last executing test programs: 3.160155949s ago: executing program 1 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r0, r1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r4, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) close_range(r3, 0xffffffffffffffff, 0xf800) 3.098641488s ago: executing program 1 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) 3.039535317s ago: executing program 1 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="107000ffdbdf250700000008000100020000000a0004007770616e330000000000722107f4cd9a51809bfc7f02193f88d900"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x27, 0x6, 0xfff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@delchain={0x1b24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1af0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_ACT={0x1ac4, 0x2, [@m_police={0x4a8, 0x7, 0x0, 0x0, {{0xb}, {0x46c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc8a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x2, 0x5, 0x5, 0x9, 0xfffff37f, 0x7e35d160, 0xfffeffff, 0x9, 0x7ff, 0x260, 0x10001, 0x3, 0x1, 0x7fffffff, 0x2, 0x10001, 0xa, 0xecc, 0x213c, 0xfffffff5, 0x9, 0x9, 0x1, 0x101, 0x6, 0x0, 0x19a, 0x8001, 0x192, 0x7, 0x7, 0x1, 0x2, 0x9, 0xffffffff, 0x2, 0x9, 0x9, 0x10000000, 0xdf21, 0xff, 0x0, 0x5664762f, 0xf, 0x5, 0x5684, 0x1, 0x8, 0x76, 0xfacb, 0xc, 0x0, 0x7ce, 0xfffffffb, 0x9, 0x2, 0x9, 0xb92a, 0x800, 0x64a, 0xe6, 0x4, 0x7, 0x8, 0x431a, 0x8, 0x4, 0x7, 0x1000, 0x4, 0xfffffff9, 0x8001, 0x10, 0x5, 0x2437, 0xfffffffb, 0x1, 0x1, 0x8, 0x2, 0x3, 0x9, 0x6, 0x80, 0x5, 0xf60, 0x7, 0xe5, 0xfffffff8, 0x7fffffff, 0x4, 0x8, 0x8, 0xffff8001, 0x5, 0x1db, 0xbbe, 0x8, 0x6, 0x1, 0x0, 0xf25, 0x5f, 0x4, 0x6, 0xd9, 0xea, 0x6, 0x8, 0x2, 0x5, 0x4, 0x8, 0x4, 0x3, 0x8, 0xd5, 0x9, 0x5, 0x9, 0x5, 0x0, 0x96b2, 0x5, 0x4, 0x0, 0xe5, 0xab2, 0x2, 0x6, 0x4, 0x3, 0x6, 0x7fff, 0x7, 0x4, 0x6, 0x1, 0x3, 0x2, 0x80000000, 0x9, 0x8cc, 0x8, 0x5, 0x4, 0x4f, 0x3, 0x101, 0x81, 0xff, 0x4, 0x47, 0x7, 0x8, 0xffffffff, 0x9, 0x1, 0x6, 0xfffffff0, 0x0, 0x4, 0x4, 0x541, 0x3fe, 0x5, 0x9, 0xaf, 0x4, 0xfffffffa, 0xc, 0x3, 0x5, 0xc21, 0xc, 0x8001, 0x6, 0x8a, 0x5, 0x9, 0x8, 0x3ff, 0x4, 0x8, 0x11e, 0xfffffabd, 0x8, 0x2, 0x2, 0x10000, 0x2, 0x3, 0x81, 0x4, 0xff8000, 0x4, 0x8, 0x1, 0x7, 0x1, 0x9, 0x3, 0xfff, 0x7, 0x4389, 0x2, 0x3, 0x0, 0xffffff4c, 0x1, 0x6, 0xf, 0xb2, 0x5f, 0x909, 0x100, 0x5, 0x1, 0x5, 0x7, 0x5, 0x8, 0xff, 0x9, 0x100, 0x7, 0x80000000, 0x7, 0x6, 0x7ff, 0x9, 0xfff, 0x8001, 0x1, 0x8, 0x1, 0x180000, 0x8, 0x5, 0x9, 0x9, 0x0, 0x8, 0x2, 0x0, 0x1b, 0x1, 0x1, 0x7, 0x3c, 0x80000000, 0x7f, 0x4c0032eb, 0x5, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0xd026, 0x4a7, 0x3, {0x6, 0x0, 0x5, 0x1, 0x6, 0x4a0}, {0x4, 0x2, 0x20, 0xfff9, 0x4, 0x4}, 0x400, 0x9, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}]]}, {0x12, 0x6, "a8c7d22363f97a28d7a6437b6d0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xc0, 0x6, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x6a, 0x6, "8c82c5fbb8bda90d0bc55ab3acc94954ded29462c5bba7b676020148429a0022327a6ac6058591a0321886eabdeced8876d4faf4d89501cbdb48de63ae9a168ba9ae78731e1649bde3b8a62c79f4601e45bf68dd02264f6974381052027e055ac26474035849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x40, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "33751e8640c6f8235454ba5d27babb7c51f0fa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_skbedit={0x30, 0x20, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x430, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x404, 0x6, "3144b31a28effbe19f6c4b2b91c0ae6846dc85043722f199cbf3b0daf8bd174bf95fb5bed0cba25b6ac5402ae3a643248a1a4c1c58b1b0d80e06e795e2ea0adfc0c951e60002c03ea17f3c781512c08f06823e15928a9052010d1f05fead838f95dbc01cf6beabbe89b2933b94234e20546fc650f5ef8cdaaed08305802a1920d4014bf4a6fa04917b670088ff1c292802d075fe84e40364e9d9f8274d105c590da2024dd256b1529d505c881904abf04e13fea8e08e52bae9e0a9d8dfc12630832e290653170a489f2152a06a64788e3a14a33ca61648b91f5a858bf0abfc1e856415d30f2c8def152b606ba404f86e9551ed6f6e5e15703a08d63fa46dd5aa7d32a5dbb09db9d11cfcb6b998d47ef72ed314c9db54c3c2738e43163b3592692b1681ca2d3334630e941917121d09739b3163cdd94698fa6ded1e95f73434e7e297a0fac55dc9e0088d13f145954bfe2f85188e2f64fd16cd676e88b8bcf5cdf513a153ee6f9b7f46724828be55b964e187fa2ff24104dc9b9b5c6afbde602ffa20f3e27e6aa769ee86644e9240f5adf9935ea0daea4d7e9388afa54478142d222771d127e92d7038d67c377be45e29e43727d665eddec43e32174e20905ad7893149e23bc2058d11097f8c23e7e10cebc015c30e7d190df323dee57fe7d173084f7aa2aee7428a0ce6a3f0aebfb19661e0a5116627621370b48f620b5ba66e598c8fd53724d6ba56ee854caa989f902307a36969a0a36a36ac46a3e57fa3dce18d68d70d374963738f4b81202f52566abcf7d2558d84c01d21ed66f023b28a5871cf0bdf38dccbb25b858b4984527c168df55b5d293df77a8e8d34bfd08e7c43e3a0417e2b469d831992ff4866243ca97a18d976df086773f64c41e5d6a1b2c39745cafb959c6fa2dbc640103e03ea49463d4b942f43b570d61b46399d20b5774a7a5ea39b29effdcf01c4b705081ab0603c045bb73b2f7e58dc7be5ff74f304a4541e9510ac6777d16eab716fb1af4750813fd1c79db35e950fffb73c07b50d36b4bbbe120f9575f3abde02a910d3437e4efe86b14b2b63040ef0000a18bf39632e7867187a0063cc3ca967b64cf5825834706389debf9affc7640dd1c922bf4d0ef68174e8428c884cb1085e0dddf085c90eee56f069bdf91a3c2d1d4dd8bb7f8f07ffe37d9aeb7d8c916ae89147db46e13d6af5a916d4899a2af81f2fcfafbc69a5f916fb5af3314725083dc7bd5057ac7b9541edb92bc62fce34dbcf50532b45460daa4316fb8c0e5f5eef493ce427651f11948f0a5dc070be754526e582ea4102a95d104b4383c861dc859c4f3a8fd8aac3a0b2f7576b58b980add3fd2e51b42a73f73681a2c6809bd09e63557affd4475f9aec4703d43b698ad29fabcf3b3200aa79318c3ac2e4a13facea00496cd78ea60c91a21e2599f05716d632"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x1058, 0x10, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xc180}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1b24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.039249195s ago: executing program 1 (id=346): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x9}, 0x80, 0x0}, 0xff00) 2.979002819s ago: executing program 1 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000221000010000000000000000000000000a20000000000a01010000000000000000010000020900010073797a310000000054000000030a01040000000000000000010005a10900030073797a31000000002800048014614800776c616e300000000000000000000000080002407ed7aea508000140000000040900010073797a31"], 0x9c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 2.978837899s ago: executing program 1 (id=349): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000200)=0x4000000000000200, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x800c050}, 0x8090) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x1, 0x1}, &(0x7f00000004c0)=0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000000)={r5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x10, 0xffff}, {0x4, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48804}, 0x4044080) bind$packet(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b5", 0xd9, 0x880, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0xca58c30f81b6079f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.048856929s ago: executing program 0 (id=381): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) setuid(0xee00) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) (async) setuid(0xee00) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) (async) 1.048721798s ago: executing program 0 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x405, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x3000000) 980.073864ms ago: executing program 0 (id=384): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000016001d0d8bfdc3cbdd045798707bed4dca141a780f0f8e7dd5949f605c6373007376e1f13296416e8445b4bbfeccb69d22424209c4ce955fb41e7acae35ec71158678ab9d5173b6190c3bcba9db755691cb07510be56b838e53139c857f5a22c3a856bda1437b0", 0x6b, 0x4, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 518.780411ms ago: executing program 2 (id=394): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000006000000001042088be"], 0xfdef) 518.528856ms ago: executing program 3 (id=395): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x300, 0x10001, 0x0, 0x9, 0x2b9c9d, 0xd9c0b}) 449.32568ms ago: executing program 3 (id=396): ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x20000000) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x5b3, 0x4, {{0xa, 0x4, 0x3, 0x3c, 0x28, 0x66, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x18, [@broadcast, @private=0xa010100, @private=0xa010100, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x5, 0x0, @mcast1, @loopback, 0x7800, 0x1, 0xd7, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7, 0x7, 0x81, 0x0, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xb, 0x85, [@multicast2, @broadcast]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x9, 0x200, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, @local, 0x40, 0x7800, 0xa, 0xba}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth1_macvtap\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x2, 0xdf99, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x67, 0x0, 0x14, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0xe, [{@empty, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000000b80)={0x6c0, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r10}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x378}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000081) r19 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r19, &(0x7f0000001480)={&(0x7f00000012c0)=@phonet={0x23, 0x20, 0x4, 0x7}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001340)="91438e58469373dd60226ea1620dda26644eee84036776fb948a5f3b54bf68edb1e8231397d2954dfc9ee17746d0f19ec8b2194aeed9", 0x36}, {&(0x7f0000001380)="124af8e24cc95b2c0193db56bb279c83ac72a02c2ae9fc53c4583bb8cb5d9923825647d8a1b8e89ceacce127ad45a51c582f593d14113c68413981aeaa07fdbb856a06727682f669c70d3f21c372d860b453b0e5af333a5190a3705b1d49fcfddf95f1e1f1ea28882cb333435839e259cbbd29c30dd3d5cf1bca676cb444fecef719a2c811428e0580ff613604e78b0c6aac945b3a33585466e4e05a494879d2b819c329a9e9d2cd0d15afdeb3ed10338bb4e4", 0xb3}], 0x2}, 0x0) r20 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_RESET(r20, 0x5000, 0x0) r21 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={r16}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r21, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0], 0x0, 0x93, &(0x7f0000001600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) r22 = socket$inet6(0xa, 0x4, 0x1) getsockopt$inet6_int(r22, 0x29, 0x4b, &(0x7f0000001840), &(0x7f0000001880)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000018c0), 0x101680, 0x0) 368.169294ms ago: executing program 2 (id=397): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x140, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf626}]}}]}, 0x140}}, 0x24040004) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x9, 0x2b9c9d, 0xd9c0b}) 367.79194ms ago: executing program 3 (id=398): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000500", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0xffffffff80050200, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 367.66158ms ago: executing program 2 (id=399): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x404480, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x3}, 0x2) 309.592835ms ago: executing program 3 (id=400): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f0000002f00)={0x130, 0x0, r1, {0x4, 0x1, 0x0, '\x00', {0x10000, 0x0, 0x7, 0x3d0, 0x0, 0x0, 0x6000, '\x00', 0x9, 0x4, 0x7, 0x9, {0x200, 0x78}, {0x6, 0x1}, {0x0, 0x3}, {0xb, 0x4}, 0xc221, 0x0, 0xe, 0x200}}}, 0x130) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@rand_addr, @local, 0x0}, &(0x7f00000007c0)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@delchain={0x1b24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1af0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_ACT={0x1ac4, 0x2, [@m_police={0x4a8, 0x7, 0x0, 0x0, {{0xb}, {0x46c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc8a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x2, 0x5, 0x5, 0x9, 0xfffff37f, 0x7e35d160, 0xfffeffff, 0x9, 0x7ff, 0x260, 0x10001, 0x3, 0x1, 0x7fffffff, 0x2, 0x10001, 0xa, 0xecc, 0x213c, 0xfffffff5, 0x9, 0x9, 0x1, 0x101, 0x6, 0x0, 0x19a, 0x8001, 0x192, 0x7, 0x7, 0x1, 0x2, 0x9, 0xffffffff, 0x2, 0x9, 0x9, 0x10000000, 0xdf21, 0xff, 0x0, 0x5664762f, 0xf, 0x5, 0x5684, 0x1, 0x8, 0x76, 0xfacb, 0xc, 0x0, 0x7ce, 0xfffffffb, 0x9, 0x2, 0x9, 0xb92a, 0x800, 0x64a, 0xe6, 0x4, 0x7, 0x8, 0x431a, 0x8, 0x4, 0x7, 0x1000, 0x4, 0xfffffff9, 0x8001, 0x10, 0x5, 0x2437, 0xfffffffb, 0x1, 0x1, 0x8, 0x2, 0x3, 0x9, 0x6, 0x80, 0x5, 0xf60, 0x7, 0xe5, 0xfffffff8, 0x7fffffff, 0x4, 0x8, 0x8, 0xffff8001, 0x5, 0x1db, 0xbbe, 0x8, 0x6, 0x1, 0x0, 0xf25, 0x5f, 0x4, 0x6, 0xd9, 0xea, 0x6, 0x8, 0x2, 0x5, 0x4, 0x8, 0x4, 0x3, 0x8, 0xd5, 0x9, 0x5, 0x9, 0x5, 0x0, 0x96b2, 0x5, 0x4, 0x0, 0xe5, 0xab2, 0x2, 0x6, 0x4, 0x3, 0x6, 0x7fff, 0x7, 0x4, 0x6, 0x1, 0x3, 0x2, 0x80000000, 0x9, 0x8cc, 0x8, 0x5, 0x4, 0x4f, 0x3, 0x101, 0x81, 0xff, 0x4, 0x47, 0x7, 0x8, 0xffffffff, 0x9, 0x1, 0x6, 0xfffffff0, 0x0, 0x4, 0x4, 0x541, 0x3fe, 0x5, 0x9, 0xaf, 0x4, 0xfffffffa, 0xc, 0x3, 0x5, 0xc21, 0xc, 0x8001, 0x6, 0x8a, 0x5, 0x9, 0x8, 0x3ff, 0x4, 0x8, 0x11e, 0xfffffabd, 0x8, 0x2, 0x2, 0x10000, 0x2, 0x3, 0x81, 0x4, 0xff8000, 0x4, 0x8, 0x1, 0x7, 0x1, 0x9, 0x3, 0xfff, 0x7, 0x4389, 0x2, 0x3, 0x0, 0xffffff4c, 0x1, 0x6, 0xf, 0xb2, 0x5f, 0x909, 0x100, 0x5, 0x1, 0x5, 0x7, 0x5, 0x8, 0xff, 0x9, 0x100, 0x7, 0x80000000, 0x7, 0x6, 0x7ff, 0x9, 0xfff, 0x8001, 0x1, 0x8, 0x1, 0x180000, 0x8, 0x5, 0x9, 0x9, 0x0, 0x8, 0x2, 0x0, 0x1b, 0x1, 0x1, 0x7, 0x3c, 0x80000000, 0x7f, 0x4c0032eb, 0x5, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0xd026, 0x4a7, 0x3, {0x6, 0x0, 0x5, 0x1, 0x6, 0x4a0}, {0x4, 0x2, 0x20, 0xfff9, 0x4, 0x4}, 0x400, 0x9, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}]]}, {0x12, 0x6, "a8c7d22363f97a28d7a6437b6d0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xc0, 0x6, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x6a, 0x6, "8c82c5fbb8bda90d0bc55ab3acc94954ded29462c5bba7b676020148429a0022327a6ac6058591a0321886eabdeced8876d4faf4d89501cbdb48de63ae9a168ba9ae78731e1649bde3b8a62c79f4601e45bf68dd02264f6974381052027e055ac26474035849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x40, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "33751e8640c6f8235454ba5d27babb7c51f0fa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_skbedit={0x30, 0x20, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x430, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x404, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x1058, 0x10, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xc180}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1b24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x7, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x80, 0x8000, 0xc3, 0x1}}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, &(0x7f0000000000)={@local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0x150223, r16}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x11c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmsg$qrtr(r3, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/161, 0xa1}], 0x8, &(0x7f0000003040)=[{0x1010, 0x0, 0x0, ""/4096}], 0x1010, 0x40000040}, 0x38, 0x40010002) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 229.92703ms ago: executing program 2 (id=401): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0xfffa, {0x6, 0x1}, {0x17, 0x2}, @rumble={0x81, 0xd}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (fail_nth: 14) 229.618637ms ago: executing program 3 (id=402): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0xcfeab749528c43bd) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 130.070954ms ago: executing program 3 (id=403): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x9, 0x2b9c9d, 0xd9c0b}) (fail_nth: 11) 129.79523ms ago: executing program 0 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd700001fff00007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 129.707478ms ago: executing program 2 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc}, 0x94) 50.168461ms ago: executing program 2 (id=406): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000002e80)=""/4096, 0x1000) accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000002180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x902}], 0x2b, 0x0, 0xfffffffffffffd11, 0x800}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)="a0e0a6024c90865ed8750d2b1fd546e7628d8b387480c9"}, {&(0x7f0000000280)="48345642ccfc98af9e87ad9078af1c"}, {&(0x7f0000000d40)="3884baf5e37e1ab76382c3a57eeb9abef9b59e19261ca28753604ec5d2322b6fbb2ff61260f298d8df5f9f90843a60647b235407f5a301dbbd4bf7e5138b97d0fe3be3212d32d5e84a063b49813497b5c5d35dc0732230f3f42f03b6fa7511f4cbf8ea0bb0120313e9ba5b04d58cf7bf38556b8aed318226ebd4686fcc6f0f400e43b208fc2ad61ecd1cfcfa0eb386af026e45c3cff1a3df68987c779bd57dddecbcff"}], 0x0, &(0x7f0000000e40)=[@op={0x0, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0x5}, @assoc={0x0, 0x117, 0x4, 0x4}, @assoc={0x0, 0x117, 0x4, 0xffffffa0}, @iv={0x0, 0x117, 0x2, 0x0, "1602d2a2fed04231098125b0204e844e"}, @iv={0x0, 0x117, 0x2, 