last executing test programs: 3m17.969715714s ago: executing program 0 (id=93): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) 3m16.726738458s ago: executing program 0 (id=96): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) 3m15.624693345s ago: executing program 0 (id=99): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x186}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d246", 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="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", 0x123}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m14.848172427s ago: executing program 0 (id=101): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) file_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x200, 0x4, 0x0, 0x65, 0x9}, 0x18, 0x1000) close(r0) 3m14.160747323s ago: executing program 0 (id=103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3m13.749234991s ago: executing program 0 (id=105): io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63", 0xbb}], 0x1) 2m28.20044172s ago: executing program 32 (id=105): io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63", 0xbb}], 0x1) 25.409448107s ago: executing program 2 (id=342): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000700)=0xffffffff, 0x4) 22.947966322s ago: executing program 2 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x10, 0xa}, {0xfff1, 0x8}}}, 0x24}}, 0x40004) 22.287152546s ago: executing program 2 (id=344): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f0000001500)="5b9790578a6893e2", 0x8}], 0x2}, 0x0) 21.678225378s ago: executing program 2 (id=345): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 21.348127209s ago: executing program 2 (id=346): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8032, 0xffffffffffffffff, 0xc369d000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0) 16.079437292s ago: executing program 2 (id=347): socket$inet6_udp(0xa, 0x2, 0x0) timer_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) tee(r4, 0xffffffffffffffff, 0x1476, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r7, 0xffffffffffffffff, 0x0) 6.501581094s ago: executing program 1 (id=352): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650", 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 6.008201747s ago: executing program 1 (id=353): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.299570259s ago: executing program 1 (id=354): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3.078046483s ago: executing program 1 (id=355): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x8000, 0x87, 0xffffffff, 0x2}) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f0000000300), 0x4) 2.940325113s ago: executing program 1 (id=356): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8032, 0xffffffffffffffff, 0xc369d000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0) 0s ago: executing program 1 (id=357): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x3ff, 0x1, 0x800}, 0x24, [0xfffffffc, 0x3, 0x6e, 0x4, 0x9, 0xfffffffc, 0x101, 0x859d, 0x1000, 0x7, 0x7, 0x1, 0x6, 0x401, 0x1, 0x5, 0x3, 0x4, 0x5, 0xffffffff, 0x3, 0xe2, 0x4, 0xe, 0x3, 0x80000001, 0x7, 0x1, 0x8407, 0x7, 0x6, 0x67, 0x4, 0xf4a, 0x1, 0x2, 0x5a39b125, 0xe45e, 0x8c, 0x8, 0x7ff, 0x40, 0x4, 0xab, 0x6, 0x10001, 0x3, 0xab, 0x7fffffff, 0x4, 0x7, 0x1, 0x7fff, 0x3, 0x4, 0x6, 0x100, 0x5, 0x3, 0x5, 0x9, 0x6, 0x47, 0xcc2], [0x3f1, 0x7, 0x3, 0x78e4, 0x4185, 0x1, 0x7ff, 0x9, 0x3, 0x3, 0x980, 0xfffffffe, 0x2, 0x91, 0x4, 0x7, 0x1, 0x2, 0x33, 0x3ff, 0x0, 0x0, 0x1ff, 0xfd7e, 0x80000001, 0x32, 0x8, 0x80000, 0x1, 0xfc9, 0x9, 0x9, 0x3, 0x70, 0x5, 0x0, 0xa, 0x3, 0x8, 0x0, 0x5, 0x74f3, 0xdf, 0x5, 0x4, 0x7, 0x10, 0x93e, 0x2e, 0xe8, 0x8001, 0xc68e, 0x401, 0x6, 0x80000003, 0x3, 0x101, 0x4, 0xc, 0x4, 0x4, 0x7fff, 0x4, 0xb], [0x9, 0x7345, 0x8, 0xb17, 0x2, 0x1, 0x10001, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x3, 0x2, 0x0, 0x100, 0x3, 0xbd, 0x3a3b5806, 0x1a, 0xffff, 0x15e2, 0x9, 0x1, 0x40, 0x6, 0x4d, 0x0, 0x8001, 0x4, 0xfffffffd, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x1, 0x0, 0x5, 0x66b, 0x7, 0x1, 0x800, 0xfffffff5, 0x7, 0xa, 0x84, 0x0, 0x5, 0x8, 0xfffffffb, 0x2, 0x40, 0xa, 0x7ff, 0x401, 0x6, 0x4, 0x7, 0xcacc, 0x0, 0x1, 0x40], [0xe, 0x7658, 0x3, 0x40, 0x1, 0xffffff10, 0x100, 0x64b, 0xab6e, 0x4, 0x2, 0x2c, 0x7, 0x8, 0x3, 0x2, 0x7f, 0x65, 0x8, 0xf, 0x9, 0x30, 0x2, 0x6, 0xe2f, 0x5, 0x7, 0x5, 0x7, 0xc00000, 0x200003, 0xffffffff, 0x4e8, 0x8, 0x363, 0x840a, 0xce, 0x2, 0xb, 0x10, 0xfffffff8, 0x2, 0x4, 0x5, 0x0, 0x8, 0x2, 0x2, 0x23, 0x4, 0xf55, 0x1, 0x40, 0xbfbb, 0x9, 0x3, 0x4ab, 0x9, 0x5, 0x78f3, 0x7, 0x10000, 0xfffffff0, 0x1ff]}, 0x45c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 59.260324][ T28] audit: type=1400 audit(59.140:56): avc: denied { read write } for pid=3078 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.264366][ T28] audit: type=1400 audit(59.140:57): avc: denied { open } for pid=3078 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:25980' (ED25519) to the list of known hosts. [ 76.126451][ T28] audit: type=1400 audit(76.000:58): avc: denied { name_bind } for pid=3081 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.808983][ T28] audit: type=1400 audit(77.670:59): avc: denied { execute } for pid=3082 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.858308][ T28] audit: type=1400 audit(77.730:60): avc: denied { execute_no_trans } for pid=3082 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.109154][ T28] audit: type=1400 audit(82.990:61): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 83.118474][ T28] audit: type=1400 audit(83.000:62): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.136954][ T3082] cgroup: Unknown subsys name 'net' [ 83.148271][ T28] audit: