last executing test programs: 7m45.902048395s ago: executing program 0 (id=914): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003d00)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004015}, 0x4810) 7m44.97953346s ago: executing program 0 (id=918): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$ndb(&(0x7f0000004480), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 7m44.453654374s ago: executing program 0 (id=920): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x9, 0x20000, 0xf09, 0xfffe, 0xe, "7fd5f80ab700da62109eb12dfc07affa160eb5"}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 7m44.083376254s ago: executing program 0 (id=922): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x18013, r0, 0xffffd000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f0000000040), 0x6) 7m43.373884703s ago: executing program 0 (id=924): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$ndb(&(0x7f0000004480), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 7m42.452121607s ago: executing program 0 (id=925): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @thr={&(0x7f0000000380)="3ed5002ccc67158a668f9b68807d1aecc2a10f99eee24703ea09e44d95fc47e3e20bff6c2043cc059bf8e8aecfc3e3a0baa82cdac7fc26d7fbf7797cb607343a856da8a8d0d8c9ca0e44961e438e1b38fb0bc6f946cf8520ad23c77df581a58dd5a4425ba93c52ed59309a1cb2db3f2bcc5c", &(0x7f0000000680)="2d0812d9c81bbb1b5901a23614e8ad72dc4b2a0aae5ac449ac5c8883c4d5ad2a83d0512933f1c050b8dcc04219cfbad38bd134d27aed3b92021dc35017a4f901dfa20e443eabc631a062622c16721a946bdcb162163f19fa6816c74f35a7d4c4f04eb4cf32696b2ce61efa3b9e8fdc3b2a"}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7m30.49472928s ago: executing program 1 (id=939): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000003c0)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x81, 0x25, 0x4a8f}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f00000000c0)=0x18) 7m29.954220444s ago: executing program 1 (id=940): syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000002bc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x88, 0xe0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x3, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xe2c, 0x8, 0x7f, 0x4}, {0x6, 0x24, 0x1a, 0x2}, [@mdlm_detail={0x4, 0x24, 0x13, 0x2}, @mdlm_detail={0x4, 0x24, 0x13, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xce, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x9, 0x9}}}}}}}]}}, 0x0) 7m29.509202836s ago: executing program 1 (id=941): r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{&(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}}], 0x1, 0x14080880) 7m28.932653922s ago: executing program 1 (id=942): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x4, 0x0, 0x1, 0x0, 0x0, @loopback, @multicast2}}}}) 7m28.65279247s ago: executing program 1 (id=943): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 7m28.528235173s ago: executing program 1 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3}) 6m57.419268921s ago: executing program 32 (id=925): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @thr={&(0x7f0000000380)="3ed5002ccc67158a668f9b68807d1aecc2a10f99eee24703ea09e44d95fc47e3e20bff6c2043cc059bf8e8aecfc3e3a0baa82cdac7fc26d7fbf7797cb607343a856da8a8d0d8c9ca0e44961e438e1b38fb0bc6f946cf8520ad23c77df581a58dd5a4425ba93c52ed59309a1cb2db3f2bcc5c", &(0x7f0000000680)="2d0812d9c81bbb1b5901a23614e8ad72dc4b2a0aae5ac449ac5c8883c4d5ad2a83d0512933f1c050b8dcc04219cfbad38bd134d27aed3b92021dc35017a4f901dfa20e443eabc631a062622c16721a946bdcb162163f19fa6816c74f35a7d4c4f04eb4cf32696b2ce61efa3b9e8fdc3b2a"}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6m43.414837628s ago: executing program 33 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3}) 5m42.243066806s ago: executing program 2 (id=983): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)={0x6, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x2, 0x95, &(0x7f00000017c0)=""/149}, {0x0, 0x0, 0x0}, {0x30000, 0x53, &(0x7f0000000340)=""/83}, {0x2, 0x88, &(0x7f00000019c0)=""/136}]}) 5m42.120047959s ago: executing program 2 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = getpgid(r0) rt_tgsigqueueinfo(r0, r6, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m39.293528105s ago: executing program 2 (id=985): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x700, 0x2500, 0xfffffffd, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x0, 0xe0, 0x7d, 0x2f, 0x0, @loopback, @private}}}}) 5m38.982336884s ago: executing program 2 (id=986): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x7}) 5m38.802115109s ago: executing program 2 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10) 5m23.708062785s ago: executing program 2 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syslog(0x2, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r3], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x2, 0x16b, 0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad000000000085100000020000008500000005000000950000f9f30000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4m38.22876427s ago: executing program 34 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syslog(0x2, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r3], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x2, 0x16b, 0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad000000000085100000020000008500000005000000950000f9f30000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 14.361195885s ago: executing program 4 (id=1705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c", 0x77}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) sendto(r0, &(0x7f00000002c0)="204c55ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e2435368a47ce6d0662223d0732483c5649324a914fa1387f279c0e25c1d608ab1a5663cb3819e4e0cb43b061da03658ae2d735fb05cafb121", 0x51, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000700)="7daab763921fe9087261cf01a6fe714469e7566c432327543768330fc28dd21081d4f295037690895f995ce339f99f0b6661a2c68e586ca592842dbfd1071cea6812a420b21fcf23fbc6c277dfe470d0da548f15fb2ed7bf4938117c4556762c45ebe87ebf3cf819d89ae2b17725033efa62324cd40f5ae93d1ca0c5257c5c5a2d4943b3a361f5649378706b1f0dfd489f7a56828950de4dfc7714cd744622059cd47f6583715e096fc9c2c8137540b930099c8539bf9b9b820650f188922110d2581d365e1e0d4a66a2feffffff3f09c04eef612a5947ab5101a98cb06d1293ac1a6f096ec3085881fa833f501b58fd2b25c08a", 0xf4, 0x10008095, 0x0, 0x0) 14.243174067s ago: executing program 4 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$kcm(r2, &(0x7f0000000c00)={&(0x7f0000000340)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)="15", 0x1}], 0x1, &(0x7f0000000940)=[{0x10, 0x109, 0x1000}], 0x10}, 0x8014) 13.942151595s ago: executing program 4 (id=1707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 13.672477621s ago: executing program 4 (id=1708): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x480, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x42a) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f00000000c0)) syz_emit_ethernet(0x78, &(0x7f0000000280)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3e, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x2, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab5"}}}}}}}, 0x0) 10.013244419s ago: executing program 4 (id=1713): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x480, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) 1.342592778s ago: executing program 3 (id=1714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476a96e4a4e0b75db47ec5454c327bb5b7233ac3507e16db41d0000008000000000a8ca9d22a565ff96d46e88faa10ff4240c00"/70}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.101748764s ago: executing program 3 (id=1715): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004461bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09451c268811000096859fc57a0000000000e07f938a06b19c00000025", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2404c084) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/4085, 0xff5}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/204, 0xcc}, {&(0x7f0000002b00)=""/70, 0x46}, {&(0x7f0000002bc0)=""/196, 0xc4}], 0x6}, 0x20) 942.895637ms ago: executing program 3 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6a, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x9, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x21}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) 367.895871ms ago: executing program 3 (id=1717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@migrate={0xec, 0x21, 0x1, 0x20, 0x4, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x4, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}, [@migrate={0x9c, 0x11, [{@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, @in6=@private2, 0x33, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) 171.125296ms ago: executing program 3 (id=1718): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) socket$igmp(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 243.31µs ago: executing program 3 (id=1719): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x230004cc) inotify_rm_watch(r2, r1) 0s ago: executing program 4 (id=1720): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x140, 0x0, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0xa, 0xffffffff, 0x383, 0x8001, 0x4]}) kernel console output (not intermixed with test programs): .589222][T10235] FAULT_INJECTION: forcing a failure. [ 1145.589222][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.589495][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.3.1456 Not tainted syzkaller #0 PREEMPT [ 1145.589548][T10235] Hardware name: ARM-Versatile Express [ 1145.589561][T10235] Call trace: [ 1145.589582][T10235] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1145.589639][T10235] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1145.589649][T10235] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1145.589675][T10235] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1145.589705][T10235] r7:840bc980 r6:00000000 r5:840bc980 r4:82b1ac48 [ 1145.589713][T10235] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1145.589742][T10235] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1145.589777][T10235] r8:00000000 r7:840bc980 r6:830016c0 r5:00000c40 r4:00001000 [ 1145.589787][T10235] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1145.589813][T10235] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1145.589848][T10235] r10:00000000 r9:83395400 r8:00000000 r7:850695d8 r6:83e7bea8 r5:00001000 [ 1145.589858][T10235] r4:00000000 [ 1145.589866][T10235] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1145.589903][T10235] r10:00000000 r9:00000003 r8:83e7be80 r7:00008933 r6:81cdd76c r5:00000004 [ 1145.589978][T10235] r4:83e7bea8 r3:828d2400 [ 1145.590039][T10235] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1145.590124][T10235] r10:840bc980 r9:00000003 r8:83e7be80 r7:200000c0 r6:200000c0 r5:00008933 [ 1145.590173][T10235] r4:83e7be80 [ 1145.590274][T10235] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1145.590365][T10235] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1145.590449][T10235] r7:200000c0 r6:00008933 r5:83e7be81 r4:00000000 [ 1145.590489][T10235] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1145.590581][T10235] Exception stack(0xe03a5fa8 to 0xe03a5ff0) [ 1145.590658][T10235] 5fa0: 00000000 00000000 00000003 00008933 200000c0 00000000 [ 1145.590788][T10235] 5fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1145.590818][T10235] 5fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1145.590880][T10235] r10:00000036 r9:840bc980 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1145.590909][T10235] r4:00000000 [ 1145.591233][T10235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1146.794755][T10250] FAULT_INJECTION: forcing a failure. [ 1146.794755][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.796296][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.3.1461 Not tainted syzkaller #0 PREEMPT [ 1146.796412][T10250] Hardware name: ARM-Versatile Express [ 1146.796447][T10250] Call trace: [ 1146.796491][T10250] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1146.796596][T10250] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1146.796615][T10250] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1146.796675][T10250] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1146.796737][T10250] r7:84e88000 r6:00000000 r5:84e88000 r4:82b1ac48 [ 1146.796756][T10250] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1146.796821][T10250] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1146.796894][T10250] r8:00000000 r7:84e88000 r6:830016c0 r5:00000c40 r4:00001000 [ 1146.796924][T10250] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1146.796979][T10250] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1146.797046][T10250] r10:00000000 r9:830c4000 r8:00000000 r7:834df4c8 r6:84fbb2a8 r5:00001000 [ 1146.797069][T10250] r4:00000000 [ 1146.797086][T10250] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1146.797153][T10250] r10:00000000 r9:00000003 r8:84fbb280 r7:00004143 r6:81cdd76c r5:00000004 [ 1146.797176][T10250] r4:84fbb2a8 r3:828d2400 [ 1146.797192][T10250] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1146.797260][T10250] r10:84e88000 r9:00000003 r8:84fbb280 r7:00000000 r6:00000000 r5:00004143 [ 1146.797282][T10250] r4:84fbb280 [ 1146.797298][T10250] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1146.797349][T10250] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1146.797415][T10250] r7:00000000 r6:00004143 r5:84fbb280 r4:00000000 [ 1146.797433][T10250] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1146.797485][T10250] Exception stack(0xe0361fa8 to 0xe0361ff0) [ 1146.797525][T10250] 1fa0: 00000000 00000000 00000003 00004143 00000000 00000000 [ 1146.797561][T10250] 1fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1146.797591][T10250] 1fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1146.797628][T10250] r10:00000036 r9:84e88000 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1146.797650][T10250] r4:00000000 [ 1146.820404][T10250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1147.556335][T10260] FAULT_INJECTION: forcing a failure. [ 1147.556335][T10260] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.558216][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.3.1463 Not tainted syzkaller #0 PREEMPT [ 1147.558326][T10260] Hardware name: ARM-Versatile Express [ 1147.558353][T10260] Call trace: [ 1147.558400][T10260] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1147.558497][T10260] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1147.558515][T10260] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1147.558563][T10260] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1147.558620][T10260] r7:84e88000 r6:00000000 r5:84e88000 r4:82b1ac48 [ 1147.558639][T10260] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1147.558698][T10260] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1147.558767][T10260] r8:00000000 r7:84e88000 r6:830016c0 r5:00000c40 r4:00001000 [ 1147.558785][T10260] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1147.558837][T10260] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1147.558912][T10260] r10:00000000 r9:830c4000 r8:00000000 r7:834efee0 r6:83e7bea8 r5:00001000 [ 1147.558933][T10260] r4:00000000 [ 1147.558950][T10260] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1147.559008][T10260] r10:00000000 r9:00000005 r8:83e7be80 r7:00004122 r6:81cdd76c r5:00000004 [ 1147.559031][T10260] r4:83e7bea8 r3:828d2400 [ 1147.559048][T10260] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1147.559109][T10260] r10:84e88000 r9:00000005 r8:83e7be80 r7:00000000 