last executing test programs: 759.161828ms ago: executing program 2 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 756.823319ms ago: executing program 0 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 643.378687ms ago: executing program 0 (id=796): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000004, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 589.352104ms ago: executing program 0 (id=798): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9192909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d074c0936cd3b78130daa6bd8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aa090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080578386522449df466c632b3570243f989cce3803f465e41e610c2021d653a552f9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341adbe50861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357ca8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795eff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee532592897cd12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ffca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160eca6b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4cf8d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb17167fbeac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb5cebff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa03c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea9400004facfd4c735a20307c737afae5136651b1b9bc522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abbd02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d96dfda3c4f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a935908001cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1f1d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488ef5d989d385cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd41d95af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f480f6f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fdedda7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c218b0868cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000021d71f00000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xc0}, &(0x7f0000000040)=0x8) r2 = syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) syz_clone3(&(0x7f00000002c0)={0x200000100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x18}, &(0x7f0000000140)=""/108, 0x6c, &(0x7f00000001c0)=""/2, &(0x7f0000000280)=[r2, r2, r2, r3, r2], 0x5, {r5}}, 0x58) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 588.580315ms ago: executing program 2 (id=799): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x2000007, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xe9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) 400.183982ms ago: executing program 3 (id=801): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, &(0x7f0000000100)={r1, 0x1000, 0x780000, 0x2, 0x101, 0x0, 0x690, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x20000, &(0x7f0000000180)={@_ha_fsid={[0xb54, 0x5]}, {0x6, 0x7, 0x0, 0x7}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x101}) ioctl$RTC_VL_CLR(r3, 0x7014) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0xa0, 0x67}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x14, 0x6c}, @in=@empty=0x14, {0x2000000000000, 0x1, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xffff7ffffffffffc}, {0x0, 0x401, 0x68b}, 0x0, 0x3506, 0x2, 0x1, 0x6, 0x50}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x1ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a82c008100000008060001080006040001fffeffffffffffffffffbbbbbbbbbbbb7f0000af8b628ceb8246a9287c4b633f3bdd2eaaeee2a8e27fce5562ff3701fa1975590108d3c3e983fe45c08713627a051f14cdf37e0bb2033b52018a40befbe548a6035471693665608aeac673"], 0x0) 397.081983ms ago: executing program 2 (id=802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x4c001) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x32d62000) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="68008ac6d49be517aaae2da47bab0000", @ANYRESHEX=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r6}, 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r7, &(0x7f0000004780)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000184}, 0x4080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[r9], 0x1}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000a80)={0x6, 0x7, 0x6, 0x2005fe7, 0x5, 0x904, 0x0, 0x34}, 0x20) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 396.88484ms ago: executing program 0 (id=803): syz_emit_ethernet(0x52, &(0x7f0000000340)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x33}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2}}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x78, 0x9, 0xa8, "4c9e870581ffafaafcb697019ddeb2d5c7585a2c6c837d6b29c32185af7262656ee2da510dc5f520646fe7d78bcadcfab446eca812b96b558d03e27aa45c4edc73ac5ad25665152d0cab4edb7c4b1aab4b7284612fdd9c6ea4091fa6f4c2dec44e5285f084eb8e3f7916dbae7b11c9fb8e1d0e4c3293cef3"}) 396.630055ms ago: executing program 1 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 387.088959ms ago: executing program 3 (id=805): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="5800a6001400192340834b80040d8c560a06ffffff7f071fff000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 339.947181ms ago: executing program 3 (id=806): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000004, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 339.664561ms ago: executing program 0 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 339.347381ms ago: executing program 2 (id=808): ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x2, 0x100, 0x2, 0x3, 0x62c, 0xfffffff0}) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x3}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x240) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x33, @remote, 0x4e22, 0x0, 'lc\x00', 0x2, 0x7, 0x32}, 0x2c) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000100)=0x5) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e24, @empty}, 0x9, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='syzkaller0\x00', 0xffffffffffff0001, 0x2}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x4, 0x10}, 0xc) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x0, 0x4, 0x80, 0x10, r2, 0x8, '\x00', r3, r1, 0x5, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000340)="40fc4e2265e19f9a30ca766f260d8945c7ef68335e88b86a35bec4c3a7d74dbaab42a67d7fbf1be340c41cd67dc7a8ce534396befc5c9f08e0aa7305d2fd62a2816f2251276dec6423443e852ef742e9ddba9892faf268aab20e22d4493e450832e5a4d19b242a8a2d954af19d3c507b21693caf95cba75a7e4b8fca65946341d5a0220db6dad62a61d6497400380c783b0d9146c94b20bb465705eb8c00d736182bab3b8997fd3286c0095a1aab05", &(0x7f0000000400)=""/247, &(0x7f0000000500)="5df201ab1bdbf752c5b59cc4db515d7ea1a9e18275a93d5ed694ed9cb6e3a2e6f3be24cf28f329dbbf0aac577adc82789a130d6bbd198e49e156804c15e90e39b7195f15927d28c08f896ac8a787b9dda2ed8fb2d84ae14f392c08cc3d737cd73df722c849d9d03ef4e80ac701bd3eacff14a08950f667c8c879071619db0f0f31bc84c060c32136cea81a75d0e355dc591baccf408b7cb5de939455e3cb2d8531691f9c82f7829211ba6e718425b741f622849566c4e3b71be778dd48621f2a4eef72ef7f4f39fc5bc2c70d8ee596a7f8e362d0d778269e4b8a9df64127da3f23de216131c59bf6e5d7f22675f1", &(0x7f0000000600)="4b4551a59ca2906c07f34cffdd5b1a108df7b1ed4b03f2d030805a750e2f8bff666233afcb26ecaa2b95a0cb840f36d9d68da26708e2dd3dc68c8975211777524eca29871d5dbf0a962a3f72b34e7f9304aa3449586eb6812ce57b74dfe4071c30ed82ea959b03641ed9cdd2dc3fe9ef0665e13a8da71a18cf2ec5fa538c34f275f131b3a55e", 0x0, r2, 0x4}, 0x38) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r5, 0x33, 0x1, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0]}, 0x40) getpeername$l2tp6(r1, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000880)=0x20) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)="57825dd9b7843ff9605743592a6cbb04d692ba84c6e2df463130370b", 0x1c, 0x90) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000900)={@broadcast, @broadcast}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000940)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000980)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000009c0)={r8}, &(0x7f0000000a00)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x9, 0x7a000000, 0x18, 0x201, r4, 0x8, '\x00', 0x0, r1, 0x1, 0x4, 0x4, 0x6}, 0x50) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000ac0)={0x1, 0x5, 0x5ef, 0x0, 0x0, 0x1, "6554ab14cd5f76689d288b00b81ed0b5", 0x7, 0x1, 0x8, 0x5, 0x8, 0x8, 0x8}) accept$inet(r6, &(0x7f0000000b00)={0x2, 0x0, @remote}, &(0x7f0000000b40)=0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl2\x00', r3, 0x0, 0x3, 0x0, 0x1000, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x0, 0x4}}) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="eef92a3b0ff3d10498c09329b89643eed8461880b24a24845d2249054da74039d27549e22a3bc66519573101c84e52833b11fbc76fb6893bdb35db44020b59e1d02dcd9cde952abc26e9187c45ece2415d9d175ec72e65682a87d2eef2dbdc778b300971aede5f3abfd10315668a8dae3346c74d73737878b54196434a3d4997ec6a3acda85c508ad484cd928b4fa2ad392d6635b72074f0e36c5529453c8fe006c0148ccebd40cc37829d8bb4dc48026e4d31f15f60ab3afab760dc10aeb3ec745a9e81849897b7f5116b024664cd8afb109fb79bf4e9adc8eb18464dafe454659153d0e4f7", 0xe6}, {&(0x7f0000000c80)="208b8d49b8494f69dcbacd0938c804ba3c33ab60b49875d732258bcb6ac2326d932e228a20079bd1e19aa3fd72ecede2dd16a9b78c27e6f50a553d4c4c3437757bb3665ccf0519f157b54242827f208f851336d75b08d7491ef141f99fed9591a836806d1815fc2eb220149da2a36e9a710d196b51f9fbd4ace643e7c995051f1e1a0bbea7889a7f77", 0x89}, {&(0x7f0000000d40)="ad32d3b3a5b3d98aa0647f7facc60ce82e0074579e81d98f9c28e0bc90656d278d0a1204053f1c7d8c85658574177339ee8560cdec873ee047d6ab9cf123ad9a62df6e3fe1e134cc633133b0ab34aeb8ebcbeade6ed11dcc318bef9b429c999e60a1f498de7124032919ecba56f1328824cf7425b56ac74cb8948df19f1145e728119e250a3e3e97d9734702c7377144fadb12ae161ffbe3d9490e0d3c86d0a098ca", 0xa2}], 0x3, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0xd8}, 0x81) write$P9_RRENAME(r6, &(0x7f0000001040)={0x7, 0x15, 0x1}, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001080)={@mcast1, @multicast1, 0x1c, 0x1b}}) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000001100)={'geneve1\x00', 0xe334, 0x1}) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000001200)=0xe, 0x4) close(r0) r10 = syz_open_dev$audion(&(0x7f0000001240), 0x1, 0x200000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000001280)={r7, 0xba, "16a632d6e4d6cbbbfdeb23e442a431e5f5152e1bfcda3adfd190aafcf7ce1d9d7cf040ce0047a8d0e591fceba2f45c891945d75352d79435dc962a79e5c243c46edbcf8036b918d2b2c60b9de57a8aa2d13e1b7fd630b46cbe82bb6dd4b007fb84e1b2509cfae5acaa2e9ecae5a6bfe5a20836edd7025aa28fe9e0baa938a476cd02ac9921a3573fda1466057fbfcd5044f31c81e723d991114084e1d622a5ba1fad4e40b783f68508bf4337d30001ef7bb882ee89f90c5cc631"}, &(0x7f0000001380)=0xc2) 270.054799ms ago: executing program 2 (id=809): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r1 = fsmount(r0, 0x0, 0x0) r2 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000bde831dbdff0e16bc4f3ee000000000000000000001a00ffff"], 0x48) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x800, 0x80000) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x121) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786cb7df694e4d7a540149e86b4e22a1616e"], 0x50}}, 0x4000000) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@random="d089466f351e", @empty, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0xe}}}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r10, @ANYRES16=r2, @ANYRES16=r10, @ANYRES8, @ANYRESDEC=r8, @ANYRES8=r8, @ANYRES64=r9, @ANYRES16=r0, @ANYRES8=0x0, @ANYRESHEX=r9], 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) r11 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff7}, {0x0, 0x3}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) 218.95206ms ago: executing program 0 (id=813): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0xfffffd15}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 159.28428ms ago: executing program 1 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=@newtaction={0x6c, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @buffer={0x0, 0xa3, &(0x7f0000000440)=""/163}, &(0x7f00000001c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @dev, @val={@val={0x88a8, 0x4, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @broadcast, @multicast, @loopback}}}}, 0x0) 89.957937ms ago: executing program 1 (id=815): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000051400192340834b80040d8c560a06ffffff7f071fff000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 89.587365ms ago: executing program 1 (id=816): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000680)={0x18, 0x1, 0x0, {0x6}}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xe8, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x43a}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x31}, 0x0, 0xc0, 0x120, 0x0, {0x60010000}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x1, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x29, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27, 0x0, 0x101], 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={0x7818c1, 