type=1400 audit(83.030:63): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.337664][ T3082] cgroup: Unknown subsys name 'cpuset' [ 83.352898][ T3082] cgroup: Unknown subsys name 'hugetlb' [ 83.354694][ T3082] cgroup: Unknown subsys name 'rlimit' [ 83.679471][ T28] audit: type=1400 audit(83.560:64): avc: denied { setattr } for pid=3082 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.682646][ T28] audit: type=1400 audit(83.560:65): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 83.686895][ T28] audit: type=1400 audit(83.560:66): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 83.940561][ T3084] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 83.946058][ T28] audit: type=1400 audit(83.820:67): avc: denied { relabelto } for pid=3084 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.954226][ T28] audit: type=1400 audit(83.830:68): avc: denied { write } for pid=3084 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 84.004641][ T28] audit: type=1400 audit(83.880:69): avc: denied { read } for pid=3082 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.005956][ T28] audit: type=1400 audit(83.880:70): avc: denied { open } for pid=3082 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.809727][ T3082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.296356][ T28] audit: type=1400 audit(95.170:71): avc: denied { execmem } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.344130][ T28] audit: type=1400 audit(95.220:72): avc: denied { read } for pid=3087 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.346895][ T28] audit: type=1400 audit(95.220:73): avc: denied { open } for pid=3087 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.369527][ T28] audit: type=1400 audit(95.250:74): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 95.412728][ T28] audit: type=1400 audit(95.290:75): avc: denied { module_request } for pid=3087 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.524591][ T28] audit: type=1400 audit(95.400:76): avc: denied { sys_module } for pid=3088 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.429041][ T28] audit: type=1400 audit(96.310:77): avc: denied { ioctl } for pid=3087 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.934962][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.949150][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.955054][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.987244][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.983007][ T3088] hsr_slave_0: entered promiscuous mode [ 98.990058][ T3088] hsr_slave_1: entered promiscuous mode [ 99.121142][ T3087] hsr_slave_0: entered promiscuous mode [ 99.124085][ T3087] hsr_slave_1: entered promiscuous mode [ 99.133015][ T3087] debugfs: 'hsr0' already exists in 'hsr' [ 99.135227][ T3087] Cannot create hsr debugfs directory [ 99.619021][ T28] audit: type=1400 audit(99.500:78): avc: denied { create } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.622211][ T28] audit: type=1400 audit(99.500:79): avc: denied { write } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.622569][ T28] audit: type=1400 audit(99.500:80): avc: denied { read } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.647063][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.662870][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.692574][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.702890][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.714140][ T3087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.756994][ T3087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.778275][ T3087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.796187][ T3087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.669639][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.869926][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.318124][ T3087] veth0_vlan: entered promiscuous mode [ 104.362788][ T3087] veth1_vlan: entered promiscuous mode [ 104.442311][ T3087] veth0_macvtap: entered promiscuous mode [ 104.462254][ T3087] veth1_macvtap: entered promiscuous mode [ 104.577624][ T3088] veth0_vlan: entered promiscuous mode [ 104.600715][ T3088] veth1_vlan: entered promiscuous mode [ 104.658173][ T2127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.659116][ T2127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.659247][ T2127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.659332][ T2127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.804133][ T28] audit: type=1400 audit(104.680:81): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.804652][ T28] audit: type=1400 audit(104.680:82): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.Pl3mVx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.819290][ T28] audit: type=1400 audit(104.700:83): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.840448][ T28] audit: type=1400 audit(104.720:84): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.Pl3mVx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 104.848233][ T28] audit: type=1400 audit(104.730:85): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.Pl3mVx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 104.863908][ T3088] veth0_macvtap: entered promiscuous mode [ 104.876321][ T28] audit: type=1400 audit(104.750:86): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.891407][ T28] audit: type=1400 audit(104.770:87): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 104.893647][ T3088] veth1_macvtap: entered promiscuous mode [ 104.898662][ T28] audit: type=1400 audit(104.780:88): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="gadgetfs" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 104.918586][ T28] audit: type=1400 audit(104.800:89): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.923541][ T28] audit: type=1400 audit(104.800:90): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 105.056295][ T3087] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.062841][ T2746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.063384][ T2746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.063950][ T2746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.064054][ T2746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.367078][ T3036] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.530264][ T3036] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 106.530716][ T3036] usb 2-1: config 4 has no interface number 0 [ 106.557831][ T3036] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 106.558245][ T3036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.558516][ T3036] usb 2-1: Product: syz [ 106.558696][ T3036] usb 2-1: Manufacturer: syz [ 106.558742][ T3036] usb 2-1: SerialNumber: syz [ 106.612574][ T3036] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input3 [ 107.340059][ T3698] bcm5974 2-1:4.28: could not read from device [ 107.342014][ T9] usb 2-1: USB disconnect, device number 2 [ 108.097360][ T3729] fuse: Bad value for 'fd' [ 108.442151][ T3740] fuse: Bad value for 'fd' [ 111.191002][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 111.191232][ T28] audit: type=1400 audit(111.070:108): avc: denied { create } for pid=3751 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.200893][ T28] audit: type=1400 audit(111.080:109): avc: denied { setopt } for pid=3751 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.043998][ T28] audit: type=1400 audit(111.920:110): avc: denied { append } for pid=3757 comm="syz.0.19" name="pcmC0D0p" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.244418][ T3762] syzkaller0: entered promiscuous mode [ 112.248432][ T3762] syzkaller0: entered allmulticast mode [ 113.567881][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.733829][ T45] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 113.734218][ T45] usb 1-1: config 4 has no interface number 0 [ 113.751690][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 113.751988][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.752313][ T45] usb 1-1: Product: syz [ 113.752368][ T45] usb 1-1: Manufacturer: syz [ 113.752394][ T45] usb 1-1: SerialNumber: syz [ 113.783049][ T45] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input4 [ 118.191529][ T28] audit: type=1400 audit(118.070:111): avc: denied { create } for pid=3799 comm="syz.1.32" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.080332][ T3775] bcm5974 1-1:4.28: could not read from device [ 119.107387][ T2872] usb 1-1: USB disconnect, device number 2 [ 120.413339][ T28] audit: type=1400 audit(120.290:112): avc: denied { prog_run } for pid=3818 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.175737][ T28] audit: type=1400 audit(126.050:113): avc: denied { create } for pid=3838 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.176416][ T28] audit: type=1400 audit(126.050:114): avc: denied { setopt } for pid=3838 comm="syz.0.44" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.171879][ T3036] Process accounting resumed [ 133.197996][ T3853] Process accounting resumed [ 134.726345][ T3036] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.889265][ T3036] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 134.890559][ T3036] usb 1-1: config 4 has no interface number 0 [ 135.059037][ T3036] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 135.066535][ T3036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.067720][ T3036] usb 1-1: Product: syz [ 135.068161][ T3036] usb 1-1: Manufacturer: syz [ 135.068545][ T3036] usb 1-1: SerialNumber: syz [ 135.153325][ T3036] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input5 [ 140.512331][ T3858] bcm5974 1-1:4.28: could not read from device [ 140.529109][ T9] usb 1-1: USB disconnect, device number 3 [ 142.004346][ T28] audit: type=1400 audit(141.880:115): avc: denied { ioctl } for pid=3901 comm="syz.0.63" path="socket:[2406]" dev="sockfs" ino=2406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.942567][ T3908] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 143.061576][ T28] audit: type=1400 audit(142.940:116): avc: denied { map_create } for pid=3909 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.111946][ T28] audit: type=1400 audit(142.990:117): avc: denied { map_read map_write } for pid=3909 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.122707][ T28] audit: type=1400 audit(143.000:118): avc: denied { name_bind } for pid=3909 comm="syz.0.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 143.446326][ T28] audit: type=1400 audit(143.320:119): avc: denied { sqpoll } for pid=3909 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.449530][ T28] audit: type=1400 audit(143.330:120): avc: denied { map } for pid=3909 comm="syz.0.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.454224][ T28] audit: type=1400 audit(143.330:121): avc: denied { read write } for pid=3909 comm="syz.0.