r6:00000000 r5:00004122 [ 1147.559127][T10260] r4:83e7be80 [ 1147.559145][T10260] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1147.559196][T10260] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1147.559255][T10260] r7:00000000 r6:00004122 r5:83e7be81 r4:00000000 [ 1147.559275][T10260] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1147.559325][T10260] Exception stack(0xea529fa8 to 0xea529ff0) [ 1147.559365][T10260] 9fa0: 00000000 00000000 00000005 00004122 00000000 00000000 [ 1147.559403][T10260] 9fc0: 00000000 00000000 0012f224 00000036 00356378 00000000 003d0f00 76fc60dc [ 1147.559431][T10260] 9fe0: 76fc5e88 76fc5e78 00018ebc 00130820 [ 1147.559467][T10260] r10:00000036 r9:84e88000 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1147.559486][T10260] r4:00000000 [ 1147.583567][T10260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1147.585573][ T28] audit: type=1400 audit(1147.510:562): avc: denied { ioctl } for pid=10253 comm="syz.3.1463" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=726 ioctlcmd=0x4122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1147.663463][ T28] audit: type=1400 audit(1147.580:563): avc: denied { read } for pid=10261 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.780730][ T28] audit: type=1400 audit(1148.700:564): avc: denied { read } for pid=10264 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.798980][ T28] audit: type=1400 audit(1148.720:565): avc: denied { create } for pid=10264 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1148.808989][ T28] audit: type=1400 audit(1148.730:566): avc: denied { setopt } for pid=10264 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1148.896594][ T28] audit: type=1400 audit(1148.820:567): avc: denied { read } for pid=10266 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.917256][ T28] audit: type=1400 audit(1148.840:568): avc: denied { read write } for pid=10266 comm="syz.4.1467" name="sequencer2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.920535][ T28] audit: type=1400 audit(1148.840:569): avc: denied { ioctl open } for pid=10266 comm="syz.4.1467" path="/dev/sequencer2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1148.936107][ T28] audit: type=1400 audit(1148.860:570): avc: denied { ioctl } for pid=10266 comm="syz.4.1467" path="/dev/sequencer2" dev="devtmpfs" ino=723 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1149.041407][ T28] audit: type=1400 audit(1148.960:571): avc: denied { read } for pid=10268 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1149.830104][T10282] FAULT_INJECTION: forcing a failure. [ 1149.830104][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.830639][T10282] CPU: 0 UID: 0 PID: 10282 Comm: syz.4.1473 Not tainted syzkaller #0 PREEMPT [ 1149.830738][T10282] Hardware name: ARM-Versatile Express [ 1149.830767][T10282] Call trace: [ 1149.830812][T10282] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1149.830930][T10282] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1149.831008][T10282] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1149.831110][T10282] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1149.831249][T10282] r7:845b55c0 r6:00000000 r5:845b55c0 r4:82b1ac48 [ 1149.831302][T10282] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1149.831416][T10282] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1149.831654][T10282] r8:00000000 r7:845b55c0 r6:830016c0 r5:00000c40 r4:00001000 [ 1149.831722][T10282] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1149.831818][T10282] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1149.831909][T10282] r10:00000000 r9:830c4000 r8:00000000 r7:834cfb28 r6:83e7b1a8 r5:00001000 [ 1149.831935][T10282] r4:00000000 [ 1149.831957][T10282] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1149.832029][T10282] r10:00000000 r9:00000003 r8:83e7b180 r7:00005437 r6:81cdd76c r5:00000004 [ 1149.832054][T10282] r4:83e7b1a8 r3:828d2400 [ 1149.832073][T10282] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1149.832141][T10282] r10:845b55c0 r9:00000003 r8:83e7b180 r7:00000000 r6:00000000 r5:00005437 [ 1149.832165][T10282] r4:83e7b180 [ 1149.832182][T10282] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1149.832269][T10282] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1149.832341][T10282] r7:00000000 r6:00005437 r5:83e7b181 r4:00000000 [ 1149.832363][T10282] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1149.832416][T10282] Exception stack(0xdfde5fa8 to 0xdfde5ff0) [ 1149.832459][T10282] 5fa0: 00000000 00000000 00000003 00005437 00000000 00000000 [ 1149.832496][T10282] 5fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1149.832527][T10282] 5fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1149.832566][T10282] r10:00000036 r9:845b55c0 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1149.832588][T10282] r4:00000000 [ 1149.888523][T10282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1150.450638][T10289] FAULT_INJECTION: forcing a failure. [ 1150.450638][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.457301][T10289] CPU: 1 UID: 0 PID: 10289 Comm: syz.3.1476 Not tainted syzkaller #0 PREEMPT [ 1150.457461][T10289] Hardware name: ARM-Versatile Express [ 1150.457495][T10289] Call trace: [ 1150.457540][T10289] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1150.457651][T10289] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1150.457673][T10289] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1150.457730][T10289] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1150.457796][T10289] r7:845ca4c0 r6:00000000 r5:845ca4c0 r4:82b1ac48 [ 1150.457814][T10289] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1150.457885][T10289] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1150.457961][T10289] r8:00000000 r7:845ca4c0 r6:830016c0 r5:00000c40 r4:00001000 [ 1150.457981][T10289] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1150.458037][T10289] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1150.458108][T10289] r10:00000000 r9:83395400 r8:00000000 r7:8509fe58 r6:85bbc3a8 r5:00001000 [ 1150.458129][T10289] r4:00000000 [ 1150.458148][T10289] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1150.458216][T10289] r10:00000000 r9:00000004 r8:85bbc380 r7:00008916 r6:81cdd76c r5:00000004 [ 1150.458240][T10289] r4:85bbc3a8 r3:828d2400 [ 1150.458258][T10289] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1150.458324][T10289] r10:845ca4c0 r9:00000004 r8:85bbc380 r7:20000140 r6:20000140 r5:00008916 [ 1150.458345][T10289] r4:85bbc380 [ 1150.458365][T10289] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1150.458421][T10289] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1150.458485][T10289] r7:20000140 r6:00008916 r5:85bbc381 r4:00000000 [ 1150.458505][T10289] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1150.458555][T10289] Exception stack(0xea88dfa8 to 0xea88dff0) [ 1150.458596][T10289] dfa0: 00000000 00000000 00000004 00008916 20000140 00000000 [ 1150.458632][T10289] dfc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1150.458661][T10289] dfe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1150.458697][T10289] r10:00000036 r9:845ca4c0 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1150.458718][T10289] r4:00000000 [ 1150.484309][T10289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1151.563916][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.566945][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.585906][T10300] FAULT_INJECTION: forcing a failure. [ 1151.585906][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.586432][T10300] CPU: 0 UID: 0 PID: 10300 Comm: syz.3.1479 Not tainted syzkaller #0 PREEMPT [ 1151.586518][T10300] Hardware name: ARM-Versatile Express [ 1151.586543][T10300] Call trace: [ 1151.587414][T10300] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1151.588373][T10300] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1151.588582][T10300] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1151.589305][T10300] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1151.589830][T10300] r7:00000000 r6:00000000 r5:845aa4c0 r4:82b53188 [ 1151.590650][T10300] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1151.590741][T10300] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1151.590843][T10300] r8:76fe6f08 r7:00000000 r6:00000000 r5:ea88df68 r4:00000002 [ 1151.590874][T10300] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1151.590929][T10300] [<809f1860>] (should_fail_usercopy) from [<805defa8>] (simple_read_from_buffer+0x80/0x140) [ 1151.590988][T10300] [<805def28>] (simple_read_from_buffer) from [<80662f4c>] (proc_fail_nth_read+0xb8/0x108) [ 1151.591081][T10300] r10:80662e94 r9:00000001 r8:00000002 r7:ea88df68 r6:0000000f r5:76fe6f08 [ 1151.591156][T10300] r4:845aa4c0 r3:ea88de9f [ 1151.591179][T10300] [<80662e94>] (proc_fail_nth_read) from [<8059ed2c>] (vfs_read+0xc0/0x328) [ 1151.591268][T10300] r8:845aa4c0 r7:ea88df68 r6:76fe6f08 r5:83e7bf80 r4:0000000f [ 1151.591309][T10300] [<8059ec6c>] (vfs_read) from [<8059f978>] (ksys_read+0x74/0xec) [ 1151.591422][T10300] r10:00000003 r9:845aa4c0 r8:8020029c r7:00000000 r6:00000000 r5:83e7bf80 [ 1151.591498][T10300] r4:83e7bf83 [ 1151.591626][T10300] [<8059f904>] (ksys_read) from [<8059fa00>] (sys_read+0x10/0x14) [ 1151.591699][T10300] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1151.591717][T10300] [<8059f9f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1151.591768][T10300] Exception stack(0xea88dfa8 to 0xea88dff0) [ 1151.591809][T10300] dfa0: 00000000 00000000 00000004 76fe6f08 0000000f 00000000 [ 1151.591848][T10300] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fe70dc [ 1151.591878][T10300] dfe0: 76fe6e58 76fe6e44 0010ba44 00112628 [ 1151.969222][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.971245][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.158892][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1153.159323][ T28] audit: type=1400 audit(1153.080:665): avc: denied { execmem } for pid=10309 comm="syz.3.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1153.524828][ T28] audit: type=1400 audit(1153.440:666): avc: denied { read } for pid=10313 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1153.621162][ T28] audit: type=1400 audit(1153.540:667): avc: denied { nlmsg_write } for pid=10313 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1153.622487][ T28] audit: type=1400 audit(1153.540:668): avc: denied { audit_write } for pid=10313 comm="syz.4.1483" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1153.622884][ T28] audit: type=1107 audit(1153.540:669): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='[[&RRn-X.7/@~ L+30(DM^q,.%\;' [ 1153.662462][ T28] audit: type=1400 audit(1153.580:670): avc: denied { execmem } for pid=10309 comm="syz.3.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1153.691234][ T28] audit: type=1400 audit(1153.610:671): avc: denied { create } for pid=10313 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.759452][ T28] audit: type=1400 audit(1153.680:672): avc: denied { write } for pid=10313 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.795315][ T28] audit: type=1400 audit(1153.720:673): avc: denied { read } for pid=10313 comm="syz.4.1483" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1153.804140][ T28] audit: type=1400 audit(1153.730:674): avc: denied { read open } for pid=10313 comm="syz.4.1483" path="/dev/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1154.647543][T10320] FAULT_INJECTION: forcing a failure. [ 1154.647543][T10320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.662246][T10320] CPU: 1 UID: 0 PID: 10320 Comm: syz.4.1485 Not tainted syzkaller #0 PREEMPT [ 1154.662400][T10320] Hardware name: ARM-Versatile Express [ 1154.662426][T10320] Call trace: [ 1154.662467][T10320] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1154.662574][T10320] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1154.662596][T10320] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1154.662646][T10320] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1154.662701][T10320] r7:20000340 r6:00000000 r5:833ed5c0 r4:82b53188 [ 1154.662720][T10320] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1154.662776][T10320] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1154.662848][T10320] r8:ffffff9c r7:20000340 r6:00000100 r5:20000180 r4:20000180 [ 1154.662868][T10320] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1154.662920][T10320] [<809f1860>] (should_fail_usercopy) from [<809f7800>] (strncpy_from_user+0x20/0x1b0) [ 1154.662970][T10320] [<809f77e0>] (strncpy_from_user) from [<805dbbf4>] (path_setxattrat+0x7c/0x1bc) [ 1154.663035][T10320] r10:00000000 r9:00000000 r8:ffffff9c r7:20000340 r6:00000000 r5:00000000 [ 1154.663057][T10320] r4:20000180 [ 1154.663073][T10320] [<805dbb78>] (path_setxattrat) from [<805dbec0>] (sys_setxattr+0x34/0x3c) [ 1154.663135][T10320] r10:000000e2 r9:833ed5c0 r8:8020029c r7:000000e2 r6:0012f224 r5:00000000 [ 1154.663156][T10320] r4:20000180 [ 1154.663173][T10320] [<805dbe8c>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1154.663219][T10320] Exception stack(0xea979fa8 to 0xea979ff0) [ 1154.663258][T10320] 9fa0: 00000000 00000000 20000340 20000180 00000000 00000000 [ 1154.663291][T10320] 9fc0: 00000000 00000000 0012f224 000000e2 003562d8 00000000 00000001 76f670dc [ 1154.663318][T10320] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1154.663339][T10320] r4:00000000 [ 1154.877603][T10326] FAULT_INJECTION: forcing a failure. [ 1154.877603][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.879402][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.3.1487 Not tainted syzkaller #0 PREEMPT [ 1154.879515][T10326] Hardware name: ARM-Versatile Express [ 1154.879544][T10326] Call trace: [ 1154.879588][T10326] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1154.879696][T10326] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1154.879720][T10326] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1154.879777][T10326] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1154.879850][T10326] r7:840bbd40 r6:00000000 r5:840bbd40 r4:82b1ac48 [ 1154.879870][T10326] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1154.879934][T10326] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1154.880009][T10326] r8:00000000 r7:840bbd40 r6:830016c0 r5:00000c40 r4:00001000 [ 1154.880029][T10326] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1154.880089][T10326] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1154.880161][T10326] r10:00000000 r9:830c4000 r8:00000000 r7:834de440 r6:83e7b9a8 r5:00001000 [ 1154.880183][T10326] r4:00000000 [ 1154.880200][T10326] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1154.880301][T10326] r10:00000000 r9:00000003 r8:83e7b980 r7:80184520 r6:81cdd76c r5:00000004 [ 1154.880328][T10326] r4:83e7b9a8 r3:828d2400 [ 1154.880347][T10326] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1154.880417][T10326] r10:840bbd40 r9:00000003 r8:83e7b980 r7:00000000 r6:00000000 r5:80184520 [ 1154.880439][T10326] r4:83e7b980 [ 1154.880458][T10326] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1154.880512][T10326] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1154.880578][T10326] r7:00000000 r6:80184520 r5:83e7b981 r4:00000000 [ 1154.880597][T10326] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1154.880648][T10326] Exception stack(0xea979fa8 to 0xea979ff0) [ 1154.880688][T10326] 9fa0: 00000000 00000000 00000003 80184520 00000000 00000000 [ 1154.880729][T10326] 9fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1154.880759][T10326] 9fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1154.880797][T10326] r10:00000036 