0x0, "be"}]}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000f00)="38461864e633011834baf09177e33ca6715d46e733ded493ed98d9e332e91cd831c32cf2553f3ad79f997f265004dcf29966c5"}, {&(0x7f0000000f40)="7b32895ee88eea5a8ea9c68b985b877716b813851b33cc2796b17f5501d2194965e238b3e66cef1da0fb6d2ce651ccf3d31ec28939e301b4013078a03d6cace3f2b9b17efa"}, {&(0x7f00000002c0)="888389a6aed85f94192c5349ef90c021a323f9cd75fcb048c167b43550f8bb2f0423ce56629644c9fe30b324d7b30e7816db2f1409c067e21c0d9dfa"}, {&(0x7f0000001000)="4be6aae489ddb5f9605b02114eb0635cf0890f5626884d124d92e4e6453aca85143ebf04aeb2d324968b8e26011c07ad52765d33ac6fd1a9fc045eb8c78571b79bac1a3b0909be548310af3653bc0f950ffd222f8434efe260dd8df34f4f38cf119bc6fa839dbdbc3cca4d085e9430904120b17f996a98faf19bebdb97421079ffa83efc967e702359917408eb905befd0eec84f0c8a6b15188eb799ba8868c353866f278d8121a85f30c770c4eb5aedb89d180bb5603d9399ef6ccd6110e67379641ebf3a4375f066d9d538cb365d2c78e1066f2364a78efeae4048f5d142f10ee77556243d302ca65b225a4c0e30585ac0895d2fbbdeb999d0f4d3b40094fe065d2967c6e508fc4a034a4073e375694d9568df7b3fa3895721cf254141a5925fa78385671b5345fc5942f6ea582385e019144bfc6deb288f2178bfa82707db16c242cd42ed7e155c0500888ee5538eb495bbcec1b90b2c9947e0a0d93225a7128698f7ac6121abe293e6162735d3669f9dede0b6b740cdd8c0ee3da0f683f1960d3612aaaa819bcc9399bc1ec94c929eb0c98c80e4b1f02518d9d9af475821e704260f6871719f1631c3718a4bff4cfff9f7cd6d74b4ff7df21d6049a71d430990cedb37a7b67cce708f054d8860eb506cfe848494aabb6c996334205a20b8ba21a892077feb1fa4b7c1c664299e6a87c067ca58f7567a928893d540b9fd4ef9562db5448088d18db7937d0d9801490036d5c9a43292ecee04b4c83a1e98b2f1d01e0e8d539f37a283741914d101c73583a051fb64cb9c07640d7847e313528903e76bae92b2b426bfd49c965c3680f2f2f156d6025460316aa3fbb3f0f79e755e7944ab76b26c889c582e513c8f163022dcbf80f9746e3ec6792b51f1bae7a55ea19c9389dbd75867e6f059a8a4d668f440e2817c547d9f2a4b60429080e73eb9ebd2963e393501d44e2d96bedd671e0934ab435754d17ca42413c1c21a11e7c5f47a6a2b31f0c9cafb7cf57a375e63ba106846d0a1a718ba4c26485e0160938f689503f4b8034ce1a14ec47c49f1a78370b51d729504ae5b507b4eccecf1f0f6e7f44b79a0b5aa59f857c09ba6b6eb1161e316821421c0fa85f48df30b7bae1ef6100c1a23f9c5c33c7fff984a1094f740427335e29de5e3cc6aea56c310afabd9c58e2c9072f729be5a87783b6e13136116278c4c4c851b93899c2b5b3ddd1c59b83cdffe9f637caa17de295a4433dd3ef4834f000a8d58c19a6ff7cfeebdb4a844dad33f71c880bd638474769b00b9aa9e0a7eb16af8d0268f176184ba98aac183cfff91b083a0b2d946951e347df987ac8ba26bd27ce1742760bc65efedb601e10d6503366463bb4b499429baaed5a6aa32aaf80ab1b8089c72796cce6b9accba13c76c6e3ab1766bef94f0a0105c1ce879b4e5dd1b26bb50961c9d30f6ce92d8278e11ac3571cddbc64d19eceae8c45569ff791da8c8ba42ffdedfb046baec998acdffe3925000d37ceede5ce7ada37aa4b7d5909228f85dda1f5105323d8a47c25f548654a6a9309388c14ad0167532bce4a623fa8bffff1385c634c440c9a697af5dd9041898a0219e755c73b3e6feeacecbeda41745e53577db4b1552eccb482286a38d0271d56c71bf05725e05a3a8a56f47d5d5f9044697c7009fe8255831bd33d82acc6dbdec4ee176ac890197862460c31a279b66ca3d349493f63e32233e0ef36ed510c664efd29612ca7581db82d341fddd8e0c3d047cce19507239330d82517198a86144164fd4c2ac7d4e3768450c998512b9fb707c2e59fc2fb227b2e9e6b26a53510f7384bb392a79d6307b5f8e515a858e9ee15e01b2de632e809bf042e8a344b0bd373c436b562333692c74179ddf7648317d4e72eb5042a66e5dba21713377bcd92310f889a3f3a7ba576402e2a521f7fd8079b141b80bc1ab5c9a507df3e3bf9bba3bb2452523df28acd01dd3890d26942c19237a69c3f2180ec791b1e097447e80887043559560012abf6b86596c5c2c2f816eb04b2393cf39176670942f807d8206da1300ff4ce57d09b8f3be550ae8478bbf9206413d7785c4c33fc53e7a8f25826871d1ebc18124489c4b306f7fbd33de904abb0e4f551af39cc2ba411381b49f7d87c3ee7cb8e5787a219828c0c2c8d1e77f83304d4ec819c8ac4c5f584e1aa5f928e0a8ba54928566c82791b30e756372723b0c873b34b2c3f10ca6ce23c79b0dd6588895d979a5a2fbf03fb7292906a8dd381136fad69bafc8144a66dd211e5fcf0738bc5b533bd6472c840ed9765307c61b7c1a35cc049a74af80e845166c649a050e74c1257942193736e29d7a6b816c32bfaeac2790636dd45d8a14738901d11ee468aaee9e59baa93e7164cf86baadcd9d58c056b113122f8a00e5ee795284267edf78755c12f26f93430543b7ca1bdca697fb42570dd18c5f77a85ea3ff7378042c0b427268db85aa73f26b7098bb5e9d34e408c7d69ebd06dbf17c3950ee4f5eb7f5c462c972bbbf88ab49b43e65ac1c1f3aebbda3478e55140ea43f7d71801bb671ae8c33f048b22a9683ae39f06612ccf96385f43bd8edf5a2e10b753ce7bce7090f75afa18019e3d29f95b45d4892bca35bca173aa45184cd79fec8555b87489f3fe23435dacd45d65950775bfeb95f6f453aed409b7e94815d328d3140f2ac95945a55f4f93e1ec9a4171e42fd338f0fb26861e65de8f31adabed6d88f6529db213e2d42e41c8e0863e6745113c552c6640f108d3165179575c70f5da07557b0245893b8342787815e9fbb0b8fe8293c12c6d906d52f2ffe40f5fdf03fbccf44cc602b97dfb2f4a4c1821e68376b1d3bd3d3234973c929f37adbb4ee50be9f5fa3734d2f0b19330a73eaea9c11e22ef10d2bd25da23c3c0ab123c83f65f9019d43a4b1619d983e5b9a63d284b2be923c3671ccf92ec3424f19eb200adc2894f041ffd124ab58aa29807155304b371202fdab3769e3939b98721c1d784bc54aa11bd6ecaf6264144c9e607d4c85a8d511b8088f8095331c5f7b53785704b90ef1f4ab0214d24e8d09e4cfa4c83dc82de047584c629bc861e664b1ee77cb930d09b55463522614111d20839c0fe9c660ff76d106418c4af9b026c3b57b8ad020a6013b573d123f3e8ee97c8e2bdabbaa24b4becd42391c6c9eedc33ac01904a94fb655df113cb7cda969c2622fafed69f6d42fcefff569c7682dc3533d4da0160bda2d8dcd87e52df8793488828ba97ef510b7867db90cfe2184c56f111af15ba44e1f1d42f1e54280c17c3fa5e6fcf544f451753dc114419cff99d74b89dfcad5ae9e4d51a4a2b5adc0b1a67ea8100c9cb8179e8f2a86492762d160a48f032dd664c61df3296b3ee44cb182ca946bff365fbf1d7b057673b88c1cd1fd683c1a839decf8d732bfc99f0db443df6ad1b27177e9e7db01c8f16e145a0c8c8525d13d56f7facd7c7f9b007b190e3709873668d3cc8e07a3aae28b1be9d8f79632669fe1aa07e10fd22153009d1eb435e93f66e1ee7cf2bca6c19cc076adcf1d86513f7f09b3c78057e511b50c0537f4a9145cb7183b3dfa30d2a7683f9bf195d8c88b340172b21b83712b4ea1146702a0667a1beababf329e7aa2c0899229f7e359a34da370baa4418d5dc03fd1fef9442d6d6a2826f37220e38376be6c7e62b540c1a420e954f0b5b8031e1d020eb7a61a9da8d2e7c01bcd952f88749ff73d476fb0100547aaa85d91bd114d6d7187bef53a023724bf306575f00815f0e7c3960843da1120ba1343d20d1c5ea084bbfb7850f56ae5279a740fe38b2ebf1f07fec1f471490d9333acf172e0698b57c49727cee98e60dd6117170e1d99915afd5429523fbf7cf16cb7f680eb99355ea06b441ea8712a9c152c319da679f4236d43db3412e4034e4149b0a66b653feb974b679998cb6c4e8fe13e4ac2a484d0ca01b2c9b01a6a61520b4df22b044f84b8f5d83f5d3b43fefd153398ee031d9e37234767b67228cdff712d631e4fb46ce4a2070d611ae5aad611df7a20fbffeb03a393e3c34a3a63ab3fca4c45d8ee1c6cccac14f1721fdebeb71de5c6725b4faecdb2f4ca359f6fa548c50f6411f72ba0bc3c7f68978301b6a77e1582815e8863e262435a207a15a572e6376c47bbd7e3b8dafd95504fe2ce55e0d1a7f3a9296485d027ef42bb89c95022cf9432ac6830149b790c10d8381a7dd35444400e1b5bf16e8c9507828949a0fc64bf9f6326c5fc8b88115c3a8167e070839dbd969e9bbaefe20ba1485d5cdfcc3f52ea595ef420b5531df9bf041733b8c50178f1c5106989be909399e8cd2be2b963d0db8d57016a85963f220d0c349769db03fbe5b71e95bae9641d53d01f6934350cb85288768928563264e574c00deddacc1ed1f336e2861715e16602bc2395872632f49417ff4afcff8734937de7328ce0ca84f53457e11563253b6230e26b87dad95def1548cddf85f4d20e20eb8699f63bee0ff9608a23d951284243053f55548057cc9150cd6c8113ec3689f55cf6d8c61d8c237a7f1d7ea53f978658ffefa90260d07e2378fad703d7575f7fab443429eab09fc4ac7f53ba8195ab3ae5a1b1b296d9502c71c3b9c7b2efbf900579b08627bcce40659a32164ec53aee8ce13d425299130be54cf0c8e3d26bc2576d1209605db614279c2a8df3b108a5982e8ccfb55d3838724df170fa00e439ff53f52ad8e28054a94513308fc503b5820211629b51fb3d3e2b1300327f02bc0fad2a2f259664aa9b0d5981a62e246779531ab7b51d5bcf7a52836371484007e5390bf6fdf646e1b0656661d940e16f1237db658379cd73b41d5962225095c8d06fa4791080367dfe400852f3433b8309d54d6320911707c1a50983283a22be263a553f83fa5f751417a6e4be2c01d53b34e5f532e939386cf13c5d63f7b56c1e714af9b02e8273edae9a46a91f1c6fe3bc3b5fc9a7ec1f2d430254712914c1bd66003915793b9487913ecf6c25d6f6fc4d348769e097cbd5b6e914e4a4a50c95808b67a6d8693bfa28087a9133f43b56891a7a3975f93020387462a770845de9d83da82ba7ccc5cd79cf7ab99afc48f89eb61bf0d56d0965058094986f3586524099affd5641dd48df74715d114b420ef9068824464cb7c795cd5e98d9e6e968f144dfc81ea6195f0deb6c309c2af96bb614994eff60cc78ef88746d0ed74a4b1633c11da10f885d183aac3242b9cafedd27f60187095fd330a4edc7b451295ed6f31e5656739e1fd7876f85e55db7464d6d49d39bfaaa71139fda773b1434621cff69eb67401a4ecf1678bf94d921f3f94aa8e9c676505372a36c54c90ba208daf82a6fc307774206952b97b52e541611e75706a6c9080008a42a05f51a32edd51352148d5b16e9535b28ac6bfca4fc3f82ec3725fce236d22bdfd2f1b39f7f8ab3052ad93aa6af74f3f5f852ab6aff9b8ad3817bd43d888640826a782b01c2a824ded8be15d3a3981ccf5ad25dc2678f83ec481161262a39a85843c9d4a2af200367e6da5b7354f222c00fa07f7e18f5c1fa3d01561866507ee66c15d6294d60e1ed7ccf530a128b1f173970c35a4d5c79cf1219df4db371196d2b35fec978280d4d8c6631a56c2db14b1bec1bcb7c788ea83cb125eef0a33af9b8c5ec42f052446b3f1a7daa10d774781a58ab276b3e8182e2b9dbf537a73139c9555daa9097735b291f4374905bc597b0904c1577553d18bc86cbc91c4c89bd65b974558f6b506a52651bdd20a6ec635607cb5667d2cb46"}], 0x0, &(0x7f0000002040)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "1b154638331aba99e990d018d4ffee60975cbbea7dac17f967e9b2c8641f0d1468d1ffd5a04cbd0f5bcec656ada7406f274ef6308ebf6f89ea898cad0173ffdef342f3f629c5b24d5c4e32b43a8c37042a2cca9b3ddcdf0a7bacc855c93194fe6857569deda209c6249236cb3880685dcec8037bd1c2ead9b8109320b8876ff6159ae60c772554f6272d27e2777f77770cc37eb13194d81df93a398b492402d684bdc15757c7e2cb85fcdc0f6a95e2bf57f905eb936aa0e6f599994be187f2a3f73e9eff9f24f241380e7254647b831f5b88b88e75e2327f"}, @op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x4000}], 0x1, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r5, 0x0, r6, 0x6, 0x3, 0x9, 0x1, 0x8ba, 0x80000001, 0x7, 0x3, 0xff000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r7, 0xbf}) 49.924645ms ago: executing program 0 (id=407): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0xffff0000}], 0x1, 0x20008000) 0s ago: executing program 0 (id=408): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000180)=0x101) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) r2 = fcntl$dupfd(r0, 0x0, r0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000180)=0x101) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) (async) fcntl$dupfd(r0, 0x0, r0) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) (async) kernel console output (not intermixed with test programs): [ 52.664106][ T40] audit: type=1400 audit(1776687798.054:60): avc: denied { rlimitinh } for pid=5927 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.671624][ T40] audit: type=1400 audit(1776687798.054:61): avc: denied { siginh } for pid=5927 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:14883' (ED25519) to the list of known hosts. [ 54.606491][ T40] audit: type=1400 audit(1776687800.014:62): avc: denied { name_bind } for pid=5934 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.635088][ T40] audit: type=1400 audit(1776687800.044:63): avc: denied { execute } for pid=5935 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.642808][ T40] audit: type=1400 audit(1776687800.044:64): avc: denied { execute_no_trans } for pid=5935 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.821862][ T40] audit: type=1400 audit(1776687802.234:65): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.832125][ T40] audit: type=1400 audit(1776687802.244:66): avc: denied { mount } for pid=5935 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.834695][ T5935] cgroup: Unknown subsys name 'net' [ 56.995038][ T5935] cgroup: Unknown subsys name 'cpuset' [ 57.001295][ T5935] cgroup: Unknown subsys name 'rlimit' [ 57.301957][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.120023][ T5935] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.472242][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.472259][ T40] audit: type=1400 audit(1776687806.884:82): avc: denied { execmem } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.641412][ T40] audit: type=1400 audit(1776687807.054:83): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.655597][ T40] audit: type=1400 audit(1776687807.054:84): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.667717][ T40] audit: type=1400 audit(1776687807.054:85): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.670059][ T5307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.675771][ T40] audit: type=1400 audit(1776687807.064:86): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="socket:[7450]" dev="sockfs" ino=7450 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.696296][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.700028][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.703248][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.707249][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.710561][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.713705][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.716249][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.719398][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.722955][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.726290][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.728051][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.730060][ T5964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.734703][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.738883][ T40] audit: type=1400 audit(1776687807.144:87): avc: denied { read } for pid=5952 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.739636][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.740112][ T5964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.740775][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.741110][ T5964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.752188][ T40] audit: type=1400 audit(1776687807.154:88): avc: denied { open } for pid=5953 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.754666][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.762377][ T40] audit: type=1400 audit(1776687807.154:89): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.764523][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.978931][ T40] audit: type=1400 audit(1776687807.384:90): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.030056][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 62.065493][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 62.102505][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 62.121801][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 62.161603][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.165617][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.168840][ T5948] bridge_slave_0: entered allmulticast mode [ 62.172093][ T5948] bridge_slave_0: entered promiscuous mode [ 62.197095][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.200179][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.203166][ T5948] bridge_slave_1: entered allmulticast mode [ 62.206965][ T5948] bridge_slave_1: entered promiscuous mode [ 62.252848][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.276707][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.298082][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.301302][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.304400][ T5952] bridge_slave_0: entered allmulticast mode [ 62.308279][ T5952] bridge_slave_0: entered promiscuous mode [ 62.333765][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.336658][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.340380][ T5954] bridge_slave_0: entered allmulticast mode [ 62.343080][ T5954] bridge_slave_0: entered promiscuous mode [ 62.346243][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.348627][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.351087][ T5952] bridge_slave_1: entered allmulticast mode [ 62.353707][ T5952] bridge_slave_1: entered promiscuous mode [ 62.363265][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.365625][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.367936][ T5953] bridge_slave_0: entered allmulticast mode [ 62.370912][ T5953] bridge_slave_0: entered promiscuous mode [ 62.375276][ T5948] team0: Port device team_slave_0 added [ 62.377823][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.380346][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.382825][ T5954] bridge_slave_1: entered allmulticast mode [ 62.385534][ T5954] bridge_slave_1: entered promiscuous mode [ 62.393549][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.395998][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.398343][ T5953] bridge_slave_1: entered allmulticast mode [ 62.401309][ T5953] bridge_slave_1: entered promiscuous mode [ 62.412328][ T5948] team0: Port device team_slave_1 added [ 62.457564][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.462314][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.465972][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.468247][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.476482][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.484398][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.491150][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.500741][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.503522][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.513559][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.519051][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.524069][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.559291][ T5952] team0: Port device team_slave_0 added [ 62.562552][ T5953] team0: Port device team_slave_0 added [ 62.571846][ T5952] team0: Port device team_slave_1 added [ 62.581003][ T5953] team0: Port device team_slave_1 added [ 62.583741][ T5954] team0: Port device team_slave_0 added [ 62.605248][ T5954] team0: Port device team_slave_1 added [ 62.619390][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.621912][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.630803][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.640162][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.642385][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.650425][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.660709][ T5948] hsr_slave_0: entered promiscuous mode [ 62.663280][ T5948] hsr_slave_1: entered