] usb usb2-port1: unable to enumerate USB device [ 898.817755][ T9671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9671 comm=syz.0.1478 [ 898.840097][ T9671] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1478'. [ 905.559486][ T9688] comedi: valid board names for 8255 driver are: [ 905.559746][ T9688] 8255 [ 905.559960][ T9688] comedi: valid board names for vmk80xx driver are: [ 905.559984][ T9688] vmk80xx [ 905.559992][ T9688] comedi: valid board names for usbduxsigma driver are: [ 905.560000][ T9688] usbduxsigma [ 905.560006][ T9688] comedi: valid board names for usbduxfast driver are: [ 905.560015][ T9688] usbduxfast [ 905.560022][ T9688] comedi: valid board names for usbdux driver are: [ 905.560029][ T9688] usbdux [ 905.560035][ T9688] comedi: valid board names for ni6501 driver are: [ 905.560041][ T9688] ni6501 [ 905.560047][ T9688] comedi: valid board names for dt9812 driver are: [ 905.560054][ T9688] dt9812 [ 905.560202][ T9688] comedi: valid board names for ni_labpc_cs driver are: [ 905.560237][ T9688] ni_labpc_cs [ 905.560269][ T9688] comedi: valid board names for ni_daq_700 driver are: [ 905.560297][ T9688] ni_daq_700 [ 905.560325][ T9688] comedi: valid board names for labpc_pci driver are: [ 905.560352][ T9688] labpc_pci [ 905.560377][ T9688] comedi: valid board names for adl_pci9118 driver are: [ 905.560415][ T9688] pci9118dg [ 905.560444][ T9688] pci9118hg [ 905.560470][ T9688] pci9118hr [ 905.560492][ T9688] comedi: valid board names for 8255_pci driver are: [ 905.560584][ T9688] 8255_pci [ 905.560629][ T9688] comedi: valid board names for comedi_parport driver are: [ 905.560674][ T9688] comedi_parport [ 905.560690][ T9688] comedi: valid board names for comedi_test driver are: [ 905.560707][ T9688] comedi_test [ 905.560824][ T9688] comedi: valid board names for comedi_bond driver are: [ 905.561051][ T9688] comedi_bond [ 909.164963][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1485'. [ 909.442255][ T31] audit: type=1400 audit(5004.344:341): avc: denied { cmd } for pid=9701 comm="syz.1.1486" path="socket:[18571]" dev="sockfs" ino=18571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 909.719284][ T31] audit: type=1400 audit(5004.614:342): avc: denied { execute } for pid=9703 comm="syz.1.1487" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.052504][ T31] audit: type=1400 audit(5022.954:343): avc: denied { bind } for pid=9735 comm="syz.0.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 928.055814][ T31] audit: type=1400 audit(5022.954:344): avc: denied { name_bind } for pid=9735 comm="syz.0.1496" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 928.249815][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 928.419679][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 928.431379][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.431657][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.431926][ T43] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 928.431988][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.440039][ T43] usb 2-1: config 0 descriptor?? [ 928.672010][ T31] audit: type=1400 audit(5023.564:345): avc: denied { name_bind } for pid=9730 comm="syz.1.1495" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 928.686025][ T43] usb 2-1: USB disconnect, device number 55 [ 934.439602][ T31] audit: type=1400 audit(5029.334:346): avc: denied { bind } for pid=9780 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.450937][ T31] audit: type=1400 audit(5029.354:347): avc: denied { listen } for pid=9780 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.327028][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.338686][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.880506][ T9802] hsr_slave_0: entered promiscuous mode [ 984.883245][ T9802] hsr_slave_1: entered promiscuous mode [ 984.885433][ T9802] debugfs: 'hsr0' already exists in 'hsr' [ 984.886461][ T9802] Cannot create hsr debugfs directory [ 985.396973][ T9802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 985.443084][ T9802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 985.457511][ T9802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 985.472596][ T9802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 986.567438][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.466214][ T9802] veth0_vlan: entered promiscuous mode [ 991.506718][ T9802] veth1_vlan: entered promiscuous mode [ 991.627533][ T9802] veth0_macvtap: entered promiscuous mode [ 991.655782][ T9802] veth1_macvtap: entered promiscuous mode [ 991.765903][ T2967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.771863][ T2967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.776780][ T2967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.792970][ T2967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.985407][ T31] audit: type=1400 audit(5086.884:348): avc: denied { mounton } for pid=9802 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1002.820963][ T2967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.063041][ T2967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.227602][ T2967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.375389][ T2967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.905737][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.943868][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.948779][ T2967] bond0 (unregistering): Released all slaves [ 1004.109732][ T2967] hsr_slave_0: left promiscuous mode [ 1004.113031][ T2967] hsr_slave_1: left promiscuous mode [ 1004.139935][ T2967] veth1_macvtap: left promiscuous mode [ 1004.140309][ T2967] veth0_macvtap: left promiscuous mode [ 1004.140632][ T2967] veth1_vlan: left promiscuous mode [ 1004.140851][ T2967] veth0_vlan: left promiscuous mode [ 1027.160665][ T31] audit: type=1400 audit(5122.064:349): avc: denied { setopt } for pid=10267 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1034.331531][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.351383][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.974141][T10293] 8<--- cut here --- [ 1034.974336][T10293] Unable to handle kernel paging request at virtual address fee04f2a when write [ 1034.974471][T10293] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 1034.975796][T10293] Internal error: Oops: a06 [#1] SMP ARM [ 1034.980938][T10293] Modules linked in: [ 1034.981836][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.2.1531 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 1034.982301][T10293] Hardware name: ARM-Versatile Express [ 1034.982870][T10293] PC is at subdev_8255_io+0x60/0x6c [ 1034.986263][T10293] LR is at subdev_8255_io+0x4c/0x6c [ 1034.989238][T10293] pc : [<813b7f10>] lr : [<813b7efc>] psr: 60000013 [ 1034.989871][T10293] sp : dfa39cb8 ip : dfa39cb8 fp : dfa39cd4 [ 1034.990167][T10293] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 1034.990521][T10293] r7 : 00004f27 r6 : 0000009b r5 : 841b8f00 r4 : 00004f2a [ 1034.990925][T10293] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 841b8f00 [ 1034.991387][T10293] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1034.991838][T10293] Control: 30c5387d Table: 85dd2a00 DAC: 00000000 [ 1034.992183][T10293] Register r0 information: slab kmalloc-192 start 841b8f00 pointer offset 0 size 192 [ 1034.994280][T10293] Register r1 information: non-paged memory [ 1034.994902][T10293] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1034.995643][T10293] Register r3 