last executing test programs: 2m3.380118047s ago: executing program 0 (id=8466): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2m2.740040663s ago: executing program 0 (id=8467): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setpriority(0x2, r1, 0x9) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200020000000000000008004100727865001400330076657468305f766c616e"], 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20040050) 1m59.347163196s ago: executing program 0 (id=8468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x2c}}, 0x60000800) 1m58.800243376s ago: executing program 0 (id=8469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 1m58.620923787s ago: executing program 0 (id=8470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x28, r1, 0x101, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc084}, 0x20040000) 1m58.160173473s ago: executing program 0 (id=8471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1m58.160002493s ago: executing program 32 (id=8471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 7.459560766s ago: executing program 1 (id=8708): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 6.671789211s ago: executing program 1 (id=8714): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4044014) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 4.119220196s ago: executing program 1 (id=8729): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x2, {0x0, 0xf0}}, 0x18) syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x8040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) dup2(r0, r3) setns(r3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000060}, 0x0) 2.98973191s ago: executing program 2 (id=8730): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1412, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x130, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6277}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3fe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x290}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff13}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x14e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x107}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x357}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) 2.898858105s ago: executing program 2 (id=8731): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250c208094a4bafdb2d158e171805689df0c1c5de08495d4ee6e0000cd090175371923784e07ef03a09901ae3bf058fc807faef02df921df895d0c2d2e494f7b0ff28a29d0000000000000", @ANYRES32, @ANYBLOB="0c009900070000002700000004000a000a000600080211000000000004000a0004006e80"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x130, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6277}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3fe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x290}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff13}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x14e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x107}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x357}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) 2.788803112s ago: executing program 2 (id=8732): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250c208094a4bafdb2d158e171805689df0c1c5de08495d4ee6e0000cd090175371923784e07ef03a09901ae3bf058fc807faef02df921df895d0c2d2e494f7b0ff28a29d0000000000000", @ANYRES32, @ANYBLOB="0c009900070000002700000004000a000a000600080211000000000004000a0004006e80"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2018000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) 2.679755887s ago: executing program 2 (id=8733): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4044014) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1.994880736s ago: executing program 1 (id=8734): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0700000041a13f41fffe1a1aac5028f5c32be0eddd3620065593cb2b561b0367c2ae6ce33700e7b210e9756e", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf25010000000000000009410000004c00180000000773797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) close_range(r0, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1.906857862s ago: executing program 1 (id=8735): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1412, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x130, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6277}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3fe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x290}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff13}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x14e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x107}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x357}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) 809.575694ms ago: executing program 1 (id=8736): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250c208094a4bafdb2d158e171805689df0c1c5de08495d4ee6e0000cd090175371923784e07ef03a09901ae3bf058fc807faef02df921df895d0c2d2e494f7b0ff28a29d0000000000000", @ANYRES32, @ANYBLOB="0c009900070000002700000004000a000a000600080211000000000004000a0004006e80"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x130, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6277}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3fe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x290}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff13}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x40]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x14e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x107}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x357}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) 100.183354ms ago: executing program 2 (id=8737): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40140, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250c208094a4bafdb2d158e171805689df0c1c5de08495d4ee6e0000cd090175371923784e07ef03a09901ae3bf058fc807faef02df921df895d0c2d2e494f7b0ff28a29d0000000000000", @ANYRES32, @ANYBLOB="0c009900070000002700000004000a000a000600080211000000000004000a0004006e80"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2018000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) 0s ago: executing program 2 (id=8738): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x8a, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) kernel console output (not intermixed with test programs): b08>] (show_stack+0x18/0x1c) [ 3535.191583][T30126] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3535.191609][T30126] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3535.191777][T30126] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3535.191853][T30126] r7:00000000 r6:00000000 r5:84fe4800 r4:82919410 [ 3535.191961][T30126] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3535.192026][T30126] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3535.192094][T30126] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 3535.192113][T30126] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3535.192166][T30126] [<80523320>] (__kmalloc_noprof) from [<807fb330>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3535.192268][T30126] r10:00000000 r9:83180c00 r8:00000000 r7:83417088 r6:855fa1a8 r5:00001000 [ 3535.192326][T30126] r4:00000000 [ 3535.192362][T30126] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3535.192447][T30126] r10:00000000 r9:00000003 r8:855fa180 r7:8010661b r6:81cd9ee4 r5:00000004 [ 3535.192473][T30126] r4:855fa1a8 r3:826ca380 [ 3535.192490][T30126] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3535.192555][T30126] r10:84fe4800 r9:00000003 r8:855fa180 r7:00000000 r6:00000000 r5:8010661b [ 3535.192577][T30126] r4:855fa180 [ 3535.192594][T30126] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3535.192652][T30126] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3535.192716][T30126] r7:00000000 r6:8010661b r5:855fa181 r4:00000000 [ 3535.192737][T30126] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3535.192789][T30126] Exception stack(0xf49f1fa8 to 0xf49f1ff0) [ 3535.192837][T30126] 1fa0: 00000000 00000000 00000003 8010661b 00000000 00000000 [ 3535.192876][T30126] 1fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3535.192909][T30126] 1fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3535.192947][T30126] r10:00000036 r9:84fe4800 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3535.192968][T30126] r4:00000000 [ 3535.193004][T30126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3539.268088][ T28] audit: type=1400 audit(3539.190:685): avc: denied { create } for pid=30160 comm="syz.0.7410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 3539.536596][T30164] FAULT_INJECTION: forcing a failure. [ 3539.536596][T30164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3539.536980][T30164] CPU: 1 UID: 0 PID: 30164 Comm: syz.0.7411 Tainted: G L syzkaller #0 PREEMPT [ 3539.537161][T30164] Tainted: [L]=SOFTLOCKUP [ 3539.537186][T30164] Hardware name: ARM-Versatile Express [ 3539.537212][T30164] Call trace: [ 3539.537272][T30164] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3539.537385][T30164] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3539.537407][T30164] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3539.537472][T30164] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3539.537585][T30164] r7:00000000 r6:00000000 r5:831d6c00 r4:8295129c [ 3539.537609][T30164] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3539.537675][T30164] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3539.537745][T30164] r8:76f83f08 r7:00000000 r6:00000000 r5:dfc71f68 r4:00000002 [ 3539.537766][T30164] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3539.537820][T30164] [<809bbfe4>] (should_fail_usercopy) from [<805b24e4>] (simple_read_from_buffer+0x80/0x140) [ 3539.537881][T30164] [<805b2464>] (simple_read_from_buffer) from [<80636168>] (proc_fail_nth_read+0xb8/0x108) [ 3539.537954][T30164] r10:806360b0 r9:00000001 r8:00000002 r7:dfc71f68 r6:0000000f r5:76f83f08 [ 3539.537978][T30164] r4:831d6c00 r3:dfc71e9f [ 3539.537998][T30164] [<806360b0>] (proc_fail_nth_read) from [<80574d24>] (vfs_read+0xc0/0x328) [ 3539.538071][T30164] r8:831d6c00 r7:dfc71f68 r6:76f83f08 r5:85ff3840 r4:0000000f [ 3539.538092][T30164] [<80574c64>] (vfs_read) from [<805759b8>] (ksys_read+0x74/0xec) [ 3539.538149][T30164] r10:00000003 r9:831d6c00 r8:8020029c r7:00000000 r6:00000000 r5:85ff3840 [ 3539.538169][T30164] r4:85ff3843 [ 3539.538183][T30164] [<80575944>] (ksys_read) from [<80575a40>] (sys_read+0x10/0x14) [ 3539.538235][T30164] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3539.538250][T30164] [<80575a30>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3539.538296][T30164] Exception stack(0xdfc71fa8 to 0xdfc71ff0) [ 3539.538331][T30164] 1fa0: 00000000 00000000 00000006 76f83f08 0000000f 00000000 [ 3539.538468][T30164] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f840dc [ 3539.538582][T30164] 1fe0: 76f83e58 76f83e44 0010b504 001120e8 [ 3539.842452][ T28] audit: type=1400 audit(3539.760:686): avc: denied { remove_name } for pid=30165 comm="syz.0.7412" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3539.847862][ T28] audit: type=1400 audit(3539.760:687): avc: denied { unlink } for pid=30165 comm="syz.0.7412" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3542.731811][T30191] FAULT_INJECTION: forcing a failure. [ 3542.731811][T30191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3542.736550][T30191] CPU: 0 UID: 0 PID: 30191 Comm: syz.0.7420 Tainted: G L syzkaller #0 PREEMPT [ 3542.736822][T30191] Tainted: [L]=SOFTLOCKUP [ 3542.736852][T30191] Hardware name: ARM-Versatile Express [ 3542.736880][T30191] Call trace: [ 3542.736924][T30191] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3542.737081][T30191] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3542.737103][T30191] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3542.737154][T30191] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3542.737214][T30191] r7:00000000 r6:00000000 r5:84fd3c00 r4:8295129c [ 3542.737232][T30191] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3542.737289][T30191] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3542.737348][T30191] r8:00000003 r7:00000000 r6:00000100 r5:20001900 r4:20001900 [ 3542.737366][T30191] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3542.737439][T30191] [<809bbfe4>] (should_fail_usercopy) from [<809c1f60>] (strncpy_from_user+0x20/0x1b0) [ 3542.737494][T30191] [<809c1f40>] (strncpy_from_user) from [<805b01c8>] (path_setxattrat+0x7c/0x1bc) [ 3542.737632][T30191] r10:00000003 r9:00000000 r8:00000003 r7:00000000 r6:00001000 r5:00000000 [ 3542.737666][T30191] r4:20001900 [ 3542.737683][T30191] [<805b014c>] (path_setxattrat) from [<805b0508>] (sys_fsetxattr+0x30/0x38) [ 3542.737744][T30191] r10:000000e4 r9:84fd3c00 r8:8020029c r7:000000e4 r6:0012ece4 r5:00000000 [ 3542.737765][T30191] r4:00000003 [ 3542.737790][T30191] [<805b04d8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3542.737837][T30191] Exception stack(0xdfa09fa8 to 0xdfa09ff0) [ 3542.737874][T30191] 9fa0: 00000003 00000000 00000003 20001900 00000000 00000000 [ 3542.737908][T30191] 9fc0: 00000003 00000000 0012ece4 000000e4 003462d8 00000000 00000001 76f840dc [ 3542.737936][T30191] 9fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3544.215976][T30205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5130 sclass=netlink_tcpdiag_socket pid=30205 comm=syz.0.7425 [ 3544.229265][T30205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30205 comm=syz.0.7425 [ 3552.537651][T30247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30247 comm=syz.1.7437 [ 3553.158978][T22976] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3553.325198][T22976] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3553.332963][T22976] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 8 [ 3553.333331][T22976] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 8 [ 3553.333407][T22976] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3553.333456][T22976] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3553.350620][T22976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3553.350997][T22976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3553.351268][T22976] usb 2-1: Product: syz [ 3553.351365][T22976] usb 2-1: Manufacturer: syz [ 3553.351440][T22976] usb 2-1: SerialNumber: syz [ 3553.368179][T30253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3553.368898][T30253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3553.649290][T22976] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 3553.655313][T22976] usb 2-1: USB disconnect, device number 47 [ 3555.490036][T30279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30279 comm=syz.0.7443 [ 3556.482537][T30282] FAULT_INJECTION: forcing a failure. [ 3556.482537][T30282] name failslab, interval 1, probability 0, space 0, times 0 [ 3556.491433][T30282] CPU: 0 UID: 0 PID: 30282 Comm: syz.1.7444 Tainted: G L syzkaller #0 PREEMPT [ 3556.491599][T30282] Tainted: [L]=SOFTLOCKUP [ 3556.491623][T30282] Hardware name: ARM-Versatile Express [ 3556.491649][T30282] Call trace: [ 3556.491695][T30282] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3556.491817][T30282] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3556.491839][T30282] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3556.491894][T30282] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3556.491956][T30282] r7:84ff8000 r6:00000000 r5:84ff8000 r4:82919410 [ 3556.491974][T30282] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3556.492033][T30282] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3556.492100][T30282] r8:ffffffff r7:84ff8000 r6:83001a80 r5:00400cc0 r4:0000001c [ 3556.492119][T30282] [<8054398c>] (should_failslab) from [<80524090>] (__kvmalloc_node_noprof+0xa0/0x57c) [ 3556.492174][T30282] [<80523ff0>] (__kvmalloc_node_noprof) from [<805b0c88>] (simple_xattr_alloc+0x38/0x5c) [ 3556.492244][T30282] r10:00000001 r9:86084080 r8:830f0c30 r7:84266620 r6:86084080 r5:00000008 [ 3556.492268][T30282] r4:ea581e54 [ 