promiscuous mode [ 62.672298][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.675026][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.683417][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.693691][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.696070][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.704357][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.709117][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.711557][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.719542][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.738830][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.741096][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.749027][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.771796][ T5952] hsr_slave_0: entered promiscuous mode [ 62.774518][ T5952] hsr_slave_1: entered promiscuous mode [ 62.776691][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 62.778618][ T5952] Cannot create hsr debugfs directory [ 62.831868][ T5953] hsr_slave_0: entered promiscuous mode [ 62.834467][ T5953] hsr_slave_1: entered promiscuous mode [ 62.836719][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 62.838547][ T5953] Cannot create hsr debugfs directory [ 62.868732][ T5954] hsr_slave_0: entered promiscuous mode [ 62.871702][ T5954] hsr_slave_1: entered promiscuous mode [ 62.874219][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 62.876422][ T5954] Cannot create hsr debugfs directory [ 63.098202][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.107372][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.110992][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.115794][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.118539][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.122415][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.132378][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.136628][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.165958][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.173062][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.177049][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.182580][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.185347][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.189723][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.192871][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.196978][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.264520][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.269767][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.272972][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.276695][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.281138][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.284974][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.287565][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.291737][ T5954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.347934][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.353037][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.363166][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.366959][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.370399][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.374237][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.376957][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.381033][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.413345][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.426161][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.452614][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.465408][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.468613][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.484584][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.492042][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.495128][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.523705][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.526597][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.531311][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.534184][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.575937][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.598650][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.623187][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.634886][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.635473][ T40] audit: type=1400 audit(1776687809.044:91): avc: denied { sys_module } for pid=5948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.637451][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.651807][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.667348][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.669628][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.679681][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.682473][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.690567][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.693352][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.750800][ T5963] Bluetooth: hci2: command tx timeout [ 63.750808][ T5957] Bluetooth: hci1: command tx timeout [ 63.763292][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.781179][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.813200][ T5948] veth0_vlan: entered promiscuous mode [ 63.820997][ T5948] veth1_vlan: entered promiscuous mode [ 63.837945][ T5952] veth0_vlan: entered promiscuous mode [ 63.841278][ T5957] Bluetooth: hci3: command tx timeout [ 63.843716][ T5963] Bluetooth: hci0: command tx timeout [ 63.855156][ T5952] veth1_vlan: entered promiscuous mode [ 63.866709][ T5948] veth0_macvtap: entered promiscuous mode [ 63.873924][ T5948] veth1_macvtap: entered promiscuous mode [ 63.885955][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.907436][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.912626][ T5952] veth0_macvtap: entered promiscuous mode [ 63.919929][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.924980][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.931511][ T5952] veth1_macvtap: entered promiscuous mode [ 63.939089][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.949004][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.952485][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.957505][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.983852][ T5954] veth0_vlan: entered promiscuous mode [ 63.989561][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.001999][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.027687][ T5954] veth1_vlan: entered promiscuous mode [ 64.033007][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.036399][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.045177][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.048029][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.051403][ T5953] veth0_vlan: entered promiscuous mode [ 64.060860][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.065072][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081936][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.081987][ T5953] veth1_vlan: entered promiscuous mode [ 64.085025][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.106315][ T5954] veth0_macvtap: entered promiscuous mode [ 64.123388][ T5954] veth1_macvtap: entered promiscuous mode [ 64.141240][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.142059][ T5953] veth0_macvtap: entered promiscuous mode [ 64.145917][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.157446][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.161605][ T5953] veth1_macvtap: entered promiscuous mode [ 64.165363][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.183395][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.190757][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.194558][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.199838][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.203437][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.207187][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.217674][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.222311][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.245567][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.264583][ T1245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.267542][ T1245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.281500][ T1245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.288622][ T1245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.326142][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'. [ 64.330168][ T6039] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 64.336335][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.348065][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.386713][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.389897][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.413646][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.416647][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.434188][ T6041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.464737][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.468071][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.568932][ T6047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.682800][ T6047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.961594][ T6061] binder: 6060:6061 ioctl 4018620d 0 returned -22 [ 65.318062][ T6041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.408040][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 65.412746][ T6078] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 65.524050][ T6082] netlink: 'syz.1.16': attribute type 29 has an invalid length. [ 65.530265][ T6082] netlink: 'syz.1.16': attribute type 29 has an invalid length. [ 65.538121][ T6082] netlink: 500 bytes leftover after parsing attributes in process `syz.1.16'. [ 65.583701][ T6088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6088 comm=syz.1.18 [ 65.672141][ T6096] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.701852][ T6098] ======================================================= [ 65.701852][ T6098] WARNING: The mand mount option has been deprecated and [ 65.701852][ T6098] and is ignored by this kernel. Remove the mand [ 65.701852][ T6098] option from the mount to silence this warning. [ 65.701852][ T6098] ======================================================= [ 65.713047][ T6098] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 65.829793][ T5963] Bluetooth: hci2: command tx timeout [ 65.839405][ T5963] Bluetooth: hci1: command tx timeout [ 65.909340][ T5963] Bluetooth: hci0: command tx timeout [ 65.919372][ T5963] Bluetooth: hci3: command tx timeout [ 65.929800][ T6047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.948046][ T6041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.540144][ T6103] xt_hashlimit: size too large, truncated to 1048576 [ 66.590481][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 66.590494][ T40] audit: type=1400 audit(1776687812.004:164): avc: denied { connect } for pid=6101 comm="syz.0.32" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.599044][ T40] audit: type=1400 audit(1776687812.004:165): avc: denied { sys_module } for pid=6102 comm="syz.1.24" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.667223][ T40] audit: type=1400 audit(1776687812.074:166): avc: denied { append } for pid=6112 comm="syz.0.26" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.736690][ T6118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.27'. [ 66.797273][ T6123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6123 comm=syz.1.29 [ 66.856488][ T40] audit: type=1400 audit(1776687812.264:167): avc: denied { bind } for pid=6126 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.868837][ T40] audit: type=1400 audit(1776687812.264:168): avc: denied { name_bind } for pid=6126 comm="syz.1.31" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 66.877113][ T40] audit: type=1400 audit(1776687812.264:169): avc: denied { node_bind } for pid=6126 comm="syz.1.31" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 66.881081][ T6041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.886973][ T40] audit: type=1400 audit(1776687812.274:170): avc: denied { connect } for pid=6126 comm="syz.1.31" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.894472][ T40] audit: type=1400 audit(1776687812.274:171): avc: denied { name_connect } for pid=6126 comm="syz.1.31" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 66.974858][ T1245] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.985445][ T553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.991753][ T553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.004032][ T553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.044096][ T40] audit: type=1400 audit(1776687812.454:172): avc: denied { set_context_mgr } for pid=6128 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.102671][ T40] audit: type=1326 audit(1776687812.514:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.33" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900d19c819 code=0x0 [ 67.211844][ T6144] binder: 6128:6144 ioctl c0306201 200000000640 returned -22 [ 67.313426][ T6146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 67.315575][ T6146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.320645][ T6146] vhci_hcd vhci_hcd.0: Device attached [ 67.380680][ T6147] vhci_hcd: connection closed [ 67.382975][ T13] vhci_hcd vhci_hcd.3: stop threads [ 67.389902][ T13] vhci_hcd vhci_hcd.3: release socket [ 67.392396][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 67.405797][ T6047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.415144][ T6153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6153 comm=syz.3.39 [ 67.619946][ T553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.628172][ T553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.638563][ T553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.650912][ T553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.655820][ T6161] FAULT_INJECTION: forcing a failure. [ 67.655820][ T6161] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.660708][ T6161] CPU: 2 UID: 0 PID: 6161 Comm: syz.0.42 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.660727][ T6161] Tainted: [L]=SOFTLOCKUP [ 67.660731][ T6161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.660795][ T6161] Call Trace: [ 67.660800][ T6161] [ 67.660805][ T6161] dump_stack_lvl+0x100/0x190 [ 67.660823][ T6161] should_fail_ex.cold+0x5/0xa [ 67.660837][ T6161] ? prepare_alloc_pages+0x16d/0x5f0 [ 67.660851][ T6161] should_fail_alloc_page+0xeb/0x140 [ 67.660863][ T6161] prepare_alloc_pages+0x1f0/0x5f0 [ 67.660878][ T6161] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 67.660903][ T6161] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.660922][ T6161] ? __lock_acquire+0x4a5/0x2630 [ 67.660938][ T6161] ? __lock_acquire+0x4a5/0x2630 [ 67.660954][ T6161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.660967][ T6161] ? policy_nodemask+0xed/0x4f0 [ 67.660979][ T6161] alloc_pages_mpol+0x1fb/0x540 [ 67.660991][ T6161] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 67.661025][ T6161] ? unwind_next_frame+0x3c8/0x2090 [ 67.661048][ T6161] alloc_pages_noprof+0x1a/0x160 [ 67.661066][ T6161] pte_alloc_one+0x1c/0x3d0 [ 67.661088][ T6161] __pte_alloc+0x6d/0x3e0 [ 67.661103][ T6161] ? __pfx___pte_alloc+0x10/0x10 [ 67.661117][ T6161] ? __lock_acquire+0x4a5/0x2630 [ 67.661133][ T6161] do_anonymous_page+0x13c6/0x2050 [ 67.661149][ T6161] ? __pfx_pgd_none+0x10/0x10 [ 67.661166][ T6161] __handle_mm_fault+0x1d2c/0x2a00 [ 67.661183][ T6161] ? mt_find+0x45e/0x8e0 [ 67.661196][ T6161] ? __pfx___handle_mm_fault+0x10/0x10 [ 67.661210][ T6161] ? __pfx_mt_find+0x10/0x10 [ 67.661231][ T6161] handle_mm_fault+0x36d/0xa20 [ 67.661249][ T6161] __get_user_pages+0x1178/0x32a0 [ 67.661265][ T6161] ? down_read_killable+0x307/0x4b0 [ 67.661277][ T6161] ? check_noncircular+0x97/0x160 [ 67.661289][ T6161] ? __pfx___get_user_pages+0x10/0x10 [ 67.661305][ T6161] __gup_longterm_locked+0x279/0x16f0 [ 67.661322][ T6161] ? __pfx___gup_longterm_locked+0x10/0x10 [ 67.661337][ T6161] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 67.661351][ T6161] gup_fast_fallback+0x16dc/0x2790 [ 67.661373][ T6161] ? __pfx_gup_fast_fallback+0x10/0x10 [ 67.661384][ T6161] ? check_noncircular+0x97/0x160 [ 67.661407][ T6161] pin_user_pages_fast+0xa7/0xf0 [ 67.661419][ T6161] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 67.661432][ T6161] ? __kernel_text_address+0xd/0x30 [ 67.661449][ T6161] pfn_reader_user_pin+0xd01/0x10f0 [ 67.661465][ T6161] ? mark_held_locks+0x40/0x70 [ 67.661478][ T6161] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.661495][ T6161] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 67.661506][ T6161] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.661524][ T6161] ? interval_tree_span_iter_first+0x329/0x610 [ 67.661544][ T6161] iopt_pages_fill_xarray+0x494/0xdd0 [ 67.661558][ T6161] ? kasan_save_stack+0x30/0x50 [ 67.661577][ T6161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.661590][ T6161] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 67.661621][ T6161] iopt_area_add_access+0x22a/0x410 [ 67.661638][ T6161] iommufd_access_pin_pages+0x649/0xa10 [ 67.661658][ T6161] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 67.661672][ T6161] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 