last executing test programs: 2m53.033026261s ago: executing program 1 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b00010062726964676500"], 0x44}}, 0x4004010) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x8040) 2m52.943499463s ago: executing program 1 (id=364): poll(0x0, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488cc}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x6c, &(0x7f0000000240)=""/108, 0x40f00, 0xff4506342ad3aab1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x2, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x1, 0x3, 0x6}], 0x10, 0x9}, 0x94) syz_emit_ethernet(0x109, &(0x7f0000000480)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0xb, 0x23, "1e3852aa775cfb7b9e5a2f5217c421c6504563afa5a3a1a1723ce2a8776bd490ae283e4290b817058657d2c48b3231f9e20b499a974f63053f1ba005e39f1c12b28d0405cd8775bf5e49d801e7cfc0131a570fb362ca84651033cafcb8d6a509c68da97f030cb860ed7f2e5068e9e3a6d25abbfbf66782e9de2cdc690ff5f643c93875d83fc1d70f02e6c2276c9639706b8f044fb1aa2ce54480026172c98e4772fbef65e36beabd4d0701b22d40302574d44840a4f9745c9ea2247032d36e7e437c7ef2f4837c2f6b4a4fc9f9cf01303821fa22395aab88a22fd4adf3d8acd091771e185794ec6be04dcd075291b8378a3e38d7b52939f7"}}}}, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000440)=r7) 2m52.372929947s ago: executing program 1 (id=375): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x1434}) 2m52.285768395s ago: executing program 1 (id=376): r0 = socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) 2m52.285593951s ago: executing program 1 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x20000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2m50.773428262s ago: executing program 1 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x4000000000000, 0x0, 0x20044010}, 0x4040) 2m50.707422126s ago: executing program 32 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x4000000000000, 0x0, 0x20044010}, 0x4040) 15.341326455s ago: executing program 0 (id=2551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x400000, 0x1}) 15.101845771s ago: executing program 0 (id=2557): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) io_submit(0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 15.00199629s ago: executing program 0 (id=2561): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = fanotify_init(0x1, 0x800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r4, r3, r5, r3, r6], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r3, 0x0, 0x1, 0x0, 0x3}) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0x2, 0x3, 0x7, 0x200, 0x13ac}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x35, &(0x7f0000000300)=""/53, 0x41100, 0x8, '\x00', r12, 0x18, r7, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x6824, 0x9}, 0x10, 0x1c177, 0xffffffffffffffff, 0x6, &(0x7f00000003c0)=[r2, r7, r2], &(0x7f0000000400)=[{0x4, 0x2, 0x9, 0x5}, {0x5, 0x5, 0xa, 0x3}, {0x0, 0x5, 0xc, 0x6}, {0x0, 0x3, 0x5, 0x9}, {0x1, 0x4, 0x8, 0x1}, {0x4, 0x3, 0xd, 0x4}], 0x10, 0x8000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14.836523055s ago: executing program 0 (id=2564): futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x2) syz_usb_connect(0x1, 0x36, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @raw_data=[0x77, 0x2098, 0x1, 0x2, 0xfffffff7, 0xb, 0x8000, 0x8001, 0x500, 0xabdc, 0x8, 0x1, 0x6, 0x8000, 0x4, 0x4, 0x9, 0x7, 0x58, 0xffffff80, 0x10, 0x4, 0x3ee, 0x3, 0x1, 0xf, 0x3, 0x40, 0x4, 0x8, 0x10e, 0x2155]}) sendfile(r3, r3, 0x0, 0x1000007fd) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = dup3(r0, r6, 0x80000) r8 = dup(r7) read(r8, &(0x7f00000014c0)=""/4096, 0x1000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000740)={r12, 0x3ff}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000180)={r12, 0x9, 0x7}, &(0x7f00000001c0)=0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x77359400}, {r13, r14+60000000}}, 0x0) 13.177876008s ago: executing program 4 (id=2621): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 13.122001882s ago: executing program 4 (id=2623): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="5c00000012006bab9e3fe3d86e6c1d000014a10da6000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700b2b7", 0x5c}], 0x1, 0x0, 0xa6, 0x1f00c00e}, 0x4080) 12.90282479s ago: executing program 2 (id=2629): ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5326, 0x3) 12.400158826s ago: executing program 2 (id=2630): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, 0x0, 0xfe12482fe0801d67, 0xfffffffc, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.399495617s ago: executing program 2 (id=2632): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 12.331100324s ago: executing program 3 (id=2634): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x401}]}}}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@deltaction={0x88, 0x31, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb17}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) 12.329972997s ago: executing program 2 (id=2635): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = fanotify_init(0x1, 0x800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r4, r3, r5, r3, r6], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001080)={0xc, {"a2e3ad21ed0d30f91b5d310987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r3, 0x0, 0x1, 0x0, 0x3}) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0x2, 0x3, 0x7, 0x200, 0x13ac}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x35, &(0x7f0000000300)=""/53, 0x41100, 0x8, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x6824, 0x9}, 0x10, 0x1c177, 0xffffffffffffffff, 0x6, &(0x7f00000003c0)=[r2, r7, r2], &(0x7f0000000400)=[{0x4, 0x2, 0x9, 0x5}, {0x5, 0x5, 0xa, 0x3}, {0x0, 0x5, 0xc, 0x6}, {0x0, 0x3, 0x5, 0x9}, {0x1, 0x4, 0x8, 0x1}, {0x4, 0x3, 0xd, 0x4}], 0x10, 0x8000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.797179224s ago: executing program 4 (id=2636): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfdfbff7d, 0x7, 0x2, "0c41920887e8d2b7921105000000000000006b", 0x4, 0x203}) 9.796704561s ago: executing program 3 (id=2637): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x125) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) file_getattr(r2, 0x0, &(0x7f0000000040), 0x18, 0x1000) poll(&(0x7f0000000080)=[{r1, 0x1}], 0x1, 0x82a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x5, 0x0, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) shutdown(r5, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) pwrite64(r0, &(0x7f0000000180)="ed25aa52a889de87c4abe029f7163c7784e0accb253b466e1e9daa84748c5d347fdcd41578161f171e88798afb1c7128b0b26b2c573efe921e46fc619956e22bbd4027fcb3971524f59ad3bb7285b3ae3237ddf2ddf21763ceebe42eb12f", 0x5e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000004c0)={0x100000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x3d}, &(0x7f0000000280)=""/227, 0xe3, &(0x7f0000000380)=""/250, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58) waitid$P_PIDFD(0x3, r9, &(0x7f0000000540), 0x4, &(0x7f00000005c0)) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r10, 0x4068aea3, &(0x7f0000000680)) 9.796173138s ago: executing program 4 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000100)={0x1, 0x1}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) socket(0x1, 0x3, 0x1000) sendto$packet(r7, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x2480}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 3.28649321s ago: executing program 3 (id=2639): ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5326, 0x3) 3.285495952s ago: executing program 2 (id=2640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) shutdown(r4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') pread64(r5, &(0x7f0000019200)=""/102400, 0x19000, 0x1000000000) ioctl$CDROM_SELECT_SPEED(r3, 0x5326, 0x3) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x200700c8) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4024014}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) 3.284135227s ago: executing program 4 (id=2641): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, 0x0, 0xfe12482fe0801d67, 0xfffffffc, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.283833289s ago: executing program 3 (id=2642): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r0) io_submit(0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.281679833s ago: executing program 4 (id=2643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0x200440ee) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0xa, [@datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x4, 0xc4, 0xffffffff}, {0x5, 0x8, 0x583}, {0x1, 0x2, 0x9}, {0x5, 0x8, 0x6}, {0x2, 0xf5, 0x7}, {0x3, 0x4, 0x1}, {0x1, 0x1}], 'I'}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @float={0x8, 0x0, 0x0, 0x10, 0xc}, @struct={0xd, 0x3, 0x0, 0x4, 0x0, 0xcf4e, [{0x0, 0x1, 0x3}, {0x8}, {0xe, 0x2, 0xa}]}, @var={0x1, 0x0, 0x0, 0xe, 0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x6e, 0x7}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x3, 0x9}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x5f, 0x30, 0x2e, 0x61]}}, &(0x7f0000000880)=""/180, 0x122, 0xb4, 0x1, 0xff}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0xffffffffffffff12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xf}]}) 3.281283557s ago: executing program 2 (id=2644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000001080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000004000000000000000300060000000000020001000000000000000000000000000300050000000004020000007f00000100000000093fc11c"], 0x50}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x200000, 0x17000}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 78.961095ms ago: executing program 0 (id=2645): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x401}]}}}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@deltaction={0x88, 0x31, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb17}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) 78.067888ms ago: executing program 3 (id=2646): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x118}, 0x0) 77.835781ms ago: executing program 3 (id=2647): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = fanotify_init(0x1, 0x800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x1, 0x100018, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[r4, r3, r5, r3, r6], 0x5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r3, 0x0, 0x1, 0x0, 0x3}) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 0 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0xac1414aa, @empty}, r8}}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r10 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r9, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2a) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): config #1, error -71 [ 185.468064][ T34] usb 7-1: USB disconnect, device number 18 [ 185.691434][T11131] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.836940][T11142] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 185.935311][T11148] team0: Device vlan2 is already an upper device of the team interface [ 186.282448][T11169] kernel profiling enabled (shift: 63) [ 186.286540][T11169] profiling shift: 63 too large [ 186.294310][T11171] tipc: Started in network mode [ 186.294324][T11171] tipc: Node identity e0, cluster identity 4711 [ 186.294330][T11171] tipc: Node number set to 224 [ 186.297484][ T42] audit: type=1400 audit(2000000037.659:761): avc: denied { setattr } for pid=11170 comm="syz.3.1830" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 186.336680][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1831'. [ 186.372609][T11176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.719539][T11204] kernel profiling enabled (shift: 63) [ 186.724345][T11204] profiling shift: 63 too large [ 186.817631][T11206] FAULT_INJECTION: forcing a failure. [ 186.817631][T11206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.834676][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.0.1841 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.834712][T11206] Tainted: [L]=SOFTLOCKUP [ 186.834719][T11206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.834730][T11206] Call Trace: [ 186.834737][T11206] [ 186.834745][T11206] dump_stack_lvl+0x100/0x190 [ 186.834778][T11206] should_fail_ex.cold+0x5/0xa [ 186.834804][T11206] _copy_to_user+0x32/0xd0 [ 186.834834][T11206] simple_read_from_buffer+0xcb/0x170 [ 186.834858][T11206] proc_fail_nth_read+0x1af/0x230 [ 186.834909][T11206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.834941][T11206] ? rw_verify_area+0xce/0x6d0 [ 186.834967][T11206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.834996][T11206] vfs_read+0x1e4/0xb40 [ 186.835023][T11206] ? __pfx_vfs_read+0x10/0x10 [ 186.835050][T11206] ? __fget_files+0x215/0x3d0 [ 186.835081][T11206] ? __fget_files+0x21f/0x3d0 [ 186.835110][T11206] ksys_read+0x12a/0x250 [ 186.835124][T11206] ? __pfx_ksys_read+0x10/0x10 [ 186.835148][T11206] do_syscall_64+0x115/0x870 [ 186.835171][T11206] ? clear_bhb_loop+0x70/0xc0 [ 186.835193][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.835211][T11206] RIP: 0033:0x7f2b28b5e90e [ 186.835225][T11206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.835241][T11206] RSP: 002b:00007f2b29a46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.835262][T11206] RAX: ffffffffffffffda RBX: 00007f2b29a476c0 RCX: 00007f2b28b5e90e [ 186.835274][T11206] RDX: 000000000000000f RSI: 00007f2b29a470a0 RDI: 0000000000000005 [ 186.835284][T11206] RBP: 00007f2b29a47090 R08: 0000000000000000 R09: 0000000000000000 [ 186.835295][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.835307][T11206] R13: 00007f2b28e26038 R14: 00007f2b28e25fa0 R15: 00007ffd399f77d8 [ 186.835343][T11206] [ 187.004761][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 187.082728][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1848'. [ 187.549240][T11232] device-mapper: ioctl: Target spec extends beyond end of parameters [ 187.555140][T11232] device-mapper: ioctl: unable to find target [ 187.747982][T11241] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1856'. [ 187.832345][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 187.980379][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 188.130943][ T24] usb 7-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 188.135500][ T24] usb 7-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.142798][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.145547][ T24] usb 7-1: Product: syz [ 188.146884][ T24] usb 7-1: Manufacturer: syz [ 188.148448][ T24] usb 7-1: SerialNumber: syz [ 188.199074][T11267] device-mapper: ioctl: Target spec extends beyond end of parameters [ 188.202556][T11267] device-mapper: ioctl: unable to find target [ 188.579647][T11281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.601925][T11279] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1870'. [ 188.692973][T11292] batman_adv: batadv0: Adding interface: veth0 [ 188.696022][T11292] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.705530][T11292] batman_adv: batadv0: Interface activated: veth0 [ 188.732424][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1872'. [ 188.736908][T11284] batman_adv: batadv0: Interface deactivated: veth0 [ 188.739817][T11284] batman_adv: batadv0: Removing interface: veth0 [ 188.938097][T11301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1879'. [ 189.083930][T11305] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1881'. [ 189.137894][T11315] device-mapper: ioctl: Target spec extends beyond end of parameters [ 189.144858][T11315] device-mapper: ioctl: unable to find target [ 189.205528][ T42] audit: type=1400 audit(2000000040.569:762): avc: denied { write } for pid=11325 comm="syz.0.