[ 84.768563][ T40] audit: type=1400 audit(1776543079.346:117): avc: denied { transition } for pid=6143 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.778102][ T40] audit: type=1400 audit(1776543079.346:118): avc: denied { noatsecure } for pid=6143 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.786688][ T40] audit: type=1400 audit(1776543079.346:119): avc: denied { rlimitinh } for pid=6143 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.794706][ T40] audit: type=1400 audit(1776543079.346:120): avc: denied { siginh } for pid=6143 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:26657' (ED25519) to the list of known hosts. 2026/04/18 20:11:26 parsed 1 programs [ 94.072018][ T1335] cfg80211: failed to load regulatory.db [ 95.100693][ T40] audit: type=1400 audit(1776543089.676:121): avc: denied { read write } for pid=6192 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.109354][ T40] audit: type=1400 audit(1776543089.676:122): avc: denied { open } for pid=6192 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.137933][ T40] audit: type=1400 audit(1776543089.716:123): avc: denied { unlink } for pid=6192 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.439112][ T40] audit: type=1400 audit(1776543090.016:124): avc: denied { relabelto } for pid=6195 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 96.205399][ T6192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.750822][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 98.823108][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.826167][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.829391][ T6208] bridge_slave_0: entered allmulticast mode [ 98.832979][ T6208] bridge_slave_0: entered promiscuous mode [ 98.838359][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.840943][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.843592][ T6208] bridge_slave_1: entered allmulticast mode [ 98.846630][ T6208] bridge_slave_1: entered promiscuous mode [ 98.866223][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.871127][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.922542][ T6208] team0: Port device team_slave_0 added [ 98.928053][ T6208] team0: Port device team_slave_1 added [ 98.949513][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.952291][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.963443][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.970102][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.973301][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.983975][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.029110][ T6208] hsr_slave_0: entered promiscuous mode [ 99.032474][ T6208] hsr_slave_1: entered promiscuous mode [ 99.661475][ T6208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.671021][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.679265][ T6208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.686853][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.690811][ T6208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.696908][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.701513][ T6208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.708717][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.768782][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.781972][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.789059][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.792699][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.804257][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.807084][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.873071][ T40] audit: type=1400 audit(1776543094.446:125): avc: denied { sys_module } for pid=6208 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.941165][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.965251][ T6208] veth0_vlan: entered promiscuous mode [ 99.973712][ T6208] veth1_vlan: entered promiscuous mode [ 100.003734][ T6208] veth0_macvtap: entered promiscuous mode [ 100.011876][ T6208] veth1_macvtap: entered promiscuous mode [ 100.022305][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.032196][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.045717][ T1204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.048763][ T1204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.053004][ T1204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.056510][ T1204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.150432][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.251225][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.330518][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.455803][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.053832][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.057317][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.060995][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.066365][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.069409][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.558231][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.561142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.593081][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.596754][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.700192][ T40] audit: type=1401 audit(1776543096.276:126): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/04/18 20:11:36 executed programs: 0 [ 102.128564][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.134287][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.139823][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.143034][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.146295][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.303005][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 102.384555][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.388022][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.391189][ T6353] bridge_slave_0: entered allmulticast mode [ 102.394448][ T6353] bridge_slave_0: entered promiscuous mode [ 102.401089][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.404288][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.407573][ T6353] bridge_slave_1: entered allmulticast mode [ 102.410868][ T6353] bridge_slave_1: entered promiscuous mode [ 102.437951][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.445348][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.470609][ T6353] team0: Port device team_slave_0 added [ 102.475502][ T6353] team0: Port device team_slave_1 added [ 102.502304][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.506308][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.517496][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.524103][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.527737][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.537251][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.576665][ T6353] hsr_slave_0: entered promiscuous mode [ 102.580479][ T6353] hsr_slave_1: entered promiscuous mode [ 102.582864][ T6353] debugfs: 'hsr0' already exists in 'hsr' [ 102.585398][ T6353] Cannot create hsr debugfs directory [ 103.619999][ T46] bridge_slave_1: left allmulticast mode [ 103.622637][ T46] bridge_slave_1: left promiscuous mode [ 103.625599][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.631853][ T46] bridge_slave_0: left allmulticast mode [ 103.634457][ T46] bridge_slave_0: left promiscuous mode [ 103.637338][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.806673][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.812327][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.817492][ T46] bond0 (unregistering): Released all slaves [ 103.926119][ T46] hsr_slave_0: left promiscuous mode [ 103.928657][ T46] hsr_slave_1: left promiscuous mode [ 103.931929][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.937281][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.941210][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.944493][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.954672][ T46] veth1_macvtap: left promiscuous mode [ 103.956892][ T46] veth0_macvtap: left promiscuous mode [ 103.958985][ T46] veth1_vlan: left promiscuous mode [ 103.960952][ T46] veth0_vlan: left promiscuous mode [ 104.137657][ T46] team0 (unregistering): Port device team_slave_1 removed [ 104.148428][ T46] team0 (unregistering): Port device team_slave_0 removed [ 104.235323][ T5292] Bluetooth: hci0: command tx timeout [ 104.261348][ T5645] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.775534][ T6353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.781175][ T6353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.792358][ T6353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.800493][ T6353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.804404][ T6353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.811387][ T6353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.814737][ T6353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.818989][ T6353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.888774][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.902960][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.913807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.916627][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.927241][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.929803][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.389316][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.430426][ T6353] veth0_vlan: entered promiscuous mode [ 105.448754][ T6353] veth1_vlan: entered promiscuous mode [ 105.475652][ T6353] veth0_macvtap: entered promiscuous mode [ 105.487830][ T6353] veth1_macvtap: entered promiscuous mode [ 105.516264][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.525994][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.536711][ T1255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.542452][ T1255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.546170][ T1255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.549105][ T1255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.646255][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.654426][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.708226][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.710814][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.756455][ T40] audit: type=1400 audit(1776543100.336:127): avc: denied { read } for pid=6400 comm="syz.0.17" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.763738][ T6401] FAULT_INJECTION: forcing a failure. [ 105.763738][ T6401] name failslab, interval 1, probability 0, space 0, times 1 [ 105.766707][ T40] audit: type=1400 audit(1776543100.336:128): avc: denied { open } for pid=6400 comm="syz.0.17" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.766749][ T40] audit: type=1400 audit(1776543100.336:129): avc: denied { read write } for pid=6400 comm="syz.0.17" name="system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.766784][ T40] audit: type=1400 audit(1776543100.336:130): avc: denied { ioctl open } for pid=6400 comm="syz.0.17" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.766823][ T40] audit: type=1400 audit(1776543100.336:131): avc: denied { ioctl } for pid=6400 comm="syz.0.17" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.808102][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 105.808132][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.808208][ T6401] Call Trace: [ 105.808297][ T6401] [ 105.808306][ T6401] dump_stack_lvl+0x100/0x190 [ 105.808336][ T6401] should_fail_ex.cold+0x5/0xa [ 105.808365][ T6401] should_failslab+0xc2/0x120 [ 105.808384][ T6401] __kmalloc_cache_node_noprof+0x7d/0x770 [ 105.808415][ T6401] ? __get_vm_area_node+0x101/0x330 [ 105.808431][ T6401] ? lockdep_unlock+0x5a/0xc0 [ 105.808446][ T6401] ? __lock_acquire+0xd73/0x2630 [ 105.808470][ T6401] __get_vm_area_node+0x101/0x330 [ 105.808501][ T6401] __vmalloc_node_range_noprof+0x228/0x1630 [ 105.808522][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 105.808545][ T6401] ? rcu_is_watching+0x12/0xc0 [ 105.808570][ T6401] ? trace_contention_end+0x122/0x170 [ 105.808594][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 105.808613][ T6401] ? system_heap_vmap+0xab/0x5d0 [ 105.808635][ T6401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.808654][ T6401] ? __pfx___mutex_lock+0x10/0x10 [ 105.808693][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 105.808711][ T6401] __vmalloc_node_noprof+0xad/0xf0 [ 105.808731][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 105.808752][ T6401] system_heap_vmap+0x227/0x5d0 [ 105.808777][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 105.808794][ T6401] ? trace_contention_end+0x122/0x170 [ 105.808827][ T6401] dma_buf_vmap+0x275/0x430 [ 105.808845][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 105.808863][ T6401] ? __pfx_dma_buf_vmap+0x10/0x10 [ 105.808889][ T6401] drm_gem_shmem_vmap_locked+0x113/0x860 [ 105.808913][ T6401] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 105.808938][ T6401] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 105.808960][ T6401] drm_gem_vmap_locked+0xc8/0x1c0 [ 105.808983][ T6401] drm_gem_vmap+0x4a/0xa0 [ 105.809003][ T6401] drm_gem_fb_vmap+0xc7/0x450 [ 105.809035][ T6401] vkms_prepare_fb+0x87/0xb0 [ 105.809057][ T6401] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 105.809082][ T6401] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 105.809108][ T6401] drm_atomic_helper_commit+0x191/0x380 [ 105.809137][ T6401] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 105.809165][ T6401] drm_atomic_commit+0x230/0x300 [ 105.809192][ T6401] ? __pfx_drm_atomic_commit+0x10/0x10 [ 105.809217][ T6401] ? __pfx___drm_printfn_info+0x10/0x10 [ 105.809245][ T6401] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 105.809272][ T6401] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 105.809303][ T6401] drm_atomic_helper_update_plane+0x314/0x400 [ 105.809335][ T6401] __setplane_atomic+0x22d/0x350 [ 105.809370][ T6401] drm_mode_cursor_universal+0x5e9/0xe20 [ 105.809406][ T6401] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 105.809443][ T6401] ? __pfx_drm_lease_held+0x10/0x10 [ 105.809468][ T6401] ? modeset_lock+0x114/0x6d0 [ 105.809503][ T6401] drm_mode_cursor_common+0x308/0x970 [ 105.809535][ T6401] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 105.809562][ T6401] ? avc_has_extended_perms+0x33a/0x1080 [ 105.809600][ T6401] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 105.809626][ T6401] drm_mode_cursor_ioctl+0xd4/0x110 [ 105.809644][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 105.809660][ T6401] ? do_raw_spin_lock+0x128/0x260 [ 105.809684][ T6401] ? find_held_lock+0x2b/0x80 [ 105.809715][ T6401] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.809742][ T6401] drm_ioctl_kernel+0x1f3/0x3e0 [ 105.809766][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 105.809784][ T6401] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 105.809816][ T6401] drm_ioctl+0x5e6/0xc60 [ 105.809845][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 105.809864][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 105.809898][ T6401] ? selinux_file_ioctl+0x13b/0x290 [ 105.809926][ T6401] ? selinux_file_ioctl+0xb6/0x290 [ 105.809953][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 105.809979][ T6401] __x64_sys_ioctl+0x18e/0x210 [ 105.810010][ T6401] do_syscall_64+0x10b/0xf80 [ 105.810035][ T6401] ? clear_bhb_loop+0x40/0x90 [ 105.810058][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.810077][ T6401] RIP: 0033:0x7fa1f0d9af39 [ 105.810095][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.810112][ T6401] RSP: 002b:00007fa1f1c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.810214][ T6401] RAX: ffffffffffffffda RBX: 00007fa1f1005fa0 RCX: 00007fa1f0d9af39 [ 105.810225][ T6401] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 105.810235][ T6401] RBP: 00007fa1f1c03090 R08: 0000000000000000 R09: 0000000000000000 [ 105.810245][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.810255][ T6401] R13: 00007fa1f1006038 R14: 00007fa1f1005fa0 R15: 00007ffc110d5bb8 [ 105.810280][ T6401] [ 105.810504][ T6401] syz.0.17: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.002843][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.002892][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.002905][ T6401] Call Trace: [ 106.002914][ T6401] [ 106.002922][ T6401] dump_stack_lvl+0x100/0x190 [ 106.002950][ T6401] warn_alloc.cold+0x95/0x1c1 [ 106.002969][ T6401] ? __pfx_warn_alloc+0x10/0x10 [ 106.002992][ T6401] ? trace_kmalloc+0xe3/0x110 [ 106.003010][ T6401] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 106.003041][ T6401] ? __kasan_kmalloc+0x8a/0xb0 [ 106.003067][ T6401] ? __get_vm_area_node+0x208/0x330 [ 106.003091][ T6401] __vmalloc_node_range_noprof+0xccd/0x1630 [ 106.003116][ T6401] ? rcu_is_watching+0x12/0xc0 [ 106.003141][ T6401] ? trace_contention_end+0x122/0x170 [ 106.003164][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 106.003183][ T6401] ? system_heap_vmap+0xab/0x5d0 [ 106.003205][ T6401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.003226][ T6401] ? __pfx___mutex_lock+0x10/0x10 [ 106.003264][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 106.003280][ T6401] __vmalloc_node_noprof+0xad/0xf0 [ 106.003299][ T6401] ? system_heap_vmap+0x227/0x5d0 [ 106.003318][ T6401] system_heap_vmap+0x227/0x5d0 [ 106.003341][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 106.003356][ T6401] ? trace_contention_end+0x122/0x170 [ 106.003387][ T6401] dma_buf_vmap+0x275/0x430 [ 106.003406][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 106.003425][ T6401] ? __pfx_dma_buf_vmap+0x10/0x10 [ 106.003456][ T6401] drm_gem_shmem_vmap_locked+0x113/0x860 [ 106.003479][ T6401] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 106.003502][ T6401] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 106.003521][ T6401] drm_gem_vmap_locked+0xc8/0x1c0 [ 106.003541][ T6401] drm_gem_vmap+0x4a/0xa0 [ 106.003563][ T6401] drm_gem_fb_vmap+0xc7/0x450 [ 106.003596][ T6401] vkms_prepare_fb+0x87/0xb0 [ 106.003617][ T6401] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 106.003640][ T6401] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 106.003663][ T6401] drm_atomic_helper_commit+0x191/0x380 [ 106.003689][ T6401] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 106.003715][ T6401] drm_atomic_commit+0x230/0x300 [ 106.003743][ T6401] ? __pfx_drm_atomic_commit+0x10/0x10 [ 106.003767][ T6401] ? __pfx___drm_printfn_info+0x10/0x10 [ 106.003795][ T6401] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 106.003820][ T6401] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 106.003848][ T6401] drm_atomic_helper_update_plane+0x314/0x400 [ 106.003878][ T6401] __setplane_atomic+0x22d/0x350 [ 106.003910][ T6401] drm_mode_cursor_universal+0x5e9/0xe20 [ 106.003947][ T6401] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 106.003983][ T6401] ? __pfx_drm_lease_held+0x10/0x10 [ 106.004007][ T6401] ? modeset_lock+0x114/0x6d0 [ 106.004032][ T6401] drm_mode_cursor_common+0x308/0x970 [ 106.004063][ T6401] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 106.004090][ T6401] ? avc_has_extended_perms+0x33a/0x1080 [ 106.004127][ T6401] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 106.004155][ T6401] drm_mode_cursor_ioctl+0xd4/0x110 [ 106.004171][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.004185][ T6401] ? do_raw_spin_lock+0x128/0x260 [ 106.004208][ T6401] ? find_held_lock+0x2b/0x80 [ 106.004238][ T6401] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.004265][ T6401] drm_ioctl_kernel+0x1f3/0x3e0 [ 106.004290][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.004310][ T6401] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 106.004343][ T6401] drm_ioctl+0x5e6/0xc60 [ 106.004372][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.004392][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.004425][ T6401] ? selinux_file_ioctl+0x13b/0x290 [ 106.004459][ T6401] ? selinux_file_ioctl+0xb6/0x290 [ 106.004489][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.004515][ T6401] __x64_sys_ioctl+0x18e/0x210 [ 106.004546][ T6401] do_syscall_64+0x10b/0xf80 [ 106.004573][ T6401] ? clear_bhb_loop+0x40/0x90 [ 106.004595][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.004615][ T6401] RIP: 0033:0x7fa1f0d9af39 [ 106.004634][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.004651][ T6401] RSP: 002b:00007fa1f1c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.004672][ T6401] RAX: ffffffffffffffda RBX: 00007fa1f1005fa0 RCX: 00007fa1f0d9af39 [ 106.004683][ T6401] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 106.004693][ T6401] RBP: 00007fa1f1c03090 R08: 0000000000000000 R09: 0000000000000000 [ 106.004705][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.004715][ T6401] R13: 00007fa1f1006038 R14: 00007fa1f1005fa0 R15: 00007ffc110d5bb8 [ 106.004740][ T6401] [ 106.004748][ T6401] Mem-Info: [ 106.209036][ T6401] active_anon:37054 inactive_anon:0 isolated_anon:0 [ 106.209036][ T6401] active_file:4109 inactive_file:52640 isolated_file:0 [ 106.209036][ T6401] unevictable:1768 dirty:13148 writeback:0 [ 106.209036][ T6401] slab_reclaimable:12031 slab_unreclaimable:61436 [ 106.209036][ T6401] mapped:10176 shmem:2393 pagetables:878 [ 106.209036][ T6401] sec_pagetables:302 bounce:0 [ 106.209036][ T6401] kernel_misc_reclaimable:0 [ 106.209036][ T6401] free:490648 