67.661688][ T6161] ? iommufd_test+0x43f6/0x6200 [ 67.661708][ T6161] iommufd_test+0x445d/0x6200 [ 67.661728][ T6161] ? __pfx_iommufd_test+0x10/0x10 [ 67.661745][ T6161] ? tomoyo_path_number_perm+0x188/0x580 [ 67.661769][ T6161] ? find_held_lock+0x2b/0x80 [ 67.661779][ T6161] ? __might_fault+0xc5/0x140 [ 67.661794][ T6161] ? __might_fault+0xc5/0x140 [ 67.661814][ T6161] iommufd_fops_ioctl+0x358/0x520 [ 67.661826][ T6161] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 67.661839][ T6161] ? __fget_files+0x215/0x3d0 [ 67.661851][ T6161] ? hook_file_ioctl_common+0x149/0x410 [ 67.661869][ T6161] ? selinux_file_ioctl+0x13b/0x290 [ 67.661880][ T6161] ? selinux_file_ioctl+0xb6/0x290 [ 67.661891][ T6161] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 67.661903][ T6161] __x64_sys_ioctl+0x18e/0x210 [ 67.661915][ T6161] do_syscall_64+0x10b/0xf80 [ 67.661926][ T6161] ? clear_bhb_loop+0x40/0x90 [ 67.661944][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.661958][ T6161] RIP: 0033:0x7f0eb179c819 [ 67.661972][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.661987][ T6161] RSP: 002b:00007f0eb26c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.662090][ T6161] RAX: ffffffffffffffda RBX: 00007f0eb1a15fa0 RCX: 00007f0eb179c819 [ 67.662098][ T6161] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 67.662104][ T6161] RBP: 00007f0eb26c8090 R08: 0000000000000000 R09: 0000000000000000 [ 67.662110][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.662116][ T6161] R13: 00007f0eb1a16038 R14: 00007f0eb1a15fa0 R15: 00007ffd374a3df8 [ 67.662130][ T6161] [ 67.822458][ T6164] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.893713][ T6164] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.910342][ T5963] Bluetooth: hci1: command tx timeout [ 67.910362][ T5957] Bluetooth: hci2: command tx timeout [ 67.944340][ T6174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6174 comm=syz.1.48 [ 67.955215][ T6164] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.989267][ T5963] Bluetooth: hci0: command tx timeout [ 67.991094][ T5957] Bluetooth: hci3: command tx timeout [ 68.013714][ T6164] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.057338][ T6170] mmap: syz.0.46 (6170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.095139][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'. [ 68.455906][ T6199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6199 comm=syz.3.57 [ 68.486594][ T6202] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 68.489101][ T6202] bridge_slave_1: left allmulticast mode [ 68.490943][ T6202] bridge_slave_1: left promiscuous mode [ 68.493894][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.499813][ T6202] bridge_slave_0: left allmulticast mode [ 68.501716][ T6202] bridge_slave_0: left promiscuous mode [ 68.503632][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.137245][ T6209] binder: 6208:6209 ioctl c0306201 200000000640 returned -22 [ 69.293909][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 69.298535][ T6215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6215 comm=syz.0.62 [ 69.306952][ T6215] FAULT_INJECTION: forcing a failure. [ 69.306952][ T6215] name failslab, interval 1, probability 0, space 0, times 1 [ 69.311324][ T6215] CPU: 2 UID: 0 PID: 6215 Comm: syz.0.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.311341][ T6215] Tainted: [L]=SOFTLOCKUP [ 69.311346][ T6215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.311352][ T6215] Call Trace: [ 69.311356][ T6215] [ 69.311360][ T6215] dump_stack_lvl+0x100/0x190 [ 69.311378][ T6215] should_fail_ex.cold+0x5/0xa [ 69.311394][ T6215] should_failslab+0xc2/0x120 [ 69.311405][ T6215] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 69.311422][ T6215] ? skb_clone+0x190/0x400 [ 69.311436][ T6215] skb_clone+0x190/0x400 [ 69.311452][ T6215] netlink_deliver_tap+0xaed/0xcc0 [ 69.311470][ T6215] netlink_unicast+0x62b/0x850 [ 69.311486][ T6215] ? __pfx_netlink_unicast+0x10/0x10 [ 69.311500][ T6215] ? __build_skb_around+0x278/0x390 [ 69.311519][ T6215] netlink_sendmsg+0x8b0/0xda0 [ 69.311536][ T6215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.311550][ T6215] ? __might_fault+0x90/0x140 [ 69.311569][ T6215] ____sys_sendmsg+0x9e1/0xb70 [ 69.311583][ T6215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.311599][ T6215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.311619][ T6215] ___sys_sendmsg+0x190/0x1e0 [ 69.311636][ T6215] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.311666][ T6215] __sys_sendmsg+0x170/0x220 [ 69.311678][ T6215] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.311693][ T6215] ? fput+0x79/0x100 [ 69.311707][ T6215] ? rcu_is_watching+0x12/0xc0 [ 69.311725][ T6215] do_syscall_64+0x10b/0xf80 [ 69.311736][ T6215] ? clear_bhb_loop+0x40/0x90 [ 69.311749][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.311760][ T6215] RIP: 0033:0x7f0eb179c819 [ 69.311770][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.311780][ T6215] RSP: 002b:00007f0eb26c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.311791][ T6215] RAX: ffffffffffffffda RBX: 00007f0eb1a15fa0 RCX: 00007f0eb179c819 [ 69.311798][ T6215] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 69.311804][ T6215] RBP: 00007f0eb26c8090 R08: 0000000000000000 R09: 0000000000000000 [ 69.311810][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.311815][ T6215] R13: 00007f0eb1a16038 R14: 00007f0eb1a15fa0 R15: 00007ffd374a3df8 [ 69.311828][ T6215] [ 69.505171][ T6221] 9pnet_fd: p9_fd_create_tcp (6221): problem binding to privport [ 69.591230][ T1038] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.722142][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.66'. [ 69.745609][ T1038] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.748719][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.754297][ T1038] usb 6-1: Product: syz [ 69.757004][ T1038] usb 6-1: Manufacturer: syz [ 69.758600][ T1038] usb 6-1: SerialNumber: syz [ 69.782725][ T6225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6225 comm=syz.0.66 [ 69.989278][ T5957] Bluetooth: hci1: command tx timeout [ 69.989354][ T5957] Bluetooth: hci2: command tx timeout [ 70.033609][ T1038] rtl8150 6-1:1.0: couldn't reset the device [ 70.037173][ T1038] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 70.044151][ T1038] usb 6-1: USB disconnect, device number 2 [ 70.070351][ T5963] Bluetooth: hci3: command tx timeout [ 70.070531][ T5957] Bluetooth: hci0: command tx timeout [ 70.545089][ T6228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6228 comm=syz.1.67 [ 70.585037][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.68'. [ 70.590405][ T6230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6230 comm=syz.1.68 [ 70.742614][ T6233] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 70.849611][ T6237] FAULT_INJECTION: forcing a failure. [ 70.849611][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 70.853484][ T6237] CPU: 2 UID: 0 PID: 6237 Comm: syz.1.71 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.853502][ T6237] Tainted: [L]=SOFTLOCKUP [ 70.853506][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.853512][ T6237] Call Trace: [ 70.853517][ T6237] [ 70.853521][ T6237] dump_stack_lvl+0x100/0x190 [ 70.853538][ T6237] should_fail_ex.cold+0x5/0xa [ 70.853555][ T6237] should_failslab+0xc2/0x120 [ 70.853566][ T6237] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 70.853584][ T6237] ? sidtab_sid2str_get+0x17a/0x670 [ 70.853600][ T6237] kmemdup_noprof+0x29/0x60 [ 70.853618][ T6237] sidtab_sid2str_get+0x17a/0x670 [ 70.853632][ T6237] security_sid_to_context_core+0x35a/0x6d0 [ 70.853645][ T6237] avc_audit_post_callback+0x109/0x900 [ 70.853666][ T6237] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 70.853680][ T6237] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 70.853693][ T6237] ? skb_put+0x138/0x180 [ 70.853708][ T6237] ? audit_log_n_string+0x256/0x550 [ 70.853723][ T6237] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 70.853735][ T6237] common_lsm_audit+0x23f/0x2b0 [ 70.853748][ T6237] ? __pfx_common_lsm_audit+0x10/0x10 [ 70.853759][ T6237] ? lockdep_hardirqs_on+0x78/0x100 [ 70.853777][ T6237] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.853795][ T6237] slow_avc_audit+0x186/0x210 [ 70.853809][ T6237] ? __pfx_slow_avc_audit+0x10/0x10 [ 70.853825][ T6237] ? avc_denied+0x14a/0x190 [ 70.853838][ T6237] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 70.853854][ T6237] avc_has_perm+0x1a6/0x1e0 [ 70.853869][ T6237] ? __pfx_avc_has_perm+0x10/0x10 [ 70.853885][ T6237] ? __lock_acquire+0x4a5/0x2630 [ 70.853900][ T6237] inode_has_perm+0x166/0x1d0 [ 70.853915][ T6237] __file_has_perm+0x39c/0x460 [ 70.853933][ T6237] ? __pfx___file_has_perm+0x10/0x10 [ 70.853951][ T6237] ? get_pid_task+0xfc/0x250 [ 70.853962][ T6237] ? get_pid_task+0xfc/0x250 [ 70.853975][ T6237] selinux_file_permission+0x4ac/0x6d0 [ 70.853989][ T6237] security_file_permission+0x91/0x210 [ 70.854001][ T6237] rw_verify_area+0xb8/0x6d0 [ 70.854020][ T6237] vfs_write+0x146/0x1070 [ 70.854033][ T6237] ? __pfx_vfs_write+0x10/0x10 [ 70.854043][ T6237] ? find_held_lock+0x2b/0x80 [ 70.854076][ T6237] ? __fget_files+0x215/0x3d0 [ 70.854095][ T6237] ? __fget_files+0x215/0x3d0 [ 70.854115][ T6237] ? __fget_files+0x21f/0x3d0 [ 70.854132][ T6237] ksys_write+0x1f8/0x250 [ 70.854143][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 70.854155][ T6237] ? rcu_is_watching+0x12/0xc0 [ 70.854173][ T6237] do_syscall_64+0x10b/0xf80 [ 70.854182][ T6237] ? clear_bhb_loop+0x40/0x90 [ 70.854196][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.854208][ T6237] RIP: 0033:0x7f900d19c819 [ 70.854218][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.854228][ T6237] RSP: 002b:00007f900dfc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.854239][ T6237] RAX: ffffffffffffffda RBX: 00007f900d415fa0 RCX: 00007f900d19c819 [ 70.854246][ T6237] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000005 [ 70.854252][ T6237] RBP: 00007f900dfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 70.854258][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.854264][ T6237] R13: 00007f900d416038 R14: 00007f900d415fa0 R15: 00007ffd2867f2f8 [ 70.854277][ T6237] [ 70.854420][ T6237] Bluetooth: MGMT ver 1.23 [ 70.984414][ T6242] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 70.987871][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.0.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.987893][ T6242] Tainted: [L]=SOFTLOCKUP [ 70.987898][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.987906][ T6242] Call Trace: [ 70.987910][ T6242] [ 70.987915][ T6242] dump_stack_lvl+0x100/0x190 [ 70.987935][ T6242] sysfs_warn_dup.cold+0x1c/0x28 [ 70.987954][ T6242] sysfs_do_create_link_sd+0x113/0x140 [ 70.987970][ T6242] sysfs_create_link+0x61/0xc0 [ 70.987984][ T6242] device_add+0x675/0x1950 [ 70.988004][ T6242] ? __pfx_device_add+0x10/0x10 [ 70.988020][ T6242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.988034][ T6242] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 70.988050][ T6242] wiphy_register+0x1edd/0x2d90 [ 70.988064][ T6242] ? __rtnl_unlock+0xb9/0xf0 [ 70.988081][ T6242] ? __pfx_wiphy_register+0x10/0x10 [ 70.988096][ T6242] ? __asan_memset+0x23/0x50 [ 70.988113][ T6242] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 70.988130][ T6242] ieee80211_register_hw+0x3055/0x4570 [ 70.988148][ T6242] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 70.988159][ T6242] ? __pfx___debug_object_init+0x10/0x10 [ 70.988173][ T6242] ? find_held_lock+0x2b/0x80 [ 70.988185][ T6242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.988197][ T6242] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 70.988210][ T6242] ? __hrtimer_setup+0x208/0x330 [ 70.988226][ T6242] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 70.988252][ T6242] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 70.988271][ T6242] ? __asan_memcpy+0x3c/0x60 [ 70.988289][ T6242] hwsim_new_radio_nl+0xc5f/0x1370 [ 70.988305][ T6242] ? rcu_is_watching+0x12/0xc0 [ 70.988322][ T6242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 70.988343][ T6242] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 70.988361][ T6242] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 70.988390][ T6242] genl_family_rcv_msg_doit+0x214/0x300 [ 70.988411][ T6242] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 70.988436][ T6242] ? bpf_lsm_capable+0x9/0x10 [ 70.988449][ T6242] ? security_capable+0x80/0x260 [ 70.988467][ T6242] ? ns_capable+0xd2/0xf0 [ 70.988487][ T6242] genl_rcv_msg+0x560/0x800 [ 70.988506][ T6242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.988523][ T6242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 70.988543][ T6242] netlink_rcv_skb+0x159/0x420 [ 70.988558][ T6242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.988575][ T6242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.988595][ T6242] ? netlink_deliver_tap+0x1ae/0xcc0 [ 70.988611][ T6242] genl_rcv+0x28/0x40 [ 70.988627][ T6242] netlink_unicast+0x585/0x850 [ 70.988644][ T6242] ? __pfx_netlink_unicast+0x10/0x10 [ 70.988662][ T6242] netlink_sendmsg+0x8b0/0xda0 [ 70.988679][ T6242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.988693][ T6242] ? __might_fault+0x90/0x140 [ 70.988713][ T6242] ____sys_sendmsg+0x9e1/0xb70 [ 70.988727][ T6242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.988743][ T6242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.988757][ T6242] ? preempt_schedule_thunk+0x16/0x30 [ 70.988777][ T6242] ? try_to_wake_up+0x5f6/0x1900 [ 70.988797][ T6242] ___sys_sendmsg+0x190/0x1e0 [ 70.988814][ T6242] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.988829][ T6242] ? futex_private_hash_put+0x107/0x1c0 [ 70.988858][ T6242] __sys_sendmsg+0x170/0x220 [ 70.988870][ T6242] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.988881][ T6242] ? __x64_sys_futex+0x34f/0x4d0 [ 70.988920][ T6242] ? rcu_is_watching+0x12/0xc0 [ 70.988940][ T6242] do_syscall_64+0x10b/0xf80 [ 70.988951][ T6242] ? clear_bhb_loop+0x40/0x90 [ 70.988967][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.988980][ T6242] RIP: 0033:0x7f0eb179c819 [ 70.988991][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.989003][ T6242] RSP: 002b:00007f0eb26a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.989015][ T6242] RAX: ffffffffffffffda RBX: 00007f0eb1a16090 RCX: 00007f0eb179c819 [ 70.989024][ T6242] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 70.989032][ T6242] RBP: 00007f0eb1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 70.989039][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.989046][ T6242] R13: 00007f0eb1a16128 R14: 00007f0eb1a16090 R15: 00007ffd374a3df8 [ 70.989060][ T6242] [ 71.174438][ T6251] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6251 comm=syz.0.77 [ 71.177223][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 71.229109][ T6256] netlink: 'syz.0.79': attribute type 3 has an invalid length. [ 71.291553][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 71.296745][ T6259] bridge_slave_1: entered promiscuous mode [ 71.334731][ T6263] bond1: (slave bond_slave_1): Device is not our slave [ 71.336920][ T6263] bond1: option active_slave: invalid value (bond_slave_1) [ 71.342319][ T6263] bond1 (unregistering): Released all slaves [ 71.570548][ T6273] tipc: Started in network mode [ 71.572223][ T6273] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 71.578781][ T6273] tipc: Enabled bearer , priority 10 [ 71.614350][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 71.614363][ T40] audit: type=1400 audit(1776687817.024:210): avc: denied { bind } for pid=6277 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.663016][ T6280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.671937][ T6279] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.775605][ T6279] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.841648][ T40] audit: type=1400 audit(1776687817.254:211): avc: denied { mounton } for pid=6285 comm="syz.0.90" path="/41/file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.852724][ T6279] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.914741][ T6279] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.035505][ T1484] cfg80211: failed to load regulatory.db [ 72.064605][ T73] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.067462][ T73] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.096572][ T553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.104833][ T553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.108342][ T553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.124219][ T553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.130001][ T553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.142976][ T553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.191638][ T6298] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.199423][ T40] audit: type=1400 audit(1776687817.604:212): avc: denied { create } for pid=6297 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.209572][ T40] audit: type=1400 audit(1776687817.614:213): avc: denied { create } for pid=6297 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.215633][ T40] audit: type=1326 audit(1776687817.614:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.1.94" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900d19c819 code=0x0 [ 72.246714][ T40] audit: type=1400 audit(1776687817.654:215): avc: denied { read write } for pid=6303 comm="syz.0.96" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.254404][ T40] audit: type=1400 audit(1776687817.654:216): avc: denied { open } for pid=6303 comm="syz.0.96" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.262391][ T40] audit: type=1400 audit(1776687817.654:217): avc: denied { execute } for pid=6305 comm="syz.2.97" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.268881][ T6307] netlink: 'syz.2.97': attribute type 2 has an invalid length. [ 72.270831][ T40] audit: type=1400 audit(1776687817.674:218): avc: denied { ioctl } for pid=6303 comm="syz.0.96" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.273700][ T6307] netlink: 46 bytes leftover after parsing attributes in process `syz.2.97'. [ 72.281154][ T40] audit: type=1400 audit(1776687817.674:219): avc: denied { write } for pid=6305 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.458440][ T6330] FAULT_INJECTION: forcing a failure. [ 72.458440][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.463230][ T6330] CPU: 3 UID: 0 PID: 6330 Comm: syz.0.