0x48}, 0x18) mknodat$loop(r3, &(0x7f0000000780)='./file0\x00', 0x40c0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountstats\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000500)="bff992484f73e09b4fe09d5c4ca631ac5eef7117ceb9adafde03a857d9f0fb0e8e2f8052ca12725e40e18bfc0bba83ee632f2973ccb9a4089247989516ba1c247273b8aa48cb12baead8bc778ac0cb5ae8d61bb399888b4835d8d6b5d0ccf024a50065ccd0d5662836ea67eaeeb345c3520583b986f110dc6cc463a86995a5e3e233702834734f316ed73a0363e7c9f22f3ad5c6382958fa8486f576da3633100c85192bf271adcca28b8c45b7fc7867b6dbbaefbe54cc1f52ce17f059e40d51fc9fc01c4f3848bbd4684c46aa304d70f2c129cbd2ba1669e246", &(0x7f00000006c0)=""/184}, 0x20) sendmmsg(r6, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x5000000}, 0x80, 0x0}}], 0x1, 0x80) getpeername$unix(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="26f00fbaa80080000022f3ac48b8435d0000000000000f23c00f21f835030007000f23f866ba410066edf30f09440f20c0350d000000440f22c066410f5b6b0666b84e000f00d8c744240000900000c74424020080df36c7442406000000000f011424c7442400ffa47b10c744240200500000c7442406000000000f011c24", 0x7f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) 82.899985ms ago: executing program 3 (id=817): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async, rerun: 32) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000c00000002000000000000000000000000000700000079b6afde39203b5e58d4e25636d6149ead0f8d5b14acc197cf1fa85e80ae8e02f702b529cd0a15d8a8e34c74de0d5f749e04e388ed4d741215412d039e807cc46d852dcf1f8e8ca9ad69738fe5523f3d16668cbaa66bb7559212f0edd9c07230a606f2b5a6e2000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$SOUND_PCM_READ_RATE(r7, 0x80045002, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async, rerun: 64) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 64) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 202.52µs ago: executing program 1 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (fail_nth: 7) 0s ago: executing program 3 (id=819): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000004, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8430' (ED25519) to the list of known hosts. [ 55.115618][ T40] audit: type=1400 audit(1772308195.213:62): avc: denied { name_bind } for pid=5918 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.150454][ T40] audit: type=1400 audit(1772308195.243:63): avc: denied { execute } for pid=5919 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.157777][ T40] audit: type=1400 audit(1772308195.253:64): avc: denied { execute_no_trans } for pid=5919 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.671914][ T40] audit: type=1400 audit(1772308197.773:65): avc: denied { mounton } for pid=5919 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.680331][ T40] audit: type=1400 audit(1772308197.773:66): avc: denied { mount } for pid=5919 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.684287][ T5919] cgroup: Unknown subsys name 'net' [ 57.835392][ T5919] cgroup: Unknown subsys name 'cpuset' [ 57.840021][ T5919] cgroup: Unknown subsys name 'rlimit' [ 58.062118][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.754944][ T5919] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.554827][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 62.554845][ T40] audit: type=1400 audit(1772308202.643:82): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.791975][ T40] audit: type=1400 audit(1772308202.893:83): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.800597][ T40] audit: type=1400 audit(1772308202.893:84): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.810895][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.811696][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.814274][ T40] audit: type=1400 audit(1772308202.893:85): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.824964][ T40] audit: type=1400 audit(1772308202.893:86): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[3907]" dev="sockfs" ino=3907 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.835364][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.860799][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.864312][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.866892][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.869600][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.871228][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.871492][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.871846][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.871905][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.873450][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.875842][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.878053][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.880779][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.882559][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.884526][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.884702][ T40] audit: type=1400 audit(1772308202.973:87): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.884740][ T40] audit: type=1400 audit(1772308202.973:88): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.885687][ T40] audit: type=1400 audit(1772308202.983:89): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.887735][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.890698][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.896629][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.092681][ T40] audit: type=1400 audit(1772308203.193:90): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.157307][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 63.274318][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.277974][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.281225][ T5932] bridge_slave_0: entered allmulticast mode [ 63.285237][ T5932] bridge_slave_0: entered promiscuous mode [ 63.290372][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 63.318738][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.322112][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.326105][ T5932] bridge_slave_1: entered allmulticast mode [ 63.330019][ T5932] bridge_slave_1: entered promiscuous mode [ 63.334995][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 63.426624][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.444149][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.449999][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.476588][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.479705][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.483126][ T5934] bridge_slave_0: entered allmulticast mode [ 63.487006][ T5934] bridge_slave_0: entered promiscuous mode [ 63.494903][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.497885][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.501156][ T5934] bridge_slave_1: entered allmulticast mode [ 63.505167][ T5934] bridge_slave_1: entered promiscuous mode [ 63.528949][ T5932] team0: Port device team_slave_0 added [ 63.555506][ T5932] team0: Port device team_slave_1 added [ 63.564798][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.575126][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.577531][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.579708][ T5936] bridge_slave_0: entered allmulticast mode [ 63.582478][ T5936] bridge_slave_0: entered promiscuous mode [ 63.596220][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.599459][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.601858][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.604552][ T5936] bridge_slave_1: entered allmulticast mode [ 63.607588][ T5936] bridge_slave_1: entered promiscuous mode [ 63.660539][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.663443][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.673655][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.680582][ T5934] team0: Port device team_slave_0 added [ 63.685281][ T5934] team0: Port device team_slave_1 added [ 63.689030][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.707549][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.709876][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.720731][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.743384][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.746472][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.749460][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.753139][ T5939] bridge_slave_0: entered allmulticast mode [ 63.756887][ T5939] bridge_slave_0: entered promiscuous mode [ 63.780570][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.783477][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.791898][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.808716][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.811036][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.813489][ T5939] bridge_slave_1: entered allmulticast mode [ 63.816091][ T5939] bridge_slave_1: entered promiscuous mode [ 63.825888][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.828093][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.837080][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.847640][ T5936] team0: Port device team_slave_0 added [ 63.864527][ T5932] hsr_slave_0: entered promiscuous mode [ 63.866876][ T5932] hsr_slave_1: entered promiscuous mode [ 63.871344][ T5936] team0: Port device team_slave_1 added [ 63.882387][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.916214][ T5934] hsr_slave_0: entered promiscuous mode [ 63.918657][ T5934] hsr_slave_1: entered promiscuous mode [ 63.920778][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 63.922735][ T5934] Cannot create hsr debugfs directory [ 63.926613][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.961197][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.963579][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.972954][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.985916][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.988201][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.996570][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.007406][ T5939] team0: Port device team_slave_0 added [ 64.027111][ T5939] team0: Port device team_slave_1 added [ 64.088068][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.090561][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.101208][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.127580][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.129788][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.139580][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.149706][ T5936] hsr_slave_0: entered promiscuous mode [ 64.153360][ T5936] hsr_slave_1: entered promiscuous mode [ 64.156599][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 64.159270][ T5936] Cannot create hsr debugfs directory [ 64.270772][ T5939] hsr_slave_0: entered promiscuous mode [ 64.273306][ T5939] hsr_slave_1: entered promiscuous mode [ 64.275408][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 64.277285][ T5939] Cannot create hsr debugfs directory [ 64.426804][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.452291][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.472851][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.492255][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.529521][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.541788][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.546589][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.558231][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.609179][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.619646][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.625942][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.632839][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.697285][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.707910][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.712746][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.717153][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.734037][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.774005][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.778765][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.794197][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.796965][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.816244][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.818594][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.829423][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.848741][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.853418][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.856110][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.878190][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.880614][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.907025][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.921108][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.923994][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.928089][ T5949] Bluetooth: hci0: command tx timeout [ 64.928109][ T5942] Bluetooth: hci1: command tx timeout [ 64.930416][ T5949] Bluetooth: hci2: command tx timeout [ 64.935375][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.955591][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.957972][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.972592][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.005335][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.008488][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.011995][ T40] audit: type=1400 audit(1772308205.103:91): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.012138][ T5942] Bluetooth: hci3: command tx timeout [ 65.037666][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.040659][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.140115][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.149165][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.201195][ T5934] veth0_vlan: entered promiscuous mode [ 65.233349][ T5932] veth0_vlan: entered promiscuous mode [ 65.235963][ T5934] veth1_vlan: entered promiscuous mode [ 65.241777][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.251217][ T5932] veth1_vlan: entered promiscuous mode [ 65.263872][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.298907][ T5934] veth0_macvtap: entered promiscuous mode [ 65.308583][ T5934] veth1_macvtap: entered promiscuous mode [ 65.316719][ T5932] veth0_macvtap: entered promiscuous mode [ 65.331368][ T5936] veth0_vlan: entered promiscuous mode [ 65.338826][ T5932] veth1_macvtap: entered promiscuous mode [ 65.346579][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.357530][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.360785][ T5936] veth1_vlan: entered promiscuous mode [ 65.372729][ T5939] veth0_vlan: entered promiscuous mode [ 65.386977][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.389797][ T5939] veth1_vlan: entered promiscuous mode [ 65.399341][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.403961][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.406865][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.409721][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.416205][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.432633][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437813][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.449285][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.452816][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.457240][ T5936] veth0_macvtap: entered promiscuous mode [ 65.465951][ T5939] veth0_macvtap: entered promiscuous mode [ 65.488221][ T5936] veth1_macvtap: entered promiscuous mode [ 65.491238][ T5939] veth1_macvtap: entered promiscuous mode [ 65.499911][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.510226][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.526677][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.527475][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.529623][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.533650][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.550820][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.565522][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.577393][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.580990][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.584944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.603835][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.606784][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.610044][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.619986][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.622996][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.632569][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.635424][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.654768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.655489][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.661068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.673241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.678931][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.703016][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.706579][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.790398][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.798034][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.932415][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.935544][ T6022] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 65.935788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.939178][ T6022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.119357][ T6040] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.9'. [ 66.119997][ T6036] mkiss: ax0: crc mode is auto. [ 66.125396][ T6038] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 66.180228][ T6042] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.240954][ T6048] syzkaller0: entered promiscuous mode [ 66.244234][ T6048] syzkaller0: entered allmulticast mode [ 66.344510][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 66.416385][ T6058] syzkaller0: entered promiscuous mode [ 66.418232][ T6058] syzkaller0: entered allmulticast mode [ 66.545625][ T6065] syzkaller0: entered promiscuous mode [ 66.547484][ T6065] syzkaller0: entered allmulticast mode [ 66.700179][ T6073] syzkaller0: entered promiscuous mode [ 66.702755][ T6073] syzkaller0: entered allmulticast mode [ 67.002780][ T5945] Bluetooth: hci2: command tx timeout [ 67.002804][ T5949] Bluetooth: hci0: command tx timeout [ 67.002872][ T5942] Bluetooth: hci1: command tx timeout [ 67.081805][ T5942] Bluetooth: hci3: command tx timeout [ 67.570582][ T6081] syzkaller0: entered promiscuous mode [ 67.573842][ T6081] syzkaller0: entered allmulticast mode [ 67.705962][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 67.705972][ T40] audit: type=1400 audit(1772308207.803:154): avc: denied { write } for pid=6084 comm="syz.3.28" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.784577][ T80] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 67.838758][ T6060] Set syz1 is full, maxelem 65536 reached [ 67.885994][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 67.991064][ T6100] syzkaller0: entered promiscuous mode [ 67.999179][ T6100] syzkaller0: entered allmulticast mode [ 68.025695][ T6096] syzkaller0: entered promiscuous mode [ 68.028210][ T6096] syzkaller0: entered allmulticast mode [ 68.056256][ T6103] syzkaller0: entered promiscuous mode [ 68.058648][ T6103] syzkaller0: entered allmulticast mode [ 68.997419][ T40] audit: type=1400 audit(1772308209.093:155): avc: denied { create } for pid=6109 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.005729][ T40] audit: type=1400 audit(1772308209.093:156): avc: denied { bind } for pid=6109 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.007151][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 69.014385][ T40] audit: type=1400 audit(1772308209.093:157): avc: denied { setopt } for pid=6109 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.027513][ T40] audit: type=1400 audit(1772308209.093:158): avc: denied { write } for pid=6109 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.083187][ T5943] IPVS: starting estimator thread 0... [ 69.092535][ T5942] Bluetooth: hci0: command tx timeout [ 69.092641][ T5949] Bluetooth: hci1: command tx timeout [ 69.094859][ T5945] Bluetooth: hci2: command tx timeout [ 69.127552][ T40] audit: type=1400 audit(1772308209.223:159): avc: denied { name_bind } for pid=6114 comm="syz.0.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 69.163071][ T5945] Bluetooth: hci3: command tx timeout [ 69.192075][ T6113] IPVS: using max 26 ests per chain, 62400 per kthread [ 69.253712][ T40] audit: type=1400 audit(1772308209.353:160): avc: denied { ioctl } for pid=6126 comm="syz.2.42" path="socket:[10845]" dev="sockfs" ino=10845 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.293679][ T40] audit: type=1400 audit(1772308209.393:161): avc: denied { create } for pid=6128 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 69.319899][ T6127] IPv6: NLM_F_REPLACE set, but no existing node found! [ 69.380084][ T40] audit: type=1400 audit(1772308209.473:162): avc: denied { bind } for pid=6133 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.437512][ T6140] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 69.440095][ T6140] dvmrp1: ignored: set checksum disabled [ 69.516089][ T40] audit: type=1400 audit(1772308209.613:163): avc: denied { read } for pid=6143 comm="syz.3.50" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.678805][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 69.981434][ T54] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 69.985827][ T6118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.135951][ T54] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.151344][ T54] usb 7-1: config 0 has no interface number 0 [ 70.154008][ T54] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 70.157585][ T54] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 70.161076][ T54] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.165232][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.171462][ T54] usb 7-1: config 0 descriptor?? [ 70.174437][ T6160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.179320][ T6182] tmpfs: Unknown parameter 'uwrquota' [ 70.182977][ T54] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 70.185939][ T6182] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 70.188275][ T6182] dvmrp1: ignored: set checksum disabled [ 70.344198][ T6192] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 70.360428][ T6192] bond1 (unregistering): Released all slaves [ 70.401920][ T829] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 70.444123][ C3] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 70.444182][ T29] usb 7-1: USB disconnect, device number 2 [ 70.492011][ T6199] program syz.0.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.497261][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 70.565118][ T829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.572824][ T829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.576683][ T829] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 70.580271][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.587017][ T829] usb 8-1: config 0 descriptor?? [ 70.590414][ T829] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 70.595461][ T829] dvb-usb: bulk message failed: -22 (3/0) [ 70.602131][ T829] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 70.606756][ T829] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 70.609828][ T829] usb 8-1: media controller created [ 70.620825][ T829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.633635][ T829] dvb-usb: bulk message failed: -22 (6/0) [ 70.636507][ T829] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 70.652685][ T829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 70.659248][ T829] dvb-usb: schedule remote query interval to 150 msecs. [ 70.661681][ T829] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 70.795901][ T829] usb 8-1: USB disconnect, device number 2 [ 70.825550][ T6225] netlink: 'syz.1.80': attribute type 2 has an invalid length. [ 70.825909][ T829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 70.828957][ T6225] netlink: 244 bytes leftover after parsing attributes in process `syz.1.80'. [ 71.105970][ T6233] syzkaller0: entered promiscuous mode [ 71.108507][ T6233] syzkaller0: entered allmulticast mode [ 71.162943][ T5942] Bluetooth: hci0: command tx timeout [ 71.164888][ T5945] Bluetooth: hci2: command tx timeout [ 71.241460][ T5945] Bluetooth: hci3: command tx timeout [ 71.349672][ T6242] netlink: 'syz.2.84': attribute type 3 has an invalid length. [ 71.353338][ T6242] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 71.356390][ T6242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'. [ 71.359871][ T6242] NCSI netlink: No device for ifindex 0 [ 71.379879][ T6242] netlink: 'syz.2.84': attribute type 7 has an invalid length. [ 71.468382][ T6246] kvm: kvm [6244]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 71.474191][ T6246] kvm: kvm [6244]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 71.500682][ T6246] kvm: kvm [6244]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 71.539478][ T6246] kvm: kvm [6244]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 71.539497][ T6242] /dev/sg0: Can't lookup blockdev [ 71.547009][ T6246] kvm: kvm [6244]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 71.659245][ T6260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.90'. [ 72.069645][ T6288] netlink: 'syz.2.100': attribute type 11 has an invalid length. [ 72.072588][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'. [ 72.084477][ T6288] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 72.086857][ T6288] dvmrp1: ignored: set checksum disabled [ 72.093886][ T6288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.151427][ T54] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 