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 189.207225][T11326] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1888'. [ 189.236551][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1888'. [ 189.239482][T11326] tipc: Invalid UDP bearer configuration [ 189.239507][T11326] tipc: Enabling of bearer rejected, failed to enable media [ 189.244807][ T42] audit: type=1400 audit(2000000040.609:763): avc: denied { ioctl } for pid=11325 comm="syz.0.1888" path="socket:[47801]" dev="sockfs" ino=47801 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 189.360151][T11332] batman_adv: batadv0: Adding interface: veth0 [ 189.363107][T11332] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.372704][T11332] batman_adv: batadv0: Interface activated: veth0 [ 189.378818][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'. [ 189.382511][T11332] batman_adv: batadv0: Interface deactivated: veth0 [ 189.384646][T11332] batman_adv: batadv0: Removing interface: veth0 [ 189.621485][ T42] audit: type=1400 audit(2000000040.979:764): avc: denied { read } for pid=11343 comm="syz.3.1895" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 189.733814][T11353] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 189.738887][ T42] audit: type=1400 audit(2000000041.099:765): avc: denied { relabelto } for pid=11352 comm="syz.3.1898" name="bus" dev="tmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 189.745290][T11353] xt_cgroup: path and classid specified [ 189.748092][ T42] audit: type=1400 audit(2000000041.099:766): avc: denied { associate } for pid=11352 comm="syz.3.1898" name="bus" dev="tmpfs" ino=3057 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 189.754852][T11353] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 189.759015][ T42] audit: type=1400 audit(2000000041.119:767): avc: denied { mounton } for pid=11352 comm="syz.3.1898" path="/557/bus" dev="tmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 189.777675][T11353] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.782855][T11353] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 189.785517][T11353] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 189.802436][ T42] audit: type=1400 audit(2000000041.169:768): avc: denied { rmdir } for pid=5720 comm="syz-executor" name="bus" dev="tmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 190.401767][T11367] batman_adv: batadv0: Adding interface: veth0 [ 190.403914][T11367] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.412105][T11367] batman_adv: batadv0: Interface activated: veth0 [ 190.418751][T11367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1903'. [ 190.422280][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.424785][T11367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.428742][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.431455][T11367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.434445][T11367] batman_adv: batadv0: Interface deactivated: veth0 [ 190.436705][T11367] batman_adv: batadv0: Removing interface: veth0 [ 190.745664][T11380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.755070][T11380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.758003][ T24] usb 7-1: USB disconnect, device number 19 [ 190.835093][T11386] FAULT_INJECTION: forcing a failure. [ 190.835093][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 190.839288][T11386] CPU: 2 UID: 0 PID: 11386 Comm: syz.2.1912 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.839307][T11386] Tainted: [L]=SOFTLOCKUP [ 190.839311][T11386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.839325][T11386] Call Trace: [ 190.839331][T11386] [ 190.839336][T11386] dump_stack_lvl+0x100/0x190 [ 190.839381][T11386] should_fail_ex.cold+0x5/0xa [ 190.839407][T11386] should_failslab+0xc2/0x120 [ 190.839435][T11386] __kmalloc_noprof+0xfc/0x820 [ 190.839448][T11386] ? rcu_is_watching+0x12/0xc0 [ 190.839474][T11386] ? tomoyo_realpath_from_path+0xb6/0x690 [ 190.839501][T11386] tomoyo_realpath_from_path+0xb6/0x690 [ 190.839516][T11386] tomoyo_path_number_perm+0x23c/0x580 [ 190.839533][T11386] ? tomoyo_path_number_perm+0x22e/0x580 [ 190.839549][T11386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.839579][T11386] ? find_held_lock+0x2b/0x80 [ 190.839595][T11386] ? __fget_files+0x215/0x3d0 [ 190.839613][T11386] ? hook_file_ioctl_common+0x140/0x440 [ 190.839626][T11386] ? __fget_files+0x215/0x3d0 [ 190.839640][T11386] ? __fget_files+0x21f/0x3d0 [ 190.839654][T11386] security_file_ioctl+0xd3/0x230 [ 190.839678][T11386] __x64_sys_ioctl+0xb7/0x210 [ 190.839718][T11386] do_syscall_64+0x115/0x870 [ 190.839768][T11386] ? clear_bhb_loop+0x70/0xc0 [ 190.839783][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.839795][T11386] RIP: 0033:0x7f96ed39e0d9 [ 190.839805][T11386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.839817][T11386] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.839836][T11386] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 190.839843][T11386] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 190.839850][T11386] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 190.839856][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.839862][T11386] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 190.839877][T11386] [ 190.839883][T11386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.904192][ T42] audit: type=1400 audit(2000000042.269:769): avc: denied { write } for pid=11387 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.055577][T11389] infiniband syz2: set active [ 191.058325][T11389] infiniband syz2: added ipvlan0 [ 191.075349][T11389] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.082365][T11389] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.089898][T11389] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.117426][T11389] RDS/IB: syz2: added [ 191.123069][T11389] smc: adding ib device syz2 with port count 1 [ 191.130506][T11389] smc: ib device syz2 port 1 has no pnetid [ 191.274082][T11398] batman_adv: batadv0: Adding interface: veth0 [ 191.276145][T11398] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.284446][T11398] batman_adv: batadv0: Interface activated: veth0 [ 191.291442][T11398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'. [ 191.294630][T11398] batman_adv: batadv0: Interface deactivated: veth0 [ 191.296791][T11398] batman_adv: batadv0: Removing interface: veth0 [ 191.299577][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'. [ 191.542865][T11414] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 191.572217][T11414] affs: No valid root block on device nullb0 [ 191.601541][ T42] audit: type=1400 audit(2000000042.969:770): avc: denied { setopt } for pid=11420 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.049694][T11446] device-mapper: table: 248:0: : unknown target type [ 192.052263][T11446] device-mapper: ioctl: error adding target to table [ 192.633891][T11475] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16402 sclass=netlink_xfrm_socket pid=11475 comm=syz.2.1943 [ 192.660575][ T5592] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.664254][ T5592] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.667998][ T5592] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.671798][ T5592] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.774406][T11483] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 193.347194][T11506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.404423][ T42] audit: type=1400 audit(2000000044.769:771): avc: denied { setopt } for pid=11510 comm="syz.2.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.405466][T11512] Cannot find del_set index 1 as target [ 193.410158][T11511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 193.799651][T11539] fuse: Bad value for 'fd' [ 194.022609][T11557] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.104499][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.108901][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.148798][T11563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.159729][T11563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.164773][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.166858][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.172172][T11563] veth1_vlan: left promiscuous mode [ 194.175478][T11563] veth0_vlan: left promiscuous mode [ 194.179201][T11563] veth0_vlan: entered promiscuous mode [ 194.184248][T11563] veth1_vlan: entered promiscuous mode [ 194.191332][T11563] veth1_macvtap: left promiscuous mode [ 194.194702][T11563] veth0_macvtap: left promiscuous mode [ 194.197903][T11563] veth0_macvtap: entered promiscuous mode [ 194.201765][T11563] veth1_macvtap: entered promiscuous mode [ 194.209577][T11563] 8021q: adding VLAN 0 to HW filter on device ÿÿÿÿÿÿ [ 194.213863][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.218212][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.223286][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.259877][T11568] __nla_validate_parse: 11 callbacks suppressed [ 194.259919][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 194.358723][T11568] bond3: entered promiscuous mode [ 194.362250][T11568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.378853][T11564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.381800][T11564] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 194.386898][T11564] bond3: (slave ipip0): Error -95 calling set_mac_address [ 194.410521][ T5800] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.416238][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.420089][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.443223][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.506435][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 194.506461][ T42] audit: type=1400 audit(2000000045.869:773): avc: denied { write } for pid=11571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.567093][ T42] audit: type=1400 audit(2000000045.929:774): avc: denied { write } for pid=11574 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.646337][ T42] audit: type=1400 audit(2000000046.009:775): avc: denied { write } for pid=11578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.697783][ T42] audit: type=1400 audit(2000000046.059:776): avc: denied { write } for pid=11583 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.947631][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'. [ 195.125868][T11606] syzkaller0: entered promiscuous mode [ 195.128389][T11606] syzkaller0: entered allmulticast mode [ 195.558344][T11624] xt_hashlimit: size too large, truncated to 1048576 [ 195.611563][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 195.725990][ T5871] IPVS: starting estimator thread 0... [ 195.830449][T11637] IPVS: using max 43 ests per chain, 103200 per kthread [ 196.569320][T11678] FAULT_INJECTION: forcing a failure. [ 196.569320][T11678] name failslab, interval 1, probability 0, space 0, times 0 [ 196.573509][T11678] CPU: 1 UID: 0 PID: 11678 Comm: syz.2.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.573528][T11678] Tainted: [L]=SOFTLOCKUP [ 196.573532][T11678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.573545][T11678] Call Trace: [ 196.573550][T11678] [ 196.573567][T11678] dump_stack_lvl+0x100/0x190 [ 196.573613][T11678] should_fail_ex.cold+0x5/0xa [ 196.573634][T11678] should_failslab+0xc2/0x120 [ 196.573662][T11678] __kmalloc_noprof+0xfc/0x820 [ 196.573676][T11678] ? __pfx_dynamic_dname+0x10/0x10 [ 196.573701][T11678] ? tomoyo_encode2+0xfb/0x3c0 [ 196.573726][T11678] tomoyo_encode2+0xfb/0x3c0 [ 196.573739][T11678] tomoyo_encode+0x29/0x50 [ 196.573749][T11678] tomoyo_realpath_from_path+0x18c/0x690 [ 196.573763][T11678] tomoyo_path_number_perm+0x23c/0x580 [ 196.573779][T11678] ? tomoyo_path_number_perm+0x22e/0x580 [ 196.573796][T11678] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.573827][T11678] ? find_held_lock+0x2b/0x80 [ 196.573843][T11678] ? __fget_files+0x215/0x3d0 [ 196.573860][T11678] ? hook_file_ioctl_common+0x140/0x440 [ 196.573877][T11678] ? __fget_files+0x215/0x3d0 [ 196.573891][T11678] ? __fget_files+0x21f/0x3d0 [ 196.573905][T11678] security_file_ioctl+0xd3/0x230 [ 196.573930][T11678] __x64_sys_ioctl+0xb7/0x210 [ 196.573949][T11678] do_syscall_64+0x115/0x870 [ 196.573998][T11678] ? clear_bhb_loop+0x70/0xc0 [ 196.574012][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.574024][T11678] RIP: 0033:0x7f96ed39e0d9 [ 196.574035][T11678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.574046][T11678] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.574067][T11678] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 196.574074][T11678] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 196.574080][T11678] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 196.574087][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.574093][T11678] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 196.574108][T11678] [ 196.574193][T11678] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.907106][T11704] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.062190][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'. [ 197.254776][T11723] FAULT_INJECTION: forcing a failure. [ 197.254776][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 197.259802][T11723] CPU: 3 UID: 0 PID: 11723 Comm: syz.2.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.259829][T11723] Tainted: [L]=SOFTLOCKUP [ 197.259835][T11723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.259844][T11723] Call Trace: [ 197.259851][T11723] [ 197.259857][T11723] dump_stack_lvl+0x100/0x190 [ 197.259884][T11723] should_fail_ex.cold+0x5/0xa [ 197.259904][T11723] should_failslab+0xc2/0x120 [ 197.259926][T11723] __kmalloc_noprof+0xfc/0x820 [ 197.259944][T11723] ? kasan_save_track+0x14/0x30 [ 197.259963][T11723] ? __kasan_kmalloc+0xaa/0xb0 [ 197.259981][T11723] ? drm_atomic_commit_init+0xf4/0x490 [ 197.260027][T11723] drm_atomic_commit_init+0xf4/0x490 [ 197.260048][T11723] drm_atomic_commit_alloc+0xd3/0x120 [ 197.260068][T11723] drm_mode_atomic_ioctl+0x395/0x2680 [ 197.260091][T11723] ? avc_has_extended_perms+0x33a/0x1080 [ 197.260116][T11723] ? avc_has_extended_perms+0x484/0x1080 [ 197.260135][T11723] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 197.260155][T11723] ? __lock_acquire+0x49f/0x1a40 [ 197.260186][T11723] ? drm_is_current_master+0x2c/0x40 [ 197.260206][T11723] ? drm_is_current_master+0x2c/0x40 [ 197.260227][T11723] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.260253][T11723] drm_ioctl_kernel+0x1f3/0x3e0 [ 197.260298][T11723] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 197.260318][T11723] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 197.260342][T11723] drm_ioctl+0x5e6/0xc60 [ 197.260363][T11723] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 197.260383][T11723] ? __pfx_drm_ioctl+0x10/0x10 [ 197.260409][T11723] ? selinux_file_ioctl+0x13b/0x290 [ 197.260439][T11723] ? selinux_file_ioctl+0xb6/0x290 [ 197.260463][T11723] ? __pfx_drm_ioctl+0x10/0x10 [ 197.260482][T11723] __x64_sys_ioctl+0x18e/0x210 [ 197.260508][T11723] do_syscall_64+0x115/0x870 [ 197.260529][T11723] ? clear_bhb_loop+0x70/0xc0 [ 197.260548][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.260565][T11723] RIP: 0033:0x7f96ed39e0d9 [ 197.260579][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.260595][T11723] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.260613][T11723] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 197.260624][T11723] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 197.260633][T11723] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 197.260643][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.260652][T11723] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 197.260674][T11723] [ 197.435597][T11730] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.510880][ T42] audit: type=1400 audit(2000000048.879:777): avc: denied { ioctl } for pid=11731 comm="syz.3.2032" path="socket:[55582]" dev="sockfs" ino=55582 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.910478][ T148] page_pool_release_retry() stalled pool shutdown: id 58, 14 inflight 120 sec [ 198.279226][ T5723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.287525][ T5723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.291957][ T5723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.297415][ T5723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.301871][ T5723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.310578][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 198.421867][T11815] usb usb9: usbfs: process 11815 (syz.0.2059) did not claim interface 0 before use [ 198.874727][T11843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.879814][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.884315][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.886836][T11799] bridge_slave_0: entered allmulticast mode [ 198.890808][T11799] bridge_slave_0: entered promiscuous mode [ 198.894359][T11799] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.896709][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.899078][T11799] bridge_slave_1: entered allmulticast mode [ 198.902079][T11799] bridge_slave_1: entered promiscuous mode [ 198.930817][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.936044][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.953624][T11799] team0: Port device team_slave_0 added [ 198.956997][T11799] team0: Port device team_slave_1 added [ 198.999863][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.003533][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.014026][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.018728][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.022133][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.030642][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.066150][T11799] hsr_slave_0: entered promiscuous mode [ 199.068629][T11799] hsr_slave_1: entered promiscuous mode [ 199.072396][T11799] debugfs: 'hsr0' already exists in 'hsr' [ 199.074684][T11799] Cannot create hsr debugfs directory [ 199.244966][T11861] FAULT_INJECTION: forcing a failure. [ 199.244966][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 199.249137][T11861] CPU: 3 UID: 0 PID: 11861 Comm: syz.4.