last executing test programs: 2.351321104s ago: executing program 1 (id=320): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1], 0x0, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "d9daacdd95b8b313", "14ea2a3cb44119d2570c2612cf8a97afee66ff37e1e9ff6a78171840a6a258e4", "906f70eb", "0400"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000040), 0x44) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, &(0x7f00000008c0)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000640)={0x1e, 0x1}) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) r11 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r12}) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) kexec_load(0x0, 0x1, &(0x7f0000001440)=[{0x0}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) 860.736924ms ago: executing program 3 (id=347): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, &(0x7f0000000080)={0x0, 0xc05, 0x40000, 0x4, 0x5, 0x0, 0xf, 0x8f6}) 758.53272ms ago: executing program 1 (id=349): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) (fail_nth: 8) 758.317449ms ago: executing program 0 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000103010200000000000000bda30000003c0001802c0001800712030020c5000000000000bd11000400fe8000e60400000000000000000000bb0c0002800500010000000000060007400003000000f6000040280b"], 0x58}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x1000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r4, 0xc0086442, &(0x7f00000000c0)) 758.072587ms ago: executing program 3 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb68e}]}, 0x70}, 0x1, 0x0, 0x0, 0xc844}, 0x41) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) 756.507336ms ago: executing program 3 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 756.283569ms ago: executing program 1 (id=354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547046ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e8376c212ffb76f895aadedcf3f70bddcc347473dba5602d7734c4e9a2054cd3763acbb7fe82155d4a50e6a72d917b22b16ea8abd987834b4b1b04556e5442b1b643fa842a08ab5d860715b250447170c8d30829730a53974b6554a6454bab2eeda2966cc13a02a2b2c2e157ccd1795bcbc9c7bec370d9f492745b7c03c5ba21a45ff6bbba064ec83ec2ea5", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0) 704.41646ms ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) 620.977448ms ago: executing program 1 (id=357): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r0, 0xc0086444, &(0x7f0000000140)) 620.152842ms ago: executing program 3 (id=358): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xf, 0xc9, 0x2, 0x9}}}, 0x9) 619.263751ms ago: executing program 1 (id=359): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x2d}, 0x1, "733f3611c0ceaef2a4d31520b349b4ed3c7f8e7d97d17abb2c5788d18280f572", 0x9, 0x2, 0x7, 0xff}, 0x3c) r1 = socket$inet(0x2, 0x802, 0x6) r2 = socket$unix(0x1, 0x4, 0x0) r3 = accept4$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r5 = syz_open_dev$media(&(0x7f0000000140), 0x4, 0x610100) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000180)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1405, 0x800, 0x70bd2a, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x4) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000380)={0x7f, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000400)) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000480)={@remote, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000500)={@private0, 0x0}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x280, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x140000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x280}}, 0x80) recvfrom(r0, &(0x7f00000009c0)=""/183, 0xb7, 0x40000002, &(0x7f0000000a80)=@phonet={0x23, 0x9, 0x8, 0xff}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, &(0x7f0000000d80)={0x0, 0x1, 0xffffffffffffffff}) r16 = syz_open_dev$ublk_bdev(&(0x7f0000000dc0), 0x0, 0x4040) r17 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe1536d4a22714673) r19 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r14, &(0x7f0000003500)=[{{&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="515315f9db3a10e25fda03fd3c8775c24418b4eee65fbc66bf89b65845a934ca1c0653ce43f06eca4215a850c14cad5824b874362a989d9f18f66a7811498afdb5766e89c77c627fb53206f0c7c204eed4ddc0b0e9940c779e7804fb0412e08a0cdccfa0bf683fb14c37b20e90b9c668aa39d18a753102e9a977f8c90c3c41f2654535c20f2b7e4eb625f367ec5e2064a89e52b480d11d177568b508a73150fc8b", 0xa1}, {&(0x7f0000000c80)="a3", 0x1}, {&(0x7f0000000cc0)="93aecab9c204c736cba7e0db7aa41451033466d46df7d5a3e88732653e3cc15101a7470ba81949dfc7e2706868305c9f490aab5db6b8ffd054ea", 0x3a}, {&(0x7f0000000d00)="cd1f4682f01ff904", 0x8}], 0x4, &(0x7f0000000ec0)=[@rights={{0x28, 0x1, 0x1, [r0, r15, r2, r1, r16, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r19, r5]}}], 0x60, 0x40004810}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000f40)="e36cdcd31dcbb2e3d912db278e1bc43afab4da712e6bb5f820e1ce0e25e3fc8b9f66e0da9289fce0d8a4dc68e2bd6645cefdc68ac9324e12fb91c21b330543a405bb71e7485c49c4e4f4fcf66f9b6032924fd068701c6089d85dd0a7db63249f19750f0198f4c437fa76d9c2fe73a2f96ec2bbd8980a78df04095226d8c95fe7aaa40438030f34b1ebc291b69232ea99aabd791ee80c29d2c25460f4e94d0dba0349de911f29a61e5a639456f796402aabd18c8886c675eb7351808186e1fbee8f5eb65ff6b86e0da33299f770dbaff3fe528786", 0xd4}, {&(0x7f0000001040)="a6309cad32d033861c89ac74d00ea4d199c75b14d41ae5b55dd6001374fc66af565ee3f897ceca56165743fbbbee910b3e9a243819555ff4fe96e85bb0b0de7c9c77e58a799f9316c84ddb3ee64dfd0b74605f921a46d7f28d4466cf8b1364137212da8d85dfdb8673820ff02bd0fff45e3e7ae0794027", 0x77}, {&(0x7f00000010c0)="261f", 0x2}, {&(0x7f0000001100)="10c996010b725f24a30764e34b5ba3821d0494e2986355a51de7a3e1abdaa978cf3edc0fc8ddf7654710f14366a45fcb70b61bc65a53ce20d40801f384cb1b74789ce24761dbc03d8fa051a98dce09c159319fe29be2e508471200ce28cfd60a6fcec845f26672ca4cd9e59f94ccaaa62a0db4aa5cbe6b282ce339b354b3dca3797e40f27e29aec01c887e2966c209ff3ebd00fedd38cb23b9f4a3", 0x9b}, {&(0x7f00000011c0)="f7a6a0e8ade75aa76264d5b2bacf2859f39eb8f18cb08406c499174f2b64e69e2f20fa2df432ba0fcb0cd5d0c3d8cfa93a70ae5ce3ea2c07a876728e7201e38ee9a2d4f8bef364ce7fe262454895aac005402959cb90b2ed63e4e83f70878612ae461db616a29c387c77fc519cdff93de5387ee9dc71289a8d235f9ebc3e5479c7587b3ee563f0bd475230bd4d84bc3e64a559a7e2b977aa9a5eaa150db7ce30d6aede6b48dee18e5911", 0xaa}, {&(0x7f0000001280)="72dbcd2864385c91de3ed176207022f02212feea694b318f708976460aa7618710cfc0c39a426a45a108f0d915c3ba9ca1782dd722862e1606d13587ca10d7873dec58c310546440d1a8105c985ac745f8474ecf32d2011161f3c686d9debc3d81b19dd39ec5fa4b413e523ea38e81834657ae1f69892b430c320ae8c088a6ade1c4dc569d2e9d5f8d2a2beb7bffd3234b5eceacb117dff8901cfd3b2f93fb3be6d2f133ba3c9c53d3c77eb3354039455c09a627b497883dc32881b7b9fa3f826c4274", 0xc3}, {&(0x7f0000001380)="b7da4ebcf2987076923af790aa1b61d5f6cf66ebc82da4ebad79fa24a177d2cddc9e777d369539df75231c10d0a278176b81703f578520d22d25fde39e2fcb0c1de5285722b5c641c6ffe28c6168382ecf5d9d519df61a28d4053b7eb581086ee01427d4df1b63f14b4333eb783992d81e790d7eff562125b4fe0246d7f847d9a1f5715a", 0x84}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="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", 0x1000}], 0x9, 0x0, 0x0, 0x4000000}}], 0x2, 0x11) 619.121356ms ago: executing program 3 (id=360): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, &(0x7f0000000080)={0x0, 0xc05, 0x40000, 0x4, 0x5, 0x0, 0xf, 0x8f6}) 550.952827ms ago: executing program 3 (id=362): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x20) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, 0x0, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000580)={r3, &(0x7f0000000340)='([*-\x00', 0x2, &(0x7f00000004c0)={@align=0x9, {0x3832, 0xa, 0x5, 0x2}}, 0x66a, &(0x7f0000000500), &(0x7f0000000540)=0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004004) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="060000005e7eb322ecfb3a6f6b2bb4fb", @ANYRES16=r8, @ANYBLOB="20002cbd7000fedbdf251100000066000380050008000600000014000600fc010000000000000000000000000000050008000e000000080001000200000008000300020000000800060003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc8d0}, 0x8000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r9 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="50000000020603000000000000000000020000030c000780050009000073797a310000000005000400000000000c000300686173683a69700005000100070000008cbebf404e0105187ac836ec20c2dad7735111cab7360c614ad7691d12409a68ad184ffc8e280e29c6760d5e03c71813ff91f152bb11c0b769d4ffdf7f41a4bf7b4e6819878ca3f98e2c2ede48042a91859958c6eba5aeec33699e0e559870d4eae57f2c06b69c5982a31abf5a477b977dfed887014aa23c665849a672769a9ebaa39eab1501b3ee41555aab48acfff9bf4db52e1a"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[], 0x1d8}, 0x1, 0x0, 0x0, 0x2000c881}, 0xc840) 489.605933ms ago: executing program 0 (id=363): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='-:s/p ./file', 0xc) 489.260304ms ago: executing program 0 (id=364): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 391.686365ms ago: executing program 0 (id=365): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1], &(0x7f00000000c0), 0x1}) (fail_nth: 11) 281.687508ms ago: executing program 0 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 140.69456ms ago: executing program 0 (id=371): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000300000abdd92b1c82d8e664633938"], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendfile(r1, r0, &(0x7f0000000180)=0x40, 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000000c0)={&(0x7f0000000140)=[r4], &(0x7f0000000200)=[0x2, 0x20, 0xf5d2, 0xf, 0xf5, 0x7fffffffffffffff, 0x341c, 0xfffffffffffffffc, 0x1], 0x400000bb}) 139.855102ms ago: executing program 2 (id=372): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='-:s/p ./file', 0xc) 139.545478ms ago: executing program 2 (id=373): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 74.091491ms ago: executing program 2 (id=374): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r0, 0xc010644d, &(0x7f0000000140)={r2, 0x0, &(0x7f0000000100)='/dev/dri/card#\x00'}) 73.928296ms ago: executing program 2 (id=375): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 363.306µs ago: executing program 2 (id=376): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\\^/\x00', r1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xe6) 0s ago: executing program 2 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r1, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c69666163650000"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x596}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe516}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x59fe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x788a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x827}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ea}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000080) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x40080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x20008041}}], 0x1, 0x4000090) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) process_madvise(r8, 0x0, 0x0, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4001, @remote}, 0x10) close(0x3) pidfd_getfd(r8, r9, 0x0) kernel console output (not intermixed with test programs): [ 38.047136][ T42] audit: type=1400 audit(1786105746.669:115): avc: denied { siginh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.559780][ T42] audit: type=1400 audit(1786105747.219:116): avc: denied { write } for pid=5636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.599227][ T42] audit: type=1400 audit(1786105747.259:117): avc: denied { write } for pid=5639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.058694][ T42] audit: type=1400 audit(1786105747.719:118): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.119488][ T42] audit: type=1400 audit(1786105747.779:119): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.216331][ T42] audit: type=1400 audit(1786105747.869:120): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:9090' (ED25519) to the list of known hosts. [ 42.500068][ T5687] cgroup: Unknown subsys name 'net' [ 42.648942][ T5687] cgroup: Unknown subsys name 'cpuset' [ 42.653160][ T5687] cgroup: Unknown subsys name 'rlimit' [ 42.875236][ T5716] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.572753][ T5687] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.799375][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.799387][ T42] audit: type=1400 audit(1786105755.459:158): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.952975][ T42] audit: type=1400 audit(1786105755.609:159): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.962565][ T42] audit: type=1400 audit(1786105755.609:160): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.969718][ T42] audit: type=1400 audit(1786105755.609:161): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.976852][ T42] audit: type=1400 audit(1786105755.619:162): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[5023]" dev="sockfs" ino=5023 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.999932][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.003291][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.005292][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.005407][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.006596][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.006916][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.007040][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.007265][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.008439][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.008800][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.009048][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.009798][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.009859][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.012151][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.013778][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.016269][ T42] audit: type=1400 audit(1786105755.669:163): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.021149][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.021430][ T42] audit: type=1400 audit(1786105755.669:164): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.024581][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.025770][ T42] audit: type=1400 audit(1786105755.669:165): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.030550][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.032534][ T42] audit: type=1400 audit(1786105755.689:166): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.036859][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.059042][ T42] audit: type=1400 audit(1786105755.719:167): avc: denied { sys_module } for pid=5723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.078416][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.572124][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.575541][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.578724][ T5723] bridge_slave_0: entered allmulticast mode [ 