last executing test programs: 9.453731838s ago: executing program 1 (id=1364): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)='u', 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 9.34765083s ago: executing program 0 (id=1365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) shutdown(r4, 0x1) 9.26118481s ago: executing program 1 (id=1366): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.148072443s ago: executing program 0 (id=1369): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0xac1414aa}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000004000018007000600666f00", @ANYRESHEX=r1], 0x54}}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) unshare(0x6a040000) 6.727339904s ago: executing program 3 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) shutdown(r4, 0x1) 5.758633856s ago: executing program 3 (id=1385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 5.10229529s ago: executing program 3 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) shutdown(r3, 0x1) 4.953529836s ago: executing program 4 (id=1390): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x170}}], 0x1, 0x0) 4.884698403s ago: executing program 0 (id=1392): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc001) r1 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x20}], 0x1, 0x18000, 0x0) 4.864991427s ago: executing program 1 (id=1393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 4.66765924s ago: executing program 4 (id=1394): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 4.118321088s ago: executing program 3 (id=1395): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x2, 0x80805, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\''], 0x86) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) fsopen(&(0x7f0000000040)='ext2\x00', 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) 4.099677624s ago: executing program 1 (id=1397): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="10000000000000000d01"], 0x10}}], 0x2, 0x40000) 3.457856629s ago: executing program 0 (id=1398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x47cdc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.456087868s ago: executing program 1 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8007, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x5, 0x0, 0x0, {{0x4, 0x2, 0x9634}, {0xfffa, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 3.434008339s ago: executing program 2 (id=1400): syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) 3.268473715s ago: executing program 3 (id=1401): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x47cdc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.526467368s ago: executing program 0 (id=1402): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 2.458318456s ago: executing program 2 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x230) 2.407691989s ago: executing program 1 (id=1404): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.729471862s ago: executing program 2 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) shutdown(r4, 0x1) 1.711170954s ago: executing program 4 (id=1406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04ec", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x1) 1.629100132s ago: executing program 0 (id=1407): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x66, 0x16, 0x81, 0x20, 0x7a6, 0x8511, 0x9f28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x28, 0x87, 0x0, 0x1a, 0x68, 0x42}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x2, "ad61"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x40, 0x14, 0x2, "f553"}, 0x0, 0x0, 0x0, 0x0}) 1.628688081s ago: executing program 4 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) shutdown(r4, 0x1) 1.399682994s ago: executing program 3 (id=1409): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e"], 0x7) 327.73075ms ago: executing program 2 (id=1410): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x43}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) 221.385342ms ago: executing program 2 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 177.399767ms ago: executing program 4 (id=1412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) flistxattr(r0, &(0x7f0000000040)=""/149, 0x95) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100000000000000000000020000000083d81f42d48a882c"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000040)=""/104, 0x4d) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 99.184327ms ago: executing program 4 (id=1413): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0xac1414aa}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000004000018007000600666f00", @ANYRESHEX=r1], 0x54}}, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) unshare(0x6a040000) 0s ago: executing program 2 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): [ T8485] netlink: 596 bytes leftover after parsing attributes in process `syz.1.548'. [ 331.565873][ T8473] can0 (unregistered): slcan off ttyS3. [ 331.908144][ T8491] overlayfs: missing 'lowerdir' [ 332.935105][ T30] audit: type=1400 audit(1741537034.079:708): avc: denied { ioctl } for pid=8492 comm="syz.2.552" path="socket:[16449]" dev="sockfs" ino=16449 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 333.035323][ T30] audit: type=1400 audit(1741537034.169:709): avc: denied { ioctl } for pid=8503 comm="syz.4.553" path="socket:[16457]" dev="sockfs" ino=16457 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.422453][ T30] audit: type=1400 audit(1741537034.579:710): avc: denied { create } for pid=8509 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 333.442287][ T8487] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 333.869137][ T30] audit: type=1400 audit(1741537035.019:711): avc: denied { relabelto } for pid=8509 comm="syz.1.555" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 333.910444][ T30] audit: type=1400 audit(1741537035.059:712): avc: denied { associate } for pid=8509 comm="syz.1.555" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 333.961488][ T8510] ceph: No mds server is up or the cluster is laggy [ 333.968466][ T8196] libceph: connect (1)[c::]:6789 error -101 [ 333.990428][ T8196] libceph: mon0 (1)[c::]:6789 connect error [ 334.425341][ T30] audit: type=1400 audit(1741537035.539:713): avc: denied { connect } for pid=8517 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 335.705087][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 335.789805][ T30] audit: type=1400 audit(1741537036.019:714): avc: denied { listen } for pid=8522 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.094630][ T30] audit: type=1400 audit(1741537036.019:715): avc: denied { accept } for pid=8522 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.127338][ T30] audit: type=1404 audit(1741537036.369:716): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 336.145495][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 336.271278][ T30] audit: type=1404 audit(1741537036.409:717): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 336.294855][ T30] audit: type=1400 audit(1741537036.599:718): avc: denied { read write } for pid=8528 comm="syz.4.561" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.308643][ T5869] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 336.374258][ T30] audit: type=1400 audit(1741537036.599:719): avc: denied { open } for pid=8528 comm="syz.4.561" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.443821][ T30] audit: type=1400 audit(1741537036.599:720): avc: denied { ioctl } for pid=8528 comm="syz.4.561" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.496519][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.550491][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.567965][ T5869] usb 5-1: config 1 has no interface number 0 [ 336.575858][ T5869] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.591449][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.605005][ T8197] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 336.610487][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.677742][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.755565][ T5869] usb 5-1: Product: syz [ 336.759817][ T5869] usb 5-1: Manufacturer: syz [ 336.764714][ T5869] usb 5-1: SerialNumber: syz [ 337.298934][ T8197] usb 2-1: Using ep0 maxpacket: 16 [ 337.311124][ T8197] usb 2-1: config 0 has no interfaces? [ 337.322631][ T5869] cdc_wdm 5-1:1.128: skipping garbage [ 337.329729][ T5869] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 337.329788][ T8197] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.430930][ T8197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.475091][ T8197] usb 2-1: config 0 descriptor?? [ 338.224111][ T8197] usb 2-1: USB disconnect, device number 5 [ 339.292315][ T5869] usb 5-1: USB disconnect, device number 7 [ 339.399099][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 339.399114][ T30] audit: type=1400 audit(1741537040.549:767): avc: denied { mounton } for pid=8567 comm="syz.4.569" path="/114/file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.427786][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.444044][ T8568] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 339.599155][ T30] audit: type=1400 audit(1741537040.709:768): avc: denied { read write } for pid=8569 comm="syz.0.570" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 339.624004][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.635037][ T8568] CIFS mount error: No usable UNC path provided in device string! [ 339.635037][ T8568] [ 339.766300][ T30] audit: type=1400 audit(1741537040.709:769): avc: denied { open } for pid=8569 comm="syz.0.570" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 339.790767][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.901610][ T8577] virtio-fs: tag <(null)> not found [ 339.960814][ T8568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 339.965781][ T8577] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 340.202431][ T30] audit: type=1400 audit(1741537040.789:770): avc: denied { ioctl } for pid=8567 comm="syz.4.569" path="socket:[17568]" dev="sockfs" ino=17568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.227932][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.459198][ T30] audit: type=1400 audit(1741537040.789:771): avc: denied { name_bind } for pid=8569 comm="syz.0.570" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.005338][ T30] audit: type=1400 audit(1741537040.789:772): avc: denied { node_bind } for pid=8569 comm="syz.0.570" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.025895][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.032761][ T30] audit: type=1400 audit(1741537041.049:773): avc: denied { mounton } for pid=8571 comm="syz.1.571" path="/119/file1" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 341.341473][ T30] audit: type=1400 audit(1741537041.069:774): avc: denied { read } for pid=8571 comm="syz.1.571" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.408234][ T30] audit: type=1400 audit(1741537041.069:775): avc: denied { open } for pid=8571 comm="syz.1.571" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.435951][ T30] audit: type=1400 audit(1741537041.069:776): avc: denied { ioctl } for pid=8571 comm="syz.1.571" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.460965][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.615127][ T8206] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 341.795147][ T8206] usb 5-1: Using ep0 maxpacket: 16 [ 341.868210][ T8206] usb 5-1: config 0 has no interfaces? [ 342.031650][ T8206] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 342.216035][ T8206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.359885][ T8206] usb 5-1: config 0 descriptor?? [ 342.631556][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.063214][ T8197] usb 5-1: USB disconnect, device number 8 [ 343.647359][ T8606] netlink: 192 bytes leftover after parsing attributes in process `syz.3.578'. [ 343.658041][ T8606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.578'. [ 343.875000][ T8196] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 344.025015][ T8196] usb 3-1: Using ep0 maxpacket: 16 [ 344.035664][ T8196] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.075237][ T1202] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 344.078756][ T8196] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.223912][ T8196] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.305195][ T8196] usb 3-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 344.405145][ T1202] usb 2-1: Using ep0 maxpacket: 16 [ 344.448713][ T8196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.475932][ T8196] usb 3-1: config 0 descriptor?? [ 344.484482][ T1202] usb 2-1: config 0 has no interfaces? [ 344.506371][ T1202] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 344.537604][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.575746][ T1202] usb 2-1: config 0 descriptor?? [ 345.091747][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 345.092794][ T30] audit: type=1400 audit(1741537046.239:802): avc: denied { create } for pid=8609 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.095400][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 345.157999][ T30] audit: type=1400 audit(1741537046.239:803): avc: denied { bind } for pid=8609 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.185191][ T8197] usb 2-1: USB disconnect, device number 6 [ 345.304104][ T30] audit: type=1400 audit(1741537046.239:804): avc: denied { setopt } for pid=8609 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.584192][ T30] audit: type=1400 audit(1741537046.729:805): avc: denied { create } for pid=8632 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.659999][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 345.679019][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 345.753872][ T8633] ceph: No mds server is up or the cluster is laggy [ 345.767687][ T30] audit: type=1400 audit(1741537046.899:806): avc: denied { mac_admin } for pid=8632 comm="syz.4.585" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 345.806065][ T30] audit: type=1400 audit(1741537046.899:807): avc: denied { relabelto } for pid=8632 comm="syz.4.585" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 