72.158061][ T6290] netlink: 504 bytes leftover after parsing attributes in process `syz.0.101'. [ 72.271554][ T6303] trusted_key: encrypted_key: insufficient parameters specified [ 72.313168][ T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.317763][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.322564][ T54] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 72.326447][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.333269][ T54] usb 6-1: config 0 descriptor?? [ 72.340576][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 72.345249][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 72.353129][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 72.357519][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 72.360761][ T54] usb 6-1: media controller created [ 72.364440][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.373864][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 72.376448][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 72.383898][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 72.392950][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 72.396139][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 72.543362][ T24] usb 6-1: USB disconnect, device number 2 [ 72.558847][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 72.778783][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 72.778797][ T40] audit: type=1400 audit(1772308212.873:210): avc: denied { sqpoll } for pid=6319 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.812065][ T40] audit: type=1400 audit(1772308212.913:211): avc: denied { write } for pid=6325 comm="syz.0.111" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.828537][ T40] audit: type=1400 audit(1772308212.923:212): avc: denied { read } for pid=6325 comm="syz.0.111" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.838543][ T40] audit: type=1400 audit(1772308212.923:213): avc: denied { open } for pid=6325 comm="syz.0.111" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.846701][ T40] audit: type=1400 audit(1772308212.923:214): avc: denied { ioctl } for pid=6325 comm="syz.0.111" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.037832][ T40] audit: type=1400 audit(1772308213.133:215): avc: denied { mounton } for pid=6335 comm="syz.2.112" path="/21/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.037918][ T6336] nfs4: Unknown parameter 'ÿÿÿÿÿÿÿÿ?þÿÿ' [ 73.207624][ T6349] syzkaller0: entered promiscuous mode [ 73.210064][ T6349] syzkaller0: entered allmulticast mode [ 73.236997][ T40] audit: type=1400 audit(1772308213.333:216): avc: denied { create } for pid=6351 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.245980][ T40] audit: type=1400 audit(1772308213.343:217): avc: denied { bind } for pid=6351 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.256035][ T6352] ipvlan1: entered allmulticast mode [ 73.258474][ T6352] veth0_vlan: entered allmulticast mode [ 73.297522][ T40] audit: type=1400 audit(1772308213.393:218): avc: denied { create } for pid=6353 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.405271][ T6371] overlay: Unknown parameter 'euid>00000000000000000000' [ 73.486940][ T40] audit: type=1400 audit(1772308213.583:219): avc: denied { read write } for pid=6380 comm="syz.1.131" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.580718][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 73.598518][ T6386] netlink: 344 bytes leftover after parsing attributes in process `syz.3.132'. [ 73.604511][ T6386] ======================================================= [ 73.604511][ T6386] WARNING: The mand mount option has been deprecated and [ 73.604511][ T6386] and is ignored by this kernel. Remove the mand [ 73.604511][ T6386] option from the mount to silence this warning. [ 73.604511][ T6386] ======================================================= [ 73.661410][ T2306] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 73.732085][ T839] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 73.774131][ T6400] syzkaller0: entered promiscuous mode [ 73.775920][ T6400] syzkaller0: entered allmulticast mode [ 73.823720][ T2306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.828334][ T2306] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.832092][ T2306] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 73.835411][ T2306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.839383][ T2306] usb 5-1: config 0 descriptor?? [ 73.844696][ T2306] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 73.846931][ T2306] dvb-usb: bulk message failed: -22 (3/0) [ 73.850555][ T2306] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 73.854479][ T2306] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 73.858019][ T2306] usb 5-1: media controller created [ 73.861096][ T2306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.877473][ T2306] dvb-usb: bulk message failed: -22 (6/0) [ 73.879392][ T2306] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 73.887334][ T2306] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input8 [ 73.896473][ T2306] dvb-usb: schedule remote query interval to 150 msecs. [ 73.896960][ T6409] dvmrp1: tun_chr_ioctl cmd 1074025684 [ 73.897361][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.897381][ T839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.897417][ T839] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 73.897436][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.898800][ T2306] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 73.900226][ T839] usb 6-1: config 0 descriptor?? [ 73.901909][ T6409] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 73.912906][ T839] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 73.918287][ T6409] dvmrp1: ignored: set checksum disabled [ 73.919931][ T839] dvb-usb: bulk message failed: -22 (3/0) [ 73.943463][ T839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 73.949693][ T839] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 73.953644][ T839] usb 6-1: media controller created [ 73.957192][ T839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.967567][ T839] dvb-usb: bulk message failed: -22 (6/0) [ 73.971111][ T839] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 73.978210][ T839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 73.985252][ T839] dvb-usb: schedule remote query interval to 150 msecs. [ 73.988469][ T839] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.043945][ T6373] FAULT_INJECTION: forcing a failure. [ 74.043945][ T6373] name failslab, interval 1, probability 0, space 0, times 1 [ 74.049546][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) [ 74.049568][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.049578][ T6373] Call Trace: [ 74.049585][ T6373] [ 74.049592][ T6373] dump_stack_lvl+0x100/0x190 [ 74.049621][ T6373] should_fail_ex.cold+0x5/0xa [ 74.049643][ T6373] ? tomoyo_encode2+0xfb/0x3c0 [ 74.049661][ T6373] should_failslab+0xc2/0x120 [ 74.049687][ T6373] __kmalloc_noprof+0xe0/0x850 [ 74.049708][ T6373] ? d_absolute_path+0x136/0x1b0 [ 74.049732][ T6373] tomoyo_encode2+0xfb/0x3c0 [ 74.049755][ T6373] tomoyo_encode+0x29/0x50 [ 74.049773][ T6373] tomoyo_realpath_from_path+0x18c/0x690 [ 74.049798][ T6373] tomoyo_path_number_perm+0x23c/0x580 [ 74.049824][ T6373] ? tomoyo_path_number_perm+0x22e/0x580 [ 74.049849][ T6373] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.049899][ T6373] ? find_held_lock+0x2b/0x80 [ 74.049919][ T6373] ? __fget_files+0x215/0x3d0 [ 74.049934][ T6373] ? hook_file_ioctl_common+0x146/0x410 [ 74.049959][ T6373] ? __fget_files+0x21f/0x3d0 [ 74.049977][ T6373] security_file_ioctl+0xd3/0x230 [ 74.049997][ T6373] __x64_sys_ioctl+0xb7/0x210 [ 74.050021][ T6373] do_syscall_64+0x106/0xf80 [ 74.050038][ T6373] ? clear_bhb_loop+0x40/0x90 [ 74.050065][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.050081][ T6373] RIP: 0033:0x7f8dbeb9c799 [ 74.050094][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.050109][ T6373] RSP: 002b:00007f8dbfaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.050126][ T6373] RAX: ffffffffffffffda RBX: 00007f8dbee15fa0 RCX: 00007f8dbeb9c799 [ 74.050137][ T6373] RDX: 0000200000000180 RSI: 0000000080284504 RDI: 0000000000000004 [ 74.050147][ T6373] RBP: 00007f8dbfaa6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.050157][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.050167][ T6373] R13: 00007f8dbee16038 R14: 00007f8dbee15fa0 R15: 00007ffc61fe3208 [ 74.050190][ T6373] [ 74.050205][ T6373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.055202][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 74.129978][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.131874][ T5999] dvb-usb: error while querying for an remote control event. [ 74.132788][ T839] usb 5-1: USB disconnect, device number 2 [ 74.136727][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.146339][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 74.150929][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.152688][ T9] dvb-usb: error while querying for an remote control event. [ 74.154969][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.166182][ T9] usb 6-1: USB disconnect, device number 3 [ 74.170466][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.177825][ T6420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65 sclass=netlink_tcpdiag_socket pid=6420 comm=syz.2.145 [ 74.190989][ T839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 74.210690][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 74.229242][ T6423] comedi comedi3: comedi_config --init_data is deprecated [ 74.307088][ T6427] SELinux: Context system_u:object_r:autofs_device_t:s0 is not valid (left unmapped). [ 74.532094][ T5945] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 74.536007][ T5945] Bluetooth: hci1: Injecting HCI hardware error event [ 74.539819][ T5945] Bluetooth: hci1: hardware error 0x00 [ 74.587788][ T6438] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 74.590491][ T6438] dvmrp1: ignored: set checksum disabled [ 75.451442][ T54] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 75.603436][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.608049][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.612231][ T54] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.616329][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.622646][ T54] usb 8-1: config 0 descriptor?? [ 75.627300][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 75.629954][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 75.636838][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 75.640588][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 75.648442][ T54] usb 8-1: media controller created [ 75.651666][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.661118][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 75.663880][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 75.669967][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input10 [ 75.677144][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 75.680104][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 75.777908][ T6481] netlink: 84 bytes leftover after parsing attributes in process `syz.2.167'. [ 75.781717][ T6481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.167'. [ 75.789366][ T6481] Zero length message leads to an empty skb [ 75.795818][ T6481] qnx6: unable to set blocksize [ 75.826309][ T6468] FAULT_INJECTION: forcing a failure. [ 75.826309][ T6468] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.830822][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 75.830838][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.830844][ T6468] Call Trace: [ 75.830849][ T6468] [ 75.830853][ T6468] dump_stack_lvl+0x100/0x190 [ 75.830875][ T6468] should_fail_ex.cold+0x5/0xa [ 75.830890][ T6468] _copy_from_user+0x2e/0xd0 [ 75.830906][ T6468] evdev_handle_get_keycode_v2+0xb7/0x170 [ 75.830920][ T6468] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 75.830935][ T6468] ? trace_contention_end+0x140/0x180 [ 75.830947][ T6468] ? __mutex_lock+0x26a/0x1b90 [ 75.830961][ T6468] evdev_do_ioctl+0xc78/0x1b60 [ 75.830974][ T6468] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 75.830985][ T6468] ? __pfx___mutex_lock+0x10/0x10 [ 75.831007][ T6468] evdev_ioctl+0x16f/0x1a0 [ 75.831018][ T6468] ? __pfx_evdev_ioctl+0x10/0x10 [ 75.831030][ T6468] __x64_sys_ioctl+0x18e/0x210 [ 75.831047][ T6468] do_syscall_64+0x106/0xf80 [ 75.831058][ T6468] ? clear_bhb_loop+0x40/0x90 [ 75.831071][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.831082][ T6468] RIP: 0033:0x7fefb8f9c799 [ 75.831092][ T6468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.831102][ T6468] RSP: 002b:00007fefb9da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.831113][ T6468] RAX: ffffffffffffffda RBX: 00007fefb9215fa0 RCX: 00007fefb8f9c799 [ 75.831120][ T6468] RDX: 0000200000000180 RSI: 0000000080284504 RDI: 0000000000000004 [ 75.831126][ T6468] RBP: 00007fefb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 75.831132][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.831138][ T6468] R13: 00007fefb9216038 R14: 00007fefb9215fa0 R15: 00007ffc329bf388 [ 75.831152][ T6468] [ 75.832178][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 75.900368][ T54] dvb-usb: error while querying for an remote control event. [ 75.901399][ T839] usb 8-1: USB disconnect, device number 3 [ 75.915038][ T839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 76.289680][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.292821][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.317574][ T6499] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 76.319476][ T6499] dvmrp1: ignored: set checksum disabled [ 76.446250][ T6502] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 76.454740][ T6503] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 76.601367][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 77.505483][ T6557] team0: Device gtp0 is of different type [ 77.678937][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 77.684337][ T6568] veth0_macvtap: left promiscuous mode [ 77.726524][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'. [ 77.765337][ T6574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6574 comm=syz.0.203 [ 77.784055][ T6579] FAULT_INJECTION: forcing a failure. [ 77.784055][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.789551][ T6579] CPU: 2 UID: 0 PID: 6579 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT(full) [ 77.789572][ T6579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.789581][ T6579] Call Trace: [ 77.789587][ T6579] [ 77.789593][ T6579] dump_stack_lvl+0x100/0x190 [ 77.789623][ T6579] should_fail_ex.cold+0x5/0xa [ 77.789645][ T6579] _copy_from_user+0x2e/0xd0 [ 77.789668][ T6579] ____sys_sendmsg+0x1d1/0xc30 [ 77.789691][ T6579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.789715][ T6579] ___sys_sendmsg+0x190/0x1e0 [ 77.789737][ T6579] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.789785][ T6579] __sys_sendmsg+0x170/0x220 [ 77.789801][ T6579] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.789827][ T6579] do_syscall_64+0x106/0xf80 [ 77.789843][ T6579] ? clear_bhb_loop+0x40/0x90 [ 77.789864][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.789881][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 77.789880][ T6579] RIP: 0033:0x7f4d6999c799 [ 77.789892][ T40] audit: type=1400 audit(1772308217.883:351): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.789893][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.789906][ T6579] RSP: 002b:00007f4d6a8c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.789919][ T6579] RAX: ffffffffffffffda RBX: 00007f4d69c15fa0 RCX: 00007f4d6999c799 [ 77.789929][ T6579] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 77.789939][ T6579] RBP: 00007f4d6a8c5090 R08: 0000000000000000 R09: 0000000000000000 [ 77.789948][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.789957][ T6579] R13: 00007f4d69c16038 R14: 00007f4d69c15fa0 R15: 00007ffd9367b048 [ 77.789979][ T6579] [ 77.839055][ T6585] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 77.840446][ T40] audit: type=1400 audit(1772308217.893:352): avc: denied { name_bind } for pid=6580 comm="syz.3.206" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 77.844570][ T6585] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 77.846847][ T40] audit: type=1400 audit(1772308217.893:353): avc: denied { write } for pid=6580 comm="syz.3.206" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 77.850341][ T6585] dvmrp1: ignored: set checksum disabled [ 77.853871][ T40] audit: type=1400 audit(1772308217.893:354): avc: denied { create } for pid=6580 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=0 [ 77.888919][ T40] audit: type=1400 audit(1772308217.903:355): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.896726][ T40] audit: type=1400 audit(1772308217.913:356): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.905711][ T40] audit: type=1400 audit(1772308217.923:357): avc: denied { module_request } for pid=6582 comm="syz.0.207" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 77.915272][ T40] audit: type=1400 audit(1772308217.923:358): avc: denied { sys_module } for pid=6582 comm="syz.0.207" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 77.924276][ T40] audit: type=1400 audit(1772308217.923:359): avc: denied { create } for pid=6584 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 77.932980][ T40] audit: type=1400 audit(1772308217.923:360): avc: denied { create } for pid=6584 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 78.156191][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 78.268155][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'. [ 78.323698][ T6630] netlink: 'syz.0.224': attribute type 30 has an invalid length. [ 78.341423][ T6630] bond1: option arp_missed_max: invalid value (0) [ 78.344099][ T6630] bond1: option arp_missed_max: allowed values 1 - 255 [ 78.348555][ T6630] bond1 (unregistering): Released all slaves [ 78.834285][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 78.836313][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 78.839633][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 78.841864][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 79.115992][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 79.119004][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 79.291635][ T6692] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 79.293775][ T6692] dvmrp1: ignored: set checksum disabled [ 79.631919][ T6695] libceph: connect (1)[c::]:6789 error -101 [ 79.634815][ T6695] libceph: mon0 (1)[c::]:6789 connect error [ 79.660808][ T6664] ceph: No mds server is up or the cluster is laggy [ 79.706198][ T6697] FAULT_INJECTION: forcing a failure. [ 79.706198][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 79.710440][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 79.710455][ T6697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.710461][ T6697] Call Trace: [ 79.710467][ T6697] [ 79.710471][ T6697] dump_stack_lvl+0x100/0x190 [ 79.710494][ T6697] should_fail_ex.cold+0x5/0xa [ 79.710508][ T6697] should_failslab+0xc2/0x120 [ 79.710526][ T6697] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 79.710541][ T6697] ? __inet_hash_connect+0x686/0x1e40 [ 79.710557][ T6697] ? __inet_hash_connect+0x5ae/0x1e40 [ 79.710576][ T6697] __inet_hash_connect+0x686/0x1e40 [ 79.710596][ T6697] ? __pfx___inet6_check_established+0x10/0x10 [ 79.710610][ T6697] ? __pfx___inet_hash_connect+0x10/0x10 [ 79.710629][ T6697] ? inet6_hash_connect+0xe2/0x180 [ 79.710641][ T6697] tcp_v6_connect+0x1562/0x2420 [ 79.710653][ T6697] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 79.710667][ T6697] ? tcp_sendmsg_locked+0x279a/0x45f0 [ 79.710684][ T6697] ? __pfx_tcp_v6_connect+0x10/0x10 [ 79.710701][ T6697] __inet_stream_connect+0x208/0xfa0 [ 79.710719][ T6697] ? __pfx___inet_stream_connect+0x10/0x10 [ 79.710739][ T6697] tcp_sendmsg_fastopen+0x3ed/0x750 [ 79.710756][ T6697] tcp_sendmsg_locked+0x279a/0x45f0 [ 79.710773][ T6697] ? __lock_acquire+0x4a5/0x2630 [ 79.710791][ T6697] ? __lock_acquire+0x4a5/0x2630 [ 79.710810][ T6697] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 79.710826][ T6697] ? do_raw_spin_lock+0x128/0x260 [ 79.710839][ T6697] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.710854][ T6697] ? __local_bh_enable_ip+0x9e/0x120 [ 79.710869][ T6697] tcp_sendmsg+0x2e/0x50 [ 79.710882][ T6697] ? __pfx_tcp_sendmsg+0x10/0x10 [ 79.710896][ T6697] inet6_sendmsg+0xb9/0x140 [ 79.710907][ T6697] __sys_sendto+0x381/0x520 [ 79.710924][ T6697] ? __pfx___sys_sendto+0x10/0x10 [ 79.710951][ T6697] ? ksys_write+0x1ac/0x250 [ 79.710967][ T6697] ? __pfx_ksys_write+0x10/0x10 [ 79.710984][ T6697] __x64_sys_sendto+0xe0/0x1c0 [ 79.711000][ T6697] ? do_syscall_64+0x95/0xf80 [ 79.711012][ T6697] ? lockdep_hardirqs_on+0x78/0x100 [ 79.711022][ T6697] do_syscall_64+0x106/0xf80 [ 79.711032][ T6697] ? clear_bhb_loop+0x40/0x90 [ 79.711046][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.711057][ T6697] RIP: 0033:0x7fefb8f9c799 [ 79.711066][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.711076][ T6697] RSP: 002b:00007fefb9da0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.711088][ T6697] RAX: ffffffffffffffda RBX: 00007fefb9215fa0 RCX: 00007fefb8f9c799 [ 79.711094][ T6697] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 79.711100][ T6697] RBP: 00007fefb9da0090 R08: 0000200000000140 R09: 000000000000001c [ 79.711110][ T6697] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 79.711117][ T6697] R13: 00007fefb9216038 R14: 00007fefb9215fa0 R15: 00007ffc329bf388 [ 79.711130][ T6697] [ 79.876871][ T6703] FAULT_INJECTION: forcing a failure. [ 79.876871][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 79.880825][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 79.880841][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.880847][ T6703] Call Trace: [ 79.880851][ T6703] [ 79.880855][ T6703] dump_stack_lvl+0x100/0x190 [ 79.880876][ T6703] should_fail_ex.cold+0x5/0xa [ 79.880890][ T6703] should_failslab+0xc2/0x120 [ 79.880908][ T6703] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 79.880924][ T6703] ? __alloc_skb+0x140/0x710 [ 79.880944][ T6703] __alloc_skb+0x140/0x710 [ 79.880959][ T6703] ? __alloc_skb+0x5b7/0x710 [ 79.880976][ T6703] ? __pfx___alloc_skb+0x10/0x10 [ 79.880992][ T6703] ? is_bpf_text_address+0x8a/0x1a0 [ 79.881008][ T6703] ? is_bpf_text_address+0x8a/0x1a0 [ 79.881023][ T6703] ? bpf_ksym_find+0x128/0x1c0 [ 79.881042][ T6703] alloc_skb_with_frags+0xe0/0x810 [ 79.881055][ T6703] ? __lock_acquire+0x4a5/0x2630 [ 79.881073][ T6703] ? arch_stack_walk+0xa6/0xf0 [ 79.881087][ T6703] sock_alloc_send_pskb+0x801/0x980 [ 79.881107][ T6703] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 79.881126][ T6703] ? __lock_acquire+0x4a5/0x2630 [ 79.881146][ T6703] __ip_append_data+0x2291/0x46d0 [ 79.881160][ T6703] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 79.881176][ T6703] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 79.881194][ T6703] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 79.881209][ T6703] ? __pfx___ip_append_data+0x10/0x10 [ 79.881224][ T6703] ip_make_skb+0x28b/0x310 [ 79.881249][ T6703] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 79.881264][ T6703] ? __pfx_ip_make_skb+0x10/0x10 [ 79.881284][ T6703] ? udp_sendmsg+0x17b6/0x2890 [ 79.881294][ T6703] udp_sendmsg+0x17b6/0x2890 [ 79.881308][ T6703] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 79.881321][ T6703] ? __pfx_udp_sendmsg+0x10/0x10 [ 79.881332][ T6703] ? tomoyo_supervisor+0x1e7/0x1340 [ 79.881349][ T6703] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 79.881367][ T6703] ? up_write+0x290/0x4f0 [ 79.881385][ T6703] ? __lock_acquire+0x4a5/0x2630 [ 79.881404][ T6703] udpv6_sendmsg+0x156c/0x2f60 [ 79.881421][ T6703] ? find_held_lock+0x2b/0x80 [ 79.881440][ T6703] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 79.881473][ T6703] ? __local_bh_enable_ip+0x9e/0x120 [ 79.881487][ T6703] ? lockdep_hardirqs_on+0x78/0x100 [ 79.881497][ T6703] ? inet_autobind+0x145/0x1a0 [ 79.881509][ T6703] ? __local_bh_enable_ip+0x9e/0x120 [ 79.881522][ T6703] ? inet_autobind+0x14a/0x1a0 [ 79.881534][ T6703] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 79.881552][ T6703] ? inet6_sendmsg+0x105/0x140 [ 79.881561][ T6703] inet6_sendmsg+0x105/0x140 [ 79.881572][ T6703] ____sys_sendmsg+0x704/0xc30 [ 79.881587][ T6703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.881607][ T6703] ___sys_sendmsg+0x190/0x1e0 [ 79.881622][ T6703] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.881652][ T6703] __sys_sendmsg+0x170/0x220 [ 79.881663][ T6703] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.881682][ T6703] do_syscall_64+0x106/0xf80 [ 79.881692][ T6703] ? clear_bhb_loop+0x40/0x90 [ 79.881706][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.881717][ T6703] RIP: 0033:0x7fefb8f9c799 [ 79.881727][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.881737][ T6703] RSP: 002b:00007fefb9da0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.881748][ T6703] RAX: ffffffffffffffda RBX: 00007fefb9215fa0 RCX: 00007fefb8f9c799 [ 79.881754][ T6703] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 79.881760][ T6703] RBP: 00007fefb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 79.881766][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.881772][ T6703] R13: 00007fefb9216038 R14: 00007fefb9215fa0 R15: 00007ffc329bf388 [ 79.881786][ T6703] [ 80.128580][ T6715] syzkaller0: entered promiscuous mode [ 80.130490][ T6715] syzkaller0: entered allmulticast mode [ 80.159290][ T6719] FAULT_INJECTION: forcing a failure. [ 80.159290][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 80.163933][ T6719] CPU: 1 UID: 0 PID: 6719 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 80.163948][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.163954][ T6719] Call Trace: [ 80.163958][ T6719] [ 80.163963][ T6719] dump_stack_lvl+0x100/0x190 [ 80.163985][ T6719] should_fail_ex.cold+0x5/0xa [ 80.163998][ T6719] should_failslab+0xc2/0x120 [ 80.164016][ T6719] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 