last executing test programs: 699.220775ms ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 640.213671ms ago: executing program 2 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$sr(0xffffffffffffff9c, 0x0, 0x40040, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000500)={0x2, 0x0, {&(0x7f00000000c0)=""/13, 0xd, &(0x7f00000005c0)=""/178, 0x3, 0x2}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 639.560399ms ago: executing program 3 (id=495): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x84841, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x4000, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x5c25, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x7ffd, 0xfe, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x200001, 0x1a449, 0x3, 0x40000003, 0x89, 0x100, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 579.800729ms ago: executing program 2 (id=497): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$kcm(0x11, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) close(0x3) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x20000814) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r12, @ANYBLOB="15f5d45b7162295a5e202045721fc5b2c665149844704da0727d9a49a0271369f93c58e8f43108ac675a2849768f0f9e40b6f636f940ea8dab79a0bc18bd2f39a7f4140ee02850c650f902257b7824a749db01ea332215058aa4560ac1a813b3796f505ba9b0813c0c25e15b21f2f8f77696e1152dfed6710ea489db8afd9a74178aaec1af15933d11028a500cc0cee393dfd6bb77096795a31ed75c0b0d0a0b63a9a4cb5d7a1921867e67ca4983555d1b93e3a320ea52d26fdcde14bd6db79d13e5d7ab03ebb8ee1b0d350f8f768898e1d6b0572dcb6ad0191cd2f557aab291ddf403f6097d1e8cfec08bb9ecfc5124a58b39b94aff8efa85004e8ec436fd49618d021d75a615c46b018762794bab96ff2f871bdf2653046573575fa4b8150b6d20631fab7ce7fbd9a5e13ba2429355d07ec7f96df20ddf76745ae5b961f7bfddbd7df2317fad59c185c0a01cd5c3c0e69a5641cb60f5bb61e7691cdd56ee13f8a45b2c05cdd391717cf7cdce5dea733e4f673d559abfd1a1518308d469942d456c"], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getroute={0x14, 0x1a, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x80) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000013c0)=@bridge_getneigh={0xa5, 0x1e, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r12, 0x206c0, 0x2000}, [@IFLA_PROTO_DOWN={0x0, 0x27, 0x2}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0xd3}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x10}, {0x8, 0x16, 0x0, 0x0, 0xd71}, {0x8, 0x0, 0x0, 0x0, 0xc}, {0x8, 0x12, 0x0, 0x0, 0xa3}]}}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x80}]}, @AF_MPLS, @AF_MPLS]}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0xf0}}, 0x10) 530.533105ms ago: executing program 2 (id=498): socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) open$dir(&(0x7f0000000080)='.\x00', 0x2100, 0x285) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socket$inet_icmp(0x2, 0x2, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 480.056122ms ago: executing program 3 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @address_request={0x11, 0x0, 0x0, 0x400}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x8de, 0x4cf, 0x239, 0xc8d]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200000, 0x8e) r4 = openat(r3, &(0x7f0000000080)='./file1\x00', 0x2000, 0x1ff) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x60) io_uring_enter(r4, 0x48ab, 0x5d5c, 0x21, &(0x7f0000000140)={[0x9]}, 0x8) 479.835509ms ago: executing program 2 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x3f00, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 270.356146ms ago: executing program 0 (id=505): socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) open$dir(&(0x7f0000000080)='.\x00', 0x2100, 0x285) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socket$inet_icmp(0x2, 0x2, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000100)=[0x0], 0x1}) 270.113756ms ago: executing program 3 (id=506): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1d0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 269.796777ms ago: executing program 3 (id=508): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r1 = socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r2, 0x89f0, &(0x7f0000000000)={0x0, 0x4, 0x10008, 0x0, 0xf, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x4b}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x16, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETSF2(r3, 0x8910, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x911, 0x40ac0) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="bd03394fbea5750756b8eeeb51ae801df2cafca25b611830178fd2738adfe742fff00f77d29fd81082de2e558b0c26aae6cc799868f35c020d34386b16079ad9a23b71c84283e00eaaa81f60e39df95e0bcde350366e63f448fb644c819c60bc1fa1c21ecf863761079b187bc983c5465faf466276bb393014b534cac7e227d644ab0d0771d78710", @ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="2045e6cba4a91442922303a3a2cb5a2abb1ce09fe76e83008c3eb1848d5caf0f5be6d9b5078492c548d2e7d9bc94050aa7baf37672f1fa5b16a900f239473113c5e10cec7b82e833723da55596a20502ba025d4dd1342e1dfee1a8014c7671ae0b0bb931e780c70b78d8e6a3073476745b206409c84247b7a7"], 0xfe33) 269.376906ms ago: executing program 2 (id=510): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x6) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 269.308577ms ago: executing program 0 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000200010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 269.175235ms ago: executing program 1 (id=512): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1e8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 266.020561ms ago: executing program 0 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 190.362395ms ago: executing program 1 (id=514): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x2002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000200)=0x4) 189.222216ms ago: executing program 0 (id=515): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x8}, 0xe) shutdown(r1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r3, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000c6034e6715092b5202000000000000002000000105000000200000000000"], 0x0, 0x2a}, 0x28) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 189.006239ms ago: executing program 1 (id=516): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000f40)={"02002713", 0x8, 0x5, 0xff, 0x8, 0x5, "000064640000001503fe00", 'b\x00', '\x00', "64bdac32", ["e86621f22a5200", "0000000000000000001000", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0x0, 0xffffffff, 0x6, "10b700020000f5050000000734c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x400, 0xf0, 0x280, 0x384, 0xbbb7, 0x2, 0x20, 0xffffffff, {0x8000000}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x0, 0x8}, 0x0, 0x3f0, 0x80, 0xd, 0x0, 0x80, 0x0, 0x10001, 0x0, 0xfffffffd, 0x0, 0x4, 0x15, 0x1, 0x2, 0x8}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tcp_mem(r2, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='initcall_level\x00', r4, 0x0, 0x20000000000000}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 151.102089ms ago: executing program 0 (id=517): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1d0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 150.810888ms ago: executing program 1 (id=518): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0, 0x100000}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 133.486603ms ago: executing program 3 (id=519): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 3) 70.30847ms ago: executing program 1 (id=520): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x8, r1, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)='Y', 0x1}], 0x1}}], 0x1, 0x11) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204001, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@rnullb, r2, &(0x7f00000001c0)={0x6, 0x7, 0x1, 0x5}) 69.727835ms ago: executing program 0 (id=521): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRESDEC], 0x48) (fail_nth: 6) 297.604µs ago: executing program 3 (id=522): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) (async) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) (async) madvise(&(0x7f000023a000/0x4000)=nil, 0x4000, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52810' (ED25519) to the list of known hosts. [ 55.466260][ T40] audit: type=1400 audit(1768133574.807:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.516508][ T40] audit: type=1400 audit(1768133574.857:63): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.526274][ T40] audit: type=1400 audit(1768133574.867:64): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.619619][ T40] audit: type=1400 audit(1768133576.957:65): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.628587][ T40] audit: type=1400 audit(1768133576.967:66): avc: denied { mount } for pid=5920 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.630380][ T5920] cgroup: Unknown subsys name 'net' [ 57.764915][ T5920] cgroup: Unknown subsys name 'cpuset' [ 57.770391][ T5920] cgroup: Unknown subsys name 'rlimit' [ 57.983546][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.696055][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.361002][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 62.361018][ T40] audit: type=1400 audit(1768133581.697:82): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.460249][ T40] audit: type=1400 audit(1768133581.797:83): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.472832][ T40] audit: type=1400 audit(1768133581.807:84): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.480132][ T40] audit: type=1400 audit(1768133581.807:85): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.484810][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.488185][ T40] audit: type=1400 audit(1768133581.807:86): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.490604][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.497269][ T40] audit: type=1400 audit(1768133581.807:87): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.500084][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.504685][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.504924][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.505710][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.505840][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.506011][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.506510][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.506576][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.507389][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.510292][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.511860][ T40] audit: type=1400 audit(1768133581.817:88): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[6326]" dev="sockfs" ino=6326 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.514277][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.514299][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.514756][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.517143][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.517190][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.519360][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.521157][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.529469][ T40] audit: type=1400 