345.873453][ T30] audit: type=1400 audit(1741537046.899:808): avc: denied { associate } for pid=8632 comm="syz.4.585" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 346.413121][ T30] audit: type=1400 audit(1741537047.549:809): avc: denied { create } for pid=8638 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.511396][ T8196] usbhid 3-1:0.0: can't add hid device: -71 [ 346.558031][ T8196] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 346.950691][ T8196] usb 3-1: USB disconnect, device number 4 [ 347.537163][ T30] audit: type=1400 audit(1741537047.619:810): avc: denied { connect } for pid=8638 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 348.128201][ T30] audit: type=1400 audit(1741537047.679:811): avc: denied { ioctl } for pid=8642 comm="syz.4.588" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0xffff scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 348.191714][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.964405][ T8665] trusted_key: encrypted_key: key user:syz not found [ 350.547492][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 350.547509][ T30] audit: type=1400 audit(1741537051.229:817): avc: denied { connect } for pid=8661 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.580548][ T30] audit: type=1400 audit(1741537051.239:818): avc: denied { ioctl } for pid=8661 comm="syz.2.592" path="socket:[16749]" dev="sockfs" ino=16749 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.830364][ T30] audit: type=1400 audit(1741537051.882:819): avc: denied { getopt } for pid=8671 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.850488][ T30] audit: type=1400 audit(1741537051.952:820): avc: denied { create } for pid=8671 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 350.872661][ T30] audit: type=1400 audit(1741537051.962:821): avc: denied { write } for pid=8671 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 350.935256][ T30] audit: type=1400 audit(1741537052.002:822): avc: denied { ioctl } for pid=8673 comm="syz.4.595" path="socket:[17724]" dev="sockfs" ino=17724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.020378][ T30] audit: type=1400 audit(1741537052.053:823): avc: denied { read } for pid=8671 comm="syz.0.593" path="socket:[17725]" dev="sockfs" ino=17725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 351.043952][ T30] audit: type=1400 audit(1741537052.095:824): avc: denied { create } for pid=8673 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 351.063646][ T30] audit: type=1400 audit(1741537052.105:825): avc: denied { append } for pid=8673 comm="syz.4.595" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.847298][ T8698] 9pnet_virtio: no channels available for device syz [ 353.631850][ T30] audit: type=1400 audit(1741537054.864:826): avc: denied { create } for pid=8703 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.932758][ T8709] 9pnet_fd: Insufficient options for proto=fd [ 354.208386][ T8713] : renamed from bond0 (while UP) [ 354.697617][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.548651][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.4.607'. [ 355.568841][ T8727] ƒm speed is unknown, defaulting to 1000 [ 355.640463][ T8727] ƒm speed is unknown, defaulting to 1000 [ 355.852438][ T8728] trusted_key: encrypted_key: key user:syz not found [ 355.857105][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 355.859620][ T30] audit: type=1400 audit(1741537056.719:837): avc: denied { mount } for pid=8716 comm="syz.2.605" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 356.181804][ T30] audit: type=1400 audit(1741537056.719:838): avc: denied { mounton } for pid=8716 comm="syz.2.605" path="/111/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 356.204831][ T30] audit: type=1400 audit(1741537056.719:839): avc: denied { mount } for pid=8716 comm="syz.2.605" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 356.623929][ T30] audit: type=1400 audit(1741537057.937:840): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 356.692436][ T8732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.723742][ T30] audit: type=1400 audit(1741537057.988:841): avc: denied { write } for pid=8731 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 356.939107][ T30] audit: type=1400 audit(1741537058.019:842): avc: denied { bind } for pid=8731 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.719980][ T30] audit: type=1400 audit(1741537059.050:843): avc: denied { read write } for pid=8743 comm="syz.1.612" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 357.906199][ T30] audit: type=1400 audit(1741537059.050:844): avc: denied { open } for pid=8743 comm="syz.1.612" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 358.096825][ T8752] 9pnet_virtio: no channels available for device syz [ 360.038030][ T30] audit: type=1400 audit(1741537061.394:845): avc: denied { write } for pid=8754 comm="syz.4.615" name="ip_mr_cache" dev="proc" ino=4026533132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 360.125095][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.307189][ T30] audit: type=1400 audit(1741537061.404:846): avc: denied { read } for pid=8754 comm="syz.4.615" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 361.409947][ T8763] vivid-007: kernel_thread() failed [ 361.450398][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 361.450411][ T30] audit: type=1400 audit(1741537062.238:850): avc: denied { connect } for pid=8758 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 361.567445][ T30] audit: type=1400 audit(1741537062.238:851): avc: denied { name_connect } for pid=8758 comm="syz.3.616" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 361.609264][ T30] audit: type=1400 audit(1741537062.238:852): avc: denied { create } for pid=8758 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 361.705216][ T30] audit: type=1400 audit(1741537062.238:853): avc: denied { setopt } for pid=8758 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 361.779449][ T30] audit: type=1400 audit(1741537062.238:854): avc: denied { connect } for pid=8758 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 362.579271][ T30] audit: type=1400 audit(1741537063.437:855): avc: denied { name_connect } for pid=8768 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 362.599979][ T30] audit: type=1400 audit(1741537063.447:856): avc: denied { listen } for pid=8768 comm="syz.1.619" lport=42881 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.589334][ T30] audit: type=1400 audit(1741537064.300:857): avc: denied { accept } for pid=8768 comm="syz.1.619" lport=42881 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.712774][ T30] audit: type=1400 audit(1741537064.310:858): avc: denied { write } for pid=8771 comm="syz.3.618" path="socket:[17883]" dev="sockfs" ino=17883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.212824][ T30] audit: type=1400 audit(1741537064.310:859): avc: denied { setattr } for pid=8771 comm="syz.3.618" name="comm" dev="proc" ino=17893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 364.633013][ T8796] ƒm speed is unknown, defaulting to 1000 [ 364.705099][ T8796] ƒm speed is unknown, defaulting to 1000 [ 365.804230][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.650884][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 366.657936][ T30] audit: type=1400 audit(1741537067.967:872): avc: denied { setopt } for pid=8817 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 366.901657][ T8814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.140146][ T30] audit: type=1400 audit(1741537068.351:873): avc: denied { write } for pid=8813 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 368.184633][ T8840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.478512][ T30] audit: type=1400 audit(1741537069.958:874): avc: denied { mounton } for pid=8843 comm="syz.1.636" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 368.491989][ T8844] Driver unsupported XDP return value 0 on prog (id 177) dev N/A, expect packet loss! [ 368.502178][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.663272][ T30] audit: type=1400 audit(1741537070.029:875): avc: denied { create } for pid=8843 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 369.096964][ T8844] ax25_connect(): syz.1.636 uses autobind, please contact jreuter@yaina.de [ 369.102834][ T30] audit: type=1400 audit(1741537070.594:876): avc: denied { connect } for pid=8843 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 369.392633][ T8853] tipc: Enabled bearer , priority 10 [ 369.497160][ T30] audit: type=1400 audit(1741537070.938:877): avc: denied { unlink } for pid=8849 comm="syz.3.638" name="#11" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 370.347353][ T8856] xt_hashlimit: size too large, truncated to 1048576 [ 370.528308][ T30] audit: type=1400 audit(1741537071.715:878): avc: denied { nlmsg_write } for pid=8852 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.548776][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.589087][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.025295][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 371.460834][ T8869] netlink: 52 bytes leftover after parsing attributes in process `syz.2.643'. [ 371.583257][ T8869] ƒm speed is unknown, defaulting to 1000 [ 371.797075][ T8869] ƒm speed is unknown, defaulting to 1000 [ 371.816619][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.833584][ T8863] netlink: 'syz.3.641': attribute type 8 has an invalid length. [ 371.841365][ T8863] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.641'. [ 372.253272][ T9] usb 2-1: device descriptor read/all, error -71 [ 372.504238][ T8880] Bluetooth: hci4: Opcode 0x0c1a failed: -22 [ 373.084202][ T30] audit: type=1400 audit(1741537074.296:879): avc: denied { create } for pid=8882 comm="syz.4.646" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.599665][ T30] audit: type=1400 audit(1741537074.336:880): avc: denied { write } for pid=8882 comm="syz.4.646" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.664353][ T30] audit: type=1400 audit(1741537074.336:881): avc: denied { open } for pid=8882 comm="syz.4.646" path="/133/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.743423][ T30] audit: type=1400 audit(1741537074.346:882): avc: denied { ioctl } for pid=8882 comm="syz.4.646" path="/133/file0" dev="tmpfs" ino=742 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.769816][ T30] audit: type=1400 audit(1741537074.911:883): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.793439][ T30] audit: type=1400 audit(1741537075.243:884): avc: denied { mount } for pid=8875 comm="syz.3.645" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.816758][ T30] audit: type=1400 audit(1741537075.253:885): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.496573][ T30] audit: type=1400 audit(1741537076.029:886): avc: denied { read write } for pid=8895 comm="syz.2.651" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.518475][ T5823] Bluetooth: hci4: command tx timeout [ 374.717050][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 374.996525][ T30] audit: type=1400 audit(1741537076.059:887): avc: denied { open } for pid=8895 comm="syz.2.651" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 375.317556][ T30] audit: type=1400 audit(1741537076.129:888): avc: denied { bind } for pid=8895 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.621462][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 375.646734][ T5869] usb 2-1: config 0 has no interfaces? [ 375.672388][ T5869] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.728512][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.797246][ T5869] usb 2-1: config 0 descriptor?? [ 376.613382][ T8196] usb 2-1: USB disconnect, device number 9 [ 376.661967][ T8907] netlink: 'syz.4.648': attribute type 6 has an invalid length. [ 376.965850][ T8907] dccp_close: ABORT with 32 bytes unread [ 377.161846][ T8198] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 377.223284][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.899225][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.919903][ T8198] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.956124][ T8198] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 378.037624][ T8930] SET target dimension over the limit! [ 378.252149][ T8198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.313648][ T8198] usb 4-1: config 0 descriptor?? [ 380.654360][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 380.654377][ T30] audit: type=1400 audit(1741537082.193:905): avc: denied { block_suspend } for pid=8947 comm="syz.4.664" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 381.041740][ T30] audit: type=1400 audit(1741537082.294:906): avc: denied { read } for pid=8947 comm="syz.4.664" name="usbmon7" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.377959][ T30] audit: type=1400 audit(1741537082.294:907): avc: denied { open } for pid=8947 comm="syz.4.664" path="/dev/usbmon7" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.443506][ T8192] usb 4-1: USB disconnect, device number 7 [ 381.510711][ T30] audit: type=1400 audit(1741537082.334:908): avc: denied { ioctl } for pid=8947 comm="syz.4.664" path="/dev/usbmon7" dev="devtmpfs" ino=740 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.536277][ T30] audit: type=1400 audit(1741537082.474:909): avc: denied { write } for pid=8948 comm="syz.0.663" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.732866][ T30] audit: type=1400 audit(1741537082.886:910): avc: denied { ioctl } for pid=8953 comm="syz.0.666" path="socket:[18381]" dev="sockfs" ino=18381 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 382.337213][ T30] audit: type=1400 audit(1741537083.047:911): avc: denied { setopt } for pid=8956 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.372956][ T8977] netlink: 'syz.2.669': attribute type 8 has an invalid length. [ 383.380737][ T8977] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.669'. [ 383.599697][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.085790][ T30] audit: type=1400 audit(1741537086.109:912): avc: denied { execute } for pid=8987 comm="syz.2.673" name="file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 385.108073][ T30] audit: type=1400 