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.249155][T11861] Tainted: [L]=SOFTLOCKUP [ 199.249159][T11861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.249166][T11861] Call Trace: [ 199.249170][T11861] [ 199.249175][T11861] dump_stack_lvl+0x100/0x190 [ 199.249196][T11861] should_fail_ex.cold+0x5/0xa [ 199.249211][T11861] should_failslab+0xc2/0x120 [ 199.249227][T11861] __kmalloc_noprof+0xfc/0x820 [ 199.249241][T11861] ? __kasan_kmalloc+0xaa/0xb0 [ 199.249253][T11861] ? drm_atomic_commit_init+0x190/0x490 [ 199.249270][T11861] drm_atomic_commit_init+0x190/0x490 [ 199.249286][T11861] drm_atomic_commit_alloc+0xd3/0x120 [ 199.249299][T11861] drm_mode_atomic_ioctl+0x395/0x2680 [ 199.249316][T11861] ? avc_has_extended_perms+0x33a/0x1080 [ 199.249334][T11861] ? avc_has_extended_perms+0x484/0x1080 [ 199.249348][T11861] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 199.249362][T11861] ? __lock_acquire+0x49f/0x1a40 [ 199.249384][T11861] ? drm_is_current_master+0x2c/0x40 [ 199.249398][T11861] ? drm_is_current_master+0x2c/0x40 [ 199.249413][T11861] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.249432][T11861] drm_ioctl_kernel+0x1f3/0x3e0 [ 199.249444][T11861] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 199.249459][T11861] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 199.249476][T11861] drm_ioctl+0x5e6/0xc60 [ 199.249491][T11861] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 199.249506][T11861] ? __pfx_drm_ioctl+0x10/0x10 [ 199.249524][T11861] ? selinux_file_ioctl+0x13b/0x290 [ 199.249545][T11861] ? selinux_file_ioctl+0xb6/0x290 [ 199.249563][T11861] ? __pfx_drm_ioctl+0x10/0x10 [ 199.249577][T11861] __x64_sys_ioctl+0x18e/0x210 [ 199.249595][T11861] do_syscall_64+0x115/0x870 [ 199.249611][T11861] ? clear_bhb_loop+0x70/0xc0 [ 199.249625][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.249637][T11861] RIP: 0033:0x7f028059e0d9 [ 199.249647][T11861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.249658][T11861] RSP: 002b:00007f028141b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.249670][T11861] RAX: ffffffffffffffda RBX: 00007f0280825fa0 RCX: 00007f028059e0d9 [ 199.249677][T11861] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 199.249683][T11861] RBP: 00007f028141b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.249690][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.249696][T11861] R13: 00007f0280826038 R14: 00007f0280825fa0 R15: 00007ffe4d4173f8 [ 199.249710][T11861] [ 199.350452][T11799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.360670][T11799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.526365][T11799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.529686][T11799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.625908][ T42] audit: type=1400 audit(2000000050.989:778): avc: denied { setattr } for pid=11876 comm="syz.2.2079" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 199.674152][T11799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.680363][T11799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.787252][T11799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.791341][T11799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.942486][T11799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.964215][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.968391][T11799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.976247][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.980023][T11799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.985567][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.988520][T11799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.999736][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.072023][ T42] audit: type=1400 audit(2000000051.429:779): avc: denied { append } for pid=11900 comm="syz.2.2087" name="pfkey" dev="proc" ino=4026533389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 200.082516][T11799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.085612][ T42] audit: type=1400 audit(2000000051.449:780): avc: denied { setopt } for pid=11908 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.101784][T11799] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.107907][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.110752][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.119379][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.121687][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.390695][ T5731] Bluetooth: hci4: command tx timeout [ 200.401788][T11799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.437478][T11799] veth0_vlan: entered promiscuous mode [ 200.444968][T11799] veth1_vlan: entered promiscuous mode [ 200.467278][T11799] veth0_macvtap: entered promiscuous mode [ 200.472393][T11799] veth1_macvtap: entered promiscuous mode [ 200.493243][T11799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.511422][T11799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.562677][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.581282][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.581353][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2095'. [ 200.596432][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.663290][ T578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.667239][ T578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.694081][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.696936][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.713246][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.771838][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2054'. [ 200.784755][T11953] bond0: entered promiscuous mode [ 200.786853][T11953] bond_slave_0: entered promiscuous mode [ 200.789441][T11953] bond_slave_1: entered promiscuous mode [ 200.793614][T11953] gretap0: entered promiscuous mode [ 200.796610][T11953] debugfs: 'hsr1' already exists in 'hsr' [ 200.798781][T11953] Cannot create hsr debugfs directory [ 200.802006][T11953] hsr1: entered promiscuous mode [ 200.967602][T11970] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 200.970986][T11970] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2103'. [ 201.453453][ T5731] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 201.465799][T12000] fuse: Unknown parameter '000000000000000000000060x0000000000000005«ûÁW}y)0Þ\2ý‘2ȼõG'&£ÝçWΰîlÌwÞÐá|ÂV1n¡Fë´h2ûB°ŽÕ™QEÚ£óצþªg$‚>M)Œ ‡@~7ó㺂Cd]ùó–ÔHÚ¤Æyÿ<^îwA¹›¡hP¹dz'µ£Z±›ÂíÇܸçîòÞé [ 201.465799][T12000] ôòvT$ÍÑ´¦©' [ 201.465852][ T42] audit: type=1400 audit(2000000052.829:781): avc: denied { mounton } for pid=11999 comm="syz.4.2112" path="/361/file0/file0" dev="9p" ino=78905561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.566363][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2113'. [ 201.619419][ T42] audit: type=1400 audit(2000000052.979:782): avc: denied { append } for pid=12005 comm="syz.3.2114" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.995103][T12028] fuse: Unknown parameter 'fgÒ|‚zèÎqÄpâ• ™a—g‹ot?CI"}u‘Í L(üøÌî0x0000000000000005' [ 202.041271][T12030] kvm: kvm [12029]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 202.045442][T12030] kvm: kvm [12029]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 202.114726][T12030] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 202.139697][T12045] FAULT_INJECTION: forcing a failure. [ 202.139697][T12045] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 202.151909][T12045] CPU: 3 UID: 0 PID: 12045 Comm: syz.2.2128 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.151942][T12045] Tainted: [L]=SOFTLOCKUP [ 202.151946][T12045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.151959][T12045] Call Trace: [ 202.151970][T12045] [ 202.151975][T12045] dump_stack_lvl+0x100/0x190 [ 202.152033][T12045] should_fail_ex.cold+0x5/0xa [ 202.152064][T12045] ? prepare_alloc_pages+0x16d/0x5f0 [ 202.152093][T12045] should_fail_alloc_page+0xeb/0x140 [ 202.152126][T12045] prepare_alloc_pages+0x1f0/0x5f0 [ 202.152141][T12045] ? rcu_is_watching+0x12/0xc0 [ 202.152168][T12045] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 202.152186][T12045] ? look_up_lock_class+0x64/0x120 [ 202.152232][T12045] ? register_lock_class+0x40/0x560 [ 202.152251][T12045] ? find_held_lock+0x2b/0x80 [ 202.152262][T12045] ? ima_match_policy+0x8b8/0x2340 [ 202.152287][T12045] ? ima_match_policy+0x8b8/0x2340 [ 202.152302][T12045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.152315][T12045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.152332][T12045] ? __lock_acquire+0x49f/0x1a40 [ 202.152350][T12045] ? __lock_acquire+0x49f/0x1a40 [ 202.152364][T12045] ? __css_rstat_updated+0x1ce/0x5a0 [ 202.152390][T12045] ? __lock_acquire+0x49f/0x1a40 [ 202.152403][T12045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.152435][T12045] ? policy_nodemask+0xed/0x4f0 [ 202.152453][T12045] alloc_pages_mpol+0x1fb/0x540 [ 202.152471][T12045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.152487][T12045] ? find_held_lock+0x2b/0x80 [ 202.152497][T12045] ? __pud_alloc+0x4f6/0x690 [ 202.152513][T12045] ? __pud_alloc+0x4f6/0x690 [ 202.152531][T12045] alloc_pages_noprof+0x1a/0x160 [ 202.152549][T12045] __pmd_alloc+0x3b/0x950 [ 202.152564][T12045] ? __pud_alloc+0x4fb/0x690 [ 202.152581][T12045] __handle_mm_fault+0xa9c/0x2a00 [ 202.152595][T12045] ? mt_find+0x45e/0x8e0 [ 202.152612][T12045] ? __pfx___handle_mm_fault+0x10/0x10 [ 202.152623][T12045] ? __pfx_mt_find+0x10/0x10 [ 202.152647][T12045] ? find_vma+0xbf/0x140 [ 202.152661][T12045] ? __pfx_find_vma+0x10/0x10 [ 202.152678][T12045] handle_mm_fault+0x37b/0xa30 [ 202.152698][T12045] do_user_addr_fault+0x74c/0x12f0 [ 202.152748][T12045] exc_page_fault+0x6f/0xd0 [ 202.152772][T12045] asm_exc_page_fault+0x26/0x30 [ 202.152789][T12045] RIP: 0010:_copy_from_user+0x93/0xd0 [ 202.152825][T12045] Code: 88 ec fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 d9 1c 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 f5 82 [ 202.152842][T12045] RSP: 0018:ffffc90003847b38 EFLAGS: 00050246 [ 202.152870][T12045] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 202.152886][T12045] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90003847be8 [ 202.152897][T12045] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000708f7f [ 202.152908][T12045] R10: ffffc90003847bff R11: 0000000000000000 R12: 0000000000000000 [ 202.152918][T12045] R13: ffffc90003847be8 R14: 00000000800452d3 R15: 0000200000000100 [ 202.152943][T12045] ? _copy_from_user+0x87/0xd0 [ 202.152967][T12045] rfcomm_dev_ioctl+0x31f/0x1db0 [ 202.152994][T12045] ? bt_sock_ioctl+0x1df/0x580 [ 202.153016][T12045] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 202.153035][T12045] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 202.153060][T12045] ? tomoyo_path_number_perm+0x188/0x580 [ 202.153096][T12045] rfcomm_sock_ioctl+0xcc/0xf0 [ 202.153124][T12045] sock_do_ioctl+0x118/0x280 [ 202.153176][T12045] ? __pfx_sock_do_ioctl+0x10/0x10 [ 202.153210][T12045] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 202.153245][T12045] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.153280][T12045] sock_ioctl+0x599/0x6b0 [ 202.153299][T12045] ? __pfx_sock_ioctl+0x10/0x10 [ 202.153315][T12045] ? hook_file_ioctl_common+0x140/0x440 [ 202.153345][T12045] ? selinux_file_ioctl+0x13b/0x290 [ 202.153370][T12045] ? selinux_file_ioctl+0xb6/0x290 [ 202.153397][T12045] ? __pfx_sock_ioctl+0x10/0x10 [ 202.153416][T12045] __x64_sys_ioctl+0x18e/0x210 [ 202.153443][T12045] do_syscall_64+0x115/0x870 [ 202.153465][T12045] ? clear_bhb_loop+0x70/0xc0 [ 202.153486][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.153504][T12045] RIP: 0033:0x7f96ed39e0d9 [ 202.153521][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.153536][T12045] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.153552][T12045] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 202.153562][T12045] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 202.153573][T12045] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 202.153583][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.153593][T12045] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 202.153618][T12045] [ 202.458572][T12061] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 202.471818][ T5731] Bluetooth: hci4: command tx timeout [ 202.511525][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2136'. [ 202.561738][ T42] audit: type=1400 audit(2000000053.929:783): avc: denied { nlmsg_read } for pid=12078 comm="syz.0.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 202.566596][T12080] netlink: 'syz.0.2139': attribute type 5 has an invalid length. [ 202.590657][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.598725][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.714219][ T42] audit: type=1400 audit(2000000054.079:784): avc: denied { wake_alarm } for pid=12087 comm="syz.3.2142" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.723565][T12088] netlink: 'syz.3.2142': attribute type 5 has an invalid length. [ 202.748015][T12086] FAULT_INJECTION: forcing a failure. [ 202.748015][T12086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.753174][T12086] CPU: 3 UID: 0 PID: 12086 Comm: syz.4.