audit(1768133581.867:89): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.532920][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.541053][ T40] audit: type=1400 audit(1768133581.867:90): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.575384][ T40] audit: type=1400 audit(1768133581.867:91): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.788653][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 62.829948][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 62.909932][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 62.948433][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.951150][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.954300][ T5934] bridge_slave_0: entered allmulticast mode [ 62.958118][ T5934] bridge_slave_0: entered promiscuous mode [ 62.998492][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.001794][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.004789][ T5934] bridge_slave_1: entered allmulticast mode [ 63.008496][ T5934] bridge_slave_1: entered promiscuous mode [ 63.048730][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.052227][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.054489][ T5935] bridge_slave_0: entered allmulticast mode [ 63.057122][ T5935] bridge_slave_0: entered promiscuous mode [ 63.075340][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.079287][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.081851][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.084250][ T5935] bridge_slave_1: entered allmulticast mode [ 63.087001][ T5935] bridge_slave_1: entered promiscuous mode [ 63.089599][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 63.107176][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.145284][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.148419][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.151556][ T5933] bridge_slave_0: entered allmulticast mode [ 63.155258][ T5933] bridge_slave_0: entered promiscuous mode [ 63.181984][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.186099][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.189104][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.192247][ T5933] bridge_slave_1: entered allmulticast mode [ 63.194983][ T5933] bridge_slave_1: entered promiscuous mode [ 63.199230][ T5934] team0: Port device team_slave_0 added [ 63.209905][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.235369][ T5934] team0: Port device team_slave_1 added [ 63.277290][ T5935] team0: Port device team_slave_0 added [ 63.279940][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.283523][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.286774][ T5941] bridge_slave_0: entered allmulticast mode [ 63.290661][ T5941] bridge_slave_0: entered promiscuous mode [ 63.310484][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.318303][ T5935] team0: Port device team_slave_1 added [ 63.320912][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.324455][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.327570][ T5941] bridge_slave_1: entered allmulticast mode [ 63.331605][ T5941] bridge_slave_1: entered promiscuous mode [ 63.335965][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.338901][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.350006][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.358465][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.383891][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.386818][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.397793][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.426171][ T5933] team0: Port device team_slave_0 added [ 63.433206][ T5933] team0: Port device team_slave_1 added [ 63.435386][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.438138][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.447244][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.452100][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.456899][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.473533][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.475906][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.484592][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.501034][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.503306][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.511522][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.525734][ T5941] team0: Port device team_slave_0 added [ 63.528371][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.530557][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.538587][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.555368][ T5941] team0: Port device team_slave_1 added [ 63.572937][ T5934] hsr_slave_0: entered promiscuous mode [ 63.575367][ T5934] hsr_slave_1: entered promiscuous mode [ 63.586501][ T5933] hsr_slave_0: entered promiscuous mode [ 63.588805][ T5933] hsr_slave_1: entered promiscuous mode [ 63.590870][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 63.592952][ T5933] Cannot create hsr debugfs directory [ 63.614232][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.616499][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.624574][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.631244][ T5935] hsr_slave_0: entered promiscuous mode [ 63.633463][ T5935] hsr_slave_1: entered promiscuous mode [ 63.635537][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 63.637341][ T5935] Cannot create hsr debugfs directory [ 63.649678][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.652058][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.659949][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.807003][ T5941] hsr_slave_0: entered promiscuous mode [ 63.810410][ T5941] hsr_slave_1: entered promiscuous mode [ 63.814797][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 63.817211][ T5941] Cannot create hsr debugfs directory [ 64.057032][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.068437][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.082165][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.089297][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.149885][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.158337][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.166902][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.183239][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.232694][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.241361][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.248336][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.264293][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.320143][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.327524][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.337032][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.347767][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.379870][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.406396][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.429849][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.433092][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.451733][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.458740][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.485740][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.494534][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.505700][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.507979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.521589][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.540355][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.542213][ T64] Bluetooth: hci2: command tx timeout [ 64.545025][ T5949] Bluetooth: hci3: command tx timeout [ 64.551850][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.556646][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.559523][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.577170][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.580201][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.604857][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.611517][ T5949] Bluetooth: hci0: command tx timeout [ 64.616132][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.618423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.622837][ T5949] Bluetooth: hci1: command tx timeout [ 64.632137][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.634443][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.653495][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.709856][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.759051][ T5933] veth0_vlan: entered promiscuous mode [ 64.767880][ T5933] veth1_vlan: entered promiscuous mode [ 64.789301][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.805351][ T5933] veth0_macvtap: entered promiscuous mode [ 64.814381][ T5933] veth1_macvtap: entered promiscuous mode [ 64.829736][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.843181][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.863187][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.870878][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.897981][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.906281][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910008][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.920271][ T5941] veth0_vlan: entered promiscuous mode [ 64.923149][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.967070][ T5941] veth1_vlan: entered promiscuous mode [ 64.994290][ T5935] veth0_vlan: entered promiscuous mode [ 65.014962][ T5934] veth0_vlan: entered promiscuous mode [ 65.022501][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.024880][ T5935] veth1_vlan: entered promiscuous mode [ 65.025904][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.046941][ T5934] veth1_vlan: entered promiscuous mode [ 65.054264][ T5941] veth0_macvtap: entered promiscuous mode [ 65.058204][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.063174][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.065869][ T5941] veth1_macvtap: entered promiscuous mode [ 65.085015][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.097909][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.110054][ T5935] veth0_macvtap: entered promiscuous mode [ 65.121558][ T5935] veth1_macvtap: entered promiscuous mode [ 65.121870][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.125057][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.135832][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146840][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.150230][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158451][ T5934] veth0_macvtap: entered promiscuous mode [ 65.165497][ T5934] veth1_macvtap: entered promiscuous mode [ 65.194839][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.210534][ T6025] Zero length message leads to an empty skb [ 65.215406][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.232709][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.237818][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243061][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.258951][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263007][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275144][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.284836][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.285744][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.288102][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.292405][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.318827][ T1245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345934][ T1245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363009][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.366285][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.456590][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.459758][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.485198][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.488484][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.507434][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.510727][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.523696][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.525866][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.530739][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.614781][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.664251][ T6037] FAULT_INJECTION: forcing a failure. [ 65.664251][ T6037] name failslab, interval 1, probability 0, space 0, times 1 [ 65.669744][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 65.669767][ T6037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.669778][ T6037] Call Trace: [ 65.669784][ T6037] [ 65.669792][ T6037] dump_stack_lvl+0x16c/0x1f0 [ 65.669820][ T6037] should_fail_ex+0x512/0x640 [ 65.669847][ T6037] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 65.669869][ T6037] should_failslab+0xc2/0x120 [ 65.669892][ T6037] kmem_cache_alloc_node_noprof+0x86/0x800 [ 65.669910][ T6037] ? copy_process+0x4b5/0x7430 [ 65.669931][ T6037] ? copy_process+0x4b5/0x7430 [ 65.669945][ T6037] copy_process+0x4b5/0x7430 [ 65.669972][ T6037] ? __pfx_copy_process+0x10/0x10 [ 65.670002][ T6037] ? lockdep_init_map_type+0x5c/0x270 [ 65.670026][ T6037] ? lockdep_init_map_type+0x5c/0x270 [ 65.670049][ T6037] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 65.670079][ T6037] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 65.670105][ T6037] vhost_task_create+0x1d2/0x370 [ 65.670130][ T6037] ? __pfx_vhost_task_create+0x10/0x10 [ 65.670161][ T6037] ? __pfx_vhost_task_fn+0x10/0x10 [ 65.670196][ T6037] kvm_mmu_post_init_vm+0x1b7/0x380 [ 65.670221][ T6037] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 65.670244][ T6037] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 65.670275][ T6037] kvm_vcpu_ioctl+0x76d/0x16d0 [ 65.670305][ T6037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 65.670354][ T6037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.670385][ T6037] ? do_vfs_ioctl+0x128/0x14f0 [ 65.670407][ T6037] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.670427][ T6037] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.670460][ T6037] ? hook_file_ioctl_common+0x144/0x410 [ 65.670495][ T6037] ? selinux_file_ioctl+0x180/0x270 [ 65.670518][ T6037] ? selinux_file_ioctl+0xb4/0x270 [ 65.670542][ T6037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 65.670570][ T6037] __x64_sys_ioctl+0x18e/0x210 [ 65.670592][ T6037] do_syscall_64+0xcd/0xf80 [ 65.670619][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.670637][ T6037] RIP: 0033:0x7f4341f8f7c9 [ 65.670651][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.670667][ T6037] RSP: 002b:00007f4342e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.670685][ T6037] RAX: ffffffffffffffda RBX: 00007f43421e5fa0 RCX: 00007f4341f8f7c9 [ 65.670696][ T6037] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 65.670706][ T6037] RBP: 00007f4342e44090 R08: 0000000000000000 R09: 0000000000000000 [ 65.670716][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.670726][ T6037] R13: 00007f43421e6038 R14: 00007f43421e5fa0 R15: 00007fff4c0f95c8 [ 65.670751][ T6037] [ 65.861091][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.014208][ T54] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.017842][ T54] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 66.024294][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.028055][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 66.033867][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 66.040555][ T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.047080][ T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.050442][ T54] usb 8-1: Product: syz [ 66.057578][ T54] usb 8-1: Manufacturer: syz [ 66.076276][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 66.078669][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 66.085496][ T54] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 66.087994][ T54] cdc_wdm 8-1:1.0: Unknown control protocol [ 66.154315][ T6050] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 66.375436][ T6061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.381461][ T6061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.403119][ T6061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.427484][ T6061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.429534][ T6061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.437336][ T6061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.438767][ T6067] binder: 6066:6067 unknown command 0 [ 66.442477][ T6067] binder: 6066:6067 ioctl c0306201 2000000003c0 returned -22 [ 66.447496][ T6061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.449614][ T6061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.457637][ T6061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.464609][ T6061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.471146][ T6061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.479652][ T6061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.707817][ T6082] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 66.777817][ T6086] netlink: 12836 bytes leftover after parsing attributes in process `syz.2.19'. [ 66.896310][ T54] usb 8-1: USB disconnect, device number 2 [ 67.032722][ T56] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 67.185006][ T56] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 67.189921][ T56] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 67.194758][ T56] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 67.199321][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 67.205287][ T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.209126][ T56] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.212762][ T56] usb 7-1: Product: syz [ 67.214585][ T56] usb 7-1: Manufacturer: syz [ 67.216559][ T56] usb 7-1: SerialNumber: syz [ 67.220637][ T56] usb 7-1: config 0 descriptor?? [ 67.224829][ T6086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 67.233062][ T56] usb 7-1: selecting invalid altsetting 0 [ 67.305006][ T6100] netlink: 'syz.1.23': attribute type 7 has an invalid length. [ 67.307593][ T6100] netlink: 'syz.1.23': attribute type 27 has an invalid length. [ 67.310154][ T6100] netlink: 'syz.1.23': attribute type 7 has an invalid length. [ 67.317784][ T6100] netlink: 'syz.1.23': attribute type 27 has an invalid length. [ 67.354240][ T6102] syzkaller0: entered promiscuous mode [ 67.356473][ T6102] syzkaller0: entered allmulticast mode [ 67.376000][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 67.376017][ T40] audit: type=1400 audit(1768133586.717:189): avc: denied { name_bind } for pid=6096 comm="syz.0.22" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.423153][ T6106] macvlan0: entered promiscuous mode [ 67.429294][ T6106] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 67.432644][ T6106] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 67.447083][ T6023] usb 7-1: USB disconnect, device number 2 [ 67.455196][ T6108] loop2: detected capacity change from 0 to 7 [ 67.459415][ T40] audit: type=1400 audit(1768133586.797:190): avc: denied { sys_module } for pid=6105 comm="syz.1.25" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.461435][ T6108] loop2: p1 [ 67.469202][ T6108] loop2: partition table partially beyond EOD, truncated [ 67.473325][ T6108] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 67.580890][ T40] audit: type=1400 audit(1768133586.917:191): avc: denied { create } for pid=6115 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.588158][ T40] audit: type=1400 audit(1768133586.927:192): avc: denied { setopt } for pid=6115 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.601825][ T6114] FAULT_INJECTION: forcing a failure. [ 67.601825][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 67.607119][ T6114] CPU: 3 UID: 0 PID: 6114 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(full) [ 67.607142][ T6114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.607153][ T6114] Call Trace: [ 67.607159][ T6114] [ 67.607166][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 67.607196][ T6114] should_fail_ex+0x512/0x640 [ 67.607224][ T6114] ? fs_reclaim_acquire+0xae/0x150 [ 67.607249][ T6114] should_failslab+0xc2/0x120 [ 67.607275][ T6114] __kmalloc_noprof+0xeb/0x910 [ 67.607303][ T6114] ? tomoyo_encode2+0x100/0x3e0 [ 67.607332][ T6114] ? tomoyo_encode2+0x100/0x3e0 [ 67.607356][ T6114] tomoyo_encode2+0x100/0x3e0 [ 67.607384][ T6114] tomoyo_encode+0x29/0x50 [ 67.607408][ T6114] tomoyo_realpath_from_path+0x18f/0x6e0 [ 67.607436][ T6114] ? tomoyo_profile+0x47/0x60 [ 67.607467][ T6114] tomoyo_path_number_perm+0x245/0x580 [ 67.607487][ T6114] ? tomoyo_path_number_perm+0x237/0x580 [ 67.607510][ T6114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.607533][ T6114] ? find_held_lock+0x2b/0x80 [ 67.607582][ T6114] ? find_held_lock+0x2b/0x80 [ 67.607608][ T6114] ? hook_file_ioctl_common+0x144/0x410 [ 67.607641][ T6114] ? __fget_files+0x20e/0x3c0 [ 67.607675][ T6114] security_file_ioctl+0x9b/0x240 [ 67.607701][ T6114] __x64_sys_ioctl+0xb7/0x210 [ 67.607725][ T6114] do_syscall_64+0xcd/0xf80 [ 67.607751][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.607771][ T6114] RIP: 0033:0x7f6f71f8f7c9 [ 67.607786][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.607803][ T6114] RSP: 002b:00007f6f72ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.607821][ T6114] RAX: ffffffffffffffda RBX: 00007f6f721e5fa0 RCX: 00007f6f71f8f7c9 [ 67.607830][ T6114] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 67.607842][ T6114] RBP: 00007f6f72ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 67.607853][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.607863][ T6114] R13: 00007f6f721e6038 R14: 00007f6f721e5fa0 R15: 00007ffecae75528 [ 67.607888][ T6114] [ 67.607906][ T6114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.610606][ T40] audit: type=1400 audit(1768133586.947:193): avc: denied { listen } for pid=6115 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.689760][ T40] audit: type=1400 audit(1768133586.977:194): avc: denied { accept } for pid=6115 comm="syz.3.28" lport=52433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.773981][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 67.781568][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 67.785554][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.998714][ T40] audit: type=1400 audit(1768133587.337:195): avc: denied { create } for pid=6128 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.008448][ T40] audit: type=1400 audit(1768133587.357:196): avc: denied { write } for pid=6128 