audit(1741537086.109:913): avc: denied { execute_no_trans } for pid=8987 comm="syz.2.673" path="/126/file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 385.131504][ T30] audit: type=1400 audit(1741537086.109:914): avc: denied { setopt } for pid=8987 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.655670][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 385.655687][ T30] audit: type=1400 audit(1741537087.072:917): avc: denied { name_bind } for pid=8984 comm="syz.3.672" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 385.961182][ T30] audit: type=1400 audit(1741537087.494:918): avc: denied { write } for pid=8999 comm="syz.1.677" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 385.985243][ T30] audit: type=1400 audit(1741537087.494:919): avc: denied { open } for pid=8999 comm="syz.1.677" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 389.821173][ T9024] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 389.830371][ T9024] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 389.866865][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.194615][ T9028] netlink: 'syz.4.684': attribute type 8 has an invalid length. [ 390.202519][ T9028] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.684'. [ 391.154544][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 391.162256][ T30] audit: type=1400 audit(1741537092.758:920): avc: denied { ioctl } for pid=9039 comm="syz.0.687" path="socket:[18494]" dev="sockfs" ino=18494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.178760][ T8198] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 391.208552][ T30] audit: type=1400 audit(1741537092.758:921): avc: denied { read } for pid=9039 comm="syz.0.687" path="socket:[18493]" dev="sockfs" ino=18493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.237392][ T30] audit: type=1400 audit(1741537092.778:922): avc: denied { write } for pid=9042 comm="syz.3.688" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 391.558133][ T8198] usb 3-1: Using ep0 maxpacket: 16 [ 391.589694][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 391.846605][ T8198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.858009][ T8198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.874328][ T8198] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.887348][ T8198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.900485][ T8198] usb 3-1: Product: syz [ 391.904682][ T8198] usb 3-1: Manufacturer: syz [ 392.027609][ T8198] usb 3-1: SerialNumber: syz [ 392.834023][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.870496][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.025959][ T30] audit: type=1400 audit(1741537095.644:923): avc: denied { sqpoll } for pid=9060 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.118309][ T8198] usb 3-1: 0:2 : does not exist [ 394.132280][ T8198] usb 3-1: USB disconnect, device number 5 [ 394.925842][ T30] audit: type=1400 audit(1741537096.546:924): avc: denied { create } for pid=9071 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 395.133255][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.151538][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.932856][ T30] audit: type=1400 audit(1741537098.549:925): avc: denied { execmod } for pid=9071 comm="syz.2.694" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 397.100608][ T30] audit: type=1400 audit(1741537098.600:926): avc: denied { execute } for pid=9071 comm="syz.2.694" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 397.398462][ T9088] netlink: 'syz.2.697': attribute type 8 has an invalid length. [ 397.406244][ T9088] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.697'. [ 398.610205][ T30] audit: type=1400 audit(1741537100.222:927): avc: denied { create } for pid=9089 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.988225][ T30] audit: type=1400 audit(1741537100.603:928): avc: denied { mount } for pid=9099 comm="syz.0.702" name="/" dev="autofs" ino=18580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 399.070823][ T30] audit: type=1400 audit(1741537100.693:929): avc: denied { setopt } for pid=9089 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.204787][ T30] audit: type=1400 audit(1741537100.833:930): avc: denied { ioctl } for pid=9099 comm="syz.0.702" path="socket:[19484]" dev="sockfs" ino=19484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 399.280607][ T30] audit: type=1400 audit(1741537100.903:931): avc: denied { sys_module } for pid=9099 comm="syz.0.702" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 400.126685][ T30] audit: type=1400 audit(1741537101.013:932): avc: denied { read append } for pid=9099 comm="syz.0.702" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 400.198814][ T8206] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 400.255320][ T30] audit: type=1400 audit(1741537101.013:933): avc: denied { open } for pid=9099 comm="syz.0.702" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 400.372711][ T8206] usb 3-1: device descriptor read/64, error -71 [ 400.382623][ T30] audit: type=1400 audit(1741537101.013:934): avc: denied { write } for pid=9099 comm="syz.0.702" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 401.301814][ T8206] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 401.654341][ T6216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.810082][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 402.810097][ T30] audit: type=1400 audit(1741537104.447:938): avc: denied { accept } for pid=9137 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 402.853350][ T8206] usb 3-1: device descriptor read/64, error -71 [ 402.969843][ T8206] usb usb3-port1: attempt power cycle [ 403.090072][ T9140] xt_TCPMSS: Only works on TCP SYN packets [ 403.470491][ T30] audit: type=1400 audit(1741537104.758:939): avc: denied { ioctl } for pid=9137 comm="syz.3.709" path="socket:[19515]" dev="sockfs" ino=19515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 403.494926][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.334810][ T9163] netlink: 52 bytes leftover after parsing attributes in process `syz.3.712'. [ 404.480023][ T9163] ƒm speed is unknown, defaulting to 1000 [ 404.825498][ T9163] ƒm speed is unknown, defaulting to 1000 [ 405.566060][ T9170] block nbd0: shutting down sockets [ 406.315941][ T30] audit: type=1400 audit(1741537107.470:940): avc: denied { ioctl } for pid=9176 comm="syz.2.720" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.449352][ T30] audit: type=1400 audit(1741537107.941:941): avc: denied { connect } for pid=9179 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 406.471234][ T30] audit: type=1400 audit(1741537107.941:942): avc: denied { accept } for pid=9179 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 406.599550][ T9185] overlayfs: failed to resolve './file0': -2 [ 407.251507][ T9188] netlink: 'syz.1.722': attribute type 8 has an invalid length. [ 407.259271][ T9188] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.722'. [ 408.031301][ T30] audit: type=1400 audit(1741537109.642:943): avc: denied { setopt } for pid=9192 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.612161][ T9199] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 408.723398][ T9194] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 408.731124][ T9194] CPU: 1 UID: 0 PID: 9194 Comm: syz.3.725 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 408.731149][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.731160][ T9194] Call Trace: [ 408.731166][ T9194] [ 408.731172][ T9194] dump_stack_lvl+0x16c/0x1f0 [ 408.731200][ T9194] sysfs_warn_dup+0x7f/0xa0 [ 408.731228][ T9194] sysfs_do_create_link_sd+0x124/0x140 [ 408.731259][ T9194] sysfs_create_link+0x61/0xc0 [ 408.731287][ T9194] device_add+0x62e/0x1a70 [ 408.731318][ T9194] ? __pfx_device_add+0x10/0x10 [ 408.731340][ T9194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.731370][ T9194] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 408.731399][ T9194] wiphy_register+0x1cab/0x2860 [ 408.731439][ T9194] ? __pfx_wiphy_register+0x10/0x10 [ 408.731473][ T9194] ? ieee80211_register_hw+0x2417/0x4060 [ 408.731502][ T9194] ieee80211_register_hw+0x2455/0x4060 [ 408.731537][ T9194] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 408.731560][ T9194] ? net_generic+0xea/0x2a0 [ 408.731583][ T9194] ? lockdep_init_map_type+0x16d/0x7d0 [ 408.731614][ T9194] ? __asan_memset+0x23/0x50 [ 408.731641][ T9194] ? __hrtimer_init+0x106/0x2c0 [ 408.731672][ T9194] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 408.731711][ T9194] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 408.731733][ T9194] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 408.731756][ T9194] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 408.731781][ T9194] ? __asan_memcpy+0x3c/0x60 [ 408.731811][ T9194] hwsim_new_radio_nl+0xb42/0x12b0 [ 408.731839][ T9194] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 408.731872][ T9194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 408.731901][ T9194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 408.731936][ T9194] genl_family_rcv_msg_doit+0x202/0x2f0 [ 408.731965][ T9194] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.732001][ T9194] ? bpf_lsm_capable+0x9/0x10 [ 408.732023][ T9194] ? security_capable+0x7e/0x260 [ 408.732046][ T9194] ? ns_capable+0xd7/0x110 [ 408.732075][ T9194] genl_rcv_msg+0x565/0x800 [ 408.732105][ T9194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.732134][ T9194] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 408.732159][ T9194] ? __pfx___schedule+0x10/0x10 [ 408.732185][ T9194] netlink_rcv_skb+0x16b/0x440 [ 408.732209][ T9194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.732237][ T9194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.732273][ T9194] ? down_read+0x1a6/0x330 [ 408.732296][ T9194] ? __pfx_down_read+0x10/0x10 [ 408.732322][ T9194] ? netlink_deliver_tap+0x1ae/0xd30 [ 408.732349][ T9194] genl_rcv+0x28/0x40 [ 408.732373][ T9194] netlink_unicast+0x53c/0x7f0 [ 408.732400][ T9194] ? __pfx_netlink_unicast+0x10/0x10 [ 408.732439][ T9194] netlink_sendmsg+0x8b8/0xd70 [ 408.732468][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.732502][ T9194] ____sys_sendmsg+0xaaf/0xc90 [ 408.732523][ T9194] ? copy_msghdr_from_user+0x10b/0x160 [ 408.732550][ T9194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.732585][ T9194] ___sys_sendmsg+0x135/0x1e0 [ 408.732613][ T9194] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.732668][ T9194] ? fdget+0x4d/0x210 [ 408.732694][ T9194] __sys_sendmsg+0x16e/0x220 [ 408.732720][ T9194] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.732745][ T9194] ? __x64_sys_futex+0x1e1/0x4c0 [ 408.732785][ T9194] do_syscall_64+0xcd/0x250 [ 408.732810][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.732834][ T9194] RIP: 0033:0x7f8e20d8d169 [ 408.732849][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.732866][ T9194] RSP: 002b:00007f8e21cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.732883][ T9194] RAX: ffffffffffffffda RBX: 00007f8e20fa5fa0 RCX: 00007f8e20d8d169 [ 408.732894][ T9194] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 408.732905][ T9194] RBP: 00007f8e20e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.732915][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.732925][ T9194] R13: 0000000000000000 R14: 00007f8e20fa5fa0 R15: 00007fff148d1938 [ 408.732949][ T9194] [ 409.190298][ T8198] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 409.197933][ T30] audit: type=1400 audit(1741537110.343:944): avc: denied { create } for pid=9192 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 409.613747][ T8198] usb 3-1: Using ep0 maxpacket: 32 [ 409.621749][ T8198] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 409.637064][ T8198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 409.663389][ T8198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 410.420112][ T8198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 410.471835][ T8198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 410.551180][ T8198] usb 3-1: string descriptor 0 read error: -71 [ 410.588240][ T8198] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 410.671290][ T8198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.193863][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.210478][ T8198] usb 3-1: config 0 descriptor?? [ 411.217792][ T8198] usb 3-1: can't set config #0, error -71 [ 411.225307][ T9231] wireguard0: entered promiscuous mode [ 411.230944][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 411.251821][ T8198] usb 3-1: USB disconnect, device number 9 [ 411.780994][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 411.799036][ T8198] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 411.974041][ T8198] usb 3-1: Using ep0 maxpacket: 16 [ 412.043479][ T8198] usb 3-1: config 0 has no interfaces? [ 412.106187][ T8198] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 412.120907][ T8198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.138436][ T8198] usb 3-1: config 0 descriptor?? [ 412.667069][ T8196] usb 3-1: USB disconnect, device number 10 [ 415.012475][ T30] audit: type=1400 audit(1741537116.466:945): avc: denied { audit_write } for pid=9265 comm="syz.1.743" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 416.430937][ T9288] veth0_vlan: entered allmulticast mode [ 416.831829][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.883712][ T1202] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 418.803241][ T30] audit: type=1400 audit(1741537120.368:946): avc: denied { mounton } for pid=9302 comm="syz.4.752" path="/161/bus" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 418.836215][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 418.878953][ T1202] usb 4-1: config 0 has no interfaces? [ 418.884435][ T1202] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.007860][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.028486][ T1202] usb 4-1: config 0 descriptor?? [ 419.608491][ T30] audit: type=1326 audit(1741537120.748:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9310 comm="syz.1.