free_pcp:13360 free_cma:0 [ 106.224405][ T6401] Node 0 active_anon:148216kB inactive_anon:0kB active_file:16436kB inactive_file:210356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40764kB dirty:52580kB writeback:0kB shmem:6036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11168kB pagetables:3356kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 106.236757][ T6401] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 106.247288][ T6401] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.257341][ T6401] lowmem_reserve[]: 0 1229 1229 1229 1229 [ 106.259377][ T6401] Node 0 DMA32 free:296764kB boost:0kB min:27472kB low:34340kB high:41208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148216kB inactive_anon:0kB active_file:16436kB inactive_file:210356kB unevictable:3536kB writepending:52580kB zspages:0kB present:2080628kB managed:1259172kB mlocked:0kB bounce:0kB free_pcp:46428kB local_pcp:12428kB free_cma:0kB [ 106.270075][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 106.271818][ T6401] Node 1 Normal free:1651584kB boost:0kB min:39764kB low:49704kB high:59644kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:5884kB local_pcp:2096kB free_cma:0kB [ 106.283953][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 106.285746][ T6401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.290581][ T6401] Node 0 DMA32: 2055*4kB (UM) 161*8kB (UME) 261*16kB (UME) 321*32kB (UM) 28*64kB (UM) 14*128kB (UM) 42*256kB (UME) 31*512kB (UM) 37*1024kB (UM) 18*2048kB (UME) 41*4096kB (UM) = 296852kB [ 106.297389][ T6401] Node 1 Normal: 6*4kB (UM) 3*8kB (U) 15*16kB (UM) 15*32kB (UM) 4*64kB (UM) 5*128kB (UM) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 401*4096kB (M) = 1651584kB [ 106.303346][ T6401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.306611][ T6401] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.309677][ T6401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.312740][ T6401] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.315139][ T5292] Bluetooth: hci0: command tx timeout [ 106.316721][ T6401] 59137 total pagecache pages [ 106.320433][ T6401] 0 pages in swap cache [ 106.322398][ T6401] Free swap = 124996kB [ 106.323997][ T6401] Total swap = 124996kB [ 106.325711][ T6401] 1048443 pages RAM [ 106.327052][ T6401] 0 pages HighMem/MovableOnly [ 106.328623][ T6401] 284339 pages reserved [ 106.329960][ T6401] 0 pages cma reserved [ 106.333098][ T6401] ------------[ cut here ]------------ [ 106.336053][ T6401] ret [ 106.336062][ T6401] WARNING: drivers/dma-buf/dma-buf.c:1649 at dma_buf_vmap+0x3c5/0x430, CPU#0: syz.0.17/6401 [ 106.340361][ T6401] Modules linked in: [ 106.342228][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.346585][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.350980][ T6401] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 106.353650][ T6401] Code: fc e9 22 fd ff ff 48 8b 3c 24 e8 16 ff 21 fc e9 30 ff ff ff e8 0c 28 b5 fb 90 0f 0b e8 04 28 b5 fb 90 0f 0b e8 fc 27 b5 fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ee 89 43 05 4c 89 ff e8 26 fe 21 fc e9 [ 106.361801][ T6401] RSP: 0018:ffffc9000520f3f8 EFLAGS: 00010293 [ 106.364189][ T6401] RAX: 0000000000000000 RBX: ffff888036250c00 RCX: ffffffff86544021 [ 106.367118][ T6401] RDX: ffff8880348c0000 RSI: ffffffff86544164 RDI: ffff8880348c0000 [ 106.369930][ T6401] RBP: ffffc9000520f498 R08: 0000000000000005 R09: 0000000000000000 [ 106.373103][ T6401] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888023f808d0 [ 106.376247][ T6401] R13: 1ffff92000a41e82 R14: 00000000fffffff4 R15: ffff888036250c30 [ 106.379001][ T6401] FS: 00007fa1f1c036c0(0000) GS:ffff8880d62ef000(0000) knlGS:0000000000000000 [ 106.381864][ T6401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.384003][ T6401] CR2: 00007f3573f5b4c0 CR3: 0000000038063000 CR4: 0000000000352ef0 [ 106.387066][ T6401] Call Trace: [ 106.388267][ T6401] [ 106.389264][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 106.391103][ T6401] ? __pfx_dma_buf_vmap+0x10/0x10 [ 106.392845][ T6401] drm_gem_shmem_vmap_locked+0x113/0x860 [ 106.394727][ T6401] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 106.396867][ T6401] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 106.399270][ T6401] drm_gem_vmap_locked+0xc8/0x1c0 [ 106.401323][ T6401] drm_gem_vmap+0x4a/0xa0 [ 106.403487][ T6401] drm_gem_fb_vmap+0xc7/0x450 [ 106.405877][ T6401] vkms_prepare_fb+0x87/0xb0 [ 106.408056][ T6401] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 106.410263][ T6401] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 106.412010][ T6401] drm_atomic_helper_commit+0x191/0x380 [ 106.413867][ T6401] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 106.415976][ T6401] drm_atomic_commit+0x230/0x300 [ 106.417675][ T6401] ? __pfx_drm_atomic_commit+0x10/0x10 [ 106.420204][ T6401] ? __pfx___drm_printfn_info+0x10/0x10 [ 106.422301][ T6401] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 106.424358][ T6401] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 106.426638][ T6401] drm_atomic_helper_update_plane+0x314/0x400 [ 106.428752][ T6401] __setplane_atomic+0x22d/0x350 [ 106.430849][ T6401] drm_mode_cursor_universal+0x5e9/0xe20 [ 106.433000][ T6401] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 106.434821][ T6401] ? __pfx_drm_lease_held+0x10/0x10 [ 106.436711][ T6401] ? modeset_lock+0x114/0x6d0 [ 106.438685][ T6401] drm_mode_cursor_common+0x308/0x970 [ 106.441546][ T6401] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 106.443996][ T6401] ? avc_has_extended_perms+0x33a/0x1080 [ 106.446008][ T6401] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 106.447772][ T6401] drm_mode_cursor_ioctl+0xd4/0x110 [ 106.449692][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.451551][ T6401] ? do_raw_spin_lock+0x128/0x260 [ 106.453113][ T6401] ? find_held_lock+0x2b/0x80 [ 106.454575][ T6401] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.456605][ T6401] drm_ioctl_kernel+0x1f3/0x3e0 [ 106.458564][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.460980][ T6401] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 106.463874][ T6401] drm_ioctl+0x5e6/0xc60 [ 106.465894][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.468081][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.469716][ T6401] ? selinux_file_ioctl+0x13b/0x290 [ 106.471470][ T6401] ? selinux_file_ioctl+0xb6/0x290 [ 106.473129][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.474760][ T6401] __x64_sys_ioctl+0x18e/0x210 [ 106.476577][ T6401] do_syscall_64+0x10b/0xf80 [ 106.478183][ T6401] ? clear_bhb_loop+0x40/0x90 [ 106.480006][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.482805][ T6401] RIP: 0033:0x7fa1f0d9af39 [ 106.485308][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.492652][ T6401] RSP: 002b:00007fa1f1c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.495553][ T6401] RAX: ffffffffffffffda RBX: 00007fa1f1005fa0 RCX: 00007fa1f0d9af39 [ 106.498185][ T6401] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 106.501595][ T6401] RBP: 00007fa1f1c03090 R08: 0000000000000000 R09: 0000000000000000 [ 106.505417][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.508736][ T6401] R13: 00007fa1f1006038 R14: 00007fa1f1005fa0 R15: 00007ffc110d5bb8 [ 106.511316][ T6401] [ 106.512326][ T6401] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.514673][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.517802][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.521976][ T6401] Call Trace: [ 106.523440][ T6401] [ 106.524644][ T6401] dump_stack_lvl+0x100/0x190 [ 106.526352][ T6401] vpanic+0x552/0x970 [ 106.527805][ T6401] ? __pfx_vpanic+0x10/0x10 [ 106.529377][ T6401] panic+0xd1/0xe0 [ 106.530683][ T6401] ? __pfx_panic+0x10/0x10 [ 106.532166][ T6401] ? check_panic_on_warn+0x1f/0x90 [ 106.533857][ T6401] check_panic_on_warn.cold+0x19/0x34 [ 106.535801][ T6401] ? dma_buf_vmap+0x3c5/0x430 [ 106.537854][ T6401] __warn.cold+0x191/0x328 [ 106.539778][ T6401] __report_bug+0x296/0x3d0 [ 106.541899][ T6401] ? dma_buf_vmap+0x3c5/0x430 [ 106.544284][ T6401] ? __pfx___report_bug+0x10/0x10 [ 106.546955][ T6401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.549841][ T6401] ? __vmalloc_node_noprof+0xad/0xf0 [ 106.552100][ T6401] ? dma_buf_vmap+0x3c5/0x430 [ 106.553958][ T6401] report_bug+0xb2/0x220 [ 106.555670][ T6401] ? dma_buf_vmap+0x3c5/0x430 [ 106.557563][ T6401] handle_bug+0x16a/0x2a0 [ 106.559337][ T6401] exc_invalid_op+0x17/0x50 [ 106.561164][ T6401] asm_exc_invalid_op+0x1a/0x20 [ 106.563156][ T6401] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 106.565268][ T6401] Code: fc e9 22 