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.463248][ T6330] Tainted: [L]=SOFTLOCKUP [ 72.463310][ T6330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.463316][ T6330] Call Trace: [ 72.463320][ T6330] [ 72.463325][ T6330] dump_stack_lvl+0x100/0x190 [ 72.463343][ T6330] should_fail_ex.cold+0x5/0xa [ 72.463358][ T6330] _copy_from_user+0x2e/0xd0 [ 72.463377][ T6330] input_event_from_user+0x123/0x310 [ 72.463396][ T6330] ? __pfx_input_event_from_user+0x10/0x10 [ 72.463413][ T6330] ? __pfx___might_resched+0x10/0x10 [ 72.463429][ T6330] ? input_inject_event+0x1a6/0x390 [ 72.463447][ T6330] evdev_write+0x342/0x610 [ 72.463467][ T6330] ? __pfx_evdev_write+0x10/0x10 [ 72.463484][ T6330] ? bpf_lsm_file_permission+0x9/0x10 [ 72.463501][ T6330] ? security_file_permission+0x76/0x210 [ 72.463514][ T6330] ? rw_verify_area+0xce/0x6d0 [ 72.463532][ T6330] vfs_write+0x2aa/0x1070 [ 72.463543][ T6330] ? __pfx_evdev_write+0x10/0x10 [ 72.463561][ T6330] ? __pfx_vfs_write+0x10/0x10 [ 72.463570][ T6330] ? find_held_lock+0x2b/0x80 [ 72.463580][ T6330] ? __fget_files+0x215/0x3d0 [ 72.463593][ T6330] ? __fget_files+0x215/0x3d0 [ 72.463608][ T6330] ? __fget_files+0x21f/0x3d0 [ 72.463624][ T6330] ksys_write+0x1f8/0x250 [ 72.463634][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 72.463646][ T6330] ? rcu_is_watching+0x12/0xc0 [ 72.463665][ T6330] do_syscall_64+0x10b/0xf80 [ 72.463675][ T6330] ? clear_bhb_loop+0x40/0x90 [ 72.463688][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.463699][ T6330] RIP: 0033:0x7f0eb179c819 [ 72.463710][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.463720][ T6330] RSP: 002b:00007f0eb26c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.463732][ T6330] RAX: ffffffffffffffda RBX: 00007f0eb1a15fa0 RCX: 00007f0eb179c819 [ 72.463738][ T6330] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 72.463744][ T6330] RBP: 00007f0eb26c8090 R08: 0000000000000000 R09: 0000000000000000 [ 72.463750][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.463756][ T6330] R13: 00007f0eb1a16038 R14: 00007f0eb1a15fa0 R15: 00007ffd374a3df8 [ 72.463770][ T6330] [ 72.577372][ T6335] FAULT_INJECTION: forcing a failure. [ 72.577372][ T6335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.585403][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.2.107 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.585432][ T6335] Tainted: [L]=SOFTLOCKUP [ 72.585438][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.585448][ T6335] Call Trace: [ 72.585453][ T6335] [ 72.585460][ T6335] dump_stack_lvl+0x100/0x190 [ 72.585504][ T6335] should_fail_ex.cold+0x5/0xa [ 72.585525][ T6335] ? prepare_alloc_pages+0x16d/0x5f0 [ 72.585547][ T6335] should_fail_alloc_page+0xeb/0x140 [ 72.585565][ T6335] prepare_alloc_pages+0x1f0/0x5f0 [ 72.585588][ T6335] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 72.585628][ T6335] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 72.585676][ T6335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.585699][ T6335] ? policy_nodemask+0xed/0x4f0 [ 72.585719][ T6335] alloc_pages_mpol+0x1fb/0x540 [ 72.585737][ T6335] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 72.585761][ T6335] alloc_pages_noprof+0x1a/0x160 [ 72.585782][ T6335] pte_alloc_one+0x1c/0x3d0 [ 72.585809][ T6335] __pte_alloc+0x6d/0x3e0 [ 72.585826][ T6335] ? __pfx___pte_alloc+0x10/0x10 [ 72.585841][ T6335] ? __lock_acquire+0x4a5/0x2630 [ 72.585863][ T6335] ? __bfs+0x150/0x2a0 [ 72.585882][ T6335] do_anonymous_page+0x13c6/0x2050 [ 72.585907][ T6335] ? __pfx_pgd_none+0x10/0x10 [ 72.585935][ T6335] __handle_mm_fault+0x1d2c/0x2a00 [ 72.585963][ T6335] ? mt_find+0x45e/0x8e0 [ 72.585983][ T6335] ? __pfx___handle_mm_fault+0x10/0x10 [ 72.586004][ T6335] ? __pfx_mt_find+0x10/0x10 [ 72.586042][ T6335] handle_mm_fault+0x36d/0xa20 [ 72.586094][ T6335] __get_user_pages+0x1178/0x32a0 [ 72.586120][ T6335] ? down_read_killable+0x307/0x4b0 [ 72.586141][ T6335] ? __pfx___get_user_pages+0x10/0x10 [ 72.586158][ T6335] ? is_bpf_text_address+0x8a/0x1a0 [ 72.586178][ T6335] ? is_bpf_text_address+0x8a/0x1a0 [ 72.586203][ T6335] __gup_longterm_locked+0x279/0x16f0 [ 72.586220][ T6335] ? __kernel_text_address+0xd/0x30 [ 72.586246][ T6335] ? __pfx___gup_longterm_locked+0x10/0x10 [ 72.586271][ T6335] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 72.586293][ T6335] gup_fast_fallback+0x16dc/0x2790 [ 72.586335][ T6335] ? __pfx_gup_fast_fallback+0x10/0x10 [ 72.586362][ T6335] ? find_held_lock+0x2b/0x80 [ 72.586376][ T6335] ? is_bpf_text_address+0x8a/0x1a0 [ 72.586396][ T6335] ? is_bpf_text_address+0x8a/0x1a0 [ 72.586416][ T6335] ? bpf_ksym_find+0x128/0x1c0 [ 72.586442][ T6335] pin_user_pages_fast+0xa7/0xf0 [ 72.586461][ T6335] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 72.586480][ T6335] ? __kernel_text_address+0xd/0x30 [ 72.586500][ T6335] ? unwind_get_return_address+0x59/0xa0 [ 72.586525][ T6335] ? arch_stack_walk+0xa6/0xf0 [ 72.586551][ T6335] pfn_reader_user_pin+0xd01/0x10f0 [ 72.586577][ T6335] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 72.586596][ T6335] ? __pfx_stack_trace_save+0x10/0x10 [ 72.586615][ T6335] ? interval_tree_span_iter_first+0x329/0x610 [ 72.586643][ T6335] iopt_pages_fill_xarray+0x494/0xdd0 [ 72.586669][ T6335] ? kasan_save_stack+0x30/0x50 [ 72.586699][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.586721][ T6335] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 72.586773][ T6335] iopt_area_add_access+0x22a/0x410 [ 72.586798][ T6335] iommufd_access_pin_pages+0x649/0xa10 [ 72.586826][ T6335] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 72.586846][ T6335] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 72.586870][ T6335] ? iommufd_test+0x43f6/0x6200 [ 72.586901][ T6335] iommufd_test+0x445d/0x6200 [ 72.586933][ T6335] ? __pfx_iommufd_test+0x10/0x10 [ 72.586957][ T6335] ? tomoyo_path_number_perm+0x188/0x580 [ 72.586991][ T6335] ? find_held_lock+0x2b/0x80 [ 72.587005][ T6335] ? __might_fault+0xc5/0x140 [ 72.587027][ T6335] ? __might_fault+0xc5/0x140 [ 72.587060][ T6335] iommufd_fops_ioctl+0x358/0x520 [ 72.587078][ T6335] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 72.587098][ T6335] ? __fget_files+0x215/0x3d0 [ 72.587117][ T6335] ? hook_file_ioctl_common+0x149/0x410 [ 72.587146][ T6335] ? selinux_file_ioctl+0x13b/0x290 [ 72.587162][ T6335] ? selinux_file_ioctl+0xb6/0x290 [ 72.587181][ T6335] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 72.587199][ T6335] __x64_sys_ioctl+0x18e/0x210 [ 72.587217][ T6335] do_syscall_64+0x10b/0xf80 [ 72.587231][ T6335] ? clear_bhb_loop+0x40/0x90 [ 72.587247][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.587261][ T6335] RIP: 0033:0x7f932699c819 [ 72.587275][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.587287][ T6335] RSP: 002b:00007f9327823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.587304][ T6335] RAX: ffffffffffffffda RBX: 00007f9326c15fa0 RCX: 00007f932699c819 [ 72.587314][ T6335] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 72.587323][ T6335] RBP: 00007f9327823090 R08: 0000000000000000 R09: 0000000000000000 [ 72.587333][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.587342][ T6335] R13: 00007f9326c16038 R14: 00007f9326c15fa0 R15: 00007ffd50840008 [ 72.587367][ T6335] [ 72.588687][ T6333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.762065][ T5958] tipc: Node number set to 4269801488 [ 72.829037][ T6333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.883314][ T6333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.891068][ T6349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6349 comm=syz.2.113 [ 72.963369][ T6333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.067201][ T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.079035][ T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.083234][ T6357] netlink: 27 bytes leftover after parsing attributes in process `syz.1.116'. [ 73.104752][ T73] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.138582][ T73] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.196410][ T6370] binder: 6369:6370 ioctl 6609 0 returned -22 [ 73.210809][ T6372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6372 comm=syz.3.122 [ 73.215385][ T6374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6374 comm=syz.1.123 [ 73.343060][ T6386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.348086][ T6395] xt_policy: output policy not valid in PREROUTING and INPUT [ 73.383066][ T6397] netlink: 'syz.0.134': attribute type 3 has an invalid length. [ 73.462822][ T6386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.570071][ T6386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.645052][ T6386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.732627][ T553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745757][ T73] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.762472][ T73] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769988][ T73] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.789294][ T1484] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 73.826347][ T6415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6415 comm=syz.1.143 [ 73.874404][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'. [ 73.919469][ T1484] usb 8-1: device descriptor read/64, error -71 [ 73.933995][ T6428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6428 comm=syz.0.148 [ 73.962463][ T6430] overlayfs: conflicting options: nfs_export=on,index=off [ 74.141688][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 74.166022][ T6442] bond1: (slave erspan0): Enslaving as a backup interface with an up link [ 74.180897][ T1484] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 74.204027][ T6454] xt_hashlimit: size too large, truncated to 1048576 [ 74.237123][ T6458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6458 comm=syz.0.159 [ 74.273594][ T6463] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 74.293954][ T6464] netlink: set zone limit has 4 unknown bytes [ 74.329557][ T1484] usb 8-1: device descriptor read/64, error -71 [ 74.348976][ T6475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.163'. [ 74.450629][ T1484] usb usb8-port1: attempt power cycle [ 74.501993][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 74.504804][ T6494] netlink: 'syz.1.172': attribute type 20 has an invalid length. [ 74.516903][ T156] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.520376][ T6494] netlink: 'syz.1.172': attribute type 20 has an invalid length. [ 74.521226][ T156] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.526404][ T156] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.530002][ T156] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.530076][ T6494] Zero length message leads to an empty skb [ 74.584696][ T6496] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.588764][ T6496] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.664233][ T6496] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.667389][ T6496] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.735649][ T6496] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.739309][ T6496] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.783867][ T6496] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.787636][ T6496] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.799319][ T1484] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 74.820846][ T1484] usb 8-1: device descriptor read/8, error -71 [ 75.069420][ T1484] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 75.090090][ T1484] usb 8-1: device descriptor read/8, error -71 [ 75.209492][ T1484] usb usb8-port1: unable to enumerate USB device [ 75.353157][ T6503] warning: `syz.0.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.638305][ T6514] netlink: 'syz.2.182': attribute type 64 has an invalid length. [ 76.642116][ T6514] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 76.644785][ T6514] __nla_validate_parse: 1 callbacks suppressed [ 76.644795][ T6514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.182'. [ 76.697688][ T6520] netlink: 'syz.3.183': attribute type 28 has an invalid length. [ 76.737755][ T6522] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 76.776152][ T6525] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 76.778841][ T6525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.781804][ T6525] vhci_hcd vhci_hcd.0: Device attached [ 76.785578][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 76.785588][ T40] audit: type=1400 audit(1776687822.194:260): avc: denied { read write } for pid=6524 comm="syz.3.185" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.797190][ T40] audit: type=1400 audit(1776687822.194:261): avc: denied { open } for pid=6524 comm="syz.3.185" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.808912][ T40] audit: type=1400 audit(1776687822.194:262): avc: denied { ioctl } for pid=6524 comm="syz.3.185" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.851703][ T6526] vhci_hcd: connection closed [ 76.852926][ T46] vhci_hcd vhci_hcd.3: stop threads [ 76.856186][ T46] vhci_hcd vhci_hcd.3: release socket [ 76.857896][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 76.885704][ T6531] FAULT_INJECTION: forcing a failure. [ 76.885704][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.890784][ T6531] CPU: 2 UID: 0 PID: 6531 Comm: syz.0.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.890808][ T6531] Tainted: [L]=SOFTLOCKUP [ 76.890813][ T6531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.890821][ T6531] Call Trace: [ 76.890826][ T6531] [ 76.890832][ T6531] dump_stack_lvl+0x100/0x190 [ 76.891191][ T6531] should_fail_ex.cold+0x5/0xa [ 76.891211][ T6531] _copy_from_user+0x2e/0xd0 [ 76.891344][ T6531] input_event_from_user+0x123/0x310 [ 76.891527][ T6531] ? __pfx_input_event_from_user+0x10/0x10 [ 76.891548][ T6531] ? __pfx___might_resched+0x10/0x10 [ 76.891620][ T6531] ? input_inject_event+0x1a6/0x390 [ 76.891648][ T6531] evdev_write+0x342/0x610 [ 76.891672][ T6531] ? __pfx_evdev_write+0x10/0x10 [ 76.891693][ T6531] ? bpf_lsm_file_permission+0x9/0x10 [ 76.891714][ T6531] ? security_file_permission+0x76/0x210 [ 76.891792][ T6531] ? rw_verify_area+0xce/0x6d0 [ 76.891871][ T6531] vfs_write+0x2aa/0x1070 [ 76.891886][ T6531] ? __pfx_evdev_write+0x10/0x10 [ 76.891907][ T6531] ? __pfx_vfs_write+0x10/0x10 [ 76.891920][ T6531] ? find_held_lock+0x2b/0x80 [ 76.891933][ T6531] ? __fget_files+0x215/0x3d0 [ 76.891948][ T6531] ? __fget_files+0x215/0x3d0 [ 76.891967][ T6531] ? __fget_files+0x21f/0x3d0 [ 76.891987][ T6531] ksys_write+0x1f8/0x250 [ 76.892000][ T6531] ? __pfx_ksys_write+0x10/0x10 [ 76.892015][ T6531] ? rcu_is_watching+0x12/0xc0 [ 76.892038][ T6531] do_syscall_64+0x10b/0xf80 [ 76.892220][ T6531] ? clear_bhb_loop+0x40/0x90 [ 76.892238][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.892252][ T6531] RIP: 0033:0x7f0eb179c819 [ 76.892266][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.892279][ T6531] RSP: 002b:00007f0eb26c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.892294][ T6531] RAX: ffffffffffffffda RBX: 00007f0eb1a15fa0 RCX: 00007f0eb179c819 [ 76.892302][ T6531] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 76.892310][ T6531] RBP: 00007f0eb26c8090 R08: 0000000000000000 R09: 0000000000000000 [ 76.892318][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.892326][ T6531] R13: 00007f0eb1a16038 R14: 00007f0eb1a15fa0 R15: 00007ffd374a3df8 [ 76.892343][ T6531] [ 76.988136][ T40] audit: type=1400 audit(1776687822.394:263): avc: denied { setopt } for pid=6532 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.996797][ T40] audit: type=1400 audit(1776687822.404:264): avc: denied { read } for pid=6534 comm="syz.0.189" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.997101][ T6535] BIDI support in bsg has been removed. [ 77.025563][ T6537] FAULT_INJECTION: forcing a failure. [ 77.025563][ T6537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.029908][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.2.