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6be78d169 code=0x0 [ 419.775761][ T9320] 9pnet_fd: Insufficient options for proto=fd [ 419.790137][ T1202] usb 4-1: can't set config #0, error -71 [ 419.798707][ T1202] usb 4-1: USB disconnect, device number 8 [ 421.395722][ T9337] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 422.409570][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 422.416135][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 422.746773][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.025036][ T9344] ceph: No mds server is up or the cluster is laggy [ 423.034504][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 423.551480][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 425.772942][ T9375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 425.782142][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 425.791481][ T9375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 425.800464][ T9375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 425.976266][ T8198] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 426.142469][ T30] audit: type=1400 audit(1741537127.760:948): avc: denied { connect } for pid=9374 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.206199][ T8198] usb 4-1: Using ep0 maxpacket: 16 [ 426.318619][ T8198] usb 4-1: config 0 has no interfaces? [ 426.426371][ T8198] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 426.563385][ T30] audit: type=1400 audit(1741537127.760:949): avc: denied { create } for pid=9374 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 426.587317][ T8198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.335138][ T8198] usb 4-1: config 0 descriptor?? [ 427.616985][ T9385] syz.1.771 (9385): drop_caches: 2 [ 427.632932][ T30] audit: type=1400 audit(1741537127.770:950): avc: denied { write } for pid=9374 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 427.718138][ T8198] usb 4-1: USB disconnect, device number 9 [ 428.238153][ T30] audit: type=1400 audit(1741537129.811:951): avc: denied { watch_mount } for pid=9392 comm="syz.1.774" path="/155" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 428.375412][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.885818][ T30] audit: type=1400 audit(1741537130.521:952): avc: denied { getopt } for pid=9400 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.355677][ T30] audit: type=1326 audit(1741537131.961:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.0.779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde26f8d169 code=0x0 [ 431.576283][ T9425] ptrace attach of ""[9426] was attempted by "./syz-executor exec"[9425] [ 433.519206][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 433.528204][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 433.537065][ T9448] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 433.544727][ T9448] nbd: error processing sock list [ 433.596883][ T9449] fuse: Bad value for 'fd' [ 433.942832][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.010446][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 437.175969][ T30] audit: type=1326 audit(1741537138.762:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.3.794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e20d8d169 code=0x0 [ 437.681129][ T30] audit: type=1400 audit(1741537139.312:955): avc: denied { getopt } for pid=9475 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.813773][ T30] audit: type=1400 audit(1741537139.452:956): avc: denied { wake_alarm } for pid=9475 comm="syz.0.793" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.842960][ T9480] 9pnet: Could not find request transport: fŽ­£OnoÆÞ~tˆ¬d [ 438.033532][ T9493] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 438.886842][ T30] audit: type=1400 audit(1741537140.163:957): avc: denied { write } for pid=9495 comm="syz.3.799" path="socket:[19383]" dev="sockfs" ino=19383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 438.926584][ T30] audit: type=1400 audit(1741537140.163:958): avc: denied { nlmsg_read } for pid=9495 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 438.973882][ T30] audit: type=1400 audit(1741537140.203:959): avc: denied { connect } for pid=9495 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.215415][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.731248][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 439.739168][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.894324][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 439.905478][ T9] usb 3-1: config 0 has no interfaces? [ 439.910966][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 439.998973][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.162595][ T9] usb 3-1: config 0 descriptor?? [ 440.174390][ T30] audit: type=1400 audit(1741537141.783:960): avc: denied { bind } for pid=9511 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.365941][ T8197] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 440.438753][ T9] usb 3-1: USB disconnect, device number 11 [ 440.438914][ T30] audit: type=1400 audit(1741537141.793:961): avc: denied { read } for pid=9511 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.506420][ T30] audit: type=1400 audit(1741537142.143:962): avc: denied { mount } for pid=9511 comm="syz.0.804" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 440.564369][ T8197] usb 4-1: Using ep0 maxpacket: 16 [ 440.583225][ T8197] usb 4-1: config 0 has no interfaces? [ 440.594267][ T8197] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 440.620607][ T8197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.649636][ T8197] usb 4-1: config 0 descriptor?? [ 440.996173][ T8195] usb 4-1: USB disconnect, device number 10 [ 442.999731][ T30] audit: type=1400 audit(1741537144.603:963): avc: denied { create } for pid=9528 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 444.514030][ T30] audit: type=1400 audit(1741537145.973:964): avc: denied { write } for pid=9543 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 445.243852][ T30] audit: type=1400 audit(1741537145.973:965): avc: denied { create } for pid=9543 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 445.270204][ T30] audit: type=1400 audit(1741537146.363:966): avc: denied { bind } for pid=9549 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 445.615499][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.779876][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 446.002218][ T9571] ƒm speed is unknown, defaulting to 1000 [ 446.365526][ T9571] ƒm speed is unknown, defaulting to 1000 [ 446.942577][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 446.950329][ T5869] usb 4-1: config 0 has no interfaces? [ 446.955985][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 446.966692][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.206892][ T5869] usb 4-1: config 0 descriptor?? [ 447.325193][ T30] audit: type=1400 audit(1741537148.973:967): avc: denied { ioctl } for pid=9576 comm="syz.2.821" path="socket:[20203]" dev="sockfs" ino=20203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.539117][ T5869] usb 4-1: USB disconnect, device number 11 [ 451.445554][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.599007][ T9618] bridge0: port 3(hsr_slave_1) entered blocking state [ 451.606505][ T9618] bridge0: port 3(hsr_slave_1) entered disabled state [ 451.620502][ T9618] hsr_slave_1: entered allmulticast mode [ 451.640205][ T5869] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 452.289634][ T9618] hsr_slave_1: left allmulticast mode [ 452.612117][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 452.736295][ T5869] usb 3-1: config 0 has no interfaces? [ 452.741963][ T5869] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 453.773705][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.124640][ T5869] usb 3-1: config 0 descriptor?? [ 454.170984][ T30] audit: type=1400 audit(1741537155.664:968): avc: denied { shutdown } for pid=9639 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.146552][ T30] audit: type=1400 audit(1741537156.124:969): avc: denied { connect } for pid=9639 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.166665][ T30] audit: type=1400 audit(1741537156.124:970): avc: denied { write } for pid=9639 comm="syz.4.838" laddr=fe80::a8aa:aaff:feaa:aaaa lport=5 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 456.584414][ T30] audit: type=1400 audit(1741537157.794:971): avc: denied { write } for pid=9648 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 456.627482][ T8195] usb 3-1: USB disconnect, device number 12 [ 457.164496][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.203942][ T9665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.379517][ T9680] xt_ipcomp: unknown flags 12 [ 460.616341][ T30] audit: type=1400 audit(1741537162.084:972): avc: denied { create } for pid=9670 comm="syz.2.846" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 460.771811][ T30] audit: type=1400 audit(1741537162.084:973): avc: denied { link } for pid=9670 comm="syz.2.846" name="#1b" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 461.093593][ T30] audit: type=1400 audit(1741537162.084:974): avc: denied { rename } for pid=9670 comm="syz.2.846" name="#1c" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 461.494105][ T9694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.542409][ T30] audit: type=1400 audit(1741537163.134:975): avc: denied { read } for pid=9685 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.523658][ T30] audit: type=1400 audit(1741537164.164:976): avc: denied { remount } for pid=9690 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 462.630758][ T9707] CUSE: unknown device info "ÿ" [ 462.636000][ T9707] CUSE: zero length info key specified [ 463.348383][ T30] audit: type=1400 audit(1741537164.294:977): avc: denied { shutdown } for pid=9701 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 463.416828][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.623113][ T30] audit: type=1400 audit(1741537168.114:978): avc: denied { getopt } for pid=9725 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.660689][ T9741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 467.670230][ T9741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 468.191825][ T9755] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 469.078158][ T9761] Process accounting resumed [ 469.163018][ T8197] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 469.430032][ T9768] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 469.632520][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.046002][ T8197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.073654][ T8197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.135702][ T8197] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 470.155663][ T8197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.163954][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 470.198334][ T8197] usb 4-1: config 0 descriptor?? [ 471.122793][ T30] audit: type=1400 audit(1741537172.004:979): avc: denied { listen } for pid=9776 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 471.373029][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 471.379793][ T9] usb 2-1: config 0 has no interfaces? [ 471.391183][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 472.038743][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.049083][ T9] usb 2-1: config 0 descriptor?? [ 472.622345][ T8207] usb 2-1: USB disconnect, device number 10 [ 472.686294][ T30] audit: type=1400 audit(1741537174.334:980): avc: denied { mount } for pid=9793 comm="syz.2.873" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 472.752564][ T30] audit: type=1400 audit(1741537174.334:981): avc: denied { create } for pid=9793 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 473.028639][ T9800] veth0_to_team: entered promiscuous mode [ 473.034527][ T9800] veth0_to_team: entered allmulticast mode [ 473.844846][ T30] audit: type=1400 audit(1741537174.684:982): avc: denied { connect } for pid=9793 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 474.407987][ T30] audit: type=1400 audit(1741537174.694:983): avc: denied { write } for pid=9793 comm="syz.2.873" path="socket:[20452]" dev="sockfs" ino=20452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 474.597230][ T30] audit: type=1400 audit(1741537176.004:984): avc: denied { ioctl } for pid=9796 comm="syz.4.874" path="socket:[20834]" dev="sockfs" ino=20834 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 474.622406][ T30] audit: type=1400 audit(1741537176.244:985): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 474.706636][ T9803] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 474.714022][ T9803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.948972][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.878'. [ 474.993122][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.878'. [ 475.384578][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.878'. [ 475.404692][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.505813][ T9817] dvmrp0: entered allmulticast mode [ 475.701778][ T30] audit: type=1326 audit(1741537177.104:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6271f8d169 code=0x7ffc0000 [ 475.729812][ T30] audit: type=1326 audit(1741537177.104:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6271f8d169 code=0x7ffc0000 [ 475.731220][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.878'. [ 475.753621][ T30] audit: type=1326 audit(1741537177.114:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6271f8d169 code=0x7ffc0000 [ 475.894966][ T30] audit: type=1326 audit(1741537177.114:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6271f8d169 code=0x7ffc0000 [ 476.201492][ T8197] usbhid 4-1:0.0: can't add hid device: -71 [ 476.211765][ T8197] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 476.226685][ T8197] usb 4-1: USB disconnect, device number 12 [ 476.254771][ T9822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16334 sclass=netlink_route_socket pid=9822 comm=syz.1.877 [ 478.340678][ T9828] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 479.088280][ T9846] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 480.036792][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.886'. [ 481.244095][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 481.244110][ T30] audit: type=1400 audit(1741537182.894:1016): avc: denied { ioctl } for pid=9863 