3556.492286][T30282] [<805b0c50>] (simple_xattr_alloc) from [<805b0d74>] (simple_xattr_set+0x28/0x188) [ 3556.492344][T30282] r7:84266620 r6:86084080 r5:ea581e54 r4:ea581e54 [ 3556.492365][T30282] [<805b0d4c>] (simple_xattr_set) from [<804ab534>] (shmem_xattr_handler_set+0x194/0x1a8) [ 3556.492436][T30282] r9:86084080 r8:830f0c30 r7:00000048 r6:830f0c00 r5:84266640 r4:ea581e54 [ 3556.492457][T30282] [<804ab3a0>] (shmem_xattr_handler_set) from [<805aef1c>] (__vfs_setxattr+0xb4/0xc8) [ 3556.492521][T30282] r9:804ab3a0 r8:00000008 r7:86084080 r6:8342e000 r5:82920534 r4:84266640 [ 3556.492542][T30282] [<805aee68>] (__vfs_setxattr) from [<805af950>] (__vfs_setxattr_noperm+0x7c/0x204) [ 3556.492602][T30282] r9:82920534 r8:86084080 r7:84266640 r6:00000001 r5:ea581e54 r4:8342e000 [ 3556.492623][T30282] [<805af8d4>] (__vfs_setxattr_noperm) from [<805afb7c>] (__vfs_setxattr_locked+0xa4/0x12c) [ 3556.492686][T30282] r10:ea581db8 r9:00000000 r8:84266640 r7:86084080 r6:ea581e54 r5:82920534 [ 3556.492707][T30282] r4:8342e000 [ 3556.492724][T30282] [<805afad8>] (__vfs_setxattr_locked) from [<805afca4>] (vfs_setxattr+0xa0/0x180) [ 3556.492792][T30282] r8:00000008 r7:86084080 r6:8342e000 r5:842666c0 r4:ea581e40 [ 3556.492814][T30282] [<805afc04>] (vfs_setxattr) from [<805afe18>] (do_setxattr+0x94/0x9c) [ 3556.492875][T30282] r10:00000001 r9:8342e000 r8:82920534 r7:86084080 r6:00000008 r5:ea581e54 [ 3556.492897][T30282] r4:ea581e40 [ 3556.492913][T30282] [<805afd84>] (do_setxattr) from [<805b0054>] (file_setxattr+0x58/0x78) [ 3556.492974][T30282] r9:20000640 r8:00000003 r7:85fe6481 r6:ea581e40 r5:85fe6480 r4:00000000 [ 3556.492993][T30282] [<805afffc>] (file_setxattr) from [<805b02b4>] (path_setxattrat+0x168/0x1bc) [ 3556.493104][T30282] r7:85fe6481 r6:85fe6480 r5:86084080 r4:00000018 [ 3556.493127][T30282] [<805b014c>] (path_setxattrat) from [<805b0508>] (sys_fsetxattr+0x30/0x38) [ 3556.493193][T30282] r10:000000e4 r9:84ff8000 r8:8020029c r7:000000e4 r6:0012ece4 r5:00000000 [ 3556.493215][T30282] r4:00000001 [ 3556.493233][T30282] [<805b04d8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3556.493286][T30282] Exception stack(0xea581fa8 to 0xea581ff0) [ 3556.493330][T30282] 1fa0: 00000001 00000000 00000003 20000600 20000640 00000008 [ 3556.493366][T30282] 1fc0: 00000001 00000000 0012ece4 000000e4 003462d8 00000000 00000001 76fb00dc [ 3556.493396][T30282] 1fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3556.843328][T30286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30286 comm=syz.1.7446 [ 3559.226567][T30307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30307 comm=syz.0.7453 [ 3563.497994][T30328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30328 comm=syz.1.7461 [ 3567.163412][T30347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30347 comm=syz.0.7468 [ 3569.085912][T30387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30387 comm=syz.1.7473 [ 3581.300435][T30450] FAULT_INJECTION: forcing a failure. [ 3581.300435][T30450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3581.312685][T30450] CPU: 1 UID: 0 PID: 30450 Comm: syz.0.7493 Tainted: G L syzkaller #0 PREEMPT [ 3581.312781][T30450] Tainted: [L]=SOFTLOCKUP [ 3581.312792][T30450] Hardware name: ARM-Versatile Express [ 3581.312811][T30450] Call trace: [ 3581.312835][T30450] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3581.312899][T30450] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3581.312909][T30450] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3581.312935][T30450] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3581.312964][T30450] r7:00000000 r6:00000000 r5:84f4b000 r4:8295129c [ 3581.312972][T30450] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3581.313000][T30450] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3581.313030][T30450] r8:76f83f08 r7:00000000 r6:00000000 r5:ead19f68 r4:00000002 [ 3581.313038][T30450] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3581.313062][T30450] [<809bbfe4>] (should_fail_usercopy) from [<805b24e4>] (simple_read_from_buffer+0x80/0x140) [ 3581.313090][T30450] [<805b2464>] (simple_read_from_buffer) from [<80636168>] (proc_fail_nth_read+0xb8/0x108) [ 3581.313126][T30450] r10:806360b0 r9:00000001 r8:00000002 r7:ead19f68 r6:0000000f r5:76f83f08 [ 3581.313137][T30450] r4:84f4b000 r3:ead19e9f [ 3581.313145][T30450] [<806360b0>] (proc_fail_nth_read) from [<80574d24>] (vfs_read+0xc0/0x328) [ 3581.313250][T30450] r8:84f4b000 r7:ead19f68 r6:76f83f08 r5:85fe2480 r4:0000000f [ 3581.313262][T30450] [<80574c64>] (vfs_read) from [<805759b8>] (ksys_read+0x74/0xec) [ 3581.313293][T30450] r10:00000003 r9:84f4b000 r8:8020029c r7:00000000 r6:00000000 r5:85fe2480 [ 3581.313302][T30450] r4:85fe2483 [ 3581.313313][T30450] [<80575944>] (ksys_read) from [<80575a40>] (sys_read+0x10/0x14) [ 3581.313342][T30450] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3581.313364][T30450] [<80575a30>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3581.313390][T30450] Exception stack(0xead19fa8 to 0xead19ff0) [ 3581.313411][T30450] 9fa0: 00000000 00000000 00000004 76f83f08 0000000f 00000000 [ 3581.313428][T30450] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f840dc [ 3581.313441][T30450] 9fe0: 76f83e58 76f83e44 0010b504 001120e8 [ 3586.671313][T30475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5138 sclass=netlink_tcpdiag_socket pid=30475 comm=syz.0.7501 [ 3590.455334][T30489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5138 sclass=netlink_tcpdiag_socket pid=30489 comm=syz.1.7506 [ 3596.531216][T30515] nbd: must specify a size in bytes for the device [ 3612.350616][T30580] fuse: Bad value for 'fd' [ 3613.229656][T30586] FAULT_INJECTION: forcing a failure. [ 3613.229656][T30586] name failslab, interval 1, probability 0, space 0, times 0 [ 3613.230188][T30586] CPU: 1 UID: 0 PID: 30586 Comm: syz.1.7541 Tainted: G L syzkaller #0 PREEMPT [ 3613.230288][T30586] Tainted: [L]=SOFTLOCKUP [ 3613.230313][T30586] Hardware name: ARM-Versatile Express [ 3613.230340][T30586] Call trace: [ 3613.230422][T30586] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3613.230537][T30586] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3613.230558][T30586] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3613.230616][T30586] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3613.230681][T30586] r7:00000000 r6:00000000 r5:8470d400 r4:82919410 [ 3613.230701][T30586] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3613.230779][T30586] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3613.230855][T30586] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000021 [ 3613.230879][T30586] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3613.230935][T30586] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3613.231010][T30586] r10:00000fff r9:83180c00 r8:00000000 r7:83417908 r6:85fe6868 r5:84f63ffc [ 3613.231035][T30586] r4:84f63fe6 [ 3613.231054][T30586] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3613.231123][T30586] r9:83180c00 r8:00000000 r7:83417908 r6:85fe6868 r5:00001000 r4:84f63fe7 [ 3613.231144][T30586] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3613.231203][T30586] r5:00001000 r4:84f63000 [ 3613.231222][T30586] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3613.231323][T30586] r10:00000000 r9:00000003 r8:85fe6840 r7:00005451 r6:81cd9ee4 r5:00000004 [ 3613.231418][T30586] r4:85fe6868 r3:826ca380 [ 3613.231465][T30586] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3613.231547][T30586] r10:8470d400 r9:00000003 r8:85fe6840 r7:00000000 r6:00000000 r5:00005451 [ 3613.231573][T30586] r4:85fe6840 [ 3613.231619][T30586] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3613.231685][T30586] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3613.231745][T30586] r7:00000000 r6:00005451 r5:85fe6841 r4:00000000 [ 3613.231764][T30586] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3613.231853][T30586] Exception stack(0xeb165fa8 to 0xeb165ff0) [ 3613.231891][T30586] 5fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 3613.231923][T30586] 5fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3613.231950][T30586] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3613.231987][T30586] r10:00000036 r9:8470d400 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3613.232008][T30586] r4:00000000 [ 3613.255490][T30586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3614.160288][T30591] fuse: Bad value for 'fd' [ 3615.950490][T30602] fuse: Bad value for 'fd' [ 3620.005476][T30627] FAULT_INJECTION: forcing a failure. [ 3620.005476][T30627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3620.010803][T30627] CPU: 0 UID: 0 PID: 30627 Comm: syz.0.7560 Tainted: G L syzkaller #0 PREEMPT [ 3620.010958][T30627] Tainted: [L]=SOFTLOCKUP [ 3620.010980][T30627] Hardware name: ARM-Versatile Express [ 3620.011086][T30627] Call trace: [ 3620.011139][T30627] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3620.011276][T30627] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3620.011299][T30627] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3620.011352][T30627] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3620.011446][T30627] r7:00000000 r6:00000000 r5:84ffbc00 r4:8295129c [ 3620.011466][T30627] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3620.011523][T30627] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3620.011579][T30627] r8:76f83f08 r7:00000000 r6:00000000 r5:f2585f68 r4:00000002 [ 3620.011597][T30627] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3620.011646][T30627] [<809bbfe4>] (should_fail_usercopy) from [<805b24e4>] (simple_read_from_buffer+0x80/0x140) [ 3620.011702][T30627] [<805b2464>] (simple_read_from_buffer) from [<80636168>] (proc_fail_nth_read+0xb8/0x108) [ 3620.011834][T30627] r10:806360b0 r9:00000001 r8:00000002 r7:f2585f68 r6:0000000f r5:76f83f08 [ 3620.011858][T30627] r4:84ffbc00 r3:f2585e9f [ 3620.011874][T30627] [<806360b0>] (proc_fail_nth_read) from [<80574d24>] (vfs_read+0xc0/0x328) [ 3620.011942][T30627] r8:84ffbc00 r7:f2585f68 r6:76f83f08 r5:85feef00 r4:0000000f [ 3620.011964][T30627] [<80574c64>] (vfs_read) from [<805759b8>] (ksys_read+0x74/0xec) [ 3620.012024][T30627] r10:00000003 r9:84ffbc00 r8:8020029c r7:00000000 r6:00000000 r5:85feef00 [ 3620.012043][T30627] r4:85feef03 [ 3620.012061][T30627] [<80575944>] (ksys_read) from [<80575a40>] (sys_read+0x10/0x14) [ 3620.012153][T30627] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3620.012175][T30627] [<80575a30>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3620.012228][T30627] Exception stack(0xf2585fa8 to 0xf2585ff0) [ 3620.012273][T30627] 5fa0: 00000000 00000000 00000005 76f83f08 0000000f 00000000 [ 3620.012309][T30627] 5fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f840dc [ 3620.012336][T30627] 5fe0: 76f83e58 76f83e44 0010b504 001120e8 [ 3631.052514][ T28] audit: type=1326 audit(3630.970:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30696 comm="syz.0.7585" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 3631.763285][ T28] audit: type=1400 audit(3631.680:689): avc: denied { watch } for pid=30699 comm="syz.0.7586" path="/236/file0" dev="tmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3633.057924][ T28] audit: type=1400 audit(3632.940:690): avc: denied { setattr } for pid=30707 comm="syz.1.7590" name="ns" dev="proc" ino=83690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3633.830776][ T28] audit: type=1326 audit(3633.750:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30713 comm="syz.0.7591" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 3636.453653][ T28] audit: type=1400 audit(3636.370:692): avc: denied { watch_reads } for pid=30737 comm="syz.1.7603" path="/158/file0" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3637.412525][ T28] audit: type=1400 audit(3637.330:693): avc: denied { name_bind 0x1000000 } for pid=30743 comm="syz.0.7606" path="socket:[84393]" dev="sockfs" ino=84393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3670.455117][ T28] audit: type=1400 audit(3670.370:694): avc: denied { read } for pid=30863 comm="syz.0.7645" path="socket:[83940]" dev="sockfs" ino=83940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3672.923743][T30877] FAULT_INJECTION: forcing a failure. [ 3672.923743][T30877] name failslab, interval 1, probability 0, space 0, times 0 [ 3672.938079][T30877] CPU: 0 UID: 0 PID: 30877 Comm: syz.0.7650 Tainted: G L syzkaller #0 PREEMPT [ 3672.938191][T30877] Tainted: [L]=SOFTLOCKUP [ 3672.938203][T30877] Hardware name: ARM-Versatile Express [ 3672.938226][T30877] Call trace: [ 3672.938278][T30877] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3672.938436][T30877] r7:60000113 r6:60000113 r5:822a7c18 r4:00000000 [ 3672.938478][T30877] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3672.938534][T30877] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3672.938598][T30877] r7:00000000 r6:00000000 r5:84fd3000 r4:82919410 [ 3672.938607][T30877] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3672.938696][T30877] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3672.938755][T30877] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000021 [ 3672.938765][T30877] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3672.938815][T30877] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3672.938888][T30877] r10:00000fff r9:83180c00 r8:00000000 r7:8342bee0 r6:85fefda8 r5:83facffc [ 3672.938954][T30877] r4:83facfe6 [ 3672.938966][T30877] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3672.939001][T30877] r9:83180c00 r8:00000000 r7:8342bee0 r6:85fefda8 r5:00001000 r4:83facfe7 [ 3672.939010][T30877] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3672.939084][T30877] r5:00001000 r4:83fac000 [ 3672.939102][T30877] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3672.939176][T30877] r10:00000000 r9:00000003 r8:85fefd80 r7:4004510f r6:81cd9ee4 r5:00000004 [ 3672.939188][T30877] r4:85fefda8 r3:826ca380 [ 3672.939197][T30877] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3672.939282][T30877] r10:84fd3000 r9:00000003 r8:85fefd80 r7:2000b840 r6:2000b840 r5:4004510f [ 3672.939304][T30877] r4:85fefd80 [ 3672.939319][T30877] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3672.939349][T30877] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3672.939379][T30877] r7:2000b840 r6:4004510f r5:85fefd81 r4:00000000 [ 3672.939388][T30877] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3672.939435][T30877] Exception stack(0xdfb51fa8 to 0xdfb51ff0) [ 3672.939502][T30877] 1fa0: 00000000 00000000 00000003 4004510f 2000b840 00000000 [ 3672.939523][T30877] 1fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f840dc [ 3672.939536][T30877] 1fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3672.939554][T30877] r10:00000036 r9:84fd3000 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3672.939564][T30877] r4:00000000 [ 3673.063953][T30877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3681.894928][T30894] FAULT_INJECTION: forcing a failure. [ 3681.894928][T30894] name failslab, interval 1, probability 0, space 0, times 0 [ 3681.895399][T30894] CPU: 1 UID: 0 PID: 30894 Comm: syz.1.7654 Tainted: G L syzkaller #0 PREEMPT [ 3681.895484][T30894] Tainted: [L]=SOFTLOCKUP [ 3681.895503][T30894] Hardware name: ARM-Versatile Express [ 3681.895525][T30894] Call trace: [ 3681.895568][T30894] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3681.895747][T30894] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3681.895798][T30894] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3681.895868][T30894] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3681.896004][T30894] r7:00000cc0 r6:00000000 r5:8406ec00 r4:82919410 [ 3681.896065][T30894] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3681.896162][T30894] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3681.896236][T30894] r8:82805d00 r7:00000cc0 r6:00000000 r5:00000000 r4:83018d80 [ 3681.896258][T30894] [<8054398c>] (should_failslab) from [<8052246c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 3681.896385][T30894] [<80522418>] (kmem_cache_alloc_noprof) from [<805775cc>] (alloc_empty_file+0x54/0x13c) [ 3681.896494][T30894] r10:8406ec00 r9:00000003 