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.125730][ T40] audit: type=1400 audit(1768133587.467:197): avc: denied { bind } for pid=6135 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.141299][ T40] audit: type=1400 audit(1768133587.467:198): avc: denied { append } for pid=6135 comm="syz.2.34" name="nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.313137][ T6151] netlink: 12836 bytes leftover after parsing attributes in process `syz.1.39'. [ 68.371412][ T5949] Bluetooth: hci0: command 0x0419 tx timeout [ 68.453556][ T6155] FAULT_INJECTION: forcing a failure. [ 68.453556][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 68.457680][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT(full) [ 68.457697][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.457704][ T6155] Call Trace: [ 68.457707][ T6155] [ 68.457711][ T6155] dump_stack_lvl+0x16c/0x1f0 [ 68.457730][ T6155] should_fail_ex+0x512/0x640 [ 68.457749][ T6155] should_failslab+0xc2/0x120 [ 68.457765][ T6155] kmem_cache_alloc_node_noprof+0x86/0x800 [ 68.457776][ T6155] ? __alloc_skb+0x156/0x410 [ 68.457790][ T6155] ? __alloc_skb+0x156/0x410 [ 68.457798][ T6155] __alloc_skb+0x156/0x410 [ 68.457806][ T6155] ? __alloc_skb+0x35d/0x410 [ 68.457815][ T6155] ? __pfx___alloc_skb+0x10/0x10 [ 68.457829][ T6155] _sctp_make_chunk+0x51/0x270 [ 68.457843][ T6155] sctp_make_control+0x2f/0x2d0 [ 68.457856][ T6155] sctp_make_strreset_req+0xe8/0x420 [ 68.457872][ T6155] ? __pfx_sctp_make_strreset_req+0x10/0x10 [ 68.457889][ T6155] ? sctp_send_reset_streams+0x95c/0xf00 [ 68.457904][ T6155] ? sctp_stream_outq_is_empty+0x185/0x1f0 [ 68.457919][ T6155] sctp_send_reset_streams+0x502/0xf00 [ 68.457934][ T6155] ? __local_bh_enable_ip+0xa4/0x120 [ 68.457954][ T6155] sctp_setsockopt+0x48cf/0xb8c0 [ 68.457964][ T6155] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 68.457982][ T6155] ? __pfx_sctp_setsockopt+0x10/0x10 [ 68.457993][ T6155] ? find_held_lock+0x2b/0x80 [ 68.458011][ T6155] ? selinux_socket_setsockopt+0x6a/0x80 [ 68.458023][ T6155] ? sock_common_setsockopt+0x2e/0xf0 [ 68.458037][ T6155] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.458052][ T6155] do_sock_setsockopt+0xf3/0x1d0 [ 68.458068][ T6155] __sys_setsockopt+0x1a0/0x230 [ 68.458081][ T6155] __x64_sys_setsockopt+0xbd/0x160 [ 68.458091][ T6155] ? do_syscall_64+0x91/0xf80 [ 68.458106][ T6155] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.458121][ T6155] do_syscall_64+0xcd/0xf80 [ 68.458136][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.458147][ T6155] RIP: 0033:0x7f4e3718f7c9 [ 68.458156][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.458166][ T6155] RSP: 002b:00007f4e353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.458176][ T6155] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718f7c9 [ 68.458183][ T6155] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 68.458188][ T6155] RBP: 00007f4e353f6090 R08: 0000000000000008 R09: 0000000000000000 [ 68.458194][ T6155] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 68.458203][ T6155] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 68.458225][ T6155] [ 68.461062][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 68.461628][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 68.533437][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 68.541009][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.557717][ T141] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 68.587612][ T6157] FAULT_INJECTION: forcing a failure. [ 68.587612][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 68.594662][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 68.594685][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.594695][ T6157] Call Trace: [ 68.594701][ T6157] [ 68.594708][ T6157] dump_stack_lvl+0x16c/0x1f0 [ 68.594734][ T6157] should_fail_ex+0x512/0x640 [ 68.594765][ T6157] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 68.594788][ T6157] should_failslab+0xc2/0x120 [ 68.594811][ T6157] kmem_cache_alloc_node_noprof+0x86/0x800 [ 68.594829][ T6157] ? copy_process+0x4b5/0x7430 [ 68.594852][ T6157] ? copy_process+0x4b5/0x7430 [ 68.594865][ T6157] copy_process+0x4b5/0x7430 [ 68.594890][ T6157] ? __pfx_copy_process+0x10/0x10 [ 68.594919][ T6157] ? lockdep_init_map_type+0x5c/0x270 [ 68.594942][ T6157] ? lockdep_init_map_type+0x5c/0x270 [ 68.594965][ T6157] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.594996][ T6157] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.595023][ T6157] vhost_task_create+0x1d2/0x370 [ 68.595046][ T6157] ? __pfx_vhost_task_create+0x10/0x10 [ 68.595080][ T6157] ? __pfx_vhost_task_fn+0x10/0x10 [ 68.595109][ T6157] ? __pfx___mutex_lock+0x10/0x10 [ 68.595138][ T6157] kvm_mmu_post_init_vm+0x1b7/0x380 [ 68.595155][ T6157] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 68.595170][ T6157] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 68.595191][ T6157] kvm_vcpu_ioctl+0x76d/0x16d0 [ 68.595210][ T6157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.595228][ T6157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.595245][ T6157] ? do_vfs_ioctl+0x128/0x14f0 [ 68.595265][ T6157] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.595285][ T6157] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.595322][ T6157] ? hook_file_ioctl_common+0x144/0x410 [ 68.595358][ T6157] ? selinux_file_ioctl+0x180/0x270 [ 68.595382][ T6157] ? selinux_file_ioctl+0xb4/0x270 [ 68.595415][ T6157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.595441][ T6157] __x64_sys_ioctl+0x18e/0x210 [ 68.595461][ T6157] do_syscall_64+0xcd/0xf80 [ 68.595484][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.595502][ T6157] RIP: 0033:0x7f4e3718f7c9 [ 68.595517][ T6157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.595534][ T6157] RSP: 002b:00007f4e353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.595551][ T6157] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718f7c9 [ 68.595562][ T6157] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 68.595573][ T6157] RBP: 00007f4e353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.595582][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.595592][ T6157] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 68.595617][ T6157] [ 68.632626][ T6164] FAULT_INJECTION: forcing a failure. [ 68.632626][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 68.713485][ T141] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 68.716427][ T6164] CPU: 2 UID: 0 PID: 6164 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 68.716451][ T6164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.716463][ T6164] Call Trace: [ 68.716470][ T6164] [ 68.716477][ T6164] dump_stack_lvl+0x16c/0x1f0 [ 68.716506][ T6164] should_fail_ex+0x512/0x640 [ 68.716531][ T6164] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 68.716547][ T6164] should_failslab+0xc2/0x120 [ 68.716562][ T6164] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 68.716573][ T6164] ? stack_trace_save+0x8e/0xc0 [ 68.716586][ T6164] ? __d_alloc+0x35/0xa80 [ 68.716604][ T6164] ? __d_alloc+0x35/0xa80 [ 68.716617][ T6164] __d_alloc+0x35/0xa80 [ 68.716637][ T6164] d_alloc_parallel+0x111/0x1510 [ 68.716661][ T6164] ? mark_lock+0x40d/0x9f0 [ 68.716686][ T6164] ? __pfx_d_alloc_parallel+0x10/0x10 [ 68.716707][ T6164] ? lockdep_init_map_type+0x5c/0x270 [ 68.716728][ T6164] ? lockdep_init_map_type+0x5c/0x270 [ 68.716746][ T6164] __lookup_slow+0x193/0x460 [ 68.716758][ T6164] ? __pfx___lookup_slow+0x10/0x10 [ 68.716780][ T6164] lookup_slow+0x50/0x70 [ 68.716791][ T6164] path_lookupat+0x5e9/0xc40 [ 68.716806][ T6164] filename_lookup+0x224/0x5f0 [ 68.716821][ T6164] ? __pfx_filename_lookup+0x10/0x10 [ 68.716844][ T6164] ? find_held_lock+0x2b/0x80 [ 68.716859][ T6164] ? __might_fault+0xe3/0x190 [ 68.716869][ T6164] ? __might_fault+0xe3/0x190 [ 68.716881][ T6164] ? __might_fault+0x13b/0x190 [ 68.716902][ T6164] vfs_statx+0x101/0x3f0 [ 68.716930][ T6164] ? __pfx_vfs_statx+0x10/0x10 [ 68.716957][ T6164] ? getname_flags.part.0+0x1c5/0x550 [ 68.716981][ T6164] vfs_fstatat+0x7b/0xf0 [ 68.716998][ T6164] __do_sys_newfstatat+0x97/0x120 [ 68.717015][ T6164] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 68.717031][ T6164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.717070][ T6164] ? __pfx_ksys_write+0x10/0x10 [ 68.717098][ T6164] do_syscall_64+0xcd/0xf80 [ 68.717121][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.717140][ T6164] RIP: 0033:0x7f74f978f7c9 [ 68.717154][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.717171][ T6164] RSP: 002b:00007f74fa6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 68.717190][ T6164] RAX: ffffffffffffffda RBX: 00007f74f99e5fa0 RCX: 00007f74f978f7c9 [ 68.717201][ T6164] RDX: 0000200000000400 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 68.717212][ T6164] RBP: 00007f74fa6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 68.717223][ T6164] R10: 0000000000004100 R11: 0000000000000246 R12: 0000000000000001 [ 68.717232][ T6164] R13: 00007f74f99e6038 R14: 00007f74f99e5fa0 R15: 00007ffed9ff8f08 [ 68.717254][ T6164] [ 68.826934][ T141] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 68.830514][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.834754][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.837820][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.840708][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.843770][ T141] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 68.847477][ T141] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.852467][ T6147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.856080][ T141] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.858935][ T141] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.861729][ T141] usb 6-1: Product: syz [ 68.863113][ T141] usb 6-1: Manufacturer: syz [ 68.864706][ T141] usb 6-1: SerialNumber: syz [ 68.867527][ T141] usb 6-1: config 0 descriptor?? [ 68.869602][ T6151] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.873648][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.890477][ T141] usb 6-1: selecting invalid altsetting 0 [ 68.914164][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 68.918716][ T6168] netlink: 'syz.0.45': attribute type 18 has an invalid length. [ 68.929955][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 68.958382][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 68.958378][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.958418][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.971106][ T6168] netlink: 'syz.0.45': attribute type 18 has an invalid length. [ 68.980053][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.981448][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 68.985815][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.026191][ T6175] netlink: 'syz.0.48': attribute type 7 has an invalid length. [ 69.028763][ T6175] netlink: 'syz.0.48': attribute type 27 has an invalid length. [ 69.074822][ T24] usb 7-1: USB disconnect, device number 3 [ 69.077873][ T9] usb 6-1: USB disconnect, device number 2 [ 69.377186][ T6191] comedi comedi2: dmm32at: I/O port conflict (0x4,16) [ 69.665498][ T6206] FAULT_INJECTION: forcing a failure. [ 69.665498][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 69.670825][ T6206] CPU: 3 UID: 0 PID: 6206 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(full) [ 