47.581911][ T5723] bridge_slave_0: entered promiscuous mode [ 47.586594][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.589428][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.592240][ T5723] bridge_slave_1: entered allmulticast mode [ 47.595325][ T5723] bridge_slave_1: entered promiscuous mode [ 47.629693][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.632563][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.635537][ T5726] bridge_slave_0: entered allmulticast mode [ 47.638930][ T5726] bridge_slave_0: entered promiscuous mode [ 47.653634][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.656525][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.659271][ T5731] bridge_slave_0: entered allmulticast mode [ 47.662409][ T5731] bridge_slave_0: entered promiscuous mode [ 47.673998][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.677111][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.679768][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.682397][ T5726] bridge_slave_1: entered allmulticast mode [ 47.685281][ T5726] bridge_slave_1: entered promiscuous mode [ 47.694272][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.697372][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.700381][ T5731] bridge_slave_1: entered allmulticast mode [ 47.704428][ T5731] bridge_slave_1: entered promiscuous mode [ 47.716096][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.774701][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.779410][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.783993][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.793127][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.795485][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.798696][ T5724] bridge_slave_0: entered allmulticast mode [ 47.801374][ T5724] bridge_slave_0: entered promiscuous mode [ 47.805161][ T5723] team0: Port device team_slave_0 added [ 47.808826][ T5723] team0: Port device team_slave_1 added [ 47.811545][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.820268][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.822843][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.825157][ T5724] bridge_slave_1: entered allmulticast mode [ 47.828343][ T5724] bridge_slave_1: entered promiscuous mode [ 47.861819][ T5731] team0: Port device team_slave_0 added [ 47.875755][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.878073][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.885991][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.890908][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.893386][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.901522][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.906566][ T5726] team0: Port device team_slave_0 added [ 47.909851][ T5726] team0: Port device team_slave_1 added [ 47.912822][ T5731] team0: Port device team_slave_1 added [ 47.915920][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.944230][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.959700][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.961847][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.970392][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.985667][ T5724] team0: Port device team_slave_0 added [ 47.988705][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.990889][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.998827][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.013863][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.016305][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.026043][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.032308][ T5724] team0: Port device team_slave_1 added [ 48.055484][ T5723] hsr_slave_0: entered promiscuous mode [ 48.058432][ T5723] hsr_slave_1: entered promiscuous mode [ 48.061787][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.064636][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.074614][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.096848][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.099861][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.110503][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.115242][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.117658][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.125626][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.163154][ T5726] hsr_slave_0: entered promiscuous mode [ 48.165424][ T5726] hsr_slave_1: entered promiscuous mode [ 48.167998][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.169924][ T5726] Cannot create hsr debugfs directory [ 48.180498][ T5731] hsr_slave_0: entered promiscuous mode [ 48.183141][ T5731] hsr_slave_1: entered promiscuous mode [ 48.185239][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.187225][ T5731] Cannot create hsr debugfs directory [ 48.238420][ T5724] hsr_slave_0: entered promiscuous mode [ 48.240956][ T5724] hsr_slave_1: entered promiscuous mode [ 48.243263][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 48.245238][ T5724] Cannot create hsr debugfs directory [ 48.559213][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.567810][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.573525][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.580573][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.583370][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.589118][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.591915][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.596927][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.638606][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.643985][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.648252][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.654567][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.658402][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.663885][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.668060][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.674466][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.718304][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.722437][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.725090][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.729732][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.732860][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.736260][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.739328][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.742978][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.813246][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.819275][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.822159][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.826015][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.830634][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.834678][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.839414][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.843594][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.848318][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.878426][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.900021][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.902643][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.910527][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.929249][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.932067][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938581][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.969307][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.977209][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.001291][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.004324][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.009167][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.012236][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.017797][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.020897][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.039203][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.042288][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.066760][ T5729] Bluetooth: hci3: command tx timeout [ 49.076914][ T5729] Bluetooth: hci2: command tx timeout [ 49.077212][ T5737] Bluetooth: hci0: command tx timeout [ 49.080392][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.101289][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.122378][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.137931][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.140581][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.146362][ T5737] Bluetooth: hci1: command tx timeout [ 49.154982][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.157290][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.364921][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.394402][ T5724] veth0_vlan: entered promiscuous mode [ 49.403245][ T5724] veth1_vlan: entered promiscuous mode [ 49.420075][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.429475][ T5724] veth0_macvtap: entered promiscuous mode [ 49.437710][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.441439][ T5724] veth1_macvtap: entered promiscuous mode [ 49.459596][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.467454][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.481408][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.507099][ T5726] veth0_vlan: entered promiscuous mode [ 49.531458][ T5726] veth1_vlan: entered promiscuous mode [ 49.548667][ T5723] veth0_vlan: entered promiscuous mode [ 49.567073][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.570989][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.580905][ T5731] veth0_vlan: entered promiscuous mode [ 49.585234][ T5723] veth1_vlan: entered promiscuous mode [ 49.588611][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.592593][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.596617][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.609524][ T5731] veth1_vlan: entered promiscuous mode [ 49.621483][ T5726] veth0_macvtap: entered promiscuous mode [ 49.631897][ T5726] veth1_macvtap: entered promiscuous mode [ 49.636979][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.639498][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.646449][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.651941][ T5723] veth0_macvtap: entered promiscuous mode [ 49.660986][ T5723] veth1_macvtap: entered promiscuous mode [ 49.665572][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.676971][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.683126][ T5731] veth0_macvtap: entered promiscuous mode [ 49.688932][ T5724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.692378][ T5731] veth1_macvtap: entered promiscuous mode [ 49.699173][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.706519][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.710262][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.728344][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.746636][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.794127][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.797632][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.800118][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.802671][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.826682][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838680][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.841607][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.850846][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.854937][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.867534][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.870944][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.882649][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.883776][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 49.886012][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.903092][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.906702][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.907685][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.911826][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.927443][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.934356][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943123][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.962541][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968855][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.973002][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.991755][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.035652][ T5887] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8'. [ 50.089002][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'. [ 50.093513][ T5895] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 50.181378][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 50.211286][ T5908] FAULT_INJECTION: forcing a failure. [ 50.211286][ T5908] name failslab, interval 1, probability 0, space 0, times 1 [ 50.217712][ T5908] CPU: 3 UID: 0 PID: 5908 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 50.217727][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.217734][ T5908] Call Trace: [ 50.217756][ T5908] [ 50.217760][ T5908] dump_stack_lvl+0x100/0x190 [ 50.217777][ T5908] should_fail_ex.cold+0x5/0xa [ 50.217791][ T5908] should_failslab+0xc2/0x120 [ 50.217806][ T5908] __kmalloc_noprof+0xfc/0x820 [ 50.217819][ T5908] ? tomoyo_encode2+0xfb/0x3c0 [ 50.217831][ T5908] tomoyo_encode2+0xfb/0x3c0 [ 50.217845][ T5908] tomoyo_encode+0x29/0x50 [ 50.217854][ T5908] tomoyo_realpath_from_path+0x18c/0x690 [ 50.217868][ T5908] tomoyo_path_number_perm+0x23c/0x580 [ 50.217883][ T5908] ? tomoyo_path_number_perm+0x22e/0x580 [ 50.217898][ T5908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 50.217925][ T5908] ? find_held_lock+0x2b/0x80 [ 50.217935][ T5908] ? __fget_files+0x215/0x3d0 [ 50.217945][ T5908] ? hook_file_ioctl_common+0x140/0x440 [ 50.217957][ T5908] ? __fget_files+0x215/0x3d0 [ 50.217969][ T5908] ? __fget_files+0x21f/0x3d0 [ 50.217982][ T5908] security_file_ioctl+0xd3/0x230 [ 50.217998][ T5908] __x64_sys_ioctl+0xb7/0x210 [ 50.218015][ T5908] do_syscall_64+0x115/0x870 [ 50.218030][ T5908] ? clear_bhb_loop+0x70/0xc0 [ 50.218042][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.218053][ T5908] RIP: 0033:0x7fd0d539e0d9 [ 50.218063][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.218073][ T5908] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.218084][ T5908] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 50.218091][ T5908] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 50.218097][ T5908] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 50.218103][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.218109][ T5908] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 50.218122][ T5908] [ 50.218132][ T5908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 50.267463][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 