r8:82805d00 r7:8417f300 r6:00000000 r5:8291c5cc [ 3681.896518][T30894] r4:824ad8a0 [ 3681.896532][T30894] [<80577578>] (alloc_empty_file) from [<8057187c>] (dentry_open+0x28/0x68) [ 3681.896620][T30894] r8:855f8780 r7:85db0000 r6:8406ec00 r5:e83f9e84 r4:00000005 [ 3681.896737][T30894] [<80571854>] (dentry_open) from [<805c8f64>] (open_namespace+0x70/0xd4) [ 3681.896814][T30894] r5:00000000 r4:00000005 [ 3681.896924][T30894] [<805c8ef4>] (open_namespace) from [<805c8fe4>] (open_related_ns+0x1c/0x20) [ 3681.897065][T30894] r6:00000000 r5:837d8f00 r4:0000894c [ 3681.897127][T30894] [<805c8fc8>] (open_related_ns) from [<815c4684>] (sock_ioctl+0x350/0x4c0) [ 3681.897259][T30894] [<815c4334>] (sock_ioctl) from [<80590510>] (sys_ioctl+0x244/0xb5c) [ 3681.897534][T30894] r9:00000003 r8:855f8780 r7:00000000 r6:0000894c r5:855f8781 r4:00000000 [ 3681.897559][T30894] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3681.897603][T30894] Exception stack(0xe83f9fa8 to 0xe83f9ff0) [ 3681.897636][T30894] 9fa0: 00000000 00000000 00000003 0000894c 00000000 00000000 [ 3681.897667][T30894] 9fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3681.897691][T30894] 9fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3681.897722][T30894] r10:00000036 r9:8406ec00 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3681.897740][T30894] r4:00000000 [ 3690.435274][T30926] FAULT_INJECTION: forcing a failure. [ 3690.435274][T30926] name failslab, interval 1, probability 0, space 0, times 0 [ 3690.439147][T30926] CPU: 1 UID: 0 PID: 30926 Comm: syz.0.7664 Tainted: G L syzkaller #0 PREEMPT [ 3690.439308][T30926] Tainted: [L]=SOFTLOCKUP [ 3690.439331][T30926] Hardware name: ARM-Versatile Express [ 3690.439431][T30926] Call trace: [ 3690.439486][T30926] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3690.439607][T30926] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3690.439628][T30926] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3690.439685][T30926] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3690.439757][T30926] r7:00000cc0 r6:00000000 r5:83174800 r4:82919410 [ 3690.439778][T30926] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3690.439836][T30926] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3690.439904][T30926] r8:824ad8b0 r7:00000cc0 r6:00000000 r5:00000000 r4:83018c00 [ 3690.439924][T30926] [<8054398c>] (should_failslab) from [<8052246c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 3690.439978][T30926] [<80522418>] (kmem_cache_alloc_noprof) from [<8058432c>] (do_getname_kernel+0x38/0xe4) [ 3690.440048][T30926] r10:00000000 r9:85ec26c0 r8:824ad8b0 r7:00000000 r6:85f94580 r5:0000000b [ 3690.440072][T30926] r4:ea479e58 [ 3690.440090][T30926] [<805842f4>] (do_getname_kernel) from [<8058a490>] (kern_path+0x20/0x5c) [ 3690.440158][T30926] r9:85ec26c0 r8:85615640 r7:822f6a54 r6:ea479d74 r5:00000001 r4:ea479e58 [ 3690.440179][T30926] [<8058a470>] (kern_path) from [<807f9adc>] (tomoyo_mount_acl+0x2d8/0x388) [ 3690.440242][T30926] r6:85f94580 r5:00000000 r4:ea479e58 [ 3690.440262][T30926] [<807f9804>] (tomoyo_mount_acl) from [<807f9c74>] (tomoyo_mount_permission+0xe8/0x208) [ 3690.440327][T30926] r10:83174800 r9:807fbce8 r8:822f6a54 r7:ea479f6c r6:85f94580 r5:00000000 [ 3690.440348][T30926] r4:00000000 [ 3690.440365][T30926] [<807f9b8c>] (tomoyo_mount_permission) from [<807fbd04>] (tomoyo_sb_mount+0x1c/0x24) [ 3690.440427][T30926] r8:00000000 r7:00001000 r6:00000000 r5:ea479f6c r4:85f94580 [ 3690.440447][T30926] [<807fbce8>] (tomoyo_sb_mount) from [<807b10c8>] (security_sb_mount+0xa4/0x238) [ 3690.440506][T30926] [<807b1024>] (security_sb_mount) from [<805a948c>] (path_mount+0x78/0xb60) [ 3690.440575][T30926] r9:00000000 r8:00000000 r7:85f94580 r6:ea479f6c r5:00001000 r4:00000000 [ 3690.440595][T30926] [<805a9414>] (path_mount) from [<805aa5ac>] (sys_mount+0x1dc/0x260) [ 3690.440664][T30926] r10:00000015 r9:83174800 r8:00000000 r7:85f94580 r6:00000000 r5:00000000 [ 3690.440688][T30926] r4:00000000 [ 3690.440705][T30926] [<805aa3d0>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3690.440765][T30926] Exception stack(0xea479fa8 to 0xea479ff0) [ 3690.440806][T30926] 9fa0: 00000000 00000000 20000380 20000140 00000000 00001000 [ 3690.440842][T30926] 9fc0: 00000000 00000000 0012ece4 00000015 003462d8 00000000 00000001 76f840dc [ 3690.440872][T30926] 9fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3690.440908][T30926] r10:00000015 r9:83174800 r8:8020029c r7:00000015 r6:0012ece4 r5:00000000 [ 3690.440929][T30926] r4:00000000 [ 3693.855204][T30944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30944 comm=syz.1.7669 [ 3710.418189][T31012] syz.0.7696(31012): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 3715.589920][T31022] FAULT_INJECTION: forcing a failure. [ 3715.589920][T31022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3715.590377][T31022] CPU: 1 UID: 0 PID: 31022 Comm: syz.0.7700 Tainted: G L syzkaller #0 PREEMPT [ 3715.590512][T31022] Tainted: [L]=SOFTLOCKUP [ 3715.590536][T31022] Hardware name: ARM-Versatile Express [ 3715.590562][T31022] Call trace: [ 3715.590611][T31022] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3715.590792][T31022] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3715.590890][T31022] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3715.591008][T31022] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3715.591103][T31022] r7:20000200 r6:00000000 r5:83e3c800 r4:8295129c [ 3715.591146][T31022] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3715.591333][T31022] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3715.591571][T31022] r8:00004000 r7:20000200 r6:ea5e1e28 r5:00000000 r4:ea5e1f20 [ 3715.591842][T31022] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3715.592040][T31022] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 3715.592171][T31022] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 3715.592456][T31022] r8:00004000 r7:00000000 r6:85344000 r5:ea5e1f20 r4:ea5e1e6c [ 3715.592664][T31022] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3715.592822][T31022] r9:83e3c800 r8:85feed80 r7:00004000 r6:20000200 r5:85feed81 r4:00000003 [ 3715.593503][T31022] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3715.593865][T31022] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3715.593888][T31022] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3715.594051][T31022] Exception stack(0xea5e1fa8 to 0xea5e1ff0) [ 3715.594262][T31022] 1fa0: 00000000 00000000 00000003 20000200 00004000 00000000 [ 3715.594476][T31022] 1fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f840dc [ 3715.594513][T31022] 1fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3719.319709][T31034] FAULT_INJECTION: forcing a failure. [ 3719.319709][T31034] name failslab, interval 1, probability 0, space 0, times 0 [ 3719.320257][T31034] CPU: 1 UID: 0 PID: 31034 Comm: syz.1.7705 Tainted: G L syzkaller #0 PREEMPT [ 3719.320357][T31034] Tainted: [L]=SOFTLOCKUP [ 3719.320378][T31034] Hardware name: ARM-Versatile Express [ 3719.320409][T31034] Call trace: [ 3719.320455][T31034] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3719.320572][T31034] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3719.320594][T31034] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3719.320781][T31034] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3719.320989][T31034] r7:00000000 r6:00000000 r5:84f3b000 r4:82919410 [ 3719.321140][T31034] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3719.321281][T31034] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3719.321530][T31034] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 3719.321691][T31034] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3719.321814][T31034] [<80523320>] (__kmalloc_noprof) from [<807fb330>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3719.321915][T31034] r10:00000000 r9:83180c00 r8:00000000 r7:834e6198 r6:85ff2ce8 r5:00001000 [ 3719.322076][T31034] r4:00000000 [ 3719.322133][T31034] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3719.322245][T31034] r10:00000000 r9:00000003 r8:85ff2cc0 r7:00005452 r6:81cd9ee4 r5:00000004 [ 3719.322521][T31034] r4:85ff2ce8 r3:826ca380 [ 3719.322618][T31034] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3719.322841][T31034] r10:84f3b000 r9:00000003 r8:85ff2cc0 r7:20000200 r6:20000200 r5:00005452 [ 3719.323047][T31034] r4:85ff2cc0 [ 3719.323074][T31034] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3719.323304][T31034] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3719.323471][T31034] r7:20000200 r6:00005452 r5:85ff2cc1 r4:00000000 [ 3719.323535][T31034] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3719.323670][T31034] Exception stack(0xeaac5fa8 to 0xeaac5ff0) [ 3719.323718][T31034] 5fa0: 00000000 00000000 00000003 00005452 20000200 00000000 [ 3719.323794][T31034] 5fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3719.323836][T31034] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3719.323891][T31034] r10:00000036 r9:84f3b000 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3719.323949][T31034] r4:00000000 [ 3719.324343][T31034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3725.636206][T31084] fuse: Invalid rootmode [ 3729.423097][T31095] FAULT_INJECTION: forcing a failure. [ 3729.423097][T31095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3729.423556][T31095] CPU: 1 UID: 0 PID: 31095 Comm: syz.1.7728 Tainted: G L syzkaller #0 PREEMPT [ 3729.423732][T31095] Tainted: [L]=SOFTLOCKUP [ 3729.423791][T31095] Hardware name: ARM-Versatile Express [ 3729.423826][T31095] Call trace: [ 3729.423934][T31095] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3729.424056][T31095] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3729.424080][T31095] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3729.424140][T31095] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3729.424304][T31095] r7:000000ad r6:00000000 r5:8540a400 r4:8295129c [ 3729.424495][T31095] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3729.424670][T31095] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3729.424903][T31095] r8:00000000 r7:000000ad r6:0012ece4 r5:76fafb00 r4:76fafb88 [ 3729.424960][T31095] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3729.425252][T31095] [<809bbfe4>] (should_fail_usercopy) from [<8026a5b4>] (restore_altstack+0x38/0xfc) [ 3729.425416][T31095] [<8026a57c>] (restore_altstack) from [<8022a534>] (sys_rt_sigreturn+0x64/0x74) [ 3729.425525][T31095] r5:76fafb00 r4:eade1fb0 [ 3729.425546][T31095] [<8022a4d0>] (sys_rt_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3729.425729][T31095] Exception stack(0xeade1fa8 to 0xeade1ff0) [ 3729.425841][T31095] 1fa0: 00000000 00000000 00000003 20000280 04040080 00000000 [ 3729.425915][T31095] 1fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76fb00dc [ 3729.426076][T31095] 1fe0: 76fafe88 76fafe78 00018ba0 001302dc [ 3729.426145][T31095] r5:00000000 r4:00000000 [ 3730.016705][T31098] fuse: Bad value for 'rootmode' [ 3732.013302][T31112] fuse: Bad value for 'rootmode' [ 3733.108823][T31118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31118 comm=syz.1.7736 [ 3735.851250][T31127] fuse: Bad value for 'rootmode' [ 3737.529441][T31134] FAULT_INJECTION: forcing a failure. [ 3737.529441][T31134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3737.529706][T31134] CPU: 1 UID: 0 PID: 31134 Comm: syz.1.7742 Tainted: G L syzkaller #0 PREEMPT [ 3737.529764][T31134] Tainted: [L]=SOFTLOCKUP [ 3737.529775][T31134] Hardware name: ARM-Versatile Express [ 3737.529788][T31134] Call trace: [ 3737.529813][T31134] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3737.529877][T31134] r7:60000113 r6:60000113 r5:822a7c18 r4:00000000 [ 3737.529888][T31134] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3737.529916][T31134] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3737.529947][T31134] r7:20000440 r6:00000000 r5:84068c00 r4:8295129c [ 3737.529956][T31134] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3737.530031][T31134] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3737.530138][T31134] r8:df9f9d94 r7:20000440 r6:000001bf r5:00000027 r4:00000000 [ 3737.530203][T31134] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3737.530285][T31134] [<809bbfe4>] (should_fail_usercopy) from [<808f6424>] (_copy_from_iter+0x1e4/0x7c4) [ 3737.530363][T31134] [<808f6240>] (_copy_from_iter) from [<8199f048>] (isotp_sendmsg+0x268/0x86c) [ 3737.530550][T31134] r10:00000000 r9:86340000 r8:df9f9e90 r7:000001e6 r6:00000000 r5:86342000 [ 3737.530607][T31134] r4:000001e6 [ 3737.530663][T31134] [<8199ede0>] (isotp_sendmsg) from [<815c2a54>] (__sock_sendmsg+0x44/0x78) [ 3737.530766][T31134] r10:04040010 r9:b5403587 r8:df9f9d24 r7:00000020 r6:837e4c80 r5:df9f9e90 [ 3737.530845][T31134] r4:00000000 [ 3737.530934][T31134] [<815c2a10>] (__sock_sendmsg) from [<815c3794>] (____sys_sendmsg+0xb8/0x2c4) [ 3737.531116][T31134] r7:00000020 r6:df9f9ed8 r5:837e4c80 r4:df9f9e90 [ 3737.531222][T31134] [<815c36dc>] (____sys_sendmsg) from [<815c3d14>] (___sys_sendmsg+0x9c/0xd0) [ 3737.531263][T31134] r10:04040010 r9:20000f40 r8:04040010 r7:df9f9ed8 r6:837e4c80 r5:df9f9e90 [ 3737.531310][T31134] r4:00000000 [ 3737.531319][T31134] [<815c3c78>] (___sys_sendmsg) from [<815c5edc>] (__sys_sendmmsg+0xf4/0x1d0) [ 3737.531407][T31134] r9:00000002 r8:00000003 r7:df9f9ed8 r6:04000010 r5:00000000 r4:20000f40 [ 3737.531538][T31134] [<815c5de8>] (__sys_sendmmsg) from [<815c5fd4>] (sys_sendmmsg+0x1c/0x24) [ 3737.531610][T31134] r10:00000176 r9:84068c00 r8:8020029c r7:00000176 r6:0012ece4 r5:00000000 [ 3737.531635][T31134] r4:00000000 [ 3737.531643][T31134] [<815c5fb8>] (sys_sendmmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3737.531667][T31134] Exception stack(0xdf9f9fa8 to 0xdf9f9ff0) [ 3737.531689][T31134] 9fa0: 00000000 00000000 00000003 20000f40 00000003 04000010 [ 3737.531740][T31134] 9fc0: 00000000 00000000 0012ece4 00000176 00346378 00000000 003d0f00 76f8f0dc [ 3737.531859][T31134] 9fe0: 76f8ee88 76f8ee78 00018ba0 001302e0 [ 3737.704405][T31138] fuse: Unknown parameter 'use00000000000000000000' [ 3737.913756][T31140] FAULT_INJECTION: forcing a failure. [ 3737.913756][T31140] name failslab, interval 1, probability 0, space 0, times 0 [ 3737.914379][T31140] CPU: 1 UID: 0 PID: 31140 Comm: syz.1.7745 Tainted: G L syzkaller #0 PREEMPT [ 3737.914515][T31140] Tainted: [L]=SOFTLOCKUP [ 3737.914540][T31140] Hardware name: ARM-Versatile Express [ 3737.914567][T31140] Call trace: [ 3737.914623][T31140] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3737.914745][T31140] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3737.914769][T31140] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3737.914849][T31140] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3737.915056][T31140] r7:00000000 r6:00000000 r5:84068c00 r4:82919410 [ 3737.915294][T31140] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3737.915375][T31140] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3737.915531][T31140] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 3737.915654][T31140] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3737.915800][T31140] [<80523320>] (__kmalloc_noprof) from [<807fb330>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3737.915990][T31140] r10:00000000 r9:83180c00 r8:00000000 r7:8340a880 r6:8335dda8 r5:00001000 [ 3737.916019][T31140] r4:00000000 [ 3737.916039][T31140] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3737.916277][T31140] r10:00000000 r9:00000003 r8:8335dd80 r7:00005451 r6:81cd9ee4 r5:00000004 [ 3737.916636][T31140] r4:8335dda8 r3:826ca380 [ 3737.916690][T31140] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3737.917534][T31140] r10:84068c00 r9:00000003 r8:8335dd80 r7:00000000 r6:00000000 r5:00005451 [ 3737.917570][T31140] r4:8335dd80 [ 3737.917641][T31140] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3737.917754][T31140] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3737.917845][T31140] r7:00000000 r6:00005451 r5:8335dd81 r4:00000000 [ 3737.917868][T31140] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3737.917921][T31140] Exception stack(0xead25fa8 