69.670848][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.670858][ T6206] Call Trace: [ 69.670865][ T6206] [ 69.670873][ T6206] dump_stack_lvl+0x16c/0x1f0 [ 69.670901][ T6206] should_fail_ex+0x512/0x640 [ 69.670942][ T6206] ? __kmalloc_noprof+0xca/0x910 [ 69.670975][ T6206] should_failslab+0xc2/0x120 [ 69.671002][ T6206] __kmalloc_noprof+0xeb/0x910 [ 69.671030][ T6206] ? drm_atomic_state_init+0x183/0x540 [ 69.671063][ T6206] ? drm_atomic_state_init+0x183/0x540 [ 69.671089][ T6206] drm_atomic_state_init+0x183/0x540 [ 69.671115][ T6206] ? kasan_save_track+0x14/0x30 [ 69.671139][ T6206] drm_atomic_state_alloc+0xd3/0x120 [ 69.671167][ T6206] drm_mode_atomic_ioctl+0x393/0x2640 [ 69.671187][ T6206] ? avc_has_extended_perms+0x33a/0x1090 [ 69.671209][ T6206] ? avc_has_extended_perms+0x47c/0x1090 [ 69.671230][ T6206] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 69.671257][ T6206] ? __lock_acquire+0x436/0x2890 [ 69.671281][ T6206] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 69.671309][ T6206] ? drm_is_current_master+0x2c/0x40 [ 69.671328][ T6206] ? do_raw_spin_unlock+0x172/0x230 [ 69.671361][ T6206] drm_ioctl_kernel+0x1f4/0x3e0 [ 69.671384][ T6206] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 69.671414][ T6206] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 69.671445][ T6206] drm_ioctl+0x5c9/0xc30 [ 69.671474][ T6206] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 69.671503][ T6206] ? __pfx_drm_ioctl+0x10/0x10 [ 69.671536][ T6206] ? selinux_file_ioctl+0x180/0x270 [ 69.671561][ T6206] ? selinux_file_ioctl+0xb4/0x270 [ 69.671588][ T6206] ? __pfx_drm_ioctl+0x10/0x10 [ 69.671614][ T6206] __x64_sys_ioctl+0x18e/0x210 [ 69.671638][ T6206] do_syscall_64+0xcd/0xf80 [ 69.671665][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.671684][ T6206] RIP: 0033:0x7f6f71f8f7c9 [ 69.671699][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.671715][ T6206] RSP: 002b:00007f6f72ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.671733][ T6206] RAX: ffffffffffffffda RBX: 00007f6f721e5fa0 RCX: 00007f6f71f8f7c9 [ 69.671745][ T6206] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000d [ 69.671757][ T6206] RBP: 00007f6f72ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.671767][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.671777][ T6206] R13: 00007f6f721e6038 R14: 00007f6f721e5fa0 R15: 00007ffecae75528 [ 69.671801][ T6206] [ 69.945145][ T6222] netlink: 12836 bytes leftover after parsing attributes in process `syz.3.63'. [ 70.213324][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 70.251163][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.362609][ T24] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 70.367297][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 70.372902][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 70.377095][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.381633][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.385279][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.388594][ T24] usb 8-1: Product: syz [ 70.390450][ T24] usb 8-1: Manufacturer: syz [ 70.392438][ T24] usb 8-1: SerialNumber: syz [ 70.397148][ T24] usb 8-1: config 0 descriptor?? [ 70.399947][ T6222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.405152][ T24] usb 8-1: selecting invalid altsetting 0 [ 70.411018][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 70.415177][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.425146][ T56] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.428967][ T56] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 70.433151][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.453462][ T56] usb 5-1: config 0 descriptor?? [ 70.460811][ T56] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 70.461003][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 70.468319][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 70.483294][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.496077][ T56] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 70.499147][ T56] usb 5-1: media controller created [ 70.514589][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.539181][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 70.541630][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 70.542593][ T56] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 70.549569][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input5 [ 70.563996][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 70.566954][ T56] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 70.569633][ T6244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=6244 comm=syz.1.71 [ 70.609037][ T6247] pim6reg1: entered promiscuous mode [ 70.610857][ T6247] pim6reg1: entered allmulticast mode [ 70.620248][ T24] usb 8-1: USB disconnect, device number 3 [ 70.621877][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 70.622626][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 70.664957][ T6226] tmpfs: Invalid uid '0x00000000ffffffff' [ 70.673046][ T56] usb 5-1: USB disconnect, device number 2 [ 70.719648][ T56] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.225811][ T6265] comedi comedi2: dmm32at: I/O port conflict (0x4,16) [ 71.267731][ T6270] fuse: Bad value for 'fd' [ 71.309701][ T29] IPVS: starting estimator thread 0... [ 71.327702][ T6272] syzkaller0: entered promiscuous mode [ 71.329506][ T6272] syzkaller0: entered allmulticast mode [ 71.347414][ T6274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.81'. [ 71.350500][ T6274] block nbd0: not configured, cannot reconfigure [ 71.392025][ T6283] netlink: 12836 bytes leftover after parsing attributes in process `syz.2.84'. [ 71.401422][ T6275] IPVS: using max 44 ests per chain, 105600 per kthread [ 71.489298][ T6288] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.498196][ T6293] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 71.641053][ T56] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 71.797047][ T56] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 71.806962][ T56] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 71.816044][ T56] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 71.820735][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 71.826812][ T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.830435][ T56] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.834784][ T56] usb 7-1: Product: syz [ 71.836693][ T56] usb 7-1: Manufacturer: syz [ 71.838570][ T56] usb 7-1: SerialNumber: syz [ 71.845923][ T56] usb 7-1: config 0 descriptor?? [ 71.849283][ T6283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.856247][ T56] usb 7-1: selecting invalid altsetting 0 [ 71.921748][ T6309] FAULT_INJECTION: forcing a failure. [ 71.921748][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 71.931645][ T6309] CPU: 2 UID: 0 PID: 6309 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 71.931669][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.931680][ T6309] Call Trace: [ 71.931686][ T6309] [ 71.931693][ T6309] dump_stack_lvl+0x16c/0x1f0 [ 71.931743][ T6309] should_fail_ex+0x512/0x640 [ 71.931777][ T6309] ? fs_reclaim_acquire+0xae/0x150 [ 71.931804][ T6309] should_failslab+0xc2/0x120 [ 71.931828][ T6309] __kmalloc_noprof+0xeb/0x910 [ 71.931856][ T6309] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 71.931887][ T6309] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 71.931911][ T6309] tomoyo_realpath_from_path+0xc2/0x6e0 [ 71.931939][ T6309] ? tomoyo_profile+0x47/0x60 [ 71.931968][ T6309] tomoyo_path_number_perm+0x245/0x580 [ 71.931988][ T6309] ? tomoyo_path_number_perm+0x237/0x580 [ 71.932011][ T6309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 71.932033][ T6309] ? find_held_lock+0x2b/0x80 [ 71.932083][ T6309] ? find_held_lock+0x2b/0x80 [ 71.932109][ T6309] ? hook_file_ioctl_common+0x144/0x410 [ 71.932143][ T6309] ? __fget_files+0x20e/0x3c0 [ 71.932172][ T6309] security_file_ioctl+0x9b/0x240 [ 71.932198][ T6309] __x64_sys_ioctl+0xb7/0x210 [ 71.932221][ T6309] do_syscall_64+0xcd/0xf80 [ 71.932246][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.932264][ T6309] RIP: 0033:0x7f74f978f7c9 [ 71.932278][ T6309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.932294][ T6309] RSP: 002b:00007f74fa6de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.932311][ T6309] RAX: ffffffffffffffda RBX: 00007f74f99e6090 RCX: 00007f74f978f7c9 [ 71.932328][ T6309] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 71.932338][ T6309] RBP: 00007f74fa6de090 R08: 0000000000000000 R09: 0000000000000000 [ 71.932349][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.932359][ T6309] R13: 00007f74f99e6128 R14: 00007f74f99e6090 R15: 00007ffed9ff8f08 [ 71.932385][ T6309] [ 71.932391][ T6309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.059428][ T9] usb 7-1: USB disconnect, device number 4 [ 72.491788][ T6339] ======================================================= [ 72.491788][ T6339] WARNING: The mand mount option has been deprecated and [ 72.491788][ T6339] and is ignored by this kernel. Remove the mand [ 72.491788][ T6339] option from the mount to silence this warning. [ 72.491788][ T6339] ======================================================= [ 72.531138][ T5949] Bluetooth: hci0: command 0x0419 tx timeout [ 72.566098][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 72.566113][ T40] audit: type=1400 audit(1768133591.907:252): avc: denied { ioctl } for pid=6342 comm="syz.3.105" path="socket:[13411]" dev="sockfs" ino=13411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.611187][ T5949] Bluetooth: hci2: command 0x040f tx timeout [ 72.636541][ T6349] validate_nla: 6 callbacks suppressed [ 72.636600][ T6349] netlink: 'syz.0.107': attribute type 7 has an invalid length. [ 72.642142][ T6349] netlink: 'syz.0.107': attribute type 27 has an invalid length. [ 72.645983][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.646764][ T6349] netlink: 'syz.0.107': attribute type 7 has an invalid length. [ 72.649649][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.652682][ T6349] netlink: 'syz.0.107': attribute type 27 has an invalid length. [ 72.693112][ T40] audit: type=1400 audit(1768133592.037:253): avc: denied { ioctl } for pid=6354 comm="syz.0.110" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11027 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.706394][ T6355] Invalid source name [ 72.706939][ T5949] Bluetooth: hci3: command 0x040f tx timeout [ 72.706966][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 72.707774][ T6355] UBIFS error (pid: 6355): cannot open "/dev/sr0", error -22 [ 72.712231][ T6350] 0x100000000001e20-0x100000000021e23 : "" [ 72.713980][ T40] audit: type=1400 audit(1768133592.047:254): avc: denied { mounton } for pid=6354 comm="syz.0.110" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.716106][ T6350] mtd: partition "" is out of reach -- disabled [ 72.718332][ T40] audit: type=1400 audit(1768133592.047:255): avc: denied { write } for pid=6348 comm="syz.2.108" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 72.740484][ T5343] udevd[5343]: worker [5942] terminated by signal 33 (Unknown signal 33) [ 72.740682][ T40] audit: type=1400 audit(1768133592.047:256): avc: denied { open } for pid=6348 comm="syz.2.108" path="/15/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 72.744401][ T5343] udevd[5343]: worker [5942] failed while handling '/devices/virtual/block/loop0' [ 72.754168][ T40] audit: type=1400 audit(1768133592.047:257): avc: denied { ioctl } for pid=6348 comm="syz.2.108" path="/15/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 72.769833][ T6350] ftl_cs: FTL header not found. [ 72.795236][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.802703][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.920462][ T1148] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.926891][ T40] audit: type=1400 audit(1768133592.257:258): avc: denied { create } for pid=6352 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.927167][ T1148] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.933526][ T40] audit: type=1400 audit(1768133592.267:259): avc: denied { bind } for pid=6352 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.944298][ T40] audit: type=1400 audit(1768133592.287:260): avc: denied { create } for pid=6352 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.959788][ T1148] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.964128][ T1148] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.001698][ T40] audit: type=1400 audit(1768133592.347:261): avc: denied { setopt } for pid=6352 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.278793][ T6388] tipc: Started in network mode [ 73.281120][ T6388] tipc: Node identity 52c612fd243c, cluster identity 4711 [ 73.285770][ T6388] tipc: Enabled bearer , priority 0 [ 73.290588][ T6388] syzkaller0: entered promiscuous mode [ 73.291751][ T6389] netlink: 'syz.2.118': attribute type 7 has an invalid length. [ 73.295458][ T6389] netlink: 'syz.2.118': attribute type 27 has an invalid length. [ 73.297578][ T6388] syzkaller0: entered allmulticast mode [ 73.298208][ T6389] netlink: 'syz.2.118': attribute type 7 has an invalid length. [ 73.303324][ T6389] netlink: 'syz.2.118': attribute type 27 has an invalid length. [ 73.310922][ T6388] syzkaller0: mtu greater than device maximum [ 73.316032][ T6386] tipc: Resetting bearer [ 73.335135][ T6386] tipc: Disabling bearer [ 73.337743][ T6391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.120'. [ 73.409385][ T6393] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 73.412726][ T6393] SELinux: failed to load policy [ 73.445476][ T6393] ptrace attach of "/syz-executor exec"[6398] was attempted by "/syz-executor exec"[6393] [ 73.774090][ T6418] xt_hashlimit: size too large, truncated to 1048576 [ 73.955389][ T6432] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.963307][ T6432] CIFS mount error: No usable UNC path provided in device string! [ 73.963307][ T6432] [ 73.966544][ T6432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.014491][ T6434] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 74.059289][ T6434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.063720][ T6434] bond1: (slave bond2): making interface the new active one [ 74.066614][ T6434] bond1: (slave bond2): Enslaving as an active interface with an up link [ 74.076851][ T6434] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 74.227575][ T6450] FAULT_INJECTION: forcing a failure. [ 74.227575][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 74.233124][ T6450] CPU: 2 UID: 0 PID: 6450 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(full) [ 74.233139][ T6450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.233145][ T6450] Call Trace: [ 74.233149][ T6450] [ 74.233154][ T6450] dump_stack_lvl+0x16c/0x1f0 [ 74.233189][ T6450] should_fail_ex+0x512/0x640 [ 74.233213][ T6450] ? fs_reclaim_acquire+0xae/0x150 [ 74.233229][ T6450] should_failslab+0xc2/0x120 [ 74.233244][ T6450] __kmalloc_noprof+0xeb/0x910 [ 74.233263][ T6450] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 74.233282][ T6450] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 74.233297][ T6450] tomoyo_realpath_from_path+0xc2/0x6e0 [ 74.233314][ T6450] ? tomoyo_profile+0x47/0x60 [ 74.233332][ T6450] tomoyo_path_number_perm+0x245/0x580 [ 74.233344][ T6450] ? tomoyo_path_number_perm+0x237/0x580 [ 74.233358][ T6450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.233372][ T6450] ? find_held_lock+0x2b/0x80 [ 74.233399][ T6450] ? __pfx___might_resched+0x10/0x10 [ 74.233410][ T6450] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 74.233420][ T6450] ? cleanup_mnt+0x26b/0x450 [ 74.233434][ T6450] ? hook_file_ioctl_common+0x144/0x410 [ 74.233458][ T6450] security_file_ioctl+0x9b/0x240 [ 74.233474][ T6450] __x64_sys_ioctl+0xb7/0x210 [ 74.233487][ T6450] do_syscall_64+0xcd/0xf80 [ 74.233508][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.233519][ T6450] RIP: 0033:0x7f4e3718f7c9 [ 74.233528][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.233539][ T6450] RSP: 002b:00007f4e353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.233549][ T6450] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718f7c9 [ 74.233555][ T6450] RDX: 0000000000000006 RSI: 0000000000005441 RDI: 0000000000000003 [ 74.233561][ T6450] RBP: 00007f4e353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.233567][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.233573][ T6450] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 74.233598][ T6450] [ 74.233785][ T6450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.412825][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.143'. [ 74.416775][ T6464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 74.423625][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.488886][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'. [ 74.595638][ T6504] i2c i2c-1: Invalid block write size 34 [ 74.611362][ T5949] Bluetooth: hci0: command 0x0419 tx timeout [ 74.701176][ T5949] Bluetooth: hci2: command 0x040f tx timeout [ 74.755612][ T6520] macvlan0: left promiscuous mode [ 74.757330][ T6520] netlink: 'syz.1.167': attribute type 2 has an invalid length. [ 74.772121][ T5949] Bluetooth: hci3: command 0x040f tx timeout [ 74.781103][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 74.803106][ T6527] veth0_macvtap: left promiscuous mode [ 75.663044][ T6582] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.675031][ T6575] netlink: 168 bytes leftover after parsing attributes in process `syz.2.191'. [ 75.708116][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 75.713159][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 75.945554][ T6615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.206'. [ 75.956820][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.376320][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.378464][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.731027][ T6662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.736473][ T6662] __nla_validate_parse: 1 callbacks suppressed [ 76.736487][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 76.752044][ T6662] vlan2: entered allmulticast mode [ 76.754693][ T6662] bond1: entered allmulticast mode [ 76.784869][ T5949] Bluetooth: hci2: command 0x040f tx timeout [ 76.853179][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 76.853201][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 76.911302][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 76.914328][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 77.175768][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 77.179228][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 77.324943][ T6724] FAULT_INJECTION: forcing a failure. [ 77.324943][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.329225][ T6724] CPU: 3 UID: 0 PID: 6724 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(full) [ 77.329239][ T6724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.329246][ T6724] Call Trace: [ 77.329250][ T6724] [ 77.329255][ T6724] dump_stack_lvl+0x16c/0x1f0 [ 77.329273][ T6724] should_fail_ex+0x512/0x640 [ 77.329293][ T6724] _copy_to_user+0x32/0xd0 [ 77.329310][ T6724] simple_read_from_buffer+0xcb/0x170 [ 77.329327][ T6724] proc_fail_nth_read+0x197/0x240 [ 77.329339][ T6724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.329351][ T6724] ? rw_verify_area+0xcf/0x6c0 [ 77.329363][ T6724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.329374][ T6724] vfs_read+0x1e4/0xcf0 [ 77.329388][ T6724] ? __pfx___mutex_lock+0x10/0x10 [ 77.329405][ T6724] ? __pfx_vfs_read+0x10/0x10 [ 77.329421][ T6724] ? __fget_files+0x20e/0x3c0 [ 77.329441][ T6724] ksys_read+0x12a/0x250 [ 77.329456][ T6724] ? __pfx_ksys_read+0x10/0x10 [ 77.329473][ T6724] do_syscall_64+0xcd/0xf80 [ 77.329488][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.329500][ T6724] RIP: 0033:0x7f4e3718e1dc [ 77.329509][ T6724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.329519][ T6724] RSP: 002b:00007f4e353f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.329530][ T6724] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718e1dc [ 77.329537][ T6724] RDX: 000000000000000f RSI: 00007f4e353f60a0 RDI: 0000000000000003 [ 77.329543][ T6724] RBP: 00007f4e353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.329549][ T6724] R10: 0000000000004100 R11: 0000000000000246 R12: 0000000000000001 [ 77.329555][ T6724] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 77.329569][ T6724] [ 77.571738][ T40] kauditd_printk_skb: 11119 callbacks suppressed [ 77.571749][ T40] audit: type=1400 audit(1768133596.907:11051): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.591308][ T40] audit: type=1400 audit(1768133596.907:11052): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.595267][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.600240][ T5645] audit: audit_lost=111 audit_rate_limit=0 audit_backlog_limit=64 [ 77.601033][ T40] audit: type=1400 audit(1768133596.907:11053): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.603579][ T5645] audit: backlog limit exceeded [ 77.611404][ T40] audit: type=1400 audit(1768133596.917:11054): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.618061][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.618223][ T40] audit: type=1400 audit(1768133596.917:11055): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.620148][ T5645] audit: audit_lost=112 audit_rate_limit=0 audit_backlog_limit=64 [ 78.411899][ T6796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3360 sclass=netlink_route_socket pid=6796 comm=syz.0.280 [ 78.426662][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.429311][ T6798] validate_nla: 5 callbacks suppressed [ 78.429319][ T6798] netlink: 'syz.1.279': attribute type 18 has an invalid length. [ 78.451915][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.502845][ T90] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.503016][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.505716][ T90] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.505737][ T90] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.505754][ T90] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.515858][ T6798] netlink: 'syz.1.279': attribute type 18 has an invalid length. [ 78.521227][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.560891][ T6805] bond3: option xmit_hash_policy: invalid value (6) [ 78.576575][ T6805] bond3 (unregistering): Released all slaves [ 78.582523][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 78.604231][ T6811] syzkaller0: entered promiscuous mode [ 78.606739][ T6811] syzkaller0: entered allmulticast mode [ 