r9:840bbd40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1154.880826][T10326] r4:00000000 [ 1154.920554][T10326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1155.333995][T10334] FAULT_INJECTION: forcing a failure. [ 1155.333995][T10334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.336719][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.4.1490 Not tainted syzkaller #0 PREEMPT [ 1155.336878][T10334] Hardware name: ARM-Versatile Express [ 1155.336911][T10334] Call trace: [ 1155.336958][T10334] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1155.337070][T10334] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1155.337096][T10334] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1155.337191][T10334] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1155.337267][T10334] r7:00000020 r6:00000000 r5:84e83d40 r4:82b53188 [ 1155.337288][T10334] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1155.337357][T10334] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1155.337430][T10334] r8:00000000 r7:00000020 r6:00000002 r5:eaa59e40 r4:00000000 [ 1155.337452][T10334] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1155.337513][T10334] [<809f1860>] (should_fail_usercopy) from [<803e9ac0>] (__sys_bpf+0xe4/0x219c) [ 1155.337573][T10334] [<803e99dc>] (__sys_bpf) from [<803ec188>] (sys_bpf+0x50/0x6c) [ 1155.337641][T10334] r10:00000182 r9:84e83d40 r8:8020029c r7:00000182 r6:0012f224 r5:00000000 [ 1155.337668][T10334] r4:00000000 [ 1155.337687][T10334] [<803ec138>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1155.337741][T10334] Exception stack(0xeaa59fa8 to 0xeaa59ff0) [ 1155.337828][T10334] 9fa0: 00000000 00000000 00000002 200009c0 00000020 00000000 [ 1155.337919][T10334] 9fc0: 00000000 00000000 0012f224 00000182 003562d8 00000000 00000001 76f670dc [ 1155.337955][T10334] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1155.524042][T10336] FAULT_INJECTION: forcing a failure. [ 1155.524042][T10336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.525850][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.4.1491 Not tainted syzkaller #0 PREEMPT [ 1155.525972][T10336] Hardware name: ARM-Versatile Express [ 1155.526002][T10336] Call trace: [ 1155.526045][T10336] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1155.526157][T10336] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1155.526180][T10336] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1155.526237][T10336] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1155.526301][T10336] r7:00000000 r6:00000000 r5:833ed5c0 r4:82b53188 [ 1155.526332][T10336] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1155.526401][T10336] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1155.526471][T10336] r8:76f66f08 r7:00000000 r6:00000000 r5:ea7d5f68 r4:00000002 [ 1155.526492][T10336] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1155.526618][T10336] [<809f1860>] (should_fail_usercopy) from [<805defa8>] (simple_read_from_buffer+0x80/0x140) [ 1155.526687][T10336] [<805def28>] (simple_read_from_buffer) from [<80662f4c>] (proc_fail_nth_read+0xb8/0x108) [ 1155.526763][T10336] r10:80662e94 r9:00000001 r8:00000002 r7:ea7d5f68 r6:0000000f r5:76f66f08 [ 1155.526790][T10336] r4:833ed5c0 r3:ea7d5e9f [ 1155.526809][T10336] [<80662e94>] (proc_fail_nth_read) from [<8059ed2c>] (vfs_read+0xc0/0x328) [ 1155.526893][T10336] r8:833ed5c0 r7:ea7d5f68 r6:76f66f08 r5:861c0280 r4:0000000f [ 1155.526914][T10336] [<8059ec6c>] (vfs_read) from [<8059f978>] (ksys_read+0x74/0xec) [ 1155.526988][T10336] r10:00000003 r9:833ed5c0 r8:8020029c r7:00000000 r6:00000000 r5:861c0280 [ 1155.527013][T10336] r4:861c0283 [ 1155.527032][T10336] [<8059f904>] (ksys_read) from [<8059fa00>] (sys_read+0x10/0x14) [ 1155.527098][T10336] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1155.527118][T10336] [<8059f9f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1155.527171][T10336] Exception stack(0xea7d5fa8 to 0xea7d5ff0) [ 1155.527214][T10336] 5fa0: 00000000 00000000 00000004 76f66f08 0000000f 00000000 [ 1155.527253][T10336] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f670dc [ 1155.527283][T10336] 5fe0: 76f66e58 76f66e44 0010ba44 00112628 [ 1156.404728][T10350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10350 comm=syz.4.1497 [ 1156.858749][T10351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10351 comm=syz.4.1497 [ 1156.899343][T10350] 8000000.flash: buffer write error (status timeout) [ 1157.487051][T10358] FAULT_INJECTION: forcing a failure. [ 1157.487051][T10358] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.487604][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.4.1498 Not tainted syzkaller #0 PREEMPT [ 1157.487708][T10358] Hardware name: ARM-Versatile Express [ 1157.487736][T10358] Call trace: [ 1157.487782][T10358] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1157.487981][T10358] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1157.488063][T10358] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1157.488142][T10358] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1157.488222][T10358] r7:84e83d40 r6:00000000 r5:84e83d40 r4:82b1ac48 [ 1157.488303][T10358] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1157.488465][T10358] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1157.488668][T10358] r8:00000000 r7:84e83d40 r6:805ae8f0 r5:00000cc0 r4:830bdb40 [ 1157.488722][T10358] [<80567638>] (should_failslab) from [<805450bc>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1157.488842][T10358] [<80545060>] (kmem_cache_alloc_noprof) from [<805ae8f0>] (do_getname+0x2c/0x14c) [ 1157.488929][T10358] r10:0000017e r9:84e83d40 r8:00000000 r7:00000000 r6:20000180 r5:8253e8c0 [ 1157.489000][T10358] r4:00000002 [ 1157.489050][T10358] [<805ae8c4>] (do_getname) from [<805b87b8>] (sys_renameat2+0x2c/0x84) [ 1157.489159][T10358] r10:0000017e r9:84e83d40 r8:8020029c r7:ffffff9c r6:ffffff9c r5:20000000 [ 1157.489231][T10358] r4:00000002 r3:20000000 [ 1157.489284][T10358] [<805b878c>] (sys_renameat2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1157.489366][T10358] Exception stack(0xeacd1fa8 to 0xeacd1ff0) [ 1157.489477][T10358] 1fa0: 00000002 00000000 ffffff9c 20000180 ffffff9c 20000000 [ 1157.489543][T10358] 1fc0: 00000002 00000000 0012f224 0000017e 003562d8 00000000 00000001 76f670dc [ 1157.489634][T10358] 1fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1157.489704][T10358] r7:0000017e r6:0012f224 r5:00000000 r4:00000002 [ 1158.163443][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 1158.163685][ T28] audit: type=1400 audit(1158.090:763): avc: denied { read } for pid=10359 comm="syz.4.1499" name="nbd4" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1158.172728][ T28] audit: type=1400 audit(1158.100:764): avc: denied { read open } for pid=10359 comm="syz.4.1499" path="/dev/nbd4" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1158.190323][ T28] audit: type=1400 audit(1158.110:765): avc: denied { read } for pid=10361 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1158.203414][T10360] FAULT_INJECTION: forcing a failure. [ 1158.203414][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.203957][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.4.1499 Not tainted syzkaller #0 PREEMPT [ 1158.204085][T10360] Hardware name: ARM-Versatile Express [ 1158.204122][T10360] Call trace: [ 1158.204168][T10360] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1158.204340][T10360] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1158.204424][T10360] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1158.204492][T10360] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1158.204559][T10360] r7:845c8c40 r6:00000000 r5:845c8c40 r4:82b1ac48 [ 1158.204579][T10360] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1158.204695][T10360] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1158.204801][T10360] r8:00000000 r7:845c8c40 r6:830016c0 r5:00000c40 r4:00001000 [ 1158.204828][T10360] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1158.204904][T10360] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1158.205005][T10360] r10:00000000 r9:830c4000 r8:00000000 r7:8341c198 r6:83e7b428 r5:00001000 [ 1158.205031][T10360] r4:00000000 [ 1158.205082][T10360] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1158.205170][T10360] r10:00000000 r9:00000003 r8:83e7b400 r7:40085503 r6:81cdd76c r5:00000004 [ 1158.205227][T10360] r4:83e7b428 r3:828d2400 [ 1158.205271][T10360] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1158.205374][T10360] r10:845c8c40 r9:00000003 r8:83e7b400 r7:200000c0 r6:200000c0 r5:40085503 [ 1158.205473][T10360] r4:83e7b400 [ 1158.205537][T10360] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1158.205645][T10360] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1158.205763][T10360] r7:200000c0 r6:40085503 r5:83e7b401 r4:00000000 [ 1158.205789][T10360] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1158.205840][T10360] Exception stack(0xead49fa8 to 0xead49ff0) [ 1158.205911][T10360] 9fa0: 00000000 00000000 00000003 40085503 200000c0 00000000 [ 1158.206034][T10360] 9fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1158.206107][T10360] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1158.206165][T10360] r10:00000036 r9:845c8c40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1158.206238][T10360] r4:00000000 [ 1158.206702][T10360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1158.209003][ T28] audit: type=1400 audit(1158.130:766): avc: denied { ioctl } for pid=10359 comm="syz.4.1499" path="/dev/nbd4" dev="devtmpfs" ino=640 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1158.221164][ T28] audit: type=1400 audit(1158.140:767): avc: denied { module_request } for pid=10361 comm="syz.3.1500" kmod="crypto-ghash" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1158.394243][ T28] audit: type=1400 audit(1158.320:768): avc: denied { module_request } for pid=10361 comm="syz.3.1500" kmod="crypto-ghash-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1158.458957][ T28] audit: type=1400 audit(1158.380:769): avc: denied { read } for pid=10365 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1158.560623][ T28] audit: type=1400 audit(1158.480:770): avc: denied { map } for pid=10365 comm="syz.4.1501" path="socket:[16088]" dev="sockfs" ino=16088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1158.604910][T10362] could not allocate digest TFM handle ghash [ 1158.646651][ T28] audit: type=1400 audit(1158.570:771): avc: denied { create } for pid=10361 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1158.648545][ T28] audit: type=1400 audit(1158.570:772): avc: denied { ioctl } for pid=10361 comm="syz.3.1500" path="socket:[16932]" dev="sockfs" ino=16932 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1158.829655][T10373] FAULT_INJECTION: forcing a failure. [ 1158.829655][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.841983][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.4.1504 Not tainted syzkaller #0 PREEMPT [ 1158.842076][T10373] Hardware name: ARM-Versatile Express [ 1158.842091][T10373] Call trace: [ 1158.842113][T10373] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1158.842173][T10373] r7:60000113 r6:60000113 r5:82332444 r4:00000000 [ 1158.842183][T10373] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1158.842216][T10373] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1158.842247][T10373] r7:833f6200 r6:00000000 r5:833f6200 r4:82b1ac48 [ 1158.842255][T10373] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1158.842284][T10373] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1158.842339][T10373] r8:00000000 r7:833f6200 r6:830016c0 r5:00000c40 r4:00001000 [ 1158.842372][T10373] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1158.842407][T10373] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1158.842443][T10373] r10:00000000 r9:86a8c400 r8:00000000 r7:85091f68 r6:861bf7a8 r5:00001000 [ 1158.842454][T10373] r4:00000000 [ 1158.842462][T10373] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1158.842494][T10373] r10:00000000 r9:00000003 r8:861bf780 r7:00005450 r6:81cdd76c r5:00000004 [ 1158.842505][T10373] r4:861bf7a8 r3:828d2400 [ 1158.842514][T10373] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1158.842545][T10373] r10:833f6200 r9:00000003 r8:861bf780 r7:00000000 r6:00000000 r5:00005450 [ 1158.842555][T10373] r4:861bf780 [ 1158.842563][T10373] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1158.842590][T10373] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1158.842621][T10373] r7:00000000 r6:00005450 r5:861bf781 r4:00000000 [ 1158.842631][T10373] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1158.842656][T10373] Exception stack(0xead45fa8 to 0xead45ff0) [ 1158.842676][T10373] 5fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 1158.842694][T10373] 5fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1158.842707][T10373] 5fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1158.842733][T10373] r10:00000036 r9:833f6200 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1158.842744][T10373] r4:00000000 [ 1158.860579][T10374] FAULT_INJECTION: forcing a failure. [ 1158.860579][T10374] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.860740][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.3.1505 Not tainted syzkaller #0 PREEMPT [ 1158.860798][T10374] Hardware name: ARM-Versatile Express [ 1158.860839][T10374] Call trace: [ 1158.860893][T10374] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1158.860992][T10374] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1158.861012][T10374] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1158.861067][T10374] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1158.861137][T10374] r7:8409bd40 r6:00000000 r5:8409bd40 r4:82b1ac48 [ 1158.861160][T10374] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1158.861220][T10374] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1158.861295][T10374] r8:00000000 r7:8409bd40 r6:830016c0 r5:00000c40 r4:00001000 [ 1158.861314][T10374] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1158.861378][T10374] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1158.861456][T10374] r10:00000000 r9:830c4000 r8:00000000 r7:834eedd0 r6:83e7b7a8 r5:00001000 [ 1158.861481][T10374] r4:00000000 [ 1158.861495][T10374] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1158.861663][T10374] r10:00000000 r9:00000003 r8:83e7b780 r7:40045731 r6:81cdd76c r5:00000004 [ 1158.861708][T10374] r4:83e7b7a8 r3:828d2400 [ 1158.861725][T10374] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1158.861796][T10374] r10:8409bd40 r9:00000003 r8:83e7b780 r7:00000000 r6:00000000 r5:40045731 [ 1158.861818][T10374] r4:83e7b780 [ 1158.861834][T10374] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1158.861919][T10374] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1158.861996][T10374] r7:00000000 r6:40045731 r5:83e7b781 r4:00000000 [ 1158.862016][T10374] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1158.862070][T10374] Exception stack(0xeae41fa8 to 0xeae41ff0) [ 1158.862149][T10374] 1fa0: 00000000 00000000 00000003 40045731 00000000 00000000 [ 1158.862217][T10374] 1fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1158.862289][T10374] 1fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1158.862341][T10374] r10:00000036 r9:8409bd40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1158.862376][T10374] r4:00000000 [ 1158.871974][T10374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1158.885251][T10373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1159.298540][T10379] could not allocate digest TFM handle ghash [ 1159.414633][T10389] FAULT_INJECTION: forcing a failure. [ 1159.414633][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.425157][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.3.1510 Not tainted syzkaller #0 PREEMPT [ 1159.425246][T10389] Hardware name: ARM-Versatile Express [ 1159.425263][T10389] Call trace: [ 1159.425285][T10389] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1159.425345][T10389] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1159.425361][T10389] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1159.425390][T10389] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1159.425434][T10389] r7:84e83d40 r6:00000000 r5:84e83d40 r4:82b1ac48 [ 1159.425457][T10389] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1159.425521][T10389] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1159.425585][T10389] r8:00000000 r7:84e83d40 r6:830016c0 r5:00000c40 r4:00001000 [ 1159.425595][T10389] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1159.425624][T10389] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1159.425660][T10389] r10:00000000 r9:83395400 r8:00000000 r7:85562990 r6:83e7b9a8 r5:00001000 [ 1159.425697][T10389] r4:00000000 [ 1159.425720][T10389] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1159.425768][T10389] r10:00000000 r9:00000003 r8:83e7b980 r7:00008903 r6:81cdd76c r5:00000004 [ 1159.425780][T10389] r4:83e7b9a8 r3:828d2400 [ 1159.425788][T10389] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1159.425821][T10389] r10:84e83d40 r9:00000003 r8:83e7b980 r7:00000000 r6:00000000 r5:00008903 [ 1159.425834][T10389] r4:83e7b980 [ 1159.425853][T10389] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1159.425916][T10389] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1159.425962][T10389] r7:00000000 r6:00008903 r5:83e7b981 r4:00000000 [ 1159.425971][T10389] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1159.425995][T10389] Exception stack(0xeae7dfa8 to 0xeae7dff0) [ 1159.426016][T10389] dfa0: 00000000 00000000 00000003 00008903 00000000 00000000 [ 1159.426034][T10389] dfc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1159.426056][T10389] dfe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1159.426093][T10389] r10:00000036 r9:84e83d40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1159.426114][T10389] r4:00000000 [ 1159.460676][T10389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1160.422282][T10401] could not allocate digest TFM handle ghash [ 1161.867246][T10424] could not allocate digest TFM handle ghash [ 1162.868509][T10440] could not allocate digest TFM handle ghash [ 1163.079944][T10446] FAULT_INJECTION: forcing a failure. [ 1163.079944][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.082506][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.4.1529 Not tainted syzkaller #0 PREEMPT [ 1163.082636][T10446] Hardware name: ARM-Versatile Express [ 1163.082669][T10446] Call trace: [ 1163.082717][T10446] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1163.082852][T10446] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1163.082882][T10446] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1163.082943][T10446] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1163.083007][T10446] r7:20000080 r6:00000000 r5:840b0000 r4:82b53188 [ 1163.083025][T10446] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1163.083090][T10446] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1163.083159][T10446] r8:00000000 r7:20000080 r6:00000028 r5:00000000 r4:eb2ddf38 [ 1163.083180][T10446] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1163.083239][T10446] [<809f1860>] (should_fail_usercopy) from [<80928a44>] (_copy_from_iter+0x64/0x7c4) [ 1163.083299][T10446] [<809289e0>] (_copy_from_iter) from [<8175d34c>] (netlink_sendmsg+0x188/0x444) [ 1163.083384][T10446] r10:00000000 r9:00000000 r8:eb2ddf38 r7:8596a400 r6:00000028 r5:83824300 [ 1163.083406][T10446] r4:eb2ddf28 [ 1163.083424][T10446] [<8175d1c4>] (netlink_sendmsg) from [<81620d00>] (__sock_sendmsg+0x44/0x78) [ 1163.083496][T10446] r10:04004000 r9:00000000 r8:eb2dddd4 r7:00000000 r6:850cf1c0 r5:eb2ddf28 [ 1163.083519][T10446] r4:00000000 [ 1163.083560][T10446] [<81620cbc>] (__sock_sendmsg) from [<81621da0>] (____sys_sendmsg+0x238/0x2c4) [ 1163.083630][T10446] r7:00000000 r6:00000000 r5:850cf1c0 r4:eb2ddf28 [ 1163.083649][T10446] [<81621b68>] (____sys_sendmsg) from [<816221a0>] (___sys_sendmsg+0x9c/0xd0) [ 1163.083719][T10446] r10:00000128 r9:20000180 r8:04004000 r7:00000000 r6:850cf1c0 r5:eb2ddf28 [ 1163.083743][T10446] r4:00000000 [ 1163.083764][T10446] [<81622104>] (___sys_sendmsg) from [<81624308>] (__sys_sendmsg+0x8c/0xe0) [ 1163.083851][T10446] r9:840b0000 r8:86f07d00 r7:04004000 r6:20000180 r5:86f07d01 r4:00000004 [ 1163.083877][T10446] [<8162427c>] (__sys_sendmsg) from [<81624370>] (sys_sendmsg+0x14/0x18) [ 1163.083949][T10446] r8:8020029c r7:00000128 r6:0012f224 r5:00000000 r4:00000000 [ 1163.083969][T10446] [<8162435c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1163.084062][T10446] Exception stack(0xeb2ddfa8 to 0xeb2ddff0) [ 1163.084111][T10446] dfa0: 00000000 00000000 00000004 20000180 04004000 00000000 [ 1163.084147][T10446] dfc0: 00000000 00000000 0012f224 00000128 003562d8 00000000 00000001 76f670dc [ 1163.084176][T10446] dfe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1163.280203][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 1163.283385][ T28] audit: type=1400 audit(1163.200:914): avc: denied { read } for pid=10448 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1163.286601][ T28] audit: type=1400 audit(1163.210:915): avc: denied { ioctl } for pid=10431 comm="syz.3.1525" path="socket:[16258]" dev="sockfs" ino=16258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1163.289141][ T28] audit: type=1400 audit(1163.210:916): avc: denied { module_request } for pid=10431 comm="syz.3.1525" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1163.456308][ T28] audit: type=1400 audit(1163.380:917): avc: denied { sys_module } for pid=10431 comm="syz.3.1525" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1163.461248][ T28] audit: type=1400 audit(1163.380:918): avc: denied { module_request } for pid=10431 comm="syz.3.1525" kmod="wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1163.686108][ T28] audit: type=1400 audit(1163.610:919): avc: denied { read } for pid=10452 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1163.705311][ T28] audit: type=1400 audit(1163.630:920): avc: denied { read } for pid=10452 comm="syz.4.1531" name="nvme-fabrics" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1163.707412][ T28] audit: type=1400 audit(1163.630:921): avc: denied { open } for pid=10452 comm="syz.4.1531" path="/dev/nvme-fabrics" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1163.797371][ T28] audit: type=1400 audit(1163.720:922): avc: denied { read } for pid=10454 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1163.817460][ T28] audit: type=1400 audit(1163.740:923): avc: denied { read } for pid=10454 comm="syz.4.1532" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1164.246751][T10457] could not allocate digest TFM handle ghash [ 1164.376894][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.378114][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.905077][T10475] could not allocate digest TFM handle ghash [ 1169.106120][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1169.106441][ T28] audit: type=1400 audit(1169.030:957): avc: denied { read } for pid=10482 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1169.159966][T10483] FAULT_INJECTION: forcing a failure. [ 1169.159966][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.172662][T10483] CPU: 1 UID: 0 PID: 10483 Comm: syz.4.1540 Not tainted syzkaller #0 PREEMPT [ 1169.172826][T10483] Hardware name: ARM-Versatile Express [ 1169.172857][T10483] Call trace: [ 1169.172939][T10483] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1169.173055][T10483] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1169.173077][T10483] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1169.173135][T10483] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1169.173197][T10483] r7:ffffffff r6:00000000 r5:845c3100 r4:82b1ac48 [ 1169.173219][T10483] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1169.173286][T10483] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1169.173358][T10483] r8:845c3100 r7:ffffffff r6:83001240 r5:00000820 r4:00000017 [ 1169.173379][T10483] [<80567638>] (should_failslab) from [<8054645c>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1169.173437][T10483] [<805463b0>] (__kmalloc_node_track_caller_noprof) from [<804d35a4>] (kmemdup_noprof+0x28/0x44) [ 1169.173508][T10483] r10:845c3100 r9:8694fc04 r8:ebb21d5c r7:8494a000 r6:85bbff18 r5:ebb21d54 [ 1169.173533][T10483] r4:00000017 [ 1169.173553][T10483] [<804d357c>] (kmemdup_noprof) from [<80810644>] (sidtab_sid2str_get+0x54/0xa4) [ 1169.173624][T10483] r7:8494a000 r6:ebb21d5c r5:ebb21d54 r4:849440c0 [ 1169.173644][T10483] [<808105f0>] (sidtab_sid2str_get) from [<808183f4>] (sidtab_entry_to_string+0x34/0x94) [ 1169.173712][T10483] r7:8494a000 r6:849440c0 r5:ebb21d54 r4:0000005f [ 1169.173731][T10483] [<808183c0>] (sidtab_entry_to_string) from [<8081856c>] (security_sid_to_context_core+0x118/0x17c) [ 1169.173799][T10483] r9:ebb21e9c r8:8494a000 r7:8694fc04 r6:ebb21d5c r5:ebb21d54 r4:0000005f [ 1169.173821][T10483] [<80818454>] (security_sid_to_context_core) from [<8081b48c>] (security_sid_to_context+0x1c/0x24) [ 1169.173897][T10483] r8:00000000 r7:807fb7b4 r6:845c3100 r5:845e9b98 r4:ebb21de8 [ 1169.173923][T10483] [<8081b470>] (security_sid_to_context) from [<807fb800>] (avc_audit_post_callback+0x4c/0x318) [ 1169.173983][T10483] [<807fb7b4>] (avc_audit_post_callback) from [<80823660>] (common_lsm_audit+0x108/0x14c) [ 1169.174060][T10483] r10:845c3100 r9:ebb21e9c r8:00000000 r7:807fb7b4 r6:ebb21e9c r5:845e9b98 [ 1169.174083][T10483] r4:845c38e8 [ 1169.174102][T10483] [<80823558>] (common_lsm_audit) from [<807fbce4>] (slow_avc_audit+0xbc/0x114) [ 1169.174173][T10483] r8:00000008 r7:00000000 r6:00000068 r5:0000005f r4:00000068 [ 1169.174193][T10483] [<807fbc28>] (slow_avc_audit) from [<807fc738>] (avc_has_perm+0xe4/0xf4) [ 1169.174254][T10483] r5:0000005f r4:00010000 [ 1169.174276][T10483] [<807fc654>] (avc_has_perm) from [<807fcc94>] (inode_has_perm+0x60/0x74) [ 1169.174349][T10483] r9:8080520c r8:00000000 r7:00000000 r6:8586dc00 r5:86070408 r4:00010000 [ 1169.174371][T10483] [<807fcc34>] (inode_has_perm) from [<808052fc>] (selinux_mount+0xf0/0x128) [ 1169.174430][T10483] r4:86539680 [ 1169.174450][T10483] [<8080520c>] (selinux_mount) from [<807e7858>] (security_sb_mount+0xd8/0x238) [ 1169.174517][T10483] r5:ebb21f6c r4:00000000 [ 1169.174537][T10483] [<807e7780>] (security_sb_mount) from [<805d4748>] (path_mount+0x78/0xb18) [ 1169.174612][T10483] r9:00000000 r8:8586dc00 r7:00000000 r6:ebb21f6c r5:00000000 r4:00000000 [ 1169.174635][T10483] [<805d46d0>] (path_mount) from [<805d59bc>] (sys_mount+0x1dc/0x260) [ 1169.174701][T10483] r10:00000015 r9:845c3100 r8:00000000 r7:00000000 r6:8586dc00 r5:00000000 [ 1169.174739][T10483] r4:00000000 [ 1169.174798][T10483] [<805d57e0>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1169.174853][T10483] Exception stack(0xebb21fa8 to 0xebb21ff0) [ 1169.174904][T10483] 1fa0: 00000000 00000000 00000000 20000080 200000c0 00000000 [ 1169.174945][T10483] 1fc0: 00000000 00000000 0012f224 00000015 003562d8 00000000 00000001 76f670dc [ 1169.174976][T10483] 1fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1169.175015][T10483] r10:00000015 r9:845c3100 r8:8020029c r7:00000015 r6:0012f224 r5:00000000 [ 1169.175037][T10483] r4:00000000 [ 1169.222859][ T28] audit: type=1400 audit(1169.080:958): avc: denied { mounton } for pid=10482 comm="syz.4.1540" path="/295/file0" dev="tmpfs" ino=1585 ssid=95 tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1169.227724][ T28] audit: type=1400 audit(1169.150:959): avc: denied { mount } for pid=10482 comm="syz.4.1540" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1169.267053][ T28] audit: type=1400 audit(1169.190:960): avc: denied { mounton } for pid=10482 comm="syz.4.1540" path="/295/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1169.371369][ T28] audit: type=1400 audit(1169.290:961): avc: denied { mounton } for pid=10482 comm="syz.4.1540" path="/295/file0/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1169.406510][ T28] audit: type=1400 audit(1169.330:962): avc: denied { mount } for pid=10482 comm="syz.4.1540" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.167235][ T28] audit: type=1400 audit(1170.090:963): avc: denied { unmount } for pid=8460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.169123][ T28] audit: type=1400 audit(1170.090:964): avc: denied { unmount } for pid=8460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.293435][ T28] audit: type=1400 audit(1170.220:965): avc: denied { unmount } for pid=8460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.363177][ T28] audit: type=1400 audit(1170.270:966): avc: denied { unmount } for pid=8460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.882841][T10485] FAULT_INJECTION: forcing a failure. [ 1170.882841][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.888351][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.4.1541 Not tainted syzkaller #0 PREEMPT [ 1170.888597][T10485] Hardware name: ARM-Versatile Express [ 1170.888630][T10485] Call trace: [ 1170.888933][T10485] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1170.889037][T10485] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1170.889664][T10485] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1170.889929][T10485] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1170.890184][T10485] r7:845c3100 r6:00000000 r5:845c3100 r4:82b1ac48 [ 1170.890222][T10485] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1170.891140][T10485] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1170.891215][T10485] r8:00000cc0 r7:845c3100 r6:81632c58 r5:00000cc0 r4:830e5c00 [ 1170.891232][T10485] [<80567638>] (should_failslab) from [<80545884>] (kmem_cache_alloc_node_noprof+0x60/0x3ec) [ 1170.891285][T10485] [<80545824>] (kmem_cache_alloc_node_noprof) from [<81632c58>] (__alloc_skb+0x74/0x2ec) [ 1170.891353][T10485] r10:00000000 r9:81632e48 r8:00000cc0 r7:00000000 r6:830e5c00 r5:ffffffff [ 1170.891371][T10485] r4:dddd0808 [ 1170.891387][T10485] [<81632be4>] (__alloc_skb) from [<8175cb38>] (netlink_alloc_large_skb+0x8c/0xa8) [ 1170.891454][T10485] r9:00000000 r8:00000000 r7:869ff400 r6:00000014 r5:850cd940 r4:00000140 [ 1170.891469][T10485] [<8175caac>] (netlink_alloc_large_skb) from [<8175d2f4>] (netlink_sendmsg+0x130/0x444) [ 1170.891522][T10485] r5:850cd940 r4:ebc45f28 [ 1170.891558][T10485] [<8175d1c4>] (netlink_sendmsg) from [<81620d00>] (__sock_sendmsg+0x44/0x78) [ 1170.891638][T10485] r10:00004000 r9:00000000 r8:ebc45dd4 r7:00000000 r6:850cd940 r5:ebc45f28 [ 1170.891660][T10485] r4:00000000 [ 1170.891676][T10485] [<81620cbc>] (__sock_sendmsg) from [<81621da0>] (____sys_sendmsg+0x238/0x2c4) [ 1170.891733][T10485] r7:00000000 r6:00000000 r5:850cd940 r4:ebc45f28 [ 1170.891749][T10485] [<81621b68>] (____sys_sendmsg) from [<816221a0>] (___sys_sendmsg+0x9c/0xd0) [ 1170.891813][T10485] r10:00000128 r9:20002e40 r8:00004000 r7:00000000 r6:850cd940 r5:ebc45f28 [ 1170.891832][T10485] r4:00000000 [ 1170.891847][T10485] [<81622104>] (___sys_sendmsg) from [<81624308>] (__sys_sendmsg+0x8c/0xe0) [ 1170.891926][T10485] r9:845c3100 r8:86f09800 r7:00004000 r6:20002e40 r5:86f09801 r4:00000003 [ 1170.891945][T10485] [<8162427c>] (__sys_sendmsg) from [<81624370>] (sys_sendmsg+0x14/0x18) [ 1170.892009][T10485] r8:8020029c