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.753196][T12086] Tainted: [L]=SOFTLOCKUP [ 202.753200][T12086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.753207][T12086] Call Trace: [ 202.753211][T12086] [ 202.753216][T12086] dump_stack_lvl+0x100/0x190 [ 202.753237][T12086] should_fail_ex.cold+0x5/0xa [ 202.753252][T12086] _copy_to_user+0x32/0xd0 [ 202.753284][T12086] simple_read_from_buffer+0xcb/0x170 [ 202.753299][T12086] proc_fail_nth_read+0x1af/0x230 [ 202.753331][T12086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.753351][T12086] ? rw_verify_area+0xce/0x6d0 [ 202.753368][T12086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.753387][T12086] vfs_read+0x1e4/0xb40 [ 202.753407][T12086] ? __pfx_vfs_read+0x10/0x10 [ 202.753424][T12086] ? __fget_files+0x215/0x3d0 [ 202.753440][T12086] ? __fget_files+0x21f/0x3d0 [ 202.753456][T12086] ksys_read+0x12a/0x250 [ 202.753466][T12086] ? __pfx_ksys_read+0x10/0x10 [ 202.753480][T12086] do_syscall_64+0x115/0x870 [ 202.753496][T12086] ? clear_bhb_loop+0x70/0xc0 [ 202.753511][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.753523][T12086] RIP: 0033:0x7f028055e90e [ 202.753533][T12086] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.753545][T12086] RSP: 002b:00007f028141afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.753557][T12086] RAX: ffffffffffffffda RBX: 00007f028141b6c0 RCX: 00007f028055e90e [ 202.753564][T12086] RDX: 000000000000000f RSI: 00007f028141b0a0 RDI: 0000000000000007 [ 202.753571][T12086] RBP: 00007f028141b090 R08: 0000000000000000 R09: 0000000000000000 [ 202.753578][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.753584][T12086] R13: 00007f0280826038 R14: 00007f0280825fa0 R15: 00007ffe4d4173f8 [ 202.753599][T12086] [ 202.875521][ T42] audit: type=1400 audit(2000000054.239:785): avc: denied { write } for pid=12093 comm="syz.4.2144" name="/" dev="9p" ino=78905559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.883926][ T42] audit: type=1400 audit(2000000054.239:786): avc: denied { unlink } for pid=12093 comm="syz.4.2144" name="file0" dev="9p" ino=78905561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.894103][ T42] audit: type=1400 audit(2000000054.249:787): avc: denied { write } for pid=12093 comm="syz.4.2144" name="/" dev="9p" ino=78905559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.035200][T12099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2146'. [ 203.038120][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 203.041345][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 203.127933][T12111] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.131229][T12111] 9pnet_fd: p9_fd_create_unix (12111): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 203.164892][T12116] netlink: 'syz.4.2153': attribute type 34 has an invalid length. [ 203.197629][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 203.474270][T12142] FAULT_INJECTION: forcing a failure. [ 203.474270][T12142] name failslab, interval 1, probability 0, space 0, times 0 [ 203.478581][T12142] CPU: 1 UID: 0 PID: 12142 Comm: syz.3.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.478601][T12142] Tainted: [L]=SOFTLOCKUP [ 203.478605][T12142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.478612][T12142] Call Trace: [ 203.478617][T12142] [ 203.478621][T12142] dump_stack_lvl+0x100/0x190 [ 203.478642][T12142] should_fail_ex.cold+0x5/0xa [ 203.478658][T12142] should_failslab+0xc2/0x120 [ 203.478675][T12142] kmem_cache_alloc_noprof+0x91/0x6a0 [ 203.478689][T12142] ? __pud_alloc+0x4f6/0x690 [ 203.478706][T12142] ? __pmd_alloc+0xbf/0x950 [ 203.478725][T12142] __pmd_alloc+0xbf/0x950 [ 203.478740][T12142] ? __pud_alloc+0x4fb/0x690 [ 203.478757][T12142] __handle_mm_fault+0xa9c/0x2a00 [ 203.478770][T12142] ? mt_find+0x45e/0x8e0 [ 203.478789][T12142] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.478799][T12142] ? __pfx_mt_find+0x10/0x10 [ 203.478824][T12142] ? find_vma+0xbf/0x140 [ 203.478837][T12142] ? __pfx_find_vma+0x10/0x10 [ 203.478853][T12142] handle_mm_fault+0x37b/0xa30 [ 203.478866][T12142] do_user_addr_fault+0x74c/0x12f0 [ 203.478890][T12142] exc_page_fault+0x6f/0xd0 [ 203.478906][T12142] asm_exc_page_fault+0x26/0x30 [ 203.478917][T12142] RIP: 0010:_copy_from_user+0x93/0xd0 [ 203.478935][T12142] Code: 88 ec fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 d9 1c 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 f5 82 [ 203.478946][T12142] RSP: 0018:ffffc90005befb38 EFLAGS: 00050246 [ 203.478956][T12142] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 203.478964][T12142] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90005befbe8 [ 203.478970][T12142] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000b7df7f [ 203.478978][T12142] R10: ffffc90005befbff R11: 0000000000000000 R12: 0000000000000000 [ 203.478984][T12142] R13: ffffc90005befbe8 R14: 00000000800452d3 R15: 0000200000000100 [ 203.478998][T12142] ? _copy_from_user+0x87/0xd0 [ 203.479014][T12142] rfcomm_dev_ioctl+0x31f/0x1db0 [ 203.479027][T12142] ? bt_sock_ioctl+0x1df/0x580 [ 203.479041][T12142] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 203.479054][T12142] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 203.479070][T12142] ? tomoyo_path_number_perm+0x188/0x580 [ 203.479089][T12142] rfcomm_sock_ioctl+0xcc/0xf0 [ 203.479107][T12142] sock_do_ioctl+0x118/0x280 [ 203.479127][T12142] ? __pfx_sock_do_ioctl+0x10/0x10 [ 203.479148][T12142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.479167][T12142] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.479189][T12142] sock_ioctl+0x599/0x6b0 [ 203.479201][T12142] ? __pfx_sock_ioctl+0x10/0x10 [ 203.479211][T12142] ? hook_file_ioctl_common+0x140/0x440 [ 203.479229][T12142] ? selinux_file_ioctl+0x13b/0x290 [ 203.479246][T12142] ? selinux_file_ioctl+0xb6/0x290 [ 203.479264][T12142] ? __pfx_sock_ioctl+0x10/0x10 [ 203.479276][T12142] __x64_sys_ioctl+0x18e/0x210 [ 203.479295][T12142] do_syscall_64+0x115/0x870 [ 203.479309][T12142] ? clear_bhb_loop+0x70/0xc0 [ 203.479323][T12142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.479335][T12142] RIP: 0033:0x7f86d019e0d9 [ 203.479344][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.479355][T12142] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.479365][T12142] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 203.479372][T12142] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 203.479379][T12142] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 203.479386][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.479393][T12142] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 203.479407][T12142] [ 203.520382][ T34] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 203.754395][T12145] FAULT_INJECTION: forcing a failure. [ 203.754395][T12145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.760204][T12145] CPU: 3 UID: 0 PID: 12145 Comm: syz.3.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.760224][T12145] Tainted: [L]=SOFTLOCKUP [ 203.760229][T12145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.760236][T12145] Call Trace: [ 203.760241][T12145] [ 203.760246][T12145] dump_stack_lvl+0x100/0x190 [ 203.760281][T12145] should_fail_ex.cold+0x5/0xa [ 203.760297][T12145] _copy_from_user+0x2e/0xd0 [ 203.760315][T12145] drm_mode_atomic_ioctl+0x689/0x2680 [ 203.760349][T12145] ? avc_has_extended_perms+0x484/0x1080 [ 203.760366][T12145] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 203.760380][T12145] ? __lock_acquire+0x49f/0x1a40 [ 203.760404][T12145] ? drm_is_current_master+0x2c/0x40 [ 203.760418][T12145] ? drm_is_current_master+0x2c/0x40 [ 203.760433][T12145] ? do_raw_spin_unlock+0x145/0x1e0 [ 203.760452][T12145] drm_ioctl_kernel+0x1f3/0x3e0 [ 203.760471][T12145] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 203.760486][T12145] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 203.760504][T12145] drm_ioctl+0x5e6/0xc60 [ 203.760520][T12145] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 203.760535][T12145] ? __pfx_drm_ioctl+0x10/0x10 [ 203.760554][T12145] ? selinux_file_ioctl+0x13b/0x290 [ 203.760572][T12145] ? selinux_file_ioctl+0xb6/0x290 [ 203.760590][T12145] ? __pfx_drm_ioctl+0x10/0x10 [ 203.760603][T12145] __x64_sys_ioctl+0x18e/0x210 [ 203.760623][T12145] do_syscall_64+0x115/0x870 [ 203.760639][T12145] ? clear_bhb_loop+0x70/0xc0 [ 203.760653][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.760665][T12145] RIP: 0033:0x7f86d019e0d9 [ 203.760676][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.760688][T12145] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.760700][T12145] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 203.760707][T12145] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 203.760714][T12145] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 203.760721][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.760728][T12145] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 203.760743][T12145] [ 203.871179][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.874930][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.879190][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.882374][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.886832][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.104569][T12164] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 204.149786][T12171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 204.550496][ T5731] Bluetooth: hci4: command tx timeout [ 204.950073][T12223] FAULT_INJECTION: forcing a failure. [ 204.950073][T12223] name failslab, interval 1, probability 0, space 0, times 0 [ 204.956669][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.3.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.956690][T12223] Tainted: [L]=SOFTLOCKUP [ 204.956695][T12223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.956702][T12223] Call Trace: [ 204.956706][T12223] [ 204.956711][T12223] dump_stack_lvl+0x100/0x190 [ 204.956732][T12223] should_fail_ex.cold+0x5/0xa [ 204.956747][T12223] should_failslab+0xc2/0x120 [ 204.956764][T12223] __kmalloc_noprof+0xfc/0x820 [ 204.956778][T12223] ? rcu_is_watching+0x12/0xc0 [ 204.956796][T12223] ? tomoyo_realpath_from_path+0xb6/0x690 [ 204.956812][T12223] tomoyo_realpath_from_path+0xb6/0x690 [ 204.956827][T12223] tomoyo_path_number_perm+0x23c/0x580 [ 204.956843][T12223] ? tomoyo_path_number_perm+0x22e/0x580 [ 204.956860][T12223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.956893][T12223] ? find_held_lock+0x2b/0x80 [ 204.956904][T12223] ? __fget_files+0x215/0x3d0 [ 204.956917][T12223] ? hook_file_ioctl_common+0x140/0x440 [ 204.956930][T12223] ? __fget_files+0x215/0x3d0 [ 204.956944][T12223] ? __fget_files+0x21f/0x3d0 [ 204.956958][T12223] security_file_ioctl+0xd3/0x230 [ 204.956992][T12223] __x64_sys_ioctl+0xb7/0x210 [ 204.957010][T12223] do_syscall_64+0x115/0x870 [ 204.957027][T12223] ? clear_bhb_loop+0x70/0xc0 [ 204.957042][T12223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.957054][T12223] RIP: 0033:0x7f86d019e0d9 [ 204.957064][T12223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.957075][T12223] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.957087][T12223] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 204.957094][T12223] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 204.957101][T12223] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 204.957108][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.957115][T12223] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 204.957130][T12223] [ 204.957135][T12223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.983413][T12230] netlink: 'syz.2.2195': attribute type 29 has an invalid length. [ 205.236464][T12237] FAULT_INJECTION: forcing a failure. [ 205.236464][T12237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.243558][T12237] CPU: 1 UID: 0 PID: 12237 Comm: syz.3.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.243590][T12237] Tainted: [L]=SOFTLOCKUP [ 205.243596][T12237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.243607][T12237] Call Trace: [ 205.243615][T12237] [ 205.243622][T12237] dump_stack_lvl+0x100/0x190 [ 205.243679][T12237] should_fail_ex.cold+0x5/0xa [ 205.243699][T12237] ? prepare_alloc_pages+0x16d/0x5f0 [ 205.243728][T12237] should_fail_alloc_page+0xeb/0x140 [ 205.243755][T12237] prepare_alloc_pages+0x1f0/0x5f0 [ 205.243780][T12237] ? is_bpf_text_address+0x8a/0x1a0 [ 205.243820][T12237] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 205.243840][T12237] ? is_bpf_text_address+0x94/0x1a0 [ 205.243864][T12237] ? kernel_text_address+0x8d/0x100 [ 205.243885][T12237] ? find_held_lock+0x2b/0x80 [ 205.243902][T12237] ? __kernel_text_address+0xd/0x30 [ 205.243922][T12237] ? unwind_get_return_address+0x59/0xa0 [ 205.243942][T12237] ? arch_stack_walk+0xa6/0xf0 [ 205.243974][T12237] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 205.243997][T12237] ? __pfx_stack_trace_save+0x10/0x10 [ 205.244019][T12237] ? stack_depot_save_flags+0x27/0x9d0 [ 205.244055][T12237] ? look_up_lock_class+0x64/0x120 [ 205.244082][T12237] ? kasan_save_stack+0x3f/0x50 [ 205.244103][T12237] ? kasan_save_stack+0x30/0x50 [ 205.244126][T12237] ? handle_mm_fault+0x37b/0xa30 [ 205.244142][T12237] ? do_user_addr_fault+0x74c/0x12f0 [ 205.244169][T12237] ? exc_page_fault+0x6f/0xd0 [ 205.244190][T12237] ? asm_exc_page_fault+0x26/0x30 [ 205.244207][T12237] ? _copy_from_user+0x93/0xd0 [ 205.244230][T12237] ? rfcomm_dev_ioctl+0x31f/0x1db0 [ 205.244247][T12237] ? rfcomm_sock_ioctl+0xcc/0xf0 [ 205.244271][T12237] ? sock_do_ioctl+0x118/0x280 [ 205.244314][T12237] ? sock_ioctl+0x599/0x6b0 [ 205.244330][T12237] ? __x64_sys_ioctl+0x18e/0x210 [ 205.244356][T12237] ? do_syscall_64+0x115/0x870 [ 205.244378][T12237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.244397][T12237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.244423][T12237] ? policy_nodemask+0xed/0x4f0 [ 205.244451][T12237] alloc_pages_mpol+0x1fb/0x540 [ 205.244476][T12237] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 205.244507][T12237] alloc_pages_noprof+0x1a/0x160 [ 205.244535][T12237] pte_alloc_one+0x1c/0x3d0 [ 205.244555][T12237] __pte_alloc+0x6d/0x3e0 [ 205.244577][T12237] ? __pfx___pte_alloc+0x10/0x10 [ 205.244600][T12237] ? do_raw_spin_lock+0x128/0x260 [ 205.244625][T12237] ? find_held_lock+0x2b/0x80 [ 205.244644][T12237] do_anonymous_page+0x13ae/0x2080 [ 205.244675][T12237] ? __pmd_alloc+0x3fb/0x950 [ 205.244701][T12237] __handle_mm_fault+0x1d2c/0x2a00 [ 205.244722][T12237] ? mt_find+0x45e/0x8e0 [ 205.244748][T12237] ? __pfx___handle_mm_fault+0x10/0x10 [ 205.244762][T12237] ? __pfx_mt_find+0x10/0x10 [ 205.244787][T12237] ? find_vma+0xbf/0x140 [ 205.244800][T12237] ? __pfx_find_vma+0x10/0x10 [ 205.244816][T12237] handle_mm_fault+0x37b/0xa30 [ 205.244830][T12237] do_user_addr_fault+0x74c/0x12f0 [ 205.244853][T12237] exc_page_fault+0x6f/0xd0 [ 205.244869][T12237] asm_exc_page_fault+0x26/0x30 [ 205.244880][T12237] RIP: 0010:_copy_from_user+0x93/0xd0 [ 205.244897][T12237] Code: 88 ec fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 d9 1c 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 f5 82 [ 205.244908][T12237] RSP: 0018:ffffc9000581fb38 EFLAGS: 00050246 [ 205.244920][T12237] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 205.244927][T12237] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9000581fbe8 [ 205.244934][T12237] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000b03f7f [ 205.244941][T12237] R10: ffffc9000581fbff R11: 0000000000000000 R12: 0000000000000000 [ 205.244948][T12237] R13: ffffc9000581fbe8 R14: 00000000800452d3 R15: 0000200000000100 [ 205.244968][T12237] ? _copy_from_user+0x87/0xd0 [ 205.244983][T12237] rfcomm_dev_ioctl+0x31f/0x1db0 [ 205.244996][T12237] ? bt_sock_ioctl+0x1df/0x580 [ 205.245010][T12237] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 205.245023][T12237] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 205.245039][T12237] ? tomoyo_path_number_perm+0x188/0x580 [ 205.245059][T12237] rfcomm_sock_ioctl+0xcc/0xf0 [ 205.245077][T12237] sock_do_ioctl+0x118/0x280 [ 205.245095][T12237] ? __pfx_sock_do_ioctl+0x10/0x10 [ 205.245117][T12237] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.245134][T12237] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 205.245156][T12237] sock_ioctl+0x599/0x6b0 [ 205.245168][T12237] ? __pfx_sock_ioctl+0x10/0x10 [ 205.245181][T12237] ? hook_file_ioctl_common+0x140/0x440 [ 205.245207][T12237] ? selinux_file_ioctl+0x13b/0x290 [ 205.245234][T12237] ? selinux_file_ioctl+0xb6/0x290 [ 205.245261][T12237] ? __pfx_sock_ioctl+0x10/0x10 [ 205.245276][T12237] __x64_sys_ioctl+0x18e/0x210 [ 205.245295][T12237] do_syscall_64+0x115/0x870 [ 205.245310][T12237] ? clear_bhb_loop+0x70/0xc0 [ 205.245324][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.245336][T12237] RIP: 0033:0x7f86d019e0d9 [ 