last executing test programs: 4.768754519s ago: executing program 1 (id=634): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt(r0, 0x7, 0x40, &(0x7f0000000140)="cddbf2ab579457af64a7e268b356f0ec02931cc1038a6a5b6a3d975ca90c76ed2e3c66133d9484621008fa8fcd1c4a09111cb55dcd5e490aa14f6a12b36f99f3809132678d98376f5ff9c9e768fec7480a1545d509513e194c0856081a6a8d18e0f253565440f86ec9d17a869547dfd16f9e7b40cd0776b19ed57f58389c8e8d26f0d9f21d2fd1cfbdbec3656798d01c29bce5e00ba946e8cf472491a204531021ecd7ce8b54b889784c1cac38b00e417cb7c5f57c4c4351c90f07b416c29c05586245ba62971134de3224f00bba9055c5f98f82a9d03fcb2df9f848b95b6bce20a2f6447e484133", 0xe8) setsockopt(r0, 0x6, 0x5, &(0x7f0000000400)="5a56bd894b1d036d323f7a853d0290dd01ba1cc01b17ad46833258fbc6e60f1d2660248478090738de1db7b1716fbeb1e8ab49e8432bb271d434862e2a263a39852a1d9b24320c6afdc7feba3cb356b0a2cf3204bf", 0x55) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x3, 0x8}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x198, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.539796981s ago: executing program 1 (id=636): r0 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) cachestat(r0, &(0x7f0000000480)={0x7fffffffffffffff, 0x5}, &(0x7f00000004c0), 0x0) 3.299594048s ago: executing program 1 (id=637): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x8, 0x80000, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000040)=0x3, r2, &(0x7f00000000c0)=0x766, 0xc, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0xd980a6198432922f, 0xaae, 0x1, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x65, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0xb, 0xc3, [@multicast2, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008891}, 0x20008804) recvfrom$packet(r2, &(0x7f0000000440)=""/23, 0x17, 0x4000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", ""]}, 0x14}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), r2) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@newtclass={0x44, 0x28, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x2, 0xc}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0x30, 0x40}}, @TCA_RATE={0x6, 0x5, {0x10, 0x8}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x10) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000700)=0x1) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000740)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="39dfa7cebad676c2d7940552c68872009ff34f26a52cff74f5ce232d204962bfcf71dbfa9289e7572508ddb3f8cb96f9167cf5d2e9c804ef7bf02e2dde5d0b10e619a601bb2db6065a11c15f7234141a8ca70d5347c91bdb7b23649361892458b01e9c6c5b0d417e5fa48ee2fd3d4974403bd400df6e3ce4cf684190b7a9c7161b2d5bab66fbb7ac86f73d2d65e0c040053fd439f5a02f06d10876be8cbd8dac699374a722ce0a7c649b89e0a763da5ed570b7c42f0fb5b4682fec99d5653764fb9afbd9f50ee67302105e59337e10b222aecd07c01677566edf5abfba", 0xdd}, {&(0x7f0000000880)="42bee58616db4a73f050e53eda522abb099f7158d5a786a858ec77e642c926fb28cc743d826d4c8bd36946aec06cb62b35430ae6f46adc039f8bcd72b1d8395b551b2f5bbc47f0108feb41979c7c9fe50614ec3fd6d10c1d38adc6ca634e", 0x5e}, {&(0x7f0000000900)="d9429f00407e81968182fd8c848b90a638ec0163d993901e8cf31a76525a065b4abc434bd3e38453770320a4a97002cd8dfdd18eab484ec203fd375583c11c8e49d5a688ccee3d7edccbf35621b555eaed35e5f033cedfb937903adb7b53631bf42930603b58885a132306b40c428c", 0x6f}, {&(0x7f0000000980)="4899e5c015d2721d00e63203c566d2af5b89126033a75d6ab5a96f2dfc107d9d8179bc9566bb4021487f", 0x2a}], 0x4}, 0x40c0) sendmsg$key(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2, 0x17, 0x7, 0x6, 0xa, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x9, {0x6, 0x6c, 0x2, 0x0, 0x0, 0x1, 0x0, @in=@multicast2, @in=@rand_addr=0x64010101}}]}, 0x50}}, 0x48000) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x254, 0x12, 0x7d8ff06b3dd75bfa, 0x70bd2d, 0x25dfdbfd, {0xb, 0x0, 0x8, 0x80, {0x4e22, 0x4e22, [0x400, 0x7fffffff, 0xfffffff5, 0xfffffffd], [0x2ed0fde0, 0x7, 0x0, 0x1], r5, [0x9, 0x9]}, 0x6, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "29047c31681c5df96d87283fc6f6bdff7fe78d26aaa0caa764469897af7ce6294a782119c77e70c36e36cf961259a81f1d811ef95cbd82b2628db0eaf4437bfe169fc8f738bc7898a7f1f61aff962cbcf70a57d179bc651efe78db204a0c589da4dfb651b9c3442730c473"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "22852b670292b79131b025a02af21b64e98d8645e1d0a06f7ce0847797077b34fb10b4dd3bf7f2968f91dc44a81529062ca95f5bd7c4940f41a009eb6f5461"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "1a1d6a1a45f5f4ecb1db231cffed0e52eab0aa962ddcf2d8d45b9352caa73758b4e4950d55c9f6f12ac66b9345ddff6a4bafe04b2fffdb3280a87f"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "b799aa9dff4c358dd6e15c5bb704750b67db444314c6713760511a374a112254ee3349"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "30df22e5ae05b4eead1853da24bfb91172e35de22f99f18ec35568d25b792c587aa6937f2d041bec680bfcdee704c1197f905b5d5df4fd99e12678e6982adc1fa9eeae2694ab621ffa097aee73ffafadf0b32ad027f352d294eb78f7b0a359b7bd83cada7e2ecc4a0144c1f707a3679cd575ae46ef802e8e1779c95303678751bb8f1e5f39a17ab426847b5b76fdc6de030e727c529ec9aeb55dc297ce2856a03f8f1d0b0dd2e60a0369bf471a9b1419fb5ed60c546813a62478e28fa16327da026a2c67125c7c929e38f6a7c3f09c9b27dbde8cb652e1f0d34a51983f50db0838daae330b81c5"}]}, 0x254}, 0x1, 0x0, 0x0, 0x8008050}, 0x20000000) recvmmsg(r2, &(0x7f0000004c80)=[{{&(0x7f0000000e80)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/197, 0xc5}, {&(0x7f0000001000)=""/61, 0x3d}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/99, 0x63}, {&(0x7f0000001100)=""/191, 0xbf}], 0x5}, 0x2}, {{&(0x7f0000001200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)=""/67, 0x43}], 0x1, &(0x7f0000001340)=""/201, 0xc9}, 0xa}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000014c0)=""/187, 0xbb}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/62, 0x3e}, {&(0x7f00000025c0)=""/42, 0x2a}, {&(0x7f0000002600)=""/54, 0x36}, {&(0x7f0000002640)=""/199, 0xc7}, {&(0x7f0000002740)=""/199, 0xc7}, {&(0x7f0000002840)=""/160, 0xa0}], 0x8, &(0x7f0000002940)=""/40, 0x28}, 0x200}, {{&(0x7f0000002980)=@isdn, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/80, 0x50}, {&(0x7f0000002a80)=""/119, 0x77}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x3}, 0xffff}, {{&(0x7f0000002bc0)=@caif, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/108, 0x6c}, {&(0x7f0000002cc0)=""/103, 0x67}], 0x2, &(0x7f0000002d80)=""/13, 0xd}, 0x4}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002dc0)=""/152, 0x98}], 0x1, &(0x7f0000002ec0)=""/120, 0x78}, 0x5}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/186, 0xba}, {&(0x7f0000003000)=""/63, 0x3f}, {&(0x7f0000003040)=""/249, 0xf9}], 0x3, &(0x7f0000003180)=""/254, 0xfe}, 0xfffffffa}, {{&(0x7f0000003280)=@generic, 0x80, &(0x7f0000003440)=[{&(0x7f0000003300)=""/96, 0x60}, {&(0x7f0000003380)=""/182, 0xb6}], 0x2, &(0x7f0000003480)=""/228, 0xe4}, 0x4}, {{&(0x7f0000003580)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003600)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000003740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000037c0)=""/25, 0x19}, {&(0x7f0000003800)=""/208, 0xd0}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/241, 0xf1}, {&(0x7f0000004a00)=""/83, 0x53}, {&(0x7f0000004a80)=""/147, 0x93}, {&(0x7f0000004b40)=""/103, 0x67}, {&(0x7f0000004bc0)=""/65, 0x41}], 0x8}, 0x8}], 0xa, 0x40000000, &(0x7f0000004dc0)) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000004e00)={0x0, "00bb30c94d50dc42f45f71c1045547d3"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000005e00)={0x15, 0x4, {0x6, @struct={0x19d, 0x3}, 0x0, 0x8, 0x5, 0x1, 0xe214, 0x2, 0x28, @usage=0xc9, 0x1, 0x5, [0xfffffffffffffffb, 0x3ff, 0x40000000, 0x9, 0x146, 0x2]}, {0x20000000, @usage=0x9, 0x0, 0x7fff, 0xa, 0x98, 0x6, 0x6, 0x407, @struct={0xffffa468, 0x4}, 0xfffffffd, 0xd, [0x8, 0x8, 0x0, 0xfffffffffffffffc, 0x7, 0x5]}, {0x2, @usage=0x98f, 0x0, 0x3, 0x1, 0xf, 0x7, 0x7, 0x88, @struct={0x2, 0x5}, 0x1, 0x3, [0x7, 0x7ff, 0x8, 0x5, 0x8, 0x10000]}, {0x7, 0x10001, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000006200)={0x1, 0x5, {0x7fffffffffffffff, @usage=0x4, r8, 0x8, 0x9, 0x3, 0x8, 0xfffffffffffffffd, 0x98, @usage=0xc0e, 0x0, 0x7, [0x7ff, 0x6, 0x8, 0x2, 0x4, 0x7fffffffffffffff]}, {0x6, @usage=0x1, r9, 0xc, 0x100, 0x0, 0x3, 0x8000, 0x20, @usage=0x80, 0x1, 0xd9f, [0x2, 0x4, 0x8, 0x2, 0x9, 0x9]}, {0x4de, @usage=0x7fff, 0x0, 0xe7c, 0x100000001, 0x8, 0x5410, 0x5, 0x40, @struct={0xdd38, 0xc}, 0x7, 0x5, [0x3ff, 0x46, 0x6, 0x7fff, 0x6, 0x6]}, {0x0, 0x3}}) r10 = syz_open_dev$evdev(&(0x7f0000006600), 0x192, 0x88000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000006640)={0x1, 0x100000001}) r11 = openat$ttyS3(0xffffff9c, &(0x7f0000006680), 0x40000, 0x0) fcntl$setpipe(r11, 0x407, 0x8c000000) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000066c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x2, 0x90, 0xf8, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "625d4c9f8cd4"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1ff, 0x6, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0xa3, 0x4}}}}}]}}]}}, &(0x7f0000006980)={0xa, &(0x7f0000006740)={0xa, 0x6, 0x250, 0x9, 0xc, 0x7f, 0x10, 0x7e}, 0xf, &(0x7f0000006780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x8, 0xa}]}, 0x4, [{0x6e, &(0x7f00000067c0)=@string={0x6e, 0x3, "5a7101b874ff5786f9ff6241a33a8d8252999c64751ce6dbbfdc4894dcf0e82f0c9e9eb68e79a97390cfa32108b6a56fc7d8d3922ddc346536d437308d8b453e57e3fef8e90f00bada943b77ee4da4473a8d36ff9ec02a281619ab7e376e8c710740b09f79f343fe615ba842"}}, {0x4, &(0x7f0000006840)=@lang_id={0x4, 0x3, 0x444}}, {0xa0, &(0x7f0000006880)=@string={0xa0, 0x3, "6c7e3c77317d41ec863403fc55fbace4098fac9b0912fb31d5fab213190e15e0b7a1a056915c5afac12b6d1365d887268c7acfa03b427167023c7cb3a9e2314bd44c2250898ce4ebd589aed2ca5498ac7e8b542fa8b41093a654061d2b45732a33ee874104a0119f9b58dcaf6ddbf63ba2c181b5824bdc1de2d72a5fa43bbcb88c02418658d85e846437ff78bb2e211f45a29c069e90739c58fea9dae4ac"}}, {0x4, &(0x7f0000006940)=@lang_id={0x4, 0x3, 0x140c}}]}) r12 = syz_clone(0xc2000, &(0x7f00000069c0)="c9d84d24b2f4436902074985b226edef67fa81043d3d95739592261064cd51f086df91a496faaca1c1cd370c33216117a0ff5ed9b08b809b02932bc538dc903e7206bd9ee64cd617d25a23b1ca61d323f13fa9335e2ed7b89cea97faa8e967c819b16049854e518bddf96b9af29ea527bd987d4f65bdd9b70a8e15f93a9bbca41eb4830eb0ff165c469d94853f", 0x8d, &(0x7f0000006a80), &(0x7f0000006ac0), &(0x7f0000006b00)="9b57784574bc601214b3e7d88477a98d67486c4d58cd5c4a5e9f6ef1016ac42b5220a39a9bee7423bf5e3b39b31c313db5ab7f55687e431e9167596b58e4e2a1da6fa7a6df3a1d5940793cd0c06ab89cd7700c249f304f81879007194088fc1473df49ef3cb3ae3fc09c9ae297171ecc1fdc23bc9e1f92056c78a158a8a3fbcb6ede") syz_open_procfs$pagemap(r12, &(0x7f0000006bc0)) ioctl$XFS_IOC_FSGEOMETRY(r10, 0x8100587e, &(0x7f0000006c00)) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000006dc0)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2c, 0x25dfdbfc, {0x2, 0x10, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1, 0x10002}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x804) 1.860086695s ago: executing program 0 (id=638): open(&(0x7f00000000c0)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004680), 0x20080, 0x0) dup3(r2, r0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340), &(0x7f0000000300)='./file1\x00', 0x8, 0x1) 1.688414995s ago: executing program 0 (id=639): r0 = openat$vcs(0xffffff9c, &(0x7f00000002c0), 0x2e06c0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000) (fail_nth: 1) 1.599107615s ago: executing program 0 (id=640): r0 = syz_open_dev$ndb(&(0x7f0000000a00), 0x0, 0x8040) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000007c0)=0x80) dup3(r2, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect$unix(r1, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000500)) r5 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x430800, 0x88) r6 = openat$procfs(0xffffff9c, &(0x7f0000000540)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x400854d5, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x3, 0x2, 0xe6}, {0x8, 0x6, 0x5, 0x2}, {0x5, 0x0, 0xd, 0x7}, {0x4, 0x7, 0xff, 0x8}, {0x3, 0x9, 0x5, 0x8}, {0xa4, 0x6, 0x6, 0x7}]}) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r5, r7, &(0x7f0000000240)={[&(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='^\x05:\'))/ {\x00', &(0x7f0000000100)='/dev/nbd#\x00', &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='^&\x00', &(0x7f00000001c0)='/dev/nbd#\x00', &(0x7f0000000200)='/dev/nbd#\x00']}, &(0x7f00000004c0)={[&(0x7f0000000280)='+,\'+@\xa2#\x00', &(0x7f00000002c0)='(/\x00', &(0x7f0000000300)='#}}#q(!(,<\x00', &(0x7f0000000340)='/dev/nbd#\x00', &(0x7f0000000380)='/dev/nbd#\x00', &(0x7f00000003c0)='-\x00', &(0x7f0000000400)='&#\x00', &(0x7f0000000440)='!/\x00', &(0x7f0000000480)='/dev/nbd#\x00']}, 0x100) 1.149176767s ago: executing program 0 (id=641): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000180)) 1.077421895s ago: executing program 1 (id=642): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt(r0, 0x7, 0x40, &(0x7f0000000140)="cddbf2ab579457af64a7e268b356f0ec02931cc1038a6a5b6a3d975ca90c76ed2e3c66133d9484621008fa8fcd1c4a09111cb55dcd5e490aa14f6a12b36f99f3809132678d98376f5ff9c9e768fec7480a1545d509513e194c0856081a6a8d18e0f253565440f86ec9d17a869547dfd16f9e7b40cd0776b19ed57f58389c8e8d26f0d9f21d2fd1cfbdbec3656798d01c29bce5e00ba946e8cf472491a204531021ecd7ce8b54b889784c1cac38b00e417cb7c5f57c4c4351c90f07b416c29c05586245ba62971134de3224f00bba9055c5f98f82a9d03fcb2df9f848b95b6bce20a2f6447e484133", 0xe8) setsockopt(r0, 0x6, 0x5, &(0x7f0000000400)="5a56bd894b1d036d323f7a853d0290dd01ba1cc01b17ad46833258fbc6e60f1d2660248478090738de1db7b1716fbeb1e8ab49e8432bb271d434862e2a263a39852a1d9b24320c6afdc7feba3cb356b0a2cf3204bf", 0x55) ioctl$FIONCLEX(r0, 0x5450) syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x198, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x0) 769.323201ms ago: executing program 0 (id=643): open(&(0x7f00000000c0)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004680), 0x20080, 0x0) dup3(r2, r0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340), &(0x7f0000000300)='./file1\x00', 0x8, 0x1) 345.33275ms ago: executing program 1 (id=644): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x22000, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000780)={"066bc2ee282e4327d3fa0f91d514e556e721f3c237acf90af41961b9e9e5", 0x8, 0x0, 0x0, 0x5, 0x44, 0x2, 0x7ff, 0x0, [0x8, 0x9, 0x8001, 0xcd7c, 0x3, 0x8, 0x6, 0x7, 0x8, 0x8, 0x401, 0x2, 0x9a, 0x4, 0x76, 0x80000, 0x100, 0x3, 0x8]}) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x18) symlinkat(&(0x7f0000000140)='.\x00', r2, &(0x7f0000000180)='./file0\x00') openat2(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x100, 0x0, 0x3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) mq_open(&(0x7f0000000080)='+{%\x00', 0x2, 0x1, &(0x7f00000000c0)={0xfffeffff, 0x1ff, 0x2, 0x6}) 78.622961ms ago: executing program 0 (id=645): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000001) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) 0s ago: executing program 1 (id=646): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pipe2$watch_queue(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x84004}, 0x10040) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, r3, 0xffdfffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) r4 = openat$selinux_validatetrans(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000180)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket(0x1d, 0x2, 0x6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000001900)={'8255\x00', [0x8, 0x2, 0x400, 0xf0000, 0xc, 0x0, 0xfff, 0x4c95238c, 0xa, 0x1000, 0x802, 0x1600, 0x96, 0x20000001, 0x809, 0x3, 0x6, 0x2, 0x402, 0x8, 0xdecf, 0x3, 0xb, 0x3ff, 0x72, 0x3, 0xef, 0xfffff6fb, 0x2a4, 0x8000004, 0xdffffffd]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r9, 0x4, {0x2, 0x0, 0x2}, 0xfe}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @multicast2}, &(0x7f0000000300)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@mcast2, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x5, 0xcf, {{0x19, 0x4, 0x1, 0x1a, 0x64, 0x68, 0x0, 0x6, 0x2b, 0x0, @rand_addr=0x64010100, @remote, {[@end, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0xf, [{@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x1f, 0xdc, [@loopback, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x28, 0x1, 0x0, [{@remote, 0x4}, {@loopback, 0x81}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010102}]}]}}}}}) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000780)={0xc, {0x1000, "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"}}, 0x1006) r13 = openat$selinux_enforce(0xffffff9c, &(0x7f00000019c0), 0x2d0800, 0x0) close(r13) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000001c40)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="7401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="835f8e457f04c4587d16fe2847f3be8abaf3b404a1d148ad329fa16cccc4ea2621ee82afa27c9e558821b1a0bdc71f0b5086c756b5c9a92e3d2a4758c10e72048594e2b064ddac1f52a2a8ea8cf2cebd4106131fb0d6f81fd11cc301d529e1e3fa168d442bfa1412dc22e0f25faaf9560fa9da0c03791901f5663794cd3e933d6e583eef34abe80ea0ed39"], 0x218}, 0x1, 0x0, 0x0, 0x14}, 0x4000040) ioctl$BTRFS_IOC_FS_INFO(r4, 0x5450, 0x0) listen(r0, 0x40) accept4$nfc_llcp(r0, 0x0, 0x0, 0x80800) close(r2) socket$nl_audit(0x10, 0x3, 0x9) kernel console output (not intermixed with test programs): 6.586115][ T4610] 9fe0: 76fe3e48 76fe3e38 0001488c 00130cf0 [ 156.586179][ T4610] r7:000001a9 r6:0010bf14 r5:00000004 r4:00000001 [ 156.921622][ T4607] FAULT_INJECTION: forcing a failure. [ 156.921622][ T4607] name failslab, interval 1, probability 0, space 0, times 0 [ 156.921759][ T4607] CPU: 0 UID: 0 PID: 4607 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT [ 156.921806][ T4607] Hardware name: ARM-Versatile Express [ 156.921817][ T4607] Call trace: [ 156.921839][ T4607] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 156.921896][ T4607] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 156.921905][ T4607] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 156.921935][ T4607] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 156.921965][ T4607] r7:85f14b00 r6:00000000 r5:85f14b00 r4:835165e4 [ 156.921972][ T4607] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 156.922001][ T4607] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 156.922037][ T4607] r8:00000000 r7:85f14b00 r6:807ed518 r5:00000dc0 r4:846c6e40 [ 156.922043][ T4607] [<8059a414>] (should_failslab) from [<80577278>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 156.922068][ T4607] [<8057721c>] (kmem_cache_alloc_noprof) from [<807ed518>] (fuse_request_alloc+0x24/0x84) [ 156.922103][ T4607] r10:00000001 r9:e8541c74 r8:87326d00 r7:871b3000 r6:8742fb00 r5:836f3aac [ 156.922121][ T4607] r4:8742fb00 [ 156.922137][ T4607] [<807ed4f4>] (fuse_request_alloc) from [<807edd34>] (fuse_get_req+0x98/0x184) [ 156.922194][ T4607] r7:871b3000 r6:8742fb90 r5:00000000 r4:8742fb00 [ 156.922212][ T4607] [<807edc9c>] (fuse_get_req) from [<807f1e78>] (fuse_chan_send+0x234/0x498) [ 156.922262][ T4607] r6:e8541bd0 r5:8742fb00 r4:e8541bd0 [ 156.922269][ T4607] [<807f1c44>] (fuse_chan_send) from [<80804b5c>] (__fuse_simple_request+0x5c/0x68) [ 156.922303][ T4607] r9:e8541c74 r8:87326d00 r7:871b3000 r6:86cfc9a8 r5:872b6840 r4:e8541bd0 [ 156.922310][ T4607] [<80804b00>] (__fuse_simple_request) from [<807f4fcc>] (fuse_lookup_name+0xc0/0x284) [ 156.922337][ T4607] r5:00000000 r4:e8541c78 [ 156.922344][ T4607] [<807f4f0c>] (fuse_lookup_name) from [<807f521c>] (fuse_lookup+0x8c/0x17c) [ 156.922377][ T4607] r10:00000000 r9:00000001 r8:00000001 r7:00000000 r6:86cfc990 r5:840ad8c0 [ 156.922385][ T4607] r4:86cfc990 [ 156.922391][ T4607] [<807f5190>] (fuse_lookup) from [<805e60e0>] (__lookup_slow+0x64/0xfc) [ 156.922469][ T4607] r9:00000000 r8:840ad8c0 r7:00100001 r6:e8541da0 r5:86546908 r4:86cfc990 [ 156.922482][ T4607] [<805e607c>] (__lookup_slow) from [<805e61b0>] (lookup_slow+0x38/0x50) [ 156.922522][ T4607] r9:00000000 r8:e8541e6c r7:00000001 r6:e8541da0 r5:86546908 r4:840ad940 [ 156.922529][ T4607] [<805e6178>] (lookup_slow) from [<805eac1c>] (path_lookupat+0x198/0x2a4) [ 156.922599][ T4607] r7:00000101 r6:e8541e6c r5:00000000 r4:e8541d98 [ 156.922612][ T4607] [<805eaa84>] (path_lookupat) from [<805ec3dc>] (filename_lookup+0xd8/0x1a8) [ 156.922653][ T4607] r9:00000000 r8:e8541e6c r7:00000001 r6:85f14b00 r5:84494540 r4:ffffff9c [ 156.922661][ T4607] [<805ec304>] (filename_lookup) from [<805ddf14>] (vfs_statx+0x6c/0x150) [ 156.922719][ T4607] r9:85f14b00 r8:84494540 r7:ffffff9c r6:00000001 r5:00000800 r4:e8541eb0 [ 156.922734][ T4607] [<805ddea8>] (vfs_statx) from [<805de058>] (__do_sys_newstat+0x60/0xac) [ 156.922783][ T4607] r10:0000006a r9:85f14b00 r8:8020029c r7:0000006a r6:20000040 r5:84494540 [ 156.922791][ T4607] r4:20000000 [ 156.922797][ T4607] [<805ddff8>] (__do_sys_newstat) from [<805de570>] (sys_newstat+0x10/0x14) [ 156.922825][ T4607] r6:0012f6f4 r5:00000000 r4:00000000 [ 156.922832][ T4607] [<805de560>] (sys_newstat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 156.922854][ T4607] Exception stack(0xe8541fa8 to 0xe8541ff0) [ 156.922874][ T4607] 1fa0: 00000000 00000000 20000000 20000040 00000000 00000000 [ 156.922890][ T4607] 1fc0: 00000000 00000000 0012f6f4 0000006a 003562d8 00000000 00000001 76f500dc [ 156.922903][ T4607] 1fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 160.354537][ T4642] Zero length message leads to an empty skb [ 161.777612][ T28] audit: type=1400 audit(161.680:198): avc: denied { prog_load } for pid=4650 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.211843][ T28] audit: type=1400 audit(164.120:199): avc: denied { setopt } for pid=4674 comm="syz.1.185" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.044881][ T4701] FAULT_INJECTION: forcing a failure. [ 170.044881][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.045022][ T4701] CPU: 1 UID: 0 PID: 4701 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT [ 170.045075][ T4701] Hardware name: ARM-Versatile Express [ 170.045099][ T4701] Call trace: [ 170.045140][ T4701] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 170.045260][ T4701] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 170.045280][ T4701] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 170.045338][ T4701] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 170.045400][ T4701] r7:00000000 r6:00000000 r5:85f14b00 r4:83555238 [ 170.045418][ T4701] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 170.045479][ T4701] [<80a5d534>] (should_fail_ex) from [<80a5d768>] (should_fail+0x14/0x18) [ 170.045546][ T4701] r8:76fe3f08 r7:00000000 r6:00000000 r5:ea949f68 r4:00000002 [ 170.045563][ T4701] [<80a5d754>] (should_fail) from [<80a5d788>] (should_fail_usercopy+0x1c/0x20) [ 170.045617][ T4701] [<80a5d76c>] (should_fail_usercopy) from [<80617658>] (simple_read_from_buffer+0x80/0x140) [ 170.045674][ T4701] [<806175d8>] (simple_read_from_buffer) from [<806a0214>] (proc_fail_nth_read+0xb8/0x10c) [ 170.045748][ T4701] r10:806a015c r9:00000001 r8:00000002 r7:ea949f68 r6:0000000f r5:76fe3f08 [ 170.045771][ T4701] r4:85f14b00 r3:ea949e9f [ 170.045785][ T4701] [<806a015c>] (proc_fail_nth_read) from [<805d53f8>] (vfs_read+0xc0/0x328) [ 170.045861][ T4701] r8:85f14b00 r7:ea949f68 r6:76fe3f08 r5:844a0f00 r4:0000000f [ 170.045876][ T4701] [<805d5338>] (vfs_read) from [<805d6044>] (ksys_read+0x74/0xec) [ 170.045944][ T4701] r10:00000003 r9:85f14b00 r8:8020029c r7:00000000 r6:00000000 r5:844a0f00 [ 170.045963][ T4701] r4:844a0f03 [ 170.045976][ T4701] [<805d5fd0>] (ksys_read) from [<805d60cc>] (sys_read+0x10/0x14) [ 170.046040][ T4701] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 170.046055][ T4701] [<805d60bc>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 170.046103][ T4701] Exception stack(0xea949fa8 to 0xea949ff0) [ 170.046144][ T4701] 9fa0: 00000000 00000000 00000005 76fe3f08 0000000f 00000000 [ 170.046180][ T4701] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fe40dc [ 170.046207][ T4701] 9fe0: 76fe3e58 76fe3e44 0010bf14 00112af8 [ 170.206412][ T28] audit: type=1400 audit(170.110:200): avc: denied { create } for pid=4703 comm="syz.0.193" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.224845][ T28] audit: type=1400 audit(170.130:201): avc: denied { read write } for pid=4703 comm="syz.0.193" name="md0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.229893][ T28] audit: type=1400 audit(170.140:202): avc: denied { open } for pid=4703 comm="syz.0.193" path="/98/md0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.249419][ T4704] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.249881][ T4704] block device autoloading is deprecated and will be removed. [ 170.284122][ T28] audit: type=1400 audit(170.190:203): avc: denied { unlink } for pid=3119 comm="syz-executor" name="md0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.942020][ T28] audit: type=1400 audit(170.850:204): avc: denied { setattr } for pid=4712 comm="syz.0.196" path="socket:[4022]" dev="sockfs" ino=4022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.103281][ T4720] capability: warning: `syz.0.198' uses deprecated v2 capabilities in a way that may be insecure [ 171.220820][ T28] audit: type=1400 audit(171.130:205): avc: denied { mount } for pid=4719 comm="syz.0.198" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 171.509275][ T4727] fuse: Bad value for 'user_id' [ 171.509420][ T4727] fuse: Bad value for 'user_id' [ 174.227716][ T28] audit: type=1400 audit(174.130:206): avc: denied { ioctl } for pid=4731 comm="syz.0.203" path="socket:[4059]" dev="sockfs" ino=4059 ioctlcmd=0x8030942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.702031][ T28] audit: type=1400 audit(175.610:207): avc: denied { cmd } for pid=4750 comm="syz.0.208" path="/dev/ublk-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 175.747684][ T28] audit: type=1400 audit(175.650:208): avc: denied { map } for pid=4750 comm="syz.0.208" path="/dev/ublkc0" dev="devtmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.763187][ T4751] FAULT_INJECTION: forcing a failure. [ 175.763187][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 175.763272][ T4751] CPU: 0 UID: 0 PID: 4751 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT [ 175.763300][ T4751] Hardware name: ARM-Versatile Express [ 175.763313][ T4751] Call trace: [ 175.763355][ T4751] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 175.763459][ T4751] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 175.763468][ T4751] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 175.763495][ T4751] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 175.763524][ T4751] r7:8575d780 r6:00000000 r5:8575d780 r4:835165e4 [ 175.763531][ T4751] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 175.763560][ T4751] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 175.763595][ T4751] r8:00000000 r7:8575d780 r6:83c01240 r5:00000d40 r4:0000001e [ 175.763602][ T4751] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 175.763626][ T4751] [<805781a4>] (__kmalloc_noprof) from [<80889ad8>] (tomoyo_encode2+0x64/0xec) [ 175.763661][ T4751] r10:00000fff r9:83cc3800 r8:00000000 r7:86cfb2a8 r6:844a05a8 r5:87287ffc [ 175.763669][ T4751] r4:87287fe9 [ 175.763675][ T4751] [<80889a74>] (tomoyo_encode2) from [<80889b84>] (tomoyo_encode+0x24/0x30) [ 175.763707][ T4751] r9:83cc3800 r8:00000000 r7:86cfb2a8 r6:844a05a8 r5:00001000 r4:87287fea [ 175.763714][ T4751] [<80889b60>] (tomoyo_encode) from [<80889c10>] (tomoyo_realpath_from_path+0x80/0x16c) [ 175.763740][ T4751] r5:00001000 r4:87287000 [ 175.763746][ T4751] [<80889b90>] (tomoyo_realpath_from_path) from [<80885f44>] (tomoyo_check_open_permission+0x150/0x1c0) [ 175.763778][ T4751] r10:00000000 r9:86185500 r8:00000000 r7:844a05a8 r6:00000004 r5:00020000 [ 175.763788][ T4751] r4:00000001 r3:00000001 [ 175.763793][ T4751] [<80885df4>] (tomoyo_check_open_permission) from [<8088aa70>] (tomoyo_file_open+0x34/0x38) [ 175.763825][ T4751] r9:844a0580 r8:8575d780 r7:00000000 r6:85737850 r5:81ef7a54 r4:844a0580 [ 175.763832][ T4751] [<8088aa3c>] (tomoyo_file_open) from [<80845750>] (security_file_open+0x70/0x184) [ 175.763859][ T4751] r5:81ef7a54 r4:844a0580 [ 175.763865][ T4751] [<808456e0>] (security_file_open) from [<805cff54>] (do_dentry_open+0xd8/0x500) [ 175.763894][ T4751] r5:81ef7a54 r4:844a0580 [ 175.763901][ T4751] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 175.763930][ T4751] r7:ea949f20 r6:844a05a8 r5:00000000 r4:844a0580 [ 175.763936][ T4751] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 175.763964][ T4751] r6:00000000 r5:00000000 r4:ea949e58 [ 175.763971][ T4751] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 175.764001][ T4751] r10:00000142 r9:8575d780 r8:00000001 r7:ffffff9c r6:ea949f20 r5:8575d780 [ 175.764009][ T4751] r4:844940c0 [ 175.764015][ T4751] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 175.764044][ T4751] r8:8020029c r7:76fe3a78 r6:ffffff9c r5:844940c0 r4:00000008 [ 175.764050][ T4751] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 175.764079][ T4751] r7:00000142 r6:76fe3ea8 r5:76fe3a78 r4:ffffff9c [ 175.764086][ T4751] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 175.764108][ T4751] Exception stack(0xea949fa8 to 0xea949ff0) [ 175.764126][ T4751] 9fa0: 00000000 00000000 ffffff9c 76fe3a78 00020000 00000000 [ 175.764142][ T4751] 9fc0: 00000000 00000000 76fe3ea8 00000142 003562d8 00000000 00000001 76fe40dc [ 175.764159][ T4751] 9fe0: 76fe39f8 76fe39e4 0010bf14 00112af8 [ 175.764183][ T4751] r5:00000000 r4:00000000 [ 175.764313][ T4751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.983193][ T4751] block device autoloading is deprecated and will be removed. [ 176.197050][ T4763] fuse: Bad value for 'fd' [ 176.630436][ T4774] fuse: Bad value for 'fd' [ 176.931360][ T28] audit: type=1400 audit(176.840:209): avc: denied { mount } for pid=4781 comm="syz.1.218" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.985822][ T28] audit: type=1400 audit(176.890:210): avc: denied { unmount } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.423489][ T28] audit: type=1400 audit(177.330:211): avc: denied { connect } for pid=4792 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.551415][ T4796] pimreg: entered allmulticast mode [ 177.573289][ T28] audit: type=1400 audit(177.480:212): avc: denied { read } for pid=4795 comm="syz.0.224" path="socket:[4666]" dev="sockfs" ino=4666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.711636][ T4799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4799 comm=syz.1.221 [ 178.129895][ T4807] pimreg: left allmulticast mode [ 178.851177][ T28] audit: type=1400 audit(178.760:213): avc: denied { ioctl } for pid=4812 comm="syz.1.228" path="socket:[4798]" dev="sockfs" ino=4798 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.670260][ T28] audit: type=1400 audit(182.580:214): avc: denied { sqpoll } for pid=4842 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 183.591867][ T4858] FAULT_INJECTION: forcing a failure. [ 183.591867][ T4858] name failslab, interval 1, probability 0, space 0, times 0 [ 183.592012][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT [ 183.592061][ T4858] Hardware name: ARM-Versatile Express [ 183.592082][ T4858] Call trace: [ 183.592120][ T4858] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 183.592221][ T4858] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 183.592238][ T4858] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 183.592288][ T4858] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 183.592347][ T4858] r7:00000020 r6:00000000 r5:8575d780 r4:835165e4 [ 183.592361][ T4858] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 183.592427][ T4858] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 183.592497][ T4858] r8:8575d780 r7:00000020 r6:807f3010 r5:00400dd0 r4:83c01900 [ 183.592512][ T4858] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 183.592567][ T4858] [<8057928c>] (__kmalloc_cache_noprof) from [<807f3010>] (fuse_dentry_init+0x2c/0x5c) [ 183.592643][ T4858] r10:86544880 r9:82760930 r8:00000005 r7:00000000 r6:00000000 r5:eae39e80 [ 183.592663][ T4858] r4:84389a18 [ 183.592677][ T4858] [<807f2fe4>] (fuse_dentry_init) from [<805f6a98>] (__d_alloc+0xfc/0x220) [ 183.592744][ T4858] r5:eae39e80 r4:84389a18 [ 183.592759][ T4858] [<805f699c>] (__d_alloc) from [<805fa294>] (__d_alloc_parallel+0x60/0x584) [ 183.592823][ T4858] r9:84493a9a r8:efeaa2d8 r7:00100401 r6:119ee946 r5:836e3c30 r4:840ad940 [ 183.592838][ T4858] [<805fa234>] (__d_alloc_parallel) from [<805fa7cc>] (d_alloc_parallel+0x14/0x18) [ 183.592899][ T4858] r10:2f2f2f2f r9:84493a9a r8:840ad8c0 r7:00100401 r6:eae39e80 r5:86544880 [ 183.592922][ T4858] r4:840ad940 [ 183.592937][ T4858] [<805fa7b8>] (d_alloc_parallel) from [<805e60b0>] (__lookup_slow+0x34/0xfc) [ 183.592985][ T4858] [<805e607c>] (__lookup_slow) from [<805e61b0>] (lookup_slow+0x38/0x50) [ 183.593051][ T4858] r9:84493a9a r8:d0d0d0d0 r7:00000401 r6:eae39e80 r5:86544880 r4:840ad940 [ 183.593067][ T4858] [<805e6178>] (lookup_slow) from [<805ea96c>] (link_path_walk+0x5c8/0x6e0) [ 183.593130][ T4858] r7:fefefeff r6:eae39e78 r5:00000008 r4:84493a99 [ 183.593146][ T4858] [<805ea3a4>] (link_path_walk) from [<805eda50>] (path_openat+0x78/0xa98) [ 183.593208][ T4858] r10:00000018 r9:8449f500 r8:8575d780 r7:eae39f40 r6:eae39f40 r5:84493a8c [ 183.593224][ T4858] r4:eae39e78 [ 183.593238][ T4858] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 183.593295][ T4858] r10:00000033 r9:84493a80 r8:00000001 r7:ffffff9c r6:eae39f40 r5:8575d780 [ 183.593312][ T4858] r4:84493a80 [ 183.593321][ T4858] [<805ee470>] (do_file_open) from [<805d2384>] (file_open_name+0xa4/0x16c) [ 183.593383][ T4858] r8:8575d780 r7:85750e00 r6:0012f6f4 r5:00000000 r4:20002240 [ 183.593397][ T4858] [<805d22e0>] (file_open_name) from [<80366494>] (sys_acct+0x80/0x320) [ 183.593459][ T4858] [<80366414>] (sys_acct) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 183.593506][ T4858] Exception stack(0xeae39fa8 to 0xeae39ff0) [ 183.593546][ T4858] 9fa0: 00000000 00000000 20002240 00000000 00000000 00000000 [ 183.593580][ T4858] 9fc0: 00000000 00000000 0012f6f4 00000033 003562d8 00000000 00000001 76fe40dc [ 183.593607][ T4858] 9fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 183.593642][ T4858] r10:00000033 r9:8575d780 r8:8020029c r7:00000033 r6:0012f6f4 r5:00000000 [ 183.593659][ T4858] r4:00000000 [ 184.231588][ T4862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4862 comm=syz.1.241 [ 184.901043][ T4868] fuse: Invalid rootmode [ 186.379775][ T4880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4880 comm=syz.0.246 [ 189.246002][ T4897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4897 comm=syz.1.252 [ 190.393022][ T28] audit: type=1400 audit(190.300:215): avc: denied { bind } for pid=4902 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.408822][ T28] audit: type=1400 audit(190.310:216): avc: denied { listen } for pid=4902 