last executing test programs: 2m5.917305672s ago: executing program 1 (id=45): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) 2m5.248722485s ago: executing program 1 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) 2m4.999229552s ago: executing program 1 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x6, 0x5, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/17, 0x88}, 0x1000006}], 0x1, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0xffffffffffffffff) 2m2.188142467s ago: executing program 1 (id=48): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000003c0)={r3}) 2m2.030398424s ago: executing program 1 (id=49): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x1b3, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x93, 0x42, 0x97, 0x40, 0x2357, 0x601, 0x317c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a1, 0x2, 0x1d, 0x2, 0x80, 0x0, "", [{{0x9, 0x4, 0x1c, 0x8, 0xb, 0xc4, 0xea, 0x5e, 0xd0, [], [{{0x9, 0x5, 0x9, 0xc, 0x8, 0x2, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x15, 0x3ff, 0x0, 0xff, 0xfa}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0xe, 0x5, 0x97, [@generic={0x1d, 0x21, "4db6a7dbb307ad2b05cd6695dddb0ef3e6f0d72856b3e8f14d7e32"}, @generic={0x94, 0x1, "7eb1dfc8a29e7883e6ed3bf6a55c332eeff9af4409b0d39d138a600e10e51cef5f7ff186a4a5f7a3aa4814d8563ca1f61ee3f88555130a6e6fc0c0cd0b98ac62319712edb22771b5823e668e3c67d8dd9fe048a56e6d8eccf4f3e2cc63c4cb15864fa830fc093bd1b17acb54afe93ed0c0349dce8a2a218c24cb4405f9c51343883aee5526aba5a7d999dcaacda52ada4fa7"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x0, 0x3, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x7, 0xf9}}, {{0x9, 0x5, 0xd, 0x808f84ea70e20f19, 0x40, 0x10, 0x7, 0x3, [@generic={0x32, 0xc, "d65f355a54df431dc13894bda7b38eaebfbd6ccecca2b99797986ba5843ce67faba6f8a85a481a4bfe77aa1f8178cc55"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xb}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xb, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x8f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x60, 0x7, 0x0, [@generic={0x14, 0x22, "4e1c9a559918e290a2693bfcb7837f099b2c"}, @generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0xd, 0x8, 0x7f}}, {{0x9, 0x5, 0x0, 0x14, 0x400, 0x6, 0x2c, 0x7f}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0xc, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}]}}, {{0x9, 0x4, 0x5b, 0xe, 0x0, 0x5a, 0xfd, 0x50, 0x2}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x1d8, 0xa, 0x40, 0x2, 0x8}, 0x8, &(0x7f00000015c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x18, &(0x7f0000000040)=@string={0x18, 0x3, "f4b4f9a2fcaed0da736a27a48da819e0295c2c72b1c2"}}, {0xe, &(0x7f00000000c0)=@string={0xe, 0x3, "ed06fb2b99250585d149f192"}}]}) r2 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m1.89026394s ago: executing program 1 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x370a, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1m22.578638043s ago: executing program 0 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f0000008740)={0x14, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000010) 1m22.499396582s ago: executing program 0 (id=74): socket(0x2, 0x80805, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/34], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m20.630528715s ago: executing program 0 (id=75): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000280)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 1m17.402462095s ago: executing program 0 (id=76): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004580)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000240)="126f364d3558f1096de63bb3d7e13e50f0", 0x11}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x20000000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 1m16.581334944s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, 0x0, &(0x7f0000000040)='\x19\x06\xfa\xb2\xa9', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) getgroups(0x0, &(0x7f00000015c0)) 1m16.539190538s ago: executing program 32 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x370a, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1m5.421287334s ago: executing program 0 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 19.477891537s ago: executing program 33 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 5.409803823s ago: executing program 2 (id=121): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 5.288401836s ago: executing program 2 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 5.099149257s ago: executing program 2 (id=123): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 3.40713911s ago: executing program 3 (id=126): semop(0x0, &(0x7f000000cd40)=[{0x4, 0xffff, 0x1000}, {0x2, 0x400, 0x1000}], 0x2) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 3.31828022s ago: executing program 2 (id=127): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/55, 0x37}, 0x6}], 0x1, 0x4000822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3.217447681s ago: executing program 3 (id=128): r0 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000280)=0x3) 3.021591082s ago: executing program 3 (id=129): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x1f, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @remote, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x5, [{@private=0xa010100, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x0, [{@loopback, 