r7:00000128 r6:0012f224 r5:00000000 r4:00000000 [ 1170.892026][T10485] [<8162435c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1170.892071][T10485] Exception stack(0xebc45fa8 to 0xebc45ff0) [ 1170.892109][T10485] 5fa0: 00000000 00000000 00000003 20002e40 00004000 00000000 [ 1170.892142][T10485] 5fc0: 00000000 00000000 0012f224 00000128 003562d8 00000000 00000001 76f670dc [ 1170.892169][T10485] 5fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1172.042117][T10491] could not allocate digest TFM handle ghash [ 1172.555325][T10502] FAULT_INJECTION: forcing a failure. [ 1172.555325][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.555840][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.4.1548 Not tainted syzkaller #0 PREEMPT [ 1172.555931][T10502] Hardware name: ARM-Versatile Express [ 1172.555957][T10502] Call trace: [ 1172.556052][T10502] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1172.556159][T10502] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1172.556259][T10502] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1172.556327][T10502] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1172.556388][T10502] r7:00000000 r6:00000000 r5:84181880 r4:82b53188 [ 1172.556406][T10502] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1172.556466][T10502] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1172.556534][T10502] r8:76f66f08 r7:00000000 r6:00000000 r5:ebc45f68 r4:00000002 [ 1172.556554][T10502] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1172.556614][T10502] [<809f1860>] (should_fail_usercopy) from [<805defa8>] (simple_read_from_buffer+0x80/0x140) [ 1172.556679][T10502] [<805def28>] (simple_read_from_buffer) from [<80662f4c>] (proc_fail_nth_read+0xb8/0x108) [ 1172.556769][T10502] r10:80662e94 r9:00000001 r8:00000002 r7:ebc45f68 r6:0000000f r5:76f66f08 [ 1172.556798][T10502] r4:84181880 r3:ebc45e9f [ 1172.556818][T10502] [<80662e94>] (proc_fail_nth_read) from [<8059ed2c>] (vfs_read+0xc0/0x328) [ 1172.556886][T10502] r8:84181880 r7:ebc45f68 r6:76f66f08 r5:861bf880 r4:0000000f [ 1172.556923][T10502] [<8059ec6c>] (vfs_read) from [<8059f978>] (ksys_read+0x74/0xec) [ 1172.557008][T10502] r10:00000003 r9:84181880 r8:8020029c r7:00000000 r6:00000000 r5:861bf880 [ 1172.557028][T10502] r4:861bf883 [ 1172.557043][T10502] [<8059f904>] (ksys_read) from [<8059fa00>] (sys_read+0x10/0x14) [ 1172.557100][T10502] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1172.557115][T10502] [<8059f9f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1172.557162][T10502] Exception stack(0xebc45fa8 to 0xebc45ff0) [ 1172.557198][T10502] 5fa0: 00000000 00000000 00000005 76f66f08 0000000f 00000000 [ 1172.557247][T10502] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f670dc [ 1172.557279][T10502] 5fe0: 76f66e58 76f66e44 0010ba44 00112628 [ 1172.935664][T10504] could not allocate digest TFM handle ghash [ 1174.134425][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1174.134726][ T28] audit: type=1400 audit(1174.060:994): avc: denied { read } for pid=10510 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.159008][T10511] FAULT_INJECTION: forcing a failure. [ 1174.159008][T10511] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.161365][T10511] CPU: 0 UID: 0 PID: 10511 Comm: syz.4.1551 Not tainted syzkaller #0 PREEMPT [ 1174.161491][T10511] Hardware name: ARM-Versatile Express [ 1174.161517][T10511] Call trace: [ 1174.161593][T10511] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1174.161711][T10511] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1174.161730][T10511] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1174.161778][T10511] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1174.161834][T10511] r7:ffffffff r6:00000000 r5:845c0000 r4:82b1ac48 [ 1174.161863][T10511] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1174.161918][T10511] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1174.162002][T10511] r8:845c0000 r7:ffffffff r6:83001240 r5:00000820 r4:0000001b [ 1174.162021][T10511] [<80567638>] (should_failslab) from [<8054645c>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1174.162073][T10511] [<805463b0>] (__kmalloc_node_track_caller_noprof) from [<804d35a4>] (kmemdup_noprof+0x28/0x44) [ 1174.162134][T10511] r10:00000008 r9:8694fc04 r8:dfafdc10 r7:8494a000 r6:858c1558 r5:dfafdc08 [ 1174.162155][T10511] r4:0000001b [ 1174.162175][T10511] [<804d357c>] (kmemdup_noprof) from [<80810644>] (sidtab_sid2str_get+0x54/0xa4) [ 1174.162239][T10511] r7:8494a000 r6:dfafdc10 r5:dfafdc08 r4:8494f180 [ 1174.162259][T10511] [<808105f0>] (sidtab_sid2str_get) from [<808183f4>] (sidtab_entry_to_string+0x34/0x94) [ 1174.162323][T10511] r7:8494a000 r6:8494f180 r5:dfafdc08 r4:00000022 [ 1174.162343][T10511] [<808183c0>] (sidtab_entry_to_string) from [<8081856c>] (security_sid_to_context_core+0x118/0x17c) [ 1174.162412][T10511] r9:00000004 r8:8494a000 r7:8694fc04 r6:dfafdc10 r5:dfafdc08 r4:00000022 [ 1174.162432][T10511] [<80818454>] (security_sid_to_context_core) from [<8081b48c>] (security_sid_to_context+0x1c/0x24) [ 1174.162496][T10511] r8:00000000 r7:807fb7b4 r6:845c0000 r5:8663c770 r4:dfafdc98 [ 1174.162515][T10511] [<8081b470>] (security_sid_to_context) from [<807fb834>] (avc_audit_post_callback+0x80/0x318) [ 1174.162571][T10511] [<807fb7b4>] (avc_audit_post_callback) from [<80823660>] (common_lsm_audit+0x108/0x14c) [ 1174.162644][T10511] r10:00000008 r9:00000004 r8:00000000 r7:807fb7b4 r6:dfafdce4 r5:8663c770 [ 1174.162665][T10511] r4:845c07e8 [ 1174.162682][T10511] [<80823558>] (common_lsm_audit) from [<807fbce4>] (slow_avc_audit+0xbc/0x114) [ 1174.162751][T10511] r8:841e65ac r7:845c0000 r6:dfafdce4 r5:0000005f r4:00000022 [ 1174.162772][T10511] [<807fbc28>] (slow_avc_audit) from [<808023cc>] (audit_inode_permission+0x90/0xb4) [ 1174.162829][T10511] r5:00000004 r4:00000004 [ 1174.162854][T10511] [<8080233c>] (audit_inode_permission) from [<80809808>] (selinux_inode_permission+0x20c/0x414) [ 1174.162916][T10511] r7:841a5c00 r6:84d5de88 r5:00000000 r4:00000022 [ 1174.162936][T10511] [<808095fc>] (selinux_inode_permission) from [<807ea654>] (security_inode_permission+0x60/0x1b8) [ 1174.163011][T10511] r10:834d96e8 r9:86f09800 r8:dfafde58 r7:00000002 r6:82b21e14 r5:841a5c00 [ 1174.163034][T10511] r4:00000022 [ 1174.163052][T10511] [<807ea5f4>] (security_inode_permission) from [<805af3f0>] (inode_permission+0xb8/0x16c) [ 1174.163120][T10511] r5:00000022 r4:841a5c00 [ 1174.163137][T10511] [<805af338>] (inode_permission) from [<805af750>] (may_open+0xf4/0x180) [ 1174.163210][T10511] r9:86f09800 r8:dfafde58 r7:82b21e14 r6:00000000 r5:841a5c00 r4:00000001 [ 1174.163230][T10511] [<805af65c>] (may_open) from [<805b5f90>] (path_openat+0x47c/0x1260) [ 1174.163293][T10511] r7:dfafdf20 r5:82b21e14 r4:00000201 [ 1174.163311][T10511] [<805b5b14>] (path_openat) from [<805b6e2c>] (do_file_open+0xb8/0x150) [ 1174.163376][T10511] r10:00000142 r9:845c0000 r8:00000001 r7:ffffff9c r6:dfafdf20 r5:845c0000 [ 1174.163399][T10511] r4:831ecd80 [ 1174.163415][T10511] [<805b6d74>] (do_file_open) from [<8059bb74>] (do_sys_openat2+0x8c/0xf0) [ 1174.163481][T10511] r8:8020029c r7:20000840 r6:ffffff9c r5:831ecd80 r4:00000004 [ 1174.163501][T10511] [<8059bae8>] (do_sys_openat2) from [<8059c08c>] (sys_openat+0x88/0xd8) [ 1174.163563][T10511] r7:00000142 r6:0012f224 r5:20000840 r4:ffffff9c [ 1174.163602][T10511] [<8059c004>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1174.163662][T10511] Exception stack(0xdfafdfa8 to 0xdfafdff0) [ 1174.163704][T10511] dfa0: 00000000 00000000 ffffff9c 20000840 00000201 00000000 [ 1174.163742][T10511] dfc0: 00000000 00000000 0012f224 00000142 003562d8 00000000 003d0f00 76f670dc [ 1174.163773][T10511] dfe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1174.163802][T10511] r5:00000000 r4:00000000 [ 1174.205686][ T28] audit: type=1400 audit(1174.080:995): avc: denied { write } for pid=10510 comm="syz.4.1551" name="renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tsid=34 tclass=chr_file permissive=1 [ 1174.206052][ T28] audit: type=1400 audit(1174.130:996): avc: denied { open } for pid=10510 comm="syz.4.1551" path="/dev/dri/renderD128" dev="devtmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.269690][ T28] audit: type=1400 audit(1174.190:997): avc: denied { read } for pid=10512 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.285938][ T28] audit: type=1400 audit(1174.210:998): avc: denied { create } for pid=10512 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1174.767063][ T28] audit: type=1400 audit(1174.690:999): avc: denied { read } for pid=10514 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.813850][ T28] audit: type=1400 audit(1174.740:1000): avc: denied { write } for pid=10512 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1174.817335][ T28] audit: type=1400 audit(1174.740:1001): avc: denied { module_request } for pid=10512 comm="syz.4.1552" kmod="nfnetlink-subsys-13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1174.862554][ T28] audit: type=1400 audit(1174.770:1002): avc: denied { create } for pid=10514 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1174.910152][ T28] audit: type=1400 audit(1174.830:1003): avc: denied { read } for pid=10512 comm="syz.4.1552" name="rtc0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.933361][T10516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10516 comm=syz.4.1552 [ 1177.145877][T10520] could not allocate digest TFM handle ghash [ 1177.458383][T10527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10527 comm=syz.4.1556 [ 1178.418840][T10532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10532 comm=syz.4.1558 [ 1178.988032][T10536] could not allocate digest TFM handle ghash [ 1179.197831][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1179.198638][ T28] audit: type=1400 audit(1179.120:1031): avc: denied { read } for pid=10541 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.217080][ T28] audit: type=1400 audit(1179.140:1032): avc: denied { read append } for pid=10541 comm="syz.3.1561" name="ttyS3" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.218936][ T28] audit: type=1400 audit(1179.140:1033): avc: denied { open } for pid=10541 comm="syz.3.1561" path="/dev/ttyS3" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.240094][ T28] audit: type=1400 audit(1179.160:1034): avc: denied { read } for pid=10541 comm="syz.3.1561" dev="nsfs" ino=4026533125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1179.243106][ T28] audit: type=1400 audit(1179.170:1035): avc: denied { open } for pid=10541 comm="syz.3.1561" path="net:[4026533125]" dev="nsfs" ino=4026533125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1179.270251][ T28] audit: type=1400 audit(1179.190:1036): avc: denied { read write } for pid=10541 comm="syz.3.1561" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.274470][ T28] audit: type=1400 audit(1179.200:1037): avc: denied { open } for pid=10541 comm="syz.3.1561" path="/dev/raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.358193][ T28] audit: type=1400 audit(1179.280:1038): avc: denied { read } for pid=10543 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.390568][ T28] audit: type=1400 audit(1179.310:1039): avc: denied { create } for pid=10543 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1179.487321][ T28] audit: type=1400 audit(1179.410:1040): avc: denied { read } for pid=10545 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1180.215603][T10556] FAULT_INJECTION: forcing a failure. [ 1180.215603][T10556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.220381][T10556] CPU: 0 UID: 0 PID: 10556 Comm: syz.4.1568 Not tainted syzkaller #0 PREEMPT [ 1180.220472][T10556] Hardware name: ARM-Versatile Express [ 1180.220486][T10556] Call trace: [ 1180.220509][T10556] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1180.220571][T10556] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1180.220581][T10556] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1180.220608][T10556] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1180.220639][T10556] r7:00000000 r6:00000000 r5:845b3d40 r4:82b53188 [ 1180.220648][T10556] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1180.220678][T10556] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1180.220711][T10556] r8:00000000 r7:00000000 r6:000000b4 r5:20000040 r4:831ed3c0 [ 1180.220720][T10556] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1180.220747][T10556] [<809f1860>] (should_fail_usercopy) from [<809f7800>] (strncpy_from_user+0x20/0x1b0) [ 1180.220773][T10556] [<809f77e0>] (strncpy_from_user) from [<805ae910>] (do_getname+0x4c/0x14c) [ 1180.220810][T10556] r10:831ed3cc r9:845b3d40 r8:00000000 r7:00000000 r6:20000040 r5:8253e8c0 [ 1180.220820][T10556] r4:831ed3c0 [ 1180.220828][T10556] [<805ae8c4>] (do_getname) from [<805b7468>] (sys_mknod+0x20/0x50) [ 1180.220869][T10556] r10:0000000e r9:845b3d40 r8:8020029c r7:0000000e r6:00000709 r5:00006000 [ 1180.220881][T10556] r4:00000000 r3:00000000 [ 1180.220890][T10556] [<805b7448>] (sys_mknod) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1180.220914][T10556] Exception stack(0xdfc71fa8 to 0xdfc71ff0) [ 1180.220935][T10556] 1fa0: 00000000 00000000 20000040 00006000 00000709 00000000 [ 1180.220953][T10556] 1fc0: 00000000 00000000 0012f224 0000000e 003562d8 00000000 00000001 76f670dc [ 1180.221017][T10556] 1fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1180.221037][T10556] r7:0000000e r6:0012f224 r5:00000000 r4:00000000 [ 1181.910748][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.914826][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.937465][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.939263][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.951323][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.954104][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.980884][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.985681][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.584271][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.585238][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.309953][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 1184.310535][ T28] audit: type=1400 audit(1184.230:1151): avc: denied { read } for pid=10622 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1184.353775][ T28] audit: type=1400 audit(1184.270:1152): avc: denied { read write } for pid=10622 comm="syz.3.1589" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1184.364222][ T28] audit: type=1400 audit(1184.290:1153): avc: denied { write } for pid=10599 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1184.367646][ T28] audit: type=1400 audit(1184.290:1154): avc: denied { read } for pid=10599 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1184.375201][ T28] audit: type=1400 audit(1184.300:1155): avc: denied { module_request } for pid=10599 comm="syz.4.1583" kmod="net-pf-16-proto-16-family-TIPC" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1184.379186][ T28] audit: type=1400 audit(1184.300:1156): avc: denied { read write open } for pid=10622 comm="syz.3.1589" path="/dev/raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1184.392219][ T28] audit: type=1400 audit(1184.310:1157): avc: denied { ioctl } for pid=10622 comm="syz.3.1589" path="/dev/raw-gadget" dev="devtmpfs" ino=694 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1184.396777][ T28] audit: type=1400 audit(1184.320:1158): avc: denied { ioctl } for pid=10622 comm="syz.3.1589" path="/dev/raw-gadget" dev="devtmpfs" ino=694 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1184.404122][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.405864][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.427274][ T28] audit: type=1400 audit(1184.350:1159): avc: denied { create } for pid=10622 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1184.437914][ T28] audit: type=1400 audit(1184.360:1160): avc: denied { create } for pid=10622 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1185.205030][T10636] FAULT_INJECTION: forcing a failure. [ 1185.205030][T10636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.205487][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.3.1592 Not tainted syzkaller #0 PREEMPT [ 1185.205576][T10636] Hardware name: ARM-Versatile Express [ 1185.205601][T10636] Call trace: [ 1185.205643][T10636] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1185.205834][T10636] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1185.205875][T10636] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1185.206001][T10636] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1185.206111][T10636] r7:20000a80 r6:00000000 r5:84096e40 r4:82b53188 [ 1185.206173][T10636] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1185.206300][T10636] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1185.206375][T10636] r8:00000014 r7:20000a80 r6:e03ade30 r5:00000000 r4:e03adf28 [ 1185.206428][T10636] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1185.206487][T10636] [<809f1860>] (should_fail_usercopy) from [<81621f74>] (copy_msghdr_from_user+0x50/0x1e0) [ 1185.206597][T10636] [<81621f24>] (copy_msghdr_from_user) from [<8162217c>] (___sys_sendmsg+0x78/0xd0) [ 1185.206702][T10636] r8:00000014 r7:00000000 r6:850d6040 r5:e03adf28 r4:e03ade74 [ 1185.206737][T10636] [<81622104>] (___sys_sendmsg) from [<81624308>] (__sys_sendmsg+0x8c/0xe0) [ 1185.206924][T10636] r9:84096e40 r8:86f08780 r7:00000014 r6:20000a80 r5:86f08781 r4:00000003 [ 1185.207022][T10636] [<8162427c>] (__sys_sendmsg) from [<81624370>] (sys_sendmsg+0x14/0x18) [ 1185.207138][T10636] r8:8020029c r7:00000128 r6:0012f224 r5:00000000 r4:00000000 [ 1185.207182][T10636] [<8162435c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1185.207363][T10636] Exception stack(0xe03adfa8 to 0xe03adff0) [ 1185.207433][T10636] dfa0: 00000000 00000000 00000003 20000a80 00000014 00000000 [ 1185.207475][T10636] dfc0: 00000000 00000000 0012f224 00000128 003562d8 00000000 00000001 76fe70dc [ 1185.207550][T10636] dfe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1185.433234][T10640] kernel read not supported for file /policy (pid: 10640 comm: syz.3.1594) [ 1187.617640][T10664] could not allocate digest TFM handle ghash [ 1187.877326][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.883149][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.590323][T10680] could not allocate digest TFM handle ghash [ 1189.316547][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 1189.320748][ T28] audit: type=1400 audit(1189.240:1266): avc: denied { read write } for pid=10691 comm="syz.4.1611" name="udmabuf" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.328132][ T28] audit: type=1400 audit(1189.250:1267): avc: denied { read write open } for pid=10691 comm="syz.4.1611" path="/dev/udmabuf" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.340724][ T28] audit: type=1400 audit(1189.260:1268): avc: denied { read write } for pid=10691 comm="syz.4.1611" name="uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.346724][ T28] audit: type=1400 audit(1189.260:1269): avc: denied { open } for pid=10691 comm="syz.4.1611" path="/dev/uinput" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1189.357274][ T28] audit: type=1400 audit(1189.280:1270): avc: denied { read } for pid=10691 comm="syz.4.1611" dev="nsfs" ino=4026532660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1189.363626][ T28] audit: type=1400 audit(1189.290:1271): avc: denied { open } for pid=10691 comm="syz.4.1611" path="net:[4026532660]" dev="nsfs" ino=4026532660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1189.374074][ T28] audit: type=1400 audit(1189.300:1272): avc: denied { create } for pid=10691 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1189.387762][ T28] audit: type=1400 audit(1189.310:1273): avc: denied { allowed } for pid=10691 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1189.419957][ T28] audit: type=1400 audit(1189.340:1274): avc: denied { sqpoll } for pid=10691 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1189.426064][ T28] audit: type=1400 audit(1189.350:1275): avc: denied { create } for pid=10691 comm="syz.4.1611" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1191.178795][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.180631][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.204629][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.206450][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.222400][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.225100][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.248210][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.250055][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.417205][T10722] FAULT_INJECTION: forcing a failure. [ 1191.417205][T10722] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.432951][T10722] CPU: 1 UID: 0 PID: 10722 Comm: syz.4.1618 Not tainted syzkaller #0 PREEMPT [ 1191.433110][T10722] Hardware name: ARM-Versatile Express [ 1191.433139][T10722] Call trace: [ 1191.433184][T10722] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1191.433297][T10722] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1191.433318][T10722] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1191.433383][T10722] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1191.433451][T10722] r7:83314980 r6:00000000 r5:83314980 r4:82b1ac48 [ 1191.433470][T10722] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1191.433533][T10722] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1191.433609][T10722] r8:00000000 r7:83314980 r6:83001240 r5:00000d40 r4:00000021 [ 1191.433630][T10722] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1191.433688][T10722] [<80545fe8>] (__kmalloc_noprof) from [<80832134>] (tomoyo_encode2+0x64/0xec) [ 1191.433760][T10722] r10:00000fff r9:830c4000 r8:00000000 r7:834d1660 r6:861c0328 r5:8651affc [ 1191.433785][T10722] r4:8651afe6 [ 1191.433803][T10722] [<808320d0>] (tomoyo_encode2) from [<808321e0>] (tomoyo_encode+0x24/0x30) [ 1191.433869][T10722] r9:830c4000 r8:00000000 r7:834d1660 r6:861c0328 r5:00001000 r4:8651afe7 [ 1191.433889][T10722] [<808321bc>] (tomoyo_encode) from [<8083226c>] (tomoyo_realpath_from_path+0x80/0x16c) [ 1191.433948][T10722] r5:00001000 r4:8651a000 [ 1191.433965][T10722] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1191.434031][T10722] r10:00000000 r9:00000003 r8:861c0300 r7:c03064b7 r6:81cdd76c r5:00000004 [ 1191.434056][T10722] r4:861c0328 r3:828d2400 [ 1191.434075][T10722] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1191.434144][T10722] r10:83314980 r9:00000003 r8:861c0300 r7:20000180 r6:20000180 r5:c03064b7 [ 1191.434167][T10722] r4:861c0300 [ 1191.434184][T10722] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1191.434241][T10722] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1191.434306][T10722] r7:20000180 r6:c03064b7 r5:861c0301 r4:00000000 [ 1191.434326][T10722] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1191.434388][T10722] Exception stack(0xea715fa8 to 0xea715ff0) [ 1191.434431][T10722] 5fa0: 00000000 00000000 00000003 c03064b7 20000180 00000000 [ 1191.434468][T10722] 5fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1191.434499][T10722] 5fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1191.434537][T10722] r10:00000036 r9:83314980 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1191.434559][T10722] r4:00000000 [ 1191.459951][T10722] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1193.925345][T10775] FAULT_INJECTION: forcing a failure. [ 1193.925345][T10775] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.933072][T10775] CPU: 1 UID: 0 PID: 10775 Comm: syz.4.1633 Tainted: G L syzkaller #0 PREEMPT [ 1193.933216][T10775] Tainted: [L]=SOFTLOCKUP [ 1193.933234][T10775] Hardware name: ARM-Versatile Express [ 1193.933248][T10775] Call trace: [ 1193.933270][T10775] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1193.933330][T10775] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1193.933339][T10775] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1193.933366][T10775] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1193.933396][T10775] r7:84083d40 r6:00000000 r5:84083d40 r4:82b1ac48 [ 1193.933405][T10775] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1193.933434][T10775] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1193.933472][T10775] r8:00000000 r7:84083d40 r6:83001240 r5:00000d40 r4:00000025 [ 1193.933480][T10775] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1193.933508][T10775] [<80545fe8>] (__kmalloc_noprof) from [<80832134>] (tomoyo_encode2+0x64/0xec) [ 1193.933541][T10775] r10:00000fff r9:830c4000 r8:00000000 r7:834274c8 r6:861bfa28 r5:862baffc [ 1193.933551][T10775] r4:862bafe2 [ 1193.933559][T10775] [<808320d0>] (tomoyo_encode2) from [<808321e0>] (tomoyo_encode+0x24/0x30) [ 1193.933589][T10775] r9:830c4000 r8:00000000 r7:834274c8 r6:861bfa28 r5:00001000 r4:862bafe3 [ 1193.933598][T10775] [<808321bc>] (tomoyo_encode) from [<8083226c>] (tomoyo_realpath_from_path+0x80/0x16c) [ 1193.933623][T10775] r5:00001000 r4:862ba000 [ 1193.933631][T10775] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1193.933662][T10775] r10:00000000 r9:00000003 r8:861bfa00 r7:80045500 r6:81cdd76c r5:00000004 [ 1193.933673][T10775] r4:861bfa28 r3:828d2400 [ 1193.933681][T10775] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1193.933713][T10775] r10:84083d40 r9:00000003 r8:861bfa00 r7:20000080 r6:20000080 r5:80045500 [ 1193.933723][T10775] r4:861bfa00 [ 1193.933730][T10775] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1193.933757][T10775] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1193.933787][T10775] r7:20000080 r6:80045500 r5:861bfa01 r4:00000000 [ 1193.933822][T10775] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1193.933850][T10775] Exception stack(0xdfa21fa8 to 0xdfa21ff0) [ 1193.933878][T10775] 1fa0: 00000000 00000000 00000003 80045500 20000080 00000000 [ 1193.933896][T10775] 1fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1193.933909][T10775] 1fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1193.933926][T10775] r10:00000036 r9:84083d40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1193.933937][T10775] r4:00000000 [ 1193.962714][T10775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1194.323148][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 1194.323360][ T28] audit: type=1400 audit(1194.250:1349): avc: denied { read } for pid=10781 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.410498][ T28] audit: type=1400 audit(1194.330:1350): avc: denied { read } for pid=10783 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.461250][ T28] audit: type=1400 audit(1194.380:1351): avc: denied { mounton } for pid=10783 comm="syz.4.1637" path="/347/file1" dev="tmpfs" ino=1860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1194.481408][ T28] audit: type=1400 audit(1194.400:1352): avc: denied { mount } for pid=10783 comm="syz.4.1637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1194.534916][ T28] audit: type=1400 audit(1194.460:1353): avc: denied { unmount } for pid=8460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1194.643904][ T28] audit: type=1400 audit(1194.570:1354): avc: denied { read } for pid=10785 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.675939][ T28] audit: type=1400 audit(1194.600:1355): avc: denied { allowed } for pid=10785 comm="syz.4.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1194.692476][ T28] audit: type=1400 audit(1194.610:1356): avc: denied { create } for pid=10785 comm="syz.4.1638" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1194.699853][ T28] audit: type=1400 audit(1194.620:1357): avc: denied { map } for pid=10785 comm="syz.4.1638" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1194.700419][ T28] audit: type=1400 audit(1194.620:1358): avc: denied { read write } for pid=10785 comm="syz.4.1638" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1195.900668][T10797] FAULT_INJECTION: forcing a failure. [ 1195.900668][T10797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.907537][T10797] CPU: 0 UID: 0 PID: 10797 Comm: syz.3.1643 Tainted: G L syzkaller #0 PREEMPT [ 1195.907670][T10797] Tainted: [L]=SOFTLOCKUP [ 1195.907690][T10797] Hardware name: ARM-Versatile Express [ 1195.907712][T10797] Call trace: [ 1195.907751][T10797] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1195.907864][T10797] r7:60000113 r6:60000113 r5:82332444 r4:00000000 [ 1195.907885][T10797] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1195.907940][T10797] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1195.908000][T10797] r7:00000010 r6:00000000 r5:83314980 r4:82b53188 [ 1195.908020][T10797] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1195.908083][T10797] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1195.908144][T10797] r8:8020029c r7:00000010 r6:20000200 r5:ea811ef4 r4:00000010 [ 1195.908162][T10797] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1195.908211][T10797] [<809f1860>] (should_fail_usercopy) from [<81621e60>] (move_addr_to_kernel+0x34/0xf8) [ 1195.908307][T10797] [<81621e2c>] (move_addr_to_kernel) from [<81623838>] (__sys_connect+0x5c/0xc8) [ 1195.908375][T10797] r7:20000200 r6:00000010 r5:861bfc01 r4:00000004 [ 1195.908392][T10797] [<816237dc>] (__sys_connect) from [<816238b4>] (sys_connect+0x10/0x14) [ 1195.908486][T10797] r7:0000011b r6:0012f224 r5:00000000 r4:00000000 [ 1195.908504][T10797] [<816238a4>] (sys_connect) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1195.908553][T10797] Exception stack(0xea811fa8 to 0xea811ff0) [ 1195.908590][T10797] 1fa0: 00000000 00000000 00000004 20000200 00000010 00000000 [ 1195.908628][T10797] 1fc0: 00000000 00000000 0012f224 0000011b 003562d8 00000000 00000001 76fe70dc [ 1195.908655][T10797] 1fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1198.336213][T10824] FAULT_INJECTION: forcing a failure. [ 1198.336213][T10824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.338166][T10824] CPU: 1 UID: 0 PID: 10824 Comm: syz.3.1651 Tainted: G L syzkaller #0 PREEMPT [ 1198.338290][T10824] Tainted: [L]=SOFTLOCKUP [ 1198.338312][T10824] Hardware name: ARM-Versatile Express [ 1198.338348][T10824] Call trace: [ 1198.338393][T10824] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1198.338512][T10824] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1198.338533][T10824] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1198.338589][T10824] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1198.338654][T10824] r7:00000000 r6:00000000 r5:840b8000 r4:82b53188 [ 1198.338674][T10824] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1198.338736][T10824] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1198.338804][T10824] r8:76fe6f08 r7:00000000 r6:00000000 r5:dfbddf68 r4:00000002 [ 1198.338822][T10824] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1198.338878][T10824] [<809f1860>] (should_fail_usercopy) from [<805defa8>] (simple_read_from_buffer+0x80/0x140) [ 1198.338942][T10824] [<805def28>] (simple_read_from_buffer) from [<80662f4c>] (proc_fail_nth_read+0xb8/0x108) [ 1198.339019][T10824] r10:80662e94 r9:00000001 r8:00000002 r7:dfbddf68 r6:0000000f r5:76fe6f08 [ 1198.339043][T10824] r4:840b8000 r3:dfbdde9f [ 1198.339063][T10824] [<80662e94>] (proc_fail_nth_read) from [<8059ed2c>] (vfs_read+0xc0/0x328) [ 