50.892636][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 50.917278][ T5938] FAULT_INJECTION: forcing a failure. [ 50.917278][ T5938] name failslab, interval 1, probability 0, space 0, times 0 [ 50.923123][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 50.923147][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.923156][ T5938] Call Trace: [ 50.923175][ T5938] [ 50.923182][ T5938] dump_stack_lvl+0x100/0x190 [ 50.923211][ T5938] should_fail_ex.cold+0x5/0xa [ 50.923235][ T5938] should_failslab+0xc2/0x120 [ 50.923259][ T5938] __kmalloc_cache_noprof+0x91/0x6c0 [ 50.923279][ T5938] ? sctp_add_bind_addr+0xae/0x3e0 [ 50.923325][ T5938] sctp_add_bind_addr+0xae/0x3e0 [ 50.923352][ T5938] sctp_copy_local_addr_list+0x349/0x550 [ 50.923382][ T5938] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 50.923411][ T5938] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 50.923441][ T5938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.923464][ T5938] sctp_bind_addr_copy+0xe0/0x530 [ 50.923493][ T5938] sctp_connect_new_asoc+0x1c9/0x770 [ 50.923513][ T5938] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 50.923534][ T5938] ? selinux_sctp_bind_connect+0xe0/0x230 [ 50.923564][ T5938] sctp_sendmsg+0x1743/0x22e0 [ 50.923590][ T5938] ? __pfx_sctp_sendmsg+0x10/0x10 [ 50.923624][ T5938] ? sock_has_perm+0x25a/0x2f0 [ 50.923646][ T5938] ? __pfx_sock_has_perm+0x10/0x10 [ 50.923685][ T5938] ? __pfx_sctp_sendmsg+0x10/0x10 [ 50.923706][ T5938] inet_sendmsg+0x11c/0x140 [ 50.923743][ T5938] ____sys_sendmsg+0x9c9/0xbe0 [ 50.923776][ T5938] ? __pfx_inet_sendmsg+0x10/0x10 [ 50.923802][ T5938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.923836][ T5938] ? __pfx__kstrtoull+0x10/0x10 [ 50.923861][ T5938] ___sys_sendmsg+0x190/0x1e0 [ 50.923881][ T5938] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.923909][ T5938] ? find_held_lock+0x2b/0x80 [ 50.923942][ T5938] __sys_sendmmsg+0x20c/0x440 [ 50.923969][ T5938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 50.923990][ T5938] ? ksys_write+0x190/0x250 [ 50.924025][ T5938] ? fput+0x79/0x100 [ 50.924046][ T5938] ? ksys_write+0x1ac/0x250 [ 50.924061][ T5938] ? __pfx_ksys_write+0x10/0x10 [ 50.924081][ T5938] __x64_sys_sendmmsg+0x9c/0x100 [ 50.924103][ T5938] ? lockdep_hardirqs_on+0x78/0x100 [ 50.924128][ T5938] do_syscall_64+0x115/0x870 [ 50.924173][ T5938] ? clear_bhb_loop+0x70/0xc0 [ 50.924196][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.924213][ T5938] RIP: 0033:0x7f9eb2d9e0d9 [ 50.924229][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.924246][ T5938] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.924276][ T5938] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 50.924288][ T5938] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 50.924298][ T5938] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 50.924307][ T5938] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 50.924317][ T5938] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 50.924340][ T5938] [ 51.091314][ T5952] netlink: 'syz.1.33': attribute type 4 has an invalid length. [ 51.100373][ T5952] netlink: 'syz.1.33': attribute type 4 has an invalid length. [ 51.147142][ T5737] Bluetooth: hci2: command tx timeout [ 51.147190][ T5729] Bluetooth: hci3: command tx timeout [ 51.147235][ T5736] Bluetooth: hci0: command tx timeout [ 51.226768][ T5729] Bluetooth: hci1: command tx timeout [ 51.899919][ T42] kauditd_printk_skb: 81 callbacks suppressed [ 51.899932][ T42] audit: type=1400 audit(1786105760.559:249): avc: denied { read } for pid=5988 comm="syz.2.47" name="usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.910004][ T42] audit: type=1400 audit(1786105760.559:250): avc: denied { open } for pid=5988 comm="syz.2.47" path="/dev/usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.917347][ T42] audit: type=1400 audit(1786105760.559:251): avc: denied { ioctl } for pid=5988 comm="syz.2.47" path="/dev/usbmon2" dev="devtmpfs" ino=742 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.997710][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 52.000472][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 52.094474][ T6008] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 52.102259][ T6008] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 52.452035][ T42] audit: type=1400 audit(1786105761.109:252): avc: denied { create } for pid=6031 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.456814][ T5729] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 52.459615][ T42] audit: type=1400 audit(1786105761.109:253): avc: denied { ioctl } for pid=6031 comm="syz.3.63" path="socket:[11500]" dev="sockfs" ino=11500 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.459847][ T5729] Bluetooth: hci3: unexpected event 0x06 length: 13 > 3 [ 52.540117][ T6040] FAULT_INJECTION: forcing a failure. [ 52.540117][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.547777][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 52.547792][ T6040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.547799][ T6040] Call Trace: [ 52.547804][ T6040] [ 52.547809][ T6040] dump_stack_lvl+0x100/0x190 [ 52.547827][ T6040] should_fail_ex.cold+0x5/0xa [ 52.547842][ T6040] _copy_from_user+0x2e/0xd0 [ 52.547859][ T6040] drm_ioctl+0x520/0xc60 [ 52.547874][ T6040] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 52.547891][ T6040] ? __pfx_drm_ioctl+0x10/0x10 [ 52.547908][ T6040] ? selinux_file_ioctl+0x13b/0x290 [ 52.547926][ T6040] ? selinux_file_ioctl+0xb6/0x290 [ 52.547944][ T6040] ? __pfx_drm_ioctl+0x10/0x10 [ 52.547959][ T6040] __x64_sys_ioctl+0x18e/0x210 [ 52.547977][ T6040] do_syscall_64+0x115/0x870 [ 52.547993][ T6040] ? clear_bhb_loop+0x70/0xc0 [ 52.548008][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.548019][ T6040] RIP: 0033:0x7fd0d539e0d9 [ 52.548029][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.548040][ T6040] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.548052][ T6040] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 52.548058][ T6040] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 52.548065][ T6040] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 52.548071][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.548077][ T6040] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 52.548090][ T6040] [ 52.647198][ T42] audit: type=1804 audit(1786105761.309:254): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.69" name="/newroot/18/file0" dev="tmpfs" ino=114 res=1 errno=0 [ 52.674148][ T42] audit: type=1400 audit(1786105761.329:255): avc: denied { create } for pid=6045 comm="syz.3.70" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.680734][ T42] audit: type=1400 audit(1786105761.329:256): avc: denied { read write } for pid=6045 comm="syz.3.70" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.688462][ T42] audit: type=1400 audit(1786105761.329:257): avc: denied { open } for pid=6045 comm="syz.3.70" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.696334][ T42] audit: type=1400 audit(1786105761.329:258): avc: denied { mounton } for pid=6045 comm="syz.3.70" path="/19/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.961259][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 53.049960][ T6083] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 53.060314][ T6083] CUSE: unknown device info "" [ 53.061915][ T6083] CUSE: unknown device info "" [ 53.063408][ T6083] CUSE: unknown device info "" [ 53.065044][ T6083] CUSE: unknown device info "" [ 53.067452][ T6083] CUSE: DEVNAME unspecified [ 53.106902][ T6087] FAULT_INJECTION: forcing a failure. [ 53.106902][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 53.110723][ T6087] CPU: 2 UID: 0 PID: 6087 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 53.110736][ T6087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.110742][ T6087] Call Trace: [ 53.110747][ T6087] [ 53.110751][ T6087] dump_stack_lvl+0x100/0x190 [ 53.110769][ T6087] should_fail_ex.cold+0x5/0xa [ 53.110782][ T6087] should_failslab+0xc2/0x120 [ 53.110797][ T6087] __kmalloc_noprof+0xfc/0x820 [ 53.110809][ T6087] ? drm_syncobj_array_find+0x34/0x3a0 [ 53.110829][ T6087] drm_syncobj_array_find+0x34/0x3a0 [ 53.110841][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 53.110856][ T6087] drm_syncobj_query_ioctl+0x25d/0xa90 [ 53.110873][ T6087] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 53.110887][ T6087] ? find_held_lock+0x2b/0x80 [ 53.110896][ T6087] ? drm_dev_exit+0x41/0x60 [ 53.110908][ T6087] ? drm_dev_exit+0x41/0x60 [ 53.110922][ T6087] drm_ioctl_kernel+0x1f3/0x3e0 [ 53.110934][ T6087] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 53.110947][ T6087] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 53.110963][ T6087] drm_ioctl+0x5e6/0xc60 [ 53.110976][ T6087] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 53.110990][ T6087] ? __pfx_drm_ioctl+0x10/0x10 [ 53.111006][ T6087] ? selinux_file_ioctl+0x13b/0x290 [ 53.111022][ T6087] ? selinux_file_ioctl+0xb6/0x290 [ 53.111038][ T6087] ? __pfx_drm_ioctl+0x10/0x10 [ 53.111051][ T6087] __x64_sys_ioctl+0x18e/0x210 [ 53.111067][ T6087] do_syscall_64+0x115/0x870 [ 53.111082][ T6087] ? clear_bhb_loop+0x70/0xc0 [ 53.111095][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.111105][ T6087] RIP: 0033:0x7fd0d539e0d9 [ 53.111114][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.111124][ T6087] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.111136][ T6087] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 53.111142][ T6087] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 53.111148][ T6087] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 53.111154][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.111160][ T6087] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 53.111172][ T6087] [ 53.226540][ T5729] Bluetooth: hci0: command tx timeout [ 53.226693][ T5736] Bluetooth: hci2: command tx timeout [ 53.231578][ T5737] Bluetooth: hci3: command tx timeout [ 53.281689][ T6105] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device [ 53.307001][ T5737] Bluetooth: hci1: command tx timeout [ 53.310311][ T6111] Zero length message leads to an empty skb [ 53.491699][ T6129] FAULT_INJECTION: forcing a failure. [ 53.491699][ T6129] name failslab, interval 1, probability 0, space 0, times 0 [ 53.498443][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(full) [ 53.498467][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.498476][ T6129] Call Trace: [ 53.498482][ T6129] [ 53.498489][ T6129] dump_stack_lvl+0x100/0x190 [ 53.498516][ T6129] should_fail_ex.cold+0x5/0xa [ 53.498540][ T6129] should_failslab+0xc2/0x120 [ 53.498562][ T6129] __kmalloc_noprof+0xfc/0x820 [ 53.498582][ T6129] ? rcu_is_watching+0x12/0xc0 [ 53.498609][ T6129] ? tomoyo_realpath_from_path+0xb6/0x690 [ 53.498629][ T6129] tomoyo_realpath_from_path+0xb6/0x690 [ 53.498649][ T6129] tomoyo_path_number_perm+0x23c/0x580 [ 53.498675][ T6129] ? tomoyo_path_number_perm+0x22e/0x580 [ 53.498700][ T6129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.498747][ T6129] ? find_held_lock+0x2b/0x80 [ 53.498763][ T6129] ? __fget_files+0x215/0x3d0 [ 53.498781][ T6129] ? hook_file_ioctl_common+0x140/0x440 [ 53.498800][ T6129] ? __fget_files+0x215/0x3d0 [ 53.498822][ T6129] ? __fget_files+0x21f/0x3d0 [ 53.498844][ T6129] security_file_ioctl+0xd3/0x230 [ 53.498871][ T6129] __x64_sys_ioctl+0xb7/0x210 [ 53.498899][ T6129] do_syscall_64+0x115/0x870 [ 53.498923][ T6129] ? clear_bhb_loop+0x70/0xc0 [ 53.498951][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.498969][ T6129] RIP: 0033:0x7fd0d539e0d9 [ 53.498983][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.498998][ T6129] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.499015][ T6129] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 53.499026][ T6129] RDX: 00002000000000c0 RSI: 00000000c02064cc RDI: 0000000000000003 [ 53.499036][ T6129] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 53.499046][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.499056][ T6129] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 53.499080][ T6129] [ 53.499088][ T6129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.701661][ T6147] trusted_key: encrypted_key: insufficient parameters specified [ 54.195262][ T6160] FAULT_INJECTION: forcing a failure. [ 54.195262][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.199678][ T6160] CPU: 3 UID: 0 PID: 6160 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 54.199693][ T6160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.199700][ T6160] Call Trace: [ 54.199704][ T6160] [ 54.199709][ T6160] dump_stack_lvl+0x100/0x190 [ 54.199726][ T6160] should_fail_ex.cold+0x5/0xa [ 54.199740][ T6160] _copy_from_user+0x2e/0xd0 [ 54.199756][ T6160] drm_ioctl+0x520/0xc60 [ 54.199771][ T6160] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 54.199787][ T6160] ? __pfx_drm_ioctl+0x10/0x10 [ 54.199803][ T6160] ? selinux_file_ioctl+0x13b/0x290 [ 54.199819][ T6160] ? selinux_file_ioctl+0xb6/0x290 [ 54.199836][ T6160] ? __pfx_drm_ioctl+0x10/0x10 [ 54.199847][ T6160] __x64_sys_ioctl+0x18e/0x210 [ 54.199864][ T6160] do_syscall_64+0x115/0x870 [ 54.199879][ T6160] ? clear_bhb_loop+0x70/0xc0 [ 54.199892][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.199903][ T6160] RIP: 0033:0x7f667c79e0d9 [ 54.199912][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.199922][ T6160] RSP: 002b:00007f667d6e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.199932][ T6160] RAX: ffffffffffffffda RBX: 00007f667ca25fa0 RCX: 00007f667c79e0d9 [ 54.199939][ T6160] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 54.199945][ T6160] RBP: 00007f667d6e2090 R08: 0000000000000000 R09: 0000000000000000 [ 54.199951][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.199957][ T6160] R13: 00007f667ca26038 R14: 00007f667ca25fa0 R15: 00007fff6cf83878 [ 54.199969][ T6160] [ 54.207124][ T3386] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.238947][ T6162] netlink: 'syz.3.114': attribute type 2 has an invalid length. [ 54.295940][ T6164] FAULT_INJECTION: forcing a failure. [ 54.295940][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 54.299958][ T6164] CPU: 3 UID: 0 PID: 6164 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT(full) [ 54.299972][ T6164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.299978][ T6164] Call Trace: [ 54.299985][ T6164] [ 54.299990][ T6164] dump_stack_lvl+0x100/0x190 [ 54.300007][ T6164] should_fail_ex.cold+0x5/0xa [ 54.300021][ T6164] should_failslab+0xc2/0x120 [ 54.300035][ T6164] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.300048][ T6164] ? __alloc_skb+0x5b7/0x710 [ 54.300061][ T6164] ? __alloc_skb+0x140/0x710 [ 54.300075][ T6164] __alloc_skb+0x140/0x710 [ 54.300086][ T6164] ? __alloc_skb+0x5b7/0x710 [ 54.300098][ T6164] ? __pfx___alloc_skb+0x10/0x10 [ 54.300113][ T6164] netlink_ack+0x117/0xb80 [ 54.300125][ T6164] ? avc_has_perm_noaudit+0x145/0x3b0 [ 54.300162][ T6164] netlink_rcv_skb+0x333/0x420 [ 54.300173][ T6164] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 54.300189][ T6164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.300205][ T6164] ? ns_capable+0xd2/0xf0 [ 54.300220][ T6164] nfnetlink_rcv+0x1b3/0x440 [ 54.300233][ T6164] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 54.300246][ T6164] ? netlink_deliver_tap+0x1ae/0xcc0 [ 54.300266][ T6164] netlink_unicast+0x585/0x850 [ 54.300279][ T6164] ? __pfx_netlink_unicast+0x10/0x10 [ 54.300293][ T6164] netlink_sendmsg+0x8b0/0xda0 [ 54.300305][ T6164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.300317][ T6164] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.300334][ T6164] ____sys_sendmsg+0xa4d/0xbe0 [ 54.300351][ T6164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.300362][ T6164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.300384][ T6164] ___sys_sendmsg+0x190/0x1e0 [ 54.300394][ T6164] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.300403][ T6164] ? __lock_acquire+0x49f/0x1a40 [ 54.300416][ T6164] ? get_pid_task+0x106/0x250 [ 54.300438][ T6164] __sys_sendmsg+0x160/0x210 [ 54.300452][ T6164] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.300472][ T6164] do_syscall_64+0x115/0x870 [ 54.300487][ T6164] ? clear_bhb_loop+0x70/0xc0 [ 54.300499][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.300510][ T6164] RIP: 0033:0x7f667c79e0d9 [ 54.300519][ T6164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.300529][ T6164] RSP: 002b:00007f667d6e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.300540][ T6164] RAX: ffffffffffffffda RBX: 00007f667ca25fa0 RCX: 00007f667c79e0d9 [ 54.300546][ T6164] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 54.300552][ T6164] RBP: 00007f667d6e2090 R08: 0000000000000000 R09: 0000000000000000 [ 54.300558][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.300564][ T6164] R13: 00007f667ca26038 R14: 00007f667ca25fa0 R15: 00007fff6cf83878 [ 54.300576][ T6164] [ 54.416619][ T3386] usb 7-1: Using ep0 maxpacket: 16 [ 54.423720][ T3386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 54.431343][ T3386] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 54.435555][ T3386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.439509][ T3386] usb 7-1: Product: syz [ 54.441352][ T3386] usb 7-1: Manufacturer: syz [ 54.443357][ T3386] usb 7-1: SerialNumber: syz [ 54.450943][ T3386] usb 7-1: config 0 descriptor?? [ 54.463384][ T3386] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 54.473785][ T3386] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 55.063144][ T3386] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 55.092659][ T6194] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 55.100040][ T6194] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 55.307388][ T5737] Bluetooth: hci0: command tx timeout [ 55.307769][ T5736] Bluetooth: hci3: command tx timeout [ 55.309498][ T5729] Bluetooth: hci2: command tx timeout [ 55.386602][ T5729] Bluetooth: hci1: command tx timeout [ 55.484951][ T3386] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 55.488648][ T3386] em28xx 7-1:0.0: board has no eeprom [ 55.548077][ T3386] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 55.551570][ T3386] em28xx 7-1:0.0: dvb set to bulk mode. [ 55.555497][ T10] em28xx 7-1:0.0: Binding DVB extension [ 55.569044][ T3386] usb 7-1: USB disconnect, device number 2 [ 55.573919][ T3386] em28xx 7-1:0.0: Disconnecting em28xx [ 55.592900][ T10] em28xx 7-1:0.0: Registering input extension [ 55.595867][ T3386] em28xx 7-1:0.0: Closing input extension [ 55.609733][ T3386] em28xx 7-1:0.0: Freeing device [ 55.671670][ T6210] FAULT_INJECTION: forcing a failure. [ 55.671670][ T6210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.676787][ T6210] CPU: 1 UID: 0 PID: 6210 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) [ 55.676802][ T6210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.676808][ T6210] Call Trace: [ 55.676812][ T6210] [ 55.676816][ T6210] dump_stack_lvl+0x100/0x190 [ 55.676834][ T6210] should_fail_ex.cold+0x5/0xa [ 55.676848][ T6210] _copy_from_user+0x2e/0xd0 [ 55.676863][ T6210] drm_syncobj_array_find+0x83/0x3a0 [ 55.676879][ T6210] drm_syncobj_query_ioctl+0x25d/0xa90 [ 55.676896][ T6210] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 55.676910][ T6210] ? find_held_lock+0x2b/0x80 [ 55.676920][ T6210] ? drm_dev_exit+0x41/0x60 [ 55.676932][ T6210] ? drm_dev_exit+0x41/0x60 [ 55.676946][ T6210] drm_ioctl_kernel+0x1f3/0x3e0 [ 55.676958][ T6210] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 55.676982][ T6210] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 55.677002][ T6210] drm_ioctl+0x5e6/0xc60 [ 55.677016][ T6210] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 55.677029][ T6210] ? __pfx_drm_ioctl+0x10/0x10 [ 55.677045][ T6210] ? selinux_file_ioctl+0x13b/0x290 [ 55.677062][ T6210] ? selinux_file_ioctl+0xb6/0x290 [ 55.677078][ T6210] ? __pfx_drm_ioctl+0x10/0x10 [ 55.677090][ T6210] __x64_sys_ioctl+0x18e/0x210 [ 55.677107][ T6210] do_syscall_64+0x115/0x870 [ 55.677123][ T6210] ? clear_bhb_loop+0x70/0xc0 [ 55.677135][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.677146][ T6210] RIP: 0033:0x7ffab999e0d9 [ 55.677156][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.677180][ T6210] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.677191][ T6210] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 55.677198][ T6210] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 55.677204][ T6210] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 55.677210][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.677216][ T6210] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 55.677230][ T6210] [ 55.789663][ T6214] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 55.793254][ T6214] Cannot find del_set index 0 as target [ 55.913045][ T6230] __nla_validate_parse: 9 callbacks suppressed [ 55.913075][ T6230] netlink: 72 bytes leftover after parsing attributes in process `syz.3.136'. [ 55.949617][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.952613][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 55.963614][ T6232] gretap0: entered promiscuous mode [ 55.967922][ T6232] gretap0: left promiscuous mode [ 56.154920][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 56.159909][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 56.163466][ T6253] netlink: 'syz.3.144': attribute type 11 has an invalid length. [ 56.166604][ T6253] netlink: 'syz.3.144': attribute type 7 has an invalid length. [ 56.472647][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 57.404273][ T6298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.160'. [ 57.407876][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 57.407891][ T42] audit: type=1400 audit(1786105766.059:315): avc: denied { setopt } for pid=6297 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.451604][ T42] audit: type=1804 audit(1786105766.109:316): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.161" name="/newroot/34/file0" dev="tmpfs" ino=218 res=1 errno=0 [ 57.549460][ T6311] FAULT_INJECTION: forcing a failure. [ 57.549460][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 57.554238][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT(full) [ 57.554255][ T6311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.554261][ T6311] Call Trace: [ 57.554265][ T6311] [ 57.554269][ T6311] dump_stack_lvl+0x100/0x190 [ 57.554288][ T6311] should_fail_ex.cold+0x5/0xa [ 57.554302][ T6311] should_failslab+0xc2/0x120 [ 57.554316][ T6311] __kmalloc_noprof+0xfc/0x820 [ 57.554328][ T6311] ? drm_syncobj_array_find+0xb0/0x3a0 [ 57.554344][ T6311] drm_syncobj_array_find+0xb0/0x3a0 [ 57.554358][ T6311] drm_syncobj_query_ioctl+0x25d/0xa90 [ 57.554375][ T6311] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 57.554389][ T6311] ? find_held_lock+0x2b/0x80 [ 57.554399][ T6311] ? drm_dev_exit+0x41/0x60 [ 57.554410][ T6311] ? drm_dev_exit+0x41/0x60 [ 57.554424][ T6311] drm_ioctl_kernel+0x1f3/0x3e0 [ 57.554436][ T6311] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 57.554450][ T6311] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 57.554471][ T6311] drm_ioctl+0x5e6/0xc60 [ 57.554484][ T6311] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 57.554497][ T6311] ? __pfx_drm_ioctl+0x10/0x10 [ 57.554514][ T6311] ? selinux_file_ioctl+0x13b/0x290 [ 57.554531][ T6311] ? selinux_file_ioctl+0xb6/0x290 [ 57.554547][ T6311] ? __pfx_drm_ioctl+0x10/0x10 [ 57.554559][ T6311] __x64_sys_ioctl+0x18e/0x210 [ 57.554575][ T6311] do_syscall_64+0x115/0x870 [ 57.554590][ T6311] ? clear_bhb_loop+0x70/0xc0 [ 57.554602][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.554613][ T6311] RIP: 0033:0x7ffab999e0d9 [ 57.554622][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.554632][ T6311] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.554643][ T6311] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 57.554650][ T6311] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 57.554656][ T6311] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 57.554662][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.554667][ T6311] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 57.554680][ T6311] [ 57.652659][ T6314] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 57.659733][ T6314] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 57.957958][ T6319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.168'. [ 58.036369][ T5729] Bluetooth: hci2: unexpected cc 0x2029 length: 100 > 1 [ 58.066108][ T6323] ======================================================= [ 58.066108][ T6323] WARNING: The mand mount option has been deprecated and [ 58.066108][ T6323] and is ignored by this kernel. Remove the mand [ 58.066108][ T6323] option from the mount to silence this warning. [ 58.066108][ T6323] ======================================================= [ 58.078712][ T6323] openvswitch: netlink: Missing key (keys=40, expected=100) [ 58.080020][ T42] audit: type=1804 audit(1786105766.739:317): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.171" name="/newroot/47/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 58.222811][ T6332] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 58.231258][ T6332] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 58.234551][ T3262] IPVS: starting estimator thread 0... [ 58.278813][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 58.283957][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 58.289841][ T6339] gretap0: entered promiscuous mode [ 58.292840][ T6339] gretap0: left promiscuous mode [ 58.346474][ T6334] IPVS: using max 27 ests per chain, 64800 per kthread [ 58.394435][ T6345] CIFS mount error: No usable UNC path provided in device string! [ 58.394435][ T6345] [ 58.398667][ T6345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 58.478220][ T42] audit: type=1400 audit(1786105767.139:318): avc: denied { create } for pid=6353 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.485955][ T42] audit: type=1400 audit(1786105767.139:319): avc: denied { read } for pid=6353 comm="syz.1.183" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.494918][ T42] audit: type=1400 audit(1786105767.139:320): avc: denied { open } for pid=6353 comm="syz.1.183" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.503681][ T42] audit: type=1400 audit(1786105767.139:321): avc: denied { ioctl } for pid=6353 comm="syz.1.183" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.512466][ T6352] FAULT_INJECTION: forcing a failure. [ 58.512466][ T6352] name failslab, interval 1, probability 0, space 0, times 0 [ 58.518047][ T6352] CPU: 2 UID: 0 PID: 6352 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(full) [ 58.518061][ T6352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.518068][ T6352] Call Trace: [ 58.518072][ T6352] [ 58.518077][ T6352] dump_stack_lvl+0x100/0x190 [ 58.518095][ T6352] should_fail_ex.cold+0x5/0xa [ 58.518109][ T6352] should_failslab+0xc2/0x120 [ 58.518123][ T6352] __kmalloc_cache_noprof+0x91/0x6c0 [ 58.518135][ T6352] ? sctp_add_bind_addr+0xae/0x3e0 [ 58.518153][ T6352] sctp_add_bind_addr+0xae/0x3e0 [ 58.518168][ T6352] sctp_copy_local_addr_list+0x349/0x550 [ 58.518186][ T6352] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 58.518204][ T6352] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 58.518222][ T6352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.518236][ T6352] sctp_bind_addr_copy+0xe0/0x530 [ 58.518253][ T6352] sctp_connect_new_asoc+0x1c9/0x770 [ 58.518266][ T6352] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 58.518278][ T6352] ? selinux_sctp_bind_connect+0xe0/0x230 [ 58.518298][ T6352] sctp_sendmsg+0x1743/0x22e0 [ 58.518314][ T6352] ? __pfx_sctp_sendmsg+0x10/0x10 [ 58.518326][ T6352] ? sock_has_perm+0x25a/0x2f0 [ 58.518344][ T6352] ? __pfx_sock_has_perm+0x10/0x10 [ 58.518378][ T6352] ? __pfx_sctp_sendmsg+0x10/0x10 [ 58.518396][ T6352] inet_sendmsg+0x11c/0x140 [ 58.518421][ T6352] ____sys_sendmsg+0x9c9/0xbe0 [ 58.518439][ T6352] ? __pfx_inet_sendmsg+0x10/0x10 [ 58.518454][ T6352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.518472][ T6352] ? __pfx__kstrtoull+0x10/0x10 [ 58.518485][ T6352] ___sys_sendmsg+0x190/0x1e0 [ 58.518496][ T6352] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.518512][ T6352] ? find_held_lock+0x2b/0x80 [ 58.518529][ T6352] __sys_sendmmsg+0x20c/0x440 [ 58.518544][ T6352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 58.518557][ T6352] ? ksys_write+0x190/0x250 [ 58.518576][ T6352] ? fput+0x79/0x100 [ 58.518588][ T6352] ? ksys_write+0x1ac/0x250 [ 58.518597][ T6352] ? __pfx_ksys_write+0x10/0x10 [ 58.518609][ T6352] __x64_sys_sendmmsg+0x9c/0x100 [ 58.518622][ T6352] ? lockdep_hardirqs_on+0x78/0x100 [ 58.518636][ T6352] do_syscall_64+0x115/0x870 [ 58.518650][ T6352] ? clear_bhb_loop+0x70/0xc0 [ 58.518662][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.518673][ T6352] RIP: 0033:0x7f667c79e0d9 [ 58.518682][ T6352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.518692][ T6352] RSP: 002b:00007f667d6e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.518702][ T6352] RAX: ffffffffffffffda RBX: 00007f667ca25fa0 RCX: 00007f667c79e0d9 [ 58.518709][ T6352] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 58.518715][ T6352] RBP: 00007f667d6e2090 R08: 0000000000000000 R09: 0000000000000000 [ 58.518720][ T6352] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 58.518726][ T6352] R13: 00007f667ca26038 R14: 00007f667ca25fa0 R15: 00007fff6cf83878 [ 58.518739][ T6352] [ 58.669984][ T42] audit: type=1400 audit(1786105767.329:322): avc: denied { ioctl } for pid=6368 comm="syz.0.189" path="socket:[13368]" dev="sockfs" ino=13368 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.774439][ T6373] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 58.778997][ T42] audit: type=1400 audit(1786105767.439:323): avc: denied { map } for pid=6368 comm="syz.0.189" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.788773][ T42] audit: type=1400 audit(1786105767.439:324): avc: denied { execute } for pid=6368 comm="syz.0.189" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.876370][ T847] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.026323][ T847] usb 7-1: Using ep0 maxpacket: 16 [ 59.030237][ T847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.037808][ T847] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 59.041666][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.044965][ T847] usb 7-1: Product: syz [ 59.046896][ T847] usb 7-1: Manufacturer: syz [ 59.048883][ T847] usb 7-1: SerialNumber: syz [ 59.053548][ T847] usb 7-1: config 0 descriptor?? [ 59.060313][ T847] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 59.064213][ T847] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 59.566523][ T5801] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.570573][ T5801] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.577328][ T5801] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.581100][ T5801] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.662218][ T847] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 60.070014][ T847] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.073165][ T847] em28xx 7-1:0.0: board has no eeprom [ 60.136269][ T847] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 60.138732][ T847] em28xx 7-1:0.0: dvb set to bulk mode. [ 60.144564][ T50] em28xx 7-1:0.0: Binding DVB extension [ 60.148569][ T847] usb 7-1: USB disconnect, device number 3 [ 60.159002][ T847] em28xx 7-1:0.0: Disconnecting em28xx [ 60.172819][ T50] em28xx 7-1:0.0: Registering input extension [ 60.175092][ T847] em28xx 7-1:0.0: Closing input extension [ 60.190414][ T847] em28xx 7-1:0.0: Freeing device [ 60.676897][ T6424] 9pnet_fd: Insufficient options for proto=fd [ 61.207726][ T6438] __nla_validate_parse: 2 callbacks suppressed [ 61.207744][ T6438] netlink: 84 bytes leftover after parsing attributes in process `syz.3.210'. [ 61.213956][ T6438] netlink: 84 bytes leftover after parsing attributes in process `syz.3.210'. [ 61.516864][ T1350] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.563914][ T6454] FAULT_INJECTION: forcing a failure. [ 61.563914][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 61.569148][ T6454] CPU: 2 UID: 0 PID: 6454 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) [ 61.569168][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.569176][ T6454] Call Trace: [ 61.569182][ T6454] [ 61.569188][ T6454] dump_stack_lvl+0x100/0x190 [ 61.569211][ T6454] should_fail_ex.cold+0x5/0xa [ 61.569248][ T6454] should_failslab+0xc2/0x120 [ 61.569271][ T6454] __kmalloc_noprof+0xfc/0x820 [ 61.569288][ T6454] ? rcu_is_watching+0x12/0xc0 [ 61.569315][ T6454] ? tomoyo_realpath_from_path+0xb6/0x690 [ 61.569338][ T6454] tomoyo_realpath_from_path+0xb6/0x690 [ 61.569362][ T6454] tomoyo_path_number_perm+0x23c/0x580 [ 61.569386][ T6454] ? tomoyo_path_number_perm+0x22e/0x580 [ 61.569411][ T6454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 61.569458][ T6454] ? find_held_lock+0x2b/0x80 [ 61.569473][ T6454] ? __fget_files+0x215/0x3d0 [ 61.569489][ T6454] ? hook_file_ioctl_common+0x140/0x440 [ 61.569508][ T6454] ? __fget_files+0x215/0x3d0 [ 61.569530][ T6454] ? __fget_files+0x21f/0x3d0 [ 61.569552][ T6454] security_file_ioctl+0xd3/0x230 [ 61.569579][ T6454] __x64_sys_ioctl+0xb7/0x210 [ 61.569607][ T6454] do_syscall_64+0x115/0x870 [ 61.569631][ T6454] ? clear_bhb_loop+0x70/0xc0 [ 61.569653][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.569671][ T6454] RIP: 0033:0x7ffab999e0d9 [ 61.569686][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.569703][ T6454] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.569721][ T6454] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 61.569732][ T6454] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 61.569742][ T6454] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 61.569752][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.569762][ T6454] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 61.569793][ T6454] [ 61.569847][ T6454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.676388][ T1350] usb 8-1: Using ep0 maxpacket: 16 [ 61.682038][ T1350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.689982][ T1350] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.693889][ T1350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.697420][ T1350] usb 8-1: Product: syz [ 61.698736][ T1350] usb 8-1: Manufacturer: syz [ 61.700483][ T1350] usb 8-1: SerialNumber: syz [ 61.704318][ T1350] usb 8-1: config 0 descriptor?? [ 61.712832][ T1350] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.715801][ T1350] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 61.882940][ T6470] FAULT_INJECTION: forcing a failure. [ 61.882940][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.887573][ T6470] CPU: 3 UID: 0 PID: 6470 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT(full) [ 61.887588][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.887594][ T6470] Call Trace: [ 61.887598][ T6470] [ 61.887603][ T6470] dump_stack_lvl+0x100/0x190 [ 61.887620][ T6470] should_fail_ex.cold+0x5/0xa [ 61.887637][ T6470] _copy_to_user+0x32/0xd0 [ 61.887654][ T6470] drm_ioctl+0x608/0xc60 [ 61.887669][ T6470] ? __pfx_drm_syncobj_transfer_ioctl+0x10/0x10 [ 61.887684][ T6470] ? __pfx_drm_ioctl+0x10/0x10 [ 61.887701][ T6470] ? selinux_file_ioctl+0x13b/0x290 [ 61.887717][ T6470] ? selinux_file_ioctl+0xb6/0x290 [ 61.887733][ T6470] ? __pfx_drm_ioctl+0x10/0x10 [ 61.887745][ T6470] __x64_sys_ioctl+0x18e/0x210 [ 61.887762][ T6470] do_syscall_64+0x115/0x870 [ 61.887778][ T6470] ? clear_bhb_loop+0x70/0xc0 [ 61.887793][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.887804][ T6470] RIP: 0033:0x7f9eb2d9e0d9 [ 61.887813][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.887823][ T6470] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.887834][ T6470] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 61.887841][ T6470] RDX: 00002000000000c0 RSI: 00000000c02064cc RDI: 0000000000000003 [ 61.887847][ T6470] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 61.887853][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.887858][ T6470] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 61.887871][ T6470] [ 62.057026][ T6478] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 62.096455][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.099721][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.110124][ T6480] gretap0: entered promiscuous mode [ 62.113146][ T6480] gretap0: left promiscuous mode [ 62.292549][ T6489] loop5: detected capacity change from 0 to 7 [ 62.298663][ T6489] Dev loop5: unable to read RDB block 7 [ 62.300726][ T6489] loop5: AHDI p1 [ 62.302032][ T6489] loop5: partition table partially beyond EOD, truncated [ 62.311848][ T1350] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 62.311937][ T6489] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 62.353431][ T6492] FAULT_INJECTION: forcing a failure. [ 62.353431][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 62.357901][ T6492] CPU: 3 UID: 0 PID: 6492 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 62.357916][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.357922][ T6492] Call Trace: [ 62.357926][ T6492] [ 62.357930][ T6492] dump_stack_lvl+0x100/0x190 [ 62.357949][ T6492] should_fail_ex.cold+0x5/0xa [ 62.357963][ T6492] should_failslab+0xc2/0x120 [ 62.357977][ T6492] __kmalloc_noprof+0xfc/0x820 [ 62.357990][ T6492] ? drm_syncobj_timeline_signal_ioctl+0x280/0x8d0 [ 62.358008][ T6492] drm_syncobj_timeline_signal_ioctl+0x280/0x8d0 [ 62.358025][ T6492] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 62.358038][ T6492] ? drm_dev_exit+0x41/0x60 [ 62.358050][ T6492] ? drm_dev_exit+0x41/0x60 [ 62.358065][ T6492] drm_ioctl_kernel+0x1f3/0x3e0 [ 62.358077][ T6492] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 62.358092][ T6492] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 62.358107][ T6492] drm_ioctl+0x5e6/0xc60 [ 62.358120][ T6492] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 62.358135][ T6492] ? __pfx_drm_ioctl+0x10/0x10 [ 62.358151][ T6492] ? selinux_file_ioctl+0x13b/0x290 [ 62.358167][ T6492] ? selinux_file_ioctl+0xb6/0x290 [ 62.358183][ T6492] ? __pfx_drm_ioctl+0x10/0x10 [ 62.358195][ T6492] __x64_sys_ioctl+0x18e/0x210 [ 62.358211][ T6492] do_syscall_64+0x115/0x870 [ 62.358227][ T6492] ? clear_bhb_loop+0x70/0xc0 [ 62.358240][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.358250][ T6492] RIP: 0033:0x7f9eb2d9e0d9 [ 62.358260][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.358269][ T6492] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.358281][ T6492] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 62.358287][ T6492] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 62.358293][ T6492] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 62.358299][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.358305][ T6492] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 62.358317][ T6492] [ 62.525308][ T6499] FAULT_INJECTION: forcing a failure. [ 62.525308][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 62.529867][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 62.529880][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.529887][ T6499] Call Trace: [ 62.529894][ T6499] [ 62.529899][ T6499] dump_stack_lvl+0x100/0x190 [ 62.529915][ T6499] should_fail_ex.cold+0x5/0xa [ 62.529929][ T6499] should_failslab+0xc2/0x120 [ 62.529943][ T6499] __kmalloc_cache_noprof+0x91/0x6c0 [ 62.529954][ T6499] ? sctp_add_bind_addr+0xae/0x3e0 [ 62.529973][ T6499] sctp_add_bind_addr+0xae/0x3e0 [ 62.529988][ T6499] sctp_copy_local_addr_list+0x349/0x550 [ 62.530006][ T6499] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 62.530024][ T6499] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 62.530041][ T6499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.530056][ T6499] sctp_bind_addr_copy+0xe0/0x530 [ 62.530073][ T6499] sctp_connect_new_asoc+0x1c9/0x770 [ 62.530085][ T6499] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 62.530098][ T6499] ? selinux_sctp_bind_connect+0xe0/0x230 [ 62.530118][ T6499] sctp_sendmsg+0x1743/0x22e0 [ 62.530132][ T6499] ? __pfx_sctp_sendmsg+0x10/0x10 [ 62.530143][ T6499] ? sock_has_perm+0x25a/0x2f0 [ 62.530156][ T6499] ? __pfx_sock_has_perm+0x10/0x10 [ 62.530177][ T6499] ? __pfx_sctp_sendmsg+0x10/0x10 [ 62.530189][ T6499] inet_sendmsg+0x11c/0x140 [ 62.530207][ T6499] ____sys_sendmsg+0x9c9/0xbe0 [ 62.530223][ T6499] ? __pfx_inet_sendmsg+0x10/0x10 [ 62.530239][ T6499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.530257][ T6499] ? __pfx__kstrtoull+0x10/0x10 [ 62.530270][ T6499] ___sys_sendmsg+0x190/0x1e0 [ 62.530281][ T6499] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.530297][ T6499] ? find_held_lock+0x2b/0x80 [ 62.530314][ T6499] __sys_sendmmsg+0x20c/0x440 [ 62.530329][ T6499] ? __pfx___sys_sendmmsg+0x10/0x10 [ 62.530342][ T6499] ? ksys_write+0x190/0x250 [ 62.530361][ T6499] ? fput+0x79/0x100 [ 62.530373][ T6499] ? ksys_write+0x1ac/0x250 [ 62.530382][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 62.530393][ T6499] __x64_sys_sendmmsg+0x9c/0x100 [ 62.530406][ T6499] ? lockdep_hardirqs_on+0x78/0x100 [ 62.530421][ T6499] do_syscall_64+0x115/0x870 [ 62.530434][ T6499] ? clear_bhb_loop+0x70/0xc0 [ 62.530447][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.530457][ T6499] RIP: 0033:0x7f9eb2d9e0d9 [ 62.530467][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.530477][ T6499] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.530487][ T6499] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 62.530494][ T6499] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 62.530500][ T6499] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 62.530505][ T6499] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 62.530511][ T6499] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 62.530524][ T6499] [ 62.579709][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 62.579720][ T42] audit: type=1400 audit(1786105771.239:334): avc: denied { setopt } for pid=6500 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.639505][ T42] audit: type=1400 audit(1786105771.279:335): avc: denied { ioctl } for pid=6500 comm="syz.0.235" path="socket:[14400]" dev="sockfs" ino=14400 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.647436][ T42] audit: type=1400 audit(1786105771.279:336): avc: denied { wake_alarm } for pid=6504 comm="syz.1.236" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.653942][ T42] audit: type=1400 audit(1786105771.279:337): avc: denied { bind } for pid=6500 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.659958][ T42] audit: type=1400 audit(1786105771.289:338): avc: denied { write } for pid=6500 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.671611][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 62.675888][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 62.724255][ T1350] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.728885][ T1350] em28xx 8-1:0.0: board has no eeprom [ 62.796437][ T1350] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 62.799730][ T1350] em28xx 8-1:0.0: dvb set to bulk mode. [ 62.809440][ T60] em28xx 8-1:0.0: Binding DVB extension [ 62.812808][ T1350] usb 8-1: USB disconnect, device number 2 [ 62.825205][ T1350] em28xx 8-1:0.0: Disconnecting em28xx [ 62.844827][ T60] em28xx 8-1:0.0: Registering input extension [ 62.847390][ T1350] em28xx 8-1:0.0: Closing input extension [ 62.856788][ T1350] em28xx 8-1:0.0: Freeing device [ 62.924481][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.929822][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.156316][ T3262] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.317220][ T3262] usb 5-1: Using ep0 maxpacket: 32 [ 63.321188][ T3262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.328593][ T3262] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.332082][ T3262] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.335269][ T3262] usb 5-1: Product: syz [ 63.337028][ T3262] usb 5-1: Manufacturer: syz [ 63.338505][ T3262] usb 5-1: SerialNumber: syz [ 63.341544][ T3262] usb 5-1: config 0 descriptor?? [ 63.343684][ T6520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.346670][ T3262] hub 5-1:0.0: bad descriptor, ignoring hub [ 63.348714][ T3262] hub 5-1:0.0: probe with driver hub failed with error -5 [ 63.537252][ T42] audit: type=1400 audit(1786105772.199:339): avc: denied { map } for pid=6535 comm="syz.1.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.545743][ T42] audit: type=1400 audit(1786105772.199:340): avc: denied { read write } for pid=6535 comm="syz.1.