information: non-paged memory [ 1034.995968][T10293] Register r4 information: non-paged memory [ 1034.996283][T10293] Register r5 information: slab kmalloc-192 start 841b8f00 pointer offset 0 size 192 [ 1034.996837][T10293] Register r6 information: non-paged memory [ 1034.997403][T10293] Register r7 information: non-paged memory [ 1034.997752][T10293] Register r8 information: non-paged memory [ 1034.998062][T10293] Register r9 information: NULL pointer [ 1034.998428][T10293] Register r10 information: NULL pointer [ 1034.998828][T10293] Register r11 information: 2-page vmalloc region starting at 0xdfa38000 allocated at kernel_clone+0xac/0x3ec [ 1034.999987][T10293] Register r12 information: 2-page vmalloc region starting at 0xdfa38000 allocated at kernel_clone+0xac/0x3ec [ 1035.005714][T10293] Process syz.2.1531 (pid: 10293, stack limit = 0xdfa38000) [ 1035.006478][T10293] Stack: (0xdfa39cb8 to 0xdfa3a000) [ 1035.006766][T10293] 9ca0: 813b7eb0 841b8f00 [ 1035.007149][T10293] 9cc0: 00004f27 00004f27 dfa39cf4 dfa39cd8 813b7be8 813b7ebc 00004f27 80503d54 [ 1035.007540][T10293] 9ce0: 859c2000 859c2000 dfa39d14 dfa39cf8 813b7fa8 813b7b9c 859c2000 841b8f00 [ 1035.007955][T10293] 9d00: dfa39da4 00004f27 dfa39d54 dfa39d18 813b819c 813b7f28 82ae3d60 83831c80 [ 1035.008381][T10293] 9d20: 82821598 00000000 00000000 829d0084 841b8f00 841b8f44 dfa39d90 841b8f00 [ 1035.009061][T10293] 9d40: 00000000 82b16f00 dfa39d8c dfa39d58 813a70a0 813b80ec 200000c0 00000000 [ 1035.010470][T10293] 9d60: dfa39d7c 200000c0 841b8f00 b5403587 200000c0 84a20c00 40946400 00000003 [ 1035.010811][T10293] 9d80: dfa39e4c dfa39d90 813a2c20 813a6fa4 35353238 00000000 00000000 00000000 [ 1035.011333][T10293] 9da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 1035.011716][T10293] 9dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000001 00000009 [ 1035.012076][T10293] 9de0: 0000e1cb 00000006 00000004 00000003 00000000 80000089 fffffffd 00000000 [ 1035.013669][T10293] 9e00: fffffff5 ffffeadb 00000003 0000003c 00000008 00000004 08000000 dffffffa [ 1035.017767][T10293] 9e20: 00000000 39b107b0 00000000 85f98c00 841b8f00 200000c0 200000c0 84a20c00 [ 1035.018325][T10293] 9e40: dfa39f14 dfa39e50 813a3bec 813a2b2c 00000000 00000000 00000000 39b107b0 [ 1035.018910][T10293] 9e60: 00000000 00000000 8247054c 0000005f 83c8fa58 841b8f30 8422e3fc 84a20c00 [ 1035.019638][T10293] 9e80: dfa39ee4 dfa39e90 8079795c 8078dcc0 00000064 00000001 00000000 dfa39eac [ 1035.020020][T10293] 9ea0: 85ca3250 834226e8 00006400 0000000b dfa39ea0 00000000 00000000 39b107b0 [ 1035.020394][T10293] 9ec0: 85f98c00 40946400 200000c0 200000c0 85f98c00 00000003 dfa39ef4 dfa39ee8 [ 1035.020747][T10293] 9ee0: 80797a7c 39b107b0 dfa39f14 40946400 00000000 85f98c01 200000c0 85f98c00 [ 1035.021069][T10293] 9f00: 00000003 84a20c00 dfa39fa4 dfa39f18 8056cf18 813a361c ecac8b10 84a20c00 [ 1035.021475][T10293] 9f20: dfa39f3c dfa39f30 81a388b8 81a38788 dfa39f54 dfa39f40 8025e490 8028ef8c [ 1035.022082][T10293] 9f40: dfa39fb0 40000000 dfa39f84 dfa39f58 802229ec 8025e44c 00000000 8281cddc [ 1035.022442][T10293] 9f60: dfa39fb0 0014c820 ecac8b10 80222940 00000000 39b107b0 dfa39fac 00000000 [ 1035.022810][T10293] 9f80: 00000000 002f6308 00000036 8020029c 84a20c00 00000036 00000000 dfa39fa8 [ 1035.023156][T10293] 9fa0: 80200060 8056cdf4 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1035.023538][T10293] 9fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76fdc0bc [ 1035.023888][T10293] 9fe0: 76fdbec0 76fdbeb0 0001948c 001322c0 60000010 00000003 00000000 00000000 [ 1035.024269][T10293] Call trace: [ 1035.024517][T10293] [<813b7eb0>] (subdev_8255_io) from [<813b7be8>] (subdev_8255_do_config+0x58/0x60) [ 1035.024968][T10293] r7:00004f27 r6:00004f27 