to 0xead25ff0) [ 3737.917963][T31140] 5fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 3737.918003][T31140] 5fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3737.918038][T31140] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3737.918078][T31140] r10:00000036 r9:84068c00 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3737.918099][T31140] r4:00000000 [ 3737.972056][T31140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3739.678653][T31153] fuse: Unknown parameter 'use00000000000000000000' [ 3740.049740][T31155] FAULT_INJECTION: forcing a failure. [ 3740.049740][T31155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3740.309201][T31155] CPU: 1 UID: 0 PID: 31155 Comm: syz.1.7750 Tainted: G L syzkaller #0 PREEMPT [ 3740.313546][T31155] Tainted: [L]=SOFTLOCKUP [ 3740.316367][T31155] Hardware name: ARM-Versatile Express [ 3740.317288][T31155] Call trace: [ 3740.317357][T31155] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3740.317497][T31155] r7:60000113 r6:60000113 r5:822a7c18 r4:00000000 [ 3740.317521][T31155] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3740.317581][T31155] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3740.317646][T31155] r7:20000100 r6:00000000 r5:833b0000 r4:8295129c [ 3740.317670][T31155] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3740.317831][T31155] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3740.317902][T31155] r8:00000000 r7:20000100 r6:dfa8de28 r5:00000000 r4:dfa8df20 [ 3740.317922][T31155] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3740.317972][T31155] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 3740.318034][T31155] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 3740.318102][T31155] r8:00000000 r7:00000000 r6:837cb400 r5:dfa8df20 r4:dfa8de6c [ 3740.318123][T31155] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3740.318200][T31155] r9:833b0000 r8:85ff5000 r7:00000000 r6:20000100 r5:85ff5001 r4:00000003 [ 3740.318222][T31155] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3740.318293][T31155] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3740.318340][T31155] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3740.318421][T31155] Exception stack(0xdfa8dfa8 to 0xdfa8dff0) [ 3740.318468][T31155] dfa0: 00000000 00000000 00000003 20000100 00000000 00000000 [ 3740.318509][T31155] dfc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76fb00dc [ 3740.318540][T31155] dfe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3741.420382][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 3742.026196][T31160] FAULT_INJECTION: forcing a failure. [ 3742.026196][T31160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3742.026705][T31160] CPU: 1 UID: 0 PID: 31160 Comm: syz.1.7752 Tainted: G L syzkaller #0 PREEMPT [ 3742.026795][T31160] Tainted: [L]=SOFTLOCKUP [ 3742.026819][T31160] Hardware name: ARM-Versatile Express [ 3742.026841][T31160] Call trace: [ 3742.026884][T31160] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3742.026988][T31160] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3742.027009][T31160] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3742.027278][T31160] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3742.027349][T31160] r7:20000140 r6:00000000 r5:8540d400 r4:8295129c [ 3742.027369][T31160] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3742.027544][T31160] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3742.027651][T31160] r8:20000080 r7:20000140 r6:eaee1e28 r5:00000000 r4:eaee1f20 [ 3742.027780][T31160] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3742.028003][T31160] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 3742.028079][T31160] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 3742.028148][T31160] r8:20000080 r7:00000000 r6:837e4c80 r5:eaee1f20 r4:eaee1e6c [ 3742.028169][T31160] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3742.028240][T31160] r9:8540d400 r8:85fedf00 r7:20000080 r6:20000140 r5:85fedf01 r4:00000003 [ 3742.028260][T31160] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3742.028409][T31160] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3742.028436][T31160] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3742.028488][T31160] Exception stack(0xeaee1fa8 to 0xeaee1ff0) [ 3742.028532][T31160] 1fa0: 00000000 00000000 00000003 20000140 20000080 00000000 [ 3742.028575][T31160] 1fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76fb00dc [ 3742.028660][T31160] 1fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3743.880513][T31167] fuse: Unknown parameter 'use00000000000000000000' [ 3747.060567][ T28] audit: type=1400 audit(3746.980:695): avc: granted { setsecparam } for pid=31176 comm="syz.0.7756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3747.237962][ T28] audit: type=1400 audit(3747.150:696): avc: denied { create } for pid=31178 comm="syz.0.7757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 3747.800858][T31191] fuse: Unknown parameter 'user_i00000000000000000000' [ 3749.441822][T31205] fuse: Unknown parameter 'user_i00000000000000000000' [ 3749.903226][T31211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31211 comm=syz.1.7766 [ 3750.300207][T31213] FAULT_INJECTION: forcing a failure. [ 3750.300207][T31213] name failslab, interval 1, probability 0, space 0, times 0 [ 3750.309632][T31213] CPU: 1 UID: 0 PID: 31213 Comm: syz.1.7767 Tainted: G L syzkaller #0 PREEMPT [ 3750.309760][T31213] Tainted: [L]=SOFTLOCKUP [ 3750.309785][T31213] Hardware name: ARM-Versatile Express [ 3750.309812][T31213] Call trace: [ 3750.309856][T31213] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3750.310033][T31213] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3750.310306][T31213] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3750.310822][T31213] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3750.311038][T31213] r7:00000000 r6:00000000 r5:84fe1800 r4:82919410 [ 3750.311210][T31213] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3750.311353][T31213] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3750.311427][T31213] r8:ffffffff r7:00000000 r6:83001a80 r5:00400cc0 r4:0000000d [ 3750.311447][T31213] [<8054398c>] (should_failslab) from [<805239dc>] (__kmalloc_node_track_caller_noprof+0xa8/0x3bc) [ 3750.311649][T31213] [<80523934>] (__kmalloc_node_track_caller_noprof) from [<804b3b5c>] (kstrdup+0x3c/0x60) [ 3750.311908][T31213] r10:00000001 r9:8583a000 r8:830f0c30 r7:dfa71e54 r6:805b0d8c r5:0000000c [ 3750.312001][T31213] r4:00400cc0 [ 3750.312139][T31213] [<804b3b20>] (kstrdup) from [<805b0d8c>] (simple_xattr_set+0x40/0x188) [ 3750.312307][T31213] r7:8405a428 r6:84666000 r5:dfa71e54 r4:dfa71e54 [ 3750.312372][T31213] [<805b0d4c>] (simple_xattr_set) from [<804ab534>] (shmem_xattr_handler_set+0x194/0x1a8) [ 3750.312680][T31213] r9:8583a000 r8:830f0c30 r7:0000103d r6:830f0c00 r5:8405a448 r4:dfa71e54 [ 3750.312704][T31213] [<804ab3a0>] (shmem_xattr_handler_set) from [<805aef1c>] (__vfs_setxattr+0xb4/0xc8) [ 3750.312896][T31213] r9:804ab3a0 r8:00001009 r7:8583a000 r6:83418110 r5:82920534 r4:8405a448 [ 3750.312948][T31213] [<805aee68>] (__vfs_setxattr) from [<805af950>] (__vfs_setxattr_noperm+0x7c/0x204) [ 3750.313055][T31213] r9:82920534 r8:8583a000 r7:8405a448 r6:00000000 r5:dfa71e54 r4:83418110 [ 3750.313169][T31213] [<805af8d4>] (__vfs_setxattr_noperm) from [<805afb7c>] (__vfs_setxattr_locked+0xa4/0x12c) [ 3750.313290][T31213] r10:dfa71db8 r9:00000000 r8:8405a448 r7:8583a000 r6:dfa71e54 r5:82920534 [ 3750.313507][T31213] r4:83418110 [ 3750.313758][T31213] [<805afad8>] (__vfs_setxattr_locked) from [<805afca4>] (vfs_setxattr+0xa0/0x180) [ 3750.313871][T31213] r8:00001009 r7:8583a000 r6:83418110 r5:8405a4c8 r4:dfa71e40 [ 3750.313891][T31213] [<805afc04>] (vfs_setxattr) from [<805afe18>] (do_setxattr+0x94/0x9c) [ 3750.314002][T31213] r10:00000001 r9:83418110 r8:82920534 r7:8583a000 r6:00001009 r5:dfa71e54 [ 3750.314242][T31213] r4:dfa71e40 [ 3750.314290][T31213] [<805afd84>] (do_setxattr) from [<805b0054>] (file_setxattr+0x58/0x78) [ 3750.314430][T31213] r9:20001580 r8:00000003 r7:855f76c1 r6:dfa71e40 r5:855f76c0 r4:00000000 [ 3750.314574][T31213] [<805afffc>] (file_setxattr) from [<805b02b4>] (path_setxattrat+0x168/0x1bc) [ 3750.314850][T31213] r7:855f76c1 r6:855f76c0 r5:8583a000 r4:0000000c [ 3750.315028][T31213] [<805b014c>] (path_setxattrat) from [<805b0508>] (sys_fsetxattr+0x30/0x38) [ 3750.315162][T31213] r10:000000e4 r9:84fe1800 r8:8020029c r7:000000e4 r6:0012ece4 r5:00000000 [ 3750.315274][T31213] r4:00000001 [ 3750.315294][T31213] [<805b04d8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3750.315547][T31213] Exception stack(0xdfa71fa8 to 0xdfa71ff0) [ 3750.316044][T31213] 1fa0: 00000001 00000000 00000003 20001540 20001580 00001009 [ 3750.316269][T31213] 1fc0: 00000001 00000000 0012ece4 000000e4 003462d8 00000000 00000001 76fb00dc [ 3750.316306][T31213] 1fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3750.677850][T31215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31215 comm=syz.1.7768 [ 3750.814003][T31217] fuse: Unknown parameter 'user_i00000000000000000000' [ 3752.268730][T31228] fuse: Unknown parameter 'user_id00000000000000000000' [ 3756.554579][T31241] fuse: Unknown parameter 'user_id00000000000000000000' [ 3757.589897][T31245] nbd: must specify an index to disconnect [ 3757.629176][T31245] FAULT_INJECTION: forcing a failure. [ 3757.629176][T31245] name failslab, interval 1, probability 0, space 0, times 0 [ 3757.629820][T31245] CPU: 1 UID: 0 PID: 31245 Comm: syz.0.7781 Tainted: G L syzkaller #0 PREEMPT [ 3757.629901][T31245] Tainted: [L]=SOFTLOCKUP [ 3757.629971][T31245] Hardware name: ARM-Versatile Express [ 3757.629998][T31245] Call trace: [ 3757.630058][T31245] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3757.630161][T31245] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3757.630177][T31245] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3757.630224][T31245] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3757.630278][T31245] r7:00000010 r6:00000000 r5:8540b000 r4:82919410 [ 3757.630293][T31245] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3757.630343][T31245] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3757.630430][T31245] r8:8540b000 r7:00000010 r6:00000cc0 r5:00000000 r4:830d5900 [ 3757.630449][T31245] [<8054398c>] (should_failslab) from [<8052282c>] (kmem_cache_alloc_lru_noprof+0x58/0x3c8) [ 3757.630494][T31245] [<805227d4>] (kmem_cache_alloc_lru_noprof) from [<815c1f24>] (sock_alloc_inode+0x24/0x74) [ 3757.630558][T31245] r10:00000119 r9:85db30c0 r8:8020029c r7:00000010 r6:81e56840 r5:83830c00 [ 3757.630579][T31245] r4:00000010 [ 3757.630592][T31245] [<815c1f00>] (sock_alloc_inode) from [<8059d7f4>] (alloc_inode+0x24/0xd0) [ 3757.630677][T31245] r5:83830c00 r4:00000010 [ 3757.630704][T31245] [<8059d7d0>] (alloc_inode) from [<815c18b0>] (sock_alloc+0x20/0x70) [ 3757.630765][T31245] r7:00000010 r6:00000000 r5:00000003 r4:00000010 [ 3757.630787][T31245] [<815c1890>] (sock_alloc) from [<815c1aac>] (__sock_create+0x80/0x22c) [ 3757.630839][T31245] r5:00000003 r4:00000010 [ 3757.630853][T31245] [<815c1a2c>] (__sock_create) from [<815c4950>] (__sys_socket+0x94/0x118) [ 3757.630915][T31245] r10:00000119 r9:8540b000 r8:8020029c r7:00000119 r6:8540b000 r5:00000010 [ 3757.630933][T31245] r4:00000003 [ 3757.630947][T31245] [<815c48bc>] (__sys_socket) from [<815c49e4>] (sys_socket+0x10/0x14) [ 3757.631001][T31245] r6:ffffffff r5:20000240 r4:76f82e78 [ 3757.631016][T31245] [<815c49d4>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3757.631084][T31245] Exception stack(0xe0105fa8 to 0xe0105ff0) [ 3757.631173][T31245] 5fa0: 76f82e78 20000240 00000010 00000003 00000010 00000000 [ 3757.631211][T31245] 5fc0: 76f82e78 20000240 ffffffff 00000119 003462d8 00000000 00000001 76f840dc [ 3757.631235][T31245] 5fe0: 00000000 76f82e44 0001c754 001320ac [ 3757.631491][T31245] socket: no more sockets [ 3757.971334][T31253] fuse: Unknown parameter 'user_id00000000000000000000' [ 3758.535876][T31255] nbd: must specify an index to disconnect [ 3760.304425][T31265] fuse: Bad value for 'fd' [ 3762.882351][T31277] fuse: Bad value for 'fd' [ 3764.269545][T31283] FAULT_INJECTION: forcing a failure. [ 3764.269545][T31283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3764.279110][T31283] CPU: 0 UID: 0 PID: 31283 Comm: syz.0.7797 Tainted: G L syzkaller #0 PREEMPT [ 3764.279274][T31283] Tainted: [L]=SOFTLOCKUP [ 3764.279297][T31283] Hardware name: ARM-Versatile Express [ 3764.279323][T31283] Call trace: [ 3764.279370][T31283] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3764.279487][T31283] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3764.279507][T31283] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3764.279560][T31283] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3764.279622][T31283] r7:200002c0 r6:00000000 r5:84f4e000 r4:8295129c [ 3764.279641][T31283] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3764.279698][T31283] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3764.279759][T31283] r8:24000000 r7:200002c0 r6:e01e1e28 r5:00000000 r4:e01e1f20 [ 3764.279778][T31283] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3764.279830][T31283] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 3764.279890][T31283] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 3764.279954][T31283] r8:24000000 r7:00000000 r6:837e4780 r5:e01e1f20 r4:e01e1e6c [ 3764.279974][T31283] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3764.280041][T31283] r9:84f4e000 r8:85ff3600 r7:24000000 r6:200002c0 r5:85ff3601 r4:00000004 [ 3764.280061][T31283] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3764.280118][T31283] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3764.280138][T31283] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3764.280185][T31283] Exception stack(0xe01e1fa8 to 0xe01e1ff0) [ 3764.280223][T31283] 1fa0: 00000000 00000000 00000004 200002c0 24000000 00000000 [ 3764.280264][T31283] 1fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f840dc [ 3764.280289][T31283] 1fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3768.094465][T31291] fuse: Bad value for 'fd' [ 3769.654022][T31287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31287 comm=syz.0.7799 [ 3770.023382][T31301] FAULT_INJECTION: forcing a failure. [ 3770.023382][T31301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3770.023835][T31301] CPU: 0 UID: 0 PID: 31301 Comm: syz.1.7803 Tainted: G L syzkaller #0 PREEMPT [ 3770.023915][T31301] Tainted: [L]=SOFTLOCKUP [ 3770.023973][T31301] Hardware name: ARM-Versatile Express [ 3770.024021][T31301] Call trace: [ 3770.024082][T31301] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3770.024201][T31301] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3770.024222][T31301] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3770.024291][T31301] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3770.024361][T31301] r7:20000480 r6:00000000 r5:84fda400 r4:8295129c [ 3770.024413][T31301] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3770.024482][T31301] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3770.024549][T31301] r8:20004004 r7:20000480 r6:ea455e28 r5:00000000 r4:ea455f20 [ 3770.024568][T31301] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3770.024637][T31301] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 3770.024696][T31301] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 3770.024769][T31301] r8:20004004 r7:00000000 r6:837c8000 r5:ea455f20 r4:ea455e6c [ 3770.024791][T31301] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3770.024854][T31301] r9:84fda400 r8:855f46c0 r7:20004004 r6:20000480 r5:855f46c1 r4:00000003 [ 3770.024871][T31301] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3770.024921][T31301] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3770.024952][T31301] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3770.024997][T31301] Exception stack(0xea455fa8 to 0xea455ff0) [ 3770.025033][T31301] 5fa0: 00000000 00000000 00000003 20000480 20004004 00000000 [ 3770.025067][T31301] 5fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76fb00dc [ 