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.409004][ T28] audit: type=1400 audit(190.310:217): avc: denied { accept } for pid=4902 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 191.961728][ T4919] fuse: Unknown parameter 'use00000000000000000000' [ 192.285578][ T4924] FAULT_INJECTION: forcing a failure. [ 192.285578][ T4924] name failslab, interval 1, probability 0, space 0, times 0 [ 192.285712][ T4924] CPU: 1 UID: 0 PID: 4924 Comm: syz.1.259 Not tainted syzkaller #0 PREEMPT [ 192.285773][ T4924] Hardware name: ARM-Versatile Express [ 192.285794][ T4924] Call trace: [ 192.285833][ T4924] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 192.285940][ T4924] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 192.285957][ T4924] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 192.286007][ T4924] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 192.286070][ T4924] r7:85710000 r6:00000000 r5:85710000 r4:835165e4 [ 192.286087][ T4924] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 192.286145][ T4924] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 192.286216][ T4924] r8:00000000 r7:85710000 r6:805f69cc r5:00000cc0 r4:83cbac00 [ 192.286232][ T4924] [<8059a414>] (should_failslab) from [<8057765c>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 192.286285][ T4924] [<805775fc>] (kmem_cache_alloc_lru_noprof) from [<805f69cc>] (__d_alloc+0x30/0x220) [ 192.286356][ T4924] r10:83cc6000 r9:82760930 r8:81e229c0 r7:83cc6000 r6:83cfda10 r5:eb099b80 [ 192.286375][ T4924] r4:82561c24 [ 192.286388][ T4924] [<805f699c>] (__d_alloc) from [<805fa0f8>] (d_alloc_pseudo+0x10/0x3c) [ 192.286454][ T4924] r9:85710000 r8:81e229c0 r7:00000002 r6:83cfda10 r5:857370f0 r4:82561c24 [ 192.286470][ T4924] [<805fa0e8>] (d_alloc_pseudo) from [<805d7cf4>] (alloc_file_pseudo+0x7c/0x154) [ 192.286514][ T4924] [<805d7c78>] (alloc_file_pseudo) from [<804f84d8>] (__shmem_file_setup+0xc4/0x1a8) [ 192.286613][ T4924] r10:00000001 r9:00000b36 r8:82561c24 r7:857370f0 r6:00000000 r5:00b36000 [ 192.286633][ T4924] r4:83cfda10 [ 192.286647][ T4924] [<804f8414>] (__shmem_file_setup) from [<804febf8>] (shmem_zero_setup+0x4c/0x84) [ 192.286715][ T4924] r9:81e273ac r8:85710000 r7:00600000 r6:0000075f r5:20000000 r4:85589900 [ 192.286730][ T4924] [<804febac>] (shmem_zero_setup) from [<8055a098>] (__mmap_region+0xd6c/0x1264) [ 192.286795][ T4924] r5:20000000 r4:85589900 [ 192.286807][ T4924] [<8055932c>] (__mmap_region) from [<8055a660>] (mmap_region+0xa0/0x188) [ 192.286869][ T4924] r10:06ebbeeb r9:eb099ebc r8:85fda580 r7:85710000 r6:00b36000 r5:20000000 [ 192.286886][ T4924] r4:00000000 [ 192.286902][ T4924] [<8055a5c0>] (mmap_region) from [<80538ff4>] (do_mmap+0x4d0/0x5e8) [ 192.286969][ T4924] r7:85710000 r6:20000000 r5:00008031 r4:00b36000 [ 192.286984][ T4924] [<80538b24>] (do_mmap) from [<80500900>] (vm_mmap_pgoff+0x128/0x220) [ 192.287048][ T4924] r10:85fda580 r9:20000000 r8:00b36000 r7:eb099f18 r6:00000000 r5:06ebbeeb [ 192.287066][ T4924] r4:00000000 [ 192.287079][ T4924] [<805007d8>] (vm_mmap_pgoff) from [<80538294>] (ksys_mmap_pgoff+0x48/0xec) [ 192.287144][ T4924] r10:000000c0 r9:85710000 r8:8020029c r7:20000000 r6:00b36000 r5:06ebbeeb [ 192.287162][ T4924] r4:00008031 [ 192.287174][ T4924] [<8053824c>] (ksys_mmap_pgoff) from [<80538354>] (sys_mmap_pgoff+0x1c/0x24) [ 192.287238][ T4924] r8:8020029c r7:000000c0 r6:0012f6f4 r5:00000000 r4:00000003 [ 192.287255][ T4924] [<80538338>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 192.287303][ T4924] Exception stack(0xeb099fa8 to 0xeb099ff0) [ 192.287344][ T4924] 9fa0: 00000003 00000000 20000000 00b36000 06ebbeeb 00008031 [ 192.287379][ T4924] 9fc0: 00000003 00000000 0012f6f4 000000c0 003562d8 00000000 00000001 76f500dc [ 192.287406][ T4924] 9fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 192.841681][ T4932] fuse: Unknown parameter 'use00000000000000000000' [ 193.994639][ T4946] fuse: Unknown parameter 'use00000000000000000000' [ 197.105300][ T4973] fuse: Bad value for 'fd' [ 199.134122][ T28] audit: type=1400 audit(199.040:218): avc: denied { write } for pid=4979 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.714707][ T4986] fuse: Bad value for 'fd' [ 200.759050][ T4999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4999 comm=syz.0.287 [ 201.309285][ T5006] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 201.309467][ T5006] audit: out of memory in audit_log_start [ 203.169943][ T28] audit: type=1400 audit(203.080:219): avc: denied { setopt } for pid=5009 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.242456][ T5016] fuse: Unknown parameter 'user_id00000000000000000000' [ 205.357739][ T5028] fuse: Unknown parameter 'user_id00000000000000000000' [ 205.540052][ T5030] fuse: Bad value for 'user_id' [ 205.540108][ T5030] fuse: Bad value for 'user_id' [ 206.500370][ T5040] fuse: Unknown parameter 'user_id00000000000000000000' [ 207.602790][ T5056] fuse: Bad value for 'fd' [ 208.922144][ T5070] fuse: Bad value for 'fd' [ 210.969568][ T5084] fuse: Bad value for 'fd' [ 211.120856][ T5087] fuse: Bad value for 'fd' [ 211.814121][ T5094] fuse: Unknown parameter '0x0000000000000004' [ 211.970734][ T5099] fuse: Bad value for 'fd' [ 212.483447][ T28] audit: type=1400 audit(212.390:220): avc: denied { create } for pid=5102 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.484868][ T28] audit: type=1400 audit(212.390:221): avc: denied { write } for pid=5102 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.681447][ T5109] fuse: Unknown parameter '0x0000000000000004' [ 212.783483][ T5112] fuse: Bad value for 'fd' [ 214.168496][ T5128] fuse: Unknown parameter '0x0000000000000004' [ 215.104996][ T28] audit: type=1400 audit(215.010:222): avc: denied { bind } for pid=5134 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.663774][ T28] audit: type=1400 audit(218.570:223): avc: denied { setopt } for pid=5177 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.592641][ T5187] FAULT_INJECTION: forcing a failure. [ 219.592641][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 219.592770][ T5187] CPU: 1 UID: 0 PID: 5187 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT [ 219.592819][ T5187] Hardware name: ARM-Versatile Express [ 219.592840][ T5187] Call trace: [ 219.592879][ T5187] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 219.592984][ T5187] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 219.593002][ T5187] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 219.593056][ T5187] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 219.593119][ T5187] r7:84d40c80 r6:00000000 r5:84d40c80 r4:835165e4 [ 219.593133][ T5187] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 219.593192][ T5187] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 219.593264][ T5187] r8:00000000 r7:84d40c80 r6:83c016c0 r5:00000c40 r4:00001000 [ 219.593280][ T5187] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 219.593329][ T5187] [<805781a4>] (__kmalloc_noprof) from [<80889bcc>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 219.593399][ T5187] r10:00000000 r9:83cc3800 r8:00000000 r7:841be000 r6:846ca228 r5:00001000 [ 219.593418][ T5187] r4:00000000 [ 219.593442][ T5187] [<80889b90>] (tomoyo_realpath_from_path) from [<80885f44>] (tomoyo_check_open_permission+0x150/0x1c0) [ 219.593510][ T5187] r10:00000000 r9:86185500 r8:00000000 r7:846ca228 r6:00000006 r5:00129002 [ 219.593533][ T5187] r4:00000001 r3:00000001 [ 219.593546][ T5187] [<80885df4>] (tomoyo_check_open_permission) from [<8088aa70>] (tomoyo_file_open+0x34/0x38) [ 219.593613][ T5187] r9:846ca200 r8:84d40c80 r7:00000000 r6:850d67b8 r5:81e28f18 r4:846ca200 [ 219.593630][ T5187] [<8088aa3c>] (tomoyo_file_open) from [<80845750>] (security_file_open+0x70/0x184) [ 219.593686][ T5187] r5:81e28f18 r4:846ca200 [ 219.593702][ T5187] [<808456e0>] (security_file_open) from [<805cff54>] (do_dentry_open+0xd8/0x500) [ 219.593758][ T5187] r5:81e28f18 r4:846ca200 [ 219.593771][ T5187] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 219.593831][ T5187] r7:ec4edf20 r6:846ca228 r5:00000000 r4:846ca200 [ 219.593845][ T5187] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 219.593905][ T5187] r6:00000000 r5:00000000 r4:ec4ede58 [ 219.593919][ T5187] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 219.593985][ T5187] r10:00000142 r9:84d40c80 r8:00000000 r7:ffffff9c r6:ec4edf20 r5:84d40c80 [ 219.594003][ T5187] r4:84494000 [ 219.594016][ T5187] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 219.594078][ T5187] r8:8020029c r7:76f4fa78 r6:ffffff9c r5:84494000 r4:00000004 [ 219.594094][ T5187] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 219.594155][ T5187] r7:00000142 r6:76f4fea8 r5:76f4fa78 r4:ffffff9c [ 219.594171][ T5187] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 219.594227][ T5187] Exception stack(0xec4edfa8 to 0xec4edff0) [ 219.594266][ T5187] dfa0: 00000000 00000000 ffffff9c 76f4fa78 00129002 00000000 [ 219.594302][ T5187] dfc0: 00000000 00000000 76f4fea8 00000142 003562d8 00000000 003d0f00 76f500dc [ 219.594329][ T5187] dfe0: 76f4f9f8 76f4f9e4 0010bf14 00112af8 [ 219.594357][ T5187] r5:00000000 r4:00000000 [ 219.594401][ T5187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.208610][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.385406][ T11] usb 2-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 220.425402][ T11] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 220.425559][ T11] usb 2-1: config 1 has no interface number 0 [ 220.425660][ T11] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 220.425760][ T11] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 220.492521][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.492630][ T11] usb 2-1: Product: syz [ 220.492657][ T11] usb 2-1: Manufacturer: syz [ 220.492680][ T11] usb 2-1: SerialNumber: syz [ 220.512555][ T5191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.512865][ T5191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.521509][ T11] usb 2-1: Error in usbnet_get_endpoints (-22) [ 220.726438][ T23] usb 2-1: USB disconnect, device number 13 [ 221.860297][ T28] audit: type=1400 audit(221.770:224): avc: denied { write } for pid=5231 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.482087][ T28] audit: type=1400 audit(222.390:225): avc: denied { getopt } for pid=5237 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.009207][ T5249] fuse: Unknown parameter 'fd0x0000000000000004' [ 223.200412][ T5253] fuse: Bad value for 'fd' [ 223.325799][ T28] audit: type=1400 audit(223.230:226): avc: denied { write } for pid=5254 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.998972][ T5264] fuse: Unknown parameter 'fd0x0000000000000004' [ 224.175542][ T5270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5270 comm=syz.1.388 [ 224.175711][ T5270] FAULT_INJECTION: forcing a failure. [ 224.175711][ T5270] name failslab, interval 1, probability 0, space 0, times 0 [ 224.175771][ T5270] CPU: 1 UID: 0 PID: 5270 Comm: syz.1.388 Not tainted syzkaller #0 PREEMPT [ 224.175814][ T5270] Hardware name: ARM-Versatile Express [ 224.175834][ T5270] Call trace: [ 224.175871][ T5270] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 224.175973][ T5270] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 224.175989][ T5270] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 224.176036][ T5270] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 224.176092][ T5270] r7:85773200 r6:00000000 r5:85773200 r4:835165e4 [ 224.176105][ T5270] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 224.176158][ T5270] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 224.176223][ T5270] r8:00000000 r7:85773200 r6:816e16fc r5:00000820 r4:83cf8cc0 [ 224.176236][ T5270] [<8059a414>] (should_failslab) from [<80577278>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 224.176283][ T5270] [<8057721c>] (kmem_cache_alloc_noprof) from [<816e16fc>] (skb_clone+0x60/0x1d0) [ 224.176351][ T5270] r10:8340f6b0 r9:862ef840 r8:87013000 r7:860fd600 r6:86119800 r5:860fd600 [ 224.176368][ T5270] r4:00000820 [ 224.176380][ T5270] [<816e169c>] (skb_clone) from [<817ff5dc>] (__netlink_deliver_tap+0xfc/0x1a8) [ 224.176454][ T5270] r7:860fd600 r6:86119800 r5:87013740 r4:86119800 [ 224.176468][ T5270] [<817ff4e0>] (__netlink_deliver_tap) from [<81803518>] (netlink_unicast+0x3fc/0x420) [ 224.176532][ T5270] r10:8340f6b0 r9:86ba2000 r8:862ef840 r7:86119864 r6:860fd600 r5:0000001c [ 224.176549][ T5270] r4:86119800 [ 224.176560][ T5270] [<8180311c>] (netlink_unicast) from [<81803718>] (netlink_sendmsg+0x1dc/0x46c) [ 224.176623][ T5270] r10:00000000 r9:86ac7800 r8:00000000 r7:00000000 r6:0000001c r5:860fd600 [ 224.176639][ T5270] r4:ec559f28 [ 224.176650][ T5270] [<8180353c>] (netlink_sendmsg) from [<816cc030>] (__sock_sendmsg+0x44/0xb0) [ 224.176719][ T5270] r10:0404c040 r9:00000000 r8:ec559dd4 r7:00000000 r6:84238cc0 r5:ec559f28 [ 224.176737][ T5270] r4:00000000 [ 224.176750][ T5270] [<816cbfec>] (__sock_sendmsg) from [<816ccf24>] (____sys_sendmsg+0x238/0x2fc) [ 224.176808][ T5270] r7:00000000 r6:00000000 r5:84238cc0 r4:ec559f28 [ 224.176821][ T5270] [<816cccec>] (____sys_sendmsg) from [<816cd35c>] (___sys_sendmsg+0x9c/0xd0) [ 224.176884][ T5270] r10:00000128 r9:20000440 r8:0404c040 r7:00000000 r6:84238cc0 r5:ec559f28 [ 224.176904][ T5270] r4:00000000 [ 224.176919][ T5270] [<816cd2c0>] (___sys_sendmsg) from [<816cf7f0>] (__sys_sendmsg+0x8c/0xe0) [ 224.176984][ T5270] r9:85773200 r8:844a0280 r7:0404c040 r6:20000440 r5:844a0281 r4:00000003 [ 224.176999][ T5270] [<816cf764>] (__sys_sendmsg) from [<816cf858>] (sys_sendmsg+0x14/0x18) [ 224.177062][ T5270] r8:8020029c r7:00000128 r6:0012f6f4 r5:00000000 r4:00000000 [ 224.177077][ T5270] [<816cf844>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 224.177125][ T5270] Exception stack(0xec559fa8 to 0xec559ff0) [ 224.177166][ T5270] 9fa0: 00000000 00000000 00000003 20000440 0404c040 00000000 [ 224.177199][ T5270] 9fc0: 00000000 00000000 0012f6f4 00000128 003562d8 00000000 00000001 76f500dc [ 224.177225][ T5270] 9fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 224.435211][ T5276] fuse: Unknown parameter 'fd0x0000000000000004' [ 224.622762][ T5281] fuse: Bad value for 'fd' [ 224.928868][ T3067] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 224.991799][ T28] audit: type=1400 audit(224.900:227): avc: denied { listen } for pid=5289 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.993940][ T28] audit: type=1400 audit(224.900:228): avc: denied { accept } for pid=5289 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.088748][ T3067] usb 1-1: Using ep0 maxpacket: 8 [ 225.091827][ T3067] usb 1-1: New USB device found: idVendor=1bc7, idProduct=10d1, bcdDevice=34.06 [ 225.098813][ T3067] usb 1-1: config 23 has an invalid interface number: 74 but max is 2 [ 225.098942][ T3067] usb 1-1: config 23 has an invalid interface number: 230 but max is 2 [ 225.098980][ T3067] usb 1-1: config 23 has an invalid interface number: 15 but max is 2 [ 225.099102][ T3067] usb 1-1: config 23 has an invalid descriptor of length 1, skipping remainder of the config [ 225.099166][ T3067] usb 1-1: config 23 has no interface number 0 [ 225.099214][ T3067] usb 1-1: config 23 has no interface number 1 [ 225.099247][ T3067] usb 1-1: config 23 has no interface number 2 [ 225.099368][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 225.099443][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 225.099483][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0xE has invalid maxpacket 608, setting to 64 [ 225.099522][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0x6 has invalid wMaxPacketSize 0 [ 225.099554][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has an endpoint descriptor with address 0x7E, changing to 0xE [ 225.099612][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has a duplicate endpoint with address 0xE, skipping [ 225.099721][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has a duplicate endpoint with address 0x3, skipping [ 225.099762][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 225.099801][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has a duplicate endpoint with address 0x3, skipping [ 225.099869][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has a duplicate endpoint with address 0xB, skipping [ 225.099934][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 225.099976][ T3067] usb 1-1: config 23 interface 74 altsetting 24 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 225.100012][ T3067] usb 1-1: config 23 interface 74 altsetting 24 has a duplicate endpoint with address 0x7, skipping [ 225.100059][ T3067] usb 1-1: config 23 interface 15 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 225.100099][ T3067] usb 1-1: config 23 interface 15 altsetting 6 endpoint 0x2 has an invalid bInterval 113, changing to 7 [ 225.100137][ T3067] usb 1-1: config 23 interface 15 altsetting 6 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 225.100170][ T3067] usb 1-1: config 23 interface 15 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 225.100216][ T3067] usb 1-1: config 23 interface 15 altsetting 6 has 5 endpoint descriptors, different from the interface descriptor's value: 16 [ 225.100283][ T3067] usb 1-1: config 23 interface 74 has no altsetting 0 [ 225.100320][ T3067] usb 1-1: config 23 interface 230 has no altsetting 0 [ 225.100351][ T3067] usb 1-1: config 23 interface 15 has no altsetting 0 [ 225.138349][ T3067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.138466][ T3067] usb 1-1: Product: 鮎䆷臠饁뺢䫛撉⽓᭚ᰳЭ蚵튔燢梫瓯뜁თ춴⿼킲朰壣ᛎ㰮ꙥ璊ந셿ၞ㬰烼덢쀳젔줏ꢑ譽┉ႏ翱퉹賕＄髉턒훮꺹嵱ᒖꝗ䋶冗刅吗琕獟圱䑶넣䌣˒氨⸰鵊䖥᰿玓㨂疛要꫺訕驀廰ｱﯙᙗ蛔钾램됔敼䏁࿭⸒뙳㚪礯걚ⲩ䯕Ꙣ킖凩ᶖﵐ覵㌚晅㽯嬯ꅀ컴솮 [ 225.138501][ T3067] usb 1-1: Manufacturer: ⱗ [ 225.138527][ T3067] usb 1-1: SerialNumber: ᐇ [ 225.507249][ T3067] option 1-1:23.74: GSM modem (1-port) converter detected [ 225.570183][ T3067] usb 1-1: USB disconnect, device number 13 [ 225.581831][ T3067] option 1-1:23.74: device disconnected [ 225.726939][ T5312] fuse: Bad value for 'fd' [ 227.409830][ T5324] fuse: Bad value for 'fd' [ 230.357074][ T28] audit: type=1400 audit(230.260:229): avc: denied { connect } for pid=5341 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.406657][ T5344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5344 comm=syz.1.411 [ 231.745908][ T5358] FAULT_INJECTION: forcing a failure. [ 231.745908][ T5358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.746045][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT [ 231.746089][ T5358] Hardware name: ARM-Versatile Express [ 231.746108][ T5358] Call trace: [ 231.746143][ T5358] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 231.746236][ T5358] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 231.746251][ T5358] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 231.746296][ T5358] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 231.746349][ T5358] r7:20000740 r6:00000000 r5:846a0c80 r4:83555238 [ 231.746362][ T5358] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 231.746414][ T5358] [<80a5d534>] (should_fail_ex) from [<80a5d768>] (should_fail+0x14/0x18) [ 231.746474][ T5358] r8:00048894 r7:20000740 r6:ec5bde30 r5:00000000 r4:ec5bdf28 [ 231.746486][ T5358] [<80a5d754>] (should_fail) from [<80a5d788>] (should_fail_usercopy+0x1c/0x20) [ 231.746532][ T5358] [<80a5d76c>] (should_fail_usercopy) from [<816cd130>] (copy_msghdr_from_user+0x50/0x1e0) [ 231.746619][ T5358] [<816cd0e0>] (copy_msghdr_from_user) from [<816cd338>] (___sys_sendmsg+0x78/0xd0) [ 231.746677][ T5358] r8:00048894 r7:00000000 r6:866ecf40 r5:ec5bdf28 r4:ec5bde74 [ 231.746689][ T5358] [<816cd2c0>] (___sys_sendmsg) from [<816cf7f0>] (__sys_sendmsg+0x8c/0xe0) [ 231.746748][ T5358] r9:846a0c80 r8:873b5580 r7:00048894 r6:20000740 r5:873b5581 r4:00000003 [ 231.746761][ T5358] [<816cf764>] (__sys_sendmsg) from [<816cf858>] (sys_sendmsg+0x14/0x18) [ 231.746819][ T5358] r8:8020029c r7:00000128 r6:0012f6f4 r5:00000000 r4:00000000 [ 231.746832][ T5358] [<816cf844>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 231.746880][ T5358] Exception stack(0xec5bdfa8 to 0xec5bdff0) [ 231.746921][ T5358] dfa0: 00000000 00000000 00000003 20000740 00048894 00000000 [ 231.746961][ T5358] dfc0: 00000000 00000000 0012f6f4 00000128 003562d8 00000000 00000001 76f500dc [ 231.746989][ T5358] dfe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 231.865751][ T5360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5360 comm=syz.1.417 [ 231.926690][ T5362] fuse: Bad value for 'group_id' [ 231.926745][ T5362] fuse: Bad value for 'group_id' [ 233.120399][ T5370] FAULT_INJECTION: forcing a failure. [ 233.120399][ T5370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.120550][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT [ 233.120606][ T5370] Hardware name: ARM-Versatile Express [ 233.120628][ T5370] Call trace: [ 233.120669][ T5370] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 233.120780][ T5370] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 233.120799][ T5370] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 233.120854][ T5370] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 233.120918][ T5370] r7:20000580 r6:00000000 r5:85710000 r4:83555238 [ 233.120933][ T5370] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 233.120995][ T5370] [<80a5d534>] (should_fail_ex) from [<80a5d768>] (should_fail+0x14/0x18) [ 233.121064][ T5370] r8:00000000 r7:20000580 r6:00000034 r5:00000000 r4:ec58df38 [ 233.121079][ T5370] [<80a5d754>] (should_fail) from [<80a5d788>] (should_fail_usercopy+0x1c/0x20) [ 233.121133][ T5370] [<80a5d76c>] (should_fail_usercopy) from [<8098f0b4>] (_copy_from_iter+0x64/0x7fc) [ 233.121194][ T5370] [<8098f050>] (_copy_from_iter) from [<818036d8>] (netlink_sendmsg+0x19c/0x46c) [ 233.121272][ T5370] r10:00000000 r9:873e8000 r8:00000000 r7:ec58df38 r6:00000034 r5:84469e40 [ 233.121290][ T5370] r4:ec58df28 [ 233.121307][ T5370] [<8180353c>] (netlink_sendmsg) from [<816cc030>] (__sock_sendmsg+0x44/0xb0) [ 233.121397][ T5370] r10:00000880 r9:00000000 r8:ec58ddd4 r7:00000000 r6:840b91c0 r5:ec58df28 [ 233.121418][ T5370] r4:00000000 [ 233.121431][ T5370] [<816cbfec>] (__sock_sendmsg) from [<816ccf24>] (____sys_sendmsg+0x238/0x2fc) [ 233.121494][ T5370] r7:00000000 r6:00000000 r5:840b91c0 r4:ec58df28 [ 233.121509][ T5370] [<816cccec>] (____sys_sendmsg) from [<816cd35c>] (___sys_sendmsg+0x9c/0xd0) [ 233.121576][ T5370] r10:00000128 r9:20000500 r8:00000880 r7:00000000 r6:840b91c0 r5:ec58df28 [ 233.121594][ T5370] r4:00000000 [ 233.121608][ T5370] [<816cd2c0>] (___sys_sendmsg) from [<816cf7f0>] (__sys_sendmsg+0x8c/0xe0) [ 233.121678][ T5370] r9:85710000 r8:8449ee80 r7:00000880 r6:20000500 r5:8449ee81 r4:00000003 [ 233.121695][ T5370] [<816cf764>] (__sys_sendmsg) from [<816cf858>] (sys_sendmsg+0x14/0x18) [ 233.121763][ T5370] r8:8020029c r7:00000128 r6:0012f6f4 r5:00000000 r4:00000000 [ 233.121779][ T5370] [<816cf844>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 233.121831][ T5370] Exception stack(0xec58dfa8 to 0xec58dff0) [ 233.121873][ T5370] dfa0: 00000000 00000000 00000003 20000500 00000880 00000000 [ 233.121911][ T5370] dfc0: 00000000 00000000 0012f6f4 00000128 003562d8 00000000 00000001 76fe40dc [ 233.121937][ T5370] dfe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 233.289371][ T5372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5372 comm=syz.0.422 [ 233.630696][ T5374] fuse: Bad value for 'group_id' [ 233.630794][ T5374] fuse: Bad value for 'group_id' [ 234.758943][ T5384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5384 comm=syz.1.427 [ 239.398599][ T28] audit: type=1400 audit(239.300:230): avc: denied { create } for pid=5426 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.664791][ T28] audit: type=1400 audit(239.570:231): avc: denied { ioctl } for pid=5428 comm="syz.0.444" path="socket:[7096]" dev="sockfs" ino=7096 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.839608][ T5434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5434 comm=syz.0.446 [ 240.352666][ T28] audit: type=1400 audit(240.260:232): avc: denied { ioctl } for pid=5429 comm="syz.1.445" path="socket:[7111]" dev="sockfs" ino=7111 ioctlcmd=0xc00864bf scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.802200][ T5450] fuse: Bad value for 'fd' [ 241.064992][ T5454] FAULT_INJECTION: forcing a failure. [ 241.064992][ T5454] name failslab, interval 1, probability 0, space 0, times 0 [ 241.065121][ T5454] CPU: 1 UID: 0 PID: 5454 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT [ 241.065162][ T5454] Hardware name: ARM-Versatile Express [ 241.065180][ T5454] Call trace: [ 241.065213][ T5454] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 241.065304][ T5454] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 241.065317][ T5454] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 241.065360][ T5454] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 241.065412][ T5454] r7:84c29900 r6:00000000 r5:84c29900 r4:835165e4 [ 241.065424][ T5454] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 241.065472][ T5454] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 241.065531][ T5454] r8:00000000 r7:84c29900 r6:83c01240 r5:00000d40 r4:0000001d [ 241.065542][ T5454] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 241.065582][ T5454] [<805781a4>] (__kmalloc_noprof) from [<80889ad8>] (tomoyo_encode2+0x64/0xec) [ 241.065639][ T5454] r10:00000fff r9:83cc3800 r8:00000000 r7:841bdb28 r6:846cc2a8 r5:83fc5ffc [ 241.065653][ T5454] r4:83fc5fea [ 241.065665][ T5454] [<80889a74>] (tomoyo_encode2) from [<80889b84>] (tomoyo_encode+0x24/0x30) [ 241.065719][ T5454] r9:83cc3800 r8:00000000 r7:841bdb28 r6:846cc2a8 r5:00001000 r4:83fc5feb [ 241.065730][ T5454] [<80889b60>] (tomoyo_encode) from [<80889c10>] (tomoyo_realpath_from_path+0x80/0x16c) [ 241.065774][ T5454] r5:00001000 r4:83fc5000 [ 241.065784][ T5454] [<80889b90>] (tomoyo_realpath_from_path) from [<80885c94>] (tomoyo_path_number_perm+0xcc/0x22c) [ 241.065838][ T5454] r10:00000000 r9:00000003 r8:846cc280 r7:80044d03 r6:81ee19d4 r5:00000004 [ 241.065861][ T5454] r4:846cc2a8 r3:832db580 [ 241.065871][ T5454] [<80885bc8>] (tomoyo_path_number_perm) from [<8088a5e8>] (tomoyo_file_ioctl+0x1c/0x20) [ 241.065927][ T5454] r10:84c29900 r9:00000003 r8:846cc280 r7:200000c0 r6:200000c0 r5:80044d03 [ 241.065941][ T5454] r4:846cc280 [ 241.065951][ T5454] [<8088a5cc>] (tomoyo_file_ioctl) from [<80834948>] (security_file_ioctl+0x80/0x1d4) [ 241.065993][ T5454] [<808348c8>] (security_file_ioctl) from [<805f20cc>] (sys_ioctl+0x4c/0xb5c) [ 241.066046][ T5454] r7:200000c0 r6:80044d03 r5:846cc281 r4:00000000 [ 241.066057][ T5454] [<805f2080>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 241.066094][ T5454] Exception stack(0xec641fa8 to 0xec641ff0) [ 241.066123][ T5454] 1fa0: 00000000 00000000 00000003 80044d03 200000c0 00000000 [ 241.066151][ T5454] 1fc0: 00000000 00000000 0012f6f4 00000036 003562d8 00000000 00000001 76fe40dc [ 241.066173][ T5454] 1fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 241.066202][ T5454] r10:00000036 r9:84c29900 r8:8020029c r7:00000036 r6:0012f6f4 r5:00000000 [ 241.066216][ T5454] r4:00000000 [ 241.066261][ T5454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.274328][ T5460] fuse: Bad value for 'fd' [ 241.491870][ T28] audit: type=1400 audit(241.400:233): avc: denied { audit_write } for pid=5463 comm="syz.0.460" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 241.713127][ T5470] fuse: Bad value for 'fd' [ 241.820568][ T5472] FAULT_INJECTION: forcing a failure. [ 241.820568][ T5472] name failslab, interval 1, probability 0, space 0, times 0 [ 241.820700][ T5472] CPU: 1 UID: 0 PID: 5472 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT [ 241.820745][ T5472] Hardware name: ARM-Versatile Express [ 241.820763][ T5472] Call trace: [ 241.820799][ T5472] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 241.820900][ T5472] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 241.820916][ T5472] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 241.820960][ T5472] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 241.821013][ T5472] r7:85768c80 r6:00000000 r5:85768c80 r4:835165e4 [ 241.821024][ T5472] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 241.821074][ T5472] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 241.821137][ T5472] r8:00000000 r7:85768c80 r6:83c01240 r5:00000d40 r4:00000022 [ 241.821149][ T5472] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 241.821192][ T5472] [<805781a4>] (__kmalloc_noprof) from [<80889ad8>] (tomoyo_encode2+0x64/0xec) [ 241.821253][ T5472] r10:00000fff r9:83cc3800 r8:00000000 r7:840d4198 r6:844a1128 r5:83fc5ffc [ 241.821268][ T5472] r4:83fc5fe5 [ 241.821281][ T5472] [<80889a74>] (tomoyo_encode2) from [<80889b84>] (tomoyo_encode+0x24/0x30) [ 241.821337][ T5472] r9:83cc3800 r8:00000000 r7:840d4198 r6:844a1128 r5:00001000 r4:83fc5fe6 [ 241.821350][ T5472] [<80889b60>] (tomoyo_encode) from [<80889c10>] (tomoyo_realpath_from_path+0x80/0x16c) [ 241.821397][ T5472] r5:00001000 r4:83fc5000 [ 241.821409][ T5472] [<80889b90>] (tomoyo_realpath_from_path) from [<80885f44>] (tomoyo_check_open_permission+0x150/0x1c0) [ 241.821467][ T5472] r10:00000000 r9:86185500 r8:00000000 r7:844a1128 r6:00000006 r5:00020002 [ 241.821484][ T5472] r4:00000001 r3:00000001 [ 241.821495][ T5472] [<80885df4>] (tomoyo_check_open_permission) from [<8088aa70>] (tomoyo_file_open+0x34/0x38) [ 241.821553][ T5472] r9:844a1100 r8:85768c80 r7:00000000 r6:856deb68 r5:81e28f18 r4:844a1100 [ 241.821566][ T5472] [<8088aa3c>] (tomoyo_file_open) from [<80845750>] (security_file_open+0x70/0x184) [ 241.821612][ T5472] r5:81e28f18 r4:844a1100 [ 241.821624][ T5472] [<808456e0>] (security_file_open) from [<805cff54>] (do_dentry_open+0xd8/0x500) [ 241.821673][ T5472] r5:81e28f18 r4:844a1100 [ 241.821685][ T5472] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 241.821736][ T5472] r7:ec649f20 r6:844a1128 r5:00000000 r4:844a1100 [ 241.821747][ T5472] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 241.821798][ T5472] r6:00000000 r5:00000000 r4:ec649e58 [ 241.821810][ T5472] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 241.821864][ T5472] r10:00000142 r9:85768c80 r8:00000001 r7:ffffff9c r6:ec649f20 r5:85768c80 [ 241.821879][ T5472] r4:844943c0 [ 241.821897][ T5472] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 241.821950][ T5472] r8:8020029c r7:0018afa8 r6:ffffff9c r5:844943c0 r4:00000004 [ 241.821963][ T5472] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 241.822014][ T5472] r7:00000142 r6:00000000 r5:0018afa8 r4:ffffff9c [ 241.822027][ T5472] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 241.822066][ T5472] Exception stack(0xec649fa8 to 0xec649ff0) [ 241.822098][ T5472] 9fa0: 00000000 00000000 ffffff9c 0018afa8 00020002 00000000 [ 241.822128][ T5472] 9fc0: 00000000 00000000 00000000 00000142 00000005 00000000 003d0f00 76fe40dc [ 241.822151][ T5472] 9fe0: 76fe1d68 76fe1d54 0010bf14 00112af8 [ 241.822172][ T5472] r5:00000000 r4:00000000 [ 241.822337][ T5472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.058968][ T3067] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 242.208946][ T3067] usb 1-1: Using ep0 maxpacket: 32 [ 242.323040][ T3067] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.323210][ T3067] usb 1-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 242.335495][ T3067] usb 1-1: config 165 has an invalid interface number: 162 but max is 0 [ 242.335614][ T3067] usb 1-1: config 165 has no interface number 0 [ 242.335754][ T3067] usb 1-1: config 165 interface 162 has no altsetting 0 [ 242.375888][ T3067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.376001][ T3067] usb 1-1: Product: syz [ 242.376029][ T3067] usb 1-1: Manufacturer: syz [ 242.376051][ T3067] usb 1-1: SerialNumber: syz [ 242.610664][ T3067] i2c-tiny-usb 1-1:165.162: version 27.24 found at bus 001 address 014 [ 242.632318][ T3067] (null): error -EIO: failure setting delay to 10us [ 242.632751][ T3067] i2c-tiny-usb 1-1:165.162: probe with driver i2c-tiny-usb failed with error -5 [ 242.651911][ T3067] usb 1-1: USB disconnect, device number 14 [ 243.386822][ T28] audit: type=1400 audit(243.290:234): avc: denied { map } for pid=5498 comm="syz.0.470" path="socket:[8254]" dev="sockfs" ino=8254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.387024][ T28] audit: type=1400 audit(243.290:235): avc: denied { read } for pid=5498 comm="syz.0.470" path="socket:[8254]" dev="sockfs" ino=8254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.557357][ T5502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5502 comm=syz.0.471 [ 244.050964][ T5511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5511 comm=syz.0.475 [ 244.583867][ T5521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5521 comm=syz.0.480 [ 244.710033][ T28] audit: type=1400 audit(244.620:236): avc: denied { create } for pid=5522 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.446599][ T5533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5533 comm=syz.0.485 [ 246.209984][ T5545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35811 sclass=netlink_route_socket pid=5545 comm=syz.0.490 [ 246.648837][ T28] audit: type=1400 audit(246.560:237): avc: denied { unmount } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.032524][ T5557] FAULT_INJECTION: forcing a failure. [ 247.032524][ T5557] name failslab, interval 1, probability 0, space 0, times 0 [ 247.032671][ T5557] CPU: 1 UID: 0 PID: 5557 Comm: syz.0.492 Not tainted syzkaller #0 PREEMPT [ 247.032724][ T5557] Hardware name: ARM-Versatile Express [ 247.032748][ T5557] Call trace: [ 247.032789][ T5557] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 247.032895][ T5557] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 247.032915][ T5557] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 247.032978][ T5557] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 247.033036][ T5557] r7:00000068 r6:00000000 r5:846a6400 r4:835165e4 [ 247.033051][ T5557] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 247.033111][ T5557] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 247.033184][ T5557] r8:846a6400 r7:00000068 r6:807f903c r5:00400dc0 r4:83c020c0 [ 247.033199][ T5557] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 247.033247][ T5557] [<8057928c>] (__kmalloc_cache_noprof) from [<807f903c>] (fuse_file_alloc+0x30/0xf0) [ 247.033314][ T5557] r10:00000000 r9:00000000 r8:871f06c0 r7:00000001 r6:8276076c r5:86167bc0 [ 247.033335][ T5557] r4:86167bc0 [ 247.033349][ T5557] [<807f900c>] (fuse_file_alloc) from [<807f91ac>] (fuse_file_open+0x8c/0x248) [ 247.033420][ T5557] r9:00000000 r8:871f06c0 r7:00000000 r6:00000000 r5:00000001 r4:86167bc0 [ 247.033436][ T5557] [<807f9120>] (fuse_file_open) from [<807f94c4>] (fuse_open+0x84/0x2fc) [ 247.033506][ T5557] r10:00000000 r9:86167bc0 r8:00000000 r7:846cb080 r6:00000000 r5:00000000 [ 247.033525][ T5557] r4:840ad8c0 [ 247.033541][ T5557] [<807f9440>] (fuse_open) from [<805cffa8>] (do_dentry_open+0x12c/0x500) [ 247.033617][ T5557] r10:00000000 r9:846cb080 r8:846a6400 r7:807f9440 r6:840ad8c0 r5:00000000 [ 247.033636][ T5557] r4:846cb080 [ 247.033650][ T5557] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 247.033712][ T5557] r7:ec645f20 r6:846cb0a8 r5:00000000 r4:846cb080 [ 247.033727][ T5557] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 247.033787][ T5557] r6:00000000 r5:00000000 r4:ec645e58 [ 247.033802][ T5557] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 247.033866][ T5557] r10:00000142 r9:846a6400 r8:00000001 r7:ffffff9c r6:ec645f20 r5:846a6400 [ 247.033886][ T5557] r4:84494900 [ 247.033899][ T5557] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 247.033967][ T5557] r8:8020029c r7:200046c0 r6:ffffff9c r5:84494900 r4:00000007 [ 247.033982][ T5557] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 247.034039][ T5557] r7:00000142 r6:0012f6f4 r5:200046c0 r4:ffffff9c [ 247.034055][ T5557] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 247.034099][ T5557] Exception stack(0xec645fa8 to 0xec645ff0) [ 247.034142][ T5557] 5fa0: 00000000 00000000 ffffff9c 200046c0 00103042 00000000 [ 247.034181][ T5557] 5fc0: 00000000 00000000 0012f6f4 00000142 00356378 00000000 00000001 76fc30dc [ 247.034209][ T5557] 5fe0: 76fc2e88 76fc2e78 0001903c 00130cf0 [ 247.034234][ T5557] r5:00000000 r4:00000000 [ 247.529739][ T28] audit: type=1400 audit(247.440:238): avc: denied { create } for pid=5561 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 247.537732][ T28] audit: type=1400 audit(247.440:239): avc: denied { write } for pid=5561 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.859769][ T28] audit: type=1400 audit(248.770:240): avc: denied { unmount } for pid=3119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 248.876717][ T28] audit: type=1400 audit(248.780:241): avc: denied { read } for pid=3119 comm="syz-executor" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.879685][ T28] audit: type=1400 audit(248.790:242): avc: denied { open } for pid=3119 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.882524][ T28] audit: type=1400 audit(248.790:243): avc: denied { ioctl } for pid=3119 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=634 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.906440][ T28] audit: type=1400 audit(248.810:244): avc: denied { read } for pid=5565 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.954500][ T28] audit: type=1400 audit(248.860:245): avc: denied { write } for pid=5565 comm="syz.0.497" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.784058][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 249.784818][ T28] audit: type=1400 audit(249.690:257): avc: denied { create } for pid=5574 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.809718][ T28] audit: type=1400 audit(249.720:258): avc: denied { ioctl } for pid=5574 comm="syz.0.501" path="/dev/ubi_ctrl" dev="devtmpfs" ino=676 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.015286][ T28] audit: type=1400 audit(249.890:259): avc: denied { read } for pid=5577 comm="syz.1.502" dev="nsfs" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.015539][ T28] audit: type=1400 audit(249.890:260): avc: denied { open } for pid=5577 comm="syz.1.502" path="net:[4026532653]" dev="nsfs" ino=4026532653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.105634][ T5582] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.458375][ T3067] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.620959][ T3067] usb 2-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=1.00 [ 250.626428][ T3067] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.636560][ T3067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.636624][ T3067] usb 2-1: Product: syz [ 250.636639][ T3067] usb 2-1: Manufacturer: syz [ 250.636651][ T3067] usb 2-1: SerialNumber: syz [ 252.982092][ T28] audit: type=1400 audit(252.890:261): avc: denied { setopt } for pid=5594 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.658503][ T3744] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 253.812038][ T3744] usb 1-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=61.44 [ 253.812279][ T3744] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 253.827293][ T3744] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 253.827408][ T3744] usb 1-1: can't read configurations, error -61 [ 253.959182][ T3744] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.123774][ T3744] usb 1-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=61.44 [ 254.123946][ T3744] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 254.146686][ T3744] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 254.146810][ T3744] usb 1-1: can't read configurations, error -61 [ 254.147390][ T3744] usb usb1-port1: attempt power cycle [ 254.498612][ T3744] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 254.535182][ T3744] usb 1-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=61.44 [ 254.535340][ T3744] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 254.562352][ T3744] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 254.562463][ T3744] usb 1-1: can't read configurations, error -61 [ 254.688468][ T3744] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 254.713888][ T3744] usb 1-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=61.44 [ 254.714062][ T3744] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 254.756672][ T3744] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 254.756740][ T3744] usb 1-1: can't read configurations, error -61 [ 254.757296][ T3744] usb usb1-port1: unable to enumerate USB device [ 263.589854][ T5607] fuse: Bad value for 'user_id' [ 263.589953][ T5607] fuse: Bad value for 'user_id' [ 263.791702][ T28] audit: type=1400 audit(263.700:262): avc: denied { execmem } for pid=5608 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.800908][ T28] audit: type=1400 audit(263.710:263): avc: denied { create } for pid=5608 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.827659][ T28] audit: type=1400 audit(263.730:264): avc: denied { write } for pid=5608 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.876987][ T28] audit: type=1400 audit(263.780:265): avc: denied { mounton } for pid=5608 comm="syz.0.510" path="/308" dev="tmpfs" ino=1660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.877261][ T5609] cgroup2: Unknown parameter 'nsdeA?..' [ 264.111642][ T28] audit: type=1400 audit(264.020:266): avc: denied { prog_load } for pid=5611 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 264.112951][ T28] audit: type=1400 audit(264.020:267): avc: denied { bpf } for pid=5611 comm="syz.0.511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 264.141911][ T28] audit: type=1400 audit(264.050:268): avc: denied { create } for pid=5611 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.189792][ T28] audit: type=1400 audit(264.100:269): avc: denied { ioctl } for pid=5611 comm="syz.0.511" path="socket:[8431]" dev="sockfs" ino=8431 ioctlcmd=0x40085112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.423785][ T3744] usb 2-1: USB disconnect, device number 14 [ 264.731300][ T28] audit: type=1400 audit(264.640:270): avc: denied { map_create } for pid=5611 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 264.736654][ T28] audit: type=1400 audit(264.640:271): avc: denied { perfmon } for pid=5611 comm="syz.0.511" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.146383][ T5630] fuse: Bad value for 'user_id' [ 266.146479][ T5630] fuse: Bad value for 'user_id' [ 266.910773][ T5636] FAULT_INJECTION: forcing a failure. [ 266.910773][ T5636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.910860][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT [ 266.910887][ T5636] Hardware name: ARM-Versatile Express [ 266.910898][ T5636] Call trace: [ 266.910930][ T5636] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 266.910988][ T5636] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 266.910996][ T5636] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 266.911022][ T5636] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 266.911051][ T5636] r7:20000340 r6:00000000 r5:83faa580 r4:83555238 [ 266.911058][ T5636] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 266.911086][ T5636] [<80a5d534>] (should_fail_ex) from [<80a5d768>] (should_fail+0x14/0x18) [ 266.911118][ T5636] r8:00000000 r7:20000340 r6:00000028 r5:00000000 r4:ec88df38 [ 266.911125][ T5636] [<80a5d754>] (should_fail) from [<80a5d788>] (should_fail_usercopy+0x1c/0x20) [ 266.911150][ T5636] [<80a5d76c>] (should_fail_usercopy) from [<8098f0b4>] (_copy_from_iter+0x64/0x7fc) [ 266.911178][ T5636] [<8098f050>] (_copy_from_iter) from [<818036d8>] (netlink_sendmsg+0x19c/0x46c) [ 266.911216][ T5636] r10:00000000 r9:87392800 r8:00000000 r7:ec88df38 r6:00000028 r5:8613bf00 [ 266.911224][ T5636] r4:ec88df28 [ 266.911252][ T5636] [<8180353c>] (netlink_sendmsg) from [<816cc030>] (__sock_sendmsg+0x44/0xb0) [ 266.911292][ T5636] r10:00000800 r9:00000000 r8:ec88ddd4 r7:00000000 r6:842362c0 r5:ec88df28 [ 266.911301][ T5636] r4:00000000 [ 266.911307][ T5636] [<816cbfec>] (__sock_sendmsg) from [<816ccf24>] (____sys_sendmsg+0x238/0x2fc) [ 266.911336][ T5636] r7:00000000 r6:00000000 r5:842362c0 r4:ec88df28 [ 266.911343][ T5636] [<816cccec>] (____sys_sendmsg) from [<816cd35c>] (___sys_sendmsg+0x9c/0xd0) [ 266.911374][ T5636] r10:00000128 r9:20000540 r8:00000800 r7:00000000 r6:842362c0 r5:ec88df28 [ 266.911382][ T5636] r4:00000000 [ 266.911388][ T5636] [<816cd2c0>] (___sys_sendmsg) from [<816cf7f0>] (__sys_sendmsg+0x8c/0xe0) [ 266.911424][ T5636] r9:83faa580 r8:846ca700 r7:00000800 r6:20000540 r5:846ca701 r4:00000003 [ 266.911432][ T5636] [<816cf764>] (__sys_sendmsg) from [<816cf858>] (sys_sendmsg+0x14/0x18) [ 266.911464][ T5636] r8:8020029c r7:00000128 r6:0012f6f4 r5:00000000 r4:00000000 [ 266.911471][ T5636] [<816cf844>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 266.911493][ T5636] Exception stack(0xec88dfa8 to 0xec88dff0) [ 266.911513][ T5636] dfa0: 00000000 00000000 00000003 20000540 00000800 00000000 [ 266.911530][ T5636] dfc0: 00000000 00000000 0012f6f4 00000128 003562d8 00000000 00000001 76f500dc [ 266.911542][ T5636] dfe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 267.101829][ T5638] CUSE: info not properly terminated [ 269.083690][ T5642] fuse: Bad value for 'user_id' [ 269.083791][ T5642] fuse: Bad value for 'user_id' [ 269.206501][ T5644] FAULT_INJECTION: forcing a failure. [ 269.206501][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 269.206668][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz.1.520 Not tainted syzkaller #0 PREEMPT [ 269.206715][ T5644] Hardware name: ARM-Versatile Express [ 269.206735][ T5644] Call trace: [ 269.206774][ T5644] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 269.206884][ T5644] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 269.206902][ T5644] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 269.206951][ T5644] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 269.207009][ T5644] r7:85f38c80 r6:00000000 r5:85f38c80 r4:835165e4 [ 269.207022][ T5644] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 269.207077][ T5644] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 269.207145][ T5644] r8:00000000 r7:85f38c80 r6:805e5b2c r5:00000cc0 r4:83cbab40 [ 269.207159][ T5644] [<8059a414>] (should_failslab) from [<80577278>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 269.207206][ T5644] [<8057721c>] (kmem_cache_alloc_noprof) from [<805e5b2c>] (do_getname+0x2c/0x14c) [ 269.207269][ T5644] r10:00000142 r9:85f38c80 r8:00000001 r7:00000000 r6:0018afa8 r5:82760928 [ 269.207286][ T5644] r4:00000000 [ 269.207297][ T5644] [<805e5b00>] (do_getname) from [<805ebf18>] (getname_flags+0x14/0x18) [ 269.207357][ T5644] r10:00000142 r9:85f38c80 r8:8020029c r7:0018afa8 r6:ffffff9c r5:ec991f58 [ 269.207377][ T5644] r4:00000000 r3:00000001 [ 269.207390][ T5644] [<805ebf04>] (getname_flags) from [<805d2140>] (do_sys_openat2+0x64/0xf0) [ 269.207439][ T5644] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 269.207496][ T5644] r7:00000142 r6:00000000 r5:0018afa8 r4:ffffff9c [ 269.207509][ T5644] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 269.207552][ T5644] Exception stack(0xec991fa8 to 0xec991ff0) [ 269.207591][ T5644] 1fa0: 00000000 00000000 ffffff9c 0018afa8 00020002 00000000 [ 269.207623][ T5644] 1fc0: 00000000 00000000 00000000 00000142 00000005 00000000 00000001 76f500dc [ 269.207648][ T5644] 1fe0: 76f4dd68 76f4dd54 0010bf14 00112af8 [ 269.207671][ T5644] r5:00000000 r4:00000000 [ 269.420460][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 269.420547][ T28] audit: type=1400 audit(269.330:281): avc: denied { mount } for pid=5645 comm="syz.1.521" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 272.338569][ T3744] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.488442][ T3744] usb 2-1: Using ep0 maxpacket: 32 [ 272.515484][ T3744] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.515605][ T3744] usb 2-1: New USB device found: idVendor=0499, idProduct=1051, bcdDevice=0.40 [ 272.556834][ T3744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.556941][ T3744] usb 2-1: Product: syz [ 272.556970][ T3744] usb 2-1: Manufacturer: syz [ 272.556996][ T3744] usb 2-1: SerialNumber: syz [ 272.788880][ T3744] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.789520][ T3744] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 272.793188][ T3744] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.793747][ T3744] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 272.820540][ T3744] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.880257][ T3744] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 272.883919][ T3744] usb 2-1: USB disconnect, device number 15 [ 273.139701][ T5677] fuse: Bad value for 'fd' [ 273.538451][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 273.690069][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 273.695661][ T11] usb 2-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 273.706679][ T11] usb 2-1: config 0 has no interfaces? [ 273.768334][ T11] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 273.768444][ T11] usb 2-1: Product: syz [ 273.768476][ T11] usb 2-1: SerialNumber: syz [ 273.772872][ T11] usb 2-1: config 0 descriptor?? [ 273.992963][ T23] usb 2-1: USB disconnect, device number 16 [ 274.195511][ T5679] FAULT_INJECTION: forcing a failure. [ 274.195511][ T5679] name failslab, interval 1, probability 0, space 0, times 0 [ 274.195649][ T5679] CPU: 1 UID: 0 PID: 5679 Comm: syz.1.525 Not tainted syzkaller #0 PREEMPT [ 274.195708][ T5679] Hardware name: ARM-Versatile Express [ 274.195733][ T5679] Call trace: [ 274.195778][ T5679] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 274.195894][ T5679] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 274.195914][ T5679] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 274.195971][ T5679] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 274.196039][ T5679] r7:0000045c r6:00000000 r5:85f3be80 r4:835165e4 [ 274.196054][ T5679] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 274.196118][ T5679] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 274.196194][ T5679] r8:85f3be80 r7:0000045c r6:811a2804 r5:00000dc0 r4:83c01600 [ 274.196211][ T5679] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 274.196268][ T5679] [<8057928c>] (__kmalloc_cache_noprof) from [<811a2804>] (raw_open+0x34/0xb4) [ 274.196348][ T5679] r10:8355f2d8 r9:856deb68 r8:81ff3c90 r7:8355f2e4 r6:846ca480 r5:00000000 [ 274.196369][ T5679] r4:835a377c [ 274.196384][ T5679] [<811a27d0>] (raw_open) from [<80b7e374>] (misc_open+0xc4/0x164) [ 274.196464][ T5679] r7:8355f2e4 r6:0000010d r5:846ca480 r4:835a377c [ 274.196483][ T5679] [<80b7e2b0>] (misc_open) from [<805dcd34>] (chrdev_open+0xbc/0x234) [ 274.196564][ T5679] r10:00000000 r9:846ca480 r8:85f3be80 r7:81f3b344 r6:846ca480 r5:856deb68 [ 274.196589][ T5679] r4:84487700 r3:80b7e2b0 [ 274.196604][ T5679] [<805dcc78>] (chrdev_open) from [<805cffa8>] (do_dentry_open+0x12c/0x500) [ 274.196676][ T5679] r9:846ca480 r8:85f3be80 r7:805dcc78 r6:856deb68 r5:00000000 r4:846ca480 [ 274.196694][ T5679] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 274.196757][ T5679] r7:ec981f20 r6:846ca4a8 r5:00000000 r4:846ca480 [ 274.196773][ T5679] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 274.196839][ T5679] r6:00000000 r5:00000000 r4:ec981e58 [ 274.196855][ T5679] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 274.196924][ T5679] r10:00000142 r9:85f3be80 r8:00000001 r7:ffffff9c r6:ec981f20 r5:85f3be80 [ 274.196944][ T5679] r4:84494180 [ 274.196959][ T5679] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 274.197022][ T5679] r8:8020029c r7:0018afa8 r6:ffffff9c r5:84494180 r4:00000004 [ 274.197040][ T5679] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 274.197103][ T5679] r7:00000142 r6:00000000 r5:0018afa8 r4:ffffff9c [ 274.197119][ T5679] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 274.197170][ T5679] Exception stack(0xec981fa8 to 0xec981ff0) [ 274.197209][ T5679] 1fa0: 00000000 00000000 ffffff9c 0018afa8 00020002 00000000 [ 274.197244][ T5679] 1fc0: 00000000 00000000 00000000 00000142 00000002 00000000 00000001 76f500dc [ 274.197271][ T5679] 1fe0: 76f4dd68 76f4dd54 0010bf14 00112af8 [ 274.197296][ T5679] r5:00000000 r4:00000000 [ 276.981034][ T28] audit: type=1400 audit(276.890:282): avc: denied { allowed } for pid=5694 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 277.009205][ T28] audit: type=1400 audit(276.910:283): avc: denied { create } for pid=5694 comm="syz.1.527" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 277.030020][ T28] audit: type=1400 audit(276.940:284): avc: denied { map } for pid=5694 comm="syz.1.