80.164031][ T6719] ? inet_bind2_bucket_create+0x36/0x5f0 [ 80.164046][ T6719] ? do_raw_spin_lock+0x128/0x260 [ 80.164061][ T6719] inet_bind2_bucket_create+0x36/0x5f0 [ 80.164078][ T6719] __inet_hash_connect+0x13c1/0x1e40 [ 80.164099][ T6719] ? __pfx___inet6_check_established+0x10/0x10 [ 80.164113][ T6719] ? __pfx___inet_hash_connect+0x10/0x10 [ 80.164132][ T6719] ? inet6_hash_connect+0xe2/0x180 [ 80.164145][ T6719] tcp_v6_connect+0x1562/0x2420 [ 80.164157][ T6719] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 80.164171][ T6719] ? tcp_sendmsg_locked+0x279a/0x45f0 [ 80.164187][ T6719] ? __pfx_tcp_v6_connect+0x10/0x10 [ 80.164205][ T6719] __inet_stream_connect+0x208/0xfa0 [ 80.164223][ T6719] ? __pfx___inet_stream_connect+0x10/0x10 [ 80.164243][ T6719] tcp_sendmsg_fastopen+0x3ed/0x750 [ 80.164260][ T6719] tcp_sendmsg_locked+0x279a/0x45f0 [ 80.164277][ T6719] ? __lock_acquire+0x4a5/0x2630 [ 80.164295][ T6719] ? __lock_acquire+0x4a5/0x2630 [ 80.164314][ T6719] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 80.164330][ T6719] ? do_raw_spin_lock+0x128/0x260 [ 80.164342][ T6719] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.164357][ T6719] ? __local_bh_enable_ip+0x9e/0x120 [ 80.164372][ T6719] tcp_sendmsg+0x2e/0x50 [ 80.164385][ T6719] ? __pfx_tcp_sendmsg+0x10/0x10 [ 80.164398][ T6719] inet6_sendmsg+0xb9/0x140 [ 80.164409][ T6719] __sys_sendto+0x381/0x520 [ 80.164427][ T6719] ? __pfx___sys_sendto+0x10/0x10 [ 80.164454][ T6719] ? ksys_write+0x1ac/0x250 [ 80.164469][ T6719] ? __pfx_ksys_write+0x10/0x10 [ 80.164487][ T6719] __x64_sys_sendto+0xe0/0x1c0 [ 80.164503][ T6719] ? do_syscall_64+0x95/0xf80 [ 80.164514][ T6719] ? lockdep_hardirqs_on+0x78/0x100 [ 80.164525][ T6719] do_syscall_64+0x106/0xf80 [ 80.164535][ T6719] ? clear_bhb_loop+0x40/0x90 [ 80.164547][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.164559][ T6719] RIP: 0033:0x7f8dbeb9c799 [ 80.164569][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.164578][ T6719] RSP: 002b:00007f8dbfaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.164589][ T6719] RAX: ffffffffffffffda RBX: 00007f8dbee15fa0 RCX: 00007f8dbeb9c799 [ 80.164596][ T6719] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 80.164602][ T6719] RBP: 00007f8dbfaa6090 R08: 0000200000000140 R09: 000000000000001c [ 80.164608][ T6719] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 80.164614][ T6719] R13: 00007f8dbee16038 R14: 00007f8dbee15fa0 R15: 00007ffc61fe3208 [ 80.164627][ T6719] [ 80.316515][ T6725] FAULT_INJECTION: forcing a failure. [ 80.316515][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.322702][ T6725] CPU: 3 UID: 0 PID: 6725 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(full) [ 80.322726][ T6725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.322736][ T6725] Call Trace: [ 80.322742][ T6725] [ 80.322750][ T6725] dump_stack_lvl+0x100/0x190 [ 80.322786][ T6725] should_fail_ex.cold+0x5/0xa [ 80.322810][ T6725] _copy_from_user+0x2e/0xd0 [ 80.322835][ T6725] kstrtouint_from_user+0xd6/0x1d0 [ 80.322855][ T6725] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 80.322874][ T6725] ? __lock_acquire+0x4a5/0x2630 [ 80.322901][ T6725] ? lock_acquire+0x1cf/0x380 [ 80.322933][ T6725] proc_fail_nth_write+0x83/0x220 [ 80.322955][ T6725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.322985][ T6725] vfs_write+0x2aa/0x1070 [ 80.323011][ T6725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.323043][ T6725] ? __pfx_vfs_write+0x10/0x10 [ 80.323068][ T6725] ? __fget_files+0x215/0x3d0 [ 80.323091][ T6725] ? __fget_files+0x21f/0x3d0 [ 80.323115][ T6725] ksys_write+0x12a/0x250 [ 80.323140][ T6725] ? __pfx_ksys_write+0x10/0x10 [ 80.323171][ T6725] do_syscall_64+0x106/0xf80 [ 80.323189][ T6725] ? clear_bhb_loop+0x40/0x90 [ 80.323209][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.323226][ T6725] RIP: 0033:0x7fefb8f5cfce [ 80.323242][ T6725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.323261][ T6725] RSP: 002b:00007fefb9d9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.323279][ T6725] RAX: ffffffffffffffda RBX: 00007fefb9da06c0 RCX: 00007fefb8f5cfce [ 80.323290][ T6725] RDX: 0000000000000001 RSI: 00007fefb9da00a0 RDI: 0000000000000004 [ 80.323299][ T6725] RBP: 00007fefb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 80.323310][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.323322][ T6725] R13: 00007fefb9216038 R14: 00007fefb9215fa0 R15: 00007ffc329bf388 [ 80.323346][ T6725] [ 80.477851][ T6736] sp0: Synchronizing with TNC [ 80.483352][ T6735] [U] è [ 80.514920][ T6740] FAULT_INJECTION: forcing a failure. [ 80.514920][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 80.519271][ T6740] CPU: 3 UID: 0 PID: 6740 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT(full) [ 80.519285][ T6740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.519292][ T6740] Call Trace: [ 80.519296][ T6740] [ 80.519300][ T6740] dump_stack_lvl+0x100/0x190 [ 80.519322][ T6740] should_fail_ex.cold+0x5/0xa [ 80.519336][ T6740] should_failslab+0xc2/0x120 [ 80.519354][ T6740] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 80.519369][ T6740] ? __alloc_skb+0x140/0x710 [ 80.519389][ T6740] __alloc_skb+0x140/0x710 [ 80.519405][ T6740] ? __pfx___alloc_skb+0x10/0x10 [ 80.519426][ T6740] tcp_stream_alloc_skb+0x34/0x660 [ 80.519442][ T6740] tcp_connect+0xe8c/0x5630 [ 80.519462][ T6740] ? __siphash_unaligned+0x1eb/0x360 [ 80.519476][ T6740] ? __pfx_tcp_connect+0x10/0x10 [ 80.519491][ T6740] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 80.519508][ T6740] ? inet6_hash_connect+0xe2/0x180 [ 80.519522][ T6740] tcp_v6_connect+0x17c6/0x2420 [ 80.519534][ T6740] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 80.519547][ T6740] ? tcp_sendmsg_locked+0x279a/0x45f0 [ 80.519564][ T6740] ? __pfx_tcp_v6_connect+0x10/0x10 [ 80.519582][ T6740] __inet_stream_connect+0x208/0xfa0 [ 80.519600][ T6740] ? __pfx___inet_stream_connect+0x10/0x10 [ 80.519628][ T6740] tcp_sendmsg_fastopen+0x3ed/0x750 [ 80.519645][ T6740] tcp_sendmsg_locked+0x279a/0x45f0 [ 80.519662][ T6740] ? __lock_acquire+0x4a5/0x2630 [ 80.519680][ T6740] ? __lock_acquire+0x4a5/0x2630 [ 80.519700][ T6740] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 80.519716][ T6740] ? do_raw_spin_lock+0x128/0x260 [ 80.519728][ T6740] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.519743][ T6740] ? __local_bh_enable_ip+0x9e/0x120 [ 80.519759][ T6740] tcp_sendmsg+0x2e/0x50 [ 80.519772][ T6740] ? __pfx_tcp_sendmsg+0x10/0x10 [ 80.519786][ T6740] inet6_sendmsg+0xb9/0x140 [ 80.519797][ T6740] __sys_sendto+0x381/0x520 [ 80.519814][ T6740] ? __pfx___sys_sendto+0x10/0x10 [ 80.519842][ T6740] ? ksys_write+0x1ac/0x250 [ 80.519858][ T6740] ? __pfx_ksys_write+0x10/0x10 [ 80.519875][ T6740] __x64_sys_sendto+0xe0/0x1c0 [ 80.519891][ T6740] ? do_syscall_64+0x95/0xf80 [ 80.519902][ T6740] ? lockdep_hardirqs_on+0x78/0x100 [ 80.519912][ T6740] do_syscall_64+0x106/0xf80 [ 80.519922][ T6740] ? clear_bhb_loop+0x40/0x90 [ 80.519936][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.519947][ T6740] RIP: 0033:0x7f8dbeb9c799 [ 80.519956][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.519966][ T6740] RSP: 002b:00007f8dbfaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.519977][ T6740] RAX: ffffffffffffffda RBX: 00007f8dbee15fa0 RCX: 00007f8dbeb9c799 [ 80.519984][ T6740] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 80.519990][ T6740] RBP: 00007f8dbfaa6090 R08: 0000200000000140 R09: 000000000000001c [ 80.519996][ T6740] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 80.520002][ T6740] R13: 00007f8dbee16038 R14: 00007f8dbee15fa0 R15: 00007ffc61fe3208 [ 80.520016][ T6740] [ 80.735565][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 80.745029][ T6744] gtp0: entered promiscuous mode [ 80.827393][ T6752] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 80.830341][ T6752] dvmrp1: ignored: set checksum disabled [ 80.874437][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 80.988666][ T6766] syzkaller0: entered promiscuous mode [ 80.990561][ T6766] syzkaller0: entered allmulticast mode [ 81.164359][ T6791] capability: warning: `syz.0.295' uses 32-bit capabilities (legacy support in use) [ 81.443237][ T6822] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 81.463384][ T6822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.637315][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=6845 comm=syz.3.316 [ 81.644932][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6845 comm=syz.3.316 [ 81.689481][ T6849] syzkaller0: entered promiscuous mode [ 81.692814][ T6849] syzkaller0: entered allmulticast mode [ 81.974375][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 82.073711][ T6882] syzkaller0: entered promiscuous mode [ 82.075854][ T6882] syzkaller0: entered allmulticast mode [ 82.791471][ T40] kauditd_printk_skb: 17141 callbacks suppressed [ 82.791482][ T40] audit: type=1400 audit(1772308222.893:15720): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.800713][ T40] audit: type=1400 audit(1772308222.893:15721): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.810055][ T6953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.810070][ T6953] audit: audit_lost=595 audit_rate_limit=0 audit_backlog_limit=64 [ 82.810081][ T6953] audit: backlog limit exceeded [ 82.810388][ T5639] audit: audit_backlog=66 > audit_backlog_limit=64 [ 82.811159][ T6953] audit: audit_backlog=66 > audit_backlog_limit=64 [ 82.811168][ T6953] audit: audit_lost=596 audit_rate_limit=0 audit_backlog_limit=64 [ 82.811175][ T6953] audit: backlog limit exceeded [ 82.811181][ T6953] audit: audit_backlog=66 > audit_backlog_limit=64 [ 82.872453][ T6958] sp0: Synchronizing with TNC [ 82.876286][ T6957] [U] è [ 83.215999][ T6976] netlink: 'syz.2.374': attribute type 8 has an invalid length. [ 83.328204][ T6983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6983 comm=syz.2.376 [ 85.322678][ T7138] xt_hashlimit: max too large, truncated to 1048576 [ 85.327210][ T7138] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 85.447102][ T7150] IPVS: length: 8 != 187480674168 [ 85.758991][ T7163] capability: warning: `syz.2.450' uses deprecated v2 capabilities in a way that may be insecure [ 85.858165][ T7175] bridge0: port 3(syz_tun) entered blocking state [ 85.860806][ T7175] bridge0: port 3(syz_tun) entered disabled state [ 85.863320][ T7175] syz_tun: entered allmulticast mode [ 85.866528][ T7175] syz_tun: entered promiscuous mode [ 85.869247][ T7175] bridge0: port 3(syz_tun) entered blocking state [ 85.871559][ T7175] bridge0: port 3(syz_tun) entered forwarding state [ 86.044963][ T7193] netlink: 'syz.2.463': attribute type 5 has an invalid length. [ 86.101883][ T7197] bond1: Unable to set up delay as MII monitoring is disabled [ 86.112521][ T7197] bond1 (unregistering): Released all slaves [ 86.536614][ T1486] cfg80211: failed to load regulatory.db [ 87.015636][ T7242] bond1: Unable to set up delay as MII monitoring is disabled [ 87.019793][ T7242] bond1 (unregistering): Released all slaves [ 87.140244][ T7249] syzkaller0: entered promiscuous mode [ 87.144547][ T7249] syzkaller0: entered allmulticast mode [ 87.518355][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 87.801480][ T40] kauditd_printk_skb: 40591 callbacks suppressed [ 87.801492][ T40] audit: type=1400 audit(1772308227.893:54080): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.810730][ T40] audit: type=1400 audit(1772308227.903:54081): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.818153][ T40] audit: type=1400 audit(1772308227.903:54082): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.824795][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.824812][ T5639] audit: audit_lost=1342 audit_rate_limit=0 audit_backlog_limit=64 [ 87.824824][ T5639] audit: backlog limit exceeded [ 87.824869][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.824877][ T5639] audit: audit_lost=1343 audit_rate_limit=0 audit_backlog_limit=64 [ 87.824884][ T5639] audit: backlog limit exceeded [ 87.824924][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.906903][ T7257] team0: Port device team_slave_0 removed [ 88.202761][ T7272] syzkaller0: entered promiscuous mode [ 88.204807][ T7272] syzkaller0: entered allmulticast mode [ 88.344252][ T7283] syzkaller0: entered promiscuous mode [ 88.346077][ T7283] syzkaller0: entered allmulticast mode [ 88.510116][ T7291] syzkaller0: entered promiscuous mode [ 88.512643][ T7291] syzkaller0: entered allmulticast mode [ 88.559932][ T7293] syzkaller0: entered promiscuous mode [ 88.562551][ T7293] syzkaller0: entered allmulticast mode [ 88.897344][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 88.926910][ T7318] syzkaller0: entered promiscuous mode [ 88.929281][ T7318] syzkaller0: entered allmulticast mode [ 88.962112][ T7326] syzkaller0: entered promiscuous mode [ 88.964396][ T7326] syzkaller0: entered allmulticast mode [ 89.068421][ T7330] bond2: Unable to set up delay as MII monitoring is disabled [ 89.074817][ T7330] bond2 (unregistering): Released all slaves [ 89.132215][ T7333] IPv6: NLM_F_REPLACE set, but no existing node found! [ 89.159179][ T7338] syzkaller0: entered promiscuous mode [ 89.162262][ T7338] syzkaller0: entered allmulticast mode [ 89.194632][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 89.377699][ T7358] syzkaller0: entered promiscuous mode [ 89.380214][ T7358] syzkaller0: entered allmulticast mode [ 89.576622][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=7372 comm=syz.0.542 [ 89.601972][ T7370] syzkaller0: entered promiscuous mode [ 89.604374][ T7370] syzkaller0: entered allmulticast mode [ 89.635472][ T7376] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 89.650053][ T7376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.706591][ T7382] bond2: Unable to set up delay as MII monitoring is disabled [ 89.710888][ T7382] bond2 (unregistering): Released all slaves [ 89.759426][ T7392] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 89.843866][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 89.859027][ T7400] bond1: entered promiscuous mode [ 89.860881][ T7400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.902403][ T7400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.908350][ T7400] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.913959][ T7400] bond1: (slave vcan0): Error -95 calling set_mac_address [ 90.156839][ T7423] mmap: syz.2.559 (7423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.296867][ T7432] bond2: Unable to set up delay as MII monitoring is disabled [ 90.300889][ T7432] bond2 (unregistering): Released all slaves [ 90.628898][ T7449] IPv6: NLM_F_REPLACE set, but no existing node found! [ 90.757020][ T7460] bond2: Unable to set up delay as MII monitoring is disabled [ 90.762873][ T7460] bond2 (unregistering): Released all slaves [ 90.829440][ T7466] syzkaller0: entered promiscuous mode [ 90.833211][ T7466] syzkaller0: entered allmulticast mode [ 90.895776][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 90.899715][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'. [ 91.097535][ T7489] syzkaller0: entered promiscuous mode [ 91.099923][ T7489] syzkaller0: entered allmulticast mode [ 91.483687][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 91.544460][ T7530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7530 comm=syz.0.605 [ 91.730501][ T7562] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 91.735183][ T7562] veth0_vlan: entered allmulticast mode [ 91.746036][ T7562] veth0_vlan: left promiscuous mode [ 91.750871][ T7562] veth0_vlan: entered promiscuous mode [ 91.762215][ T7562] team0: Device veth0_vlan failed to register rx_handler [ 91.867242][ T7575] bridge0: port 3(syz_tun) entered blocking state [ 91.870037][ T7575] bridge0: port 3(syz_tun) entered disabled state [ 91.872365][ T7575] syz_tun: entered allmulticast mode [ 91.875076][ T7575] syz_tun: entered promiscuous mode [ 91.877073][ T7575] bridge0: port 3(syz_tun) entered blocking state [ 91.879243][ T7575] bridge0: port 3(syz_tun) entered forwarding state [ 91.913321][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 91.917364][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 92.811353][ T40] kauditd_printk_skb: 33837 callbacks suppressed [ 92.811368][ T40] audit: type=1400 audit(2000000002.389:84906): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.823430][ T40] audit: type=1400 audit(2000000002.399:84907): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.827071][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.832788][ T40] audit: type=1400 audit(2000000002.399:84908): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.841647][ T5639] audit: audit_lost=2349 audit_rate_limit=0 audit_backlog_limit=64 [ 92.846360][ T40] audit: type=1400 audit(2000000002.399:84909): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.849014][ T5639] audit: backlog limit exceeded [ 92.857451][ T40] audit: type=1400 audit(2000000002.399:84910): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.857489][ T40] audit: type=1400 audit(2000000002.399:84911): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.857525][ T40] audit: type=1400 audit(2000000002.399:84912): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.442497][ T7680] syzkaller0: entered promiscuous mode [ 93.445256][ T7680] syzkaller0: entered allmulticast mode [ 94.262943][ T7686] bond2: Unable to set up delay as MII monitoring is disabled [ 94.266955][ T7686] bond2 (unregistering): Released all slaves [ 94.606528][ T7721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.683'. [ 94.740911][ T7732] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 94.798804][ T7737] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 94.801177][ T7737] dvmrp1: ignored: set checksum disabled [ 94.946395][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 95.048473][ T7765] FAULT_INJECTION: forcing a failure. [ 95.048473][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.053315][ T7765] CPU: 3 UID: 0 PID: 7765 Comm: syz.3.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.053332][ T7765] Tainted: [L]=SOFTLOCKUP [ 95.053336][ T7765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.053342][ T7765] Call Trace: [ 95.053345][ T7765] [ 95.053350][ T7765] dump_stack_lvl+0x100/0x190 [ 95.053374][ T7765] should_fail_ex.cold+0x5/0xa [ 95.053393][ T7765] _copy_from_iter+0x1f4/0x1690 [ 95.053411][ T7765] ? __asan_memset+0x23/0x50 [ 95.053425][ T7765] ? __pfx__copy_from_iter+0x10/0x10 [ 95.053440][ T7765] ? __pfx___alloc_skb+0x10/0x10 [ 95.053462][ T7765] netlink_sendmsg+0x808/0xda0 [ 95.053477][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.053494][ T7765] sock_write_iter+0x566/0x610 [ 95.053508][ T7765] ? __pfx_sock_write_iter+0x10/0x10 [ 95.053527][ T7765] ? __pfx_file_has_perm+0x10/0x10 [ 95.053546][ T7765] do_iter_readv_writev+0x6ee/0x920 [ 95.053562][ T7765] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 95.053576][ T7765] ? selinux_file_permission+0x8f/0x6d0 [ 95.053589][ T7765] ? bpf_lsm_file_permission+0x9/0x10 [ 95.053604][ T7765] ? security_file_permission+0x76/0x210 [ 95.053618][ T7765] ? rw_verify_area+0xce/0x6d0 [ 95.053633][ T7765] vfs_writev+0x360/0xe10 [ 95.053651][ T7765] ? __pfx_vfs_writev+0x10/0x10 [ 95.053666][ T7765] ? find_held_lock+0x2b/0x80 [ 95.053687][ T7765] ? __fget_files+0x21f/0x3d0 [ 95.053700][ T7765] ? do_writev+0x28a/0x340 [ 95.053714][ T7765] do_writev+0x28a/0x340 [ 95.053729][ T7765] ? __pfx_do_writev+0x10/0x10 [ 95.053747][ T7765] do_syscall_64+0x106/0xf80 [ 95.053758][ T7765] ? clear_bhb_loop+0x40/0x90 [ 95.053771][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.053782][ T7765] RIP: 0033:0x7fefb8f9c799 [ 95.053792][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.053802][ T7765] RSP: 002b:00007fefb9da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 95.053813][ T7765] RAX: ffffffffffffffda RBX: 00007fefb9215fa0 RCX: 00007fefb8f9c799 [ 95.053819][ T7765] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 95.053825][ T7765] RBP: 00007fefb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 95.053831][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.053837][ T7765] R13: 00007fefb9216038 R14: 00007fefb9215fa0 R15: 00007ffc329bf388 [ 95.053850][ T7765] [ 95.186853][ T7774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33043 sclass=netlink_route_socket pid=7774 comm=syz.0.705 [ 95.375735][ T7785] FAULT_INJECTION: forcing a failure. [ 95.375735][ T7785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.381823][ T7785] CPU: 2 UID: 0 PID: 7785 Comm: syz.1.710 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.381864][ T7785] Tainted: [L]=SOFTLOCKUP [ 95.381870][ T7785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.381880][ T7785] Call Trace: [ 95.381886][ T7785] [ 95.381892][ T7785] dump_stack_lvl+0x100/0x190 [ 95.381932][ T7785] should_fail_ex.cold+0x5/0xa [ 95.381955][ T7785] _copy_to_user+0x32/0xd0 [ 95.381981][ T7785] simple_read_from_buffer+0xcb/0x170 [ 95.382010][ T7785] proc_fail_nth_read+0x1af/0x230 [ 95.382034][ T7785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.382058][ T7785] ? rw_verify_area+0xce/0x6d0 [ 95.382081][ T7785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.382103][ T7785] vfs_read+0x1e4/0xb30 [ 95.382131][ T7785] ? __pfx_vfs_read+0x10/0x10 [ 95.382155][ T7785] ? __fget_files+0x215/0x3d0 [ 95.382177][ T7785] ? __fget_files+0x21f/0x3d0 [ 95.382201][ T7785] ksys_read+0x12a/0x250 [ 95.382225][ T7785] ? __pfx_ksys_read+0x10/0x10 [ 95.382257][ T7785] do_syscall_64+0x106/0xf80 [ 95.382275][ T7785] ? clear_bhb_loop+0x40/0x90 [ 95.382297][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.382315][ T7785] RIP: 0033:0x7fd8c9d5cfce [ 95.382329][ T7785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.382344][ T7785] RSP: 002b:00007fd8cabfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.382361][ T7785] RAX: ffffffffffffffda RBX: 00007fd8cabfc6c0 RCX: 00007fd8c9d5cfce [ 95.382372][ T7785] RDX: 000000000000000f RSI: 00007fd8cabfc0a0 RDI: 0000000000000003 [ 95.382382][ T7785] RBP: 00007fd8cabfc090 R08: 0000000000000000 R09: 0000000000000000 [ 95.382392][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.382401][ T7785] R13: 00007fd8ca016038 R14: 00007fd8ca015fa0 R15: 00007ffce2e6ea38 [ 95.382424][ T7785] [ 95.557395][ T7788] futex_wake_op: syz.1.711 tries to shift op by 32; fix this program [ 95.707132][ T7807] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 95.709786][ T7807] netlink: 92 bytes leftover after parsing attributes in process `syz.2.717'. [ 96.281542][ T7836] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 96.340114][ T7840] bond2: Unable to set up delay as MII monitoring is disabled [ 96.343435][ T7840] bond2 (unregistering): Released all slaves [ 96.445348][ T7843] syzkaller0: entered promiscuous mode [ 96.447764][ T7843] syzkaller0: entered allmulticast mode [ 96.891085][ T7857] FAULT_INJECTION: forcing a failure. [ 96.891085][ T7857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.896926][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.0.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.896953][ T7857] Tainted: [L]=SOFTLOCKUP [ 96.896959][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.896969][ T7857] Call Trace: [ 96.896975][ T7857] [ 96.896982][ T7857] dump_stack_lvl+0x100/0x190 [ 96.897016][ T7857] should_fail_ex.cold+0x5/0xa [ 96.897040][ T7857] _copy_from_user+0x2e/0xd0 [ 96.897065][ T7857] copy_msghdr_from_user+0x9f/0x4f0 [ 96.897090][ T7857] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.897125][ T7857] ___sys_sendmsg+0x106/0x1e0 [ 96.897150][ T7857] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.897203][ T7857] __sys_sendmsg+0x170/0x220 [ 96.897223][ T7857] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.897255][ T7857] do_syscall_64+0x106/0xf80 [ 96.897274][ T7857] ? clear_bhb_loop+0x40/0x90 [ 96.897295][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.897312][ T7857] RIP: 0033:0x7f8dbeb9c799 [ 96.897327][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.897343][ T7857] RSP: 002b:00007f8dbfa64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.897360][ T7857] RAX: ffffffffffffffda RBX: 00007f8dbee16180 RCX: 00007f8dbeb9c799 [ 96.897372][ T7857] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 96.897382][ T7857] RBP: 00007f8dbfa64090 R08: 0000000000000000 R09: 0000000000000000 [ 96.897393][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.897403][ T7857] R13: 00007f8dbee16218 R14: 00007f8dbee16180 R15: 00007ffc61fe3208 [ 96.897444][ T7857] [ 97.821407][ T40] kauditd_printk_skb: 37864 callbacks suppressed [ 97.821419][ T40] audit: type=1400 audit(2000000007.399:120908): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.830328][ T40] audit: type=1400 audit(2000000007.409:120909): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.835806][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.837433][ T40] audit: type=1400 audit(2000000007.409:120910): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.839345][ T5639] audit: audit_lost=2973 audit_rate_limit=0 audit_backlog_limit=64 [ 97.839357][ T5639] audit: backlog limit exceeded [ 97.839530][ T5639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.846711][ T40] audit: type=1400 audit(2000000007.409:120911): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.849050][ T5639] audit: audit_lost=2974 audit_rate_limit=0 audit_backlog_limit=64 [ 97.850449][ T40] audit: type=1400 audit(2000000007.409:120912): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 98.195317][ T5945] Bluetooth: hci2: Unknown advertising packet type: 0x34 [ 98.195347][ T5945] Bluetooth: hci2: Malformed LE Event: 0x0d [ 98.691587][ T7951] FAULT_INJECTION: forcing a failure. [ 98.691587][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.696619][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.1.