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.573684][ T28] audit: type=1400 audit(143.450:122): avc: denied { name_bind } for pid=3909 comm="syz.0.65" src=17954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 143.576873][ T28] audit: type=1400 audit(143.450:123): avc: denied { node_bind } for pid=3909 comm="syz.0.65" saddr=fe80::aa src=17954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 145.347352][ T28] audit: type=1400 audit(145.210:124): avc: denied { create } for pid=3916 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.626749][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.888448][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.896524][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.897925][ T9] usb 2-1: Product: syz [ 148.898692][ T9] usb 2-1: Manufacturer: syz [ 148.899399][ T9] usb 2-1: SerialNumber: syz [ 149.327403][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 149.336334][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 149.338145][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.351472][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 149.680028][ T9] usb 2-1: USB disconnect, device number 3 [ 151.197496][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 151.230663][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 151.231049][ T28] audit: type=1400 audit(151.110:128): avc: denied { create } for pid=3942 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.291332][ T28] audit: type=1400 audit(151.170:129): avc: denied { write } for pid=3942 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.205743][ C0] hrtimer: interrupt took 8742496 ns [ 153.193433][ T28] audit: type=1400 audit(153.070:130): avc: denied { create } for pid=3946 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.255873][ T28] audit: type=1400 audit(153.130:131): avc: denied { create } for pid=3946 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.298977][ T28] audit: type=1400 audit(153.180:132): avc: denied { bind } for pid=3946 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.328758][ T28] audit: type=1400 audit(153.210:133): avc: denied { accept } for pid=3946 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.397478][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.580916][ T45] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 155.581284][ T45] usb 2-1: config 4 has no interface number 0 [ 155.670503][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 155.670970][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.671296][ T45] usb 2-1: Product: syz [ 155.671351][ T45] usb 2-1: Manufacturer: syz [ 155.671379][ T45] usb 2-1: SerialNumber: syz [ 155.713218][ T45] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input6 [ 155.918030][ T10] usb 2-1: USB disconnect, device number 4 [ 159.689566][ T3985] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET) [ 159.828476][ T28] audit: type=1400 audit(159.710:134): avc: denied { ioctl } for pid=3984 comm="syz.0.83" path="socket:[2488]" dev="sockfs" ino=2488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.365944][ T28] audit: type=1400 audit(160.240:135): avc: denied { read write } for pid=3984 comm="syz.0.83" dev="sockfs" ino=2488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.247122][ T3985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3985 comm=syz.0.83 [ 161.267142][ T3985] netlink: 76 bytes leftover after parsing attributes in process `syz.0.83'. [ 163.341649][ T3998] Process accounting paused [ 164.056479][ T28] audit: type=1400 audit(163.930:136): avc: denied { read } for pid=4003 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.374557][ T28] audit: type=1400 audit(164.250:137): avc: denied { execute } for pid=4006 comm="syz.1.88" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.389659][ T4007] process 'syz.1.88' launched '/dev/fd/4' with NULL argv: empty string added [ 164.483766][ T28] audit: type=1400 audit(164.360:138): avc: denied { execute_no_trans } for pid=4006 comm="syz.1.88" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.952344][ T4035] fuse: Bad value for 'group_id' [ 168.958965][ T4035] fuse: Bad value for 'group_id' [ 169.543449][ T28] audit: type=1400 audit(169.400:139): avc: denied { create } for pid=4039 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.562264][ T28] audit: type=1400 audit(169.440:140): avc: denied { write } for pid=4039 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.588245][ T4041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.103'. [ 169.593299][ T28] audit: type=1400 audit(169.470:141): avc: denied { nlmsg_write } for pid=4039 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.179095][ T28] audit: type=1400 audit(176.060:142): avc: denied { create } for pid=4057 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 176.195927][ T28] audit: type=1400 audit(176.060:143): avc: denied { sys_admin } for pid=4057 comm="syz.1.108" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 182.102875][ T4074] fuse: Bad value for 'user_id' [ 182.109832][ T4074] fuse: Bad value for 'user_id' [ 183.256717][ T4078] netlink: 148 bytes leftover after parsing attributes in process `syz.1.117'. [ 183.266618][ T4078] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 185.283708][ T4086] fuse: Bad value for 'user_id' [ 185.296733][ T4086] fuse: Bad value for 'user_id' [ 186.096801][ T28] audit: type=1400 audit(185.980:144): avc: denied { bind } for pid=4089 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.239946][ T4095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.934413][ T4097] fuse: Bad value for 'user_id' [ 187.969607][ T4097] fuse: Bad value for 'user_id' [ 189.514431][ T28] audit: type=1400 audit(189.390:145): avc: denied { create } for pid=4106 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.529774][ T28] audit: type=1400 audit(189.410:146): avc: denied { connect } for pid=4106 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.538473][ T28] audit: type=1400 audit(189.410:147): avc: denied { setopt } for pid=4106 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.559231][ T28] audit: type=1400 audit(189.440:148): avc: denied { bind } for pid=4106 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.571121][ T28] audit: type=1400 