1198.339135][T10824] r8:840b8000 r7:dfbddf68 r6:76fe6f08 r5:86f09480 r4:0000000f [ 1198.339154][T10824] [<8059ec6c>] (vfs_read) from [<8059f978>] (ksys_read+0x74/0xec) [ 1198.339223][T10824] r10:00000003 r9:840b8000 r8:8020029c r7:00000000 r6:00000000 r5:86f09480 [ 1198.339245][T10824] r4:86f09483 [ 1198.339263][T10824] [<8059f904>] (ksys_read) from [<8059fa00>] (sys_read+0x10/0x14) [ 1198.339335][T10824] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1198.339354][T10824] [<8059f9f0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1198.339406][T10824] Exception stack(0xdfbddfa8 to 0xdfbddff0) [ 1198.339447][T10824] dfa0: 00000000 00000000 00000004 76fe6f08 0000000f 00000000 [ 1198.339485][T10824] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fe70dc [ 1198.339515][T10824] dfe0: 76fe6e58 76fe6e44 0010ba44 00112628 [ 1198.654642][T10829] FAULT_INJECTION: forcing a failure. [ 1198.654642][T10829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.655620][T10829] CPU: 0 UID: 0 PID: 10829 Comm: syz.3.1653 Tainted: G L syzkaller #0 PREEMPT [ 1198.655798][T10829] Tainted: [L]=SOFTLOCKUP [ 1198.655834][T10829] Hardware name: ARM-Versatile Express [ 1198.655862][T10829] Call trace: [ 1198.656677][T10829] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1198.656815][T10829] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1198.656840][T10829] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1198.656900][T10829] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1198.656962][T10829] r7:00000000 r6:00000000 r5:83316200 r4:82b53188 [ 1198.656980][T10829] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1198.657038][T10829] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1198.657101][T10829] r8:00000003 r7:00000000 r6:000000b4 r5:20000080 r4:831ed3c0 [ 1198.657120][T10829] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1198.657224][T10829] [<809f1860>] (should_fail_usercopy) from [<809f7800>] (strncpy_from_user+0x20/0x1b0) [ 1198.657361][T10829] [<809f77e0>] (strncpy_from_user) from [<805ae910>] (do_getname+0x4c/0x14c) [ 1198.657494][T10829] r10:831ed3cc r9:83316200 r8:00000003 r7:00000000 r6:20000080 r5:8253e8c0 [ 1198.657548][T10829] r4:831ed3c0 [ 1198.657569][T10829] [<805ae8c4>] (do_getname) from [<805b4398>] (getname_flags+0x14/0x18) [ 1198.657714][T10829] r10:00000142 r9:83316200 r8:8020029c r7:20000080 r6:ffffff9c r5:eaa4df58 [ 1198.657765][T10829] r4:00000000 r3:00000003 [ 1198.657823][T10829] [<805b4384>] (getname_flags) from [<8059bb4c>] (do_sys_openat2+0x64/0xf0) [ 1198.657883][T10829] [<8059bae8>] (do_sys_openat2) from [<8059c08c>] (sys_openat+0x88/0xd8) [ 1198.657978][T10829] r7:00000142 r6:0012f224 r5:20000080 r4:ffffff9c [ 1198.658059][T10829] [<8059c004>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1198.658184][T10829] Exception stack(0xeaa4dfa8 to 0xeaa4dff0) [ 1198.658266][T10829] dfa0: 00000000 00000000 ffffff9c 20000080 00595282 00000132 [ 1198.658329][T10829] dfc0: 00000000 00000000 0012f224 00000142 003562d8 00000000 00000001 76fe70dc [ 1198.658462][T10829] dfe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1198.658545][T10829] r5:00000000 r4:00000000 [ 1199.465368][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 1199.465721][ T28] audit: type=1400 audit(1199.390:1530): avc: denied { read } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.484572][ T28] audit: type=1400 audit(1199.410:1531): avc: denied { read } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.490776][ T28] audit: type=1400 audit(1199.410:1532): avc: denied { write } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.497964][ T28] audit: type=1400 audit(1199.420:1533): avc: denied { write } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.502417][ T28] audit: type=1400 audit(1199.420:1534): avc: denied { read } for pid=10839 comm="syz.3.1658" dev="nsfs" ino=4026533125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1199.509595][ T28] audit: type=1400 audit(1199.430:1535): avc: denied { read open } for pid=10839 comm="syz.3.1658" path="net:[4026533125]" dev="nsfs" ino=4026533125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1199.509882][ T28] audit: type=1400 audit(1199.430:1536): avc: denied { create } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.516880][ T28] audit: type=1400 audit(1199.440:1537): avc: denied { write } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.518091][ T28] audit: type=1400 audit(1199.440:1538): avc: denied { module_request } for pid=10839 comm="syz.3.1658" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D3830322E31352E34204D4143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1199.628774][ T28] audit: type=1400 audit(1199.550:1539): avc: denied { read } for pid=10839 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1199.679444][T10840] SELinux: policydb version -1217000979 does not match my version range 15-35 [ 1199.680542][T10840] SELinux: failed to load policy [ 1199.681356][T10841] SELinux: policydb version -1217000979 does not match my version range 15-35 [ 1199.681487][T10841] SELinux: failed to load policy [ 1200.164541][T10820] block nbd4: Receive control failed (result -32) [ 1200.169621][T10817] block nbd4: shutting down sockets [ 1202.083853][T10868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10868 comm=syz.4.1666 [ 1203.254914][T10873] FAULT_INJECTION: forcing a failure. [ 1203.254914][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.255429][T10873] CPU: 0 UID: 0 PID: 10873 Comm: syz.3.1668 Tainted: G L syzkaller #0 PREEMPT [ 1203.255538][T10873] Tainted: [L]=SOFTLOCKUP [ 1203.255560][T10873] Hardware name: ARM-Versatile Express [ 1203.255587][T10873] Call trace: [ 1203.255747][T10873] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1203.255901][T10873] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1203.255973][T10873] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1203.256033][T10873] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1203.256136][T10873] r7:83316200 r6:00000000 r5:83316200 r4:82b1ac48 [ 1203.256187][T10873] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1203.256299][T10873] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1203.256420][T10873] r8:00000000 r7:83316200 r6:83001240 r5:00000d40 r4:0000001c [ 1203.256445][T10873] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1203.256516][T10873] [<80545fe8>] (__kmalloc_noprof) from [<80832134>] (tomoyo_encode2+0x64/0xec) [ 1203.256606][T10873] r10:00000fff r9:830c4000 r8:00000000 r7:834d9908 r6:861bf1a8 r5:8651dffc [ 1203.256640][T10873] r4:8651dfeb [ 1203.256684][T10873] [<808320d0>] (tomoyo_encode2) from [<808321e0>] (tomoyo_encode+0x24/0x30) [ 1203.256777][T10873] r9:830c4000 r8:00000000 r7:834d9908 r6:861bf1a8 r5:00001000 r4:8651dfec [ 1203.256808][T10873] [<808321bc>] (tomoyo_encode) from [<8083226c>] (tomoyo_realpath_from_path+0x80/0x16c) [ 1203.256874][T10873] r5:00001000 r4:8651d000 [ 1203.256906][T10873] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1203.256990][T10873] r10:00000000 r9:00000003 r8:861bf180 r7:0000541d r6:81cdd76c r5:00000004 [ 1203.257019][T10873] r4:861bf1a8 r3:828d2400 [ 1203.257039][T10873] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1203.257181][T10873] r10:83316200 r9:00000003 r8:861bf180 r7:00000000 r6:00000000 r5:0000541d [ 1203.257257][T10873] r4:861bf180 [ 1203.257288][T10873] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1203.257370][T10873] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1203.257444][T10873] r7:00000000 r6:0000541d r5:861bf181 r4:00000000 [ 1203.257462][T10873] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1203.257554][T10873] Exception stack(0xdfd55fa8 to 0xdfd55ff0) [ 1203.257604][T10873] 5fa0: 00000000 00000000 00000003 0000541d 00000000 00000000 [ 1203.257644][T10873] 5fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76fe70dc [ 1203.257699][T10873] 5fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1203.257748][T10873] r10:00000036 r9:83316200 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1203.257791][T10873] r4:00000000 [ 1203.258238][T10873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1203.710429][T10879] misc userio: Begin command sent, but we're already running [ 1204.152843][T10882] FAULT_INJECTION: forcing a failure. [ 1204.152843][T10882] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.153433][T10882] CPU: 0 UID: 0 PID: 10882 Comm: syz.4.1672 Tainted: G L syzkaller #0 PREEMPT [ 1204.153549][T10882] Tainted: [L]=SOFTLOCKUP [ 1204.153573][T10882] Hardware name: ARM-Versatile Express [ 1204.153600][T10882] Call trace: [ 1204.153646][T10882] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1204.154389][T10882] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1204.154547][T10882] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1204.154621][T10882] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1204.154748][T10882] r7:845bbd40 r6:00000000 r5:845bbd40 r4:82b1ac48 [ 1204.154817][T10882] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1204.155007][T10882] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1204.155118][T10882] r8:00000000 r7:845bbd40 r6:830016c0 r5:00000c40 r4:00001000 [ 1204.155141][T10882] [<80567638>] (should_failslab) from [<80546090>] (__kmalloc_noprof+0xa8/0x3c8) [ 1204.155229][T10882] [<80545fe8>] (__kmalloc_noprof) from [<80832228>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1204.155356][T10882] r10:00000000 r9:83395400 r8:00000000 r7:8366aa18 r6:83e7c0a8 r5:00001000 [ 1204.155424][T10882] r4:00000000 [ 1204.155571][T10882] [<808321ec>] (tomoyo_realpath_from_path) from [<8082e2f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1204.155778][T10882] r10:00000000 r9:00000004 r8:83e7c080 r7:00008902 r6:81cdd76c r5:00000004 [ 1204.155901][T10882] r4:83e7c0a8 r3:828d2400 [ 1204.155988][T10882] [<8082e224>] (tomoyo_path_number_perm) from [<80832c44>] (tomoyo_file_ioctl+0x1c/0x20) [ 1204.156074][T10882] r10:845bbd40 r9:00000004 r8:83e7c080 r7:20001340 r6:20001340 r5:00008902 [ 1204.156149][T10882] r4:83e7c080 [ 1204.156283][T10882] [<80832c28>] (tomoyo_file_ioctl) from [<807ddc24>] (security_file_ioctl+0x80/0x1d4) [ 1204.156382][T10882] [<807ddba4>] (security_file_ioctl) from [<805ba910>] (sys_ioctl+0x4c/0xb5c) [ 1204.156514][T10882] r7:20001340 r6:00008902 r5:83e7c081 r4:00000000 [ 1204.156637][T10882] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1204.156806][T10882] Exception stack(0xdfe39fa8 to 0xdfe39ff0) [ 1204.156937][T10882] 9fa0: 00000000 00000000 00000004 00008902 20001340 00000000 [ 1204.157049][T10882] 9fc0: 00000000 00000000 0012f224 00000036 003562d8 00000000 00000001 76f670dc [ 1204.157179][T10882] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1204.157321][T10882] r10:00000036 r9:845bbd40 r8:8020029c r7:00000036 r6:0012f224 r5:00000000 [ 1204.157369][T10882] r4:00000000 [ 1204.166615][T10882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1204.526327][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 1204.526610][ T28] audit: type=1400 audit(1204.450:1641): avc: denied { read } for pid=10887 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1204.611373][ T28] audit: type=1400 audit(1204.530:1642): avc: denied { read } for pid=10889 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1204.632618][ T28] audit: type=1400 audit(1204.550:1643): avc: denied { create } for pid=10889 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1204.703016][ T6082] atkbd serio3: keyboard reset failed on [ 1205.174263][ T28] audit: type=1400 audit(1205.100:1644): avc: denied { write } for pid=10889 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1205.179919][ T28] audit: type=1400 audit(1205.100:1645): avc: denied { read } for pid=10889 comm="syz.4.1676" name="rtc0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1205.180580][ T28] audit: type=1400 audit(1205.100:1646): avc: denied { open } for pid=10889 comm="syz.4.1676" path="/dev/rtc0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1205.217381][T10892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10892 comm=syz.4.1676 [ 1205.248165][ T28] audit: type=1400 audit(1205.170:1647): avc: denied { read } for pid=10893 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1205.280650][ T28] audit: type=1400 audit(1205.200:1648): avc: denied { create } for pid=10893 comm="syz.3.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.290081][ T28] audit: type=1400 audit(1205.210:1649): avc: denied { ioctl } for pid=10893 comm="syz.3.1677" path="socket:[18827]" dev="sockfs" ino=18827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.299537][ T28] audit: type=1400 audit(1205.220:1650): avc: denied { bind } for pid=10893 comm="syz.3.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1206.637099][T10901] FAULT_INJECTION: forcing a failure. [ 1206.637099][T10901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.639779][T10901] CPU: 1 UID: 0 PID: 10901 Comm: syz.3.1680 Tainted: G L syzkaller #0 PREEMPT [ 1206.639908][T10901] Tainted: [L]=SOFTLOCKUP [ 1206.639935][T10901] Hardware name: ARM-Versatile Express [ 1206.639958][T10901] Call trace: [ 1206.640002][T10901] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1206.640106][T10901] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1206.640123][T10901] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1206.640174][T10901] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1206.640234][T10901] r7:00000048 r6:00000000 r5:845bbd40 r4:82b53188 [ 1206.640297][T10901] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1206.640364][T10901] [<809f1624>] (should_fail_ex) from [<809f185c>] (should_fail+0x14/0x18) [ 1206.640435][T10901] r8:00000000 r7:00000048 r6:00000000 r5:e0281e40 r4:00000000 [ 1206.640453][T10901] [<809f1848>] (should_fail) from [<809f187c>] (should_fail_usercopy+0x1c/0x20) [ 1206.640503][T10901] [<809f1860>] (should_fail_usercopy) from [<803e9ac0>] (__sys_bpf+0xe4/0x219c) [ 1206.640557][T10901] [<803e99dc>] (__sys_bpf) from [<803ec188>] (sys_bpf+0x50/0x6c) [ 1206.640619][T10901] r10:00000182 r9:845bbd40 r8:8020029c r7:00000182 r6:0012f224 r5:00000000 [ 1206.640641][T10901] r4:00000000 [ 1206.640659][T10901] [<803ec138>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1206.640706][T10901] Exception stack(0xe0281fa8 to 0xe0281ff0) [ 1206.640745][T10901] 1fa0: 00000000 00000000 00000000 20000100 00000048 00000000 [ 1206.640782][T10901] 1fc0: 00000000 00000000 0012f224 00000182 003562d8 00000000 003d0f00 76fe70dc [ 1206.640808][T10901] 1fe0: 76fe6e88 76fe6e78 00018ebc 00130820 [ 1209.166005][T10921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10921 comm=syz.3.1688 [ 1209.923677][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 1209.928791][ T28] audit: type=1400 audit(1209.850:1704): avc: denied { read } for pid=10922 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1209.946248][ T28] audit: type=1400 audit(1209.870:1705): avc: denied { create } for pid=10922 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1209.996005][ T28] audit: type=1400 audit(1209.920:1706): avc: denied { execmem } for pid=10922 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1210.836087][ T28] audit: type=1400 audit(1210.760:1707): avc: denied { execmem } for pid=10922 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1210.906179][ T28] audit: type=1400 audit(1210.830:1708): avc: denied { getopt } for pid=10922 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1211.041259][ T28] audit: type=1400 audit(1210.960:1709): avc: denied { read } for pid=10925 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1211.066300][ T28] audit: type=1400 audit(1210.990:1710): avc: denied { execmem } for pid=10925 