79.727677][ T64] Bluetooth: hci3: unexpected event for opcode 0x080c [ 79.730368][ T64] Bluetooth: hci3: unexpected event for opcode 0x080c [ 79.741366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.784474][ T6914] warning: `syz.0.325' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.968316][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.979370][ T6930] batadv_slave_0: entered promiscuous mode [ 79.982519][ T6930] batadv_slave_0: entered allmulticast mode [ 80.086993][ T6949] FAULT_INJECTION: forcing a failure. [ 80.086993][ T6949] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.092954][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.3.341 Not tainted syzkaller #0 PREEMPT(full) [ 80.092969][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.092976][ T6949] Call Trace: [ 80.092979][ T6949] [ 80.092984][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 80.093003][ T6949] should_fail_ex+0x512/0x640 [ 80.093022][ T6949] should_fail_alloc_page+0xe7/0x130 [ 80.093039][ T6949] prepare_alloc_pages+0x401/0x670 [ 80.093054][ T6949] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.093069][ T6949] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 80.093082][ T6949] ? arch_stack_walk+0xa6/0x100 [ 80.093100][ T6949] ? do_raw_spin_lock+0x12c/0x2b0 [ 80.093116][ T6949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.093127][ T6949] ? find_held_lock+0x2b/0x80 [ 80.093147][ T6949] ? debug_check_no_obj_freed+0x31f/0x600 [ 80.093164][ T6949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.093178][ T6949] ? policy_nodemask+0xea/0x4e0 [ 80.093194][ T6949] alloc_pages_mpol+0x1fb/0x550 [ 80.093208][ T6949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.093228][ T6949] ? _raw_spin_unlock+0x28/0x50 [ 80.093255][ T6949] ? __free_frozen_pages+0x817/0x1170 [ 80.093273][ T6949] alloc_pages_noprof+0x131/0x390 [ 80.093287][ T6949] get_free_pages_noprof+0x10/0xb0 [ 80.093301][ T6949] vcs_read+0xba/0xbe0 [ 80.093314][ T6949] ? __import_iovec+0x1dd/0x650 [ 80.093330][ T6949] ? avc_policy_seqno+0x9/0x20 [ 80.093340][ T6949] ? selinux_file_permission+0x126/0x660 [ 80.093356][ T6949] ? __pfx_vcs_read+0x10/0x10 [ 80.093373][ T6949] ? bpf_lsm_file_permission+0x9/0x10 [ 80.093384][ T6949] ? security_file_permission+0x71/0x210 [ 80.093399][ T6949] ? iov_iter_advance+0x1e3/0x6c0 [ 80.093414][ T6949] ? rw_verify_area+0xcf/0x6c0 [ 80.093427][ T6949] ? __pfx_vcs_read+0x10/0x10 [ 80.093443][ T6949] vfs_readv+0x5c1/0x8b0 [ 80.093458][ T6949] ? __pfx_vfs_readv+0x10/0x10 [ 80.093481][ T6949] ? __fget_files+0x20e/0x3c0 [ 80.093496][ T6949] ? __fget_files+0x110/0x3c0 [ 80.093514][ T6949] ? do_readv+0x132/0x340 [ 80.093524][ T6949] do_readv+0x132/0x340 [ 80.093536][ T6949] ? __pfx_do_readv+0x10/0x10 [ 80.093552][ T6949] do_syscall_64+0xcd/0xf80 [ 80.093569][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.093580][ T6949] RIP: 0033:0x7f4e3718f7c9 [ 80.093589][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.093599][ T6949] RSP: 002b:00007f4e353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 80.093609][ T6949] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718f7c9 [ 80.093616][ T6949] RDX: 0000000000000005 RSI: 0000200000001f40 RDI: 0000000000000003 [ 80.093622][ T6949] RBP: 00007f4e353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.093628][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.093634][ T6949] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 80.093647][ T6949] [ 80.110000][ T6026] IPVS: starting estimator thread 0... [ 80.208096][ T6961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.256186][ T6962] syzkaller0: entered promiscuous mode [ 80.258423][ T6962] syzkaller0: entered allmulticast mode [ 80.311229][ T6950] IPVS: using max 44 ests per chain, 105600 per kthread [ 82.284967][ T7097] __nla_validate_parse: 10 callbacks suppressed [ 82.284981][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.404'. [ 82.293883][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.404'. [ 82.423929][ T7108] syz.3.410 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.473865][ T7112] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 82.497912][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.581287][ T40] kauditd_printk_skb: 31481 callbacks suppressed [ 82.581299][ T40] audit: type=1400 audit(1768133601.927:41168): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.590618][ T40] audit: type=1400 audit(1768133601.927:41169): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.594672][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.597821][ T7127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.599572][ T5645] audit: audit_lost=569 audit_rate_limit=0 audit_backlog_limit=64 [ 82.599582][ T5645] audit: backlog limit exceeded [ 82.599642][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.599650][ T5645] audit: audit_lost=570 audit_rate_limit=0 audit_backlog_limit=64 [ 82.599657][ T5645] audit: backlog limit exceeded [ 82.599685][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.618856][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.417'. [ 82.658423][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.417'. [ 82.676886][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 82.693988][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 82.724753][ T7137] capability: warning: `syz.1.422' uses 32-bit capabilities (legacy support in use) [ 82.801808][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 83.088740][ T7174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7174 comm=syz.0.437 [ 83.095313][ T7174] syzkaller0: mtu less than device minimum [ 83.163718][ T7185] netlink: 9 bytes leftover after parsing attributes in process `syz.2.442'. [ 83.166648][ T7185] 0·: renamed from hsr0 (while UP) [ 83.170353][ T7185] 0·: entered allmulticast mode [ 83.172124][ T7185] hsr_slave_0: entered allmulticast mode [ 83.174390][ T7185] hsr_slave_1: entered allmulticast mode [ 83.177571][ T7185] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 83.289464][ T7196] netlink: 'syz.0.447': attribute type 5 has an invalid length. [ 83.347774][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 83.560607][ T7221] ip6gre1: entered promiscuous mode [ 83.573593][ T7221] ip6gre1: entered allmulticast mode [ 83.722831][ T64] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 83.727056][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 83.783493][ T7235] macvtap1: entered promiscuous mode [ 83.785741][ T7235] macvtap1: entered allmulticast mode [ 83.787729][ T7235] veth0_to_team: entered allmulticast mode [ 83.789709][ T7235] veth0_to_team: entered promiscuous mode [ 83.793392][ T7235] team0: Device macvtap1 failed to register rx_handler [ 83.796855][ T7235] veth0_to_team: left allmulticast mode [ 83.799231][ T7235] veth0_to_team: left promiscuous mode [ 83.988121][ T7251] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 84.383465][ T7305] FAULT_INJECTION: forcing a failure. [ 84.383465][ T7305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.389535][ T7305] CPU: 3 UID: 0 PID: 7305 Comm: syz.0.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.389552][ T7305] Tainted: [L]=SOFTLOCKUP [ 84.389556][ T7305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.389563][ T7305] Call Trace: [ 84.389567][ T7305] [ 84.389571][ T7305] dump_stack_lvl+0x16c/0x1f0 [ 84.389590][ T7305] should_fail_ex+0x512/0x640 [ 84.389609][ T7305] _copy_from_iter+0x2a4/0x16c0 [ 84.389627][ T7305] ? __alloc_skb+0x220/0x410 [ 84.389638][ T7305] ? __alloc_skb+0x35d/0x410 [ 84.389647][ T7305] ? __pfx__copy_from_iter+0x10/0x10 [ 84.389663][ T7305] ? netlink_autobind.isra.0+0x158/0x370 [ 84.389682][ T7305] netlink_sendmsg+0x820/0xdd0 [ 84.389698][ T7305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.389717][ T7305] ____sys_sendmsg+0xa5d/0xc30 [ 84.389733][ T7305] ? copy_msghdr_from_user+0x10a/0x160 [ 84.389745][ T7305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.389765][ T7305] ___sys_sendmsg+0x134/0x1d0 [ 84.389777][ T7305] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.389804][ T7305] __sys_sendmsg+0x16d/0x220 [ 84.389816][ T7305] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.389836][ T7305] do_syscall_64+0xcd/0xf80 [ 84.389851][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.389863][ T7305] RIP: 0033:0x7f74f978f7c9 [ 84.389872][ T7305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.389882][ T7305] RSP: 002b:00007f74fa6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.389893][ T7305] RAX: ffffffffffffffda RBX: 00007f74f99e5fa0 RCX: 00007f74f978f7c9 [ 84.389899][ T7305] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 84.389905][ T7305] RBP: 00007f74fa6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 84.389911][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.389917][ T7305] R13: 00007f74f99e6038 R14: 00007f74f99e5fa0 R15: 00007ffed9ff8f08 [ 84.389930][ T7305] [ 84.459278][ T7313] netlink: 'syz.1.496': attribute type 7 has an invalid length. [ 84.465667][ T7313] netlink: 'syz.1.496': attribute type 7 has an invalid length. [ 84.778302][ T7337] can0: slcan on ttynull. [ 84.852295][ T7336] can0 (unregistered): slcan off ttynull. [ 84.891857][ T7363] FAULT_INJECTION: forcing a failure. [ 84.891857][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.898101][ T7363] CPU: 3 UID: 0 PID: 7363 Comm: syz.3.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.898119][ T7363] Tainted: [L]=SOFTLOCKUP [ 84.898123][ T7363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.898129][ T7363] Call Trace: [ 84.898133][ T7363] [ 84.898137][ T7363] dump_stack_lvl+0x16c/0x1f0 [ 84.898188][ T7363] should_fail_ex+0x512/0x640 [ 84.898208][ T7363] _copy_to_user+0x32/0xd0 [ 84.898226][ T7363] simple_read_from_buffer+0xcb/0x170 [ 84.898243][ T7363] proc_fail_nth_read+0x197/0x240 [ 84.898254][ T7363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.898267][ T7363] ? rw_verify_area+0xcf/0x6c0 [ 84.898284][ T7363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.898300][ T7363] vfs_read+0x1e4/0xcf0 [ 84.898320][ T7363] ? __pfx___mutex_lock+0x10/0x10 [ 84.898337][ T7363] ? __pfx_vfs_read+0x10/0x10 [ 84.898354][ T7363] ? __fget_files+0x20e/0x3c0 [ 84.898373][ T7363] ksys_read+0x12a/0x250 [ 84.898386][ T7363] ? __pfx_ksys_read+0x10/0x10 [ 84.898403][ T7363] do_syscall_64+0xcd/0xf80 [ 84.898419][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.898431][ T7363] RIP: 0033:0x7f4e3718e1dc [ 84.898440][ T7363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.898450][ T7363] RSP: 002b:00007f4e353f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.898460][ T7363] RAX: ffffffffffffffda RBX: 00007f4e373e5fa0 RCX: 00007f4e3718e1dc [ 84.898467][ T7363] RDX: 000000000000000f RSI: 00007f4e353f60a0 RDI: 0000000000000003 [ 84.898473][ T7363] RBP: 00007f4e353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 84.898479][ T7363] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 84.898485][ T7363] R13: 00007f4e373e6038 R14: 00007f4e373e5fa0 R15: 00007ffe01ead1d8 [ 84.898499][ T7363] [ 84.969223][ T7367] FAULT_INJECTION: forcing a failure. [ 84.969223][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 84.975430][ T7367] CPU: 2 UID: 0 PID: 7367 Comm: syz.0.