205.245346][T12237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.245357][T12237] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.245367][T12237] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 205.245374][T12237] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 205.245380][T12237] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 205.245387][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.245393][T12237] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 205.245408][T12237] [ 205.880158][T12260] IPv6: addrconf: prefix option has invalid lifetime [ 205.915418][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2208'. [ 205.996732][T12268] FAULT_INJECTION: forcing a failure. [ 205.996732][T12268] name failslab, interval 1, probability 0, space 0, times 0 [ 206.003076][T12268] CPU: 0 UID: 0 PID: 12268 Comm: syz.2.2210 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.003097][T12268] Tainted: [L]=SOFTLOCKUP [ 206.003101][T12268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.003108][T12268] Call Trace: [ 206.003113][T12268] [ 206.003118][T12268] dump_stack_lvl+0x100/0x190 [ 206.003138][T12268] should_fail_ex.cold+0x5/0xa [ 206.003154][T12268] should_failslab+0xc2/0x120 [ 206.003171][T12268] __kmalloc_cache_noprof+0x91/0x6c0 [ 206.003184][T12268] ? drm_mode_atomic_ioctl+0x1057/0x2680 [ 206.003202][T12268] drm_mode_atomic_ioctl+0x1057/0x2680 [ 206.003223][T12268] ? avc_has_extended_perms+0x484/0x1080 [ 206.003238][T12268] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 206.003253][T12268] ? __lock_acquire+0x49f/0x1a40 [ 206.003276][T12268] ? drm_is_current_master+0x2c/0x40 [ 206.003290][T12268] ? drm_is_current_master+0x2c/0x40 [ 206.003305][T12268] ? do_raw_spin_unlock+0x145/0x1e0 [ 206.003324][T12268] drm_ioctl_kernel+0x1f3/0x3e0 [ 206.003337][T12268] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 206.003352][T12268] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 206.003370][T12268] drm_ioctl+0x5e6/0xc60 [ 206.003385][T12268] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 206.003400][T12268] ? __pfx_drm_ioctl+0x10/0x10 [ 206.003418][T12268] ? selinux_file_ioctl+0x13b/0x290 [ 206.003436][T12268] ? selinux_file_ioctl+0xb6/0x290 [ 206.003454][T12268] ? __pfx_drm_ioctl+0x10/0x10 [ 206.003468][T12268] __x64_sys_ioctl+0x18e/0x210 [ 206.003487][T12268] do_syscall_64+0x115/0x870 [ 206.003503][T12268] ? clear_bhb_loop+0x70/0xc0 [ 206.003522][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.003534][T12268] RIP: 0033:0x7f96ed39e0d9 [ 206.003544][T12268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.003556][T12268] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.003568][T12268] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 206.003575][T12268] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 206.003582][T12268] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 206.003588][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.003595][T12268] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 206.003609][T12268] [ 206.122482][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.125917][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.137725][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.141020][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.178743][ T56] usb 9-1: USB disconnect, device number 15 [ 206.197130][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.201235][T12282] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 206.205004][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.206477][T12283] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.376381][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 206.376395][ T42] audit: type=1400 audit(2000000057.739:794): avc: denied { validate_trans } for pid=12295 comm="syz.4.2221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 206.631406][ T5731] Bluetooth: hci4: command tx timeout [ 206.917926][ T42] audit: type=1400 audit(2000000058.279:795): avc: denied { bind } for pid=12322 comm="syz.2.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.450350][T12343] FAULT_INJECTION: forcing a failure. [ 207.450350][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 207.456489][T12343] CPU: 1 UID: 0 PID: 12343 Comm: syz.2.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.456512][T12343] Tainted: [L]=SOFTLOCKUP [ 207.456517][T12343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.456524][T12343] Call Trace: [ 207.456529][T12343] [ 207.456535][T12343] dump_stack_lvl+0x100/0x190 [ 207.456556][T12343] should_fail_ex.cold+0x5/0xa [ 207.456572][T12343] should_failslab+0xc2/0x120 [ 207.456590][T12343] kmem_cache_alloc_noprof+0x91/0x6a0 [ 207.456604][T12343] ? ptlock_alloc+0x1f/0x70 [ 207.456618][T12343] ptlock_alloc+0x1f/0x70 [ 207.456628][T12343] pte_alloc_one+0x82/0x3d0 [ 207.456642][T12343] __pte_alloc+0x6d/0x3e0 [ 207.456656][T12343] ? __pfx___pte_alloc+0x10/0x10 [ 207.456671][T12343] ? do_raw_spin_lock+0x128/0x260 [ 207.456689][T12343] ? find_held_lock+0x2b/0x80 [ 207.456701][T12343] do_anonymous_page+0x13ae/0x2080 [ 207.456722][T12343] ? __pmd_alloc+0x3fb/0x950 [ 207.456739][T12343] __handle_mm_fault+0x1d2c/0x2a00 [ 207.456752][T12343] ? mt_find+0x45e/0x8e0 [ 207.456771][T12343] ? __pfx___handle_mm_fault+0x10/0x10 [ 207.456781][T12343] ? __pfx_mt_find+0x10/0x10 [ 207.456806][T12343] ? find_vma+0xbf/0x140 [ 207.456833][T12343] ? __pfx_find_vma+0x10/0x10 [ 207.456851][T12343] handle_mm_fault+0x37b/0xa30 [ 207.456865][T12343] do_user_addr_fault+0x74c/0x12f0 [ 207.456888][T12343] exc_page_fault+0x6f/0xd0 [ 207.456904][T12343] asm_exc_page_fault+0x26/0x30 [ 207.456916][T12343] RIP: 0010:_copy_from_user+0x93/0xd0 [ 207.456935][T12343] Code: 88 ec fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 d9 1c 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 f5 82 [ 207.456951][T12343] RSP: 0018:ffffc90006a7fb38 EFLAGS: 00050246 [ 207.456967][T12343] RAX: 0000000000000001 RBX: 0000200000000100 RCX: 0000000000000018 [ 207.456978][T12343] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90006a7fbe8 [ 207.456990][T12343] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000d4ff7f [ 207.457001][T12343] R10: ffffc90006a7fbff R11: 0000000000000000 R12: 0000000000000000 [ 207.457013][T12343] R13: ffffc90006a7fbe8 R14: 00000000800452d3 R15: 0000200000000100 [ 207.457037][T12343] ? _copy_from_user+0x87/0xd0 [ 207.457060][T12343] rfcomm_dev_ioctl+0x31f/0x1db0 [ 207.457078][T12343] ? bt_sock_ioctl+0x1df/0x580 [ 207.457100][T12343] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 207.457120][T12343] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 207.457143][T12343] ? tomoyo_path_number_perm+0x188/0x580 [ 207.457174][T12343] rfcomm_sock_ioctl+0xcc/0xf0 [ 207.457204][T12343] sock_do_ioctl+0x118/0x280 [ 207.457235][T12343] ? __pfx_sock_do_ioctl+0x10/0x10 [ 207.457271][T12343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 207.457298][T12343] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 207.457331][T12343] sock_ioctl+0x599/0x6b0 [ 207.457355][T12343] ? __pfx_sock_ioctl+0x10/0x10 [ 207.457373][T12343] ? hook_file_ioctl_common+0x140/0x440 [ 207.457397][T12343] ? selinux_file_ioctl+0x13b/0x290 [ 207.457422][T12343] ? selinux_file_ioctl+0xb6/0x290 [ 207.457451][T12343] ? __pfx_sock_ioctl+0x10/0x10 [ 207.457472][T12343] __x64_sys_ioctl+0x18e/0x210 [ 207.457501][T12343] do_syscall_64+0x115/0x870 [ 207.457523][T12343] ? clear_bhb_loop+0x70/0xc0 [ 207.457545][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.457562][T12343] RIP: 0033:0x7f96ed39e0d9 [ 207.457576][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.457593][T12343] RSP: 002b:00007f96ee353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.457610][T12343] RAX: ffffffffffffffda RBX: 00007f96ed625fa0 RCX: 00007f96ed39e0d9 [ 207.457621][T12343] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 207.457631][T12343] RBP: 00007f96ee353090 R08: 0000000000000000 R09: 0000000000000000 [ 207.457642][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.457652][T12343] R13: 00007f96ed626038 R14: 00007f96ed625fa0 R15: 00007ffd69054ec8 [ 207.457675][T12343] [ 207.796078][ T42] audit: type=1800 audit(2000000059.119:796): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2240" name="file0" dev="overlay" ino=348 res=0 errno=0 [ 207.912050][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2245'. [ 208.036404][T12371] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 208.039136][T12371] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2248'. [ 208.044760][T12371] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 208.365907][T12389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.387797][T12393] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 208.556507][ T5723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.562597][ T5723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.566511][ T5723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.572216][ T5723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.578795][ T5723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.582577][T12397] FAULT_INJECTION: forcing a failure. [ 208.582577][T12397] name failslab, interval 1, probability 0, space 0, times 0 [ 208.582633][T12397] CPU: 3 UID: 0 PID: 12397 Comm: syz.3.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.582659][T12397] Tainted: [L]=SOFTLOCKUP [ 208.582666][T12397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.582678][T12397] Call Trace: [ 208.582685][T12397] [ 208.582692][T12397] dump_stack_lvl+0x100/0x190 [ 208.582723][T12397] should_fail_ex.cold+0x5/0xa [ 208.582747][T12397] should_failslab+0xc2/0x120 [ 208.582773][T12397] __kmalloc_cache_noprof+0x91/0x6c0 [ 208.582791][T12397] ? drm_self_refresh_helper_alter_state+0x3c4/0x520 [ 208.582840][T12397] ? drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 208.582881][T12397] drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 208.582915][T12397] drm_atomic_helper_commit+0xa9/0x380 [ 208.582939][T12397] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 208.582963][T12397] drm_atomic_commit+0x230/0x300 [ 208.582985][T12397] ? __pfx_drm_atomic_commit+0x10/0x10 [ 208.583034][T12397] ? __pfx___drm_printfn_info+0x10/0x10 [ 208.583072][T12397] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.583096][T12397] ? drm_event_reserve_init+0x1fa/0x280 [ 208.583122][T12397] drm_mode_atomic_ioctl+0x1b9c/0x2680 [ 208.583161][T12397] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 208.583184][T12397] ? __lock_acquire+0x49f/0x1a40 [ 208.583222][T12397] ? drm_is_current_master+0x2c/0x40 [ 208.583245][T12397] ? drm_is_current_master+0x2c/0x40 [ 208.583270][T12397] ? do_raw_spin_unlock+0x145/0x1e0 [ 208.583299][T12397] drm_ioctl_kernel+0x1f3/0x3e0 [ 208.583320][T12397] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 208.583343][T12397] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 208.583372][T12397] drm_ioctl+0x5e6/0xc60 [ 208.583397][T12397] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 208.583421][T12397] ? __pfx_drm_ioctl+0x10/0x10 [ 208.583453][T12397] ? selinux_file_ioctl+0x13b/0x290 [ 208.583480][T12397] ? selinux_file_ioctl+0xb6/0x290 [ 208.583507][T12397] ? __pfx_drm_ioctl+0x10/0x10 [ 208.583529][T12397] __x64_sys_ioctl+0x18e/0x210 [ 208.583559][T12397] do_syscall_64+0x115/0x870 [ 208.583579][T12397] ? clear_bhb_loop+0x70/0xc0 [ 208.583601][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.583643][T12397] RIP: 0033:0x7f86d019e0d9 [ 208.583660][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.583675][T12397] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.583693][T12397] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 208.583705][T12397] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 208.583715][T12397] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 208.583725][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.583736][T12397] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 208.583760][T12397] [ 209.052925][T12431] openvswitch: netlink: Flow key attr not present in new flow. [ 209.250106][T12450] 9pnet_virtio: no channels available for device syz [ 209.255792][ T42] audit: type=1400 audit(2000000060.619:797): avc: denied { write } for pid=12448 comm="syz.3.2274" name="/" dev="9p" ino=78905559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.264029][ T42] audit: type=1400 audit(2000000060.619:798): avc: denied { write } for pid=12448 comm="syz.3.2274" name="/" dev="9p" ino=78905559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.274639][ T42] audit: type=1400 audit(2000000060.619:799): avc: denied { create } for pid=12448 comm="syz.3.2274" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 209.281608][ T42] audit: type=1400 audit(2000000060.629:800): avc: denied { write } for pid=12448 comm="syz.3.2274" name="/" dev="9p" ino=78905559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.288846][ T42] audit: type=1400 audit(2000000060.639:801): avc: denied { create } for pid=12448 comm="syz.3.2274" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.346872][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.349855][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.353492][T12399] bridge_slave_0: entered allmulticast mode [ 209.357408][T12399] bridge_slave_0: entered promiscuous mode [ 209.362766][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.365903][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.369149][T12399] bridge_slave_1: entered allmulticast mode [ 209.373321][T12399] bridge_slave_1: entered promiscuous mode [ 209.400076][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.406869][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.418451][T12456] FAULT_INJECTION: forcing a failure. [ 209.418451][T12456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.426146][T12456] CPU: 2 UID: 0 PID: 12456 Comm: syz.4.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.426167][T12456] Tainted: [L]=SOFTLOCKUP [ 209.426172][T12456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.426179][T12456] Call Trace: [ 209.426183][T12456] [ 209.426189][T12456] dump_stack_lvl+0x100/0x190 [ 209.426210][T12456] should_fail_ex.cold+0x5/0xa [ 209.426227][T12456] _copy_from_user+0x2e/0xd0 [ 209.426246][T12456] drm_ioctl+0x520/0xc60 [ 209.426263][T12456] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 209.426280][T12456] ? __pfx_drm_ioctl+0x10/0x10 [ 209.426300][T12456] ? selinux_file_ioctl+0x13b/0x290 [ 209.426320][T12456] ? selinux_file_ioctl+0xb6/0x290 [ 209.426341][T12456] ? __pfx_drm_ioctl+0x10/0x10 [ 209.426356][T12456] __x64_sys_ioctl+0x18e/0x210 [ 209.426376][T12456] do_syscall_64+0x115/0x870 [ 209.426393][T12456] ? clear_bhb_loop+0x70/0xc0 [ 209.426409][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.426421][T12456] RIP: 0033:0x7f028059e0d9 [ 209.426432][T12456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.426444][T12456] RSP: 002b:00007f028141b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.426457][T12456] RAX: ffffffffffffffda RBX: 00007f0280825fa0 RCX: 00007f028059e0d9 [ 209.426465][T12456] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 209.426472][T12456] RBP: 00007f028141b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.426479][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.426486][T12456] R13: 00007f0280826038 R14: 00007f0280825fa0 R15: 00007ffe4d4173f8 [ 209.426501][T12456] [ 209.447747][T12399] team0: Port device team_slave_0 added [ 209.495820][T12399] team0: Port device team_slave_1 added [ 209.522916][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2278'. [ 209.533980][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.536170][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.544374][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.583721][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.589747][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.598159][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.611399][T12472] FAULT_INJECTION: forcing a failure. [ 209.611399][T12472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.617947][T12472] CPU: 1 UID: 0 PID: 12472 Comm: syz.4.