r5:841b8f00 r4:813b7eb0 [ 1035.025205][T10293] [<813b7b90>] (subdev_8255_do_config) from [<813b7fa8>] (subdev_8255_io_init+0x8c/0x9c) [ 1035.025618][T10293] r4:859c2000 [ 1035.025774][T10293] [<813b7f1c>] (subdev_8255_io_init) from [<813b819c>] (dev_8255_attach+0xbc/0x114) [ 1035.026155][T10293] r7:00004f27 r6:dfa39da4 r5:841b8f00 r4:859c2000 [ 1035.026409][T10293] [<813b80e0>] (dev_8255_attach) from [<813a70a0>] (comedi_device_attach+0x108/0x250) [ 1035.026849][T10293] r10:82b16f00 r9:00000000 r8:841b8f00 r7:dfa39d90 r6:841b8f44 r5:841b8f00 [ 1035.027159][T10293] r4:829d0084 [ 1035.027367][T10293] [<813a6f98>] (comedi_device_attach) from [<813a2c20>] (do_devconfig_ioctl+0x100/0x220) [ 1035.027792][T10293] r10:00000003 r9:40946400 r8:84a20c00 r7:200000c0 r6:b5403587 r5:841b8f00 [ 1035.028119][T10293] r4:200000c0 [ 1035.028286][T10293] [<813a2b20>] (do_devconfig_ioctl) from [<813a3bec>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 1035.028727][T10293] r8:84a20c00 r7:200000c0 r6:200000c0 r5:841b8f00 r4:85f98c00 [ 1035.029274][T10293] [<813a3610>] (comedi_unlocked_ioctl) from [<8056cf18>] (sys_ioctl+0x130/0xba0) [ 1035.029849][T10293] r10:84a20c00 r9:00000003 r8:85f98c00 r7:200000c0 r6:85f98c01 r5:00000000 [ 1035.030293][T10293] r4:40946400 [ 1035.030459][T10293] [<8056cde8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1035.030809][T10293] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 1035.031155][T10293] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1035.035439][T10293] 9fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76fdc0bc [ 1035.039367][T10293] 9fe0: 76fdbec0 76fdbeb0 0001948c 001322c0 [ 1035.039767][T10293] r10:00000036 r9:84a20c00 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 1035.040228][T10293] r4:00000000 [ 1035.040759][T10293] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1035.042289][T10293] ---[ end trace 0000000000000000 ]--- [ 1035.043536][T10293] Kernel panic - not syncing: Fatal exception [ 1035.046324][T10293] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:01:34 Registers: info registers vcpu 0 CPU#0 R00=c3c77000 R01=dfa4b000 R02=00000001 R03=80239bb8 R04=7f00b000 R05=00000001 R06=82ac8f44 R07=82ac8320 R08=7f00b000 R09=dfa4b000 R10=8280c9b4 R11=eae59d9c R12=eae59da0 R13=eae59d70 R14=80230af0 R15=80239bd0 PSR=80000013 N--- A S svc32 s00=000e8002 s01=00010208 d00=00010208000e8002 s02=20080005 s03=040e8003 d01=040e800320080005 s04=0301c080 s05=08000e90 d02=08000e900301c080 s06=0e980300 s07=03000400 d03=030004000e980300 s08=04000e9c s09=0ea00300 d04=0ea0030004000e9c s10=ffffcf08 s11=ffffffff d05=ffffffffffffcf08 s12=0001ffff s13=00000000 d06=000000000001ffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=03ffffff s33=0009d003 d16=0009d00303ffffff s34=d8030008 s35=00080009 d17=00080009d8030008 s36=0009e003 s37=e8030008 d18=e80300080009e003 s38=00080009 s39=0409f003 d19=0409f00300080009 s40=ffffffff s41=0a800303 d20=0a800303ffffffff s42=ffffff04 s43=900303ff d21=900303ffffffff04 s44=2008000a s45=000a9803 d22=000a98032008000a s46=a0030008 s47=0008000a d23=0008000aa0030008 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=5a9f23e1 s53=451969a2 d26=451969a25a9f23e1 s54=7882d8bf s55=2aa77f6d d27=2aa77f6d7882d8bf s56=b86478e5 s57=35eb1834 d28=35eb1834b86478e5 s58=e5e56313 s59=28aee3f8 d29=28aee3f8e5e56313 s60=6099c469 s61=355e0d5c d30=355e0d5c6099c469 s62=c5ee5b21 s63=fbeadf48 d31=fbeadf48c5ee5b21 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=83f01c40 R01=00000065 R02=eaf25000 R03=eaf25018 R04=838f4024 R05=83f01c40 R06=80a7927c R07=838f4038 R08=82826ee0 R09=00000000 R10=0000116d R11=dfa3991c R12=00000002 R13=dfa39910 R14=82959084 R15=80a7928c PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000