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.696652][ T7951] Tainted: [L]=SOFTLOCKUP [ 98.696657][ T7951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.696663][ T7951] Call Trace: [ 98.696667][ T7951] [ 98.696672][ T7951] dump_stack_lvl+0x100/0x190 [ 98.696694][ T7951] should_fail_ex.cold+0x5/0xa [ 98.696708][ T7951] _copy_from_iter+0x1f4/0x1690 [ 98.696725][ T7951] ? __asan_memset+0x23/0x50 [ 98.696740][ T7951] ? __pfx__copy_from_iter+0x10/0x10 [ 98.696755][ T7951] ? __pfx___alloc_skb+0x10/0x10 [ 98.696771][ T7951] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 98.696796][ T7951] netlink_sendmsg+0x808/0xda0 [ 98.696811][ T7951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.696822][ T7951] ? __might_fault+0xa0/0x140 [ 98.696841][ T7951] ____sys_sendmsg+0xa54/0xc30 [ 98.696856][ T7951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.696878][ T7951] ___sys_sendmsg+0x190/0x1e0 [ 98.696893][ T7951] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.696923][ T7951] __sys_sendmsg+0x170/0x220 [ 98.696934][ T7951] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.696953][ T7951] do_syscall_64+0x106/0xf80 [ 98.696964][ T7951] ? clear_bhb_loop+0x40/0x90 [ 98.696977][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.696988][ T7951] RIP: 0033:0x7fd8c9d9c799 [ 98.696998][ T7951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.697008][ T7951] RSP: 002b:00007fd8cabfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.697018][ T7951] RAX: ffffffffffffffda RBX: 00007fd8ca015fa0 RCX: 00007fd8c9d9c799 [ 98.697025][ T7951] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 98.697031][ T7951] RBP: 00007fd8cabfc090 R08: 0000000000000000 R09: 0000000000000000 [ 98.697037][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.697043][ T7951] R13: 00007fd8ca016038 R14: 00007fd8ca015fa0 R15: 00007ffce2e6ea38 [ 98.697056][ T7951] [ 98.831406][ T7961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7961 comm=syz.3.779 [ 98.891441][ T7965] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 98.925184][ T7965] bond2: entered promiscuous mode [ 98.927727][ T7965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.363246][ T8009] bond3: Unable to set up delay as MII monitoring is disabled [ 99.373001][ T8009] bond3 (unregistering): Released all slaves [ 99.500439][ T8020] TCP: TCP_TX_DELAY enabled [ 99.600257][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 99.604474][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 99.660405][ T8036] bond2: Unable to set up delay as MII monitoring is disabled [ 99.689367][ T8036] bond2 (unregistering): Released all slaves [ 99.836210][ T8056] x_tables: ip_tables: osf match: only valid for protocol 6 [ 99.884674][ T8059] FAULT_INJECTION: forcing a failure. [ 99.884674][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 99.888882][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.1.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.888908][ T8059] Tainted: [L]=SOFTLOCKUP [ 99.888913][ T8059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.888930][ T8059] Call Trace: [ 99.888936][ T8059] [ 99.888942][ T8059] dump_stack_lvl+0x100/0x190 [ 99.888974][ T8059] should_fail_ex.cold+0x5/0xa [ 99.888997][ T8059] should_failslab+0xc2/0x120 [ 99.889023][ T8059] __kmalloc_cache_noprof+0x7a/0x6f0 [ 99.889042][ T8059] ? tc_new_tfilter+0xdb0/0x23b0 [ 99.889061][ T8059] ? tcf_chain_tp_find+0x2b5/0x470 [ 99.889091][ T8059] tc_new_tfilter+0xdb0/0x23b0 [ 99.889121][ T8059] ? avc_has_perm_noaudit+0x100/0x3b0 [ 99.889144][ T8059] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 99.889169][ T8059] ? __pfx_tc_new_tfilter+0x10/0x10 [ 99.889198][ T8059] ? __lock_acquire+0x4a5/0x2630 [ 99.889237][ T8059] ? find_held_lock+0x2b/0x80 [ 99.889258][ T8059] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 99.889276][ T8059] ? __pfx_tc_new_tfilter+0x10/0x10 [ 99.889296][ T8059] rtnetlink_rcv_msg+0x95e/0xe90 [ 99.889315][ T8059] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.889339][ T8059] ? ref_tracker_free+0x37e/0x6c0 [ 99.889369][ T8059] netlink_rcv_skb+0x159/0x420 [ 99.889388][ T8059] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.889406][ T8059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.889434][ T8059] ? netlink_deliver_tap+0x1ae/0xcc0 [ 99.889458][ T8059] netlink_unicast+0x5aa/0x870 [ 99.889480][ T8059] ? __pfx_netlink_unicast+0x10/0x10 [ 99.889509][ T8059] netlink_sendmsg+0x8b0/0xda0 [ 99.889532][ T8059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.889549][ T8059] ? __might_fault+0xa0/0x140 [ 99.889580][ T8059] ____sys_sendmsg+0xa54/0xc30 [ 99.889604][ T8059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.889636][ T8059] ___sys_sendmsg+0x190/0x1e0 [ 99.889661][ T8059] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.889713][ T8059] __sys_sendmsg+0x170/0x220 [ 99.889731][ T8059] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.889763][ T8059] do_syscall_64+0x106/0xf80 [ 99.889780][ T8059] ? clear_bhb_loop+0x40/0x90 [ 99.889801][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.889818][ T8059] RIP: 0033:0x7fd8c9d9c799 [ 99.889832][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.889847][ T8059] RSP: 002b:00007fd8cabfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.889865][ T8059] RAX: ffffffffffffffda RBX: 00007fd8ca015fa0 RCX: 00007fd8c9d9c799 [ 99.889876][ T8059] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 99.889886][ T8059] RBP: 00007fd8cabfc090 R08: 0000000000000000 R09: 0000000000000000 [ 99.889897][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.889906][ T8059] R13: 00007fd8ca016038 R14: 00007fd8ca015fa0 R15: 00007ffce2e6ea38 [ 99.889934][ T8059] [ 99.981339][ T1327] ------------[ cut here ]------------ [ 99.990394][ T1327] [CRTC:37:crtc-0] vblank wait timed out [ 99.993108][ T1327] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#3: kworker/3:2/1327 [ 99.999035][ T1327] Modules linked in: [ 100.001092][ T1327] CPU: 3 UID: 0 PID: 1327 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.005907][ T1327] Tainted: [L]=SOFTLOCKUP [ 100.007825][ T1327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.012356][ T1327] Workqueue: events drm_fb_helper_damage_work [ 100.015081][ T1327] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 100.018508][ T1327] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 98 f5 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 c3 11 66 fc e9 7c fe ff ff e8 a9 [ 100.026988][ T1327] RSP: 0018:ffffc9000686f6f0 EFLAGS: 00010246 [ 100.029715][ T1327] RAX: 0000000000000000 RBX: ffff888101360040 RCX: 1ffff1102026c023 [ 100.033295][ T1327] RDX: ffff888025da4f80 RSI: 0000000000000025 RDI: ffffffff90e48280 [ 100.036768][ T1327] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 100.040224][ T1327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 100.043893][ T1327] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802d22e400 [ 100.047379][ T1327] FS: 0000000000000000(0000) GS:ffff8880d6647000(0000) knlGS:0000000000000000 [ 100.051372][ T1327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.054131][ T1327] CR2: 0000001b2f563fff CR3: 0000000037d94000 CR4: 0000000000352ef0 [ 100.057607][ T1327] Call Trace: [ 100.058965][ T1327] [ 100.060328][ T1327] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 100.063737][ T1327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.066341][ T1327] ? lockdep_hardirqs_on+0x78/0x100 [ 100.068598][ T1327] ? __pfx_autoremove_wake_function+0x10/0x10 [ 100.071344][ T1327] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 100.074220][ T1327] drm_atomic_helper_commit_tail+0xff/0x130 [ 100.076881][ T1327] commit_tail+0x338/0x430 [ 100.078893][ T1327] drm_atomic_helper_commit+0x303/0x380 [ 100.081635][ T1327] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 100.084345][ T1327] drm_atomic_commit+0x230/0x300 [ 100.086559][ T1327] ? __pfx_drm_atomic_commit+0x10/0x10 [ 100.088863][ T1327] ? __pfx___drm_printfn_info+0x10/0x10 [ 100.090720][ T1327] ? modeset_lock+0x114/0x6d0 [ 100.092629][ T1327] drm_atomic_helper_dirtyfb+0x603/0x790 [ 100.094927][ T1327] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 100.097294][ T1327] ? do_raw_spin_lock+0x128/0x260 [ 100.099251][ T1327] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 100.101693][ T1327] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 100.103657][ T1327] drm_fb_helper_damage_work+0x348/0x640 [ 100.105500][ T1327] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 100.107504][ T1327] ? rcu_is_watching+0x12/0xc0 [ 100.109095][ T1327] process_one_work+0x9d7/0x1920 [ 100.110748][ T1327] ? __pfx_process_one_work+0x10/0x10 [ 100.112624][ T1327] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 100.114643][ T1327] worker_thread+0x5da/0xe40 [ 100.116172][ T1327] ? __pfx_worker_thread+0x10/0x10 [ 100.117862][ T1327] ? kthread+0x13a/0x450 [ 100.119272][ T1327] ? __pfx_worker_thread+0x10/0x10 [ 100.121004][ T1327] kthread+0x370/0x450 [ 100.122419][ T1327] ? __pfx_kthread+0x10/0x10 [ 100.123944][ T1327] ret_from_fork+0x754/0xd80 [ 100.125474][ T1327] ? __pfx_ret_from_fork+0x10/0x10 [ 100.127146][ T1327] ? __switch_to+0x7b4/0x1120 [ 100.128707][ T1327] ? __pfx_kthread+0x10/0x10 [ 100.130241][ T1327] ret_from_fork_asm+0x1a/0x30 [ 100.131895][ T1327] [ 100.132933][ T1327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.135272][ T1327] CPU: 3 UID: 0 PID: 1327 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.138641][ T1327] Tainted: [L]=SOFTLOCKUP [ 100.140043][ T1327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.143211][ T1327] Workqueue: events drm_fb_helper_damage_work [ 100.145143][ T1327] Call Trace: [ 100.146224][ T1327] [ 100.147174][ T1327] dump_stack_lvl+0x100/0x190 [ 100.148676][ T1327] vpanic+0x552/0x970 [ 100.149977][ T1327] ? __pfx_vpanic+0x10/0x10 [ 100.151447][ T1327] panic+0xd1/0xe0 [ 100.152706][ T1327] ? __pfx_panic+0x10/0x10 [ 100.154165][ T1327] ? check_panic_on_warn+0x1f/0x90 [ 100.155838][ T1327] check_panic_on_warn.cold+0x19/0x34 [ 100.157581][ T1327] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 100.159939][ T1327] __warn.cold+0x191/0x348 [ 100.161422][ T1327] __report_bug+0x296/0x3d0 [ 100.162867][ T1327] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 100.165195][ T1327] ? __pfx___report_bug+0x10/0x10 [ 100.166840][ T1327] ? lockdep_hardirqs_on+0x78/0x100 [ 100.168536][ T1327] report_bug_entry+0xe1/0x290 [ 100.170139][ T1327] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 100.172476][ T1327] handle_bug+0x1c9/0x2a0 [ 100.173908][ T1327] exc_invalid_op+0x17/0x50 [ 100.175401][ T1327] asm_exc_invalid_op+0x1a/0x20 [ 100.176994][ T1327] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 100.179514][ T1327] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 98 f5 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 c3 11 66 fc e9 7c fe ff ff e8 a9 [ 100.185449][ T1327] RSP: 0018:ffffc9000686f6f0 EFLAGS: 00010246 [ 100.187396][ T1327] RAX: 0000000000000000 RBX: ffff888101360040 RCX: 1ffff1102026c023 [ 100.189976][ T1327] RDX: ffff888025da4f80 RSI: 0000000000000025 RDI: ffffffff90e48280 [ 100.192543][ T1327] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 100.195103][ T1327] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 100.197651][ T1327] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802d22e400 [ 100.200235][ T1327] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 100.202670][ T1327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.204564][ T1327] ? lockdep_hardirqs_on+0x78/0x100 [ 100.206279][ T1327] ? __pfx_autoremove_wake_function+0x10/0x10 [ 100.208260][ T1327] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 100.210379][ T1327] drm_atomic_helper_commit_tail+0xff/0x130 [ 100.212313][ T1327] commit_tail+0x338/0x430 [ 100.213790][ T1327] drm_atomic_helper_commit+0x303/0x380 [ 100.215584][ T1327] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 100.217564][ T1327] drm_atomic_commit+0x230/0x300 [ 100.219182][ T1327] ? __pfx_drm_atomic_commit+0x10/0x10 [ 100.220989][ T1327] ? __pfx___drm_printfn_info+0x10/0x10 [ 100.222785][ T1327] ? modeset_lock+0x114/0x6d0 [ 100.224334][ T1327] drm_atomic_helper_dirtyfb+0x603/0x790 [ 100.226163][ T1327] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 100.228163][ T1327] ? do_raw_spin_lock+0x128/0x260 [ 100.229848][ T1327] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 100.231857][ T1327] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 100.233878][ T1327] drm_fb_helper_damage_work+0x348/0x640 [ 100.235700][ T1327] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 100.237718][ T1327] ? rcu_is_watching+0x12/0xc0 [ 100.239286][ T1327] process_one_work+0x9d7/0x1920 [ 100.240943][ T1327] ? __pfx_process_one_work+0x10/0x10 [ 100.242683][ T1327] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 100.244674][ T1327] worker_thread+0x5da/0xe40 [ 100.246192][ T1327] ? __pfx_worker_thread+0x10/0x10 [ 100.247861][ T1327] ? kthread+0x13a/0x450 [ 100.249252][ T1327] ? __pfx_worker_thread+0x10/0x10 [ 100.250901][ T1327] kthread+0x370/0x450 [ 100.252241][ T1327] ? __pfx_kthread+0x10/0x10 [ 100.253714][ T1327] ret_from_fork+0x754/0xd80 [ 100.255214][ T1327] ? __pfx_ret_from_fork+0x10/0x10 [ 100.256897][ T1327] ? __switch_to+0x7b4/0x1120 [ 100.258437][ T1327] ? __pfx_kthread+0x10/0x10 [ 100.259985][ T1327] ret_from_fork_asm+0x1a/0x30 [ 100.261573][ T1327] [ 100.263274][ T1327] Kernel Offset: disabled [ 100.264699][ T1327] Rebooting in 86400 seconds..