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.029927][ T6537] Tainted: [L]=SOFTLOCKUP [ 77.029930][ T6537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.029937][ T6537] Call Trace: [ 77.029941][ T6537] [ 77.029946][ T6537] dump_stack_lvl+0x100/0x190 [ 77.029964][ T6537] should_fail_ex.cold+0x5/0xa [ 77.029978][ T6537] ? prepare_alloc_pages+0x16d/0x5f0 [ 77.029992][ T6537] should_fail_alloc_page+0xeb/0x140 [ 77.030004][ T6537] prepare_alloc_pages+0x1f0/0x5f0 [ 77.030019][ T6537] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 77.030067][ T6537] ? kasan_save_stack+0x3f/0x50 [ 77.030083][ T6537] ? kasan_save_stack+0x30/0x50 [ 77.030099][ T6537] ? kasan_save_track+0x14/0x30 [ 77.030114][ T6537] ? __kasan_slab_alloc+0x89/0x90 [ 77.030123][ T6537] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 77.030139][ T6537] ? ptlock_alloc+0x1f/0x70 [ 77.030153][ T6537] ? pte_alloc_one+0x82/0x3d0 [ 77.030169][ T6537] ? __pte_alloc+0x6d/0x3e0 [ 77.030178][ T6537] ? do_anonymous_page+0x13c6/0x2050 [ 77.030192][ T6537] ? __handle_mm_fault+0x1d2c/0x2a00 [ 77.030205][ T6537] ? handle_mm_fault+0x36d/0xa20 [ 77.030218][ T6537] ? __get_user_pages+0x1178/0x32a0 [ 77.030230][ T6537] ? __gup_longterm_locked+0x279/0x16f0 [ 77.030241][ T6537] ? gup_fast_fallback+0x16dc/0x2790 [ 77.030252][ T6537] ? pin_user_pages_fast+0xa7/0xf0 [ 77.030264][ T6537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.030280][ T6537] ? iommufd_access_pin_pages+0x649/0xa10 [ 77.030369][ T6537] ? iommufd_test+0x445d/0x6200 [ 77.030398][ T6537] ? iommufd_fops_ioctl+0x358/0x520 [ 77.030409][ T6537] ? do_syscall_64+0x10b/0xf80 [ 77.030427][ T6537] ? __lock_acquire+0x4a5/0x2630 [ 77.030442][ T6537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.030456][ T6537] ? policy_nodemask+0xed/0x4f0 [ 77.030468][ T6537] alloc_pages_mpol+0x1fb/0x540 [ 77.030480][ T6537] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.030490][ T6537] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.030506][ T6537] ? find_held_lock+0x2b/0x80 [ 77.030515][ T6537] ? find_held_lock+0x2b/0x80 [ 77.030526][ T6537] folio_alloc_mpol_noprof+0x36/0x260 [ 77.030541][ T6537] vma_alloc_folio_noprof+0xed/0x1d0 [ 77.030554][ T6537] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 77.030571][ T6537] do_anonymous_page+0xb46/0x2050 [ 77.030586][ T6537] ? __pfx_pgd_none+0x10/0x10 [ 77.030604][ T6537] __handle_mm_fault+0x1d2c/0x2a00 [ 77.030625][ T6537] ? mt_find+0x45e/0x8e0 [ 77.030636][ T6537] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.030650][ T6537] ? __pfx_mt_find+0x10/0x10 [ 77.030671][ T6537] handle_mm_fault+0x36d/0xa20 [ 77.030689][ T6537] __get_user_pages+0x1178/0x32a0 [ 77.030704][ T6537] ? down_read_killable+0x307/0x4b0 [ 77.030717][ T6537] ? find_held_lock+0x2b/0x80 [ 77.030726][ T6537] ? __pfx___get_user_pages+0x10/0x10 [ 77.030737][ T6537] ? is_bpf_text_address+0x8a/0x1a0 [ 77.030752][ T6537] ? bpf_ksym_find+0x128/0x1c0 [ 77.030770][ T6537] __gup_longterm_locked+0x279/0x16f0 [ 77.030783][ T6537] ? unwind_get_return_address+0x59/0xa0 [ 77.030802][ T6537] ? __pfx___gup_longterm_locked+0x10/0x10 [ 77.030817][ T6537] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 77.030831][ T6537] gup_fast_fallback+0x16dc/0x2790 [ 77.030853][ T6537] ? __pfx_gup_fast_fallback+0x10/0x10 [ 77.030867][ T6537] ? find_held_lock+0x2b/0x80 [ 77.030876][ T6537] ? is_bpf_text_address+0x8a/0x1a0 [ 77.030889][ T6537] ? is_bpf_text_address+0x8a/0x1a0 [ 77.030903][ T6537] ? bpf_ksym_find+0x128/0x1c0 [ 77.030919][ T6537] pin_user_pages_fast+0xa7/0xf0 [ 77.030932][ T6537] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 77.030944][ T6537] ? __kernel_text_address+0xd/0x30 [ 77.030958][ T6537] ? unwind_get_return_address+0x59/0xa0 [ 77.030976][ T6537] ? arch_stack_walk+0xa6/0xf0 [ 77.030999][ T6537] pfn_reader_user_pin+0xd01/0x10f0 [ 77.031020][ T6537] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 77.031035][ T6537] ? __pfx_stack_trace_save+0x10/0x10 [ 77.031051][ T6537] ? interval_tree_span_iter_first+0x329/0x610 [ 77.031071][ T6537] iopt_pages_fill_xarray+0x494/0xdd0 [ 77.031085][ T6537] ? kasan_save_stack+0x30/0x50 [ 77.031103][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.031117][ T6537] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 77.031148][ T6537] iopt_area_add_access+0x22a/0x410 [ 77.031164][ T6537] iommufd_access_pin_pages+0x649/0xa10 [ 77.031182][ T6537] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 77.031195][ T6537] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 77.031211][ T6537] ? iommufd_test+0x43f6/0x6200 [ 77.031231][ T6537] iommufd_test+0x445d/0x6200 [ 77.031251][ T6537] ? __pfx_iommufd_test+0x10/0x10 [ 77.031268][ T6537] ? tomoyo_path_number_perm+0x188/0x580 [ 77.031290][ T6537] ? find_held_lock+0x2b/0x80 [ 77.031299][ T6537] ? __might_fault+0xc5/0x140 [ 77.031314][ T6537] ? __might_fault+0xc5/0x140 [ 77.031334][ T6537] iommufd_fops_ioctl+0x358/0x520 [ 77.031346][ T6537] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 77.031359][ T6537] ? __fget_files+0x215/0x3d0 [ 77.031371][ T6537] ? hook_file_ioctl_common+0x149/0x410 [ 77.031389][ T6537] ? selinux_file_ioctl+0x13b/0x290 [ 77.031400][ T6537] ? selinux_file_ioctl+0xb6/0x290 [ 77.031411][ T6537] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 77.031423][ T6537] __x64_sys_ioctl+0x18e/0x210 [ 77.031435][ T6537] do_syscall_64+0x10b/0xf80 [ 77.031444][ T6537] ? clear_bhb_loop+0x40/0x90 [ 77.031457][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.031468][ T6537] RIP: 0033:0x7f932699c819 [ 77.031478][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.031488][ T6537] RSP: 002b:00007f9327823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.031500][ T6537] RAX: ffffffffffffffda RBX: 00007f9326c15fa0 RCX: 00007f932699c819 [ 77.031507][ T6537] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 77.031513][ T6537] RBP: 00007f9327823090 R08: 0000000000000000 R09: 0000000000000000 [ 77.031519][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.031525][ T6537] R13: 00007f9326c16038 R14: 00007f9326c15fa0 R15: 00007ffd50840008 [ 77.031539][ T6537] [ 77.235411][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.238282][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.283062][ T40] audit: type=1400 audit(1776687822.694:265): avc: denied { accept } for pid=6547 comm="syz.2.194" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.298792][ T40] audit: type=1400 audit(1776687822.704:266): avc: denied { setopt } for pid=6547 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.307529][ T40] audit: type=1400 audit(1776687822.704:267): avc: denied { create } for pid=6547 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.317238][ T40] audit: type=1400 audit(1776687822.714:268): avc: denied { create } for pid=6547 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.354423][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 77.393058][ T6546] binder: 6545:6546 ioctl 40086e81 2000000001c0 returned -22 [ 77.404002][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 77.404025][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 77.410992][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.420313][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.421769][ T6560] netlink: 344 bytes leftover after parsing attributes in process `syz.3.197'. [ 77.423126][ T6546] CUSE: unknown device info "" [ 77.427307][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.428834][ T6546] CUSE: zero length info key specified [ 77.430579][ T6546] binder: 6545:6546 ioctl c0306201 200000000640 returned -22 [ 77.432165][ T40] audit: type=1400 audit(1776687822.844:269): avc: denied { create } for pid=6554 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.432620][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.433160][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 77.585925][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.201'. [ 77.593750][ T553] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.596507][ T553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601705][ T6569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6569 comm=syz.3.201 [ 77.611542][ T6569] FAULT_INJECTION: forcing a failure. [ 77.611542][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 77.615816][ T6569] CPU: 1 UID: 0 PID: 6569 Comm: syz.3.201 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.615840][ T6569] Tainted: [L]=SOFTLOCKUP [ 77.615846][ T6569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.615856][ T6569] Call Trace: [ 77.615864][ T6569] [ 77.615871][ T6569] dump_stack_lvl+0x100/0x190 [ 77.615899][ T6569] should_fail_ex.cold+0x5/0xa [ 77.615925][ T6569] should_failslab+0xc2/0x120 [ 77.615942][ T6569] __kmalloc_cache_noprof+0x7a/0x6f0 [ 77.615962][ T6569] ? tc_new_tfilter+0xe17/0x24a0 [ 77.616060][ T6569] ? tcf_chain_tp_find+0x2b5/0x470 [ 77.616086][ T6569] tc_new_tfilter+0xe17/0x24a0 [ 77.616118][ T6569] ? avc_has_perm_noaudit+0xa0/0x3b0 [ 77.616138][ T6569] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 77.616160][ T6569] ? __pfx_tc_new_tfilter+0x10/0x10 [ 77.616193][ T6569] ? __lock_acquire+0x4a5/0x2630 [ 77.616228][ T6569] ? find_held_lock+0x2b/0x80 [ 77.616246][ T6569] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 77.616268][ T6569] ? __pfx_tc_new_tfilter+0x10/0x10 [ 77.616292][ T6569] rtnetlink_rcv_msg+0x95e/0xe90 [ 77.616311][ T6569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.616336][ T6569] ? ref_tracker_free+0x37e/0x6c0 [ 77.616363][ T6569] netlink_rcv_skb+0x159/0x420 [ 77.616452][ T6569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.616473][ T6569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.616506][ T6569] ? netlink_deliver_tap+0x1ae/0xcc0 [ 77.616533][ T6569] netlink_unicast+0x585/0x850 [ 77.616560][ T6569] ? __pfx_netlink_unicast+0x10/0x10 [ 77.616582][ T6569] ? __build_skb_around+0x278/0x390 [ 77.616615][ T6569] netlink_sendmsg+0x8b0/0xda0 [ 77.616642][ T6569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.616664][ T6569] ? __might_fault+0x90/0x140 [ 77.616697][ T6569] ____sys_sendmsg+0x9e1/0xb70 [ 77.616719][ T6569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.616744][ T6569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.616779][ T6569] ___sys_sendmsg+0x190/0x1e0 [ 77.616804][ T6569] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.616854][ T6569] __sys_sendmsg+0x170/0x220 [ 77.616870][ T6569] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.616893][ T6569] ? rcu_is_watching+0x12/0xc0 [ 77.616922][ T6569] do_syscall_64+0x10b/0xf80 [ 77.616935][ T6569] ? clear_bhb_loop+0x40/0x90 [ 77.616957][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.616974][ T6569] RIP: 0033:0x7fcfeb79c819 [ 77.616986][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.617002][ T6569] RSP: 002b:00007fcfec605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.617020][ T6569] RAX: ffffffffffffffda RBX: 00007fcfeba15fa0 RCX: 00007fcfeb79c819 [ 77.617029][ T6569] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 77.617037][ T6569] RBP: 00007fcfec605090 R08: 0000000000000000 R09: 0000000000000000 [ 77.617045][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.617056][ T6569] R13: 00007fcfeba16038 R14: 00007fcfeba15fa0 R15: 00007ffdfeda80e8 [ 77.617077][ T6569] [ 77.617314][ T156] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.638659][ T6571] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.639698][ T156] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.730226][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.732905][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745340][ T46] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.747976][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.817315][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 77.862935][ T6590] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 77.880429][ T6592] tipc: Started in network mode [ 77.882206][ T6592] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 77.888814][ T6592] tipc: Enabled bearer , priority 10 [ 77.953775][ T6600] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.957076][ T6600] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.977735][ T6598] binder: 6597:6598 ioctl c0306201 200000000640 returned -11 [ 78.014547][ T6600] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.017733][ T6600] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.038888][ T6605] netlink: 3820 bytes leftover after parsing attributes in process `syz.1.216'. [ 78.066882][ T6600] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.071317][ T6600] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.140527][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 78.144554][ T6600] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.147730][ T6600] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.246998][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.249826][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.266059][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.268854][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.277500][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.280433][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.284017][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.286667][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461410][ T6631] syz_tun: entered promiscuous mode [ 78.465434][ T6631] syz_tun: left promiscuous mode [ 78.522979][ T6635] unsupported nlmsg_type 40 [ 78.540291][ T6635] netlink: 'syz.0.228': attribute type 8 has an invalid length. [ 78.601928][ T6645] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 78.719403][ T6658] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.732857][ T6658] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.797557][ T6658] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.801287][ T6658] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.915274][ T6658] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.919644][ T6658] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.000620][ T6079] tipc: Node number set to 4269801488 [ 79.045870][ T6658] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.045963][ T6658] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.319964][ T6685] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 79.328117][ T6685] netlink: 'syz.1.242': attribute type 15 has an invalid length. [ 79.330872][ T6685] netlink: 'syz.1.242': attribute type 15 has an invalid length. [ 79.334861][ T6685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6685 comm=syz.1.242 [ 79.416833][ T6691] xt_hashlimit: size too large, truncated to 1048576 [ 79.802946][ T6715] team0: Port device vlan2 added [ 79.849046][ T6718] netlink: 'syz.2.255': attribute type 29 has an invalid length. [ 79.853440][ T6718] netlink: 'syz.2.255': attribute type 29 has an invalid length. [ 80.142471][ T6736] bond2: option xmit_hash_policy: invalid value (6) [ 80.156839][ T6736] bond2 (unregistering): Released all slaves [ 80.255621][ T6747] binder: 6746:6747 ioctl 4018620d 0 returned -22 [ 80.261576][ T6747] binder: 6746:6747 ioctl c0306201 200000000040 returned -22 [ 80.264220][ T6747] binder: 6746:6747 ioctl c0306201 200000000640 returned -22 [ 80.327381][ T6754] bond1: (slave bond_slave_1): Device is not our slave [ 80.331391][ T6754] bond1: option active_slave: invalid value (bond_slave_1) [ 80.337344][ T6754] bond1 (unregistering): Released all slaves [ 80.356352][ T6758] vxfs: unable to read disk superblock at 1 [ 80.361379][ T6758] vxfs: unable to read disk superblock at 8 [ 80.364040][ T6758] vxfs: can't find superblock. [ 80.412688][ T6762] netlink: set zone limit has 4 unknown bytes [ 80.489047][ T6768] team0 (unregistering): Port device team_slave_0 removed [ 80.493802][ T6768] team0 (unregistering): Port device team_slave_1 removed [ 80.502153][ T6768] team0 (unregistering): Port device vlan2 removed [ 80.544227][ T6777] macvtap0: entered allmulticast mode [ 80.546288][ T6777] veth0_macvtap: entered allmulticast mode [ 80.548624][ T6777] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 80.630666][ T5957] Bluetooth: hci1: command tx timeout [ 80.780003][ T6788] nbd0: detected capacity change from 0 to 63 [ 80.790416][ T5951] block nbd0: Send control failed (result -32) [ 80.791049][ T5957] block nbd0: Receive control failed (result -32) [ 80.794893][ T5951] block nbd0: Request send failed, requeueing [ 80.805282][ T25] block nbd0: Dead connection, failed to find a fallback [ 80.808628][ T25] block nbd0: shutting down sockets [ 80.809395][ T5951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.812399][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.814900][ T5951] Buffer I/O error on dev nbd0, logical block 1, async page read [ 80.815649][ T5951] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.819390][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.829510][ T5951] Buffer I/O error on dev nbd0, logical block 2, async page read [ 80.829667][ T5951] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.829689][ T5951] Buffer I/O error on dev nbd0, logical block 3, async page read [ 80.829813][ T5951] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.829868][ T5951] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.830132][ T5951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.830153][ T5951] Buffer I/O error on dev nbd0, logical block 1, async page read [ 80.830285][ T5951] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.830305][ T5951] Buffer I/O error on dev nbd0, logical block 2, async page read [ 80.830401][ T5951] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.830419][ T5951] Buffer I/O error on dev nbd0, logical block 3, async page read [ 80.830518][ T5951] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.830535][ T5951] Buffer I/O error on dev nbd0, logical block 0, async page read [ 80.830615][ T5951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.830632][ T5951] Buffer I/O error on dev nbd0, logical block 1, async page read [ 80.834404][ T5951] ldm_validate_partition_table(): Disk read failed. [ 80.889986][ T5951] Dev nbd0: unable to read RDB block 0 [ 80.891835][ T5951] nbd0: unable to read partition table [ 80.898684][ T5951] ldm_validate_partition_table(): Disk read failed. [ 80.901031][ T5951] Dev nbd0: unable to read RDB block 0 [ 80.902578][ T5951] nbd0: unable to read partition table [ 81.257363][ T6810] binder_alloc: binder_alloc_mmap_handler: 6808 200000ffd000-200001000000 already mapped failed -16 [ 81.453677][ T6824] macsec0: entered promiscuous mode [ 81.455604][ T6824] macsec0: entered allmulticast mode [ 81.457336][ T6824] veth1_macvtap: entered allmulticast mode [ 81.615544][ T6834] FAULT_INJECTION: forcing a failure. [ 81.615544][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.621651][ T6834] CPU: 3 UID: 0 PID: 6834 Comm: syz.1.