audit(189.450:149): avc: denied { write } for pid=4106 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.754599][ T4109] fuse: Bad value for 'fd' [ 192.703250][ T4121] fuse: Bad value for 'fd' [ 194.018164][ T28] audit: type=1400 audit(193.900:150): avc: denied { ioctl } for pid=4125 comm="syz.1.137" path="socket:[3752]" dev="sockfs" ino=3752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.035818][ T28] audit: type=1400 audit(193.910:151): avc: denied { bind } for pid=4125 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.037984][ T28] audit: type=1400 audit(193.920:152): avc: denied { setopt } for pid=4125 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.049619][ T28] audit: type=1400 audit(193.930:153): avc: denied { write } for pid=4125 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.069335][ T28] audit: type=1400 audit(193.950:154): avc: denied { read } for pid=4125 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.076536][ T4131] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.109710][ T4131] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.790561][ T28] audit: type=1400 audit(195.670:155): avc: denied { create } for pid=4134 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.026776][ T28] audit: type=1400 audit(197.900:156): avc: denied { create } for pid=4147 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.061216][ T28] audit: type=1400 audit(197.940:157): avc: denied { write } for pid=4147 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.561885][ T28] audit: type=1400 audit(199.440:158): avc: denied { create } for pid=4153 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 199.573354][ T28] audit: type=1400 audit(199.450:159): avc: denied { setopt } for pid=4153 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.107985][ T28] audit: type=1400 audit(199.990:160): avc: denied { write } for pid=4153 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.342059][ T4154] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 201.342813][ T4154] syz.1.147: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 201.357530][ T4154] CPU: 0 UID: 0 PID: 4154 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT [ 201.357921][ T4154] Hardware name: ARM-Versatile Express [ 201.358238][ T4154] Call trace: [ 201.358580][ T4154] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 201.359639][ T4154] r7:600e0013 r6:600e0013 r5:822a4e44 r4:00000000 [ 201.359737][ T4154] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 201.359807][ T4154] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 201.359866][ T4154] r7:00000000 r6:822c0bac r5:85064800 r4:00000000 [ 201.359882][ T4154] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 201.359934][ T4154] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 201.359989][ T4154] r3:1ffffff8 r2:822c0bac [ 201.360016][ T4154] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 201.360033][ T4154] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 201.360117][ T4154] r10:000029c0 r9:81791c4c r8:ffffffff r7:85064800 r6:dfbcdcf8 r5:00000400 [ 201.360144][ T4154] r4:1ffffff8 [ 201.360160][ T4154] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 201.360237][ T4154] r10:8604f800 r9:dfbcdd00 r8:85d3d000 r7:00000000 r6:dfbcdcf8 r5:8604f840 [ 201.360257][ T4154] r4:07fffffe [ 201.360272][ T4154] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 201.360475][ T4154] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 201.360548][ T4154] r10:00000000 r9:20000060 r8:85d3d000 r7:8604f840 r6:dfbcdcf8 r5:000002d0 [ 201.360567][ T4154] r4:8604f800 [ 201.360582][ T4154] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 201.360647][ T4154] r10:00000126 r9:815bc984 r8:00000330 r7:862515ac r6:dfbcdda8 r5:00000040 [ 201.360665][ T4154] r4:853cf000 [ 201.360680][ T4154] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 201.360749][ T4154] r10:00000126 r9:815bc984 r8:00000330 r7:862515ac r6:00000040 r5:819238f8 [ 201.360776][ T4154] r4:829f6f38 [ 201.360791][ T4154] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 201.360854][ T4154] r6:00000330 r5:853cf000 r4:00000040 [ 201.360870][ T4154] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 201.360927][ T4154] r6:86251080 r5:00000029 r4:818d97a0 [ 201.360943][ T4154] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 201.360996][ T4154] r4:817c8a90 [ 201.361011][ T4154] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 201.361062][ T4154] r4:00000040 [ 201.361077][ T4154] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 201.361136][ T4154] r9:85064800 r8:00000330 r7:858bc000 r6:00000040 r5:00000029 r4:819cf958 [ 201.361152][ T4154] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 201.361208][ T4154] r8:00000000 r7:84e4a3c0 r6:84e4a3c1 r5:00000040 r4:00000029 [ 201.361225][ T4154] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 201.361315][ T4154] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 201.361332][ T4154] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 201.361456][ T4154] Exception stack(0xdfbcdfa8 to 0xdfbcdff0) [ 201.361621][ T4154] dfa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 201.361673][ T4154] dfc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76fa80dc [ 201.361700][ T4154] dfe0: 76fa7e88 76fa7e78 00018734 0012fc20 [ 201.376357][ T4154] Mem-Info: [ 201.376781][ T4154] active_anon:7008 inactive_anon:0 isolated_anon:0 [ 201.376781][ T4154] active_file:6144 inactive_file:35370 isolated_file:0 [ 201.376781][ T4154] unevictable:768 dirty:8 writeback:0 [ 201.376781][ T4154] slab_reclaimable:1113 slab_unreclaimable:6473 [ 201.376781][ T4154] mapped:5326 shmem:6508 pagetables:350 [ 201.376781][ T4154] sec_pagetables:0 bounce:0 [ 