0xffffff00}, {@local, 0x8}]}]}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x98}], 0x1, 0x12160, 0x0) 2.654695352s ago: executing program 3 (id=130): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 2.310011119s ago: executing program 2 (id=131): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b00)=';', 0x1}, {&(0x7f0000000b40)="7ea22996", 0x4}, {0x0}, {0x0}], 0x4) 1.739829911s ago: executing program 2 (id=132): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3fc}}, 0x0, 0x0, 0x18, 0x0, "b2e4f91cf70100ffff4c2b19ebef230a33685fbacfcf3b4e455e573d821422f08f671600000000000000000000000000000000000000000200"}, 0xd8) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) 298.74µs ago: executing program 3 (id=133): r0 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000280)=0x3) 0s ago: executing program 3 (id=134): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x1f, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @remote, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x5, [{@private=0xa010100, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x0, [{@loopback, 0xffffff00}, {@local, 0x8}]}]}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x98}], 0x1, 0x12160, 0x0) kernel console output (not intermixed with test programs): [ 44.447785][ T28] audit: type=1400 audit(44.370:91): avc: denied { read write } for pid=3093 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.450505][ T28] audit: type=1400 audit(44.370:92): avc: denied { open } for pid=3093 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:19618' (ED25519) to the list of known hosts. [ 62.242695][ T28] audit: type=1400 audit(62.150:93): avc: denied { name_bind } for pid=3096 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.779471][ T28] audit: type=1400 audit(63.690:94): avc: denied { execute } for pid=3097 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.846909][ T28] audit: type=1400 audit(63.770:95): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.647507][ T28] audit: type=1400 audit(66.570:96): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.653699][ T28] audit: type=1400 audit(66.580:97): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.671088][ T3097] cgroup: Unknown subsys name 'net' [ 66.680278][ T28] audit: type=1400 audit(66.600:98): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.840774][ T3097] cgroup: Unknown subsys name 'cpuset' [ 66.847860][ T3097] cgroup: Unknown subsys name 'hugetlb' [ 66.849177][ T3097] cgroup: Unknown subsys name 'rlimit' [ 67.067918][ T28] audit: type=1400 audit(66.990:99): avc: denied { setattr } for pid=3097 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.072692][ T28] audit: type=1400 audit(67.000:100): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.075694][ T28] audit: type=1400 audit(67.000:101): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.290783][ T3099] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.293437][ T28] audit: type=1400 audit(67.220:102): avc: denied { relabelto } for pid=3099 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.300969][ T28] audit: type=1400 audit(67.230:103): avc: denied { write } for pid=3099 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 67.341558][ T28] audit: type=1400 audit(67.270:104): avc: denied { read } for pid=3097 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.344091][ T28] audit: type=1400 audit(67.270:105): avc: denied { open } for pid=3097 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.147529][ T3097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.322040][ T28] audit: type=1400 audit(77.250:106): avc: denied { execmem } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.386158][ T28] audit: type=1400 audit(77.310:107): avc: denied { read } for pid=3102 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.388095][ T28] audit: type=1400 audit(77.310:108): avc: denied { open } for pid=3102 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.395214][ T28] audit: type=1400 audit(77.320:109): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.415990][ T28] audit: type=1400 audit(77.340:110): avc: denied { module_request } for pid=3103 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.417513][ T28] audit: type=1400 audit(77.340:111): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.467553][ T28] audit: type=1400 audit(77.390:112): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.078625][ T28] audit: type=1400 audit(78.000:113): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.184681][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.192575][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.283142][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.295956][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.074904][ T3103] hsr_slave_0: entered promiscuous mode [ 80.084430][ T3103] hsr_slave_1: entered promiscuous mode [ 80.200558][ T3102] hsr_slave_0: entered promiscuous mode [ 80.202762][ T3102] hsr_slave_1: entered promiscuous mode [ 80.204308][ T3102] debugfs: 'hsr0' already exists in 'hsr' [ 80.204907][ T3102] Cannot create hsr debugfs directory [ 80.653346][ T28] audit: type=1400 audit(80.580:114): avc: denied { create } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.670922][ T28] audit: type=1400 