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.621695][ T6834] Tainted: [L]=SOFTLOCKUP [ 81.621701][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.621711][ T6834] Call Trace: [ 81.621717][ T6834] [ 81.621724][ T6834] dump_stack_lvl+0x100/0x190 [ 81.622154][ T6834] should_fail_ex.cold+0x5/0xa [ 81.622180][ T6834] _copy_from_user+0x2e/0xd0 [ 81.622332][ T6834] input_event_from_user+0x123/0x310 [ 81.622487][ T6834] ? __pfx_input_event_from_user+0x10/0x10 [ 81.622515][ T6834] ? __pfx___might_resched+0x10/0x10 [ 81.622598][ T6834] ? input_inject_event+0x1a6/0x390 [ 81.622632][ T6834] evdev_write+0x342/0x610 [ 81.622664][ T6834] ? __pfx_evdev_write+0x10/0x10 [ 81.622688][ T6834] ? bpf_lsm_file_permission+0x9/0x10 [ 81.622714][ T6834] ? security_file_permission+0x76/0x210 [ 81.622797][ T6834] ? rw_verify_area+0xce/0x6d0 [ 81.622882][ T6834] vfs_write+0x2aa/0x1070 [ 81.622900][ T6834] ? __pfx_evdev_write+0x10/0x10 [ 81.622927][ T6834] ? __pfx_vfs_write+0x10/0x10 [ 81.622943][ T6834] ? find_held_lock+0x2b/0x80 [ 81.622958][ T6834] ? __fget_files+0x215/0x3d0 [ 81.622977][ T6834] ? __fget_files+0x215/0x3d0 [ 81.623002][ T6834] ? __fget_files+0x21f/0x3d0 [ 81.623028][ T6834] ksys_write+0x1f8/0x250 [ 81.623045][ T6834] ? __pfx_ksys_write+0x10/0x10 [ 81.623064][ T6834] ? rcu_is_watching+0x12/0xc0 [ 81.623092][ T6834] do_syscall_64+0x10b/0xf80 [ 81.623356][ T6834] ? clear_bhb_loop+0x40/0x90 [ 81.623376][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.623394][ T6834] RIP: 0033:0x7f900d19c819 [ 81.623409][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.623425][ T6834] RSP: 002b:00007f900dfc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.623443][ T6834] RAX: ffffffffffffffda RBX: 00007f900d415fa0 RCX: 00007f900d19c819 [ 81.623454][ T6834] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 81.623465][ T6834] RBP: 00007f900dfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 81.623475][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.623485][ T6834] R13: 00007f900d416038 R14: 00007f900d415fa0 R15: 00007ffd2867f2f8 [ 81.623507][ T6834] [ 81.743656][ T6836] __nla_validate_parse: 15 callbacks suppressed [ 81.743668][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 81.748432][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 81.779589][ T6838] FAULT_INJECTION: forcing a failure. [ 81.779589][ T6838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.785471][ T6838] CPU: 2 UID: 0 PID: 6838 Comm: syz.1.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.785489][ T6838] Tainted: [L]=SOFTLOCKUP [ 81.785493][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.785500][ T6838] Call Trace: [ 81.785505][ T6838] [ 81.785510][ T6838] dump_stack_lvl+0x100/0x190 [ 81.785528][ T6838] should_fail_ex.cold+0x5/0xa [ 81.785541][ T6838] ? prepare_alloc_pages+0x16d/0x5f0 [ 81.785556][ T6838] should_fail_alloc_page+0xeb/0x140 [ 81.785569][ T6838] prepare_alloc_pages+0x1f0/0x5f0 [ 81.785584][ T6838] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 81.785609][ T6838] ? kasan_save_stack+0x3f/0x50 [ 81.785624][ T6838] ? kasan_save_stack+0x30/0x50 [ 81.785640][ T6838] ? kasan_save_track+0x14/0x30 [ 81.785656][ T6838] ? __kasan_slab_alloc+0x89/0x90 [ 81.785665][ T6838] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 81.785681][ T6838] ? ptlock_alloc+0x1f/0x70 [ 81.785694][ T6838] ? pte_alloc_one+0x82/0x3d0 [ 81.785710][ T6838] ? __pte_alloc+0x6d/0x3e0 [ 81.785719][ T6838] ? do_anonymous_page+0x13c6/0x2050 [ 81.785732][ T6838] ? __handle_mm_fault+0x1d2c/0x2a00 [ 81.785746][ T6838] ? handle_mm_fault+0x36d/0xa20 [ 81.785759][ T6838] ? __get_user_pages+0x1178/0x32a0 [ 81.785771][ T6838] ? __gup_longterm_locked+0x279/0x16f0 [ 81.785782][ T6838] ? gup_fast_fallback+0x16dc/0x2790 [ 81.785795][ T6838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.785814][ T6838] ? __lock_acquire+0x4a5/0x2630 [ 81.785828][ T6838] ? css_rstat_updated+0x1ce/0x5a0 [ 81.785846][ T6838] ? lock_acquire+0x1b1/0x370 [ 81.785859][ T6838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.785872][ T6838] ? policy_nodemask+0xed/0x4f0 [ 81.785885][ T6838] alloc_pages_mpol+0x1fb/0x540 [ 81.785896][ T6838] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.785909][ T6838] ? __lock_acquire+0x4a5/0x2630 [ 81.785923][ T6838] folio_alloc_mpol_noprof+0x36/0x260 [ 81.785937][ T6838] vma_alloc_folio_noprof+0xed/0x1d0 [ 81.785950][ T6838] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 81.785967][ T6838] do_anonymous_page+0xb46/0x2050 [ 81.785983][ T6838] ? rcu_read_unlock+0x2d/0xb0 [ 81.786001][ T6838] __handle_mm_fault+0x1d2c/0x2a00 [ 81.786057][ T6838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.786084][ T6838] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.786104][ T6838] ? pte_offset_map_lock+0x174/0x320 [ 81.786115][ T6838] ? find_held_lock+0x2b/0x80 [ 81.786129][ T6838] ? follow_page_pte+0x4d0/0x13f0 [ 81.786144][ T6838] handle_mm_fault+0x36d/0xa20 [ 81.786161][ T6838] __get_user_pages+0x1178/0x32a0 [ 81.786177][ T6838] ? down_read_killable+0x307/0x4b0 [ 81.786192][ T6838] ? __pfx___get_user_pages+0x10/0x10 [ 81.786204][ T6838] ? __lock_acquire+0x4a5/0x2630 [ 81.786220][ T6838] __gup_longterm_locked+0x279/0x16f0 [ 81.786236][ T6838] ? __pfx___gup_longterm_locked+0x10/0x10 [ 81.786252][ T6838] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 81.786266][ T6838] gup_fast_fallback+0x16dc/0x2790 [ 81.786288][ T6838] ? __pfx_gup_fast_fallback+0x10/0x10 [ 81.786302][ T6838] ? find_held_lock+0x2b/0x80 [ 81.786311][ T6838] ? is_bpf_text_address+0x8a/0x1a0 [ 81.786325][ T6838] ? is_bpf_text_address+0x8a/0x1a0 [ 81.786338][ T6838] ? bpf_ksym_find+0x128/0x1c0 [ 81.786356][ T6838] pin_user_pages_fast+0xa7/0xf0 [ 81.786368][ T6838] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 81.786381][ T6838] ? __kernel_text_address+0xd/0x30 [ 81.786395][ T6838] ? unwind_get_return_address+0x59/0xa0 [ 81.786412][ T6838] ? arch_stack_walk+0xa6/0xf0 [ 81.786429][ T6838] pfn_reader_user_pin+0xd01/0x10f0 [ 81.786521][ T6838] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 81.786533][ T6838] ? __pfx_stack_trace_save+0x10/0x10 [ 81.786545][ T6838] ? interval_tree_span_iter_first+0x329/0x610 [ 81.786565][ T6838] iopt_pages_fill_xarray+0x494/0xdd0 [ 81.786580][ T6838] ? kasan_save_stack+0x30/0x50 [ 81.786601][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.786615][ T6838] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 81.786646][ T6838] iopt_area_add_access+0x22a/0x410 [ 81.786663][ T6838] iommufd_access_pin_pages+0x649/0xa10 [ 81.786680][ T6838] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 81.786694][ T6838] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 81.786710][ T6838] ? iommufd_test+0x43f6/0x6200 [ 81.786730][ T6838] iommufd_test+0x445d/0x6200 [ 81.786750][ T6838] ? __pfx_iommufd_test+0x10/0x10 [ 81.786767][ T6838] ? tomoyo_path_number_perm+0x188/0x580 [ 81.786789][ T6838] ? find_held_lock+0x2b/0x80 [ 81.786798][ T6838] ? __might_fault+0xc5/0x140 [ 81.786813][ T6838] ? __might_fault+0xc5/0x140 [ 81.786833][ T6838] iommufd_fops_ioctl+0x358/0x520 [ 81.786845][ T6838] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 81.786858][ T6838] ? __fget_files+0x215/0x3d0 [ 81.786870][ T6838] ? hook_file_ioctl_common+0x149/0x410 [ 81.786888][ T6838] ? selinux_file_ioctl+0x13b/0x290 [ 81.786899][ T6838] ? selinux_file_ioctl+0xb6/0x290 [ 81.786910][ T6838] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 81.786923][ T6838] __x64_sys_ioctl+0x18e/0x210 [ 81.786935][ T6838] do_syscall_64+0x10b/0xf80 [ 81.786945][ T6838] ? clear_bhb_loop+0x40/0x90 [ 81.786958][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.786970][ T6838] RIP: 0033:0x7f900d19c819 [ 81.786980][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.786991][ T6838] RSP: 002b:00007f900dfc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.787002][ T6838] RAX: ffffffffffffffda RBX: 00007f900d415fa0 RCX: 00007f900d19c819 [ 81.787009][ T6838] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 81.787016][ T6838] RBP: 00007f900dfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 81.787022][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.787028][ T6838] R13: 00007f900d416038 R14: 00007f900d415fa0 R15: 00007ffd2867f2f8 [ 81.787042][ T6838] [ 82.074754][ T6844] validate_nla: 4 callbacks suppressed [ 82.074778][ T6844] netlink: 'syz.1.304': attribute type 83 has an invalid length. [ 82.082120][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 82.082134][ T40] audit: type=1400 audit(1776687827.494:324): avc: denied { write } for pid=6843 comm="syz.1.304" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.094769][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 82.149028][ T40] audit: type=1400 audit(1776687827.554:325): avc: denied { call } for pid=6847 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.164455][ T40] audit: type=1400 audit(1776687827.574:326): avc: denied { connect } for pid=6848 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.173141][ T40] audit: type=1400 audit(1776687827.574:327): avc: denied { read } for pid=6848 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.189038][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.308'. [ 82.193900][ T6853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6853 comm=syz.1.308 [ 82.201884][ T6853] FAULT_INJECTION: forcing a failure. [ 82.201884][ T6853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.209211][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.1.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.209239][ T6853] Tainted: [L]=SOFTLOCKUP [ 82.209246][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.209257][ T6853] Call Trace: [ 82.209264][ T6853] [ 82.209271][ T6853] dump_stack_lvl+0x100/0x190 [ 82.209299][ T6853] should_fail_ex.cold+0x5/0xa [ 82.209325][ T6853] _copy_to_user+0x32/0xd0 [ 82.209348][ T6853] simple_read_from_buffer+0xcb/0x170 [ 82.209377][ T6853] proc_fail_nth_read+0x1af/0x230 [ 82.209407][ T6853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.209437][ T6853] ? rw_verify_area+0xce/0x6d0 [ 82.209463][ T6853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.209491][ T6853] vfs_read+0x1e4/0xb30 [ 82.209512][ T6853] ? __pfx_vfs_read+0x10/0x10 [ 82.209528][ T6853] ? __fget_files+0x215/0x3d0 [ 82.209554][ T6853] ? __fget_files+0x21f/0x3d0 [ 82.209581][ T6853] ksys_read+0x12a/0x250 [ 82.209598][ T6853] ? __pfx_ksys_read+0x10/0x10 [ 82.209616][ T6853] ? rcu_is_watching+0x12/0xc0 [ 82.209645][ T6853] do_syscall_64+0x10b/0xf80 [ 82.209662][ T6853] ? clear_bhb_loop+0x40/0x90 [ 82.209683][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.209701][ T6853] RIP: 0033:0x7f900d15d04e [ 82.209716][ T6853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.209733][ T6853] RSP: 002b:00007f900dfc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.209751][ T6853] RAX: ffffffffffffffda RBX: 00007f900dfc26c0 RCX: 00007f900d15d04e [ 82.209762][ T6853] RDX: 000000000000000f RSI: 00007f900dfc20a0 RDI: 0000000000000007 [ 82.209772][ T6853] RBP: 00007f900dfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.209781][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.209791][ T6853] R13: 00007f900d416038 R14: 00007f900d415fa0 R15: 00007ffd2867f2f8 [ 82.209815][ T6853] [ 82.378145][ T6864] tipc: Started in network mode [ 82.383649][ T6864] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 82.387349][ T6864] tipc: Enabling of bearer rejected, failed to enable media [ 82.395731][ T40] audit: type=1400 audit(1776687827.804:328): avc: denied { mount } for pid=6865 comm="syz.0.313" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.414055][ T40] audit: type=1400 audit(1776687827.824:329): avc: denied { name_bind } for pid=6871 comm="syz.1.316" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.427853][ T40] audit: type=1400 audit(1776687827.834:330): avc: denied { name_connect } for pid=6871 comm="syz.1.316" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.446668][ T40] audit: type=1400 audit(1776687827.854:331): avc: denied { lock } for pid=6874 comm="syz.0.317" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.449853][ T6875] binder: 6874:6875 ioctl c0306201 200000000640 returned -14 [ 82.469933][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 82.477176][ T40] audit: type=1400 audit(1776687827.884:332): avc: denied { ioctl } for pid=6871 comm="syz.1.316" path="socket:[12177]" dev="sockfs" ino=12177 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.483247][ T553] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.485318][ T40] audit: type=1400 audit(1776687827.894:333): avc: denied { getopt } for pid=6871 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.485957][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 82.488162][ T553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.500603][ T553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.503181][ T553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.685232][ T156] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.688039][ T156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.691794][ T156] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.695583][ T156] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.705426][ T156] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.710141][ T156] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.720623][ T156] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.723395][ T156] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.851151][ T6898] ªªªªª: renamed from lo (while UP) [ 83.472712][ T6914] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.481309][ T6914] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.576457][ T6914] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.580548][ T6914] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.730665][ T6914] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.734328][ T6914] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.779903][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 83.791229][ T10] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 83.836585][ T6914] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.839800][ T6914] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.922749][ T6945] netlink: 'syz.2.334': attribute type 3 has an invalid length. [ 83.973444][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 83.998424][ T156] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.001182][ T156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003872][ T156] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.007300][ T156] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.017454][ T156] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.020221][ T156] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.034052][ T156] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.040709][ T156] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.071467][ T6949] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 84.267398][ T6890] capability: warning: `syz.0.320' uses deprecated v2 capabilities in a way that may be insecure [ 84.303231][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.341'. [ 84.413552][ T6970] overlayfs: empty lowerdir [ 84.447419][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 84.452106][ T6972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6972 comm=syz.1.345 [ 84.576755][ T6986] xt_hashlimit: size too large, truncated to 1048576 [ 84.586155][ T6987] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.592292][ T6987] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.664351][ T6987] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.667657][ T6987] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.725590][ T6987] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.730042][ T6987] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.806550][ T6987] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.810951][ T6987] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.954778][ T6999] bond1: entered promiscuous mode [ 84.956708][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.046220][ T7010] team0: Port device vlan2 added [ 85.082426][ T7013] netlink: 'syz.0.359': attribute type 29 has an invalid length. [ 85.085789][ T7013] netlink: 'syz.0.359': attribute type 29 has an invalid length. [ 86.217475][ T7046] netlink: set zone limit has 4 unknown bytes [ 86.219768][ T7048] bond2: (slave bond_slave_1): Device is not our slave [ 86.222407][ T7048] bond2: option active_slave: invalid value (bond_slave_1) [ 86.226506][ T7048] bond2 (unregistering): Released all slaves [ 86.318325][ T7053] netlink: 'syz.2.375': attribute type 6 has an invalid length. [ 86.324009][ T7053] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 86.329341][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.332387][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.344509][ T7051] usb usb7: usbfs: process 7051 (syz.2.375) did not claim interface 0 before use [ 86.898350][ T7093] vivid-001: disconnect [ 86.901896][ T7090] vivid-001: reconnect [ 86.955055][ T7101] __nla_validate_parse: 4 callbacks suppressed [ 86.955108][ T7101] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.393'. [ 87.203139][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 87.203158][ T40] audit: type=1400 audit(1776687832.614:360): avc: denied { ioctl } for pid=7116 comm="syz.3.400" path="socket:[17414]" dev="sockfs" ino=17414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.203412][ T7117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7117 comm=syz.3.400 [ 87.267268][ T40] audit: type=1400 audit(1776687832.674:361): avc: denied { read } for pid=7116 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.268524][ T7121] FAULT_INJECTION: forcing a failure. [ 87.268524][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.284619][ T7121] CPU: 3 UID: 0 PID: 7121 Comm: syz.2.