201.376781][ T4154] kernel_misc_reclaimable:0 [ 201.376781][ T4154] free:428333 free_pcp:754 free_cma:4032 [ 201.377679][ T4154] Node 0 active_anon:28032kB inactive_anon:0kB active_file:24576kB inactive_file:141480kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:21304kB dirty:32kB writeback:0kB shmem:26032kB kernel_stack:1560kB pagetables:1400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.378301][ T4154] Normal free:1377512kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1024kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:3016kB local_pcp:1736kB free_cma:0kB [ 201.378474][ T4154] lowmem_reserve[]: 0 4224 4224 [ 201.378903][ T4154] Normal: 6*4kB (UME) 2*8kB (UE) 2*16kB (ME) 1*32kB (M) 4*64kB (UME) 3*128kB (UM) 6*256kB (UME) 6*512kB (ME) 6*1024kB (UM) 3*2048kB (ME) 332*4096kB (UM) = 1377512kB [ 201.379678][ T4154] 48022 total pagecache pages [ 201.379793][ T4154] 0 pages in swap cache [ 201.379908][ T4154] Free swap = 124996kB [ 201.380051][ T4154] Total swap = 124996kB [ 201.380179][ T4154] 524288 pages RAM [ 201.380203][ T4154] 135168 pages HighMem/MovableOnly [ 201.380223][ T4154] 32400 pages reserved [ 201.380254][ T4154] 4096 pages cma reserved [ 203.842625][ T4163] syzkaller0: entered promiscuous mode [ 203.843406][ T4163] syzkaller0: entered allmulticast mode [ 211.792808][ T28] audit: type=1400 audit(211.670:161): avc: denied { setopt } for pid=4193 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.113892][ T28] audit: type=1400 audit(213.990:162): avc: denied { recv } for pid=3082 comm="syz-executor" saddr=127.0.0.1 src=38126 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 214.114485][ T28] audit: type=1400 audit(213.990:163): avc: denied { recv } for pid=3082 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38126 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 215.224427][ T3087] Process accounting resumed [ 215.999009][ T4215] syzkaller0: entered promiscuous mode [ 216.017379][ T4215] syzkaller0: entered allmulticast mode [ 222.449002][ T4213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.470847][ T4213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.859014][ T28] audit: type=1400 audit(222.740:164): avc: denied { recv } for pid=4045 comm="syz.0.105" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 224.581425][ T4213] hsr_slave_0: entered promiscuous mode [ 224.591876][ T4213] hsr_slave_1: entered promiscuous mode [ 224.594244][ T4213] debugfs: 'hsr0' already exists in 'hsr' [ 224.601366][ T4213] Cannot create hsr debugfs directory [ 225.028687][ T28] audit: type=1400 audit(224.890:165): avc: denied { bind } for pid=4338 comm="syz.1.176" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.030245][ T28] audit: type=1400 audit(224.910:166): avc: denied { name_bind } for pid=4338 comm="syz.1.176" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 225.032390][ T28] audit: type=1400 audit(224.910:167): avc: denied { node_bind } for pid=4338 comm="syz.1.176" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 225.143146][ T4213] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.167650][ T4213] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.229502][ T4213] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.312841][ T4213] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.986128][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 226.153928][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 226.154432][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 226.154501][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.160520][ T10] usb 2-1: config 0 descriptor?? [ 226.207532][ T4533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.113406][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 227.114920][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.136396][ T10] usb 2-1: USB disconnect, device number 5 [ 227.272265][ T4213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.527870][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 227.886537][ T28] audit: type=1400 audit(227.760:168): avc: denied { nlmsg_write } for pid=4557 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 228.693789][ T28] audit: type=1400 audit(228.570:169): avc: denied { append } for pid=4566 comm="syz.1.182" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.927276][ T4213] veth0_vlan: entered promiscuous mode [ 231.963757][ T4213] veth1_vlan: entered promiscuous mode [ 232.053452][ T4213] veth0_macvtap: entered promiscuous mode [ 232.067877][ T4213] veth1_macvtap: entered promiscuous mode [ 232.129126][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.132005][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.139440][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.141163][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.146451][ T3036] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 233.301672][ T3036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.304312][ T3036] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 233.308190][ T3036] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.310867][ T3036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.318807][ T3036] usb 2-1: config 0 descriptor?? [ 233.339354][ T3036] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 234.856557][ T28] audit: type=1400 audit(234.730:170): avc: denied { write } for pid=4633 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.295680][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.300229][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.540333][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.542607][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.457131][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.469017][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.162515][ T4686] fuse: Bad value for 'rootmode' [ 245.812785][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.813816][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.756866][ T4699] fuse: Bad value for 'rootmode' [ 247.883050][ T3036] usb 2-1: USB disconnect, device number 6 [ 248.400767][ T4710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.221'. [ 248.412789][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'. [ 248.959680][ T4712] Zero length message leads to an empty skb [ 249.909899][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.914065][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.404621][ T4732] tun0: tun_chr_ioctl cmd 21731 [ 251.663890][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.688707][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.230296][ T4744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.232'. [ 252.238381][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 252.242597][ T4744] netlink: 31 bytes leftover after parsing attributes in process `syz.1.232'. [ 252.246751][ T4744] netlink: 'syz.1.232': attribute type 2 has an invalid length. [ 252.252193][ T4744] netlink: 31 bytes leftover after parsing attributes in process `syz.1.232'. [ 252.704006][ T4747] fuse: Unknown parameter 'use00000000000000000000' [ 253.864951][ T28] audit: type=1400 audit(253.740:171): avc: denied { connect } for pid=4750 comm="syz.2.236" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.464064][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 254.750535][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.750928][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 254.751172][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.751224][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.766229][ T9] usb 2-1: config 0 descriptor?? [ 254.826639][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 255.313819][ T4763] fuse: Unknown parameter 'use00000000000000000000' [ 257.764353][ T28] audit: type=1400 audit(257.640:172): avc: denied { create } for pid=4771 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.764766][ T28] audit: type=1400 audit(257.640:173): avc: denied { write } for pid=4771 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.902948][ T4774] fuse: Unknown parameter 'user_i00000000000000000000' [ 261.714379][ T4786] fuse: Unknown parameter 'user_i00000000000000000000' [ 268.938190][ T3983] usb 2-1: USB disconnect, device number 7 [ 272.486539][ T4084] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 272.668162][ T4084] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.668690][ T4084] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 272.669053][ T4084] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.669122][ T4084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.727899][ T4084] usb 2-1: config 0 descriptor?? [ 272.771779][ T4084] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 273.195809][ T28] audit: type=1400 audit(273.050:174): avc: denied { bind } for pid=4847 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.884703][ T28] audit: type=1400 audit(273.760:175): avc: denied { read } for pid=4851 comm="syz.2.272" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.889812][ T28] audit: type=1400 audit(273.770:176): avc: denied { open } for pid=4851 comm="syz.2.272" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.231874][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.248458][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.309164][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.460403][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.616467][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.618358][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.640281][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.737819][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.749211][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 283.759317][ T4868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4868 comm=syz.2.278 [ 285.012060][ T28] audit: type=1400 audit(284.890:177): avc: denied { watch watch_reads } for pid=4873 comm="syz.2.280" path="/78/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.856369][ T23] usb 2-1: USB disconnect, device number 8 [ 287.277116][ T28] audit: type=1400 audit(287.150:178): avc: denied { listen } for pid=4895 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.940246][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.948420][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.330501][ T28] audit: type=1400 audit(288.210:179): avc: denied { map } for pid=4910 comm="syz.1.292" path="socket:[5652]" dev="sockfs" ino=5652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.338212][ T28] audit: type=1400 audit(288.220:180): avc: denied { accept } for pid=4910 comm="syz.1.292" path="socket:[5652]" dev="sockfs" ino=5652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.523907][ T4914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.749879][ T4919] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 293.041991][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 293.045869][ T4921] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 293.537166][ T4923] selinux_netlink_send: 95 callbacks suppressed [ 293.541219][ T4923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4923 comm=syz.2.296 [ 312.615327][ T4050] Process accounting paused [ 313.020566][ T2746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.151298][ T2746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.801966][ T2746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.110256][ T2746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.809416][ T28] audit: type=1400 audit(314.680:181): avc: denied { write } for pid=4956 comm="syz.1.306" name="raw6" dev="proc" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.332387][ T2746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.359416][ T2746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.369220][ T2746] bond0 (unregistering): Released all slaves [ 315.538264][ T2746] hsr_slave_0: left promiscuous mode [ 315.561569][ T2746] hsr_slave_1: left promiscuous mode [ 315.596919][ T2746] veth1_macvtap: left promiscuous mode [ 315.597599][ T2746] veth0_macvtap: left promiscuous mode [ 315.598067][ T2746] veth1_vlan: left promiscuous mode [ 315.598577][ T2746] veth0_vlan: left promiscuous mode [ 327.462244][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 327.540595][ T5045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=288 sclass=netlink_route_socket pid=5045 comm=syz.2.326 [ 328.479773][ T5045] netlink: 'syz.2.326': attribute type 6 has an invalid length. [ 329.273174][ T28] audit: type=1400 audit(329.150:182): avc: denied { create } for pid=5059 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.366814][ T28] audit: type=1400 audit(329.160:183): avc: denied { getopt } for pid=5059 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.387403][ T5154] capability: warning: `syz.1.355' uses 32-bit capabilities (legacy support in use) [ 363.706990][ T3680] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 363.885803][ T3680] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 363.886331][ T3680] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.914146][ T3680] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.914565][ T3680] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.914876][ T3680] usb 2-1: Product: syz [ 363.915045][ T3680] usb 2-1: Manufacturer: syz [ 363.915093][ T3680] usb 2-1: SerialNumber: syz [ 363.923002][ T3680] usb 2-1: config 0 descriptor?? [ 363.938816][ T5159] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.963504][ T3680] usb 2-1: selecting invalid altsetting 0 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 365.356873][ T3680] ------------[ cut here ]------------ [ 365.357621][ T3680] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x19c/0x21c, CPU#1: kworker/1:4/3680 [ 365.361178][ T3680] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 365.362253][ T3680] Modules linked in: [ 365.364266][ T3680] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.365627][ T3680] CPU: 1 UID: 0 PID: 3680 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT [ 365.366792][ T3680] Hardware name: ARM-Versatile Express [ 365.367625][ T3680] Workqueue: events drm_fb_helper_damage_work [ 365.368582][ T3680] Call trace: [ 365.369158][ T3680] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 365.370232][ T3680] r7:8281f900 r6:00000000 r5:822a4e44 r4:00000001 [ 365.370478][ T3680] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 365.370832][ T3680] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 365.371804][ T3680] r7:8281f900 r6:00000000 r5:85063c00 r4:82a7fd14 [ 365.372453][ T3680] [<8021e468>] (dump_stack) from [<802025f4>] (vpanic+0x114/0x320) [ 365.373373][ T3680] [<802024e0>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0x104) [ 365.374470][ T3680] r7:80b337fc [ 365.374777][ T3680] [<80202800>] (panic) from [<80250a68>] (get_taint+0x0/0x1c) [ 365.375422][ T3680] r3:8280c544 r2:00000001 r1:8228bbe8 r0:822934a0 [ 365.376100][ T3680] [<802509f0>] (check_panic_on_warn) from [<80250be4>] (__warn+0x98/0x1ac) [ 365.377043][ T3680] [<80250b4c>] (__warn) from [<80250ee0>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 365.378052][ T3680] r8:00000009 r7:82320258 r6:dfd69dfc r5:85063c00 r4:00000000 [ 365.378916][ T3680] [<80250cfc>] (warn_slowpath_fmt) from [<80b337fc>] (drm_crtc_wait_one_vblank+0x19c/0x21c) [ 365.380250][ T3680] r10:83eb5044 r9:ffffff92 r8:00000000 r7:00005474 r6:00000000 r5:00000000 [ 365.381517][ T3680] r4:83838800 [ 365.381999][ T3680] [<80b33660>] (drm_crtc_wait_one_vblank) from [<80b373e4>] (drm_client_modeset_wait_for_vblank+0x60/0x74) [ 365.383509][ T3680] r10:8302ae05 r9:83838800 r8:84160c00 r7:dfd69ec4 r6:83838800 r5:00000000 [ 365.384545][ T3680] r4:83806040 [ 365.384917][ T3680] [<80b37384>] (drm_client_modeset_wait_for_vblank) from [<80b508c4>] (drm_fb_helper_damage_work+0x80/0x1e0) [ 365.386247][ T3680] r7:dfd69ec4 r6:84160cb8 r5:00000000 r4:84160c98 [ 365.386924][ T3680] [<80b50844>] (drm_fb_helper_damage_work) from [<80276338>] (process_one_work+0x1b8/0x58c) [ 365.388132][ T3680] r9:85063c00 r8:01800000 r7:ddde4d80 r6:8302ae00 r5:84160c98 r4:85edf300 [ 365.389067][ T3680] [<80276180>] (process_one_work) from [<802770fc>] (worker_thread+0x16c/0x318) [ 365.389912][ T3680] r10:00000000 r9:85edf32c r8:85063c00 r7:82804d80 r6:ddde4da0 r5:ddde4d80 [ 365.390696][ T3680] r4:85edf300 [ 365.391057][ T3680] [<80276f90>] (worker_thread) from [<8027f388>] (kthread+0x118/0x138) [ 365.391912][ T3680] r10:00000000 r9:85edf300 r8:80276f90 r7:df975e88 r6:85063c00 r5:85edfb00 [ 365.392626][ T3680] r4:85f3fe40 [ 365.393171][ T3680] [<8027f270>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 365.394271][ T3680] Exception stack(0xdfd69fb0 to 0xdfd69ff8) [ 365.394879][ T3680] 9fa0: 00000000 00000000 00000000 00000000 [ 365.395429][ T3680] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 365.396126][ T3680] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 365.396991][ T3680] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f270 r4:85f3fe40 [ 371.144579][ T3680] SMP: failed to stop secondary CPUs [ 371.147104][ T3680] Rebooting in 86400 seconds..