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.617976][T12472] Tainted: [L]=SOFTLOCKUP [ 209.617983][T12472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.617994][T12472] Call Trace: [ 209.618001][T12472] [ 209.618009][T12472] dump_stack_lvl+0x100/0x190 [ 209.618040][T12472] should_fail_ex.cold+0x5/0xa [ 209.618064][T12472] _copy_to_user+0x32/0xd0 [ 209.618093][T12472] simple_read_from_buffer+0xcb/0x170 [ 209.618116][T12472] proc_fail_nth_read+0x1af/0x230 [ 209.618147][T12472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.618178][T12472] ? rw_verify_area+0xce/0x6d0 [ 209.618204][T12472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.618234][T12472] vfs_read+0x1e4/0xb40 [ 209.618266][T12472] ? __pfx_vfs_read+0x10/0x10 [ 209.618293][T12472] ? __fget_files+0x215/0x3d0 [ 209.618319][T12472] ? __fget_files+0x21f/0x3d0 [ 209.618346][T12472] ksys_read+0x12a/0x250 [ 209.618363][T12472] ? __pfx_ksys_read+0x10/0x10 [ 209.618388][T12472] do_syscall_64+0x115/0x870 [ 209.618414][T12472] ? clear_bhb_loop+0x70/0xc0 [ 209.618436][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.618454][T12472] RIP: 0033:0x7f028055e90e [ 209.618471][T12472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.618489][T12472] RSP: 002b:00007f028141afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.618508][T12472] RAX: ffffffffffffffda RBX: 00007f028141b6c0 RCX: 00007f028055e90e [ 209.618521][T12472] RDX: 000000000000000f RSI: 00007f028141b0a0 RDI: 0000000000000003 [ 209.618532][T12472] RBP: 00007f028141b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.618543][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.618554][T12472] R13: 00007f0280826038 R14: 00007f0280825fa0 R15: 00007ffe4d4173f8 [ 209.618578][T12472] [ 209.629272][T12399] hsr_slave_0: entered promiscuous mode [ 209.676098][T12462] XFS (nbd3): SB validate failed with error -5. [ 209.681623][T12399] hsr_slave_1: entered promiscuous mode [ 209.691186][T12399] debugfs: 'hsr0' already exists in 'hsr' [ 209.693665][T12399] Cannot create hsr debugfs directory [ 209.739346][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2284'. [ 209.762888][T12481] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2283'. [ 209.803985][ T42] audit: type=1400 audit(2000000061.169:802): avc: denied { ioctl } for pid=12487 comm="syz.3.2286" path="socket:[62938]" dev="sockfs" ino=62938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.830033][T12488] macsec1: entered promiscuous mode [ 209.833201][T12488] macsec1: entered allmulticast mode [ 209.865379][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2288'. [ 209.964257][T12399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.967764][T12399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.018479][T12508] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.054407][ T42] audit: type=1400 audit(2000000061.419:803): avc: denied { ioctl } for pid=12504 comm="syz.4.2292" path="socket:[64534]" dev="sockfs" ino=64534 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.132329][T12399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.136302][T12399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.143346][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 210.155137][ T5731] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 210.245067][T12399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.247486][T12527] FAULT_INJECTION: forcing a failure. [ 210.247486][T12527] name failslab, interval 1, probability 0, space 0, times 0 [ 210.247877][T12399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.251232][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.3.2298 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.251252][T12527] Tainted: [L]=SOFTLOCKUP [ 210.251256][T12527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.251263][T12527] Call Trace: [ 210.251268][T12527] [ 210.251274][T12527] dump_stack_lvl+0x100/0x190 [ 210.251295][T12527] should_fail_ex.cold+0x5/0xa [ 210.251311][T12527] should_failslab+0xc2/0x120 [ 210.251328][T12527] __kmalloc_noprof+0xfc/0x820 [ 210.251342][T12527] ? virtio_gpu_array_alloc+0x21/0xb0 [ 210.251373][T12527] virtio_gpu_array_alloc+0x21/0xb0 [ 210.251389][T12527] virtio_gpu_primary_plane_update+0xd3e/0x12f0 [ 210.251409][T12527] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 210.251426][T12527] ? drm_calc_timestamping_constants+0x44a/0x6d0 [ 210.251448][T12527] drm_atomic_helper_commit_planes+0x497/0xf10 [ 210.251469][T12527] drm_atomic_helper_commit_tail+0x7f/0x130 [ 210.251484][T12527] commit_tail+0x338/0x430 [ 210.251501][T12527] drm_atomic_helper_commit+0x303/0x380 [ 210.251517][T12527] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 210.251532][T12527] drm_atomic_commit+0x230/0x300 [ 210.251546][T12527] ? __pfx_drm_atomic_commit+0x10/0x10 [ 210.251558][T12527] ? __pfx___drm_printfn_info+0x10/0x10 [ 210.251576][T12527] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 210.251591][T12527] ? drm_event_reserve_init+0x1fa/0x280 [ 210.251629][T12527] drm_mode_atomic_ioctl+0x1b9c/0x2680 [ 210.251653][T12527] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 210.251667][T12527] ? __lock_acquire+0x49f/0x1a40 [ 210.251690][T12527] ? drm_is_current_master+0x2c/0x40 [ 210.251704][T12527] ? drm_is_current_master+0x2c/0x40 [ 210.251719][T12527] ? do_raw_spin_unlock+0x145/0x1e0 [ 210.251739][T12527] drm_ioctl_kernel+0x1f3/0x3e0 [ 210.251753][T12527] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 210.251768][T12527] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 210.251785][T12527] drm_ioctl+0x5e6/0xc60 [ 210.251801][T12527] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 210.251816][T12527] ? __pfx_drm_ioctl+0x10/0x10 [ 210.251834][T12527] ? selinux_file_ioctl+0x13b/0x290 [ 210.251854][T12527] ? selinux_file_ioctl+0xb6/0x290 [ 210.251872][T12527] ? __pfx_drm_ioctl+0x10/0x10 [ 210.251899][T12527] __x64_sys_ioctl+0x18e/0x210 [ 210.251919][T12527] do_syscall_64+0x115/0x870 [ 210.251934][T12527] ? clear_bhb_loop+0x70/0xc0 [ 210.251949][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.251961][T12527] RIP: 0033:0x7f86d019e0d9 [ 210.251975][T12527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.251987][T12527] RSP: 002b:00007f86d0fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.252000][T12527] RAX: ffffffffffffffda RBX: 00007f86d0425fa0 RCX: 00007f86d019e0d9 [ 210.252008][T12527] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 210.252015][T12527] RBP: 00007f86d0fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 210.252022][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.252028][T12527] R13: 00007f86d0426038 R14: 00007f86d0425fa0 R15: 00007ffc1dfcf0e8 [ 210.252043][T12527] [ 210.491316][T12399] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.495319][T12399] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.569209][T12545] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 210.571706][T12544] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 210.605926][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 210.722848][T12560] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.726675][T12560] block device autoloading is deprecated and will be removed. [ 210.757295][T12399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.766404][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.769553][T12399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.774478][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.777328][T12399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.781515][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.784341][T12399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.792132][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.800800][ T5731] Bluetooth: hci0: command tx timeout [ 210.848932][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.859659][T12399] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.865948][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.868317][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.874797][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.877574][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.042514][T12582] FAULT_INJECTION: forcing a failure. [ 211.042514][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 211.046530][T12582] CPU: 3 UID: 0 PID: 12582 Comm: syz.0.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.046549][T12582] Tainted: [L]=SOFTLOCKUP [ 211.046553][T12582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.046560][T12582] Call Trace: [ 211.046565][T12582] [ 211.046569][T12582] dump_stack_lvl+0x100/0x190 [ 211.046590][T12582] should_fail_ex.cold+0x5/0xa [ 211.046606][T12582] should_failslab+0xc2/0x120 [ 211.046622][T12582] __kmalloc_cache_noprof+0x91/0x6c0 [ 211.046634][T12582] ? __lock_acquire+0x49f/0x1a40 [ 211.046649][T12582] ? drm_atomic_commit_alloc+0xb8/0x120 [ 211.046666][T12582] drm_atomic_commit_alloc+0xb8/0x120 [ 211.046681][T12582] drm_mode_atomic_ioctl+0x395/0x2680 [ 211.046698][T12582] ? avc_has_extended_perms+0x33a/0x1080 [ 211.046716][T12582] ? avc_has_extended_perms+0x484/0x1080 [ 211.046730][T12582] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 211.046745][T12582] ? __lock_acquire+0x49f/0x1a40 [ 211.046766][T12582] ? drm_is_current_master+0x2c/0x40 [ 211.046781][T12582] ? drm_is_current_master+0x2c/0x40 [ 211.046800][T12582] ? do_raw_spin_unlock+0x145/0x1e0 [ 211.046819][T12582] drm_ioctl_kernel+0x1f3/0x3e0 [ 211.046833][T12582] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 211.046848][T12582] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 211.046865][T12582] drm_ioctl+0x5e6/0xc60 [ 211.046880][T12582] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 211.046896][T12582] ? __pfx_drm_ioctl+0x10/0x10 [ 211.046914][T12582] ? selinux_file_ioctl+0x13b/0x290 [ 211.046932][T12582] ? selinux_file_ioctl+0xb6/0x290 [ 211.046950][T12582] ? __pfx_drm_ioctl+0x10/0x10 [ 211.046964][T12582] __x64_sys_ioctl+0x18e/0x210 [ 211.046983][T12582] do_syscall_64+0x115/0x870 [ 211.046999][T12582] ? clear_bhb_loop+0x70/0xc0 [ 211.047014][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.047026][T12582] RIP: 0033:0x7f2b28b9e0d9 [ 211.047036][T12582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.047048][T12582] RSP: 002b:00007f2b29a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.047061][T12582] RAX: ffffffffffffffda RBX: 00007f2b28e25fa0 RCX: 00007f2b28b9e0d9 [ 211.047068][T12582] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 211.047075][T12582] RBP: 00007f2b29a47090 R08: 0000000000000000 R09: 0000000000000000 [ 211.047082][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.047089][T12582] R13: 00007f2b28e26038 R14: 00007f2b28e25fa0 R15: 00007ffd399f77d8 [ 211.047103][T12582] [ 211.098058][T12399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.180048][T12399] veth0_vlan: entered promiscuous mode [ 211.190793][T12399] veth1_vlan: entered promiscuous mode [ 211.222613][T12399] veth0_macvtap: entered promiscuous mode [ 211.231165][T12399] veth1_macvtap: entered promiscuous mode [ 211.244699][T12399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.252588][T12399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.275323][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.284895][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.310380][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 211.313129][ T5592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.329519][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.338497][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.367674][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.370922][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.379368][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.408197][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2320'. [ 211.557586][T12600] tmpfs: Unknown parameter 'i§”¢zŠ$ßÑ' [ 211.564499][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 211.564517][ T42] audit: type=1400 audit(2000000062.929:839): avc: denied { view } for pid=12610 comm="syz.2.2323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 211.839698][T12637] Can't find a SQUASHFS superblock on nullb0 [ 211.844332][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2332'. [ 211.848109][T12637] tipc: Started in network mode [ 211.850193][T12637] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 211.853480][T12637] tipc: Enabling of bearer rejected, failed to enable media [ 212.024037][T12656] FAULT_INJECTION: forcing a failure. [ 212.024037][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 212.029045][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.0.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.029066][T12656] Tainted: [L]=SOFTLOCKUP [ 212.029070][T12656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.029078][T12656] Call Trace: [ 212.029083][T12656] [ 212.029088][T12656] dump_stack_lvl+0x100/0x190 [ 212.029109][T12656] should_fail_ex.cold+0x5/0xa [ 212.029125][T12656] should_failslab+0xc2/0x120 [ 212.029142][T12656] __kmalloc_noprof+0xfc/0x820 [ 212.029155][T12656] ? __kernel_text_address+0xd/0x30 [ 212.029169][T12656] ? unwind_get_return_address+0x59/0xa0 [ 212.029181][T12656] ? virtqueue_add_split+0x25c/0x1d30 [ 212.029213][T12656] virtqueue_add_split+0x25c/0x1d30 [ 212.029232][T12656] ? __pfx_virtqueue_add_split+0x10/0x10 [ 212.029251][T12656] virtqueue_add_sgs+0x207/0x2b0 [ 212.029269][T12656] virtio_gpu_queue_fenced_ctrl_buffer+0x5c1/0xfb0 [ 212.029286][T12656] ? __pfx_virtio_gpu_queue_fenced_ctrl_buffer+0x10/0x10 [ 212.029304][T12656] ? rcu_is_watching+0x12/0xc0 [ 212.029325][T12656] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 212.029338][T12656] ? rcu_is_watching+0x12/0xc0 [ 212.029356][T12656] ? virtio_gpu_cmd_transfer_to_host_2d+0x273/0x6e0 [ 212.029371][T12656] ? virtio_gpu_cmd_transfer_to_host_2d+0x362/0x6e0 [ 212.029387][T12656] virtio_gpu_primary_plane_update+0xd95/0x12f0 [ 212.029414][T12656] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 212.029437][T12656] ? drm_calc_timestamping_constants+0x44a/0x6d0 [ 212.029466][T12656] drm_atomic_helper_commit_planes+0x497/0xf10 [ 212.029491][T12656] drm_atomic_helper_commit_tail+0x7f/0x130 [ 212.029506][T12656] commit_tail+0x338/0x430 [ 212.029523][T12656] drm_atomic_helper_commit+0x303/0x380 [ 212.029541][T12656] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 212.029562][T12656] drm_atomic_commit+0x230/0x300 [ 212.029582][T12656] ? __pfx_drm_atomic_commit+0x10/0x10 [ 212.029597][T12656] ? __pfx___drm_printfn_info+0x10/0x10 [ 212.029614][T12656] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 212.029630][T12656] ? drm_event_reserve_init+0x1fa/0x280 [ 212.029646][T12656] drm_mode_atomic_ioctl+0x1b9c/0x2680 [ 212.029669][T12656] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.029684][T12656] ? __lock_acquire+0x49f/0x1a40 [ 212.029706][T12656] ? drm_is_current_master+0x2c/0x40 [ 212.029720][T12656] ? drm_is_current_master+0x2c/0x40 [ 212.029735][T12656] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.029754][T12656] drm_ioctl_kernel+0x1f3/0x3e0 [ 212.029768][T12656] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.029783][T12656] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 212.029800][T12656] drm_ioctl+0x5e6/0xc60 [ 212.029815][T12656] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.029831][T12656] ? __pfx_drm_ioctl+0x10/0x10 [ 212.029849][T12656] ? selinux_file_ioctl+0x13b/0x290 [ 212.029867][T12656] ? selinux_file_ioctl+0xb6/0x290 [ 212.029886][T12656] ? __pfx_drm_ioctl+0x10/0x10 [ 212.029899][T12656] __x64_sys_ioctl+0x18e/0x210 [ 212.029918][T12656] do_syscall_64+0x115/0x870 [ 212.029933][T12656] ? clear_bhb_loop+0x70/0xc0 [ 212.029948][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.029960][T12656] RIP: 0033:0x7f2b28b9e0d9 [ 212.029971][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.029983][T12656] RSP: 002b:00007f2b29a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.029995][T12656] RAX: ffffffffffffffda RBX: 00007f2b28e25fa0 RCX: 00007f2b28b9e0d9 [ 212.030002][T12656] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 212.030009][T12656] RBP: 00007f2b29a47090 R08: 0000000000000000 R09: 0000000000000000 [ 212.030015][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.030022][T12656] R13: 00007f2b28e26038 R14: 00007f2b28e25fa0 R15: 00007ffd399f77d8 [ 212.030036][T12656] [ 212.512199][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.794021][T12690] FAULT_INJECTION: forcing a failure. [ 212.794021][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 212.801362][T12690] CPU: 3 UID: 0 PID: 12690 Comm: syz.4.2352 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.801391][T12690] Tainted: [L]=SOFTLOCKUP [ 212.801397][T12690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.801408][T12690] Call Trace: [ 212.801413][T12690] [ 212.801421][T12690] dump_stack_lvl+0x100/0x190 [ 212.801451][T12690] should_fail_ex.cold+0x5/0xa [ 212.801475][T12690] should_failslab+0xc2/0x120 [ 212.801500][T12690] __kmalloc_noprof+0xfc/0x820 [ 212.801519][T12690] ? kasan_save_track+0x14/0x30 [ 212.801541][T12690] ? __kasan_kmalloc+0xaa/0xb0 [ 212.801561][T12690] ? drm_atomic_commit_init+0xf4/0x490 [ 212.801588][T12690] drm_atomic_commit_init+0xf4/0x490 [ 212.801605][T12690] drm_atomic_commit_alloc+0xd3/0x120 [ 212.801621][T12690] drm_mode_atomic_ioctl+0x395/0x2680 [ 212.801647][T12690] ? avc_has_extended_perms+0x33a/0x1080 [ 212.801675][T12690] ? avc_has_extended_perms+0x484/0x1080 [ 212.801698][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.801718][T12690] ? __lock_acquire+0x49f/0x1a40 [ 212.801751][T12690] ? drm_is_current_master+0x2c/0x40 [ 212.801771][T12690] ? drm_is_current_master+0x2c/0x40 [ 212.801795][T12690] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.801824][T12690] drm_ioctl_kernel+0x1f3/0x3e0 [ 212.801843][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.801860][T12690] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 212.801878][T12690] drm_ioctl+0x5e6/0xc60 [ 212.801902][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 212.801925][T12690] ? __pfx_drm_ioctl+0x10/0x10 [ 212.801955][T12690] ? selinux_file_ioctl+0x13b/0x290 [ 212.801977][T12690] ? selinux_file_ioctl+0xb6/0x290 [ 212.802003][T12690] ? __pfx_drm_ioctl+0x10/0x10 [ 212.802024][T12690] __x64_sys_ioctl+0x18e/0x210 [ 212.802052][T12690] do_syscall_64+0x115/0x870 [ 212.802076][T12690] ? clear_bhb_loop+0x70/0xc0 [ 212.802093][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.802106][T12690] RIP: 0033:0x7f028059e0d9 [ 212.802117][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.802129][T12690] RSP: 002b:00007f028141b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.802146][T12690] RAX: ffffffffffffffda RBX: 00007f0280825fa0 RCX: 00007f028059e0d9 [ 212.802153][T12690] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 212.802160][T12690] RBP: 00007f028141b090 R08: 0000000000000000 R09: 0000000000000000 [ 212.802167][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.802174][T12690] R13: 00007f0280826038 R14: 00007f0280825fa0 R15: 00007ffe4d4173f8 [ 212.802190][T12690] [ 212.891693][ T5731] Bluetooth: hci0: command tx timeout [ 214.960470][ T5731] Bluetooth: hci0: command tx timeout [ 215.167932][T12699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2355'. [ 215.737436][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 215.745673][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 215.762416][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 215.766026][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 215.871216][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.874288][T12732] syzkaller0: entered promiscuous mode [ 215.874347][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.881017][T12732] syzkaller0: entered allmulticast mode [ 216.049197][T12743] FAULT_INJECTION: forcing a failure. [ 216.049197][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.055427][T12743] CPU: 3 UID: 0 PID: 12743 Comm: syz.2.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.055456][T12743] Tainted: [L]=SOFTLOCKUP [ 216.055462][T12743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.055474][T12743] Call Trace: [ 216.055481][T12743] [ 216.055488][T12743] dump_stack_lvl+0x100/0x190 [ 216.055516][T12743] should_fail_ex.cold+0x5/0xa [ 216.055542][T12743] _copy_to_user+0x32/0xd0 [ 216.055565][T12743] drm_ioctl+0x608/0xc60 [ 216.055616][T12743] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 216.055639][T12743] ? __pfx_drm_ioctl+0x10/0x10 [ 216.055669][T12743] ? selinux_file_ioctl+0x13b/0x290 [ 216.055695][T12743] ? selinux_file_ioctl+0xb6/0x290 [ 216.055722][T12743] ? __pfx_drm_ioctl+0x10/0x10 [ 216.055742][T12743] __x64_sys_ioctl+0x18e/0x210 [ 216.055772][T12743] do_syscall_64+0x115/0x870 [ 216.055794][T12743] ? clear_bhb_loop+0x70/0xc0 [ 216.055817][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.055833][T12743] RIP: 0033:0x7f1e0bf9e0d9 [ 216.055850][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.055872][T12743] RSP: 002b:00007f1e0ce0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.055889][T12743] RAX: ffffffffffffffda RBX: 00007f1e0c225fa0 RCX: 00007f1e0bf9e0d9 [ 216.055902][T12743] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 216.055913][T12743] RBP: 00007f1e0ce0d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.055924][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.055933][T12743] R13: 00007f1e0c226038 R14: 00007f1e0c225fa0 R15: 00007ffc193ba818 [ 216.055956][T12743] [ 216.244513][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 216.419514][T12767] syzkaller0: entered promiscuous mode [ 216.422223][T12767] syzkaller0: entered allmulticast mode [ 216.565947][T12780] bridge_slave_0: left allmulticast mode [ 216.567868][T12780] bridge_slave_0: left promiscuous mode [ 216.569750][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.578990][T12780] bridge_slave_1: left promiscuous mode [ 216.585411][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.592584][T12780] bond0: (slave bond_slave_0): Releasing backup interface [ 216.608574][T12780] bond0: (slave bond_slave_1): Releasing backup interface [ 216.626456][T12780] team0: Port device team_slave_0 removed [ 216.633792][T12780] team0: Port device team_slave_1 removed [ 216.636184][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.638908][T12780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.643279][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.646995][T12780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.651428][T12780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.670318][T12789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2390'. [ 216.673319][T12790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2390'. [ 216.706335][T12793] FAULT_INJECTION: forcing a failure. [ 216.706335][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 216.710635][T12793] CPU: 1 UID: 0 PID: 12793 Comm: syz.2.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.710655][T12793] Tainted: [L]=SOFTLOCKUP [ 216.710660][T12793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.710667][T12793] Call Trace: [ 216.710672][T12793] [ 216.710677][T12793] dump_stack_lvl+0x100/0x190 [ 216.710697][T12793] should_fail_ex.cold+0x5/0xa [ 216.710713][T12793] should_failslab+0xc2/0x120 [ 216.710730][T12793] __kmalloc_noprof+0xfc/0x820 [ 216.710743][T12793] ? __kasan_kmalloc+0xaa/0xb0 [ 216.710757][T12793] ? drm_atomic_commit_init+0x190/0x490 [ 216.710774][T12793] drm_atomic_commit_init+0x190/0x490 [ 216.710789][T12793] drm_atomic_commit_alloc+0xd3/0x120 [ 216.710803][T12793] drm_mode_atomic_ioctl+0x395/0x2680 [ 216.710820][T12793] ? avc_has_extended_perms+0x33a/0x1080 [ 216.710844][T12793] ? avc_has_extended_perms+0x484/0x1080 [ 216.710859][T12793] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 216.710873][T12793] ? __lock_acquire+0x49f/0x1a40 [ 216.710896][T12793] ? drm_is_current_master+0x2c/0x40 [ 216.710909][T12793] ? drm_is_current_master+0x2c/0x40 [ 216.710925][T12793] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.710944][T12793] drm_ioctl_kernel+0x1f3/0x3e0 [ 216.710956][T12793] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 216.710972][T12793] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 216.710989][T12793] drm_ioctl+0x5e6/0xc60 [ 216.711003][T12793] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 216.711019][T12793] ? __pfx_drm_ioctl+0x10/0x10 [ 216.711037][T12793] ? selinux_file_ioctl+0x13b/0x290 [ 216.711055][T12793] ? selinux_file_ioctl+0xb6/0x290 [ 216.711074][T12793] ? __pfx_drm_ioctl+0x10/0x10 [ 216.711087][T12793] __x64_sys_ioctl+0x18e/0x210 [ 216.711106][T12793] do_syscall_64+0x115/0x870 [ 216.711122][T12793] ? clear_bhb_loop+0x70/0xc0 [ 216.711136][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.711149][T12793] RIP: 0033:0x7f1e0bf9e0d9 [ 216.711159][T12793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.711169][T12793] RSP: 002b:00007f1e0ce0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.711181][T12793] RAX: ffffffffffffffda RBX: 00007f1e0c225fa0 RCX: 00007f1e0bf9e0d9 [ 216.711189][T12793] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 216.711196][T12793] RBP: 00007f1e0ce0d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.711202][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.711209][T12793] R13: 00007f1e0c226038 R14: 00007f1e0c225fa0 R15: 00007ffc193ba818 [ 216.711223][T12793] [ 216.739514][T12795] fuse: Unknown parameter '000000000000000000000040x0000000000000005' [ 216.969865][T12805] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.018681][T12807] syzkaller0: entered promiscuous mode [ 217.018699][T12807] syzkaller0: entered allmulticast mode [ 217.030710][ T5731] Bluetooth: hci0: command tx timeout [ 217.545231][T12827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2406'. [ 217.609348][T12837] FAULT_INJECTION: forcing a failure. [ 217.609348][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.613925][T12837] CPU: 3 UID: 0 PID: 12837 Comm: syz.0.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.613945][T12837] Tainted: [L]=SOFTLOCKUP [ 217.613949][T12837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.613957][T12837] Call Trace: [ 217.613961][T12837] [ 217.613966][T12837] dump_stack_lvl+0x100/0x190 [ 217.613987][T12837] should_fail_ex.cold+0x5/0xa [ 217.614003][T12837] _copy_to_user+0x32/0xd0 [ 217.614022][T12837] simple_read_from_buffer+0xcb/0x170 [ 217.614036][T12837] proc_fail_nth_read+0x1af/0x230 [ 217.614056][T12837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.614077][T12837] ? rw_verify_area+0xce/0x6d0 [ 217.614093][T12837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.614112][T12837] vfs_read+0x1e4/0xb40 [ 217.614132][T12837] ? __pfx_vfs_read+0x10/0x10 [ 217.614149][T12837] ? __fget_files+0x215/0x3d0 [ 217.614165][T12837] ? __fget_files+0x21f/0x3d0 [ 217.614181][T12837] ksys_read+0x12a/0x250 [ 217.614191][T12837] ? __pfx_ksys_read+0x10/0x10 [ 217.614206][T12837] do_syscall_64+0x115/0x870 [ 217.614222][T12837] ? clear_bhb_loop+0x70/0xc0 [ 217.614237][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.614249][T12837] RIP: 0033:0x7f2b28b5e90e [ 217.614261][T12837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.614272][T12837] RSP: 002b:00007f2b29a46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.614285][T12837] RAX: ffffffffffffffda RBX: 00007f2b29a476c0 RCX: 00007f2b28b5e90e [ 217.614292][T12837] RDX: 000000000000000f RSI: 00007f2b29a470a0 RDI: 0000000000000012 [ 217.614299][T12837] RBP: 00007f2b29a47090 R08: 0000000000000000 R09: 0000000000000000 [ 217.614306][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.614313][T12837] R13: 00007f2b28e26038 R14: 00007f2b28e25fa0 R15: 00007ffd399f77d8 [ 217.614327][T12837] [ 217.711516][ T42] audit: type=1400 audit(2000000069.079:840): avc: denied { read } for pid=12838 comm="syz.4.2409" name="file0" dev="9p" ino=78905561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 217.720972][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 217.724639][ T42] audit: type=1400 audit(2000000069.079:841): avc: denied { open } for pid=12838 comm="syz.4.2409" path="/427/file0/file0" dev="9p" ino=78905561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 217.726221][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2410'. [ 217.773070][T12841] bond0: entered promiscuous mode [ 217.776079][T12841] gretap0: entered promiscuous mode [ 217.778486][T12841] debugfs: 'hsr1' already exists in 'hsr' [ 217.780666][T12841] Cannot create hsr debugfs directory [ 217.782470][T12841] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 217.785659][T12841] hsr1: entered promiscuous mode [ 218.212664][T12857] bridge0: entered promiscuous mode [ 218.214418][T12857] bridge0: entered allmulticast mode [ 218.297082][T12858] batman_adv: batadv0: Adding interface: veth0 [ 218.299201][T12858] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.309172][T12858] batman_adv: batadv0: Interface activated: veth0 [ 218.313114][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2416'. [ 218.317507][T12855] batman_adv: batadv0: Interface deactivated: veth0 [ 218.319527][T12855] batman_adv: batadv0: Removing interface: veth0 [ 218.491004][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 1 < count 1025 [ 218.813995][T12884] batman_adv: batadv0: Adding interface: veth0 [ 218.815979][T12884] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.823684][T12884] batman_adv: batadv0: Interface activated: veth0 [ 218.828538][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2427'. [ 218.833941][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.836320][T12884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.838877][ T42] audit: type=1400 audit(2000000070.199:842): avc: denied { write } for pid=12885 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 218.846611][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.849009][T12884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.854966][T12884] batman_adv: batadv0: Interface deactivated: veth0 [ 218.857092][T12884] batman_adv: batadv0: Removing interface: veth0 [ 218.894470][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 0 < count 1025 [ 219.013755][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 219.074784][T12903] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.190882][ T34] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 219.194677][ T34] usb 9-1: config 0 has no interfaces? [ 219.196473][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.427554][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 1 < count 1025 [ 220.389071][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2442'. [ 220.418888][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 220.449470][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'. [ 220.599145][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 0 < count 1025 [ 221.025004][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 221.348393][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 221.614326][ T5731] Bluetooth: hci3: hcon ffff888022d74000 sent 1 < count 1025 [ 221.656771][ T5814] usb 9-1: USB disconnect, device number 16 [ 221.707659][T13029] 9pnet_virtio: no channels available for device syz [ 221.786040][ T42] audit: type=1400 audit(2000000073.149:843): avc: denied { create } for pid=13019 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.822073][T13045] __nla_validate_parse: 3 callbacks suppressed [ 221.822086][T13045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2483'. [ 221.942715][ T5731] Bluetooth: hci3: hcon ffff888022d74000 sent 0 < count 1025 [ 222.210687][ T6062] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 222.291745][ T42] audit: type=1400 audit(2000000073.659:844): avc: denied { read append } for pid=13062 comm="syz.4.2491" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 222.299769][ T42] audit: type=1400 audit(2000000073.659:845): avc: denied { open } for pid=13062 comm="syz.4.2491" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 222.360440][ T6062] usb 8-1: Using ep0 maxpacket: 8 [ 222.368575][ T6062] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.375479][ T6062] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.378626][ T6062] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.381964][ T6062] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 222.385697][ T6062] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 222.389270][ T6062] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 222.394957][ T6062] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.399141][ T6062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.407865][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2494'. [ 222.434956][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 222.750576][ T148] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 222.903166][ T148] usb 7-1: Using ep0 maxpacket: 8 [ 222.906700][ T148] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 222.913892][ T148] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 222.917217][ T148] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 222.923313][ T148] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 222.929430][ T148] usb 7-1: config 250 has no interface number 0 [ 222.932373][ T148] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 222.937148][ T148] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 222.941704][ T148] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.945729][ T148] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.945746][ T148] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 222.945762][ T148] usb 7-1: config 250 interface 228 has no altsetting 0 [ 222.962925][ T148] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 222.962943][ T148] usb 7-1: Product: syz [ 222.962951][ T148] usb 7-1: SerialNumber: syz [ 223.096697][T13103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'. [ 223.142203][ T42] audit: type=1400 audit(2000000074.509:846): avc: denied { read } for pid=13104 comm="syz.0.