comm="syz.2.888" path="socket:[20981]" dev="sockfs" ino=20981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 481.845941][ T6196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.873147][ T30] audit: type=1400 audit(1741537183.494:1017): avc: denied { append } for pid=9863 comm="syz.2.888" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 483.014003][ T9872] netlink: 52 bytes leftover after parsing attributes in process `syz.2.891'. [ 483.031510][ T9872] ƒm speed is unknown, defaulting to 1000 [ 483.072915][ T9872] ƒm speed is unknown, defaulting to 1000 [ 483.808926][ T9886] overlayfs: failed to clone upperpath [ 484.473021][ T8206] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 484.758648][ T8206] usb 2-1: Using ep0 maxpacket: 16 [ 484.823340][ T8206] usb 2-1: config 0 has no interfaces? [ 484.982358][ T8206] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 484.992257][ T8206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.006587][ T8206] usb 2-1: config 0 descriptor?? [ 485.573633][ T8206] usb 2-1: USB disconnect, device number 11 [ 486.638541][ T9905] bridge0: port 1(hsr_slave_1) entered blocking state [ 486.645602][ T9905] bridge0: port 1(hsr_slave_1) entered disabled state [ 486.653224][ T9905] hsr_slave_1: entered allmulticast mode [ 486.664908][ T9905] hsr_slave_1: left allmulticast mode [ 486.732824][ T30] audit: type=1400 audit(1741537187.914:1018): avc: denied { setopt } for pid=9896 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 487.226298][ T9909] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 487.273177][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.617491][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 487.809209][ T30] audit: type=1326 audit(1741537189.434:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.2.900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6271f8d169 code=0x0 [ 488.434546][ T9922] xt_policy: neither incoming nor outgoing policy selected [ 488.462970][ T8206] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 488.673154][ T8206] usb 4-1: Using ep0 maxpacket: 8 [ 488.733195][ T8195] Process accounting resumed [ 488.788770][ T8206] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 488.886546][ T8206] usb 4-1: config 0 has no interface number 0 [ 488.893431][ T8206] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 488.902653][ T8206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.606635][ T9936] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 489.672192][ T8206] usb 4-1: config 0 descriptor?? [ 490.014281][ T8206] viperboard 4-1:0.143: version 0.00 found at bus 004 address 013 [ 490.065648][ T8206] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 490.176444][ T8206] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 490.427884][ T9947] syzkaller0: entered allmulticast mode [ 490.848141][ T9946] netlink: 52 bytes leftover after parsing attributes in process `syz.4.906'. [ 491.022423][ T9946] ƒm speed is unknown, defaulting to 1000 [ 491.299139][ T9953] xt_hashlimit: size too large, truncated to 1048576 [ 491.614688][ T9946] ƒm speed is unknown, defaulting to 1000 [ 493.076735][ T6216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.180581][ T9964] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 494.075410][ T30] audit: type=1400 audit(1741537195.494:1020): avc: denied { listen } for pid=9961 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.103307][ T30] audit: type=1400 audit(1741537195.504:1021): avc: denied { accept } for pid=9961 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.122880][ T30] audit: type=1400 audit(1741537195.504:1022): avc: denied { ioctl } for pid=9961 comm="syz.0.910" path="socket:[21163]" dev="sockfs" ino=21163 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 494.147529][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.195098][ T8207] usb 4-1: USB disconnect, device number 13 [ 494.262020][ T30] audit: type=1400 audit(1741537195.874:1023): avc: denied { read } for pid=9975 comm="syz.4.913" path="socket:[21779]" dev="sockfs" ino=21779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.392532][ T9980] 8021q: VLANs not supported on vcan0 [ 494.474732][ T9988] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 494.888938][ T8195] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 495.114913][ T8195] usb 3-1: Using ep0 maxpacket: 16 [ 495.331103][ T8195] usb 3-1: config 0 has no interfaces? [ 495.342044][ T8195] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 495.362824][ T8195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.032128][ T8195] usb 3-1: config 0 descriptor?? [ 496.416997][ T30] audit: type=1400 audit(1741537198.064:1024): avc: denied { create } for pid=9999 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 496.429544][ T8195] usb 3-1: USB disconnect, device number 13 [ 496.771269][ T30] audit: type=1400 audit(1741537198.234:1025): avc: denied { setopt } for pid=9999 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 496.823057][ T30] audit: type=1400 audit(1741537198.454:1026): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.851200][ T30] audit: type=1400 audit(1741537198.454:1027): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.878600][ T30] audit: type=1400 audit(1741537198.464:1028): avc: denied { rename } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.901328][ T30] audit: type=1400 audit(1741537198.464:1029): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.741542][T10020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.924'. [ 498.762146][T10020] ƒm speed is unknown, defaulting to 1000 [ 498.836383][T10020] ƒm speed is unknown, defaulting to 1000 [ 499.148661][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.641432][T10028] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.653036][T10028] syz.0.925: attempt to access beyond end of device [ 499.653036][T10028] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 499.666041][T10028] efs: cannot read volume header [ 499.771224][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 500.963026][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.104988][ T30] audit: type=1400 audit(1741537201.284:1033): avc: denied { write } for pid=10024 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 501.327703][ T30] audit: type=1400 audit(1741537201.294:1034): avc: denied { read } for pid=10024 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.045558][T10042] overlayfs: failed to resolve './file1': -2 [ 502.487886][T10044] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 503.103230][ T5869] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 503.635580][ T5869] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 504.617237][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.628304][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.637331][ T5869] usb 3-1: Product: syz [ 504.641499][ T5869] usb 3-1: Manufacturer: syz [ 504.646128][ T5869] usb 3-1: SerialNumber: syz [ 504.660469][ T5869] usb 3-1: config 0 descriptor?? [ 504.745737][T10060] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 505.014923][ T5869] usb 3-1: can't set config #0, error -71 [ 505.026809][ T5869] usb 3-1: USB disconnect, device number 14 [ 505.422824][ T30] audit: type=1400 audit(1741537207.024:1035): avc: denied { execute_no_trans } for pid=10068 comm="syz.3.933" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=21950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 505.652919][ T8206] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 505.843069][ T8206] usb 4-1: Using ep0 maxpacket: 16 [ 505.881554][ T30] audit: type=1400 audit(1741537207.034:1036): avc: denied { mount } for pid=10068 comm="syz.3.933" name="/" dev="configfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 505.916701][ T8206] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 505.938277][ T8206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 505.962501][ T30] audit: type=1400 audit(1741537207.044:1037): avc: denied { mounton } for pid=10068 comm="syz.3.933" path="/180/file0" dev="configfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 506.341199][T10080] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 506.710117][ T30] audit: type=1400 audit(1741537207.044:1038): avc: denied { read } for pid=10068 comm="syz.3.933" name="/" dev="configfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 507.145015][ T8206] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 507.209653][ T30] audit: type=1400 audit(1741537207.044:1039): avc: denied { open } for pid=10068 comm="syz.3.933" path="/180/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 507.256932][ T30] audit: type=1400 audit(1741537208.324:1040): avc: denied { ioctl } for pid=10073 comm="syz.2.934" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 507.284887][ T8206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.303577][ T8206] usb 4-1: Product: syz [ 507.307745][ T8206] usb 4-1: Manufacturer: syz [ 507.312308][ T8206] usb 4-1: SerialNumber: syz [ 507.318900][ T8206] usb 4-1: config 0 descriptor?? [ 507.331805][ T8206] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 507.502845][ T30] audit: type=1400 audit(1741537209.144:1041): avc: denied { map } for pid=10084 comm="syz.4.937" path="socket:[21963]" dev="sockfs" ino=21963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 508.362982][ T30] audit: type=1400 audit(1741537209.474:1042): avc: denied { write } for pid=10088 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 508.810486][ T9] usb 4-1: USB disconnect, device number 14 [ 509.283668][ T30] audit: type=1400 audit(1741537210.924:1043): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 509.409607][ T30] audit: type=1400 audit(1741537210.944:1044): avc: denied { listen } for pid=10100 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 509.919027][T10111] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 510.413797][ T6216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.871639][T10114] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 511.594111][T10123] xt_hashlimit: size too large, truncated to 1048576 [ 511.806212][T10124] netlink: 'syz.4.944': attribute type 10 has an invalid length. [ 511.824189][T10124] batman_adv: batadv0: Adding interface: team0 [ 511.830397][T10124] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.855594][T10124] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 512.308598][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 512.308630][ T30] audit: type=1400 audit(1741537213.934:1046): avc: denied { create } for pid=10126 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.416442][T10153] 9pnet_virtio: no channels available for device 127.0.0.1 [ 515.286409][ T30] audit: type=1400 audit(1741537216.074:1047): avc: denied { mount } for pid=10143 comm="syz.0.949" name="/" dev="pstore" ino=3555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 516.028063][T10157] input: syz1 as /devices/virtual/input/input14 [ 516.191790][T10158] batadv_slave_1: entered promiscuous mode [ 516.255218][T10158] batadv_slave_1: left promiscuous mode [ 516.278930][ T30] audit: type=1400 audit(1741537216.074:1048): avc: denied { read } for pid=10143 comm="syz.0.949" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 516.325192][ T6171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.389965][ T30] audit: type=1400 audit(1741537216.074:1049): avc: denied { open } for pid=10143 comm="syz.0.949" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 516.416580][ T30] audit: type=1400 audit(1741537216.074:1050): avc: denied { ioctl } for pid=10143 comm="syz.0.949" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 516.749716][ T30] audit: type=1400 audit(1741537217.904:1051): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=2863 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.355022][ T30] audit: type=1400 audit(1741537217.904:1052): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2863 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.589710][ T30] audit: type=1400 audit(1741537217.904:1053): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2863 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.665791][T10169] input: syz0 as /devices/virtual/input/input15 [ 517.719479][ T30] audit: type=1400 audit(1741537218.134:1054): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 518.776112][T10184] ƒm speed is unknown, defaulting to 1000 [ 519.163048][T10184] ƒm speed is unknown, defaulting to 1000 [ 519.252853][ T8206] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 519.682802][ T8206] usb 2-1: Using ep0 maxpacket: 32 [ 519.692327][ T8206] usb 2-1: config 64 has an invalid interface number: 31 but max is 0 [ 519.862778][ T8206] usb 2-1: config 64 has no interface number 0 [ 519.870122][ T8206] usb 2-1: config 64 interface 31 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 519.908712][ T8206] usb 2-1: config 64 interface 31 has no altsetting 0 [ 520.900641][ T8206] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=93.de [ 520.913334][ T8206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.534134][ T8206] usb 2-1: can't set config #64, error -71 [ 521.541091][ T8206] usb 2-1: USB disconnect, device number 12 [ 521.681489][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.688806][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.093543][T10215] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 522.112153][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.384420][T10209] bridge0: entered allmulticast mode [ 523.209574][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 524.946963][T10230] Set syz1 is full, maxelem 65536 reached [ 525.066241][ T30] audit: type=1400 audit(1741537226.134:1055): avc: denied { bind } for pid=10220 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 525.152920][ T30] audit: type=1400 audit(1741537226.194:1056): avc: denied { ioctl } for pid=10220 comm="syz.2.969" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 525.178373][ T30] audit: type=1400 audit(1741537226.314:1057): avc: denied { map } for pid=10220 comm="syz.2.969" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 525.263085][T10224] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 525.604356][ T30] audit: type=1400 audit(1741537227.254:1058): avc: denied { write } for