3770.025099][T31301] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3774.312308][ T28] audit: type=1804 audit(3774.230:697): pid=31312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.7809" name="/newroot/279/file0" dev="tmpfs" ino=1516 res=1 errno=0 [ 3792.335540][T31389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31389 comm=syz.0.7833 [ 3792.621621][T31389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=31389 comm=syz.0.7833 [ 3832.369886][T31547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31547 comm=syz.0.7883 [ 3832.376964][T31547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31547 comm=syz.0.7883 [ 3838.513788][T31574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31574 comm=syz.0.7889 [ 3838.553192][T31574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31574 comm=syz.0.7889 [ 3842.720014][T31593] FAULT_INJECTION: forcing a failure. [ 3842.720014][T31593] name failslab, interval 1, probability 0, space 0, times 0 [ 3842.720579][T31593] CPU: 0 UID: 0 PID: 31593 Comm: syz.0.7894 Tainted: G L syzkaller #0 PREEMPT [ 3842.720691][T31593] Tainted: [L]=SOFTLOCKUP [ 3842.720714][T31593] Hardware name: ARM-Versatile Express [ 3842.720739][T31593] Call trace: [ 3842.720787][T31593] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3842.721072][T31593] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3842.721223][T31593] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3842.721538][T31593] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3842.721725][T31593] r7:00000000 r6:00000000 r5:8316a400 r4:82919410 [ 3842.721894][T31593] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3842.722000][T31593] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3842.722075][T31593] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000019 [ 3842.722337][T31593] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3842.722459][T31593] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3842.722612][T31593] r10:00000fff r9:83830c00 r8:00000000 r7:8363fee0 r6:85fe4ce8 r5:84e45ffd [ 3842.722744][T31593] r4:84e45fef [ 3842.722933][T31593] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3842.723077][T31593] r9:83830c00 r8:00000000 r7:8363fee0 r6:85fe4ce8 r5:00001000 r4:84e45ff0 [ 3842.723105][T31593] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3842.723302][T31593] r5:00001000 r4:84e45000 [ 3842.723391][T31593] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3842.723497][T31593] r10:00000000 r9:00000003 r8:85fe4cc0 r7:00005421 r6:81cd9ee4 r5:00000004 [ 3842.723522][T31593] r4:85fe4ce8 r3:826ca380 [ 3842.723541][T31593] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3842.723666][T31593] r10:8316a400 r9:00000003 r8:85fe4cc0 r7:200035c0 r6:200035c0 r5:00005421 [ 3842.723975][T31593] r4:85fe4cc0 [ 3842.724088][T31593] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3842.724228][T31593] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3842.724316][T31593] r7:200035c0 r6:00005421 r5:85fe4cc1 r4:00000000 [ 3842.724342][T31593] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3842.724421][T31593] Exception stack(0xebb89fa8 to 0xebb89ff0) [ 3842.724527][T31593] 9fa0: 00000000 00000000 00000003 00005421 200035c0 00000000 [ 3842.724665][T31593] 9fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f840dc [ 3842.724737][T31593] 9fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3842.724860][T31593] r10:00000036 r9:8316a400 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3842.724930][T31593] r4:00000000 [ 3842.752905][T31593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3842.889768][T31595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31595 comm=syz.1.7895 [ 3842.900107][T31595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31595 comm=syz.1.7895 [ 3847.144402][T31615] FAULT_INJECTION: forcing a failure. [ 3847.144402][T31615] name failslab, interval 1, probability 0, space 0, times 0 [ 3847.153011][T31615] CPU: 1 UID: 0 PID: 31615 Comm: syz.1.7900 Tainted: G L syzkaller #0 PREEMPT [ 3847.153151][T31615] Tainted: [L]=SOFTLOCKUP [ 3847.153171][T31615] Hardware name: ARM-Versatile Express [ 3847.153193][T31615] Call trace: [ 3847.153234][T31615] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3847.153341][T31615] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3847.153360][T31615] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3847.153410][T31615] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3847.153463][T31615] r7:00000000 r6:00000000 r5:84f48000 r4:82919410 [ 3847.153479][T31615] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3847.153534][T31615] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3847.153593][T31615] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000019 [ 3847.153613][T31615] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3847.153664][T31615] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3847.153731][T31615] r10:00000fff r9:83830c00 r8:00000000 r7:8364bee0 r6:855f7e68 r5:84f63ffd [ 3847.153752][T31615] r4:84f63fef [ 3847.153768][T31615] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3847.153830][T31615] r9:83830c00 r8:00000000 r7:8364bee0 r6:855f7e68 r5:00001000 r4:84f63ff0 [ 3847.153847][T31615] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3847.153899][T31615] r5:00001000 r4:84f63000 [ 3847.153915][T31615] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3847.153976][T31615] r10:00000000 r9:00000003 r8:855f7e40 r7:0000541b r6:81cd9ee4 r5:00000004 [ 3847.153997][T31615] r4:855f7e68 r3:826ca380 [ 3847.154016][T31615] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3847.154076][T31615] r10:84f48000 r9:00000003 r8:855f7e40 r7:200004c0 r6:200004c0 r5:0000541b [ 3847.154095][T31615] r4:855f7e40 [ 3847.154111][T31615] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3847.154160][T31615] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3847.154217][T31615] r7:200004c0 r6:0000541b r5:855f7e41 r4:00000000 [ 3847.154235][T31615] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3847.154276][T31615] Exception stack(0xebbf9fa8 to 0xebbf9ff0) [ 3847.154319][T31615] 9fa0: 00000000 00000000 00000003 0000541b 200004c0 00000000 [ 3847.154352][T31615] 9fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3847.154377][T31615] 9fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3847.154438][T31615] r10:00000036 r9:84f48000 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3847.154458][T31615] r4:00000000 [ 3847.185247][T31615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3847.271769][T31617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31617 comm=syz.1.7901 [ 3848.594944][T31631] FAULT_INJECTION: forcing a failure. [ 3848.594944][T31631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3848.608774][T31631] CPU: 1 UID: 0 PID: 31631 Comm: syz.0.7905 Tainted: G L syzkaller #0 PREEMPT [ 3848.608935][T31631] Tainted: [L]=SOFTLOCKUP [ 3848.608956][T31631] Hardware name: ARM-Versatile Express [ 3848.608981][T31631] Call trace: [ 3848.609027][T31631] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3848.609146][T31631] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3848.609167][T31631] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3848.609220][T31631] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3848.609278][T31631] r7:00000001 r6:00000000 r5:831d4800 r4:82919464 [ 3848.609294][T31631] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3848.609354][T31631] [<809bbda8>] (should_fail_ex) from [<80543a88>] (should_fail_alloc_page+0x68/0x74) [ 3848.609419][T31631] r8:eb30dcbc r7:00000001 r6:00000000 r5:00140cca r4:eb30dcc8 [ 3848.609438][T31631] [<80543a20>] (should_fail_alloc_page) from [<8050a510>] (prepare_alloc_pages+0xf8/0x1b4) [ 3848.609494][T31631] [<8050a418>] (prepare_alloc_pages) from [<805138b8>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 3848.609558][T31631] r10:20001000 r9:861e03c0 r8:00000000 r7:00140cca r6:831d4800 r5:00000000 [ 3848.609579][T31631] r4:eb30ddc0 [ 3848.609599][T31631] [<80513808>] (__alloc_frozen_pages_noprof) from [<80514ec0>] (__folio_alloc_noprof+0x14/0x6c) [ 3848.609665][T31631] r10:20001000 r9:861e03c0 r8:00000000 r7:00000000 r6:8612ae80 r5:00000001 [ 3848.609688][T31631] r4:eb30ddc0 [ 3848.609707][T31631] [<80514eac>] (__folio_alloc_noprof) from [<804de960>] (do_anonymous_page+0xf0/0x5d0) [ 3848.609769][T31631] r5:00000001 r4:eb30ddc0 [ 3848.609787][T31631] [<804de870>] (do_anonymous_page) from [<804e2b70>] (handle_mm_fault+0x5bc/0x6b8) [ 3848.609866][T31631] r10:00000000 r9:00000000 r8:00000000 r7:eb30deb8 r6:20001000 r5:831d4800 [ 3848.609889][T31631] r4:00000215 [ 3848.609907][T31631] [<804e25b4>] (handle_mm_fault) from [<80232fcc>] (do_page_fault+0xf0/0x4d0) [ 3848.609980][T31631] r10:00000002 r9:861e03c0 r8:00000215 r7:20001000 r6:00000a07 r5:20001a80 [ 3848.610002][T31631] r4:eb30deb8 [ 3848.610019][T31631] [<80232edc>] (do_page_fault) from [<8023357c>] (do_DataAbort+0x38/0xac) [ 3848.610084][T31631] r10:00000037 r9:831d4800 r8:80232edc r7:eb30deb8 r6:20001a80 r5:00000a07 [ 3848.610105][T31631] r4:8281d3d0 [ 3848.610122][T31631] [<80233544>] (do_DataAbort) from [<80200b2c>] (__dabt_svc+0x4c/0x80) [ 3848.610174][T31631] Exception stack(0xeb30deb8 to 0xeb30df00) [ 3848.610208][T31631] dea0: 20001a80 eb30df40 [ 3848.610245][T31631] dec0: ffffffe8 00000000 00000000 b5403587 20001a80 00000003 00000003 00000000 [ 3848.610282][T31631] dee0: 00000037 eb30df7c 00000018 eb30df0c 00000000 81ab22a0 00000013 ffffffff [ 3848.610317][T31631] r8:00000003 r7:eb30deec r6:ffffffff r5:00000013 r4:81ab22a0 [ 3848.610338][T31631] [<8058eb04>] (do_fcntl) from [<8058f47c>] (sys_fcntl+0x70/0xd0) [ 3848.610487][T31631] r8:00000003 r7:20001a80 r6:00000010 r5:00000000 r4:855f46c1 [ 3848.610509][T31631] [<8058f40c>] (sys_fcntl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3848.610556][T31631] Exception stack(0xeb30dfa8 to 0xeb30dff0) [ 3848.610592][T31631] dfa0: 00000000 00000000 00000003 00000010 20001a80 00000000 [ 3848.610628][T31631] dfc0: 00000000 00000000 0012ece4 00000037 003462d8 00000000 00000001 76f840dc [ 3848.610658][T31631] dfe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3848.610695][T31631] r9:831d4800 r8:8020029c r7:00000037 r6:0012ece4 r5:00000000 r4:00000000 [ 3848.858681][T31633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31633 comm=syz.1.7906 [ 3852.801290][T31656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31656 comm=syz.1.7912 [ 3864.622163][T31721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=31721 comm=syz.1.7929 [ 3867.842752][T31734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=31734 comm=syz.0.7933 [ 3875.319357][T31763] FAULT_INJECTION: forcing a failure. [ 3875.319357][T31763] name failslab, interval 1, probability 0, space 0, times 0 [ 3875.319713][T31763] CPU: 0 UID: 0 PID: 31763 Comm: syz.0.7941 Tainted: G L syzkaller #0 PREEMPT [ 3875.319774][T31763] Tainted: [L]=SOFTLOCKUP [ 3875.319785][T31763] Hardware name: ARM-Versatile Express [ 3875.319802][T31763] Call trace: [ 3875.319827][T31763] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3875.319890][T31763] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3875.319900][T31763] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3875.319951][T31763] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3875.320116][T31763] r7:00000000 r6:00000000 r5:84fdb000 r4:82919410 [ 3875.320177][T31763] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3875.320254][T31763] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3875.320376][T31763] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000019 [ 3875.320448][T31763] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3875.320509][T31763] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3875.320586][T31763] r10:00000fff r9:83830c00 r8:00000000 r7:8364bd48 r6:85fef1a8 r5:84f7effd [ 3875.320631][T31763] r4:84f7efef [ 3875.320743][T31763] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3875.320805][T31763] r9:83830c00 r8:00000000 r7:8364bd48 r6:85fef1a8 r5:00001000 r4:84f7eff0 [ 3875.320828][T31763] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3875.320945][T31763] r5:00001000 r4:84f7e000 [ 3875.321023][T31763] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3875.321108][T31763] r10:00000000 r9:00000003 r8:85fef180 r7:00008982 r6:81cd9ee4 r5:00000004 [ 3875.321138][T31763] r4:85fef1a8 r3:826ca380 [ 3875.321228][T31763] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3875.321437][T31763] r10:84fdb000 r9:00000003 r8:85fef180 r7:20000140 r6:20000140 r5:00008982 [ 3875.321469][T31763] r4:85fef180 [ 3875.321613][T31763] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3875.321649][T31763] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3875.321722][T31763] r7:20000140 r6:00008982 r5:85fef181 r4:00000000 [ 3875.321861][T31763] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3875.322078][T31763] Exception stack(0xf2a4dfa8 to 0xf2a4dff0) [ 3875.322123][T31763] dfa0: 00000000 00000000 00000003 00008982 20000140 00000000 [ 3875.322156][T31763] dfc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f840dc [ 3875.322171][T31763] dfe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3875.322190][T31763] r10:00000036 r9:84fdb000 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3875.322337][T31763] r4:00000000 [ 3875.354089][T31763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3878.923012][T31780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31780 comm=syz.0.7945 [ 3893.178941][T31833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31833 comm=syz.1.7960 [ 3928.251218][ T28] audit: type=1400 audit(3928.170:698): avc: denied { mounton } for pid=31941 comm="syz.1.7996" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3928.262631][T31942] binder: Unknown parameter 'smackfsdef' [ 3929.052808][ T28] audit: type=1400 audit(3928.970:699): avc: denied { create } for pid=31946 comm="syz.0.7998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 3930.185388][T31954] FAULT_INJECTION: forcing a failure. [ 3930.185388][T31954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3930.191716][T31954] CPU: 0 UID: 0 PID: 31954 Comm: syz.0.7999 Tainted: G L syzkaller #0 PREEMPT [ 3930.191878][T31954] Tainted: [L]=SOFTLOCKUP [ 3930.191904][T31954] Hardware name: ARM-Versatile Express [ 3930.191930][T31954] Call trace: [ 3930.191979][T31954] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3930.192145][T31954] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3930.192168][T31954] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3930.192226][T31954] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3930.192343][T31954] r7:200002c0 r6:00000000 r5:84fe6000 r4:8295129c [ 3930.192367][T31954] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3930.192444][T31954] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 3930.192511][T31954] r8:00000000 r7:200002c0 r6:00000014 r5:00000000 r4:f3255f30 [ 3930.192531][T31954] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 3930.192581][T31954] [<809bbfe4>] (should_fail_usercopy) from [<808f62a4>] (_copy_from_iter+0x64/0x7c4) [ 3930.192641][T31954] [<808f6240>] (_copy_from_iter) from [<8199f048>] (isotp_sendmsg+0x268/0x86c) [ 3930.192719][T31954] r10:00000000 r9:85690000 r8:f3255f20 r7:00000014 r6:00000000 r5:85692000 [ 3930.192742][T31954] r4:00000014 [ 3930.192761][T31954] [<8199ede0>] (isotp_sendmsg) from [<815c2a54>] (__sock_sendmsg+0x44/0x78) [ 3930.192918][T31954] r10:00000004 r9:00000000 r8:f3255dcc r7:00000000 r6:837c7680 r5:f3255f20 [ 3930.192948][T31954] r4:00000000 [ 3930.192969][T31954] [<815c2a10>] (__sock_sendmsg) from [<815c3914>] (____sys_sendmsg+0x238/0x2c4) [ 3930.193064][T31954] r7:00000000 r6:00000000 r5:837c7680 r4:f3255f20 [ 3930.193110][T31954] [<815c36dc>] (____sys_sendmsg) from [<815c3d14>] (___sys_sendmsg+0x9c/0xd0) [ 3930.193188][T31954] r10:00000128 r9:20000400 r8:00000004 r7:00000000 r6:837c7680 r5:f3255f20 [ 3930.193214][T31954] r4:00000000 [ 3930.193233][T31954] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 3930.193401][T31954] r9:84fe6000 r8:83359b40 r7:00000004 r6:20000400 r5:83359b41 r4:00000003 [ 