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.194645][ T42] audit: type=1400 audit(2000000074.559:847): avc: denied { ioctl } for pid=13104 comm="syz.0.2507" path="socket:[68566]" dev="sockfs" ino=68566 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.559426][ T42] audit: type=1400 audit(2000000074.919:848): avc: denied { getopt } for pid=13109 comm="syz.4.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.562593][T13110] loop7: detected capacity change from 0 to 7 [ 223.624657][T13110] Dev loop7: unable to read RDB block 7 [ 223.624692][T13110] loop7: unable to read partition table [ 223.624791][T13110] loop7: partition table beyond EOD, truncated [ 223.628405][T13110] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 224.973546][ T24] usb 8-1: USB disconnect, device number 16 [ 225.514454][ T5834] usb 7-1: USB disconnect, device number 20 [ 227.094539][ T42] audit: type=1400 audit(2000000078.459:849): avc: denied { connect } for pid=13154 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.586911][T13185] bridge_slave_1: default FDB implementation only supports local addresses [ 227.671437][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2538'. [ 227.733816][T13206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2544'. [ 227.992555][T13220] bridge_slave_1: default FDB implementation only supports local addresses [ 228.175902][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2554'. [ 228.482918][T13264] syzkaller0: entered promiscuous mode [ 228.485257][T13264] syzkaller0: entered allmulticast mode [ 228.692916][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 0 < count 1025 [ 229.036681][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 0 < count 1025 [ 229.347179][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 229.534894][T13347] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 229.575151][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2602'. [ 229.644896][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 229.817343][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2610'. [ 229.821143][T13368] Unknown options in mask b7f2 [ 229.869815][T13373] netlink: 'syz.2.2611': attribute type 1 has an invalid length. [ 229.909516][T13373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.951961][ T5731] Bluetooth: hci0: hcon ffff888033858000 sent 0 < count 1025 [ 230.179258][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 230.228920][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2626'. [ 230.257394][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 230.273532][T13408] x_tables: duplicate underflow at hook 2 [ 230.882356][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2633'. [ 232.389613][ T5731] Bluetooth: hci4: hcon ffff88802d518000 sent 0 < count 1025 [ 232.444101][T13430] lo: entered allmulticast mode [ 232.562046][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2638'. [ 243.186947][ T5731] Bluetooth: hci3: hcon ffff888022d74000 sent 0 < count 1025 [ 243.226791][ T42] audit: type=1400 audit(2000000094.589:850): avc: denied { setopt } for pid=13462 comm="syz.0.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.228850][ C3] sched: DL replenish lagged too much [ 244.230631][T13445] ------------[ cut here ]------------ [ 244.233386][T13445] [CRTC:39:crtc-0] vblank wait timed out [ 244.236007][T13445] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#0: syz.2.2644/13445 [ 244.241709][T13445] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.245248][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.2.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.246784][ T42] audit: type=1400 audit(2000000095.609:851): avc: denied { write } for pid=5647 comm="syz-executor" path="pipe:[5889]" dev="pipefs" ino=5889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 244.249733][T13445] Tainted: [L]=SOFTLOCKUP [ 244.260553][T13445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.264307][T13445] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 244.267470][T13445] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 38 dd 5f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 53 0e 3d fc e9 7c fe ff ff e8 d9 [ 244.274322][T13445] RSP: 0018:ffffc9000649f460 EFLAGS: 00010246 [ 244.276405][T13445] RAX: 0000000000000000 RBX: ffff888100b60040 RCX: 1ffff1102016c022 [ 244.279581][T13445] RDX: ffff8880278f7060 RSI: 0000000000000027 RDI: ffffffff912d4250 [ 244.282135][T13445] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 244.285301][T13445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.287815][T13445] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888014013300 [ 244.290934][T13445] FS: 0000000000000000(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 244.293912][T13445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.296088][T13445] CR2: 00007f2b28beb7c0 CR3: 00000000004cc000 CR4: 0000000000352ef0 [ 244.298576][T13445] Call Trace: [ 244.299713][T13445] [ 244.300728][T13445] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 244.303088][T13445] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.304966][T13445] ? lockdep_hardirqs_on+0x78/0x100 [ 244.306609][T13445] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.308412][T13445] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 244.310497][T13445] drm_atomic_helper_commit_tail+0xff/0x130 [ 244.312373][T13445] commit_tail+0x338/0x430 [ 244.313795][T13445] drm_atomic_helper_commit+0x303/0x380 [ 244.315546][T13445] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 244.317455][T13445] drm_atomic_commit+0x230/0x300 [ 244.319041][T13445] ? __pfx_drm_atomic_commit+0x10/0x10 [ 244.321707][T13445] ? __pfx___drm_printfn_info+0x10/0x10 [ 244.323476][T13445] ? drm_client_rotation+0x451/0x6a0 [ 244.325181][T13445] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 244.327155][T13445] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 244.329182][T13445] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 244.331341][T13445] ? drm_master_internal_acquire+0x21/0x80 [ 244.333208][T13445] drm_client_modeset_commit_locked+0x14d/0x580 [ 244.335391][T13445] drm_client_modeset_commit+0x4f/0x80 [ 244.337116][T13445] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 244.339581][T13445] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 244.341913][T13445] drm_fbdev_client_restore+0x1b/0x30 [ 244.343616][T13445] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 244.345527][T13445] drm_client_dev_restore+0x205/0x2a0 [ 244.347227][T13445] drm_release+0x2c6/0x360 [ 244.348669][T13445] ? __pfx_drm_release+0x10/0x10 [ 244.350248][T13445] __fput+0x3ff/0xb50 [ 244.351682][T13445] task_work_run+0x150/0x240 [ 244.353205][T13445] ? __pfx_task_work_run+0x10/0x10 [ 244.354817][T13445] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.356466][T13445] do_exit+0x951/0x2ae0 [ 244.357794][T13445] ? __pfx_do_exit+0x10/0x10 [ 244.359265][T13445] ? do_raw_spin_lock+0x128/0x260 [ 244.361002][T13445] ? find_held_lock+0x2b/0x80 [ 244.362573][T13445] ? get_signal+0x7e0/0x21e0 [ 244.364090][T13445] do_group_exit+0xd5/0x2a0 [ 244.365547][T13445] get_signal+0x1ec7/0x21e0 [ 244.367050][T13445] ? lockdep_hardirqs_on+0x78/0x100 [ 244.368816][T13445] ? __pfx_get_signal+0x10/0x10 [ 244.370458][T13445] arch_do_signal_or_restart+0x91/0x7e0 [ 244.372214][T13445] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 244.374129][T13445] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.376073][T13445] exit_to_user_mode_loop+0x139/0x6f0 [ 244.377770][T13445] ? rcu_is_watching+0x12/0xc0 [ 244.379302][T13445] do_syscall_64+0x666/0x870 [ 244.380836][T13445] ? clear_bhb_loop+0x70/0xc0 [ 244.382325][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.384184][T13445] RIP: 0033:0x7f1e0bf9e0d9 [ 244.385601][T13445] Code: Unable to access opcode bytes at 0x7f1e0bf9e0af. [ 244.387778][T13445] RSP: 002b:00007ffc193ba978 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 244.390482][T13445] RAX: 0000000000000000 RBX: 00007f1e0c227da0 RCX: 00007f1e0bf9e0d9 [ 244.392956][T13445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 244.395413][T13445] RBP: 00007f1e0c227da0 R08: 0000000000000006 R09: 0000000000000000 [ 244.397883][T13445] R10: 00007f1e0c227cb0 R11: 0000000000000246 R12: 0000000000039c46 [ 244.400422][T13445] R13: 00007f1e0c22636c R14: 0000000000039a1a R15: 00007f1e0c226360 [ 244.402906][T13445] [ 244.403907][T13445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.406285][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.2.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.409737][T13445] Tainted: [L]=SOFTLOCKUP [ 244.411149][T13445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.414281][T13445] Call Trace: [ 244.415348][T13445] [ 244.416299][T13445] dump_stack_lvl+0x100/0x190 [ 244.417811][T13445] vpanic+0x552/0x970 [ 244.419083][T13445] ? __pfx_vpanic+0x10/0x10 [ 244.420528][T13445] panic+0xd1/0xe0 [ 244.421722][T13445] ? __pfx_panic+0x10/0x10 [ 244.423147][T13445] ? check_panic_on_warn+0x1f/0x90 [ 244.425018][T13445] check_panic_on_warn.cold+0x19/0x34 [ 244.427120][T13445] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 244.429930][T13445] __warn.cold+0x191/0x318 [ 244.431698][T13445] __report_bug+0x30f/0x440 [ 244.433478][T13445] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 244.436274][T13445] ? __pfx___report_bug+0x10/0x10 [ 244.438234][T13445] ? lockdep_hardirqs_on+0x78/0x100 [ 244.440293][T13445] report_bug_entry+0xe1/0x290 [ 244.442160][T13445] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 244.444953][T13445] handle_bug+0x1cd/0x2a0 [ 244.446658][T13445] exc_invalid_op+0x17/0x50 [ 244.448447][T13445] asm_exc_invalid_op+0x1a/0x20 [ 244.450359][T13445] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 244.453377][T13445] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 38 dd 5f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 53 0e 3d fc e9 7c fe ff ff e8 d9 [ 244.460815][T13445] RSP: 0018:ffffc9000649f460 EFLAGS: 00010246 [ 244.463171][T13445] RAX: 0000000000000000 RBX: ffff888100b60040 RCX: 1ffff1102016c022 [ 244.466247][T13445] RDX: ffff8880278f7060 RSI: 0000000000000027 RDI: ffffffff912d4250 [ 244.469334][T13445] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 244.472400][T13445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.475469][T13445] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888014013300 [ 244.478543][T13445] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 244.481466][T13445] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.483738][T13445] ? lockdep_hardirqs_on+0x78/0x100 [ 244.485769][T13445] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.488121][T13445] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 244.490616][T13445] drm_atomic_helper_commit_tail+0xff/0x130 [ 244.492912][T13445] commit_tail+0x338/0x430 [ 244.494654][T13445] drm_atomic_helper_commit+0x303/0x380 [ 244.496805][T13445] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 244.499169][T13445] drm_atomic_commit+0x230/0x300 [ 244.501104][T13445] ? __pfx_drm_atomic_commit+0x10/0x10 [ 244.503221][T13445] ? __pfx___drm_printfn_info+0x10/0x10 [ 244.505393][T13445] ? drm_client_rotation+0x451/0x6a0 [ 244.507443][T13445] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 244.509909][T13445] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 244.512375][T13445] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 244.514983][T13445] ? drm_master_internal_acquire+0x21/0x80 [ 244.516865][T13445] drm_client_modeset_commit_locked+0x14d/0x580 [ 244.518851][T13445] drm_client_modeset_commit+0x4f/0x80 [ 244.520571][T13445] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 244.522991][T13445] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 244.525123][T13445] drm_fbdev_client_restore+0x1b/0x30 [ 244.526821][T13445] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 244.528736][T13445] drm_client_dev_restore+0x205/0x2a0 [ 244.530424][T13445] drm_release+0x2c6/0x360 [ 244.531852][T13445] ? __pfx_drm_release+0x10/0x10 [ 244.533421][T13445] __fput+0x3ff/0xb50 [ 244.534706][T13445] task_work_run+0x150/0x240 [ 244.536189][T13445] ? __pfx_task_work_run+0x10/0x10 [ 244.537807][T13445] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.539470][T13445] do_exit+0x951/0x2ae0 [ 244.540791][T13445] ? __pfx_do_exit+0x10/0x10 [ 244.542279][T13445] ? do_raw_spin_lock+0x128/0x260 [ 244.543879][T13445] ? find_held_lock+0x2b/0x80 [ 244.545361][T13445] ? get_signal+0x7e0/0x21e0 [ 244.546840][T13445] do_group_exit+0xd5/0x2a0 [ 244.548284][T13445] get_signal+0x1ec7/0x21e0 [ 244.549767][T13445] ? lockdep_hardirqs_on+0x78/0x100 [ 244.551417][T13445] ? __pfx_get_signal+0x10/0x10 [ 244.552975][T13445] arch_do_signal_or_restart+0x91/0x7e0 [ 244.554725][T13445] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 244.556639][T13445] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.558570][T13445] exit_to_user_mode_loop+0x139/0x6f0 [ 244.560297][T13445] ? rcu_is_watching+0x12/0xc0 [ 244.561812][T13445] do_syscall_64+0x666/0x870 [ 244.563273][T13445] ? clear_bhb_loop+0x70/0xc0 [ 244.564773][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.566750][T13445] RIP: 0033:0x7f1e0bf9e0d9 [ 244.568175][T13445] Code: Unable to access opcode bytes at 0x7f1e0bf9e0af. [ 244.570372][T13445] RSP: 002b:00007ffc193ba978 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 244.572975][T13445] RAX: 0000000000000000 RBX: 00007f1e0c227da0 RCX: 00007f1e0bf9e0d9 [ 244.575483][T13445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 244.577938][T13445] RBP: 00007f1e0c227da0 R08: 0000000000000006 R09: 0000000000000000 [ 244.580388][T13445] R10: 00007f1e0c227cb0 R11: 0000000000000246 R12: 0000000000039c46 [ 244.582846][T13445] R13: 00007f1e0c22636c R14: 0000000000039a1a R15: 00007f1e0c226360 [ 244.585358][T13445] [ 245.669151][T13445] Shutting down cpus with NMI [ 245.671224][T13445] Kernel Offset: disabled [ 245.672590][T13445] Rebooting in 86400 seconds..