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.284638][ T7121] Tainted: [L]=SOFTLOCKUP [ 87.284642][ T7121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.284648][ T7121] Call Trace: [ 87.284652][ T7121] [ 87.284657][ T7121] dump_stack_lvl+0x100/0x190 [ 87.284957][ T7121] should_fail_ex.cold+0x5/0xa [ 87.284974][ T7121] _copy_from_user+0x2e/0xd0 [ 87.285118][ T7121] input_event_from_user+0x123/0x310 [ 87.285234][ T7121] ? __pfx_input_event_from_user+0x10/0x10 [ 87.285251][ T7121] ? __pfx___might_resched+0x10/0x10 [ 87.285314][ T7121] ? input_inject_event+0x1a6/0x390 [ 87.285333][ T7121] evdev_write+0x342/0x610 [ 87.285352][ T7121] ? __pfx_evdev_write+0x10/0x10 [ 87.285369][ T7121] ? bpf_lsm_file_permission+0x9/0x10 [ 87.285387][ T7121] ? security_file_permission+0x76/0x210 [ 87.285436][ T7121] ? rw_verify_area+0xce/0x6d0 [ 87.285488][ T7121] vfs_write+0x2aa/0x1070 [ 87.285499][ T7121] ? __pfx_evdev_write+0x10/0x10 [ 87.285516][ T7121] ? __pfx_vfs_write+0x10/0x10 [ 87.285526][ T7121] ? find_held_lock+0x2b/0x80 [ 87.285536][ T7121] ? __fget_files+0x215/0x3d0 [ 87.285548][ T7121] ? __fget_files+0x215/0x3d0 [ 87.285563][ T7121] ? __fget_files+0x21f/0x3d0 [ 87.285579][ T7121] ksys_write+0x1f8/0x250 [ 87.285590][ T7121] ? __pfx_ksys_write+0x10/0x10 [ 87.285602][ T7121] ? rcu_is_watching+0x12/0xc0 [ 87.285620][ T7121] do_syscall_64+0x10b/0xf80 [ 87.285758][ T7121] ? clear_bhb_loop+0x40/0x90 [ 87.285772][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.285783][ T7121] RIP: 0033:0x7f932699c819 [ 87.285793][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.285804][ T7121] RSP: 002b:00007f9327823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.285816][ T7121] RAX: ffffffffffffffda RBX: 00007f9326c15fa0 RCX: 00007f932699c819 [ 87.285823][ T7121] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 87.285829][ T7121] RBP: 00007f9327823090 R08: 0000000000000000 R09: 0000000000000000 [ 87.285835][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.285841][ T7121] R13: 00007f9326c16038 R14: 00007f9326c15fa0 R15: 00007ffd50840008 [ 87.285854][ T7121] [ 87.391810][ T7125] FAULT_INJECTION: forcing a failure. [ 87.391810][ T7125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.396024][ T7125] CPU: 3 UID: 0 PID: 7125 Comm: syz.3.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.396042][ T7125] Tainted: [L]=SOFTLOCKUP [ 87.396046][ T7125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.396053][ T7125] Call Trace: [ 87.396057][ T7125] [ 87.396061][ T7125] dump_stack_lvl+0x100/0x190 [ 87.396079][ T7125] should_fail_ex.cold+0x5/0xa [ 87.396093][ T7125] ? prepare_alloc_pages+0x16d/0x5f0 [ 87.396107][ T7125] should_fail_alloc_page+0xeb/0x140 [ 87.396120][ T7125] prepare_alloc_pages+0x1f0/0x5f0 [ 87.396135][ T7125] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 87.396154][ T7125] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.396173][ T7125] ? folios_put_refs+0x716/0xa90 [ 87.396192][ T7125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.396216][ T7125] ? __lock_acquire+0x4a5/0x2630 [ 87.396235][ T7125] ? lock_acquire+0x1b1/0x370 [ 87.396248][ T7125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.396262][ T7125] ? policy_nodemask+0xed/0x4f0 [ 87.396274][ T7125] alloc_pages_mpol+0x1fb/0x540 [ 87.396286][ T7125] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 87.396298][ T7125] ? __lock_acquire+0x4a5/0x2630 [ 87.396312][ T7125] folio_alloc_mpol_noprof+0x36/0x260 [ 87.396330][ T7125] vma_alloc_folio_noprof+0xed/0x1d0 [ 87.396348][ T7125] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 87.396366][ T7125] do_anonymous_page+0xb46/0x2050 [ 87.396382][ T7125] ? rcu_read_unlock+0x2d/0xb0 [ 87.396400][ T7125] __handle_mm_fault+0x1d2c/0x2a00 [ 87.396417][ T7125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.396435][ T7125] ? __pfx___handle_mm_fault+0x10/0x10 [ 87.396450][ T7125] ? pte_offset_map_lock+0x174/0x320 [ 87.396462][ T7125] ? find_held_lock+0x2b/0x80 [ 87.396475][ T7125] ? follow_page_pte+0x4d0/0x13f0 [ 87.396490][ T7125] handle_mm_fault+0x36d/0xa20 [ 87.396507][ T7125] __get_user_pages+0x1178/0x32a0 [ 87.396522][ T7125] ? down_read_killable+0x307/0x4b0 [ 87.396535][ T7125] ? find_held_lock+0x2b/0x80 [ 87.396544][ T7125] ? __pfx___get_user_pages+0x10/0x10 [ 87.396555][ T7125] ? is_bpf_text_address+0x8a/0x1a0 [ 87.396570][ T7125] ? bpf_ksym_find+0x128/0x1c0 [ 87.396588][ T7125] __gup_longterm_locked+0x279/0x16f0 [ 87.396601][ T7125] ? unwind_get_return_address+0x59/0xa0 [ 87.396620][ T7125] ? __pfx___gup_longterm_locked+0x10/0x10 [ 87.396636][ T7125] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 87.396650][ T7125] gup_fast_fallback+0x16dc/0x2790 [ 87.396671][ T7125] ? __pfx_gup_fast_fallback+0x10/0x10 [ 87.396685][ T7125] ? find_held_lock+0x2b/0x80 [ 87.396694][ T7125] ? is_bpf_text_address+0x8a/0x1a0 [ 87.396707][ T7125] ? is_bpf_text_address+0x8a/0x1a0 [ 87.396721][ T7125] ? bpf_ksym_find+0x128/0x1c0 [ 87.396737][ T7125] pin_user_pages_fast+0xa7/0xf0 [ 87.396750][ T7125] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 87.396762][ T7125] ? __kernel_text_address+0xd/0x30 [ 87.396777][ T7125] ? unwind_get_return_address+0x59/0xa0 [ 87.396793][ T7125] ? arch_stack_walk+0xa6/0xf0 [ 87.396810][ T7125] pfn_reader_user_pin+0xd01/0x10f0 [ 87.396884][ T7125] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 87.396896][ T7125] ? __pfx_stack_trace_save+0x10/0x10 [ 87.396908][ T7125] ? interval_tree_span_iter_first+0x329/0x610 [ 87.396928][ T7125] iopt_pages_fill_xarray+0x494/0xdd0 [ 87.396942][ T7125] ? kasan_save_stack+0x30/0x50 [ 87.396960][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.396974][ T7125] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 87.397004][ T7125] iopt_area_add_access+0x22a/0x410 [ 87.397020][ T7125] iommufd_access_pin_pages+0x649/0xa10 [ 87.397038][ T7125] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 87.397051][ T7125] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 87.397067][ T7125] ? iommufd_test+0x43f6/0x6200 [ 87.397087][ T7125] iommufd_test+0x445d/0x6200 [ 87.397107][ T7125] ? __pfx_iommufd_test+0x10/0x10 [ 87.397124][ T7125] ? tomoyo_path_number_perm+0x188/0x580 [ 87.397145][ T7125] ? find_held_lock+0x2b/0x80 [ 87.397154][ T7125] ? __might_fault+0xc5/0x140 [ 87.397169][ T7125] ? __might_fault+0xc5/0x140 [ 87.397189][ T7125] iommufd_fops_ioctl+0x358/0x520 [ 87.397201][ T7125] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 87.397213][ T7125] ? __fget_files+0x215/0x3d0 [ 87.397226][ T7125] ? hook_file_ioctl_common+0x149/0x410 [ 87.397243][ T7125] ? selinux_file_ioctl+0x13b/0x290 [ 87.397255][ T7125] ? selinux_file_ioctl+0xb6/0x290 [ 87.397266][ T7125] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 87.397279][ T7125] __x64_sys_ioctl+0x18e/0x210 [ 87.397290][ T7125] do_syscall_64+0x10b/0xf80 [ 87.397300][ T7125] ? clear_bhb_loop+0x40/0x90 [ 87.397313][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.397325][ T7125] RIP: 0033:0x7fcfeb79c819 [ 87.397338][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.397349][ T7125] RSP: 002b:00007fcfec605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.397360][ T7125] RAX: ffffffffffffffda RBX: 00007fcfeba15fa0 RCX: 00007fcfeb79c819 [ 87.397367][ T7125] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 87.397374][ T7125] RBP: 00007fcfec605090 R08: 0000000000000000 R09: 0000000000000000 [ 87.397380][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.397386][ T7125] R13: 00007fcfeba16038 R14: 00007fcfeba15fa0 R15: 00007ffdfeda80e8 [ 87.397400][ T7125] [ 87.559299][ T7130] ------------[ cut here ]------------ [ 87.567966][ T7130] [CRTC:39:crtc-0] vblank wait timed out [ 87.569891][ T7130] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#2: syz.2.406/7130 [ 87.574135][ T7130] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 87.575706][ T7130] CPU: 2 UID: 0 PID: 7130 Comm: syz.2.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.579231][ T7130] Tainted: [L]=SOFTLOCKUP [ 87.579237][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.579245][ T7130] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 87.579271][ T7130] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d d8 1d 3f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 43 8e 61 fc e9 7c fe ff ff e8 49 [ 87.592436][ T7130] RSP: 0018:ffffc9000e03f7a8 EFLAGS: 00010246 [ 87.594270][ T7130] RAX: 0000000000000000 RBX: ffff888100f20040 RCX: 1ffff110201e4022 [ 87.596761][ T7130] RDX: ffff888027fed240 RSI: 0000000000000027 RDI: ffffffff90e70900 [ 87.599334][ T7130] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 87.601900][ T7130] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.604424][ T7130] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805796b600 [ 87.607112][ T7130] FS: 0000555565155500(0000) GS:ffff8880d64e7000(0000) knlGS:0000000000000000 [ 87.610229][ T7130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.612342][ T7130] CR2: 00007f0eb1785e40 CR3: 0000000060bf5000 CR4: 0000000000352ef0 [ 87.614917][ T7130] Call Trace: [ 87.615992][ T7130] [ 87.616944][ T7130] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 87.619377][ T7130] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.621269][ T7130] ? lockdep_hardirqs_on+0x78/0x100 [ 87.622936][ T7130] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.624861][ T7130] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 87.626890][ T7130] drm_atomic_helper_commit_tail+0xff/0x130 [ 87.629185][ T7130] commit_tail+0x338/0x430 [ 87.630624][ T7130] drm_atomic_helper_commit+0x303/0x380 [ 87.632408][ T7130] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 87.634421][ T7130] drm_atomic_commit+0x230/0x300 [ 87.635991][ T7130] ? __pfx_drm_atomic_commit+0x10/0x10 [ 87.637700][ T7130] ? __pfx___drm_printfn_info+0x10/0x10 [ 87.639636][ T7130] ? drm_client_rotation+0x451/0x6a0 [ 87.641326][ T7130] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 87.643370][ T7130] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 87.645565][ T7130] drm_client_modeset_commit_locked+0x14d/0x580 [ 87.647544][ T7130] drm_client_modeset_commit+0x4f/0x80 [ 87.649494][ T7130] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 87.651952][ T7130] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 87.654115][ T7130] drm_fbdev_client_restore+0x1b/0x30 [ 87.655861][ T7130] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 87.657769][ T7130] drm_client_dev_restore+0x205/0x2a0 [ 87.659549][ T7130] drm_release+0x2c6/0x360 [ 87.660966][ T7130] ? __pfx_drm_release+0x10/0x10 [ 87.662548][ T7130] __fput+0x3ff/0xb50 [ 87.663839][ T7130] task_work_run+0x150/0x240 [ 87.665338][ T7130] ? __pfx_task_work_run+0x10/0x10 [ 87.666982][ T7130] ? rcu_is_watching+0x12/0xc0 [ 87.668627][ T7130] exit_to_user_mode_loop+0x100/0x4a0 [ 87.670555][ T7130] ? do_syscall_64+0x52d/0xf80 [ 87.672116][ T7130] do_syscall_64+0x706/0xf80 [ 87.673596][ T7130] ? clear_bhb_loop+0x40/0x90 [ 87.675149][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.677007][ T7130] RIP: 0033:0x7f932699c819 [ 87.678426][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.684516][ T7130] RSP: 002b:00007ffd50840168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 87.687159][ T7130] RAX: 0000000000000000 RBX: 00007ffd50840250 RCX: 00007f932699c819 [ 87.689676][ T7130] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 87.692156][ T7130] RBP: 000000000001550c R08: 0000000000000001 R09: 0000000000000000 [ 87.694706][ T7130] R10: 0000001b2fa20000 R11: 0000000000000246 R12: 00007ffd50840290 [ 87.697168][ T7130] R13: 00007f9326c15fac R14: 0000000000015542 R15: 00007f9326c15fa0 [ 87.699781][ T7130] [ 87.700777][ T7130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.703064][ T7130] CPU: 2 UID: 0 PID: 7130 Comm: syz.2.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.706389][ T7130] Tainted: [L]=SOFTLOCKUP [ 87.707750][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.710918][ T7130] Call Trace: [ 87.712002][ T7130] [ 87.712951][ T7130] dump_stack_lvl+0x100/0x190 [ 87.714521][ T7130] vpanic+0x552/0x970 [ 87.715794][ T7130] ? __pfx_vpanic+0x10/0x10 [ 87.717236][ T7130] panic+0xd1/0xe0 [ 87.718456][ T7130] ? __pfx_panic+0x10/0x10 [ 87.719874][ T7130] ? check_panic_on_warn+0x1f/0x90 [ 87.721528][ T7130] check_panic_on_warn.cold+0x19/0x34 [ 87.723227][ T7130] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 87.725505][ T7130] __warn.cold+0x191/0x328 [ 87.726931][ T7130] __report_bug+0x296/0x3d0 [ 87.728383][ T7130] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 87.730646][ T7130] ? __pfx___report_bug+0x10/0x10 [ 87.732255][ T7130] ? lockdep_hardirqs_on+0x78/0x100 [ 87.733921][ T7130] report_bug_entry+0xe1/0x290 [ 87.735494][ T7130] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 87.737753][ T7130] handle_bug+0x1cd/0x2a0 [ 87.739140][ T7130] exc_invalid_op+0x17/0x50 [ 87.740578][ T7130] asm_exc_invalid_op+0x1a/0x20 [ 87.742130][ T7130] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 87.744575][ T7130] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d d8 1d 3f 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 43 8e 61 fc e9 7c fe ff ff e8 49 [ 87.750557][ T7130] RSP: 0018:ffffc9000e03f7a8 EFLAGS: 00010246 [ 87.752470][ T7130] RAX: 0000000000000000 RBX: ffff888100f20040 RCX: 1ffff110201e4022 [ 87.755015][ T7130] RDX: ffff888027fed240 RSI: 0000000000000027 RDI: ffffffff90e70900 [ 87.757485][ T7130] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 87.760024][ T7130] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.762505][ T7130] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805796b600 [ 87.764990][ T7130] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 87.767258][ T7130] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 87.769613][ T7130] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.771534][ T7130] ? lockdep_hardirqs_on+0x78/0x100 [ 87.773171][ T7130] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.775131][ T7130] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 87.777150][ T7130] drm_atomic_helper_commit_tail+0xff/0x130 [ 87.779029][ T7130] commit_tail+0x338/0x430 [ 87.780450][ T7130] drm_atomic_helper_commit+0x303/0x380 [ 87.782416][ T7130] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 87.784194][ T7130] drm_atomic_commit+0x230/0x300 [ 87.785808][ T7130] ? __pfx_drm_atomic_commit+0x10/0x10 [ 87.787552][ T7130] ? __pfx___drm_printfn_info+0x10/0x10 [ 87.789293][ T7130] ? drm_client_rotation+0x451/0x6a0 [ 87.790991][ T7130] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 87.792952][ T7130] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 87.795147][ T7130] drm_client_modeset_commit_locked+0x14d/0x580 [ 87.797115][ T7130] drm_client_modeset_commit+0x4f/0x80 [ 87.798856][ T7130] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 87.801299][ T7130] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 87.803455][ T7130] drm_fbdev_client_restore+0x1b/0x30 [ 87.805149][ T7130] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 87.807073][ T7130] drm_client_dev_restore+0x205/0x2a0 [ 87.808770][ T7130] drm_release+0x2c6/0x360 [ 87.810198][ T7130] ? __pfx_drm_release+0x10/0x10 [ 87.811788][ T7130] __fput+0x3ff/0xb50 [ 87.813068][ T7130] task_work_run+0x150/0x240 [ 87.814610][ T7130] ? __pfx_task_work_run+0x10/0x10 [ 87.816224][ T7130] ? rcu_is_watching+0x12/0xc0 [ 87.817747][ T7130] exit_to_user_mode_loop+0x100/0x4a0 [ 87.819467][ T7130] ? do_syscall_64+0x52d/0xf80 [ 87.820990][ T7130] do_syscall_64+0x706/0xf80 [ 87.822463][ T7130] ? clear_bhb_loop+0x40/0x90 [ 87.823960][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.825858][ T7130] RIP: 0033:0x7f932699c819 [ 87.827271][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.833216][ T7130] RSP: 002b:00007ffd50840168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 87.836259][ T7130] RAX: 0000000000000000 RBX: 00007ffd50840250 RCX: 00007f932699c819 [ 87.839097][ T7130] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 87.842157][ T7130] RBP: 000000000001550c R08: 0000000000000001 R09: 0000000000000000 [ 87.844845][ T7130] R10: 0000001b2fa20000 R11: 0000000000000246 R12: 00007ffd50840290 [ 87.847325][ T7130] R13: 00007f9326c15fac R14: 0000000000015542 R15: 00007f9326c15fa0 [ 87.849800][ T7130] [ 87.851701][ T7130] Kernel Offset: disabled [ 87.853067][ T7130] Rebooting in 86400 seconds..