3930.193423][T31954] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 3930.193482][T31954] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 3930.193501][T31954] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3930.193546][T31954] Exception stack(0xf3255fa8 to 0xf3255ff0) [ 3930.193587][T31954] 5fa0: 00000000 00000000 00000003 20000400 00000004 00000000 [ 3930.193623][T31954] 5fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f840dc [ 3930.193652][T31954] 5fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 3940.119416][T32001] FAULT_INJECTION: forcing a failure. [ 3940.119416][T32001] name failslab, interval 1, probability 0, space 0, times 0 [ 3940.125098][T32001] CPU: 0 UID: 0 PID: 32001 Comm: syz.1.8019 Tainted: G L syzkaller #0 PREEMPT [ 3940.125206][T32001] Tainted: [L]=SOFTLOCKUP [ 3940.125217][T32001] Hardware name: ARM-Versatile Express [ 3940.125230][T32001] Call trace: [ 3940.125254][T32001] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3940.125318][T32001] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 3940.125328][T32001] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 3940.125353][T32001] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 3940.125382][T32001] r7:00000000 r6:00000000 r5:84fd3c00 r4:82919410 [ 3940.125390][T32001] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 3940.125418][T32001] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 3940.125449][T32001] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:0000001e [ 3940.125458][T32001] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 3940.125482][T32001] [<80523320>] (__kmalloc_noprof) from [<807fb23c>] (tomoyo_encode2+0x64/0xec) [ 3940.125537][T32001] r10:00000fff r9:83180c00 r8:00000000 r7:8342c990 r6:85fe99e8 r5:84e45ffc [ 3940.125550][T32001] r4:84e45fe9 [ 3940.125558][T32001] [<807fb1d8>] (tomoyo_encode2) from [<807fb2e8>] (tomoyo_encode+0x24/0x30) [ 3940.125589][T32001] r9:83180c00 r8:00000000 r7:8342c990 r6:85fe99e8 r5:00001000 r4:84e45fea [ 3940.125598][T32001] [<807fb2c4>] (tomoyo_encode) from [<807fb374>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3940.125624][T32001] r5:00001000 r4:84e45000 [ 3940.125631][T32001] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3940.125662][T32001] r10:00000000 r9:00000003 r8:85fe99c0 r7:00000002 r6:81cd9ee4 r5:00000004 [ 3940.125673][T32001] r4:85fe99e8 r3:826ca380 [ 3940.125681][T32001] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 3940.125712][T32001] r10:84fd3c00 r9:00000003 r8:85fe99c0 r7:20000ac0 r6:20000ac0 r5:00000002 [ 3940.125721][T32001] r4:85fe99c0 [ 3940.125729][T32001] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 3940.125754][T32001] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 3940.125783][T32001] r7:20000ac0 r6:00000002 r5:85fe99c1 r4:00000000 [ 3940.125791][T32001] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3940.125818][T32001] Exception stack(0xf3a01fa8 to 0xf3a01ff0) [ 3940.125838][T32001] 1fa0: 00000000 00000000 00000003 00000002 20000ac0 00000000 [ 3940.125855][T32001] 1fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 3940.125868][T32001] 1fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 3940.125886][T32001] r10:00000036 r9:84fd3c00 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 3940.125896][T32001] r4:00000000 [ 3940.141532][T32001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3974.646014][T32154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32154 comm=syz.0.8079 [ 3980.660585][T32185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32185 comm=syz.0.8089 [ 3991.633340][T32231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32231 comm=syz.1.8102 [ 3993.852426][T32246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32246 comm=syz.0.8107 [ 4005.248257][T31168] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 4005.408053][T31168] usb 2-1: Using ep0 maxpacket: 32 [ 4005.422378][T31168] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 4005.422852][T31168] usb 2-1: config 0 has no interface number 0 [ 4005.426767][T31168] usb 2-1: config 0 interface 184 has no altsetting 0 [ 4005.473193][T31168] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 4005.473538][T31168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4005.473793][T31168] usb 2-1: Product: syz [ 4005.473844][T31168] usb 2-1: Manufacturer: syz [ 4005.473872][T31168] usb 2-1: SerialNumber: syz [ 4005.481317][T31168] usb 2-1: config 0 descriptor?? [ 4006.316355][T31168] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 4006.316753][T31168] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4006.382088][T32289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4006.384825][T32289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4007.994739][T31168] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 4007.995169][T31168] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 4007.995329][T31168] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 4007.995865][T31168] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 4008.022616][T31168] usb 2-1: USB disconnect, device number 48 [ 4013.621243][T32336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32336 comm=syz.1.8136 [ 4029.048549][T32401] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 4029.051063][ T28] audit: type=1400 audit(4028.970:700): avc: denied { relabelto } for pid=32400 comm="syz.0.8158" name="sequencer" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 4029.051489][ T28] audit: type=1400 audit(4028.970:701): avc: denied { associate } for pid=32400 comm="syz.0.8158" name="sequencer" dev="devtmpfs" ino=723 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 4036.844510][T32433] FAULT_INJECTION: forcing a failure. [ 4036.844510][T32433] name failslab, interval 1, probability 0, space 0, times 0 [ 4036.845044][T32433] CPU: 1 UID: 0 PID: 32433 Comm: syz.1.8167 Tainted: G L syzkaller #0 PREEMPT [ 4036.845146][T32433] Tainted: [L]=SOFTLOCKUP [ 4036.845172][T32433] Hardware name: ARM-Versatile Express [ 4036.845201][T32433] Call trace: [ 4036.845286][T32433] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4036.845406][T32433] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4036.845529][T32433] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4036.845599][T32433] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4036.845669][T32433] r7:00000000 r6:00000000 r5:84ffa400 r4:82919410 [ 4036.845694][T32433] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4036.845763][T32433] [<809bbda8>] (should_fail_ex) from [<805439f8>] (should_failslab+0x6c/0x94) [ 4036.845850][T32433] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 4036.845877][T32433] [<8054398c>] (should_failslab) from [<805233c4>] (__kmalloc_noprof+0xa4/0x39c) [ 4036.845941][T32433] [<80523320>] (__kmalloc_noprof) from [<807fb330>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4036.846020][T32433] r10:00000000 r9:83180c00 r8:00000000 r7:834e5bb0 r6:8335b328 r5:00001000 [ 4036.846044][T32433] r4:00000000 [ 4036.846064][T32433] [<807fb2f4>] (tomoyo_realpath_from_path) from [<807f73f8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4036.846136][T32433] r10:00000000 r9:00000004 r8:8335b300 r7:00004b6d r6:81cd9ee4 r5:00000004 [ 4036.846167][T32433] r4:8335b328 r3:826ca380 [ 4036.846188][T32433] [<807f732c>] (tomoyo_path_number_perm) from [<807fbd4c>] (tomoyo_file_ioctl+0x1c/0x20) [ 4036.846262][T32433] r10:84ffa400 r9:00000004 r8:8335b300 r7:00000000 r6:00000000 r5:00004b6d [ 4036.846289][T32433] r4:8335b300 [ 4036.846310][T32433] [<807fbd30>] (tomoyo_file_ioctl) from [<807a78b8>] (security_file_ioctl+0x80/0x1d4) [ 4036.846372][T32433] [<807a7838>] (security_file_ioctl) from [<80590318>] (sys_ioctl+0x4c/0xb5c) [ 4036.846477][T32433] r7:00000000 r6:00004b6d r5:8335b301 r4:00000000 [ 4036.846501][T32433] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4036.846554][T32433] Exception stack(0xf4dc5fa8 to 0xf4dc5ff0) [ 4036.846596][T32433] 5fa0: 00000000 00000000 00000004 00004b6d 00000000 00000000 [ 4036.846635][T32433] 5fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76fb00dc [ 4036.846667][T32433] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 4036.846706][T32433] r10:00000036 r9:84ffa400 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 4036.846730][T32433] r4:00000000 [ 4036.894010][T32433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4050.570382][T32470] FAULT_INJECTION: forcing a failure. [ 4050.570382][T32470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4050.570805][T32470] CPU: 1 UID: 0 PID: 32470 Comm: syz.1.8179 Tainted: G L syzkaller #0 PREEMPT [ 4050.570904][T32470] Tainted: [L]=SOFTLOCKUP [ 4050.570927][T32470] Hardware name: ARM-Versatile Express [ 4050.570952][T32470] Call trace: [ 4050.570996][T32470] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4050.571107][T32470] r7:60000113 r6:60000113 r5:822a7c18 r4:00000000 [ 4050.571128][T32470] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4050.571183][T32470] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4050.571245][T32470] r7:00000001 r6:00000000 r5:85402400 r4:82919464 [ 4050.571263][T32470] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4050.571329][T32470] [<809bbda8>] (should_fail_ex) from [<80543a88>] (should_fail_alloc_page+0x68/0x74) [ 4050.571399][T32470] r8:f4f15db4 r7:00000001 r6:00000000 r5:00140cca r4:f4f15dc0 [ 4050.571423][T32470] [<80543a20>] (should_fail_alloc_page) from [<8050a510>] (prepare_alloc_pages+0xf8/0x1b4) [ 4050.571480][T32470] [<8050a418>] (prepare_alloc_pages) from [<805138b8>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 4050.571546][T32470] r10:76e00000 r9:846f0780 r8:00000000 r7:00140cca r6:85402400 r5:00000000 [ 4050.571567][T32470] r4:f4f15eb8 [ 4050.571584][T32470] [<80513808>] (__alloc_frozen_pages_noprof) from [<80514ec0>] (__folio_alloc_noprof+0x14/0x6c) [ 4050.571644][T32470] r10:76e00000 r9:846f0780 r8:00000000 r7:00000000 r6:84d14200 r5:00000001 [ 4050.571664][T32470] r4:f4f15eb8 [ 4050.571679][T32470] [<80514eac>] (__folio_alloc_noprof) from [<804de960>] (do_anonymous_page+0xf0/0x5d0) [ 4050.571731][T32470] r5:00000001 r4:f4f15eb8 [ 4050.571750][T32470] [<804de870>] (do_anonymous_page) from [<804e2b70>] (handle_mm_fault+0x5bc/0x6b8) [ 4050.571818][T32470] r10:00000040 r9:00000000 r8:00000000 r7:f4f15fb0 r6:76e00008 r5:85402400 [ 4050.571839][T32470] r4:00001255 [ 4050.571854][T32470] [<804e25b4>] (handle_mm_fault) from [<802330f8>] (do_page_fault+0x21c/0x4d0) [ 4050.571917][T32470] r10:00000002 r9:846f0780 r8:00000255 r7:85402400 r6:00000a07 r5:76e00008 [ 4050.571935][T32470] r4:f4f15fb0 [ 4050.571951][T32470] [<80232edc>] (do_page_fault) from [<8023357c>] (do_DataAbort+0x38/0xac) [ 4050.572011][T32470] r10:76f00000 r9:00001000 r8:80232edc r7:f4f15fb0 r6:76e00008 r5:00000a07 [ 4050.572031][T32470] r4:8281d3d0 [ 4050.572047][T32470] [<80233544>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 4050.572093][T32470] Exception stack(0xf4f15fb0 to 0xf4f15ff8) [ 4050.572130][T32470] 5fa0: 76e00000 00021000 00000000 ffffffff [ 4050.572165][T32470] 5fc0: 76e00000 00021000 00100000 00091000 00310000 00001000 76f00000 001cce70 [ 4050.572194][T32470] 5fe0: 00000000 76f8dcc0 00113880 001138cc a0000010 ffffffff [ 4050.572228][T32470] r8:826c1044 r7:85402400 r6:ffffffff r5:a0000010 r4:001138cc [ 4050.598546][T32470] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 4053.570516][T32458] FAULT_INJECTION: forcing a failure. [ 4053.570516][T32458] name fail_futex, interval 1, probability 0, space 0, times 1 [ 4053.570963][T32458] CPU: 1 UID: 0 PID: 32458 Comm: syz.0.8174 Tainted: G L syzkaller #0 PREEMPT [ 4053.571071][T32458] Tainted: [L]=SOFTLOCKUP [ 4053.571092][T32458] Hardware name: ARM-Versatile Express [ 4053.571118][T32458] Call trace: [ 4053.571165][T32458] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4053.571276][T32458] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4053.571296][T32458] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4053.571362][T32458] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4053.571425][T32458] r7:00000000 r6:00000000 r5:84fda400 r4:828f9314 [ 4053.571444][T32458] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4053.571503][T32458] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 4053.571564][T32458] r8:00000628 r7:00000000 r6:f4eeddd0 r5:00000010 r4:76f42628 [ 4053.571583][T32458] [<809bbfcc>] (should_fail) from [<8034b780>] (get_futex_key+0xa8/0x558) [ 4053.571645][T32458] [<8034b6d8>] (get_futex_key) from [<8034fec8>] (futex_wake+0x64/0x1dc) [ 4053.571713][T32458] r10:84579f80 r9:f4eeddc8 r8:f4eede90 r7:843eed00 r6:00000001 r5:ffffffff [ 4053.571735][T32458] r4:00000012 [ 4053.571754][T32458] [<8034fe64>] (futex_wake) from [<8034caf0>] (do_futex+0xd0/0x180) [ 4053.571820][T32458] r10:84579f80 r9:00000001 r8:f4eede90 r7:843eed00 r6:00000000 r5:b5403587 [ 4053.571843][T32458] r4:00000001 [ 4053.571861][T32458] [<8034ca20>] (do_futex) from [<8024c0dc>] (mm_release+0xc4/0xc8) [ 4053.571922][T32458] r4:84fda400 [ 4053.571940][T32458] [<8024c018>] (mm_release) from [<8024d8e4>] (exit_mm_release+0x24/0x28) [ 4053.572051][T32458] r5:846f3480 r4:84fda400 [ 4053.572074][T32458] [<8024d8c0>] (exit_mm_release) from [<80257834>] (do_exit+0x1e8/0xae4) [ 4053.572184][T32458] r5:846f3480 r4:84fda400 [ 4053.572203][T32458] [<8025764c>] (do_exit) from [<802582fc>] (do_group_exit+0x40/0x8c) [ 4053.572278][T32458] r7:00000142 [ 4053.572301][T32458] [<802582bc>] (do_group_exit) from [<8026934c>] (get_signal+0xa8c/0xab8) [ 4053.572378][T32458] r7:00000142 r4:84fda400 [ 4053.572398][T32458] [<802688c0>] (get_signal) from [<8022a660>] (do_work_pending+0x11c/0x4e8) [ 4053.572469][T32458] r10:00000142 r9:84fda400 r8:ffffffdc r7:00000142 r6:8020029c r5:f4eedfb0 [ 4053.572492][T32458] r4:84fda400 [ 4053.572510][T32458] [<8022a544>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 4053.572595][T32458] Exception stack(0xf4eedfb0 to 0xf4eedff8) [ 4053.572638][T32458] dfa0: ffffffdc 76f41a78 00022a02 00000000 [ 4053.572674][T32458] dfc0: 00000000 00000000 76f41ea8 00000142 00346418 00000000 00000001 76f420dc [ 4053.572707][T32458] dfe0: 76f419f8 76f419e4 0010b504 001120e8 60000010 ffffff9c [ 4053.572745][T32458] r10:00000142 r9:84fda400 r8:8020029c r7:00000142 r6:76f41ea8 r5:00000000 [ 4053.572766][T32458] r4:00000000 [ 4071.695241][ T28] audit: type=1400 audit(4071.610:702): avc: denied { listen } for pid=32556 comm="syz.0.8203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 4079.789862][T32588] FAULT_INJECTION: forcing a failure. [ 4079.789862][T32588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4079.790350][T32588] CPU: 0 UID: 0 PID: 32588 Comm: syz.0.8212 Tainted: G L syzkaller #0 PREEMPT [ 4079.790483][T32588] Tainted: [L]=SOFTLOCKUP [ 4079.790504][T32588] Hardware name: ARM-Versatile Express [ 4079.790528][T32588] Call trace: [ 4079.790571][T32588] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4079.790680][T32588] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4079.790700][T32588] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4079.790753][T32588] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4079.790816][T32588] r7:20000200 r6:00000000 r5:846fb000 r4:8295129c [ 4079.790834][T32588] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4079.790891][T32588] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 4079.790949][T32588] r8:00000000 r7:20000200 r6:dfb59e28 r5:00000000 r4:dfb59f20 [ 4079.790966][T32588] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 4079.791012][T32588] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 4079.791066][T32588] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 4079.791124][T32588] r8:00000000 r7:00000000 r6:837e0c80 r5:dfb59f20 r4:dfb59e6c [ 4079.791144][T32588] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 4079.791210][T32588] r9:846fb000 r8:85fe4a80 r7:00000000 r6:20000200 r5:85fe4a81 r4:00000003 [ 4079.791229][T32588] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 4079.791298][T32588] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 4079.791316][T32588] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4079.791364][T32588] Exception