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.975457][ T7367] Tainted: [L]=SOFTLOCKUP [ 84.975463][ T7367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.975473][ T7367] Call Trace: [ 84.975480][ T7367] [ 84.975487][ T7367] dump_stack_lvl+0x16c/0x1f0 [ 84.975522][ T7367] should_fail_ex+0x512/0x640 [ 84.975554][ T7367] should_failslab+0xc2/0x120 [ 84.975578][ T7367] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 84.975601][ T7367] ? sidtab_sid2str_get+0x17a/0x680 [ 84.975632][ T7367] ? kmemdup_noprof+0x29/0x60 [ 84.975649][ T7367] kmemdup_noprof+0x29/0x60 [ 84.975667][ T7367] sidtab_sid2str_get+0x17a/0x680 [ 84.975695][ T7367] sidtab_entry_to_string+0x33/0x110 [ 84.975722][ T7367] security_sid_to_context_core+0x35c/0x640 [ 84.975749][ T7367] avc_audit_post_callback+0x1aa/0x8c0 [ 84.975778][ T7367] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 84.975802][ T7367] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 84.975828][ T7367] ? skb_put+0x138/0x1b0 [ 84.975854][ T7367] ? audit_log_n_string+0x253/0x550 [ 84.975881][ T7367] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 84.975908][ T7367] common_lsm_audit+0x24e/0x300 [ 84.975934][ T7367] ? __pfx_common_lsm_audit+0x10/0x10 [ 84.975956][ T7367] ? __lock_acquire+0x436/0x2890 [ 84.975986][ T7367] slow_avc_audit+0x186/0x210 [ 84.976003][ T7367] ? __pfx_slow_avc_audit+0x10/0x10 [ 84.976032][ T7367] ? find_held_lock+0x2b/0x80 [ 84.976057][ T7367] ? avc_denied+0x14a/0x190 [ 84.976086][ T7367] ? avc_has_perm_noaudit+0x306/0x3b0 [ 84.976108][ T7367] avc_has_perm+0x1b5/0x1f0 [ 84.976126][ T7367] ? __pfx_avc_has_perm+0x10/0x10 [ 84.976142][ T7367] ? find_held_lock+0x2b/0x80 [ 84.976166][ T7367] ? __might_fault+0xe3/0x190 [ 84.976181][ T7367] ? __might_fault+0xe3/0x190 [ 84.976195][ T7367] ? __might_fault+0x13b/0x190 [ 84.976215][ T7367] selinux_bpf+0xd6/0x130 [ 84.976230][ T7367] security_bpf+0x241/0x270 [ 84.976253][ T7367] __sys_bpf+0x27c/0x4980 [ 84.976282][ T7367] ? __pfx___sys_bpf+0x10/0x10 [ 84.976307][ T7367] ? find_held_lock+0x2b/0x80 [ 84.976338][ T7367] ? find_held_lock+0x2b/0x80 [ 84.976371][ T7367] ? __mutex_unlock_slowpath+0x161/0x790 [ 84.976412][ T7367] ? fput+0x70/0xf0 [ 84.976428][ T7367] ? ksys_write+0x1ac/0x250 [ 84.976450][ T7367] ? __pfx_ksys_write+0x10/0x10 [ 84.976477][ T7367] __x64_sys_bpf+0x78/0xc0 [ 84.976505][ T7367] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.976528][ T7367] do_syscall_64+0xcd/0xf80 [ 84.976552][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.976568][ T7367] RIP: 0033:0x7f74f978f7c9 [ 84.976582][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.976599][ T7367] RSP: 002b:00007f74fa6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.976615][ T7367] RAX: ffffffffffffffda RBX: 00007f74f99e5fa0 RCX: 00007f74f978f7c9 [ 84.976626][ T7367] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000000 [ 84.976636][ T7367] RBP: 00007f74fa6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 84.976646][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.976655][ T7367] R13: 00007f74f99e6038 R14: 00007f74f99e5fa0 R15: 00007ffed9ff8f08 [ 84.976680][ T7367] [ 85.081029][ T5936] ------------[ cut here ]------------ [ 85.115043][ T5936] [CRTC:37:crtc-0] vblank wait timed out [ 85.117372][ T5936] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1920 at drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0, CPU#3: kworker/3:3/5936 [ 85.123581][ T5936] Modules linked in: [ 85.125813][ T5936] CPU: 3 UID: 0 PID: 5936 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.129973][ T5936] Tainted: [L]=SOFTLOCKUP [ 85.131960][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.135860][ T5936] Workqueue: events drm_fb_helper_damage_work [ 85.138265][ T5936] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 85.141208][ T5936] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d a0 57 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 bb 6e 66 fc e9 81 fe ff ff e8 d1 [ 85.148368][ T5936] RSP: 0018:ffffc9000322f688 EFLAGS: 00010246 [ 85.150326][ T5936] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11004d88023 [ 85.153761][ T5936] RDX: ffff8881027bef20 RSI: 0000000000000025 RDI: ffffffff9092d1c0 [ 85.156720][ T5936] RBP: ffff888026c40040 R08: 0000000000000005 R09: 0000000000000000 [ 85.159375][ T5936] R10: 0000000000000000 R11: ffff8880307daff0 R12: dffffc0000000000 [ 85.162939][ T5936] R13: ffff88802913fc00 R14: 0000000000000000 R15: 0000000000000000 [ 85.165697][ T5936] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 85.168962][ T5936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.171958][ T5936] CR2: 000000110c36a078 CR3: 0000000026685000 CR4: 0000000000352ef0 [ 85.174564][ T5936] Call Trace: [ 85.175962][ T5936] [ 85.177189][ T5936] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 85.179682][ T5936] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.182597][ T5936] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.184629][ T5936] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.186882][ T5936] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 85.188926][ T5936] drm_atomic_helper_commit_tail+0xff/0x130 [ 85.191150][ T5936] commit_tail+0x334/0x410 [ 85.192996][ T5936] drm_atomic_helper_commit+0x300/0x380 [ 85.195052][ T5936] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 85.197171][ T5936] drm_atomic_commit+0x234/0x300 [ 85.199143][ T5936] ? __pfx_drm_atomic_commit+0x10/0x10 [ 85.200890][ T5936] ? __pfx___drm_printfn_info+0x10/0x10 [ 85.203307][ T5936] ? modeset_lock+0x114/0x6d0 [ 85.205384][ T5936] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 85.207368][ T5936] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 85.209712][ T5936] ? do_raw_spin_lock+0x12c/0x2b0 [ 85.212181][ T5936] ? find_held_lock+0x2b/0x80 [ 85.214137][ T5936] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 85.216293][ T5936] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 85.218826][ T5936] drm_fb_helper_damage_work+0x34a/0x650 [ 85.220626][ T5936] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 85.223231][ T5936] ? rcu_is_watching+0x12/0xc0 [ 85.224882][ T5936] process_one_work+0x9ba/0x1b20 [ 85.226703][ T5936] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 85.229144][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 85.231103][ T5936] ? assign_work+0x1a0/0x250 [ 85.233036][ T5936] worker_thread+0x6c8/0xf10 [ 85.234672][ T5936] ? __kthread_parkme+0x19e/0x250 [ 85.236512][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 85.238545][ T5936] kthread+0x3c5/0x780 [ 85.239875][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.241999][ T5936] ? rcu_is_watching+0x12/0xc0 [ 85.244027][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.245600][ T5936] ret_from_fork+0x983/0xb10 [ 85.247288][ T5936] ? __pfx_ret_from_fork+0x10/0x10 [ 85.249313][ T5936] ? __switch_to+0x7af/0x10d0 [ 85.250839][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.252760][ T5936] ret_from_fork_asm+0x1a/0x30 [ 85.254616][ T5936] [ 85.255623][ T5936] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.258449][ T5936] CPU: 3 UID: 0 PID: 5936 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.262308][ T5936] Tainted: [L]=SOFTLOCKUP [ 85.263949][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.267854][ T5936] Workqueue: events drm_fb_helper_damage_work [ 85.269853][ T5936] Call Trace: [ 85.271047][ T5936] [ 85.272282][ T5936] dump_stack_lvl+0x3d/0x1f0 [ 85.274053][ T5936] vpanic+0x640/0x6f0 [ 85.275364][ T5936] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 85.278242][ T5936] panic+0xca/0xd0 [ 85.279501][ T5936] ? __pfx_panic+0x10/0x10 [ 85.281079][ T5936] ? check_panic_on_warn+0x1f/0xb0 [ 85.283216][ T5936] check_panic_on_warn+0xab/0xb0 [ 85.285071][ T5936] __warn+0x108/0x3c0 [ 85.286352][ T5936] __report_bug+0x2a0/0x520 [ 85.288133][ T5936] ? drm_atomic_helper_wait_for_vblanks.part.0+0x760/0x8c0 [ 85.290805][ T5936] ? __pfx___report_bug+0x10/0x10 [ 85.292536][ T5936] ? debug_object_free+0x295/0x550 [ 85.294600][ T5936] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.296239][ T5936] report_bug_entry+0xe1/0x290 [ 85.298178][ T5936] ? drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 85.300553][ T5936] handle_bug+0x18a/0x260 [ 85.302116][ T5936] exc_invalid_op+0x17/0x50 [ 85.303881][ T5936] asm_exc_invalid_op+0x1a/0x20 [ 85.305394][ T5936] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 [ 85.308457][ T5936] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d a0 57 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 bb 6e 66 fc e9 81 fe ff ff e8 d1 [ 85.315138][ T5936] RSP: 0018:ffffc9000322f688 EFLAGS: 00010246 [ 85.317342][ T5936] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11004d88023 [ 85.320439][ T5936] RDX: ffff8881027bef20 RSI: 0000000000000025 RDI: ffffffff9092d1c0 [ 85.323671][ T5936] RBP: ffff888026c40040 R08: 0000000000000005 R09: 0000000000000000 [ 85.326764][ T5936] R10: 0000000000000000 R11: ffff8880307daff0 R12: dffffc0000000000 [ 85.329606][ T5936] R13: ffff88802913fc00 R14: 0000000000000000 R15: 0000000000000000 [ 85.332712][ T5936] ? drm_atomic_helper_wait_for_vblanks.part.0+0x70e/0x8c0 [ 85.335678][ T5936] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 85.338430][ T5936] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.340770][ T5936] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.342956][ T5936] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.345195][ T5936] ? drm_atomic_helper_commit_hw_done+0x330/0x490 [ 85.347701][ T5936] drm_atomic_helper_commit_tail+0xff/0x130 [ 85.350144][ T5936] commit_tail+0x334/0x410 [ 85.352018][ T5936] drm_atomic_helper_commit+0x300/0x380 [ 85.353915][ T5936] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 85.356443][ T5936] drm_atomic_commit+0x234/0x300 [ 85.358492][ T5936] ? __pfx_drm_atomic_commit+0x10/0x10 [ 85.360641][ T5936] ? __pfx___drm_printfn_info+0x10/0x10 [ 85.362646][ T5936] ? modeset_lock+0x114/0x6d0 [ 85.364573][ T5936] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 85.366881][ T5936] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 85.369073][ T5936] ? do_raw_spin_lock+0x12c/0x2b0 [ 85.371100][ T5936] ? find_held_lock+0x2b/0x80 [ 85.373052][ T5936] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 85.375361][ T5936] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 85.377699][ T5936] drm_fb_helper_damage_work+0x34a/0x650 [ 85.380006][ T5936] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 85.382547][ T5936] ? rcu_is_watching+0x12/0xc0 [ 85.384226][ T5936] process_one_work+0x9ba/0x1b20 [ 85.386189][ T5936] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 85.388901][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 85.391144][ T5936] ? assign_work+0x1a0/0x250 [ 85.393088][ T5936] worker_thread+0x6c8/0xf10 [ 85.394658][ T5936] ? __kthread_parkme+0x19e/0x250 [ 85.396732][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 85.398844][ T5936] kthread+0x3c5/0x780 [ 85.400424][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.402057][ T5936] ? rcu_is_watching+0x12/0xc0 [ 85.404025][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.405926][ T5936] ret_from_fork+0x983/0xb10 [ 85.407493][ T5936] ? __pfx_ret_from_fork+0x10/0x10 [ 85.409567][ T5936] ? __switch_to+0x7af/0x10d0 [ 85.411520][ T5936] ? __pfx_kthread+0x10/0x10 [ 85.413366][ T5936] ret_from_fork_asm+0x1a/0x30 [ 85.414985][ T5936] [ 85.416921][ T5936] Kernel Offset: disabled [ 85.418659][ T5936] Rebooting in 86400 seconds..