audit(80.580:115): avc: denied { write } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.680902][ T3103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.694768][ T3103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.710944][ T3103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.716994][ T3103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.730298][ T3103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.737520][ T3103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.742990][ T3103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.752498][ T3103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.822735][ T3102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.831490][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.836386][ T3102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.843629][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.853872][ T3102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.861464][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.866957][ T3102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.875080][ T3102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.536586][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.551480][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.064920][ T3102] veth0_vlan: entered promiscuous mode [ 84.095238][ T3102] veth1_vlan: entered promiscuous mode [ 84.196790][ T3103] veth0_vlan: entered promiscuous mode [ 84.211620][ T3102] veth0_macvtap: entered promiscuous mode [ 84.228546][ T3102] veth1_macvtap: entered promiscuous mode [ 84.236880][ T3103] veth1_vlan: entered promiscuous mode [ 84.332086][ T2118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.335899][ T3103] veth0_macvtap: entered promiscuous mode [ 84.344456][ T2118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.344947][ T2118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.345277][ T2118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.385533][ T3103] veth1_macvtap: entered promiscuous mode [ 84.468350][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 84.468714][ T28] audit: type=1400 audit(84.390:117): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.476349][ T28] audit: type=1400 audit(84.400:118): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.ppTumP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.485395][ T28] audit: type=1400 audit(84.410:119): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.500472][ T28] audit: type=1400 audit(84.420:120): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.ppTumP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.505801][ T28] audit: type=1400 audit(84.430:121): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.ppTumP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.527673][ T28] audit: type=1400 audit(84.450:122): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.536120][ T28] audit: type=1400 audit(84.460:123): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.541493][ T28] audit: type=1400 audit(84.460:124): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.548093][ T2118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548509][ T2118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548603][ T2118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548748][ T2118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.556719][ T28] audit: type=1400 audit(84.480:125): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.565270][ T28] audit: type=1400 audit(84.490:126): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.658812][ T3102] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.921105][ T91] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.130464][ T91] usb 2-1: Using ep0 maxpacket: 8 [ 88.190122][ T91] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 88.190591][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.190912][ T91] usb 2-1: Product: syz [ 88.191081][ T91] usb 2-1: Manufacturer: syz [ 88.191264][ T91] usb 2-1: SerialNumber: syz [ 88.554400][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.557711][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.641045][ T91] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 88.645206][ T91] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.737705][ T91] usb 2-1: USB disconnect, device number 2 [ 90.755150][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 90.757425][ T28] audit: type=1400 audit(90.680:145): avc: denied { create } for pid=3767 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.776043][ T28] audit: type=1400 audit(90.700:146): avc: denied { setopt } for pid=3767 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.662683][ T28] audit: type=1400 audit(91.590:147): avc: denied { ioctl } for pid=3767 comm="syz.1.13" path="socket:[3131]" dev="sockfs" ino=3131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.686128][ T28] audit: type=1400 audit(91.610:148): avc: denied { bind } for pid=3767 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.280548][ T3725] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.440243][ T3725] usb 2-1: Using ep0 maxpacket: 8 [ 92.484546][ T3725] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 92.539193][ T3725] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 92.539632][ T3725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.539897][ T3725] usb 2-1: Product: syz [ 92.539943][ T3725] usb 2-1: Manufacturer: syz [ 92.539960][ T3725] usb 2-1: SerialNumber: syz [ 92.543641][ T3725] usb 2-1: config 0 descriptor?? [ 92.767685][ T28] audit: type=1400 audit(92.690:149): avc: denied { append } for pid=3771 comm="syz.1.14" name="i2c-1" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.811272][ T3772] i2c i2c-1: sendbytes: error -110 [ 95.051115][ T23] usb 2-1: USB disconnect, device number 3 [ 95.079083][ T28] audit: type=1400 audit(95.000:150): avc: denied { setopt } for pid=3783 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.154342][ T3789] mmap: syz.1.16 (3789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.195380][ T28] audit: type=1400 audit(102.120:151): avc: denied { create } for pid=3803 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.212403][ T28] audit: type=1400 audit(102.140:152): avc: denied { connect } for pid=3803 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.812203][ T28] audit: type=1400 audit(104.740:153): avc: denied { name_bind } for pid=3807 comm="syz.0.22" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.491518][ T28] audit: type=1400 audit(105.420:154): avc: denied { create } for pid=3807 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.495784][ T28] audit: type=1400 audit(105.420:155): avc: denied { connect } for pid=3807 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.517710][ T28] audit: type=1400 audit(105.440:156): avc: denied { setopt } for pid=3807 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.591175][ T28] audit: type=1400 audit(107.510:157): avc: denied { relabelfrom } for pid=3811 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.591586][ T28] audit: type=1400 audit(107.510:158): avc: denied { relabelto } for pid=3811 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.692556][ T28] audit: type=1400 audit(108.610:159): avc: denied { name_bind } for pid=3824 comm="syz.1.25" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.692964][ T28] audit: type=1400 audit(108.620:160): avc: denied { node_bind } for pid=3824 comm="syz.1.25" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.641014][ T28] audit: type=1400 audit(110.570:161): avc: denied { unmount } for pid=3827 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.470031][ T28] audit: type=1400 audit(111.390:162): avc: denied { allowed } for pid=3831 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.513246][ T28] audit: type=1400 audit(113.440:163): avc: denied { create } for pid=3841 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.540418][ T28] audit: type=1400 audit(113.460:164): avc: denied { write } for pid=3841 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.064490][ T28] audit: type=1400 audit(113.990:165): avc: denied { bind } for pid=3845 comm="syz.1.34" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.064990][ T28] audit: type=1400 audit(113.990:166): avc: denied { name_bind } for pid=3845 comm="syz.1.34" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 114.068258][ T28] audit: type=1400 audit(113.990:167): avc: denied { node_bind } for pid=3845 comm="syz.1.34" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 114.082191][ T28] audit: type=1400 audit(114.010:168): avc: denied { write } for pid=3845 comm="syz.1.34" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.764361][ T28] audit: type=1400 audit(114.690:169): avc: denied { create } for pid=3847 comm="syz.1.35" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.781549][ T28] audit: type=1400 audit(114.710:170): avc: denied { ioctl } for pid=3847 comm="syz.1.35" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2490 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.980999][ T28] audit: type=1400 audit(121.900:171): avc: denied { create } for pid=3871 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.983173][ T28] audit: type=1400 audit(121.910:172): avc: denied { write } for pid=3871 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.987375][ T28] audit: type=1400 audit(121.910:173): avc: denied { nlmsg_read } for pid=3871 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.370764][ T28] audit: type=1400 audit(125.300:174): avc: denied { create } for pid=3882 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.427016][ T28] audit: type=1400 audit(125.350:175): avc: denied { bind } for pid=3882 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.437121][ T28] audit: type=1400 audit(125.360:176): avc: denied { accept } for pid=3882 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.457588][ T28] audit: type=1400 audit(125.380:177): avc: denied { block_suspend } for pid=3882 comm="syz.0.51" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.076131][ T28] audit: type=1400 audit(126.000:178): avc: denied { map } for pid=3888 comm="syz.0.52" path="socket:[3242]" dev="sockfs" ino=3242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.077405][ T28] audit: type=1400 audit(126.000:179): avc: denied { read write } for pid=3888 comm="syz.0.52" path="socket:[3242]" dev="sockfs" ino=3242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.110678][ T28] audit: type=1400 audit(126.040:180): avc: denied { execute } for pid=3888 comm="syz.0.52" path="/9/cpuacct.usage_sys" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.058780][ T28] audit: type=1400 audit(126.980:181): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.193283][ T28] audit: type=1400 audit(127.120:182): avc: denied { create } for pid=3900 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.344451][ T3901] Zero length message leads to an empty skb [ 127.606593][ T28] audit: type=1400 audit(127.530:183): avc: denied { read } for pid=3903 comm="syz.0.56" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.607112][ T28] audit: type=1400 audit(127.530:184): avc: denied { open } for pid=3903 comm="syz.0.56" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.624779][ T28] audit: type=1400 audit(127.550:185): avc: denied { ioctl } for pid=3903 comm="syz.0.56" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.634717][ T28] audit: type=1400 audit(127.560:186): avc: denied { set_context_mgr } for pid=3903 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.653694][ T28] audit: type=1400 audit(127.580:187): avc: denied { write } for pid=3903 comm="syz.0.56" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.435690][ T28] audit: type=1400 audit(130.360:188): avc: denied { create } for pid=3906 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.020315][ T1805] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.180032][ T1805] usb 1-1: Using ep0 maxpacket: 32 [ 138.185627][ T1805] usb 1-1: config 0 has no interfaces? [ 138.186405][ T1805] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.187236][ T1805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.192228][ T1805] usb 1-1: config 0 descriptor?? [ 148.951589][ T3725] usb 1-1: USB disconnect, device number 2 [ 149.390958][ T3725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.579138][ T3725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.585960][ T3725] usb 1-1: config 4 has an invalid interface number: 109 but max is 0 [ 149.586420][ T3725] usb 1-1: config 4 has no interface number 0 [ 149.586536][ T3725] usb 1-1: config 4 interface 109 has no altsetting 0 [ 149.600452][ T3725] usb 1-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 149.600786][ T3725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.601030][ T3725] usb 1-1: Product: syz [ 149.601078][ T3725] usb 1-1: Manufacturer: syz [ 149.601103][ T3725] usb 1-1: SerialNumber: syz [ 149.846311][ T3725] usb 1-1: USB disconnect, device number 3 [ 150.491634][ T28] audit: type=1400 audit(150.420:189): avc: denied { setopt } for pid=3941 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.893394][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 156.554483][ T28] audit: type=1326 audit(156.480:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.560253][ T28] audit: type=1326 audit(156.480:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.565702][ T28] audit: type=1326 audit(156.490:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=237 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.566538][ T28] audit: type=1326 audit(156.490:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.566631][ T28] audit: type=1326 audit(156.490:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.574244][ T28] audit: type=1326 audit(156.500:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.575614][ T28] audit: type=1326 audit(156.500:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.576580][ T28] audit: type=1326 audit(156.500:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130810 code=0x7ffc0000 [ 156.577361][ T28] audit: type=1326 audit(156.500:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3967 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130810 code=0x7ffc0000 [ 163.356978][ T28] audit: type=1400 audit(163.280:199): avc: denied { nlmsg_write } for pid=3982 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.718545][ T28] audit: type=1400 audit(170.640:200): avc: denied { write } for pid=4000 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 173.402611][ T4002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.407346][ T4002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.296973][ T4002] hsr_slave_0: entered promiscuous mode [ 175.312015][ T4002] hsr_slave_1: entered promiscuous mode [ 175.313479][ T4002] debugfs: 'hsr0' already exists in 'hsr' [ 175.313685][ T4002] Cannot create hsr debugfs directory [ 175.842150][ T4002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.846603][ T4002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.856262][ T4002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.862637][ T4002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.865411][ T4002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.877270][ T4002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.891316][ T4002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.899048][ T4002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.038819][ T4002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.672512][ T4002] veth0_vlan: entered promiscuous mode [ 182.724589][ T4002] veth1_vlan: entered promiscuous mode [ 182.880056][ T4002] veth0_macvtap: entered promiscuous mode [ 182.887381][ T4002] veth1_macvtap: entered promiscuous mode [ 182.982115][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.982671][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.982736][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.982768][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.191365][ T4321] random: crng reseeded on system resumption [ 191.239215][ T4327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.245418][ T4327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.947561][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.042221][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.142065][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.268139][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.178041][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.223934][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.237448][ T12] bond0 (unregistering): Released all slaves [ 198.397010][ T12] hsr_slave_0: left promiscuous mode [ 198.405987][ T12] hsr_slave_1: left promiscuous mode [ 198.433061][ T12] veth1_macvtap: left promiscuous mode [ 198.440717][ T12] veth0_macvtap: left promiscuous mode [ 198.443579][ T12] veth1_vlan: left promiscuous mode [ 198.444169][ T12] veth0_vlan: left promiscuous mode [ 200.215407][ T28] audit: type=1400 audit(200.140:201): avc: denied { write } for pid=4360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.476979][ T28] audit: type=1400 audit(200.400:202): avc: denied { write } for pid=4363 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.761938][ T2958] 8021q: adding VLAN 0 to HW filter on device eth1 [ 201.688443][ T28] audit: type=1400 audit(201.610:203): avc: denied { write } for pid=4367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.170845][ T28] audit: type=1400 audit(202.090:204): avc: denied { write } for pid=4370 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.454221][ T2958] 8021q: adding VLAN 0 to HW filter on device eth2 [ 203.380359][ T28] audit: type=1400 audit(203.300:205): avc: denied { write } for pid=4374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.775030][ T28] audit: type=1400 audit(203.700:206): avc: denied { write } for pid=4377 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.091384][ T2958] 8021q: adding VLAN 0 to HW filter on device eth3 [ 204.801470][ T28] audit: type=1400 audit(204.730:207): avc: denied { write } for pid=4381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.991416][ T28] audit: type=1400 audit(204.920:208): avc: denied { write } for pid=4384 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.160666][ T2958] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.412152][ T28] audit: type=1400 audit(207.340:209): avc: denied { read } for pid=4400 comm="syz.2.96" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.537263][ T4403] ======================================================= [ 207.537263][ T4403] WARNING: The mand mount option has been deprecated and [ 207.537263][ T4403] and is ignored by this kernel. Remove the mand [ 207.537263][ T4403] option from the mount to silence this warning. [ 207.537263][ T4403] ======================================================= [ 207.559154][ T28] audit: type=1400 audit(207.470:210): avc: denied { remount } for pid=4402 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.207727][ T4421] netlink: 'syz.2.103': attribute type 13 has an invalid length. [ 214.631953][ T28] audit: type=1400 audit(214.560:211): avc: denied { create } for pid=4429 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.634140][ T28] audit: type=1400 audit(214.560:212): avc: denied { ioctl } for pid=4429 comm="syz.2.107" path="socket:[4030]" dev="sockfs" ino=4030 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.512796][ T28] audit: type=1400 audit(217.440:213): avc: denied { write } for pid=4436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.755268][ T28] audit: type=1400 audit(217.680:214): avc: denied { write } for pid=4439 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.450315][ T28] audit: type=1400 audit(218.370:215): avc: denied { write } for pid=4442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.966018][ T28] audit: type=1400 audit(218.890:216): avc: denied { write } for pid=4445 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.910969][ T28] audit: type=1400 audit(219.830:217): avc: denied { write } for pid=4448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.424056][ T28] audit: type=1400 audit(220.350:218): avc: denied { write } for pid=4451 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.320340][ T28] audit: type=1400 audit(221.240:219): avc: denied { write } for pid=4454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.610136][ T28] audit: type=1400 audit(221.530:220): avc: denied { write } for pid=4457 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.505905][ T28] audit: type=1400 audit(223.430:221): avc: denied { write } for pid=4469 comm="syz.2.112" name="route" dev="proc" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.376715][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.387689][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.904944][ T4474] hsr_slave_0: entered promiscuous mode [ 234.906766][ T4474] hsr_slave_1: entered promiscuous mode [ 235.685372][ T4474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.705511][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.708953][ T4474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.717929][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.732237][ T4474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.738707][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.743083][ T4474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.769186][ T4474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.988506][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.736983][ T4474] veth0_vlan: entered promiscuous mode [ 241.775898][ T4474] veth1_vlan: entered promiscuous mode [ 241.853991][ T4474] veth0_macvtap: entered promiscuous mode [ 241.877180][ T4474] veth1_macvtap: entered promiscuous mode [ 241.957012][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.957971][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.958371][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.958625][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.473640][ T28] audit: type=1326 audit(242.400:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.473899][ T28] audit: type=1326 audit(242.400:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.478656][ T28] audit: type=1326 audit(242.400:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.480303][ T28] audit: type=1326 audit(242.400:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.481441][ T28] audit: type=1326 audit(242.410:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.485141][ T28] audit: type=1326 audit(242.410:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.486169][ T28] audit: type=1326 audit(242.410:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.487292][ T28] audit: type=1326 audit(242.410:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.489991][ T28] audit: type=1326 audit(242.410:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 242.491052][ T28] audit: type=1326 audit(242.410:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.3.125" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 244.185688][ T4816] ALSA: mixer_oss: invalid OSS volume ';~¢)–' [ 244.538797][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.540342][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 246.164202][ T23] ------------[ cut here ]------------ [ 246.164963][ T23] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x19c/0x21c, CPU#1: kworker/1:0/23 [ 246.168253][ T23] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 246.168690][ T23] Modules linked in: [ 246.169929][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.171302][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT [ 246.172147][ T23] Hardware name: ARM-Versatile Express [ 246.172906][ T23] Workqueue: events drm_fb_helper_damage_work [ 246.173718][ T23] Call trace: [ 246.174380][ T23] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 246.175314][ T23] r7:82a1eab8 r6:00000000 r5:8231eae4 r4:00000001 [ 246.175978][ T23] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 246.176593][ T23] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 246.177219][ T23] r7:82a1eab8 r6:00000000 r5:8317a580 r4:82c7cd3c [ 246.177662][ T23] [<8021e398>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 246.178328][ T23] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 246.178976][ T23] r7:80b594b0 [ 246.179267][ T23] [<80202818>] (panic) from [<80250854>] (get_taint+0x0/0x1c) [ 246.179856][ T23] r3:82a0b544 r2:00000001 r1:823055ac r0:8230cea8 [ 246.180325][ T23] [<802507dc>] (check_panic_on_warn) from [<802509d0>] (__warn+0x98/0x1ac) [ 246.180935][ T23] [<80250938>] (__warn) from [<80250ccc>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 246.181630][ T23] r8:00000009 r7:8239b3f0 r6:df879dfc r5:8317a580 r4:00000000 [ 246.182172][ T23] [<80250ae8>] (warn_slowpath_fmt) from [<80b594b0>] (drm_crtc_wait_one_vblank+0x19c/0x21c) [ 246.183039][ T23] r10:83e75e44 r9:ffffff92 r8:00000000 r7:000038c3 r6:00000000 r5:00000000 [ 246.183627][ T23] r4:831c5800 [ 246.183911][ T23] [<80b59314>] (drm_crtc_wait_one_vblank) from [<80b5d07c>] (drm_client_modeset_wait_for_vblank+0x60/0x74) [ 246.184640][ T23] r10:8302ae05 r9:831c5800 r8:83ff5300 r7:df879ec4 r6:831c5800 r5:00000000 [ 246.185281][ T23] r4:83eb3040 [ 246.185626][ T23] [<80b5d01c>] (drm_client_modeset_wait_for_vblank) from [<80b76904>] (drm_fb_helper_damage_work+0x80/0x1e0) [ 246.186470][ T23] r7:df879ec4 r6:83ff53b4 r5:00000000 r4:83ff5394 [ 246.186951][ T23] [<80b76884>] (drm_fb_helper_damage_work) from [<80276068>] (process_one_work+0x1c8/0x5a0) [ 246.187730][ T23] r9:8317a580 r8:01800000 r7:ddde4e00 r6:8302ae00 r5:83ff5394 r4:83115200 [ 246.188362][ T23] [<80275ea0>] (process_one_work) from [<80276d34>] (worker_thread+0x16c/0x318) [ 246.189072][ T23] r10:ddde4e00 r9:83115230 r8:8317a580 r7:82a03d80 r6:ddde4e20 r5:ddde4e00 [ 246.189695][ T23] r4:83115200 [ 246.190040][ T23] [<80276bc8>] (worker_thread) from [<80281550>] (kthread+0x11c/0x154) [ 246.190755][ T23] r10:00000000 r9:df819d10 r8:83115180 r7:83115200 r6:80276bc8 r5:8317a580 [ 246.191399][ T23] r4:83110540 [ 246.191641][ T23] [<80281434>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 246.192316][ T23] Exception stack(0xdf879fb0 to 0xdf879ff8) [ 246.192953][ T23] 9fa0: 00000000 00000000 00000000 00000000 [ 246.193597][ T23] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 246.194162][ T23] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 246.194723][ T23] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281434 r4:83110540 [ 250.082664][ T23] SMP: failed to stop secondary CPUs [ 250.084419][ T23] Rebooting in 86400 seconds..