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 277.041521][ T28] audit: type=1400 audit(276.950:285): avc: denied { read write } for pid=5694 comm="syz.1.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.326162][ T5698] FAULT_INJECTION: forcing a failure. [ 278.326162][ T5698] name failslab, interval 1, probability 0, space 0, times 0 [ 278.326266][ T5698] CPU: 0 UID: 0 PID: 5698 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT [ 278.326296][ T5698] Hardware name: ARM-Versatile Express [ 278.326308][ T5698] Call trace: [ 278.326330][ T5698] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 278.326390][ T5698] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 278.326398][ T5698] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 278.326426][ T5698] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 278.326468][ T5698] r7:85768c80 r6:00000000 r5:85768c80 r4:835165e4 [ 278.326475][ T5698] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 278.326508][ T5698] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 278.326581][ T5698] r8:00000000 r7:85768c80 r6:807fd914 r5:00000cc0 r4:846c6d80 [ 278.326596][ T5698] [<8059a414>] (should_failslab) from [<8057765c>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 278.326624][ T5698] [<805775fc>] (kmem_cache_alloc_lru_noprof) from [<807fd914>] (fuse_alloc_inode+0x24/0x80) [ 278.326657][ T5698] r10:807fd184 r9:ec9d1aeb r8:ec9d1b40 r7:807fd158 r6:81ed92d4 r5:836f3bdc [ 278.326666][ T5698] r4:87393c00 [ 278.326672][ T5698] [<807fd8f0>] (fuse_alloc_inode) from [<805ffff8>] (alloc_inode+0x24/0xd0) [ 278.326700][ T5698] r5:87393c00 r4:87393c00 [ 278.326707][ T5698] [<805fffd4>] (alloc_inode) from [<806001b0>] (iget5_locked+0xa4/0x10c) [ 278.326735][ T5698] r7:807fd158 r6:00000005 r5:00000000 r4:87393c00 [ 278.326743][ T5698] [<8060010c>] (iget5_locked) from [<807ffd58>] (fuse_iget+0x5c/0x2d4) [ 278.326774][ T5698] r10:ec9d1ca0 r9:ec9d1b40 r8:fffffffc r7:807fd158 r6:807fd184 r5:87393c00 [ 278.326782][ T5698] r4:ec9d1c78 [ 278.326789][ T5698] [<807ffcfc>] (fuse_iget) from [<807f5074>] (fuse_lookup_name+0x168/0x284) [ 278.326822][ T5698] r10:00000000 r9:ec9d1c74 r8:85d01580 r7:87393c00 r6:ec9d1ca0 r5:00000000 [ 278.326830][ T5698] r4:ec9d1c78 [ 278.326836][ T5698] [<807f4f0c>] (fuse_lookup_name) from [<807f521c>] (fuse_lookup+0x8c/0x17c) [ 278.326869][ T5698] r10:00000000 r9:00000001 r8:00000001 r7:00000000 r6:86cfd770 r5:840adb00 [ 278.326877][ T5698] r4:86cfd770 [ 278.326883][ T5698] [<807f5190>] (fuse_lookup) from [<805e60e0>] (__lookup_slow+0x64/0xfc) [ 278.326914][ T5698] r9:00000000 r8:840adb00 r7:00100001 r6:ec9d1da0 r5:84388ee0 r4:86cfd770 [ 278.326922][ T5698] [<805e607c>] (__lookup_slow) from [<805e61b0>] (lookup_slow+0x38/0x50) [ 278.326953][ T5698] r9:00000000 r8:ec9d1e6c r7:00000001 r6:ec9d1da0 r5:84388ee0 r4:840adb80 [ 278.326960][ T5698] [<805e6178>] (lookup_slow) from [<805eac1c>] (path_lookupat+0x198/0x2a4) [ 278.326987][ T5698] r7:00000101 r6:ec9d1e6c r5:00000000 r4:ec9d1d98 [ 278.326994][ T5698] [<805eaa84>] (path_lookupat) from [<805ec3dc>] (filename_lookup+0xd8/0x1a8) [ 278.327025][ T5698] r9:00000000 r8:ec9d1e6c r7:00000001 r6:85768c80 r5:84494180 r4:ffffff9c [ 278.327033][ T5698] [<805ec304>] (filename_lookup) from [<805ddf14>] (vfs_statx+0x6c/0x150) [ 278.327064][ T5698] r9:85768c80 r8:84494180 r7:ffffff9c r6:00000001 r5:00000800 r4:ec9d1eb0 [ 278.327071][ T5698] [<805ddea8>] (vfs_statx) from [<805de058>] (__do_sys_newstat+0x60/0xac) [ 278.327102][ T5698] r10:0000006a r9:85768c80 r8:8020029c r7:0000006a r6:20000040 r5:84494180 [ 278.327110][ T5698] r4:20000000 [ 278.327116][ T5698] [<805ddff8>] (__do_sys_newstat) from [<805de570>] (sys_newstat+0x10/0x14) [ 278.327143][ T5698] r6:0012f6f4 r5:00000000 r4:00000000 [ 278.327150][ T5698] [<805de560>] (sys_newstat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 278.327172][ T5698] Exception stack(0xec9d1fa8 to 0xec9d1ff0) [ 278.327192][ T5698] 1fa0: 00000000 00000000 20000000 20000040 00000000 00000000 [ 278.327209][ T5698] 1fc0: 00000000 00000000 0012f6f4 0000006a 003562d8 00000000 00000001 76f500dc [ 278.327221][ T5698] 1fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 278.469969][ T5704] fuse: Bad value for 'fd' [ 278.832485][ T5711] FAULT_INJECTION: forcing a failure. [ 278.832485][ T5711] name failslab, interval 1, probability 0, space 0, times 0 [ 278.832633][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: syz.0.532 Not tainted syzkaller #0 PREEMPT [ 278.832682][ T5711] Hardware name: ARM-Versatile Express [ 278.832702][ T5711] Call trace: [ 278.832741][ T5711] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 278.832843][ T5711] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 278.832859][ T5711] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 278.832912][ T5711] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 278.832972][ T5711] r7:85f38c80 r6:00000000 r5:85f38c80 r4:835165e4 [ 278.832985][ T5711] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 278.833044][ T5711] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 278.833114][ T5711] r8:00000000 r7:85f38c80 r6:8083efc4 r5:00000d40 r4:83cba6c0 [ 278.833129][ T5711] [<8059a414>] (should_failslab) from [<80577278>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 278.833180][ T5711] [<8057721c>] (kmem_cache_alloc_noprof) from [<8083efc4>] (security_inode_alloc+0x30/0x1d0) [ 278.833251][ T5711] r10:85737d00 r9:00000000 r8:00000000 r7:00000c40 r6:83cc6000 r5:85737c00 [ 278.833272][ T5711] r4:85737c00 [ 278.833286][ T5711] [<8083ef94>] (security_inode_alloc) from [<805fc5bc>] (inode_init_always_gfp+0x184/0x1d8) [ 278.833346][ T5711] r5:00000000 r4:85737c00 [ 278.833359][ T5711] [<805fc438>] (inode_init_always_gfp) from [<80600014>] (alloc_inode+0x40/0xd0) [ 278.833425][ T5711] r10:00000007 r9:85f38c80 r8:000081ff r7:83c17680 r6:81e22b80 r5:83cc6000 [ 278.833455][ T5711] r4:85737c00 r3:85f38c80 [ 278.833468][ T5711] [<805fffd4>] (alloc_inode) from [<806000b4>] (new_inode+0x10/0x68) [ 278.833526][ T5711] r7:83c17680 r6:00000000 r5:83cc6000 r4:832e17fc [ 278.833539][ T5711] [<806000a4>] (new_inode) from [<804f7944>] (shmem_get_inode+0x98/0x3a8) [ 278.833602][ T5711] r9:85f38c80 r8:000081ff r7:83c17680 r6:00000000 r5:83cc6000 r4:832e17fc [ 278.833616][ T5711] [<804f78ac>] (shmem_get_inode) from [<804f8578>] (__shmem_file_setup+0x164/0x1a8) [ 278.833680][ T5711] r10:00000001 r9:00000b36 r8:82561c24 r7:81e2a69c r6:00000000 r5:00b36000 [ 278.833697][ T5711] r4:83cfda10 [ 278.833711][ T5711] [<804f8414>] (__shmem_file_setup) from [<804febf8>] (shmem_zero_setup+0x4c/0x84) [ 278.833785][ T5711] r9:81e273ac r8:85f38c80 r7:00600000 r6:0000075f r5:20000000 r4:855ab180 [ 278.833800][ T5711] [<804febac>] (shmem_zero_setup) from [<8055a098>] (__mmap_region+0xd6c/0x1264) [ 278.833861][ T5711] r5:20000000 r4:855ab180 [ 278.833882][ T5711] [<8055932c>] (__mmap_region) from [<8055a660>] (mmap_region+0xa0/0x188) [ 278.833944][ T5711] r10:07ebbeea r9:ec975ebc r8:85fdb480 r7:85f38c80 r6:00b36000 r5:20000000 [ 278.833962][ T5711] r4:00000000 [ 278.833975][ T5711] [<8055a5c0>] (mmap_region) from [<80538ff4>] (do_mmap+0x4d0/0x5e8) [ 278.834034][ T5711] r7:85f38c80 r6:20000000 r5:00008031 r4:00b36000 [ 278.834048][ T5711] [<80538b24>] (do_mmap) from [<80500900>] (vm_mmap_pgoff+0x128/0x220) [ 278.834109][ T5711] r10:85fdb480 r9:20000000 r8:00b36000 r7:ec975f18 r6:00000000 r5:07ebbeea [ 278.834126][ T5711] r4:00000000 [ 278.834138][ T5711] [<805007d8>] (vm_mmap_pgoff) from [<80538294>] (ksys_mmap_pgoff+0x48/0xec) [ 278.834204][ T5711] r10:000000c0 r9:85f38c80 r8:8020029c r7:20000000 r6:00b36000 r5:07ebbeea [ 278.834223][ T5711] r4:00008031 [ 278.834237][ T5711] [<8053824c>] (ksys_mmap_pgoff) from [<80538354>] (sys_mmap_pgoff+0x1c/0x24) [ 278.834304][ T5711] r8:8020029c r7:000000c0 r6:0012f6f4 r5:00000000 r4:00000003 [ 278.834320][ T5711] [<80538338>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 278.834372][ T5711] Exception stack(0xec975fa8 to 0xec975ff0) [ 278.834415][ T5711] 5fa0: 00000003 00000000 20000000 00b36000 07ebbeea 00008031 [ 278.834460][ T5711] 5fc0: 00000003 00000000 0012f6f4 000000c0 003562d8 00000000 00000001 76fe40dc [ 278.834487][ T5711] 5fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 280.272061][ T28] audit: type=1400 audit(280.180:286): avc: denied { create } for pid=5719 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.291524][ T28] audit: type=1400 audit(280.200:287): avc: denied { remount } for pid=5719 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 280.542465][ T28] audit: type=1400 audit(280.450:288): avc: denied { create } for pid=5721 comm="syz.0.536" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.700025][ T28] audit: type=1400 audit(280.610:289): avc: denied { read write } for pid=5721 comm="syz.0.536" name="dm0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.700683][ T28] audit: type=1400 audit(280.610:290): avc: denied { open } for pid=5721 comm="syz.0.536" path="/315/dm0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.726458][ T28] audit: type=1400 audit(280.630:291): avc: denied { unlink } for pid=3119 comm="syz-executor" name="dm0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.150995][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 282.151110][ T28] audit: type=1400 audit(282.060:294): avc: denied { create } for pid=5740 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.842893][ T5756] FAULT_INJECTION: forcing a failure. [ 283.842893][ T5756] name failslab, interval 1, probability 0, space 0, times 0 [ 283.843053][ T5756] CPU: 1 UID: 0 PID: 5756 Comm: syz.0.546 Not tainted syzkaller #0 PREEMPT [ 283.843108][ T5756] Hardware name: ARM-Versatile Express [ 283.843131][ T5756] Call trace: [ 283.843172][ T5756] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 283.843280][ T5756] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 283.843298][ T5756] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 283.843354][ T5756] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 283.843422][ T5756] r7:845aa580 r6:00000000 r5:845aa580 r4:835165e4 [ 283.843438][ T5756] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 283.843499][ T5756] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 283.843571][ T5756] r8:00000000 r7:845aa580 r6:80844300 r5:00000dc0 r4:83c026c0 [ 283.843586][ T5756] [<8059a414>] (should_failslab) from [<80577278>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 283.843640][ T5756] [<8057721c>] (kmem_cache_alloc_noprof) from [<80844300>] (security_file_alloc+0x30/0x184) [ 283.843714][ T5756] r10:8442c800 r9:845aa580 r8:8449fe80 r7:844dde00 r6:836f5ffc r5:8449fe80 [ 283.843732][ T5756] r4:8449fe80 [ 283.843746][ T5756] [<808442d0>] (security_file_alloc) from [<805d7354>] (init_file+0x48/0xfc) [ 283.843817][ T5756] r7:844dde00 r6:00000002 r5:835199e4 r4:8449fe80 [ 283.843832][ T5756] [<805d730c>] (init_file) from [<805d7ba4>] (alloc_empty_file+0x68/0x13c) [ 283.843907][ T5756] r7:844dde00 r6:00000002 r5:835199e4 r4:82760918 [ 283.843926][ T5756] [<805d7b3c>] (alloc_empty_file) from [<805d7d24>] (alloc_file_pseudo+0xac/0x154) [ 283.843986][ T5756] r8:82077440 r7:00000002 r6:8445e310 r5:842534c0 r4:835f5f7c [ 283.844001][ T5756] [<805d7c78>] (alloc_file_pseudo) from [<816caa28>] (sock_alloc_file+0x48/0xc4) [ 283.844072][ T5756] r10:00000119 r9:845aa580 r8:8020029c r7:00000119 r6:842534c0 r5:84253440 [ 283.844089][ T5756] r4:00000000 [ 283.844103][ T5756] [<816ca9e0>] (sock_alloc_file) from [<816ce060>] (__sys_socket+0xd4/0x118) [ 283.844161][ T5756] r6:84253440 r5:00000004 r4:00000000 [ 283.844175][ T5756] [<816cdf8c>] (__sys_socket) from [<816ce0b4>] (sys_socket+0x10/0x14) [ 283.844233][ T5756] r6:0012f6f4 r5:00000000 r4:00000000 [ 283.844249][ T5756] [<816ce0a4>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 283.844299][ T5756] Exception stack(0xeca1dfa8 to 0xeca1dff0) [ 283.844337][ T5756] dfa0: 00000000 00000000 00000010 00000003 0000000c 00000000 [ 283.844370][ T5756] dfc0: 00000000 00000000 0012f6f4 00000119 003562d8 00000000 00000001 76fe40dc [ 283.844396][ T5756] dfe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 284.687152][ T28] audit: type=1400 audit(284.590:295): avc: denied { getopt } for pid=5761 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.253455][ T28] audit: type=1400 audit(286.160:296): avc: denied { mount } for pid=5783 comm="syz.0.558" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.290764][ T5785] fuse: Bad value for 'rootmode' [ 286.291292][ T28] audit: type=1400 audit(286.200:297): avc: denied { mounton } for pid=5775 comm="syz.1.555" path="/228/file0" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 286.303678][ T5784] FAULT_INJECTION: forcing a failure. [ 286.303678][ T5784] name failslab, interval 1, probability 0, space 0, times 0 [ 286.303816][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT [ 286.303866][ T5784] Hardware name: ARM-Versatile Express [ 286.303887][ T5784] Call trace: [ 286.303938][ T5784] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 286.304048][ T5784] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 286.304068][ T5784] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 286.304122][ T5784] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 286.304182][ T5784] r7:85773200 r6:00000000 r5:85773200 r4:835165e4 [ 286.304196][ T5784] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 286.304254][ T5784] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 286.304321][ T5784] r8:00000000 r7:85773200 r6:83c01240 r5:00000cc0 r4:00000004 [ 286.304335][ T5784] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 286.304391][ T5784] [<805781a4>] (__kmalloc_noprof) from [<809be684>] (mpi_alloc_limb_space+0x1c/0x20) [ 286.304461][ T5784] r10:00000137 r9:873e9800 r8:00000218 r7:00000011 r6:00000001 r5:00000001 [ 286.304478][ T5784] r4:85d35fc0 [ 286.304491][ T5784] [<809be668>] (mpi_alloc_limb_space) from [<809be6ec>] (mpi_alloc+0x64/0x80) [ 286.304538][ T5784] [<809be688>] (mpi_alloc) from [<809b9d88>] (mpi_read_raw_data+0x5c/0x108) [ 286.304590][ T5784] r5:873e9a0b r4:00000003 [ 286.304603][ T5784] [<809b9d2c>] (mpi_read_raw_data) from [<808b76cc>] (rsa_set_pub_key+0x8c/0x110) [ 286.304673][ T5784] r7:871f0740 r6:0000020e r5:871f06c0 r4:00000000 [ 286.304688][ T5784] [<808b7640>] (rsa_set_pub_key) from [<808ec1a4>] (software_key_query+0x128/0x2d8) [ 286.304752][ T5784] r7:871f06c0 r6:eca35edc r5:85d01d00 r4:00000000 [ 286.304768][ T5784] [<808ec07c>] (software_key_query) from [<808eb704>] (query_asymmetric_key+0x4c/0x64) [ 286.304833][ T5784] r10:00000137 r9:85773200 r8:b5403587 r7:20000bc0 r6:00000019 r5:00000000 [ 286.304852][ T5784] r4:eca35f40 [ 286.304865][ T5784] [<808eb6b8>] (query_asymmetric_key) from [<8082ec24>] (keyctl_pkey_params_get_2+0xf8/0x1f8) [ 286.304926][ T5784] [<8082eb2c>] (keyctl_pkey_params_get_2) from [<8082eecc>] (keyctl_pkey_e_d_s+0x60/0x1d0) [ 286.304988][ T5784] r8:8020029c r7:00000000 r6:20000c00 r5:00000019 r4:00000000 [ 286.305003][ T5784] [<8082ee6c>] (keyctl_pkey_e_d_s) from [<8082a12c>] (sys_keyctl+0x4c/0x2a4) [ 286.305073][ T5784] r9:85773200 r8:8020029c r7:00000137 r6:0012f6f4 r5:00000000 r4:00000000 [ 286.305090][ T5784] [<8082a0e0>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 286.305139][ T5784] Exception stack(0xeca35fa8 to 0xeca35ff0) [ 286.305184][ T5784] 5fa0: 00000000 00000000 00000019 20000b80 20000bc0 20000c00 [ 286.305370][ T5784] 5fc0: 00000000 00000000 0012f6f4 00000137 003562d8 00000000 00000001 76fe40dc [ 286.305412][ T5784] 5fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 286.305437][ T5784] r5:00000000 r4:00000000 [ 286.392419][ T28] audit: type=1400 audit(286.300:298): avc: denied { unmount } for pid=3119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.583245][ T28] audit: type=1400 audit(286.490:299): avc: denied { mount } for pid=5775 comm="syz.1.555" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 288.721547][ T28] audit: type=1400 audit(288.630:300): avc: denied { cmd } for pid=5795 comm="syz.1.563" path="/dev/ublk-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 289.609129][ T2875] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 290.212334][ T5804] block device autoloading is deprecated and will be removed. [ 290.641231][ T28] audit: type=1400 audit(290.550:301): avc: denied { create } for pid=5821 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.859370][ T28] audit: type=1400 audit(290.760:302): avc: denied { create } for pid=5826 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 290.863109][ T28] audit: type=1400 audit(290.770:303): avc: denied { ioctl } for pid=5826 comm="syz.0.568" path="socket:[8838]" dev="sockfs" ino=8838 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 290.993370][ T5827] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.074607][ T5827] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.164475][ T5827] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.314764][ T5827] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.748878][ T3744] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 291.916132][ T3744] usb 