stack(0xdfb59fa8 to 0xdfb59ff0) [ 4079.791403][T32588] 9fa0: 00000000 00000000 00000003 20000200 00000000 00000000 [ 4079.791441][T32588] 9fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f840dc [ 4079.791471][T32588] 9fe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 4108.181991][T32686] FAULT_INJECTION: forcing a failure. [ 4108.181991][T32686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4108.185017][T32686] CPU: 1 UID: 0 PID: 32686 Comm: syz.1.8232 Tainted: G L syzkaller #0 PREEMPT [ 4108.185168][T32686] Tainted: [L]=SOFTLOCKUP [ 4108.185189][T32686] Hardware name: ARM-Versatile Express [ 4108.185213][T32686] Call trace: [ 4108.185261][T32686] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4108.185369][T32686] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4108.185390][T32686] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4108.185447][T32686] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4108.185584][T32686] r7:200004c0 r6:00000000 r5:8540b000 r4:8295129c [ 4108.185609][T32686] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4108.185677][T32686] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 4108.185837][T32686] r8:00000801 r7:200004c0 r6:e83d5e28 r5:00000000 r4:e83d5f20 [ 4108.185858][T32686] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 4108.185909][T32686] [<809bbfe4>] (should_fail_usercopy) from [<815c3ae8>] (copy_msghdr_from_user+0x50/0x1e0) [ 4108.185978][T32686] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 4108.186047][T32686] r8:00000801 r7:00000000 r6:837c6c80 r5:e83d5f20 r4:e83d5e6c [ 4108.186071][T32686] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 4108.186143][T32686] r9:8540b000 r8:8607ed80 r7:00000801 r6:200004c0 r5:8607ed81 r4:00000003 [ 4108.186164][T32686] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 4108.186329][T32686] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 4108.186468][T32686] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4108.186536][T32686] Exception stack(0xe83d5fa8 to 0xe83d5ff0) [ 4108.186584][T32686] 5fa0: 00000000 00000000 00000003 200004c0 00000801 00000000 [ 4108.186625][T32686] 5fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76fb00dc [ 4108.186656][T32686] 5fe0: 76fafe88 76fafe78 00018ba0 001302e0 [ 4183.360784][ T528] FAULT_INJECTION: forcing a failure. [ 4183.360784][ T528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4183.361302][ T528] CPU: 0 UID: 0 PID: 528 Comm: syz.0.8341 Tainted: G L syzkaller #0 PREEMPT [ 4183.361409][ T528] Tainted: [L]=SOFTLOCKUP [ 4183.361476][ T528] Hardware name: ARM-Versatile Express [ 4183.361533][ T528] Call trace: [ 4183.361588][ T528] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4183.361706][ T528] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4183.361730][ T528] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4183.361787][ T528] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4183.361871][ T528] r7:830b8400 r6:00000000 r5:84074800 r4:8295129c [ 4183.361890][ T528] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4183.363211][ T528] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 4183.363394][ T528] r8:81d3ce14 r7:830b8400 r6:c00464b4 r5:00000000 r4:84074fe8 [ 4183.363552][ T528] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 4183.363924][ T528] [<809bbfe4>] (should_fail_usercopy) from [<80b223a4>] (drm_ioctl+0x26c/0x580) [ 4183.364080][ T528] [<80b22138>] (drm_ioctl) from [<80590510>] (sys_ioctl+0x244/0xb5c) [ 4183.364257][ T528] r10:84074800 r9:00000003 r8:85fe4780 r7:20000100 r6:c00464b4 r5:85fe4781 [ 4183.364284][ T528] r4:00000000 [ 4183.364488][ T528] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4183.364549][ T528] Exception stack(0xf2c0dfa8 to 0xf2c0dff0) [ 4183.364908][ T528] dfa0: 00000000 00000000 00000003 c00464b4 20000100 00000000 [ 4183.364958][ T528] dfc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f840dc [ 4183.365089][ T528] dfe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 4183.365519][ T528] r10:00000036 r9:84074800 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 4183.365628][ T528] r4:00000000 [ 4204.955340][ T617] FAULT_INJECTION: forcing a failure. [ 4204.955340][ T617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4204.968921][ T617] CPU: 1 UID: 0 PID: 617 Comm: syz.0.8374 Tainted: G L syzkaller #0 PREEMPT [ 4204.969083][ T617] Tainted: [L]=SOFTLOCKUP [ 4204.969104][ T617] Hardware name: ARM-Versatile Express [ 4204.969130][ T617] Call trace: [ 4204.969176][ T617] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4204.969301][ T617] r7:60000013 r6:60000013 r5:822a7c18 r4:00000000 [ 4204.969323][ T617] [<80201af0>] (show_stack) from [<8021e448>] (dump_stack_lvl+0x5c/0x70) [ 4204.969378][ T617] [<8021e3ec>] (dump_stack_lvl) from [<8021e474>] (dump_stack+0x18/0x1c) [ 4204.969442][ T617] r7:0000000c r6:00000000 r5:84f43000 r4:8295129c [ 4204.969463][ T617] [<8021e45c>] (dump_stack) from [<809bbf68>] (should_fail_ex+0x1c0/0x224) [ 4204.969523][ T617] [<809bbda8>] (should_fail_ex) from [<809bbfe0>] (should_fail+0x14/0x18) [ 4204.969586][ T617] r8:b5403587 r7:0000000c r6:20000000 r5:f2f7de6c r4:0000000c [ 4204.969605][ T617] [<809bbfcc>] (should_fail) from [<809bc000>] (should_fail_usercopy+0x1c/0x20) [ 4204.969656][ T617] [<809bbfe4>] (should_fail_usercopy) from [<815c39d4>] (move_addr_to_kernel+0x34/0xf8) [ 4204.969720][ T617] [<815c39a0>] (move_addr_to_kernel) from [<815c3c30>] (copy_msghdr_from_user+0x198/0x1e0) [ 4204.969788][ T617] r7:200000c0 r6:f2f7de28 r5:00000000 r4:f2f7df20 [ 4204.969807][ T617] [<815c3a98>] (copy_msghdr_from_user) from [<815c3cf0>] (___sys_sendmsg+0x78/0xd0) [ 4204.969875][ T617] r8:00000000 r7:00000000 r6:837c0500 r5:f2f7df20 r4:f2f7de6c [ 4204.969896][ T617] [<815c3c78>] (___sys_sendmsg) from [<815c5d7c>] (__sys_sendmsg+0x8c/0xe0) [ 4204.969963][ T617] r9:84f43000 r8:855f4000 r7:00000000 r6:200000c0 r5:855f4001 r4:00000003 [ 4204.969985][ T617] [<815c5cf0>] (__sys_sendmsg) from [<815c5de4>] (sys_sendmsg+0x14/0x18) [ 4204.970044][ T617] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 4204.970063][ T617] [<815c5dd0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4204.970112][ T617] Exception stack(0xf2f7dfa8 to 0xf2f7dff0) [ 4204.970152][ T617] dfa0: 00000000 00000000 00000003 200000c0 00000000 00000000 [ 4204.970189][ T617] dfc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f840dc [ 4204.970218][ T617] dfe0: 76f83e88 76f83e78 00018ba0 001302e0 [ 4214.540102][ T656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=656 comm=syz.0.8386 [ 4221.031960][ T682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=682 comm=syz.1.8397 [ 4221.573260][ T686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=686 comm=syz.0.8399 [ 4222.031541][T26996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4222.094421][T26996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4222.127031][ T699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=699 comm=syz.0.8402 [ 4222.169227][T26996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4222.245281][T26996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4222.699660][T26996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4222.718098][T26996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4222.723601][T26996] bond0 (unregistering): Released all slaves [ 4222.825863][T26996] hsr_slave_0: left promiscuous mode [ 4222.838002][T26996] hsr_slave_1: left promiscuous mode [ 4222.868728][T26996] veth1_macvtap: left promiscuous mode [ 4222.869152][T26996] veth0_macvtap: left promiscuous mode [ 4222.869380][T26996] veth1_vlan: left promiscuous mode [ 4222.869573][T26996] veth0_vlan: left promiscuous mode [ 4226.221012][ T689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4226.242004][ T689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4227.880980][ T689] hsr_slave_0: entered promiscuous mode [ 4227.884070][ T689] hsr_slave_1: entered promiscuous mode [ 4227.891704][ T689] debugfs: 'hsr0' already exists in 'hsr' [ 4227.894966][ T689] Cannot create hsr debugfs directory [ 4228.650141][ T689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4228.681479][ T689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4228.700290][ T689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4228.730136][ T689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4230.378929][ T689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4235.601686][ T689] veth0_vlan: entered promiscuous mode [ 4235.682991][ T689] veth1_vlan: entered promiscuous mode [ 4235.762850][ T689] veth0_macvtap: entered promiscuous mode [ 4235.775364][ T689] veth1_macvtap: entered promiscuous mode [ 4235.861090][T26991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4235.862896][T26991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4235.863306][T26991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4235.863395][T26991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4238.822328][ T957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4238.898660][ T957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4239.030206][ T957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4239.122135][ T957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4240.462841][ T957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4240.466694][ T957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4240.471672][ T957] bond0 (unregistering): Released all slaves [ 4240.578445][ T957] hsr_slave_0: left promiscuous mode [ 4240.587981][ T957] hsr_slave_1: left promiscuous mode [ 4240.613227][ T957] veth1_macvtap: left promiscuous mode [ 4240.613675][ T957] veth0_macvtap: left promiscuous mode [ 4240.614109][ T957] veth1_vlan: left promiscuous mode [ 4240.614384][ T957] veth0_vlan: left promiscuous mode [ 4242.510041][ T1224] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 4243.149298][ T1254] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 4245.224716][ T1288] input: syz0 as /devices/virtual/input/input19 [ 4246.300087][ T1172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4246.306219][ T1172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4247.224682][ T28] audit: type=1400 audit(4247.140:703): avc: denied { watch } for pid=1413 comm="syz.1.8441" path="/syzcgroup/net/syz1/syz0" dev="cgroup" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 4247.584673][ T28] audit: type=1400 audit(4247.500:704): avc: denied { mount } for pid=1434 comm="syz.1.8443" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 4247.860059][ T1172] hsr_slave_0: entered promiscuous mode [ 4247.862243][ T1172] hsr_slave_1: entered promiscuous mode [ 4248.584623][ T1172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4248.598257][ T1172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4248.613044][ T1172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4248.628959][ T1172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4249.406361][ T1172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4249.984572][ T1172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 4250.516545][ T28] audit: type=1400 audit(4250.430:705): avc: denied { create } for pid=1611 comm="syz.1.8445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 4252.028278][T29016] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 4252.212828][T29016] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 4252.214616][T29016] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 4252.220108][T29016] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 4252.223198][T29016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4252.448929][T29016] usb 2-1: usb_control_msg returned -32 [ 4252.449996][T29016] usbtmc 2-1:16.0: can't read capabilities [ 4252.511309][ T1172] veth0_vlan: entered promiscuous mode [ 4252.533627][ T1172] veth1_vlan: entered promiscuous mode [ 4252.580036][ T1172] veth0_macvtap: entered promiscuous mode [ 4252.593923][ T1172] veth1_macvtap: entered promiscuous mode [ 4252.661292][ T957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.662289][ T957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.662893][ T957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.663105][ T957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4255.102361][ T28] audit: type=1400 audit(4255.020:706): avc: denied { set_context_mgr } for pid=1692 comm="syz.0.8455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 4255.887934][T31168] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 4256.038534][T31168] usb 1-1: Using ep0 maxpacket: 32 [ 4256.060273][T31168] usb 1-1: unable to get BOS descriptor or descriptor too short [ 4256.060766][T31168] usb 1-1: no configurations [ 4256.061240][T31168] usb 1-1: can't read configurations, error -22 [ 4257.481011][ T28] audit: type=1400 audit(4257.380:707): avc: denied { view } for pid=1720 comm="syz.0.8462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 4264.204109][T26997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4264.270851][T26997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4264.343441][T26997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4264.422021][T26997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4264.684902][T26997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4264.690192][T26997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4264.692836][T26997] bond0 (unregistering): Released all slaves [ 4264.761181][T26997] hsr_slave_0: left promiscuous mode [ 4264.764308][T26997] hsr_slave_1: left promiscuous mode [ 4264.788567][T26997] veth1_macvtap: left promiscuous mode [ 4264.789027][T26997] veth0_macvtap: left promiscuous mode [ 4264.789416][T26997] veth1_vlan: left promiscuous mode [ 4264.789966][T26997] veth0_vlan: left promiscuous mode [ 4266.001266][T29016] usb 2-1: USB disconnect, device number 49 [ 4267.255501][ T1745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4267.263409][ T1745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4268.782354][ T1745] hsr_slave_0: entered promiscuous mode [ 4268.784600][ T1745] hsr_slave_1: entered promiscuous mode [ 4269.135810][ T28] audit: type=1400 audit(4269.050:708): avc: denied { name_bind } for pid=2052 comm="syz.1.8481" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 4269.201928][ T1745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4269.210853][ T1745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4269.221970][ T1745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4269.241786][ T1745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4270.196483][ T1745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4273.194249][ T1745] veth0_vlan: entered promiscuous mode [ 4273.214679][ T1745] veth1_vlan: entered promiscuous mode [ 4273.286849][ T1745] veth0_macvtap: entered promiscuous mode [ 4273.298737][ T1745] veth1_macvtap: entered promiscuous mode [ 4273.365783][T26991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4273.373446][T26991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4273.373889][T26991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4273.394429][T26991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4276.958604][ T2128] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4280.082616][ T28] audit: type=1400 audit(4280.000:709): avc: denied { nlmsg_write } for pid=2212 comm="syz.1.8500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 4280.681046][ T2222] syzkaller0: entered promiscuous mode [ 4280.681454][ T2222] syzkaller0: entered allmulticast mode [ 4281.584751][ T2237] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 4281.584751][ T2237] The task syz.1.8503 (2237) triggered the difference, watch for misbehavior. [ 4281.611094][ T2236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4281.611847][ T2236] IPv6: NLM_F_CREATE should be set when creating new route [ 4282.534152][T26996] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4282.535622][T26996] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4282.535954][T26996] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4282.536172][T26996] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4284.546271][ T2274] syzkaller0: entered promiscuous mode [ 4284.546804][ T2274] syzkaller0: entered allmulticast mode [ 4284.593499][ T2274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8513'. [ 4285.658606][ T2304] fuse: Bad value for 'fd' [ 4285.792124][ T28] audit: type=1400 audit(4285.710:710): avc: denied { map } for pid=2305 comm="syz.2.8521" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 4285.818987][ T2306] binder: 2305:2306 ioctl c0306201 200003c0 returned -14 [ 4285.822226][ T28] audit: type=1400 audit(4285.740:711): avc: denied { call } for pid=2305 comm="syz.2.8521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 4288.214034][ T2319] fuse: Bad value for 'fd' [ 4290.226053][ T2338] fuse: Bad value for 'fd' [ 4292.626137][ T2357] SELinux: failed to load policy [ 4293.749320][ T2377] input: syz0 as /devices/virtual/input/input20 [ 4295.326566][ T2403] syzkaller1: entered promiscuous mode [ 4295.357796][ T2403] syzkaller1: entered allmulticast mode [ 4296.227987][ T2411] binder: 2410:2411 ioctl c0306201 20001280 returned -22 [ 4298.628317][ T2436] syzkaller0: entered promiscuous mode [ 4298.635716][ T2436] syzkaller0: entered allmulticast mode [ 4298.681999][ T28] audit: type=1400 audit(4298.600:712): avc: denied { relabelfrom } for pid=2434 comm="syz.1.8562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 4298.684659][ T28] audit: type=1400 audit(4298.600:713): avc: denied { relabelto } for pid=2434 comm="syz.1.8562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 4301.104549][ T2459] fuse: Bad value for 'fd' [ 4302.544495][ T2467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8573'. [ 4302.545216][ T2467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8573'. [ 4304.512203][ T2482] fuse: Bad value for 'fd' [ 4305.391450][ T2485] syzkaller0: create flow: hash 308585066 index 1 [ 4305.473817][ T2485] syzkaller0: delete flow: hash 308585066 index 1 [ 4307.145837][ T28] audit: type=1326 audit(4307.060:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2496 comm="syz.2.8580" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 4311.368133][ T2499] syzkaller0: entered promiscuous mode [ 4311.368758][ T2499] syzkaller0: entered allmulticast mode [ 4311.846532][ T2507] fuse: Bad value for 'fd' [ 4311.982618][ T2503] netlink: 'syz.1.8579': attribute type 4 has an invalid length. [ 4317.598801][ T2526] syzkaller0: entered promiscuous mode [ 4317.599272][ T2526] syzkaller0: entered allmulticast mode [ 4319.362206][ T2558] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8594'. [ 4323.475487][ T2644] syzkaller0: entered promiscuous mode [ 4323.475720][ T2644] syzkaller0: entered allmulticast mode [ 4325.507935][T22976] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 4325.662989][T22976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 4325.663777][T22976] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 4325.664021][T22976] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4325.682543][T22976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 4325.682734][T22976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 4325.682892][T22976] usb 2-1: Product: syz [ 4325.682984][T22976] usb 2-1: Manufacturer: syz [ 4325.683009][T22976] usb 2-1: SerialNumber: syz [ 4325.901408][T22976] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 4326.141249][T22976] usb 2-1: USB disconnect, device number 50 [ 4326.148863][T22976] usblp0: removed [ 4329.278469][ T28] audit: type=1400 audit(4329.200:715): avc: denied { read write } for pid=2701 comm="syz.1.8614" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 4329.280000][ T28] audit: type=1400 audit(4329.200:716): avc: denied { open } for pid=2701 comm="syz.1.8614" path="/95/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 4329.282546][ T28] audit: type=1400 audit(4329.200:717): avc: denied { ioctl } for pid=2701 comm="syz.1.8614" path="/95/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 4330.325328][ T28] audit: type=1400 audit(4330.240:718): avc: denied { read write } for pid=2721 comm="getty" path="/dev/ttyAMA0" dev="devtmpfs" ino=758 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 4330.376062][ T28] audit: type=1400 audit(4330.290:719): avc: denied { open } for pid=2721 comm="getty" path="/dev/tty" dev="devtmpfs" ino=10 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 4330.381079][ T28] audit: type=1400 audit(4330.290:720): avc: denied { ioctl } for pid=2721 comm="getty" path="/dev/tty" dev="devtmpfs" ino=10 ioctlcmd=0x5422 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 4330.385018][ T28] audit: type=1400 audit(4330.300:721): avc: denied { setattr } for pid=2721 comm="getty" name="ttyAMA0" dev="devtmpfs" ino=758 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 4330.391789][ T28] audit: type=1400 audit(4330.310:722): avc: denied { search } for pid=2721 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4330.394887][ T28] audit: type=1400 audit(4330.310:723): avc: denied { read write } for pid=2721 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 4330.398587][ T28] audit: type=1400 audit(4330.310:724): avc: denied { open } for pid=2721 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 syzkaller syzkaller login: [ 4332.491271][ T2726] netlink: 272 bytes leftover after parsing attributes in process `syz.1.8623'. [ 4338.948446][T12095] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 4339.097811][T12095] usb 2-1: Using ep0 maxpacket: 32 [ 4339.104666][T12095] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4339.105092][T12095] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4339.126930][T12095] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 4339.127747][T12095] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 4339.128088][T12095] usb 2-1: Product: syz [ 4339.128140][T12095] usb 2-1: Manufacturer: syz [ 4339.128166][T12095] usb 2-1: SerialNumber: syz [ 4339.155922][T12095] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 4339.369214][T13005] usb 2-1: USB disconnect, device number 51 [ 4339.385676][T13005] appletouch 2-1:1.0: input: appletouch disconnected [ 4339.642517][ T2806] binder: 2805:2806 ioctl c0306201 200003c0 returned -14 [ 4342.628296][T13005] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 4342.788143][T13005] usb 2-1: Using ep0 maxpacket: 8 [ 4342.797343][T13005] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 4342.799774][T13005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4349.836582][ T2871] fuse: Bad value for 'group_id' [ 4349.837970][ T2871] fuse: Bad value for 'group_id' [ 4349.956523][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 4349.965910][ T28] audit: type=1326 audit(4349.870:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.2.8661" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x0 [ 4356.634690][T22976] usb 2-1: USB disconnect, device number 52 [ 4357.298720][ T2907] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 4372.851013][ T2999] fuse: Bad value for 'user_id' [ 4372.855424][ T2999] fuse: Bad value for 'user_id' [ 4375.645583][ T3016] fuse: Bad value for 'user_id' [ 4375.646045][ T3016] fuse: Bad value for 'user_id' [ 4376.040837][ T3028] fuse: Bad value for 'fd' [ 4377.073928][ T3044] fuse: Bad value for 'fd' [ 4382.656264][ T3092] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 4382.663330][ T3092] 8<--- cut here --- [ 4382.663707][ T3092] Unable to handle kernel paging request at virtual address fee04f27 when write [ 4382.664126][ T3092] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 4382.665255][ T3092] Internal error: Oops: a06 [#1] SMP ARM [ 4382.668199][ T3092] Modules linked in: [ 4382.668710][ T3092] CPU: 1 UID: 0 PID: 3092 Comm: syz.2.8738 Tainted: G L syzkaller #0 PREEMPT [ 4382.670033][ T3092] Tainted: [L]=SOFTLOCKUP [ 4382.671283][ T3092] Hardware name: ARM-Versatile Express [ 4382.672224][ T3092] PC is at parport_attach+0x174/0x1d0 [ 4382.672753][ T3092] LR is at parport_attach+0x164/0x1d0 [ 4382.673126][ T3092] pc : [<81432c7c>] lr : [<81432c6c>] psr: 60000013 [ 4382.673793][ T3092] sp : ea5d9d30 ip : ea5d9d30 fp : ea5d9d54 [ 4382.674125][ T3092] r10: 82b2efdc r9 : 00000003 r8 : 8339f6c0 [ 4382.674514][ T3092] r7 : ea5d9d90 r6 : 8339f6c0 r5 : 00000000 r4 : 00000000 [ 4382.674977][ T3092] r3 : fee04f27 r2 : 81e24918 r1 : 00000001 r0 : 814328ec [ 4382.675480][ T3092] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 4382.675914][ T3092] Control: 30c5387d Table: 85f95800 DAC: 00000000 [ 4382.676291][ T3092] Register r0 information: non-slab/vmalloc memory [ 4382.677569][ T3092] Register r1 information: non-paged memory [ 4382.678379][ T3092] Register r2 information: non-slab/vmalloc memory [ 4382.679084][ T3092] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 4382.679883][ T3092] Register r4 information: NULL pointer [ 4382.680411][ T3092] Register r5 information: NULL pointer [ 4382.680728][ T3092] Register r6 information: slab kmalloc-192 start 8339f6c0 pointer offset 0 size 192 [ 4382.681809][ T3092] Register r7 information: 2-page vmalloc region starting at 0xea5d8000 allocated at kernel_clone+0xac/0x428 [ 4382.681920][ T28] audit: type=1400 audit(4382.580:731): avc: denied { write } for pid=3085 comm="syz-executor" path="pipe:[1825]" dev="pipefs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 4382.683769][ T3092] Register r8 information: slab kmalloc-192 start 8339f6c0 pointer offset 0 size 192 [ 4382.684306][ T3092] Register r9 information: non-paged memory [ 4382.684613][ T3092] Register r10 information: non-slab/vmalloc memory [ 4382.684944][ T3092] Register r11 information: 2-page vmalloc region starting at 0xea5d8000 allocated at kernel_clone+0xac/0x428 [ 4382.685616][ T3092] Register r12 information: 2-page vmalloc region starting at 0xea5d8000 allocated at kernel_clone+0xac/0x428 [ 4382.686230][ T3092] Process syz.2.8738 (pid: 3092, stack limit = 0xea5d8000) [ 4382.686621][ T3092] Stack: (0xea5d9d30 to 0xea5da000) [ 4382.686965][ T3092] 9d20: 8244454c 8339f6c0 829d66c0 829d66c0 [ 4382.687645][ T3092] 9d40: 81e24dd8 00000000 ea5d9d8c ea5d9d58 8142e7f0 81432b14 40946400 00000000 [ 4382.688065][ T3092] 9d60: ea5d9d7c 200000c0 8339f6c0 b5403587 40946400 00000003 00000003 85402400 [ 4382.688533][ T3092] 9d80: ea5d9e4c ea5d9d90 81429ffc 8142e6f0 656d6f63 705f6964 6f707261 00007472 [ 4382.688981][ T3092] 9da0: 00000000 00004f27 0000001f 00010000 00000004 00000003 00000cc7 00000004 [ 4382.689479][ T3092] 9dc0: 00080008 0000000e 00000006 00000002 00000001 00000007 00000001 00000006 [ 4382.689864][ T3092] 9de0: 10000105 00000000 0001a44d 00000003 3fff7fff 0000008a 00000010 00000001 [ 4382.690240][ T3092] 9e00: 20001e58 0080000b 00000e69 0000003c 00000008 00000006 ffffffff effffff8 [ 4382.690682][ T3092] 9e20: 00000000 7a91edbe 00000000 85ff5300 8339f6c0 200000c0 40946400 00000003 [ 4382.691080][ T3092] 9e40: ea5d9f14 ea5d9e50 8142b320 81429f34 00000000 7a91edbe 00000000 00000000 [ 4382.691458][ T3092] 9e60: 824b857c ea5d9ea4 0000005f 841f8250 00000064 8339f6f0 ea5d9ee4 ea5d9e88 [ 4382.691851][ T3092] 9e80: 807cf048 807c5420 00000064 00000001 00000000 ea5d9ea4 830ce190 8342c330 [ 4382.692225][ T3092] 9ea0: 00006400 0000000b ea5d9e98 00000000 00000000 7a91edbe 00000000 85ff5300 [ 4382.692609][ T3092] 9ec0: 40946400 200000c0 200000c0 85ff5300 00000003 85402400 ea5d9ef4 ea5d9ee8 [ 4382.692998][ T3092] 9ee0: 807cf178 7a91edbe ea5d9f14 00000000 85ff5301 40946400 200000c0 85ff5300 [ 4382.693373][ T3092] 9f00: 00000003 85402400 ea5d9fa4 ea5d9f18 80590510 8142afd8 ecac8b10 85402400 [ 4382.693759][ T3092] 9f20: ea5d9f3c ea5d9f30 81ae3934 81ae3800 ea5d9f54 ea5d9f40 8025a824 8028c290 [ 4382.694201][ T3092] 9f40: ea5d9fb0 40000000 ea5d9f84 ea5d9f58 80220bf8 8025a7e0 00000000 8281d2bc [ 4382.694692][ T3092] 9f60: ea5d9fb0 0013e480 ecac8b10 80220b4c 00000000 7a91edbe ea5d9fac 00000000 [ 4382.695061][ T3092] 9f80: 00000000 00346310 00000036 8020029c 85402400 00000036 00000000 ea5d9fa8 [ 4382.695426][ T3092] 9fa0: 80200060 805902d8 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4382.695811][ T3092] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76fbe0dc [ 4382.696169][ T3092] 9fe0: 76fbde88 76fbde78 00018ba0 001302e0 60000010 00000003 00000000 00000000 [ 4382.696545][ T3092] Call trace: [ 4382.696786][ T3092] [<81432b08>] (parport_attach) from [<8142e7f0>] (comedi_device_attach+0x10c/0x248) [ 4382.697642][ T3092] r6:00000000 r5:81e24dd8 r4:829d66c0 [ 4382.698030][ T3092] [<8142e6e4>] (comedi_device_attach) from [<81429ffc>] (do_devconfig_ioctl+0xd4/0x21c) [ 4382.698867][ T3092] r10:85402400 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:8339f6c0 [ 4382.699325][ T3092] r4:200000c0 [ 4382.699517][ T3092] [<81429f28>] (do_devconfig_ioctl) from [<8142b320>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 4382.700070][ T3092] r8:00000003 r7:40946400 r6:200000c0 r5:8339f6c0 r4:85ff5300 [ 4382.700473][ T3092] [<8142afcc>] (comedi_unlocked_ioctl) from [<80590510>] (sys_ioctl+0x244/0xb5c) [ 4382.701081][ T3092] r10:85402400 r9:00000003 r8:85ff5300 r7:200000c0 r6:40946400 r5:85ff5301 [ 4382.701448][ T3092] r4:00000000 SYZFAIL: failed to recv rpc [ 4382.701636][ T3092] [<805902cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4382.702612][ T3092] Exception stack(0xea5d9fa8 to 0xea5d9ff0) [ 4382.702894][ T3092] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4382.703294][ T3092] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76fbe0dc [ 4382.703744][ T3092] 9fe0: 76fbde88 76fbde78 00018ba0 001302e0 [ 4382.704004][ T3092] r10:00000036 r9:85402400 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 4382.704558][ T3092] r4:00000000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4382.705268][ T3092] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 4382.707884][ T3092] ---[ end trace 0000000000000000 ]--- [ 4382.718921][ T28] audit: type=1400 audit(4382.630:732): avc: denied { read } for pid=2897 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 4382.727782][ T28] audit: type=1400 audit(4382.640:733): avc: denied { search } for pid=2897 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4382.728261][ T28] audit: type=1400 audit(4382.640:734): avc: denied { search } for pid=2897 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4382.728531][ T28] audit: type=1400 audit(4382.640:735): avc: denied { add_name } for pid=2897 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4382.728845][ T28] audit: type=1400 audit(4382.640:736): avc: denied { create } for pid=2897 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4382.729148][ T28] audit: type=1400 audit(4382.640:737): avc: denied { append open } for pid=2897 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4382.758825][ T3092] Kernel panic - not syncing: Fatal exception [ 4382.761317][ T3092] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:29:58 Registers: info registers vcpu 0 CPU#0 R00=826c12c4 R01=5b705000 R02=00cf38a5 R03=81ae4200 R04=00000006 R05=828f8388 R06=8281b680 R07=828f8380 R08=8281b680 R09=828f8388 R10=00000000 R11=82801e14 R12=82801e18 R13=82801e08 R14=803418c0 R15=81ae4210 PSR=60000093 -ZC- A S svc32 s00=20313830 s01=72697628 d00=7269762820313830 s02=38333420 s03=35362e32 d01=35362e3238333420 s04=34363236 s05=54205b5d d02=54205b5d34363236 s06=32393033 s07=6567205d d03=6567205d32393033 s08=7172696e s09=6c46203a d04=6c46203a7172696e s10=20736761 s11=6d73696d d05=6d73696d20736761 s12=68637461 s13=71726920 d06=7172692068637461 s14=2e313320 s15=32303020 d07=323030202e313320 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=822a7c18 R01=85402400 R02=00000000 R03=85402400 R04=85402400 R05=822a7c18 R06=82a032c2 R07=82a81154 R08=00000002 R09=00000c14 R10=00000000 R11=ea5d9b6c R12=ea5d9a60 R13=ea5d9b10 R14=81ab6494 R15=80279c6c PSR=60000193 -ZC- A S svc32 s00=72697628 s01=306f6974 d00=306f697472697628 s02=63282031 s03=64656d6f d01=64656d6f63282031 s04=7375205d s05=2d322062 d02=2d3220627375205d s06=4e203a31 s07=55207765 d03=552077654e203a31 s08=64204253 s09=63697665 d04=6369766564204253 s10=6f662065 s11=2c646e75 d05=2c646e756f662065 s12=56646920 s13=6f646e65 d06=6f646e6556646920 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000