pid=10247 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 525.624383][ T30] audit: type=1400 audit(1741537227.254:1059): avc: denied { ioctl } for pid=10247 comm="syz.0.976" path="socket:[22656]" dev="sockfs" ino=22656 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 527.638201][T10271] veth0_to_team: entered promiscuous mode [ 527.644186][T10271] veth0_to_team: entered allmulticast mode [ 529.019111][T10281] usb usb1: usbfs: process 10281 (syz.2.987) did not claim interface 0 before use [ 529.350578][ T30] audit: type=1400 audit(1741537230.994:1060): avc: denied { ioctl } for pid=10295 comm="syz.2.993" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 529.375640][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.544181][ T30] audit: type=1400 audit(1741537231.174:1061): avc: denied { mount } for pid=10288 comm="syz.3.990" name="/" dev="rpc_pipefs" ino=22330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 529.916244][ T30] audit: type=1400 audit(1741537231.564:1062): avc: denied { setopt } for pid=10300 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 530.561764][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 530.762840][T10315] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 531.644373][ T997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.253834][ T30] audit: type=1400 audit(1741537233.694:1063): avc: denied { getopt } for pid=10309 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 534.387962][T10346] i2c i2c-0: Invalid block write size 34 [ 534.582984][ T30] audit: type=1400 audit(1741537236.224:1064): avc: denied { accept } for pid=10342 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.613865][T10346] bridge0: port 1(netdevsim2) entered blocking state [ 534.623234][T10346] bridge0: port 1(netdevsim2) entered disabled state [ 534.630777][T10346] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 534.658251][T10346] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 534.892438][ T30] audit: type=1400 audit(1741537236.534:1065): avc: denied { read write } for pid=10355 comm="syz.0.1006" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.062892][ T30] audit: type=1400 audit(1741537236.534:1066): avc: denied { open } for pid=10355 comm="syz.0.1006" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 536.146816][T10372] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 536.890863][ T8195] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 537.271931][ T6171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.503732][ T8195] usb 3-1: Using ep0 maxpacket: 16 [ 537.625780][ T8195] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 537.635308][ T8195] usb 3-1: config 0 has no interface number 0 [ 537.659628][ T8195] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 537.685129][ T8195] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 537.706324][ T8195] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 537.715744][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.725884][ T8195] usb 3-1: Product: syz [ 537.730064][ T8195] usb 3-1: Manufacturer: syz [ 537.742992][ T8195] usb 3-1: SerialNumber: syz [ 537.774460][ T8195] usb 3-1: config 0 descriptor?? [ 537.779990][T10376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.792857][T10376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.036352][T10376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.048128][T10376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.673368][ T8195] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 538.695133][ T8195] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 538.713728][ T8195] asix 3-1:0.251: probe with driver asix failed with error -5 [ 538.726305][ T8195] usb 3-1: USB disconnect, device number 15 [ 539.029387][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 539.193048][ T30] audit: type=1400 audit(1741537240.714:1067): avc: denied { read } for pid=10402 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.298823][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.022961][T10446] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 545.151499][ T30] audit: type=1400 audit(1741537246.634:1068): avc: denied { read } for pid=10434 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 546.061444][T10467] syz.0.1038: attempt to access beyond end of device [ 546.061444][T10467] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 547.910594][ T30] audit: type=1400 audit(1741537249.114:1069): avc: denied { getopt } for pid=10479 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 548.026203][T10500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1048'. [ 548.242822][ T5916] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 548.425314][ T5916] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 548.538100][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.556244][T10524] netlink: 'syz.2.1059': attribute type 8 has an invalid length. [ 548.566764][ T5916] usb 4-1: config 0 descriptor?? [ 548.571814][T10524] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.1059'. [ 548.599492][ T30] audit: type=1400 audit(1741537250.244:1070): avc: denied { bind } for pid=10528 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.758620][T10532] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 549.315806][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.581076][T10544] overlayfs: failed to resolve './file1': -2 [ 549.676170][T10545] rdma_rxe: rxe_newlink: failed to add lo [ 550.029243][ T5916] ath6kl: Failed to submit usb control message: -71 [ 550.042903][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 550.050033][ T5916] ath6kl: Unable to send get target info: -71 [ 550.062390][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 550.074745][ T5916] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 550.222266][ T5916] usb 4-1: USB disconnect, device number 15 [ 550.710002][T10558] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 551.147425][T10561] bridge0: port 2(macsec0) entered blocking state [ 551.168355][T10561] bridge0: port 2(macsec0) entered disabled state [ 551.178500][T10561] macsec0: entered allmulticast mode [ 551.185722][T10561] macsec0: entered promiscuous mode [ 551.604826][T10570] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 552.342871][ T8197] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 552.372551][ T30] audit: type=1400 audit(1741537254.014:1071): avc: denied { map } for pid=10576 comm="syz.2.1077" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 552.401872][T10577] netlink: 'syz.1.1075': attribute type 8 has an invalid length. [ 552.412064][T10577] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1075'. [ 552.424070][ T30] audit: type=1400 audit(1741537254.014:1072): avc: denied { execute } for pid=10576 comm="syz.2.1077" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 552.522286][ T30] audit: type=1400 audit(1741537254.164:1073): avc: denied { read } for pid=10585 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.536275][ T8197] usb 4-1: Using ep0 maxpacket: 8 [ 552.612146][ T8197] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 552.622138][T10591] netlink: 'syz.1.1081': attribute type 7 has an invalid length. [ 552.639561][ T8197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.645876][T10591] netlink: 'syz.1.1081': attribute type 8 has an invalid length. [ 552.651536][ T8197] usb 4-1: Product: syz [ 552.659850][ T8197] usb 4-1: Manufacturer: syz [ 552.666397][ T8197] usb 4-1: SerialNumber: syz [ 552.680080][ T8197] usb 4-1: config 0 descriptor?? [ 552.686962][T10591] netlink: 'syz.1.1081': attribute type 15 has an invalid length. [ 552.724889][ T8197] gspca_main: sq905-2.14.0 probing 2770:9120 [ 552.737838][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 553.837866][ T8197] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 553.929336][ T8197] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 554.059510][ T8197] usb 4-1: USB disconnect, device number 16 [ 554.176591][T10625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1089'. [ 554.300528][T10625] ƒm speed is unknown, defaulting to 1000 [ 554.645451][T10625] ƒm speed is unknown, defaulting to 1000 [ 554.944126][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1098'. [ 555.446611][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.905148][T10655] ubi31: attaching mtd0 [ 555.919583][T10655] ubi31: scanning is finished [ 556.365061][T10655] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 556.372745][T10655] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 556.380031][T10655] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 556.387262][T10655] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 556.394773][T10655] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 556.401629][T10655] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 556.409734][T10655] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2350649410 [ 556.420856][T10655] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 556.467744][T10660] ubi31: background thread "ubi_bgt31d" started, PID 10660 [ 558.024624][ T30] audit: type=1400 audit(1741537259.674:1074): avc: denied { setopt } for pid=10700 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 558.057297][ T30] audit: type=1400 audit(1741537259.674:1075): avc: denied { shutdown } for pid=10700 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 558.547646][T10718] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 559.011092][ T30] audit: type=1800 audit(1741537260.654:1076): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1127" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 559.292767][ T8195] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 559.486884][ T8195] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 559.576405][ T8195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.747059][ T8195] usb 4-1: config 0 descriptor?? [ 559.881713][ T8195] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 560.241378][ T8195] gp8psk: usb in 128 operation failed. [ 560.253839][ T8195] gp8psk: usb in 137 operation failed. [ 560.265661][ T8195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.283667][ T8195] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 560.294308][ T8195] usb 4-1: media controller created [ 560.312281][ T8195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.330314][ T8195] gp8psk_fe: Frontend attached [ 560.342172][ T8195] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 560.356559][ T30] audit: type=1400 audit(1741537262.004:1077): avc: denied { write } for pid=10763 comm="syz.4.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.393690][ T8195] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 560.573590][T10770] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 560.814240][ T6183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.934495][ T8195] gp8psk: usb in 138 operation failed. [ 560.940473][ T8195] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 560.950045][ T8195] gp8psk: found Genpix USB device pID = 203 (hex) [ 560.966666][ T8195] usb 4-1: USB disconnect, device number 17 [ 561.036352][ T8195] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 561.655515][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'. [ 561.664812][T10789] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 561.993017][ T8195] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 562.097320][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.187569][ T8195] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 562.253785][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.268905][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.315918][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.342967][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.352569][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.373741][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.397834][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.412815][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.445427][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.454948][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.472749][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.493034][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.510767][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.520067][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.571753][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.602254][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.623274][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.663882][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.681946][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.691036][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 562.832519][T10806] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 563.248513][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.272816][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 563.282537][ T8195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.308063][ T8195] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.412730][ T8195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 563.424574][ T8195] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 563.444016][ T8195] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 563.462725][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 563.467929][ T8195] usb 2-1: Product: syz [ 563.472098][ T8195] usb 2-1: Manufacturer: syz [ 563.478831][ T9] usb 4-1: config 0 has no interfaces? [ 563.488114][ T8195] usb 2-1: SerialNumber: syz [ 563.492805][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 563.513182][ T8195] usb 2-1: config 0 descriptor?? [ 563.529572][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.554914][ T8195] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 563.607479][ T9] usb 4-1: config 0 descriptor?? [ 563.831183][ T8197] usb 2-1: USB disconnect, device number 13 [ 563.834351][ T8206] usb 4-1: USB disconnect, device number 18 [ 563.845397][ T8197] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 564.373568][T10840] rdma_op ffff8880364e61f0 conn xmit_rdma 0000000000000000 [ 564.493723][ T30] audit: type=1400 audit(1741537266.134:1078): avc: denied { getopt } for pid=10843 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 565.593895][T10879] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 566.073418][ T8197] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 566.169796][ T30] audit: type=1400 audit(1741537267.814:1079): avc: denied { node_bind } for pid=10883 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 566.244655][ T8197] usb 4-1: Using ep0 maxpacket: 16 [ 566.260025][ T8197] usb 4-1: config 0 has no interfaces? [ 566.276212][ T8197] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 566.295516][ T8197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.313550][ T8197] usb 4-1: config 0 descriptor?? [ 566.375550][T10890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'. [ 566.411609][T10890] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.556273][ T8197] usb 4-1: USB disconnect, device number 19 [ 566.573925][ T6171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.781778][ T30] audit: type=1400 audit(1741537268.424:1080): avc: denied { bind } for pid=10912 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 566.927410][T10917] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 568.412990][ T30] audit: type=1400 audit(1741537270.044:1081): avc: denied { ioctl } for pid=10939 comm="syz.4.1210" path="socket:[25763]" dev="sockfs" ino=25763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 568.760753][ T30] audit: type=1400 audit(1741537270.404:1082): avc: denied { read } for pid=10949 comm="syz.3.