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1211.132042][T10926] FAULT_INJECTION: forcing a failure. [ 1211.132042][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.132671][T10926] CPU: 0 UID: 0 PID: 10926 Comm: syz.4.1690 Tainted: G L syzkaller #0 PREEMPT [ 1211.132752][T10926] Tainted: [L]=SOFTLOCKUP [ 1211.132763][T10926] Hardware name: ARM-Versatile Express [ 1211.132775][T10926] Call trace: [ 1211.132824][T10926] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1211.132900][T10926] r7:60000013 r6:60000013 r5:82332444 r4:00000000 [ 1211.132910][T10926] [<80201a74>] (show_stack) from [<8021e580>] (dump_stack_lvl+0x5c/0x70) [ 1211.132938][T10926] [<8021e524>] (dump_stack_lvl) from [<8021e5ac>] (dump_stack+0x18/0x1c) [ 1211.132970][T10926] r7:ffffffff r6:00000000 r5:83311880 r4:82b1ac48 [ 1211.132978][T10926] [<8021e594>] (dump_stack) from [<809f17e4>] (should_fail_ex+0x1c0/0x224) [ 1211.133009][T10926] [<809f1624>] (should_fail_ex) from [<805676a4>] (should_failslab+0x6c/0x94) [ 1211.133047][T10926] r8:83311880 r7:ffffffff r6:83001240 r5:00000cc0 r4:00000018 [ 1211.133056][T10926] [<80567638>] (should_failslab) from [<80545cbc>] (__kmalloc_node_noprof+0xac/0x3d8) [ 1211.133085][T10926] [<80545c10>] (__kmalloc_node_noprof) from [<807bf20c>] (load_msg+0x34/0x2f0) [ 1211.133121][T10926] r10:e01b1ef8 r9:83311880 r8:00000000 r7:00000000 r6:00000009 r5:00000000 [ 1211.133132][T10926] r4:83f65188 [ 1211.133141][T10926] [<807bf1d8>] (load_msg) from [<807ca19c>] (do_mq_timedsend+0x140/0x50c) [ 1211.133174][T10926] r10:e01b1ef8 r9:83311880 r8:84fbbe80 r7:00000000 r6:00000009 r5:00000000 [ 1211.133185][T10926] r4:83f65188 [ 1211.133193][T10926] [<807ca05c>] (do_mq_timedsend) from [<807cbaf0>] (sys_mq_timedsend_time32+0xa0/0xdc) [ 1211.133225][T10926] r10:00000114 r9:83311880 r8:8020029c r7:00000000 r6:00000009 r5:00000000 [ 1211.133235][T10926] r4:00000003 [ 1211.133243][T10926] [<807cba50>] (sys_mq_timedsend_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1211.133267][T10926] Exception stack(0xe01b1fa8 to 0xe01b1ff0) [ 1211.133287][T10926] 1fa0: 200002c0 00000000 00000003 00000000 00000000 00000009 [ 1211.133305][T10926] 1fc0: 200002c0 00000000 0012f224 00000114 003562d8 00000000 00000001 76f670dc [ 1211.133321][T10926] 1fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1211.133337][T10926] r7:00000114 r6:0012f224 r5:00000000 r4:200002c0 [ 1211.233910][ T28] audit: type=1400 audit(1211.160:1711): avc: denied { read } for pid=10927 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1211.234315][ T28] audit: type=1400 audit(1211.160:1712): avc: denied { read } for pid=10928 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1211.254702][ T28] audit: type=1400 audit(1211.180:1713): avc: denied { create } for pid=10927 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1211.475548][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.477605][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.573998][T10947] binder: 10946:10947 ioctl 4018620d 0 returned -22 [ 1215.291165][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 1215.297816][ T28] audit: type=1400 audit(1215.210:1755): avc: denied { read } for pid=10951 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.308159][ T28] audit: type=1400 audit(1215.230:1756): avc: denied { execmem } for pid=10951 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1215.705832][ T28] audit: type=1400 audit(1215.630:1757): avc: denied { read } for pid=10953 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.812619][ T28] audit: type=1400 audit(1215.730:1758): avc: denied { read write } for pid=10953 comm="syz.4.1702" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.813263][ T28] audit: type=1400 audit(1215.740:1759): avc: denied { open } for pid=10953 comm="syz.4.1702" path="/dev/raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.819116][ T28] audit: type=1400 audit(1215.740:1760): avc: denied { ioctl } for pid=10953 comm="syz.4.1702" path="/dev/raw-gadget" dev="devtmpfs" ino=694 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.826382][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.829086][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.506873][ T28] audit: type=1400 audit(1216.430:1761): avc: denied { read } for pid=10957 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1216.758769][ T28] audit: type=1400 audit(1216.680:1762): avc: denied { read } for pid=10959 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1217.448181][ T28] audit: type=1400 audit(1217.370:1763): avc: denied { create } for pid=10959 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1217.477553][ T28] audit: type=1400 audit(1217.400:1764): avc: denied { setopt } for pid=10959 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1220.420563][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 1220.420990][ T28] audit: type=1400 audit(1220.340:1799): avc: denied { read } for pid=11011 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1220.459856][ T28] audit: type=1400 audit(1220.380:1800): avc: denied { execmem } for pid=11011 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1222.001251][ T28] audit: type=1400 audit(1221.920:1801): avc: denied { read } for pid=11014 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1222.029452][ T28] audit: type=1400 audit(1221.950:1802): avc: denied { create } for pid=11014 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1222.051997][ T28] audit: type=1400 audit(1221.970:1803): avc: denied { execmem } for pid=11014 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1223.004667][ T28] audit: type=1400 audit(1222.930:1804): avc: denied { create } for pid=11011 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1223.025784][ T28] audit: type=1400 audit(1222.950:1805): avc: denied { create } for pid=11011 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1223.033829][ T28] audit: type=1400 audit(1222.960:1806): avc: denied { write } for pid=11011 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1230.691288][ T28] audit: type=1400 audit(1230.610:1807): avc: denied { read } for pid=11019 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1230.725952][ T28] audit: type=1400 audit(1230.650:1808): avc: denied { read } for pid=11019 comm="syz.3.1714" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.727929][ T28] audit: type=1400 audit(1230.650:1809): avc: denied { open } for pid=11019 comm="syz.3.1714" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.746347][ T28] audit: type=1400 audit(1230.670:1810): avc: denied { ioctl } for pid=11019 comm="syz.3.1714" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.753139][ T28] audit: type=1400 audit(1230.680:1811): avc: denied { set_context_mgr } for pid=11019 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1230.760580][ T28] audit: type=1400 audit(1230.680:1812): avc: denied { read } for pid=11019 comm="syz.3.1714" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.762782][ T28] audit: type=1400 audit(1230.680:1813): avc: denied { open } for pid=11019 comm="syz.3.1714" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.777338][ T28] audit: type=1400 audit(1230.700:1814): avc: denied { ioctl } for pid=11019 comm="syz.3.1714" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.802785][ T28] audit: type=1400 audit(1230.730:1815): avc: denied { ioctl } for pid=11019 comm="syz.3.1714" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1230.924704][ T28] audit: type=1400 audit(1230.850:1816): avc: denied { read } for pid=11021 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1230.959353][T11022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1715'. [ 1230.966017][T11022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1715'. [ 1231.911162][T11031] netlink: 'syz.3.1718': attribute type 12 has an invalid length. [ 1232.080153][T11035] 8<--- cut here --- [ 1232.080972][T11035] Unable to handle kernel paging request at virtual address fee00143 when write [ 1232.103272][T11035] [fee00143] *pgd=80000080007003, *pmd=00000000 [ 1232.112712][T11035] Internal error: Oops: a06 [#1] SMP ARM [ 1232.114091][T11035] Modules linked in: [ 1232.114506][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.4.1720 Tainted: G L syzkaller #0 PREEMPT [ 1232.115031][T11035] Tainted: [L]=SOFTLOCKUP [ 1232.115496][T11035] Hardware name: ARM-Versatile Express [ 1232.115882][T11035] PC is at subdev_8255_io+0x60/0x6c [ 1232.116278][T11035] LR is at subdev_8255_io+0x4c/0x6c [ 1232.116553][T11035] pc : [<8149f1e8>] lr : [<8149f1d4>] psr: 60000013 [ 1232.116988][T11035] sp : dfbb9cb8 ip : dfbb9cb8 fp : dfbb9cd4 [ 1232.117295][T11035] r10: 00000140 r9 : 00000004 r8 : dfbb9da4 [ 1232.117552][T11035] r7 : 00000000 r6 : 0000009b r5 : 8301a840 r4 : 00000143 [ 1232.117807][T11035] r3 : 0000009b r2 : fee00143 r1 : 00000001 r0 : 8301a840 [ 1232.118134][T11035] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1232.118515][T11035] Control: 30c5387d Table: 8681af00 DAC: 00000000 [ 1232.118853][T11035] Register r0 information: slab kmalloc-192 start 8301a840 pointer offset 0 size 192 [ 1232.120392][T11035] Register r1 information: non-paged memory [ 1232.120926][T11035] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1232.121472][T11035] Register r3 information: non-paged memory [ 1232.121878][T11035] Register r4 information: non-paged memory [ 1232.122261][T11035] Register r5 information: slab kmalloc-192 start 8301a840 pointer offset 0 size 192 [ 1232.122804][T11035] Register r6 information: non-paged memory [ 1232.123113][T11035] Register r7 information: NULL pointer [ 1232.123422][T11035] Register r8 information: 2-page vmalloc region starting at 0xdfbb8000 allocated at kernel_clone+0xc4/0x43c [ 1232.123962][T11035] Register r9 information: non-paged memory [ 1232.124222][T11035] Register r10 information: non-paged memory [ 1232.124589][T11035] Register r11 information: 2-page vmalloc region starting at 0xdfbb8000 allocated at kernel_clone+0xc4/0x43c [ 1232.125139][T11035] Register r12 information: 2-page vmalloc region starting at 0xdfbb8000 allocated at kernel_clone+0xc4/0x43c [ 1232.125686][T11035] Process syz.4.1720 (pid: 11035, stack limit = 0xdfbb8000) [ 1232.126121][T11035] Stack: (0xdfbb9cb8 to 0xdfbba000) [ 1232.126394][T11035] 9ca0: 8149f188 00000140 [ 1232.126787][T11035] 9cc0: 8301a840 00000000 dfbb9cf4 dfbb9cd8 8149eec4 8149f194 00000140 80545ff4 [ 1232.127143][T11035] 9ce0: 873f4840 873f4840 dfbb9d14 dfbb9cf8 8149f27c 8149ee78 8301a840 00000000 [ 1232.127473][T11035] 9d00: 873f4840 00000000 dfbb9d54 dfbb9d18 8149f42c 8149f200 ffffffff 00000004 [ 1232.127842][T11035] 9d20: 82a22dc0 00000000 00000000 82bd9600 8301a840 00000000 dfbb9d90 8301a840 [ 1232.128332][T11035] 9d40: 00000000 82d30dfc dfbb9d8c dfbb9d58 8148ddcc 8149f3c4 40946400 00000000 [ 1232.128731][T11035] 9d60: dfbb9d7c 200000c0 8301a840 b5403587 40946400 00000002 00000003 845b0c40 [ 1232.129048][T11035] 9d80: dfbb9e4c dfbb9d90 814895d0 8148dcd0 35353238 00000000 00000000 00000000 [ 1232.129374][T11035] 9da0: 00000000 00000140 00000000 00000009 00000002 10000007 00000001 00007fff [ 1232.129718][T11035] 9dc0: 30000002 00000007 0000c72d 00000000 00000007 00000003 00000008 00000029 [ 1232.130028][T11035] 9de0: 000072f0 00000101 00000006 00000006 00000401 00000004 00000006 0000a2d8 [ 1232.130439][T11035] 9e00: 00000009 00001000 00000008 0000000a ffffffff 00000383 00008001 00000004 [ 1232.130818][T11035] 9e20: 00000000 8dae9d96 00000000 86f09b00 8301a840 200000c0 40946400 00000002 [ 1232.131159][T11035] 9e40: dfbb9f14 dfbb9e50 8148a8f8 81489510 00000000 8dae9d96 00000000 00000000 [ 1232.131630][T11035] 9e60: 8254980c dfbb9ea4 0000005f 842527b8 00000064 8301a870 dfbb9ee4 dfbb9e88 [ 1232.131991][T11035] 9e80: 80805b6c 807fbe9c 00000064 00000001 00000000 dfbb9ea4 831e7d10 83431990 [ 1232.132405][T11035] 9ea0: 00006400 0000000b dfbb9e98 00000000 dfbb9d38 8dae9d96 00000000 86f09b00 [ 1232.132725][T11035] 9ec0: 40946400 200000c0 200000c0 86f09b00 00000003 845b0c40 dfbb9ef4 dfbb9ee8 [ 1232.133049][T11035] 9ee0: 80805ca0 8dae9d96 dfbb9f14 00000000 86f09b01 40946400 200000c0 86f09b00 [ 1232.133629][T11035] 9f00: 00000003 845b0c40 dfbb9fa4 dfbb9f18 805bab08 8148a5b0 ecac8b10 845b0c40 [ 1232.134088][T11035] 9f20: dfbb9f3c dfbb9f30 81b56440 81b5630c dfbb9f54 dfbb9f40 8025a7a4 8028e480 [ 1232.134398][T11035] 9f40: dfbb9fb0 40000000 dfbb9f84 dfbb9f58 80220bdc 8025a760 00000000 82a1eb0c [ 1232.134754][T11035] 9f60: dfbb9fb0 0013e9c0 ecac8b10 80220b30 00000000 8dae9d96 dfbb9fac 00000000 [ 1232.135165][T11035] 9f80: 00000000 00356310 00000036 8020029c 845b0c40 00000036 00000000 dfbb9fa8 [ 1232.135536][T11035] 9fa0: 80200060 805ba8d0 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1232.135890][T11035] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f670dc [ 1232.136289][T11035] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 60000010 00000003 00000000 00000000 [ 1232.136771][T11035] Call trace: [ 1232.137045][T11035] [<8149f188>] (subdev_8255_io) from [<8149eec4>] (subdev_8255_do_config+0x58/0x60) [ 1232.137563][T11035] r7:00000000 r6:8301a840 r5:00000140 r4:8149f188 [ 1232.137862][T11035] [<8149ee6c>] (subdev_8255_do_config) from [<8149f27c>] (subdev_8255_io_init+0x88/0x98) [ 1232.138288][T11035] r4:873f4840 [ 1232.138452][T11035] [<8149f1f4>] (subdev_8255_io_init) from [<8149f42c>] (dev_8255_attach+0x74/0x138) [ 1232.138868][T11035] r7:00000000 r6:873f4840 r5:00000000 r4:8301a840 [ 1232.139194][T11035] [<8149f3b8>] (dev_8255_attach) from [<8148ddcc>] (comedi_device_attach+0x108/0x244) [ 1232.139640][T11035] r10:82d30dfc r9:00000000 r8:8301a840 r7:dfbb9d90 r6:00000000 r5:8301a840 [ 1232.140011][T11035] r4:82bd9600 [ 1232.140199][T11035] [<8148dcc4>] (comedi_device_attach) from [<814895d0>] (do_devconfig_ioctl+0xcc/0x218) [ 1232.140732][T11035] r10:845b0c40 r9:00000003 r8:00000002 r7:40946400 r6:b5403587 r5:8301a840 [ 1232.141120][T11035] r4:200000c0 [ 1232.141338][T11035] [<81489504>] (do_devconfig_ioctl) from [<8148a8f8>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 1232.141995][T11035] r8:00000002 r7:40946400 r6:200000c0 r5:8301a840 r4:86f09b00 [ 1232.142342][T11035] [<8148a5a4>] (comedi_unlocked_ioctl) from [<805bab08>] (sys_ioctl+0x244/0xb5c) [ 1232.142744][T11035] r10:845b0c40 r9:00000003 r8:86f09b00 r7:200000c0 r6:40946400 r5:86f09b01 [ 1232.143118][T11035] r4:00000000 [ 1232.143273][T11035] [<805ba8c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1232.143606][T11035] Exception stack(0xdfbb9fa8 to 0xdfbb9ff0) [ 1232.143911][T11035] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1232.144260][T11035] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f670dc [ 1232.144588][T11035] 9fe0: 76f66e88 76f66e78 00018ebc 00130820 [ 1232.144870][T11035] r10:00000036 r9:845b0c40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1232.145186][T11035] r4:00000000 [ 1232.145662][T11035] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1232.147675][T11035] ---[ end trace 0000000000000000 ]--- [ 1232.234651][T11035] Kernel panic - not syncing: Fatal exception [ 1232.237136][T11035] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:30:20 Registers: info registers vcpu 0 CPU#0 R00=deffd7e8 R01=802387d8 R02=90f00000 R03=00000000 R04=ffefd000 R05=840b8000 R06=00000001 R07=00000001 R08=00320000 R09=00320000 R10=00320000 R11=ea6a9de4 R12=ea6a9de8 R13=ea6a9d88 R14=81b36e40 R15=804fea90 PSR=a0000013 N-C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8022bbac R02=00000000 R03=000007d9 R04=00000000 R05=00000001 R06=00000001 R07=82cf68d0 R08=000002e1 R09=82cf7558 R10=807fac2c R11=ebba9bfc R12=ebba9b18 R13=ebba9b08 R14=807fb028 R15=8028e474 PSR=600f0093 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000