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.617954][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 63.621415][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 63.656564][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.659351][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.662482][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.665783][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.750330][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.756486][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.376503][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.536264][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 64.537692][ T1157] raw-gadget.0 gadget.0: failed to queue suspend event [ 64.539622][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.545645][ T60] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 64.548407][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.550758][ T60] usb 8-1: Product: syz [ 64.552226][ T60] usb 8-1: Manufacturer: syz [ 64.553621][ T60] usb 8-1: SerialNumber: syz [ 64.558251][ T60] usb 8-1: config 0 descriptor?? [ 64.562648][ T60] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 64.565489][ T60] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 64.586329][ T3262] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 64.606406][ T6519] raw-gadget.0 gadget.0: failed to queue resume event [ 64.641123][ T1157] raw-gadget.0 gadget.0: failed to queue suspend event [ 64.706301][ T6519] raw-gadget.0 gadget.0: failed to queue resume event [ 64.733433][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 64.737523][ T3262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 64.740944][ T3262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 64.745523][ T3262] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 64.748514][ T3262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.751271][ T3262] usb 7-1: Product: syz [ 64.752625][ T3262] usb 7-1: Manufacturer: syz [ 64.754023][ T3262] usb 7-1: SerialNumber: syz [ 64.758900][ T3262] usb 7-1: config 0 descriptor?? [ 64.763223][ T3262] hub 7-1:0.0: bad descriptor, ignoring hub [ 64.765595][ T3262] hub 7-1:0.0: probe with driver hub failed with error -5 [ 64.771588][ T3262] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 64.796325][ T6519] raw-gadget.0 gadget.0: failed to queue resume event [ 64.820021][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 64.833900][ T6559] raw-gadget.0 gadget.0: failed to queue disconnect event [ 64.837800][ T3262] usb 5-1: USB disconnect, device number 2 [ 64.855921][ T42] audit: type=1400 audit(1786105773.509:341): avc: denied { create } for pid=6562 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.856623][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 64.867093][ T42] audit: type=1400 audit(1786105773.519:342): avc: denied { write } for pid=6562 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.868903][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 64.877841][ T6563] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 64.881301][ T6563] iwpm_hello_cb: Unable to parse nlmsg [ 64.889492][ T42] audit: type=1400 audit(1786105773.549:343): avc: denied { getopt } for pid=6562 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.932002][ T6567] smb3: Unknown parameter '`Y<+rC Үj!7 GV"۫' [ 65.168361][ T60] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 65.576967][ T60] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 65.579560][ T60] em28xx 8-1:0.0: board has no eeprom [ 65.636282][ T60] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 65.638749][ T60] em28xx 8-1:0.0: dvb set to bulk mode. [ 65.641067][ T1350] em28xx 8-1:0.0: Binding DVB extension [ 65.647580][ T60] usb 8-1: USB disconnect, device number 3 [ 65.650631][ T60] em28xx 8-1:0.0: Disconnecting em28xx [ 65.667495][ T1350] em28xx 8-1:0.0: Registering input extension [ 65.670366][ T60] em28xx 8-1:0.0: Closing input extension [ 65.681316][ T60] em28xx 8-1:0.0: Freeing device [ 65.781309][ T6589] gretap0: entered promiscuous mode [ 65.783969][ T6589] gretap0: left promiscuous mode [ 65.937232][ T6595] FAULT_INJECTION: forcing a failure. [ 65.937232][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.942340][ T6595] CPU: 2 UID: 0 PID: 6595 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) [ 65.942355][ T6595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.942361][ T6595] Call Trace: [ 65.942366][ T6595] [ 65.942371][ T6595] dump_stack_lvl+0x100/0x190 [ 65.942388][ T6595] should_fail_ex.cold+0x5/0xa [ 65.942403][ T6595] _copy_from_user+0x2e/0xd0 [ 65.942419][ T6595] drm_syncobj_timeline_signal_ioctl+0x68e/0x8d0 [ 65.942438][ T6595] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.942452][ T6595] ? drm_dev_exit+0x41/0x60 [ 65.942464][ T6595] ? drm_dev_exit+0x41/0x60 [ 65.942478][ T6595] drm_ioctl_kernel+0x1f3/0x3e0 [ 65.942490][ T6595] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.942504][ T6595] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 65.942520][ T6595] drm_ioctl+0x5e6/0xc60 [ 65.942533][ T6595] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 65.942548][ T6595] ? __pfx_drm_ioctl+0x10/0x10 [ 65.942564][ T6595] ? selinux_file_ioctl+0x13b/0x290 [ 65.942581][ T6595] ? selinux_file_ioctl+0xb6/0x290 [ 65.942598][ T6595] ? __pfx_drm_ioctl+0x10/0x10 [ 65.942610][ T6595] __x64_sys_ioctl+0x18e/0x210 [ 65.942627][ T6595] do_syscall_64+0x115/0x870 [ 65.942642][ T6595] ? clear_bhb_loop+0x70/0xc0 [ 65.942654][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.942665][ T6595] RIP: 0033:0x7f9eb2d9e0d9 [ 65.942675][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.942685][ T6595] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.942696][ T6595] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 65.942703][ T6595] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 65.942709][ T6595] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 65.942715][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.942720][ T6595] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 65.942733][ T6595] [ 66.124286][ T6599] FAULT_INJECTION: forcing a failure. [ 66.124286][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 66.129213][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.0.267 Not tainted syzkaller #0 PREEMPT(full) [ 66.129228][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.129234][ T6599] Call Trace: [ 66.129239][ T6599] [ 66.129243][ T6599] dump_stack_lvl+0x100/0x190 [ 66.129261][ T6599] should_fail_ex.cold+0x5/0xa [ 66.129284][ T6599] should_failslab+0xc2/0x120 [ 66.129299][ T6599] __kmalloc_cache_noprof+0x91/0x6c0 [ 66.129311][ T6599] ? sctp_add_bind_addr+0xae/0x3e0 [ 66.129330][ T6599] sctp_add_bind_addr+0xae/0x3e0 [ 66.129346][ T6599] sctp_copy_local_addr_list+0x349/0x550 [ 66.129364][ T6599] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 66.129382][ T6599] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 66.129400][ T6599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.129415][ T6599] sctp_bind_addr_copy+0xe0/0x530 [ 66.129432][ T6599] sctp_connect_new_asoc+0x1c9/0x770 [ 66.129445][ T6599] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 66.129458][ T6599] ? selinux_sctp_bind_connect+0xe0/0x230 [ 66.129477][ T6599] sctp_sendmsg+0x1743/0x22e0 [ 66.129491][ T6599] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.129502][ T6599] ? sock_has_perm+0x25a/0x2f0 [ 66.129515][ T6599] ? __pfx_sock_has_perm+0x10/0x10 [ 66.129552][ T6599] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.129566][ T6599] inet_sendmsg+0x11c/0x140 [ 66.129583][ T6599] ____sys_sendmsg+0x9c9/0xbe0 [ 66.129600][ T6599] ? __pfx_inet_sendmsg+0x10/0x10 [ 66.129615][ T6599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.129634][ T6599] ? __pfx__kstrtoull+0x10/0x10 [ 66.129648][ T6599] ___sys_sendmsg+0x190/0x1e0 [ 66.129659][ T6599] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.129675][ T6599] ? find_held_lock+0x2b/0x80 [ 66.129694][ T6599] __sys_sendmmsg+0x20c/0x440 [ 66.129709][ T6599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.129722][ T6599] ? ksys_write+0x190/0x250 [ 66.129742][ T6599] ? fput+0x79/0x100 [ 66.129754][ T6599] ? ksys_write+0x1ac/0x250 [ 66.129763][ T6599] ? __pfx_ksys_write+0x10/0x10 [ 66.129775][ T6599] __x64_sys_sendmmsg+0x9c/0x100 [ 66.129788][ T6599] ? lockdep_hardirqs_on+0x78/0x100 [ 66.129803][ T6599] do_syscall_64+0x115/0x870 [ 66.129816][ T6599] ? clear_bhb_loop+0x70/0xc0 [ 66.129829][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.129840][ T6599] RIP: 0033:0x7ffab999e0d9 [ 66.129849][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.129860][ T6599] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.129871][ T6599] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 66.129877][ T6599] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 66.129883][ T6599] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 66.129889][ T6599] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 66.129895][ T6599] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 66.129909][ T6599] [ 66.284960][ T847] IPVS: starting estimator thread 0... [ 66.386291][ T6612] IPVS: using max 45 ests per chain, 108000 per kthread [ 66.402740][ T6626] __nla_validate_parse: 3 callbacks suppressed [ 66.402751][ T6626] netlink: 84 bytes leftover after parsing attributes in process `syz.3.277'. [ 66.408261][ T6626] netlink: 84 bytes leftover after parsing attributes in process `syz.3.277'. [ 66.420029][ T6629] FAULT_INJECTION: forcing a failure. [ 66.420029][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 66.425523][ T6629] CPU: 3 UID: 0 PID: 6629 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 66.425538][ T6629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.425544][ T6629] Call Trace: [ 66.425549][ T6629] [ 66.425554][ T6629] dump_stack_lvl+0x100/0x190 [ 66.425571][ T6629] should_fail_ex.cold+0x5/0xa [ 66.425585][ T6629] should_failslab+0xc2/0x120 [ 66.425600][ T6629] __kmalloc_cache_noprof+0x91/0x6c0 [ 66.425611][ T6629] ? ima_d_path+0xc9/0x260 [ 66.425626][ T6629] ima_d_path+0xc9/0x260 [ 66.425638][ T6629] ? __pfx_ima_d_path+0x10/0x10 [ 66.425653][ T6629] ? lockdep_init_map_type+0x5c/0x250 [ 66.425667][ T6629] ? ima_inode_get+0x39d/0x580 [ 66.425679][ T6629] process_measurement+0x146b/0x2350 [ 66.425694][ T6629] ? avc_has_perm_noaudit+0x145/0x3b0 [ 66.425707][ T6629] ? __pfx_process_measurement+0x10/0x10 [ 66.425720][ T6629] ? __pfx_avc_has_perm+0x10/0x10 [ 66.425731][ T6629] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 66.425756][ T6629] ? __file_map_prot_check+0x256/0x830 [ 66.425770][ T6629] ima_file_mmap+0x1bb/0x1e0 [ 66.425782][ T6629] ? __pfx_ima_file_mmap+0x10/0x10 [ 66.425793][ T6629] ? proc_fail_nth_write+0x9f/0x220 [ 66.425805][ T6629] security_mmap_file+0x278/0x9b0 [ 66.425816][ T6629] vm_mmap_pgoff+0xec/0x470 [ 66.425831][ T6629] ? find_held_lock+0x2b/0x80 [ 66.425840][ T6629] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 66.425853][ T6629] ? __fget_files+0x215/0x3d0 [ 66.425873][ T6629] ? __fget_files+0x21f/0x3d0 [ 66.425886][ T6629] ksys_mmap_pgoff+0x3cb/0x610 [ 66.425902][ T6629] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 66.425915][ T6629] ? fput+0x79/0x100 [ 66.425927][ T6629] ? ksys_write+0x1ac/0x250 [ 66.425936][ T6629] ? __pfx_ksys_write+0x10/0x10 [ 66.425947][ T6629] __x64_sys_mmap+0x125/0x190 [ 66.425964][ T6629] do_syscall_64+0x115/0x870 [ 66.425980][ T6629] ? clear_bhb_loop+0x70/0xc0 [ 66.425993][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.426003][ T6629] RIP: 0033:0x7f9eb2d9e0d9 [ 66.426013][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.426023][ T6629] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 66.426034][ T6629] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 66.426041][ T6629] RDX: 0000000002000006 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 66.426047][ T6629] RBP: 00007f9eb3cdd090 R08: 0000000000000004 R09: 0000000000000000 [ 66.426053][ T6629] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 66.426059][ T6629] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 66.426072][ T6629] [ 66.727481][ T6645] FAULT_INJECTION: forcing a failure. [ 66.727481][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.732672][ T6645] CPU: 2 UID: 0 PID: 6645 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(full) [ 66.732694][ T6645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.732703][ T6645] Call Trace: [ 66.732709][ T6645] [ 66.732716][ T6645] dump_stack_lvl+0x100/0x190 [ 66.732742][ T6645] should_fail_ex.cold+0x5/0xa [ 66.732763][ T6645] _copy_from_user+0x2e/0xd0 [ 66.732786][ T6645] drm_ioctl+0x520/0xc60 [ 66.732809][ T6645] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 66.732831][ T6645] ? __pfx_drm_ioctl+0x10/0x10 [ 66.732857][ T6645] ? selinux_file_ioctl+0x13b/0x290 [ 66.732880][ T6645] ? selinux_file_ioctl+0xb6/0x290 [ 66.732904][ T6645] ? __pfx_drm_ioctl+0x10/0x10 [ 66.732922][ T6645] __x64_sys_ioctl+0x18e/0x210 [ 66.732946][ T6645] do_syscall_64+0x115/0x870 [ 66.732967][ T6645] ? clear_bhb_loop+0x70/0xc0 [ 66.732986][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.733002][ T6645] RIP: 0033:0x7f667c79e0d9 [ 66.733016][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.733031][ T6645] RSP: 002b:00007f667d6e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.733074][ T6645] RAX: ffffffffffffffda RBX: 00007f667ca25fa0 RCX: 00007f667c79e0d9 [ 66.733086][ T6645] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 66.733096][ T6645] RBP: 00007f667d6e2090 R08: 0000000000000000 R09: 0000000000000000 [ 66.733105][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.733114][ T6645] R13: 00007f667ca26038 R14: 00007f667ca25fa0 R15: 00007fff6cf83878 [ 66.733150][ T6645] [ 66.830046][ T6652] FAULT_INJECTION: forcing a failure. [ 66.830046][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 66.834076][ T6652] CPU: 3 UID: 0 PID: 6652 Comm: syz.3.287 Not tainted syzkaller #0 PREEMPT(full) [ 66.834091][ T6652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.834097][ T6652] Call Trace: [ 66.834102][ T6652] [ 66.834107][ T6652] dump_stack_lvl+0x100/0x190 [ 66.834124][ T6652] should_fail_ex.cold+0x5/0xa [ 66.834138][ T6652] should_failslab+0xc2/0x120 [ 66.834152][ T6652] __kmalloc_noprof+0xfc/0x820 [ 66.834166][ T6652] ? tomoyo_encode2+0xfb/0x3c0 [ 66.834178][ T6652] tomoyo_encode2+0xfb/0x3c0 [ 66.834190][ T6652] tomoyo_encode+0x29/0x50 [ 66.834199][ T6652] tomoyo_realpath_from_path+0x18c/0x690 [ 66.834212][ T6652] tomoyo_path_number_perm+0x23c/0x580 [ 66.834227][ T6652] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.834243][ T6652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.834270][ T6652] ? find_held_lock+0x2b/0x80 [ 66.834280][ T6652] ? __fget_files+0x215/0x3d0 [ 66.834290][ T6652] ? hook_file_ioctl_common+0x140/0x440 [ 66.834302][ T6652] ? __fget_files+0x215/0x3d0 [ 66.834314][ T6652] ? __fget_files+0x21f/0x3d0 [ 66.834327][ T6652] security_file_ioctl+0xd3/0x230 [ 66.834344][ T6652] __x64_sys_ioctl+0xb7/0x210 [ 66.834360][ T6652] do_syscall_64+0x115/0x870 [ 66.834376][ T6652] ? clear_bhb_loop+0x70/0xc0 [ 66.834388][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.834399][ T6652] RIP: 0033:0x7f667c79e0d9 [ 66.834408][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.834419][ T6652] RSP: 002b:00007f667d6e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.834430][ T6652] RAX: ffffffffffffffda RBX: 00007f667ca25fa0 RCX: 00007f667c79e0d9 [ 66.834437][ T6652] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 66.834443][ T6652] RBP: 00007f667d6e2090 R08: 0000000000000000 R09: 0000000000000000 [ 66.834449][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.834455][ T6652] R13: 00007f667ca26038 R14: 00007f667ca25fa0 R15: 00007fff6cf83878 [ 66.834468][ T6652] [ 