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.290963][T10955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1212'. [ 569.317010][T10955] ƒm speed is unknown, defaulting to 1000 [ 569.388869][T10955] ƒm speed is unknown, defaulting to 1000 [ 569.758614][ T8206] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 570.345879][T10967] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 570.593097][ T8206] usb 2-1: Using ep0 maxpacket: 16 [ 570.609225][ T8206] usb 2-1: config 0 has no interfaces? [ 570.620732][ T8206] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 570.630408][ T8206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.650000][ T8206] usb 2-1: config 0 descriptor?? [ 570.677793][ T8195] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 570.744149][T10975] overlayfs: missing 'lowerdir' [ 570.852784][ T8195] usb 3-1: Using ep0 maxpacket: 16 [ 570.870415][ T8195] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 570.900057][ T8195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 570.908134][ T5916] usb 2-1: USB disconnect, device number 14 [ 570.932276][ T8195] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 570.958345][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.993236][ T8195] usb 3-1: Product: syz [ 570.997445][ T8195] usb 3-1: Manufacturer: syz [ 571.002042][ T8195] usb 3-1: SerialNumber: syz [ 571.026672][ T8195] usb 3-1: config 0 descriptor?? [ 571.044711][ T8195] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 572.391255][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.896355][ T8197] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 572.951299][ T5916] usb 3-1: USB disconnect, device number 16 [ 573.074829][ T8197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.098690][ T8197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.135742][ T8197] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 573.157740][ T8197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.214326][ T8197] usb 4-1: config 0 descriptor?? [ 573.272869][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 573.966228][ T8197] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 573.979330][ T8197] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 573.987836][ T8197] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 573.995505][ T8197] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 574.066176][ T8197] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 574.080236][ T8197] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 574.091927][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 574.098778][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.113639][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.123941][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.134649][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.153381][ T9] usb 2-1: config 0 descriptor?? [ 574.159916][ T9] hub 2-1:0.0: USB hub found [ 574.247002][T11021] netlink: 'syz.2.1236': attribute type 8 has an invalid length. [ 574.255031][T11021] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.1236'. [ 574.367336][ T8197] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 32: -71 [ 574.377718][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 574.396081][ T8197] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense firmware info: -71 [ 574.492315][ T8197] playstation 0003:054C:0DF2.0002: Failed to get firmware info from DualSense [ 574.562566][ T8197] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 574.578131][ T8197] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 574.738427][ T8197] usb 4-1: USB disconnect, device number 20 [ 574.838089][ T9] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 575.144473][ T8207] usb 2-1: USB disconnect, device number 15 [ 575.223080][T11040] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 575.962788][ T8206] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 576.310497][ T8206] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 576.319291][ T8206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.361700][ T8206] usb 2-1: config 0 has no interface number 0 [ 576.368027][ T8206] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 576.378068][ T8206] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.397120][ T8206] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 576.442126][ T8206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.478618][ T8206] usb 2-1: Product: syz [ 576.490108][ T8206] usb 2-1: Manufacturer: syz [ 576.496677][ T8206] usb 2-1: SerialNumber: syz [ 576.517306][ T8206] usb 2-1: config 0 descriptor?? [ 577.118648][T11071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 577.254695][ T9] usb 2-1: USB disconnect, device number 16 [ 577.621238][T11097] netlink: 'syz.3.1264': attribute type 11 has an invalid length. [ 577.704793][ T30] audit: type=1400 audit(1741537279.354:1083): avc: denied { read } for pid=11100 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 578.002476][T11122] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 578.020327][T11122] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 578.029073][T11122] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1276'. [ 578.064158][T11122] unsupported nla_type 58 [ 578.148201][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.338117][T11131] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 578.457949][T11128] input: syz0 as /devices/virtual/input/input18 [ 579.032990][ T8206] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 579.285466][ T8206] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 579.303204][ T8206] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 579.340580][ T8206] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 579.360471][ T8206] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 579.392746][ T8206] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 579.412515][ T8206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 579.421538][ T8206] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 579.435166][ T8206] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 579.447474][ T8206] usb 4-1: Product: syz [ 579.463015][ T8206] usb 4-1: Manufacturer: syz [ 579.471533][ T8206] usb 4-1: SerialNumber: syz [ 579.480923][ T8206] usb 4-1: config 0 descriptor?? [ 579.488370][T11137] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.501110][ T8206] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 579.517811][ T8206] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 579.709452][T11173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1295'. [ 579.736984][T11170] block device autoloading is deprecated and will be removed. [ 579.763079][T11170] syz.0.1294: attempt to access beyond end of device [ 579.763079][T11170] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 579.970673][ T9] usb 4-1: USB disconnect, device number 21 [ 579.980878][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 580.062272][T11182] macsec1: entered allmulticast mode [ 580.067929][T11182] veth1_macvtap: entered allmulticast mode [ 580.169451][ T8197] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 580.301211][T11189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1298'. [ 580.329261][T11189] ƒm speed is unknown, defaulting to 1000 [ 580.337626][ T8197] usb 3-1: Using ep0 maxpacket: 8 [ 580.352540][ T8197] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 580.381925][ T8197] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.395406][T11189] ƒm speed is unknown, defaulting to 1000 [ 580.432927][ T8197] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.474568][ T8197] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.584679][ T8197] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.623072][ T8197] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.666444][ T8197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.922541][ T8197] usb 3-1: usb_control_msg returned -32 [ 580.945140][ T8197] usbtmc 3-1:16.0: can't read capabilities [ 581.031090][T11200] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 581.853250][T11210] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 582.155633][T11218] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 582.480343][T11220] ƒm speed is unknown, defaulting to 1000 [ 582.618601][T11220] ƒm speed is unknown, defaulting to 1000 [ 582.841030][ T8195] usb 3-1: USB disconnect, device number 17 [ 583.150345][T11241] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 583.200424][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.245715][T11241] : (slave team0): Enslaving as an active interface with an up link [ 583.413738][ T30] audit: type=1400 audit(1741537285.064:1084): avc: denied { execute } for pid=11248 comm="syz.0.1325" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 583.517137][ T30] audit: type=1400 audit(1741537285.124:1085): avc: denied { map } for pid=11250 comm="syz.2.1326" path="socket:[26500]" dev="sockfs" ino=26500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.615640][ T30] audit: type=1400 audit(1741537285.124:1086): avc: denied { write } for pid=11250 comm="syz.2.1326" path="socket:[26500]" dev="sockfs" ino=26500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.825024][T11267] ip6erspan0: entered promiscuous mode [ 583.853252][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.887635][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 583.988218][ T30] audit: type=1400 audit(1741537285.634:1087): avc: denied { map } for pid=11274 comm="syz.0.1335" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 584.044953][ T30] audit: type=1400 audit(1741537285.634:1088): avc: denied { execute } for pid=11274 comm="syz.0.1335" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 584.085463][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.112860][ T5916] usb 4-1: config 0 has no interface number 0 [ 584.118982][ T5916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.167984][ T5916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.264283][ T5916] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 584.277200][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.351239][ T5916] usb 4-1: config 0 descriptor?? [ 584.642888][ T8207] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 584.815012][ T8207] usb 2-1: Using ep0 maxpacket: 16 [ 584.824930][ T8207] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 584.837432][ T8207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 584.849592][ T8207] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 584.859332][ T8207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.871541][ T5916] usbhid 4-1:0.1: can't add hid device: -71 [ 584.881140][ T5916] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 584.890274][ T8207] usb 2-1: Product: syz [ 584.898016][ T5916] usb 4-1: USB disconnect, device number 22 [ 584.908644][ T8207] usb 2-1: Manufacturer: syz [ 584.919237][ T8207] usb 2-1: SerialNumber: syz [ 584.941674][ T8207] usb 2-1: config 0 descriptor?? [ 584.950189][ T8207] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 585.951161][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 585.972424][T11302] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 585.981533][ T8195] IPVS: starting estimator thread 0... [ 586.082855][T11306] IPVS: using max 28 ests per chain, 67200 per kthread [ 586.323073][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 586.513030][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 586.525201][ T8195] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 586.545285][ T5916] usb 4-1: config 0 has no interfaces? [ 586.562870][ T5916] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 586.572165][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.602869][ T5916] usb 4-1: Product: syz [ 586.624812][ T5916] usb 4-1: Manufacturer: syz [ 586.668696][ T5916] usb 4-1: SerialNumber: syz [ 586.744885][ T8195] usb 3-1: Using ep0 maxpacket: 16 [ 586.748158][ T5916] usb 4-1: config 0 descriptor?? [ 586.824269][ T8195] usb 3-1: config 0 has no interfaces? [ 586.830893][ T8195] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 586.842168][ T8195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.890528][ T8195] usb 3-1: config 0 descriptor?? [ 587.106302][ T8207] usb 2-1: USB disconnect, device number 17 [ 587.147332][ T8197] usb 3-1: USB disconnect, device number 18 [ 587.203504][T11343] netlink: zone id is out of range [ 587.209201][T11343] netlink: zone id is out of range [ 587.219333][T11343] netlink: zone id is out of range [ 587.226129][T11343] netlink: zone id is out of range [ 587.231381][T11343] netlink: zone id is out of range [ 587.240679][T11343] netlink: zone id is out of range [ 587.253190][ T8195] usb 4-1: USB disconnect, device number 23 [ 587.266219][T11343] netlink: zone id is out of range [ 587.278479][T11343] netlink: zone id is out of range [ 587.285406][T11343] netlink: zone id is out of range [ 587.290644][T11343] netlink: zone id is out of range [ 589.034854][ T6171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.086226][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 589.246431][T11377] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1369'. [ 589.268304][T11377] ƒm speed is unknown, defaulting to 1000 [ 589.341568][T11377] ƒm speed is unknown, defaulting to 1000 [ 589.533976][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 589.543956][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 589.552207][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 589.561412][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 589.569627][ T9] usb 2-1: Product: syz [ 589.573925][ T9] usb 2-1: Manufacturer: syz [ 589.578515][ T9] usb 2-1: SerialNumber: syz [ 589.584913][ T9] usb 2-1: config 0 descriptor?? [ 589.592193][ T9] usb 2-1: selecting invalid altsetting 0 [ 590.158201][T11396] ipip0: entered allmulticast mode [ 591.853401][ T8206] usb 2-1: USB disconnect, device number 18 [ 592.003661][ T30] audit: type=1400 audit(1741537293.624:1089): avc: denied { write } for pid=11422 comm="syz.4.