2-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 291.923255][ T3744] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 291.923341][ T3744] usb 2-1: config 1 interface 0 has no altsetting 0 [ 291.985082][ T3744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.985190][ T3744] usb 2-1: Product: syz [ 291.985216][ T3744] usb 2-1: Manufacturer: syz [ 291.985239][ T3744] usb 2-1: SerialNumber: syz [ 292.024249][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.142081][ T28] audit: type=1400 audit(292.050:304): avc: denied { execute } for pid=5856 comm="syz.0.576" path=2F6D656D66643AFF2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.524756][ T3744] usbhid 2-1:1.0: can't add hid device: -71 [ 292.524983][ T3744] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 292.532314][ T3744] usb 2-1: USB disconnect, device number 17 [ 292.845955][ T5870] FAULT_INJECTION: forcing a failure. [ 292.845955][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 292.846077][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.0.578 Not tainted syzkaller #0 PREEMPT [ 292.846123][ T5870] Hardware name: ARM-Versatile Express [ 292.846143][ T5870] Call trace: [ 292.846182][ T5870] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 292.846324][ T5870] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 292.846345][ T5870] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 292.846401][ T5870] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 292.846467][ T5870] r7:00000014 r6:00000000 r5:85f36400 r4:835165e4 [ 292.846484][ T5870] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 292.846593][ T5870] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 292.846675][ T5870] r8:85f36400 r7:00000014 r6:8032cd90 r5:00000cc0 r4:83c01240 [ 292.846693][ T5870] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 292.846744][ T5870] [<8057928c>] (__kmalloc_cache_noprof) from [<8032cd90>] (__request_module+0xe8/0x2e4) [ 292.846812][ T5870] r10:00000000 r9:873b1100 r8:834f2ef0 r7:8091f9a4 r6:85f36400 r5:00000002 [ 292.846833][ T5870] r4:00000000 [ 292.846847][ T5870] [<8032cca8>] (__request_module) from [<8091f9a4>] (blk_request_module+0x38/0x68) [ 292.846959][ T5870] r3:00000000 r2:00000103 r1:825a4200 [ 292.846989][ T5870] r8:85f36400 r7:00000001 r6:8276fa50 r5:00000103 r4:10300000 [ 292.847002][ T5870] [<8091f96c>] (blk_request_module) from [<808f4a00>] (blkdev_get_no_open+0x78/0xc8) [ 292.847089][ T5870] r5:10300000 r4:00000000 [ 292.847103][ T5870] [<808f4988>] (blkdev_get_no_open) from [<808f6d88>] (blkdev_open+0x60/0x12c) [ 292.847162][ T5870] r7:00000001 r6:00000000 r5:85737678 r4:873b1100 [ 292.847176][ T5870] [<808f6d28>] (blkdev_open) from [<805cffa8>] (do_dentry_open+0x12c/0x500) [ 292.847240][ T5870] r7:808f6d28 r6:85737678 r5:00000000 r4:873b1100 [ 292.847254][ T5870] [<805cfe7c>] (do_dentry_open) from [<805d1d40>] (vfs_open_consume+0x3c/0xf8) [ 292.847310][ T5870] r7:ecad5f20 r6:873b1128 r5:00000000 r4:873b1100 [ 292.847325][ T5870] [<805d1d04>] (vfs_open_consume) from [<805ede10>] (path_openat+0x438/0xa98) [ 292.847404][ T5870] r6:00000000 r5:00000000 r4:ecad5e58 [ 292.847421][ T5870] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 292.847484][ T5870] r10:00000142 r9:85f36400 r8:00000001 r7:ffffff9c r6:ecad5f20 r5:85f36400 [ 292.847500][ T5870] r4:84494000 [ 292.847513][ T5870] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 292.847573][ T5870] r8:8020029c r7:76fe3a78 r6:ffffff9c r5:84494000 r4:00000008 [ 292.847588][ T5870] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 292.847645][ T5870] r7:00000142 r6:76fe3ea8 r5:76fe3a78 r4:ffffff9c [ 292.847659][ T5870] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 292.847703][ T5870] Exception stack(0xecad5fa8 to 0xecad5ff0) [ 292.847738][ T5870] 5fa0: 00000000 00000000 ffffff9c 76fe3a78 00020000 00000000 [ 292.847770][ T5870] 5fc0: 00000000 00000000 76fe3ea8 00000142 003562d8 00000000 00000001 76fe40dc [ 292.847799][ T5870] 5fe0: 76fe39f8 76fe39e4 0010bf14 00112af8 [ 292.847846][ T5870] r5:00000000 r4:00000000 [ 292.869182][ T5870] block device autoloading is deprecated and will be removed. [ 292.938580][ T5877] fuse: Bad value for 'rootmode' [ 293.503819][ T5881] capability: warning: `syz.0.581' uses 32-bit capabilities (legacy support in use) [ 293.648621][ T3744] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 293.835285][ T3744] usb 2-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 293.849421][ T3744] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 293.849541][ T3744] usb 2-1: config 1 interface 0 has no altsetting 0 [ 293.883924][ T3744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.884041][ T3744] usb 2-1: Product: syz [ 293.884071][ T3744] usb 2-1: Manufacturer: syz [ 293.884094][ T3744] usb 2-1: SerialNumber: syz [ 293.925225][ T5886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.983977][ T5893] FAULT_INJECTION: forcing a failure. [ 293.983977][ T5893] name failslab, interval 1, probability 0, space 0, times 0 [ 293.984400][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: syz.0.585 Not tainted syzkaller #0 PREEMPT [ 293.984507][ T5893] Hardware name: ARM-Versatile Express [ 293.984531][ T5893] Call trace: [ 293.984572][ T5893] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 293.984678][ T5893] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 293.984696][ T5893] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 293.984748][ T5893] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 293.984805][ T5893] r7:85f11900 r6:00000000 r5:85f11900 r4:835165e4 [ 293.984821][ T5893] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 293.984878][ T5893] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 293.984960][ T5893] r8:00000000 r7:85f11900 r6:83c016c0 r5:00000c40 r4:00001000 [ 293.985005][ T5893] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 293.985061][ T5893] [<805781a4>] (__kmalloc_noprof) from [<80889bcc>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 293.985134][ T5893] r10:00000000 r9:84601000 r8:00000000 r7:841f97f8 r6:8449c7a8 r5:00001000 [ 293.985174][ T5893] r4:00000000 [ 293.985192][ T5893] [<80889b90>] (tomoyo_realpath_from_path) from [<80885c94>] (tomoyo_path_number_perm+0xcc/0x22c) [ 293.985263][ T5893] r10:00000000 r9:00000005 r8:8449c780 r7:00005452 r6:81ee19d4 r5:00000004 [ 293.985283][ T5893] r4:8449c7a8 r3:832db580 [ 293.985297][ T5893] [<80885bc8>] (tomoyo_path_number_perm) from [<8088a5e8>] (tomoyo_file_ioctl+0x1c/0x20) [ 293.985362][ T5893] r10:85f11900 r9:00000005 r8:8449c780 r7:20000040 r6:20000040 r5:00005452 [ 293.985380][ T5893] r4:8449c780 [ 293.985394][ T5893] [<8088a5cc>] (tomoyo_file_ioctl) from [<80834948>] (security_file_ioctl+0x80/0x1d4) [ 293.985451][ T5893] [<808348c8>] (security_file_ioctl) from [<805f20cc>] (sys_ioctl+0x4c/0xb5c) [ 293.985516][ T5893] r7:20000040 r6:00005452 r5:8449c781 r4:00000000 [ 293.985532][ T5893] [<805f2080>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 293.985579][ T5893] Exception stack(0xeca89fa8 to 0xeca89ff0) [ 293.985620][ T5893] 9fa0: 00000000 00000000 00000005 00005452 20000040 00000000 [ 293.985661][ T5893] 9fc0: 00000000 00000000 0012f6f4 00000036 003562d8 00000000 00000001 76fe40dc [ 293.985688][ T5893] 9fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 293.985726][ T5893] r10:00000036 r9:85f11900 r8:8020029c r7:00000036 r6:0012f6f4 r5:00000000 [ 293.985743][ T5893] r4:00000000 [ 293.985991][ T5893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.351203][ T5896] fuse: Unknown parameter 'use00000000000000000000' [ 294.391170][ T3744] usbhid 2-1:1.0: can't add hid device: -71 [ 294.391426][ T3744] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 294.401425][ T3744] usb 2-1: USB disconnect, device number 18 [ 295.270783][ T28] audit: type=1400 audit(295.180:305): avc: denied { ioctl } for pid=5913 comm="syz.1.590" path="socket:[8914]" dev="sockfs" ino=8914 ioctlcmd=0x400454cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.277372][ T28] audit: type=1400 audit(295.180:306): avc: denied { create } for pid=5913 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.285924][ T28] audit: type=1400 audit(295.190:307): avc: denied { sys_module } for pid=5905 comm="syz.0.588" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 295.295930][ T28] audit: type=1400 audit(295.200:308): avc: denied { bind } for pid=5913 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.674678][ T5923] fuse: Unknown parameter '0000000000@040000' [ 295.688521][ T2875] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 295.713160][ T5923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=5923 comm=syz.0.592 [ 295.856719][ T2875] usb 2-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 295.863456][ T2875] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.863568][ T2875] usb 2-1: config 1 interface 0 has no altsetting 0 [ 295.886691][ T2875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.886802][ T2875] usb 2-1: Product: syz [ 295.886833][ T2875] usb 2-1: Manufacturer: syz [ 295.886857][ T2875] usb 2-1: SerialNumber: syz [ 295.910261][ T5918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.376811][ T2875] usbhid 2-1:1.0: can't add hid device: -71 [ 296.377015][ T2875] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 296.380590][ T2875] usb 2-1: USB disconnect, device number 19 [ 296.417783][ T28] audit: type=1400 audit(296.320:309): avc: denied { watch } for pid=5924 comm="syz.0.593" path="/345/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 299.448335][ T3744] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 299.619815][ T3744] usb 2-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 299.641627][ T3744] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 299.641760][ T3744] usb 2-1: config 1 interface 0 has no altsetting 0 [ 299.676980][ T3744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.677050][ T3744] usb 2-1: Product: syz [ 299.677065][ T3744] usb 2-1: Manufacturer: syz [ 299.677077][ T3744] usb 2-1: SerialNumber: syz [ 299.697280][ T5944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.971023][ T3744] usbhid 2-1:1.0: can't add hid device: -71 [ 299.971209][ T3744] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 299.975929][ T3744] usb 2-1: USB disconnect, device number 20 [ 300.109963][ T5961] FAULT_INJECTION: forcing a failure. [ 300.109963][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 300.110118][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT [ 300.110169][ T5961] Hardware name: ARM-Versatile Express [ 300.110192][ T5961] Call trace: [ 300.110265][ T5961] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 300.110376][ T5961] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 300.110393][ T5961] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 300.110448][ T5961] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 300.110508][ T5961] r7:85f09900 r6:00000000 r5:85f09900 r4:835165e4 [ 300.110521][ T5961] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 300.110614][ T5961] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 300.110683][ T5961] r8:00000000 r7:85f09900 r6:83c01240 r5:00000d40 r4:0000001c [ 300.110697][ T5961] [<8059a414>] (should_failslab) from [<8057824c>] (__kmalloc_noprof+0xa8/0x3c8) [ 300.110755][ T5961] [<805781a4>] (__kmalloc_noprof) from [<80889ad8>] (tomoyo_encode2+0x64/0xec) [ 300.110824][ T5961] r10:00000fff r9:83cc3800 r8:00000000 r7:840c75d8 r6:844a2fa8 r5:87285ffc [ 300.110841][ T5961] r4:87285feb [ 300.110853][ T5961] [<80889a74>] (tomoyo_encode2) from [<80889b84>] (tomoyo_encode+0x24/0x30) [ 300.110916][ T5961] r9:83cc3800 r8:00000000 r7:840c75d8 r6:844a2fa8 r5:00001000 r4:87285fec [ 300.110932][ T5961] [<80889b60>] (tomoyo_encode) from [<80889c10>] (tomoyo_realpath_from_path+0x80/0x16c) [ 300.110983][ T5961] r5:00001000 r4:87285000 [ 300.110996][ T5961] [<80889b90>] (tomoyo_realpath_from_path) from [<80885c94>] (tomoyo_path_number_perm+0xcc/0x22c) [ 300.111057][ T5961] r10:00000000 r9:00000003 r8:844a2f80 r7:0000ab05 r6:81ee19d4 r5:00000004 [ 300.111078][ T5961] r4:844a2fa8 r3:832db580 [ 300.111118][ T5961] [<80885bc8>] (tomoyo_path_number_perm) from [<8088a5e8>] (tomoyo_file_ioctl+0x1c/0x20) [ 300.111189][ T5961] r10:85f09900 r9:00000003 r8:844a2f80 r7:00000000 r6:00000000 r5:0000ab05 [ 300.111206][ T5961] r4:844a2f80 [ 300.111218][ T5961] [<8088a5cc>] (tomoyo_file_ioctl) from [<80834948>] (security_file_ioctl+0x80/0x1d4) [ 300.111277][ T5961] [<808348c8>] (security_file_ioctl) from [<805f20cc>] (sys_ioctl+0x4c/0xb5c) [ 300.111338][ T5961] r7:00000000 r6:0000ab05 r5:844a2f81 r4:00000000 [ 300.111351][ T5961] [<805f2080>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 300.111400][ T5961] Exception stack(0xecb81fa8 to 0xecb81ff0) [ 300.111432][ T5961] 1fa0: 00000000 00000000 00000003 0000ab05 00000000 00000000 [ 300.111465][ T5961] 1fc0: 00000000 00000000 0012f6f4 00000036 003562d8 00000000 00000001 76f500dc [ 300.111489][ T5961] 1fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 300.111523][ T5961] r10:00000036 r9:85f09900 r8:8020029c r7:00000036 r6:0012f6f4 r5:00000000 [ 300.111540][ T5961] r4:00000000 [ 300.111595][ T5961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.662807][ T28] audit: type=1400 audit(300.570:310): avc: denied { create } for pid=5964 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.753662][ T28] audit: type=1400 audit(300.660:311): avc: denied { setopt } for pid=5964 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.869786][ T28] audit: type=1400 audit(300.780:312): avc: denied { ioctl } for pid=5964 comm="syz.1.599" path="socket:[8103]" dev="sockfs" ino=8103 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.899677][ T28] audit: type=1400 audit(300.810:313): avc: denied { write } for pid=5964 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.901239][ T28] audit: type=1400 audit(300.810:314): avc: denied { read } for pid=5964 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 301.923023][ T28] audit: type=1400 audit(301.830:315): avc: denied { setattr } for pid=5964 comm="syz.1.599" name="uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.295562][ T28] audit: type=1400 audit(303.200:316): avc: denied { ioctl } for pid=5987 comm="syz.1.610" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8160 ioctlcmd=0xc020aa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.333306][ T5996] fuse: Bad value for 'fd' [ 305.935170][ T6020] Failed to initialize the IGMP autojoin socket (err -2) [ 306.050460][ T28] audit: type=1400 audit(305.960:317): avc: denied { create } for pid=6021 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.060690][ T28] audit: type=1400 audit(305.970:318): avc: denied { nlmsg_tty_audit } for pid=6018 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 306.075160][ T28] audit: type=1400 audit(305.980:319): avc: denied { bind } for pid=6021 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.083297][ T28] audit: type=1400 audit(305.990:320): avc: denied { listen } for pid=6021 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.099840][ T28] audit: type=1400 audit(306.010:321): avc: denied { connect } for pid=6021 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.111882][ T28] audit: type=1400 audit(306.020:322): avc: denied { write } for pid=6021 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.401282][ T28] audit: type=1400 audit(307.310:323): avc: denied { bind } for pid=6030 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.469034][ T6031] FAULT_INJECTION: forcing a failure. [ 307.469034][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 307.469185][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.1.628 Not tainted syzkaller #0 PREEMPT [ 307.469234][ T6031] Hardware name: ARM-Versatile Express [ 307.469256][ T6031] Call trace: [ 307.469296][ T6031] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 307.469398][ T6031] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 307.469413][ T6031] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 307.469460][ T6031] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 307.469517][ T6031] r7:0000001b r6:00000000 r5:8577f080 r4:835165e4 [ 307.469530][ T6031] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 307.469586][ T6031] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 307.469653][ T6031] r8:8577f080 r7:0000001b r6:806abd3c r5:00000820 r4:83c01240 [ 307.469668][ T6031] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 307.469714][ T6031] [<8057928c>] (__kmalloc_cache_noprof) from [<806abd3c>] (proc_thread_self_get_link+0xb8/0xd0) [ 307.469794][ T6031] r10:2f2f2f2f r9:806abc84 r8:00000000 r7:00000276 r6:ecb95eac r5:00000277 [ 307.469815][ T6031] r4:8577f080 [ 307.469833][ T6031] [<806abc84>] (proc_thread_self_get_link) from [<805e91e4>] (pick_link+0x260/0x424) [ 307.469902][ T6031] r9:806abc84 r8:ecb95eac r7:86cd4f10 r6:00000000 r5:ecb95d68 r4:ecb95e58 [ 307.469942][ T6031] [<805e8f84>] (pick_link) from [<805e9530>] (step_into_slowpath+0x188/0x318) [ 307.470012][ T6031] r9:00000002 r8:86cd4f10 r7:00000002 r6:00300000 r5:8653d198 r4:ecb95e58 [ 307.470026][ T6031] [<805e93a8>] (step_into_slowpath) from [<805ea840>] (link_path_walk+0x49c/0x6e0) [ 307.470088][ T6031] r10:2f2f2f2f r9:84493d9e r8:d0d0d0d0 r7:fefefeff r6:ecb95e58 r5:00000018 [ 307.470104][ T6031] r4:84493d9d [ 307.470124][ T6031] [<805ea3a4>] (link_path_walk) from [<805eda50>] (path_openat+0x78/0xa98) [ 307.470193][ T6031] r10:00000018 r9:87437e80 r8:8577f080 r7:ecb95f20 r6:ecb95f20 r5:84493d8c [ 307.470210][ T6031] r4:ecb95e58 [ 307.470224][ T6031] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 307.470318][ T6031] r10:00000142 r9:8577f080 r8:00000001 r7:ffffff9c r6:ecb95f20 r5:8577f080 [ 307.470416][ T6031] r4:84493d80 [ 307.470446][ T6031] [<805ee470>] (do_file_open) from [<805d2194>] (do_sys_openat2+0xb8/0xf0) [ 307.470514][ T6031] r8:8020029c r7:76f4fe00 r6:ffffff9c r5:84493d80 r4:00000006 [ 307.470528][ T6031] [<805d20dc>] (do_sys_openat2) from [<805d2680>] (sys_openat+0x88/0xd8) [ 307.470616][ T6031] r7:00000142 r6:00000000 r5:76f4fe00 r4:ffffff9c [ 307.470631][ T6031] [<805d25f8>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 307.470676][ T6031] Exception stack(0xecb95fa8 to 0xecb95ff0) [ 307.470716][ T6031] 5fa0: 00000000 00000000 ffffff9c 76f4fe00 00020002 00000000 [ 307.470756][ T6031] 5fc0: 00000000 00000000 00000000 00000142 003562d8 00000000 00000001 76f500dc [ 307.470781][ T6031] 5fe0: 76f4fd88 76f4fd74 0010bf14 00112af8 [ 307.470803][ T6031] r5:00000000 r4:00000000 [ 308.222496][ T6040] fuse: Unknown parameter 'user_id00000000000000000000' [ 308.840367][ T6046] FAULT_INJECTION: forcing a failure. [ 308.840367][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 308.840515][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT [ 308.840566][ T6046] Hardware name: ARM-Versatile Express [ 308.840590][ T6046] Call trace: [ 308.840631][ T6046] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 308.840740][ T6046] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 308.840758][ T6046] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 308.840819][ T6046] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 308.840884][ T6046] r7:00000018 r6:00000000 r5:85715780 r4:835165e4 [ 308.840900][ T6046] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 308.840963][ T6046] [<80a5d534>] (should_fail_ex) from [<8059a480>] (should_failslab+0x6c/0x94) [ 308.841034][ T6046] r8:85715780 r7:00000018 r6:807ee164 r5:00400dc0 r4:83c02000 [ 308.841049][ T6046] [<8059a414>] (should_failslab) from [<805792e4>] (__kmalloc_cache_noprof+0x58/0x338) [ 308.841098][ T6046] [<8057928c>] (__kmalloc_cache_noprof) from [<807ee164>] (fuse_alloc_forget+0x28/0x2c) [ 308.841168][ T6046] r10:00000001 r9:ecb51ccc r8:87369f40 r7:85f82000 r6:8422dcd8 r5:00000000 [ 308.841185][ T6046] r4:ecb51cd0 [ 308.841198][ T6046] [<807ee13c>] (fuse_alloc_forget) from [<807f4f78>] (fuse_lookup_name+0x6c/0x284) [ 308.841248][ T6046] [<807f4f0c>] (fuse_lookup_name) from [<807f521c>] (fuse_lookup+0x8c/0x17c) [ 308.841319][ T6046] r10:2f2f2f2f r9:00000001 r8:00000001 r7:00000000 r6:8422dcc0 r5:84257440 [ 308.841336][ T6046] r4:8422dcc0 [ 308.841348][ T6046] [<807f5190>] (fuse_lookup) from [<805e60e0>] (__lookup_slow+0x64/0xfc) [ 308.841413][ T6046] r9:84493e5a r8:84257440 r7:00100401 r6:ecb51e80 r5:8422dd48 r4:8422dcc0 [ 308.841428][ T6046] [<805e607c>] (__lookup_slow) from [<805e61b0>] (lookup_slow+0x38/0x50) [ 308.841490][ T6046] r9:84493e5a r8:d0d0d0d0 r7:00000401 r6:ecb51e80 r5:8422dd48 r4:842574c0 [ 308.841504][ T6046] [<805e6178>] (lookup_slow) from [<805ea96c>] (link_path_walk+0x5c8/0x6e0) [ 308.841558][ T6046] r7:fefefeff r6:ecb51e78 r5:00000008 r4:84493e59 [ 308.841573][ T6046] [<805ea3a4>] (link_path_walk) from [<805eda50>] (path_openat+0x78/0xa98) [ 308.841637][ T6046] r10:00000018 r9:844a2900 r8:85715780 r7:ecb51f40 r6:ecb51f40 r5:84493e4c [ 308.841655][ T6046] r4:ecb51e78 [ 308.841667][ T6046] [<805ed9d8>] (path_openat) from [<805ee528>] (do_file_open+0xb8/0x150) [ 308.841734][ T6046] r10:00000033 r9:84493e40 r8:00000001 r7:ffffff9c r6:ecb51f40 r5:85715780 [ 308.841753][ T6046] r4:84493e40 [ 308.841773][ T6046] [<805ee470>] (do_file_open) from [<805d2384>] (file_open_name+0xa4/0x16c) [ 308.841840][ T6046] r8:85715780 r7:85750e00 r6:0012f6f4 r5:00000000 r4:20002240 [ 308.841855][ T6046] [<805d22e0>] (file_open_name) from [<80366494>] (sys_acct+0x80/0x320) [ 308.841907][ T6046] [<80366414>] (sys_acct) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 308.841950][ T6046] Exception stack(0xecb51fa8 to 0xecb51ff0) [ 308.841989][ T6046] 1fa0: 00000000 00000000 20002240 00000000 00000000 00000000 [ 308.842023][ T6046] 1fc0: 00000000 00000000 0012f6f4 00000033 003562d8 00000000 00000001 76fe40dc [ 308.842048][ T6046] 1fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 308.842081][ T6046] r10:00000033 r9:85715780 r8:8020029c r7:00000033 r6:0012f6f4 r5:00000000 [ 308.842097][ T6046] r4:00000000 [ 310.109845][ T28] audit: type=1400 audit(310.020:324): avc: denied { create } for pid=6052 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 310.999971][ T28] audit: type=1400 audit(310.910:325): avc: denied { ioctl } for pid=6052 comm="syz.1.637" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x4018f50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 311.288980][ T2875] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 311.419389][ T6063] fuse: Unknown parameter 'user_id00000000000000000000' [ 311.452274][ T2875] usb 2-1: Using ep0 maxpacket: 32 [ 311.454393][ T2875] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 311.468964][ T2875] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 8 [ 311.469073][ T2875] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1024 [ 311.469105][ T2875] usb 2-1: config 1 interface 0 has no altsetting 0 [ 311.482207][ T2875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.482297][ T2875] usb 2-1: Product: 繬眼紱㒆ﰃﭕ載鮬ሉㇻ𥉉Ꮂนꆷ嚠岑署⯁፭⚇窌ꃏ䈻東㰂덼䬱䳔倢貉觕튮哊겘譾⽔뒨錐咦ᴆ䔫⩳䆇ꀄ鼑墛꿜㯶솢떁䮂ᷜퟢ弪㮤뢼ʌ虁葞㝤磿⺻ἡꉅڜ邞鱳﹘곤 [ 311.482325][ T2875] usb 2-1: Manufacturer: ф [ 311.482345][ T2875] usb 2-1: SerialNumber: ᐌ [ 311.506502][ T6054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.507064][ T6054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.517205][ T6066] FAULT_INJECTION: forcing a failure. [ 311.517205][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.517387][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT [ 311.517438][ T6066] Hardware name: ARM-Versatile Express [ 311.517457][ T6066] Call trace: [ 311.517494][ T6066] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 311.517599][ T6066] r7:60000013 r6:60000013 r5:825425d4 r4:00000000 [ 311.517625][ T6066] [<80201ae4>] (show_stack) from [<8021f73c>] (dump_stack_lvl+0x5c/0x70) [ 311.517680][ T6066] [<8021f6e0>] (dump_stack_lvl) from [<8021f768>] (dump_stack+0x18/0x1c) [ 311.517737][ T6066] r7:20000680 r6:00000000 r5:85767080 r4:83555238 [ 311.517775][ T6066] [<8021f750>] (dump_stack) from [<80a5d6f4>] (should_fail_ex+0x1c0/0x220) [ 311.517850][ T6066] [<80a5d534>] (should_fail_ex) from [<80a5d768>] (should_fail+0x14/0x18) [ 311.517919][ T6066] r8:00004000 r7:20000680 r6:ecbe1e30 r5:00000000 r4:ecbe1f28 [ 311.517938][ T6066] [<80a5d754>] (should_fail) from [<80a5d788>] (should_fail_usercopy+0x1c/0x20) [ 311.518027][ T6066] [<80a5d76c>] (should_fail_usercopy) from [<816cd130>] (copy_msghdr_from_user+0x50/0x1e0) [ 311.518091][ T6066] [<816cd0e0>] (copy_msghdr_from_user) from [<816cd338>] (___sys_sendmsg+0x78/0xd0) [ 311.518187][ T6066] r8:00004000 r7:00000000 r6:840b8540 r5:ecbe1f28 r4:ecbe1e74 [ 311.518204][ T6066] [<816cd2c0>] (___sys_sendmsg) from [<816cf7f0>] (__sys_sendmsg+0x8c/0xe0) [ 311.518304][ T6066] r9:85767080 r8:87437d80 r7:00004000 r6:20000680 r5:87437d81 r4:00000003 [ 311.518322][ T6066] [<816cf764>] (__sys_sendmsg) from [<816cf858>] (sys_sendmsg+0x14/0x18) [ 311.518410][ T6066] r8:8020029c r7:00000128 r6:0012f6f4 r5:00000000 r4:00000000 [ 311.518458][ T6066] [<816cf844>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 311.518512][ T6066] Exception stack(0xecbe1fa8 to 0xecbe1ff0) [ 311.518582][ T6066] 1fa0: 00000000 00000000 00000003 20000680 00004000 00000000 [ 311.518659][ T6066] 1fc0: 00000000 00000000 0012f6f4 00000128 003562d8 00000000 00000001 76fe40dc [ 311.518750][ T6066] 1fe0: 76fe3e88 76fe3e78 0001903c 00130cf0 [ 312.935196][ T6077] fuse: Unknown parameter 'user_id00000000000000000000' [ 313.030317][ T28] audit: type=1400 audit(312.930:326): avc: denied { mount } for pid=6076 comm="syz.1.644" name="/" dev="ramfs" ino=9198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 313.315952][ T2875] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 313.328891][ T2875] usb 2-1: USB disconnect, device number 21 [ 313.354734][ T28] audit: type=1400 audit(313.260:327): avc: denied { bind } for pid=6079 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.403136][ T28] audit: type=1400 audit(313.310:328): avc: denied { setopt } for pid=6079 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.411534][ T28] audit: type=1400 audit(313.320:329): avc: denied { ioctl } for pid=6079 comm="syz.1.646" path="socket:[9216]" dev="sockfs" ino=9216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.440995][ T6081] 8<--- cut here --- [ 313.441114][ T6081] Unable to handle kernel paging request at virtual address fee0000b when write [ 313.441205][ T6081] [fee0000b] *pgd=80000080007003, *pmd=00000000 [ 313.442232][ T6081] Internal error: Oops: a06 [#1] SMP ARM [ 313.445685][ T6081] Modules linked in: [ 313.446255][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.1.646 Not tainted syzkaller #0 PREEMPT [ 313.446622][ T6081] Hardware name: ARM-Versatile Express [ 313.446940][ T6081] PC is at subdev_8255_io+0x60/0x6c [ 313.447471][ T6081] LR is at subdev_8255_io+0x4c/0x6c [ 313.448053][ T6081] pc : [<81557fe0>] lr : [<81557fcc>] psr: 60000013 [ 313.448618][ T6081] sp : ecbe9cb8 ip : ecbe9cb8 fp : ecbe9cd4 [ 313.448875][ T6081] r10: 00000008 r9 : 00000004 r8 : ecbe9da4 [ 313.449131][ T6081] r7 : 00000000 r6 : 0000009b r5 : 83fa0e40 r4 : 0000000b [ 313.449473][ T6081] r3 : 0000009b r2 : fee0000b r1 : 00000001 r0 : 83fa0e40 [ 313.449834][ T6081] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 313.450141][ T6081] Control: 30c5387d Table: 873dd640 DAC: 00000000 [ 313.450465][ T6081] Register r0 information: slab kmalloc-192 start 83fa0e40 pointer offset 0 size 192 [ 313.451717][ T6081] Register r1 information: non-paged memory [ 313.452326][ T6081] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 313.452991][ T6081] Register r3 information: non-paged memory [ 313.453244][ T6081] Register r4 information: non-paged memory [ 313.453541][ T6081] Register r5 information: slab kmalloc-192 start 83fa0e40 pointer offset 0 size 192 [ 313.454006][ T6081] Register r6 information: non-paged memory [ 313.454266][ T6081] Register r7 information: NULL pointer [ 313.454668][ T6081] Register r8 information: 2-page vmalloc region starting at 0xecbe8000 allocated at kernel_clone+0xc4/0x440 [ 313.455199][ T6081] Register r9 information: non-paged memory [ 313.455501][ T6081] Register r10 information: non-paged memory [ 313.455800][ T6081] Register r11 information: 2-page vmalloc region starting at 0xecbe8000 allocated at kernel_clone+0xc4/0x440 [ 313.456362][ T6081] Register r12 information: 2-page vmalloc region starting at 0xecbe8000 allocated at kernel_clone+0xc4/0x440 [ 313.458058][ T6081] Process syz.1.646 (pid: 6081, stack limit = 0xecbe8000) [ 313.458522][ T6081] Stack: (0xecbe9cb8 to 0xecbea000) [ 313.458814][ T6081] 9ca0: 81557f80 00000008 [ 313.459103][ T6081] 9cc0: 83fa0e40 00000000 ecbe9cf4 ecbe9cd8 81557cbc 81557f8c 00000008 805781b0 [ 313.459373][ T6081] 9ce0: 86a2a000 86a2a000 ecbe9d14 ecbe9cf8 81558074 81557c70 83fa0e40 00000000 [ 313.459648][ T6081] 9d00: 86a2a000 00000000 ecbe9d54 ecbe9d18 81558224 81557ff8 ffffffff 00000004 [ 313.459912][ T6081] 9d20: 8341e340 00000000 00000000 835dfba8 83fa0e40 00000000 ecbe9d90 83fa0e40 [ 313.460181][ T6081] 9d40: 00000000 83737408 ecbe9d8c ecbe9d58 81546c1c 815581bc 40946400 00000000 [ 313.460467][ T6081] 9d60: ecbe9d7c 20001900 83fa0e40 b5403587 40946400 00000003 0000000b 85f2be80 [ 313.460734][ T6081] 9d80: ecbe9e4c ecbe9d90 81542438 81546b20 35353238 00000000 00000000 00000000 [ 313.461004][ T6081] 9da0: 00000000 00000008 00000002 00000400 000f0000 0000000c 00000000 00000fff [ 313.461287][ T6081] 9dc0: 4c95238c 0000000a 00001000 00000802 00001600 00000096 20000001 00000809 [ 313.461573][ T6081] 9de0: 00000003 00000006 00000002 00000402 00000008 0000decf 00000003 0000000b [ 313.461849][ T6081] 9e00: 000003ff 00000072 00000003 000000ef fffff6fb 000002a4 08000004 dffffffd [ 313.462122][ T6081] 9e20: 00000000 baf8631d 00000000 873cd100 83fa0e40 20001900 40946400 00000003 [ 313.462375][ T6081] 9e40: ecbe9f14 ecbe9e50 81543748 81542378 8276ba64 850b7a28 00000064 84525ef4 [ 313.462677][ T6081] 9e60: ecbe9ee4 ecbe9e70 8085ce0c 8085316c 00000064 83fa0e70 00000000 ecbe9e90 [ 313.462949][ T6081] 9e80: 00000000 862f8d10 840d4c38 40946400 0000000b 00000000 ecbe9e84 00000000 [ 313.463218][ T6081] 9ea0: 00000000 00000000 00000000 00000000 00000000 baf8631d 00000000 873cd100 [ 313.463508][ T6081] 9ec0: 40946400 20001900 20001900 873cd100 0000000b 85f2be80 ecbe9ef4 ecbe9ee8 [ 313.463782][ T6081] 9ee0: 8085cf3c baf8631d ecbe9f14 00000000 873cd101 40946400 20001900 873cd100 [ 313.464051][ T6081] 9f00: 0000000b 85f2be80 ecbe9fa4 ecbe9f18 805f22c4 81543400 ecac8b10 85f2be80 [ 313.464316][ T6081] 9f20: ecbe9f3c ecbe9f30 81c0c9d0 81c0c89c ecbe9f54 ecbe9f40 8025cbac 80292058 [ 313.464593][ T6081] 9f40: ecbe9fb0 40000000 ecbe9f84 ecbe9f58 80222c2c 8025cb64 00000000 8341a10c [ 313.464866][ T6081] 9f60: ecbe9fb0 0013ee90 ecac8b10 80222b80 00000000 baf8631d ecbe9fac 00000000 [ 313.465138][ T6081] 9f80: 00000000 00356310 00000036 8020029c 85f2be80 00000036 00000000 ecbe9fa8 [ 313.465412][ T6081] 9fa0: 80200060 805f208c 00000000 00000000 0000000b 40946400 20001900 00000000 [ 313.465787][ T6081] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f500dc [ 313.466155][ T6081] 9fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 60000010 0000000b 00000000 00000000 [ 313.466496][ T6081] Call trace: [ 313.466729][ T6081] [<81557f80>] (subdev_8255_io) from [<81557cbc>] (subdev_8255_do_config+0x58/0x60) [ 313.467143][ T6081] r7:00000000 r6:83fa0e40 r5:00000008 r4:81557f80 [ 313.467381][ T6081] [<81557c64>] (subdev_8255_do_config) from [<81558074>] (subdev_8255_io_init+0x88/0x98) [ 313.467755][ T6081] r4:86a2a000 [ 313.468022][ T6081] [<81557fec>] (subdev_8255_io_init) from [<81558224>] (dev_8255_attach+0x74/0x138) [ 313.468463][ T6081] r7:00000000 r6:86a2a000 r5:00000000 r4:83fa0e40 [ 313.468664][ T6081] [<815581b0>] (dev_8255_attach) from [<81546c1c>] (comedi_device_attach+0x108/0x244) [ 313.469072][ T6081] r10:83737408 r9:00000000 r8:83fa0e40 r7:ecbe9d90 r6:00000000 r5:83fa0e40 [ 313.469439][ T6081] r4:835dfba8 [ 313.469581][ T6081] [<81546b14>] (comedi_device_attach) from [<81542438>] (do_devconfig_ioctl+0xcc/0x218) [ 313.469971][ T6081] r10:85f2be80 r9:0000000b r8:00000003 r7:40946400 r6:b5403587 r5:83fa0e40 [ 313.470258][ T6081] r4:20001900 [ 313.470404][ T6081] [<8154236c>] (do_devconfig_ioctl) from [<81543748>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 313.470776][ T6081] r8:00000003 r7:40946400 r6:20001900 r5:83fa0e40 r4:873cd100 [ 313.471001][ T6081] [<815433f4>] (comedi_unlocked_ioctl) from [<805f22c4>] (sys_ioctl+0x244/0xb5c) [ 313.471429][ T6081] r10:85f2be80 r9:0000000b r8:873cd100 r7:20001900 r6:40946400 r5:873cd101 [ 313.471753][ T6081] r4:00000000 [ 313.471852][ T28] audit: type=1400 audit(313.380:330): avc: denied { write } for pid=3114 comm="syz-executor" path="pipe:[1433]" dev="pipefs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 313.471901][ T6081] [<805f2080>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 313.473114][ T6081] Exception stack(0xecbe9fa8 to 0xecbe9ff0) [ 313.473419][ T6081] 9fa0: 00000000 00000000 0000000b 40946400 20001900 00000000 [ 313.473735][ T6081] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f500dc [ 313.474069][ T6081] 9fe0: 76f4fe88 76f4fe78 0001903c 00130cf0 [ 313.474286][ T6081] r10:00000036 r9:85f2be80 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 313.474621][ T6081] r4:00000000 [ 313.475092][ T6081] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 313.477320][ T6081] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.513600][ T28] audit: type=1400 audit(313.420:331): avc: denied { read } for pid=2925 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 313.523826][ T28] audit: type=1400 audit(313.430:332): avc: denied { search } for pid=2925 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.523978][ T28] audit: type=1400 audit(313.430:333): avc: denied { write search } for pid=2925 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.524027][ T28] audit: type=1400 audit(313.430:334): avc: denied { add_name } for pid=2925 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.535727][ T28] audit: type=1400 audit(313.440:335): avc: denied { create } for pid=2925 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.562196][ T6081] Kernel panic - not syncing: Fatal exception [ 313.565815][ T6081] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:58:12 Registers: info registers vcpu 0 CPU#0 R00=df801be4 R01=00000000 R02=00000000 R03=00000010 R04=00000000 R05=00002c11 R06=83da4958 R07=83f5d9c0 R08=83da4808 R09=84688740 R10=00000040 R11=df801e34 R12=df801d60 R13=df801e38 R14=80e6dd18 R15=81742c04 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=85130040 R01=0000005d R02=eabfd000 R03=00000000 R04=857eb03c R05=85130040 R06=80b71c60 R07=857eb04e R08=00000000 R09=00000000 R10=00000a41 R11=ecbe990c R12=00000002 R13=ecbe9900 R14=8355edd4 R15=80b71cb8 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000