fd ff ff 48 8b 3c 24 e8 16 ff 21 fc e9 30 ff ff ff e8 0c 28 b5 fb 90 0f 0b e8 04 28 b5 fb 90 0f 0b e8 fc 27 b5 fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ee 89 43 05 4c 89 ff e8 26 fe 21 fc e9 [ 106.573222][ T6401] RSP: 0018:ffffc9000520f3f8 EFLAGS: 00010293 [ 106.575825][ T6401] RAX: 0000000000000000 RBX: ffff888036250c00 RCX: ffffffff86544021 [ 106.579207][ T6401] RDX: ffff8880348c0000 RSI: ffffffff86544164 RDI: ffff8880348c0000 [ 106.582775][ T6401] RBP: ffffc9000520f498 R08: 0000000000000005 R09: 0000000000000000 [ 106.586350][ T6401] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888023f808d0 [ 106.589962][ T6401] R13: 1ffff92000a41e82 R14: 00000000fffffff4 R15: ffff888036250c30 [ 106.593183][ T6401] ? dma_buf_vmap+0x281/0x430 [ 106.595086][ T6401] ? dma_buf_vmap+0x3c4/0x430 [ 106.596806][ T6401] ? dma_buf_vmap+0x3c4/0x430 [ 106.598546][ T6401] ? __pfx_system_heap_vmap+0x10/0x10 [ 106.600594][ T6401] ? __pfx_dma_buf_vmap+0x10/0x10 [ 106.602477][ T6401] drm_gem_shmem_vmap_locked+0x113/0x860 [ 106.604410][ T6401] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 106.606484][ T6401] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 106.608529][ T6401] drm_gem_vmap_locked+0xc8/0x1c0 [ 106.610207][ T6401] drm_gem_vmap+0x4a/0xa0 [ 106.611619][ T6401] drm_gem_fb_vmap+0xc7/0x450 [ 106.613139][ T6401] vkms_prepare_fb+0x87/0xb0 [ 106.614671][ T6401] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 106.616692][ T6401] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 106.618477][ T6401] drm_atomic_helper_commit+0x191/0x380 [ 106.620469][ T6401] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 106.622685][ T6401] drm_atomic_commit+0x230/0x300 [ 106.624853][ T6401] ? __pfx_drm_atomic_commit+0x10/0x10 [ 106.626890][ T6401] ? __pfx___drm_printfn_info+0x10/0x10 [ 106.628730][ T6401] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 106.630420][ T6401] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 106.632158][ T6401] drm_atomic_helper_update_plane+0x314/0x400 [ 106.634257][ T6401] __setplane_atomic+0x22d/0x350 [ 106.635882][ T6401] drm_mode_cursor_universal+0x5e9/0xe20 [ 106.637738][ T6401] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 106.640116][ T6401] ? __pfx_drm_lease_held+0x10/0x10 [ 106.642141][ T6401] ? modeset_lock+0x114/0x6d0 [ 106.643771][ T6401] drm_mode_cursor_common+0x308/0x970 [ 106.645441][ T6401] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 106.647391][ T6401] ? avc_has_extended_perms+0x33a/0x1080 [ 106.649189][ T6401] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 106.651354][ T6401] drm_mode_cursor_ioctl+0xd4/0x110 [ 106.653279][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.655729][ T6401] ? do_raw_spin_lock+0x128/0x260 [ 106.657618][ T6401] ? find_held_lock+0x2b/0x80 [ 106.659206][ T6401] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.660854][ T6401] drm_ioctl_kernel+0x1f3/0x3e0 [ 106.662424][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.664314][ T6401] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 106.666033][ T6401] drm_ioctl+0x5e6/0xc60 [ 106.667531][ T6401] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 106.669630][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.671229][ T6401] ? selinux_file_ioctl+0x13b/0x290 [ 106.672943][ T6401] ? selinux_file_ioctl+0xb6/0x290 [ 106.674598][ T6401] ? __pfx_drm_ioctl+0x10/0x10 [ 106.676190][ T6401] __x64_sys_ioctl+0x18e/0x210 [ 106.677873][ T6401] do_syscall_64+0x10b/0xf80 [ 106.679471][ T6401] ? clear_bhb_loop+0x40/0x90 [ 106.681045][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.683089][ T6401] RIP: 0033:0x7fa1f0d9af39 [ 106.684765][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.691545][ T6401] RSP: 002b:00007fa1f1c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.694185][ T6401] RAX: ffffffffffffffda RBX: 00007fa1f1005fa0 RCX: 00007fa1f0d9af39 [ 106.696713][ T6401] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 106.699292][ T6401] RBP: 00007fa1f1c03090 R08: 0000000000000000 R09: 0000000000000000 [ 106.702052][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.704798][ T6401] R13: 00007fa1f1006038 R14: 00007fa1f1005fa0 R15: 00007ffc110d5bb8 [ 106.707487][ T6401] [ 106.709242][ T6401] Kernel Offset: disabled [ 106.710686][ T6401] Rebooting in 86400 seconds..