66.834479][ T6652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.005034][ T6650] jffs2: notice: (6650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.018871][ T6650] IPv6: Can't replace route, no match found [ 67.158925][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 67.467740][ T1350] usb 7-1: USB disconnect, device number 4 [ 67.486771][ T6682] FAULT_INJECTION: forcing a failure. [ 67.486771][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 67.492600][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 67.492616][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.492622][ T6682] Call Trace: [ 67.492626][ T6682] [ 67.492631][ T6682] dump_stack_lvl+0x100/0x190 [ 67.492649][ T6682] should_fail_ex.cold+0x5/0xa [ 67.492662][ T6682] should_failslab+0xc2/0x120 [ 67.492677][ T6682] __kmalloc_noprof+0xfc/0x820 [ 67.492689][ T6682] ? drm_syncobj_timeline_signal_ioctl+0x35c/0x8d0 [ 67.492707][ T6682] drm_syncobj_timeline_signal_ioctl+0x35c/0x8d0 [ 67.492724][ T6682] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 67.492738][ T6682] ? drm_dev_exit+0x41/0x60 [ 67.492750][ T6682] ? drm_dev_exit+0x41/0x60 [ 67.492763][ T6682] drm_ioctl_kernel+0x1f3/0x3e0 [ 67.492775][ T6682] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 67.492796][ T6682] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 67.492811][ T6682] drm_ioctl+0x5e6/0xc60 [ 67.492825][ T6682] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 67.492839][ T6682] ? __pfx_drm_ioctl+0x10/0x10 [ 67.492855][ T6682] ? selinux_file_ioctl+0x13b/0x290 [ 67.492872][ T6682] ? selinux_file_ioctl+0xb6/0x290 [ 67.492888][ T6682] ? __pfx_drm_ioctl+0x10/0x10 [ 67.492900][ T6682] __x64_sys_ioctl+0x18e/0x210 [ 67.492917][ T6682] do_syscall_64+0x115/0x870 [ 67.492932][ T6682] ? clear_bhb_loop+0x70/0xc0 [ 67.492945][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.492956][ T6682] RIP: 0033:0x7fd0d539e0d9 [ 67.492966][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.492976][ T6682] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.492988][ T6682] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 67.492994][ T6682] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 67.493000][ T6682] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 67.493006][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.493012][ T6682] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 67.493024][ T6682] [ 67.596678][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 67.599406][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 67.607461][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 67.607471][ T42] audit: type=1400 audit(1786105776.269:375): avc: denied { mounton } for pid=6685 comm="syz.2.301" path="/67/proc" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.619571][ T6684] FAULT_INJECTION: forcing a failure. [ 67.619571][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 67.623543][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 67.623564][ T6684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.623573][ T6684] Call Trace: [ 67.623579][ T6684] [ 67.623586][ T6684] dump_stack_lvl+0x100/0x190 [ 67.623610][ T6684] should_fail_ex.cold+0x5/0xa [ 67.623631][ T6684] should_failslab+0xc2/0x120 [ 67.623652][ T6684] __kmalloc_cache_noprof+0x91/0x6c0 [ 67.623668][ T6684] ? sctp_add_bind_addr+0xae/0x3e0 [ 67.623695][ T6684] sctp_add_bind_addr+0xae/0x3e0 [ 67.623718][ T6684] sctp_copy_local_addr_list+0x349/0x550 [ 67.623744][ T6684] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 67.623769][ T6684] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 67.623796][ T6684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.623818][ T6684] sctp_bind_addr_copy+0xe0/0x530 [ 67.623844][ T6684] sctp_connect_new_asoc+0x1c9/0x770 [ 67.623862][ T6684] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 67.623881][ T6684] ? selinux_sctp_bind_connect+0xe0/0x230 [ 67.623909][ T6684] sctp_sendmsg+0x1743/0x22e0 [ 67.623930][ T6684] ? __pfx_sctp_sendmsg+0x10/0x10 [ 67.623946][ T6684] ? sock_has_perm+0x25a/0x2f0 [ 67.623965][ T6684] ? __pfx_sock_has_perm+0x10/0x10 [ 67.623998][ T6684] ? __pfx_sctp_sendmsg+0x10/0x10 [ 67.624016][ T6684] inet_sendmsg+0x11c/0x140 [ 67.624040][ T6684] ____sys_sendmsg+0x9c9/0xbe0 [ 67.624064][ T6684] ? __pfx_inet_sendmsg+0x10/0x10 [ 67.624109][ T6684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.624137][ T6684] ? __pfx__kstrtoull+0x10/0x10 [ 67.624157][ T6684] ___sys_sendmsg+0x190/0x1e0 [ 67.624174][ T6684] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.624199][ T6684] ? find_held_lock+0x2b/0x80 [ 67.624228][ T6684] __sys_sendmmsg+0x20c/0x440 [ 67.624251][ T6684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 67.624270][ T6684] ? ksys_write+0x190/0x250 [ 67.624300][ T6684] ? fput+0x79/0x100 [ 67.624318][ T6684] ? ksys_write+0x1ac/0x250 [ 67.624332][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 67.624350][ T6684] __x64_sys_sendmmsg+0x9c/0x100 [ 67.624369][ T6684] ? lockdep_hardirqs_on+0x78/0x100 [ 67.624390][ T6684] do_syscall_64+0x115/0x870 [ 67.624409][ T6684] ? clear_bhb_loop+0x70/0xc0 [ 67.624437][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.624453][ T6684] RIP: 0033:0x7f9eb2d9e0d9 [ 67.624466][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.624482][ T6684] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.624499][ T6684] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 67.624509][ T6684] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 67.624518][ T6684] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 67.624528][ T6684] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 67.624537][ T6684] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 67.624558][ T6684] [ 67.801026][ T6697] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 67.805247][ T6697] netlink: 244 bytes leftover after parsing attributes in process `syz.2.305'. [ 67.823886][ T42] audit: type=1400 audit(1786105776.479:376): avc: denied { setattr } for pid=6695 comm="syz.2.305" path="/dev/video36" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.884524][ T6710] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 67.893417][ T6710] netlink: 84 bytes leftover after parsing attributes in process `syz.1.309'. [ 67.897289][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 67.900247][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 67.925294][ T42] audit: type=1804 audit(1786105776.579:377): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.311" name="/newroot/82/file0" dev="tmpfs" ino=465 res=1 errno=0 [ 67.928663][ T6719] openvswitch: netlink: IP tunnel dst address not specified [ 67.983189][ T42] audit: type=1400 audit(1786105776.639:378): avc: denied { write } for pid=6718 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.993354][ T6728] FAULT_INJECTION: forcing a failure. [ 67.993354][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 67.993941][ T42] audit: type=1400 audit(1786105776.639:379): avc: denied { nlmsg_write } for pid=6718 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.997606][ T6728] CPU: 3 UID: 0 PID: 6728 Comm: syz.1.316 Not tainted syzkaller #0 PREEMPT(full) [ 67.997621][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.997628][ T6728] Call Trace: [ 67.997632][ T6728] [ 67.997637][ T6728] dump_stack_lvl+0x100/0x190 [ 67.997657][ T6728] should_fail_ex.cold+0x5/0xa [ 67.997671][ T6728] should_failslab+0xc2/0x120 [ 67.997686][ T6728] __kmalloc_noprof+0xfc/0x820 [ 67.997699][ T6728] ? drm_syncobj_array_find+0x34/0x3a0 [ 67.997714][ T6728] drm_syncobj_array_find+0x34/0x3a0 [ 67.997726][ T6728] ? __lock_acquire+0x49f/0x1a40 [ 67.997741][ T6728] drm_syncobj_query_ioctl+0x25d/0xa90 [ 67.997758][ T6728] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 67.997771][ T6728] ? find_held_lock+0x2b/0x80 [ 67.997780][ T6728] ? drm_dev_exit+0x41/0x60 [ 67.997792][ T6728] ? drm_dev_exit+0x41/0x60 [ 67.997806][ T6728] drm_ioctl_kernel+0x1f3/0x3e0 [ 67.997818][ T6728] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 67.997837][ T6728] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 67.997852][ T6728] drm_ioctl+0x5e6/0xc60 [ 67.997865][ T6728] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 67.997879][ T6728] ? __pfx_drm_ioctl+0x10/0x10 [ 67.997895][ T6728] ? selinux_file_ioctl+0x13b/0x290 [ 67.997912][ T6728] ? selinux_file_ioctl+0xb6/0x290 [ 67.997929][ T6728] ? __pfx_drm_ioctl+0x10/0x10 [ 67.997941][ T6728] __x64_sys_ioctl+0x18e/0x210 [ 67.997958][ T6728] do_syscall_64+0x115/0x870 [ 67.997973][ T6728] ? clear_bhb_loop+0x70/0xc0 [ 67.997985][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.997996][ T6728] RIP: 0033:0x7f9eb2d9e0d9 [ 67.998006][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.998017][ T6728] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.998029][ T6728] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 67.998035][ T6728] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 67.998041][ T6728] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 67.998047][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.998053][ T6728] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 67.998065][ T6728] [ 68.051128][ T6736] FAULT_INJECTION: forcing a failure. [ 68.051128][ T6736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.051151][ T6736] CPU: 3 UID: 0 PID: 6736 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 68.051163][ T6736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.051170][ T6736] Call Trace: [ 68.051174][ T6736] [ 68.051178][ T6736] dump_stack_lvl+0x100/0x190 [ 68.051195][ T6736] should_fail_ex.cold+0x5/0xa [ 68.051209][ T6736] _copy_from_user+0x2e/0xd0 [ 68.051245][ T6736] drm_ioctl+0x520/0xc60 [ 68.051261][ T6736] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.051277][ T6736] ? __pfx_drm_ioctl+0x10/0x10 [ 68.051294][ T6736] ? selinux_file_ioctl+0x13b/0x290 [ 68.051324][ T6736] ? selinux_file_ioctl+0xb6/0x290 [ 68.051340][ T6736] ? __pfx_drm_ioctl+0x10/0x10 [ 68.051352][ T6736] __x64_sys_ioctl+0x18e/0x210 [ 68.051369][ T6736] do_syscall_64+0x115/0x870 [ 68.051385][ T6736] ? clear_bhb_loop+0x70/0xc0 [ 68.051397][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.051409][ T6736] RIP: 0033:0x7ffab999e0d9 [ 68.051418][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.051428][ T6736] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.051440][ T6736] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 68.051447][ T6736] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 68.051453][ T6736] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 68.051459][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.051465][ T6736] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 68.051479][ T6736] [ 68.139606][ T42] audit: type=1400 audit(1786105776.699:380): avc: denied { read append } for pid=6733 comm="syz.1.320" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.149679][ T42] audit: type=1400 audit(1786105776.699:381): avc: denied { ioctl open } for pid=6733 comm="syz.1.320" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.157393][ T42] audit: type=1400 audit(1786105776.699:382): avc: denied { write } for pid=6733 comm="syz.1.320" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.164876][ T42] audit: type=1400 audit(1786105776.699:383): avc: denied { read } for pid=6733 comm="syz.1.320" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.172495][ T42] audit: type=1400 audit(1786105776.699:384): avc: denied { open } for pid=6733 comm="syz.1.320" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.306281][ T5802] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.339449][ T6765] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 68.389100][ T6769] tc action pedit offset must be on 32 bit boundaries [ 68.457816][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.460921][ T5802] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.464158][ T5802] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.470021][ T5802] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.472996][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.475572][ T5802] usb 6-1: Product: syz [ 68.477245][ T5802] usb 6-1: Manufacturer: syz [ 68.478765][ T5802] usb 6-1: SerialNumber: syz [ 68.487182][ T5802] hub 6-1:1.0: bad descriptor, ignoring hub [ 68.489216][ T5802] hub 6-1:1.0: probe with driver hub failed with error -5 [ 68.691432][ T5802] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.946348][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.008331][ T1350] usb 6-1: USB disconnect, device number 2 [ 69.013672][ T1350] usblp0: removed [ 69.123610][ T6781] FAULT_INJECTION: forcing a failure. [ 69.123610][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 69.129000][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 69.129022][ T6781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.129032][ T6781] Call Trace: [ 69.129038][ T6781] [ 69.129044][ T6781] dump_stack_lvl+0x100/0x190 [ 69.129070][ T6781] should_fail_ex.cold+0x5/0xa [ 69.129091][ T6781] should_failslab+0xc2/0x120 [ 69.129112][ T6781] __kmalloc_cache_noprof+0x91/0x6c0 [ 69.129129][ T6781] ? drm_syncobj_timeline_signal_ioctl+0x40a/0x8d0 [ 69.129155][ T6781] drm_syncobj_timeline_signal_ioctl+0x40a/0x8d0 [ 69.129181][ T6781] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.129201][ T6781] ? drm_dev_exit+0x41/0x60 [ 69.129219][ T6781] ? drm_dev_exit+0x41/0x60 [ 69.129240][ T6781] drm_ioctl_kernel+0x1f3/0x3e0 [ 69.129258][ T6781] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.129280][ T6781] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 69.129303][ T6781] drm_ioctl+0x5e6/0xc60 [ 69.129323][ T6781] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.129345][ T6781] ? __pfx_drm_ioctl+0x10/0x10 [ 69.129371][ T6781] ? selinux_file_ioctl+0x13b/0x290 [ 69.129401][ T6781] ? selinux_file_ioctl+0xb6/0x290 [ 69.129425][ T6781] ? __pfx_drm_ioctl+0x10/0x10 [ 69.129443][ T6781] __x64_sys_ioctl+0x18e/0x210 [ 69.129468][ T6781] do_syscall_64+0x115/0x870 [ 69.129487][ T6781] ? clear_bhb_loop+0x70/0xc0 [ 69.129507][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.129523][ T6781] RIP: 0033:0x7fd0d539e0d9 [ 69.129536][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.129552][ T6781] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.129569][ T6781] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 69.129579][ T6781] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 69.129589][ T6781] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 69.129599][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.129607][ T6781] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 69.129628][ T6781] [ 69.251811][ T6783] gretap0: entered promiscuous mode [ 69.257308][ T6783] gretap0: left promiscuous mode [ 69.404691][ T6799] random: crng reseeded on system resumption [ 69.473408][ T6803] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 69.579857][ T6815] FAULT_INJECTION: forcing a failure. [ 69.579857][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.584025][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.1.349 Not tainted syzkaller #0 PREEMPT(full) [ 69.584039][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.584046][ T6815] Call Trace: [ 69.584050][ T6815] [ 69.584055][ T6815] dump_stack_lvl+0x100/0x190 [ 69.584090][ T6815] should_fail_ex.cold+0x5/0xa [ 69.584105][ T6815] _copy_to_user+0x32/0xd0 [ 69.584121][ T6815] drm_ioctl+0x608/0xc60 [ 69.584136][ T6815] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 69.584152][ T6815] ? __pfx_drm_ioctl+0x10/0x10 [ 69.584168][ T6815] ? selinux_file_ioctl+0x13b/0x290 [ 69.584185][ T6815] ? selinux_file_ioctl+0xb6/0x290 [ 69.584201][ T6815] ? __pfx_drm_ioctl+0x10/0x10 [ 69.584213][ T6815] __x64_sys_ioctl+0x18e/0x210 [ 69.584230][ T6815] do_syscall_64+0x115/0x870 [ 69.584245][ T6815] ? clear_bhb_loop+0x70/0xc0 [ 69.584257][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.584268][ T6815] RIP: 0033:0x7f9eb2d9e0d9 [ 69.584282][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.584293][ T6815] RSP: 002b:00007f9eb3cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.584304][ T6815] RAX: ffffffffffffffda RBX: 00007f9eb3025fa0 RCX: 00007f9eb2d9e0d9 [ 69.584311][ T6815] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 69.584317][ T6815] RBP: 00007f9eb3cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 69.584323][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.584330][ T6815] R13: 00007f9eb3026038 R14: 00007f9eb3025fa0 R15: 00007fff4eb5b8e8 [ 69.584343][ T6815] [ 69.727181][ T6831] FAULT_INJECTION: forcing a failure. [ 69.727181][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.731338][ T6831] CPU: 2 UID: 0 PID: 6831 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(full) [ 69.731352][ T6831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.731359][ T6831] Call Trace: [ 69.731364][ T6831] [ 69.731369][ T6831] dump_stack_lvl+0x100/0x190 [ 69.731386][ T6831] should_fail_ex.cold+0x5/0xa [ 69.731400][ T6831] _copy_from_user+0x2e/0xd0 [ 69.731417][ T6831] drm_syncobj_array_find+0x83/0x3a0 [ 69.731432][ T6831] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 69.731451][ T6831] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.731464][ T6831] ? drm_dev_exit+0x41/0x60 [ 69.731480][ T6831] ? drm_dev_exit+0x41/0x60 [ 69.731494][ T6831] drm_ioctl_kernel+0x1f3/0x3e0 [ 69.731507][ T6831] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.731521][ T6831] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 69.731537][ T6831] drm_ioctl+0x5e6/0xc60 [ 69.731550][ T6831] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 69.731565][ T6831] ? __pfx_drm_ioctl+0x10/0x10 [ 69.731581][ T6831] ? selinux_file_ioctl+0x13b/0x290 [ 69.731597][ T6831] ? selinux_file_ioctl+0xb6/0x290 [ 69.731613][ T6831] ? __pfx_drm_ioctl+0x10/0x10 [ 69.731625][ T6831] __x64_sys_ioctl+0x18e/0x210 [ 69.731642][ T6831] do_syscall_64+0x115/0x870 [ 69.731657][ T6831] ? clear_bhb_loop+0x70/0xc0 [ 69.731670][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.731681][ T6831] RIP: 0033:0x7fd0d539e0d9 [ 69.731690][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.731701][ T6831] RSP: 002b:00007fd0d6338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.731712][ T6831] RAX: ffffffffffffffda RBX: 00007fd0d5625fa0 RCX: 00007fd0d539e0d9 [ 69.731719][ T6831] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 69.731725][ T6831] RBP: 00007fd0d6338090 R08: 0000000000000000 R09: 0000000000000000 [ 69.731731][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.731737][ T6831] R13: 00007fd0d5626038 R14: 00007fd0d5625fa0 R15: 00007ffe3849a398 [ 69.731750][ T6831] [ 69.928733][ T6850] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 69.936393][ T6850] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 70.009077][ T6854] FAULT_INJECTION: forcing a failure. [ 70.009077][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.013455][ T6854] CPU: 2 UID: 0 PID: 6854 Comm: syz.0.365 Not tainted syzkaller #0 PREEMPT(full) [ 70.013470][ T6854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.013477][ T6854] Call Trace: [ 70.013481][ T6854] [ 70.013486][ T6854] dump_stack_lvl+0x100/0x190 [ 70.013504][ T6854] should_fail_ex.cold+0x5/0xa [ 70.013517][ T6854] _copy_to_user+0x32/0xd0 [ 70.013534][ T6854] drm_ioctl+0x608/0xc60 [ 70.013549][ T6854] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.013566][ T6854] ? __pfx_drm_ioctl+0x10/0x10 [ 70.013582][ T6854] ? selinux_file_ioctl+0x13b/0x290 [ 70.013598][ T6854] ? selinux_file_ioctl+0xb6/0x290 [ 70.013614][ T6854] ? __pfx_drm_ioctl+0x10/0x10 [ 70.013626][ T6854] __x64_sys_ioctl+0x18e/0x210 [ 70.013644][ T6854] do_syscall_64+0x115/0x870 [ 70.013659][ T6854] ? clear_bhb_loop+0x70/0xc0 [ 70.013671][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.013682][ T6854] RIP: 0033:0x7ffab999e0d9 [ 70.013692][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.013702][ T6854] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.013714][ T6854] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 70.013721][ T6854] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 70.013727][ T6854] RBP: 00007ffaba820090 R08: 0000000000000000 R09: 0000000000000000 [ 70.013733][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.013739][ T6854] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 70.013752][ T6854] [ 70.077059][ T6856] kAFS: Can only specify source 'none' with -o dyn [ 70.081548][ T6856] process 'syz.2.366' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 70.278640][ T6870] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 70.286801][ T6870] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 70.399510][ T6879] vlan2: entered allmulticast mode [ 70.401395][ T6879] bond0: entered allmulticast mode [ 70.403400][ T6879] bond_slave_0: entered allmulticast mode [ 70.405264][ T6879] bond_slave_1: entered allmulticast mode [ 70.462573][ T6868] ------------[ cut here ]------------ [ 70.464422][ T6868] 1 [ 70.464430][ T6868] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#0: syz.0.371/6868 [ 70.468578][ T6868] Modules linked in: [ 70.469879][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(full) [ 70.472806][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.475967][ T6868] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.478109][ T6868] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 74 e1 8b e8 3b 95 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 e0 45 9c 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 bd d3 8e 45 89 f7 44 8b 74 24 [ 70.483910][ T6868] RSP: 0018:ffffc900031476f8 EFLAGS: 00010246 [ 70.485833][ T6868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.488282][ T6868] RDX: 0000000000000000 RSI: 1ffff92000628ef9 RDI: 0000000000040cc0 [ 70.490684][ T6868] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 70.493045][ T6868] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 70.495404][ T6868] R13: 1ffff92000628f37 R14: ffffffff9b74e444 R15: 0000000000000001 [ 70.497834][ T6868] FS: 00007ffaba8206c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 70.500551][ T6868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.502506][ T6868] CR2: 00007fd0d53591f0 CR3: 0000000035e26000 CR4: 0000000000352ef0 [ 70.504799][ T6868] Call Trace: [ 70.505829][ T6868] [ 70.506873][ T6868] ? find_held_lock+0x2b/0x80 [ 70.508256][ T6868] ? is_bpf_text_address+0x8a/0x1a0 [ 70.509850][ T6868] ? is_bpf_text_address+0x8a/0x1a0 [ 70.511431][ T6868] ? bpf_ksym_find+0x128/0x1c0 [ 70.512870][ T6868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.514851][ T6868] ? is_bpf_text_address+0x94/0x1a0 [ 70.516585][ T6868] ? kernel_text_address+0x8d/0x100 [ 70.518175][ T6868] ? __pfx_widen_string+0x10/0x10 [ 70.519721][ T6868] ? __kernel_text_address+0xd/0x30 [ 70.521311][ T6868] ? unwind_get_return_address+0x59/0xa0 [ 70.523008][ T6868] ? arch_stack_walk+0xa6/0xf0 [ 70.524474][ T6868] ? tomoyo_path_number_perm+0x46d/0x580 [ 70.526258][ T6868] ? stack_trace_save+0x8e/0xc0 [ 70.527736][ T6868] ? __pfx_stack_trace_save+0x10/0x10 [ 70.529343][ T6868] ? stack_depot_save_flags+0x27/0x9d0 [ 70.530954][ T6868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.532705][ T6868] ? policy_nodemask+0xed/0x4f0 [ 70.534173][ T6868] alloc_pages_mpol+0x1fb/0x540 [ 70.535629][ T6868] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 70.537272][ T6868] ___kmalloc_large_node+0xe5/0x120 [ 70.538793][ T6868] __kmalloc_large_node_noprof+0x1c/0x70 [ 70.540487][ T6868] __kmalloc_noprof+0x5a1/0x820 [ 70.542030][ T6868] ? avc_has_extended_perms+0x484/0x1080 [ 70.543801][ T6868] ? drm_syncobj_array_find+0x34/0x3a0 [ 70.545570][ T6868] drm_syncobj_array_find+0x34/0x3a0 [ 70.547322][ T6868] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 70.549230][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.551274][ T6868] ? drm_dev_exit+0x41/0x60 [ 70.552703][ T6868] ? drm_dev_exit+0x41/0x60 [ 70.554050][ T6868] drm_ioctl_kernel+0x1f3/0x3e0 [ 70.555624][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.558139][ T6868] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 70.559842][ T6868] drm_ioctl+0x5e6/0xc60 [ 70.561522][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.563670][ T6868] ? __pfx_drm_ioctl+0x10/0x10 [ 70.565201][ T6868] ? selinux_file_ioctl+0x13b/0x290 [ 70.566941][ T6868] ? selinux_file_ioctl+0xb6/0x290 [ 70.568612][ T6868] ? __pfx_drm_ioctl+0x10/0x10 [ 70.570129][ T6868] __x64_sys_ioctl+0x18e/0x210 [ 70.571679][ T6868] do_syscall_64+0x115/0x870 [ 70.573001][ T6868] ? clear_bhb_loop+0x70/0xc0 [ 70.574320][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.575960][ T6868] RIP: 0033:0x7ffab999e0d9 [ 70.577426][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.583396][ T6868] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.586006][ T6868] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 70.588539][ T6868] RDX: 00002000000000c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 70.590982][ T6868] RBP: 00007ffab9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 70.593476][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.595961][ T6868] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 70.598508][ T6868] [ 70.599494][ T6868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.601755][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(full) [ 70.604582][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.607717][ T6868] Call Trace: [ 70.608781][ T6868] [ 70.609722][ T6868] dump_stack_lvl+0x100/0x190 [ 70.611189][ T6868] vpanic+0x552/0x970 [ 70.612453][ T6868] ? __pfx_vpanic+0x10/0x10 [ 70.613872][ T6868] panic+0xd1/0xe0 [ 70.615068][ T6868] ? __pfx_panic+0x10/0x10 [ 70.616521][ T6868] check_panic_on_warn.cold+0x19/0x34 [ 70.618292][ T6868] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.620225][ T6868] __warn.cold+0x191/0x318 [ 70.621623][ T6868] __report_bug+0x30f/0x440 [ 70.623058][ T6868] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.624983][ T6868] ? __pfx___report_bug+0x10/0x10 [ 70.626567][ T6868] ? arch_stack_walk+0xa6/0xf0 [ 70.628084][ T6868] ? __lock_acquire+0x49f/0x1a40 [ 70.629678][ T6868] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.631626][ T6868] report_bug+0xb2/0x220 [ 70.632984][ T6868] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.634928][ T6868] handle_bug+0x16a/0x2a0 [ 70.636343][ T6868] exc_invalid_op+0x17/0x50 [ 70.637795][ T6868] asm_exc_invalid_op+0x1a/0x20 [ 70.639329][ T6868] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 70.641434][ T6868] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 74 e1 8b e8 3b 95 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 e0 45 9c 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 bd d3 8e 45 89 f7 44 8b 74 24 [ 70.647282][ T6868] RSP: 0018:ffffc900031476f8 EFLAGS: 00010246 [ 70.649198][ T6868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.651662][ T6868] RDX: 0000000000000000 RSI: 1ffff92000628ef9 RDI: 0000000000040cc0 [ 70.654129][ T6868] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 70.656532][ T6868] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 70.659004][ T6868] R13: 1ffff92000628f37 R14: ffffffff9b74e444 R15: 0000000000000001 [ 70.661488][ T6868] ? find_held_lock+0x2b/0x80 [ 70.662970][ T6868] ? is_bpf_text_address+0x8a/0x1a0 [ 70.664627][ T6868] ? is_bpf_text_address+0x8a/0x1a0 [ 70.666252][ T6868] ? bpf_ksym_find+0x128/0x1c0 [ 70.667759][ T6868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.669734][ T6868] ? is_bpf_text_address+0x94/0x1a0 [ 70.671372][ T6868] ? kernel_text_address+0x8d/0x100 [ 70.673026][ T6868] ? __pfx_widen_string+0x10/0x10 [ 70.674618][ T6868] ? __kernel_text_address+0xd/0x30 [ 70.676283][ T6868] ? unwind_get_return_address+0x59/0xa0 [ 70.678038][ T6868] ? arch_stack_walk+0xa6/0xf0 [ 70.679546][ T6868] ? tomoyo_path_number_perm+0x46d/0x580 [ 70.681325][ T6868] ? stack_trace_save+0x8e/0xc0 [ 70.682862][ T6868] ? __pfx_stack_trace_save+0x10/0x10 [ 70.684552][ T6868] ? stack_depot_save_flags+0x27/0x9d0 [ 70.686285][ T6868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.688148][ T6868] ? policy_nodemask+0xed/0x4f0 [ 70.689685][ T6868] alloc_pages_mpol+0x1fb/0x540 [ 70.691226][ T6868] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 70.692923][ T6868] ___kmalloc_large_node+0xe5/0x120 [ 70.694503][ T6868] __kmalloc_large_node_noprof+0x1c/0x70 [ 70.696192][ T6868] __kmalloc_noprof+0x5a1/0x820 [ 70.697733][ T6868] ? avc_has_extended_perms+0x484/0x1080 [ 70.699496][ T6868] ? drm_syncobj_array_find+0x34/0x3a0 [ 70.701213][ T6868] drm_syncobj_array_find+0x34/0x3a0 [ 70.702868][ T6868] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 70.704814][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.706950][ T6868] ? drm_dev_exit+0x41/0x60 [ 70.708408][ T6868] ? drm_dev_exit+0x41/0x60 [ 70.709837][ T6868] drm_ioctl_kernel+0x1f3/0x3e0 [ 70.711296][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.713285][ T6868] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 70.714981][ T6868] drm_ioctl+0x5e6/0xc60 [ 70.716368][ T6868] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 70.718497][ T6868] ? __pfx_drm_ioctl+0x10/0x10 [ 70.720006][ T6868] ? selinux_file_ioctl+0x13b/0x290 [ 70.721634][ T6868] ? selinux_file_ioctl+0xb6/0x290 [ 70.723181][ T6868] ? __pfx_drm_ioctl+0x10/0x10 [ 70.724616][ T6868] __x64_sys_ioctl+0x18e/0x210 [ 70.726084][ T6868] do_syscall_64+0x115/0x870 [ 70.727462][ T6868] ? clear_bhb_loop+0x70/0xc0 [ 70.728936][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.730750][ T6868] RIP: 0033:0x7ffab999e0d9 [ 70.732136][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.737815][ T6868] RSP: 002b:00007ffaba820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.740319][ T6868] RAX: ffffffffffffffda RBX: 00007ffab9c25fa0 RCX: 00007ffab999e0d9 [ 70.742674][ T6868] RDX: 00002000000000c0 RSI: 00000000c01864cd RDI: 0000000000000003 [ 70.745044][ T6868] RBP: 00007ffab9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 70.747467][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.749821][ T6868] R13: 00007ffab9c26038 R14: 00007ffab9c25fa0 R15: 00007ffe3f072038 [ 70.752191][ T6868] [ 70.753821][ T6868] Kernel Offset: disabled [ 70.755145][ T6868] Rebooting in 86400 seconds..