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.023238][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.482119][ T30] audit: type=1400 audit(1741537296.124:1090): avc: denied { mounton } for pid=11460 comm="syz.2.1403" path="/277/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 594.753842][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.765558][ T5916] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 595.032791][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 595.049677][ T5916] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 595.065201][ T5916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.084712][ T30] audit: type=1400 audit(1741537296.724:1091): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 595.109052][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.135647][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.349058][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.362105][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 595.371185][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.702945][ T8206] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 595.763243][ T5916] usb 2-1: GET_CAPABILITIES returned 0 [ 595.791410][ T5916] usbtmc 2-1:16.0: can't read capabilities [ 595.892906][ T8206] usb 4-1: Using ep0 maxpacket: 8 [ 595.902638][ T8206] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 596.003510][ T8206] usb 4-1: config 179 has no interface number 0 [ 596.406755][T11479] net_ratelimit: 4 callbacks suppressed [ 596.406772][T11479] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 596.453234][ T8206] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 596.462470][ T8195] usb 2-1: USB disconnect, device number 19 [ 596.465213][ T8206] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 596.484473][ T8206] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 596.505036][ T8206] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 596.522069][ T8206] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 596.605489][ T8206] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 596.614850][ T8206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.626572][T11477] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 596.922625][ T8195] usb 4-1: USB disconnect, device number 24 [ 596.922624][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 596.928581][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 596.946030][ C1] ================================================================== [ 596.954107][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240 [ 596.962326][ C1] Read of size 1 at addr ffff88802780a091 by task syz.4.1413/11490 [ 596.970181][ C1] [ 596.972489][ C1] CPU: 1 UID: 0 PID: 11490 Comm: syz.4.1413 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 596.972501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 596.972507][ C1] Call Trace: [ 596.972511][ C1] [ 596.972515][ C1] dump_stack_lvl+0x116/0x1f0 [ 596.972530][ C1] print_report+0xc3/0x670 [ 596.972541][ C1] ? __virt_addr_valid+0x5e/0x590 [ 596.972551][ C1] ? __phys_addr+0xc6/0x150 [ 596.972561][ C1] kasan_report+0xd9/0x110 [ 596.972571][ C1] ? register_lock_class+0x1033/0x1240 [ 596.972586][ C1] ? register_lock_class+0x1033/0x1240 [ 596.972601][ C1] register_lock_class+0x1033/0x1240 [ 596.972615][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 596.972631][ C1] __lock_acquire+0x135/0x3c40 [ 596.972645][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 596.972658][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 596.972673][ C1] lock_acquire.part.0+0x11b/0x380 [ 596.972686][ C1] ? __wake_up+0x1c/0x60 [ 596.972699][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 596.972712][ C1] ? rcu_is_watching+0x12/0xc0 [ 596.972722][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 596.972733][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 596.972742][ C1] ? __wake_up+0x1c/0x60 [ 596.972753][ C1] ? lock_acquire+0x2f/0xb0 [ 596.972765][ C1] ? __wake_up+0x1c/0x60 [ 596.972777][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 596.972789][ C1] ? __wake_up+0x1c/0x60 [ 596.972801][ C1] __wake_up+0x1c/0x60 [ 596.972813][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 596.972824][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 596.972838][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 596.972852][ C1] dummy_timer+0x17f7/0x3960 [ 596.972867][ C1] ? mark_lock+0xb5/0xc60 [ 596.972879][ C1] ? __pfx_lock_release+0x10/0x10 [ 596.972893][ C1] ? lock_acquire+0x2f/0xb0 [ 596.972905][ C1] ? debug_object_deactivate+0x13b/0x370 [ 596.972918][ C1] ? find_held_lock+0x2d/0x110 [ 596.972928][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 596.972938][ C1] ? __pfx_lock_release+0x10/0x10 [ 596.972951][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 596.972964][ C1] ? mark_held_locks+0x9f/0xe0 [ 596.972977][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 596.972988][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 596.973001][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 596.973012][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 596.973021][ C1] ? read_tsc+0x9/0x20 [ 596.973033][ C1] hrtimer_run_softirq+0x17d/0x350 [ 596.973043][ C1] handle_softirqs+0x213/0x8f0 [ 596.973059][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 596.973073][ C1] __irq_exit_rcu+0x109/0x170 [ 596.973087][ C1] irq_exit_rcu+0x9/0x30 [ 596.973100][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 596.973112][ C1] [ 596.973115][ C1] [ 596.973118][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.973133][ C1] RIP: 0010:__kasan_unpoison_pages+0x0/0x50 [ 596.973145][ C1] Code: fe 31 d2 48 81 e7 00 80 ff ff 81 e6 ff 7f 00 00 e9 25 3e 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 b8 00 00 00 00 00 16 00 00 89 f1 0f b6 d2 48 01 c7 [ 596.973155][ C1] RSP: 0018:ffffc90003f87048 EFLAGS: 00000246 [ 596.973163][ C1] RAX: dffffc0000000000 RBX: ffffea0001248080 RCX: 0000000000000000 [ 596.973169][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffea0001248080 [ 596.973175][ C1] RBP: 0000000000140cca R08: 0000000000001000 R09: 00000000000ff000 [ 596.973184][ C1] R10: ffffffff96ec5cff R11: dffffc0000000000 R12: 0000000000000001 [ 596.973194][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 596.973204][ C1] post_alloc_hook+0x90/0x1b0 [ 596.973214][ C1] get_page_from_freelist+0xfce/0x2f80 [ 596.973227][ C1] ? __pfx___might_resched+0x10/0x10 [ 596.973242][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 596.973252][ C1] ? should_fail_alloc_page+0xee/0x130 [ 596.973264][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 596.973280][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 596.973291][ C1] ? __pfx_mark_lock+0x10/0x10 [ 596.973304][ C1] ? hlock_class+0x4e/0x130 [ 596.973313][ C1] ? mark_lock+0xb5/0xc60 [ 596.973325][ C1] ? hlock_class+0x4e/0x130 [ 596.973335][ C1] ? mark_lock+0xb5/0xc60 [ 596.973346][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 596.973357][ C1] ? hlock_class+0x4e/0x130 [ 596.973366][ C1] ? mark_lock+0xb5/0xc60 [ 596.973378][ C1] ? __pfx_mark_lock+0x10/0x10 [ 596.973392][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 596.973409][ C1] ? policy_nodemask+0xea/0x4e0 [ 596.973420][ C1] alloc_pages_mpol+0x1fc/0x540 [ 596.973437][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 596.973448][ C1] ? find_held_lock+0x2d/0x110 [ 596.973458][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 596.973471][ C1] shmem_alloc_folio+0x135/0x160 [ 596.973483][ C1] shmem_alloc_and_add_folio+0x48e/0xc10 [ 596.973496][ C1] ? shmem_huge_global_enabled+0x72/0x6b0 [ 596.973508][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 596.973521][ C1] ? shmem_allowable_huge_orders+0xd0/0x410 [ 596.973535][ C1] shmem_get_folio_gfp+0x689/0x1530 [ 596.973548][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 596.973561][ C1] ? filemap_map_pages+0xf92/0x16b0 [ 596.973576][ C1] shmem_fault+0x200/0xae0 [ 596.973588][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 596.973602][ C1] ? do_pte_missing+0xde9/0x3e10 [ 596.973611][ C1] ? __pfx_lock_release+0x10/0x10 [ 596.973625][ C1] __do_fault+0x10a/0x490 [ 596.973637][ C1] do_pte_missing+0xecf/0x3e10 [ 596.973649][ C1] __handle_mm_fault+0x1166/0x2c60 [ 596.973660][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 596.973669][ C1] ? follow_page_pte+0x3ac/0x1490 [ 596.973678][ C1] ? __pfx_lock_release+0x10/0x10 [ 596.973695][ C1] handle_mm_fault+0x3fa/0xaa0 [ 596.973705][ C1] __get_user_pages+0x773/0x36f0 [ 596.973716][ C1] ? __pfx_mt_find+0x10/0x10 [ 596.973730][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 596.973743][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 596.973753][ C1] ? __mm_populate+0x21d/0x380 [ 596.973763][ C1] populate_vma_page_range+0x27f/0x3a0 [ 596.973774][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 596.973783][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 596.973797][ C1] ? vm_mmap_pgoff+0x29b/0x3a0 [ 596.973807][ C1] __mm_populate+0x1d6/0x380 [ 596.973816][ C1] ? __pfx___mm_populate+0x10/0x10 [ 596.973826][ C1] ? up_write+0x1b2/0x520 [ 596.973841][ C1] vm_mmap_pgoff+0x2d3/0x3a0 [ 596.973850][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 596.973860][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 596.973871][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 596.973884][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 596.973898][ C1] ? rcu_is_watching+0x12/0xc0 [ 596.973908][ C1] __x64_sys_mmap+0x125/0x190 [ 596.973923][ C1] do_syscall_64+0xcd/0x250 [ 596.973936][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.973949][ C1] RIP: 0033:0x7fe104b8d169 [ 596.973957][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.973966][ C1] RSP: 002b:00007fe10591f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 596.973974][ C1] RAX: ffffffffffffffda RBX: 00007fe104da5fa0 RCX: 00007fe104b8d169 [ 596.973980][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 596.973986][ C1] RBP: 00007fe104c0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 596.973992][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 596.973998][ C1] R13: 0000000000000000 R14: 00007fe104da5fa0 R15: 00007ffdfa9b9268 [ 596.974006][ C1] [ 596.974009][ C1] [ 597.709200][ C1] Allocated by task 8206: [ 597.713493][ C1] kasan_save_stack+0x33/0x60 [ 597.718141][ C1] kasan_save_track+0x14/0x30 [ 597.722797][ C1] __kasan_kmalloc+0xaa/0xb0 [ 597.727364][ C1] xpad_probe+0x27e/0x1f50 [ 597.731763][ C1] usb_probe_interface+0x300/0x9c0 [ 597.736853][ C1] really_probe+0x23e/0xa90 [ 597.741328][ C1] __driver_probe_device+0x1de/0x440 [ 597.746582][ C1] driver_probe_device+0x4c/0x1b0 [ 597.751574][ C1] __device_attach_driver+0x1df/0x310 [ 597.756912][ C1] bus_for_each_drv+0x157/0x1e0 [ 597.761732][ C1] __device_attach+0x1e8/0x4b0 [ 597.766463][ C1] bus_probe_device+0x17f/0x1c0 [ 597.771278][ C1] device_add+0x114b/0x1a70 [ 597.775750][ C1] usb_set_configuration+0x10cb/0x1c50 [ 597.781178][ C1] usb_generic_driver_probe+0xb1/0x110 [ 597.786602][ C1] usb_probe_device+0xec/0x3e0 [ 597.791334][ C1] really_probe+0x23e/0xa90 [ 597.795803][ C1] __driver_probe_device+0x1de/0x440 [ 597.801055][ C1] driver_probe_device+0x4c/0x1b0 [ 597.806046][ C1] __device_attach_driver+0x1df/0x310 [ 597.811385][ C1] bus_for_each_drv+0x157/0x1e0 [ 597.816217][ C1] __device_attach+0x1e8/0x4b0 [ 597.820951][ C1] bus_probe_device+0x17f/0x1c0 [ 597.825775][ C1] device_add+0x114b/0x1a70 [ 597.830247][ C1] usb_new_device+0xd09/0x1a20 [ 597.834978][ C1] hub_event+0x2d9a/0x4e10 [ 597.839360][ C1] process_one_work+0x9c5/0x1ba0 [ 597.844266][ C1] worker_thread+0x6c8/0xf00 [ 597.848824][ C1] kthread+0x3af/0x750 [ 597.852861][ C1] ret_from_fork+0x45/0x80 [ 597.857250][ C1] ret_from_fork_asm+0x1a/0x30 [ 597.861982][ C1] [ 597.864276][ C1] Freed by task 8195: [ 597.868222][ C1] kasan_save_stack+0x33/0x60 [ 597.872868][ C1] kasan_save_track+0x14/0x30 [ 597.877509][ C1] kasan_save_free_info+0x3b/0x60 [ 597.882503][ C1] __kasan_slab_free+0x51/0x70 [ 597.887232][ C1] kfree+0x2c4/0x4d0 [ 597.891111][ C1] xpad_disconnect+0x1cf/0x580 [ 597.895842][ C1] usb_unbind_interface+0x1e2/0x960 [ 597.901008][ C1] device_remove+0x122/0x170 [ 597.905565][ C1] device_release_driver_internal+0x44a/0x610 [ 597.911598][ C1] bus_remove_device+0x22f/0x420 [ 597.916509][ C1] device_del+0x396/0x9f0 [ 597.920803][ C1] usb_disable_device+0x36c/0x7f0 [ 597.925793][ C1] usb_disconnect+0x2e1/0x920 [ 597.930434][ C1] hub_event+0x1da5/0x4e10 [ 597.934825][ C1] process_one_work+0x9c5/0x1ba0 [ 597.939731][ C1] worker_thread+0x6c8/0xf00 [ 597.944291][ C1] kthread+0x3af/0x750 [ 597.948327][ C1] ret_from_fork+0x45/0x80 [ 597.952711][ C1] ret_from_fork_asm+0x1a/0x30 [ 597.957441][ C1] [ 597.959732][ C1] The buggy address belongs to the object at ffff88802780a000 [ 597.959732][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 597.973757][ C1] The buggy address is located 145 bytes inside of [ 597.973757][ C1] freed 1024-byte region [ffff88802780a000, ffff88802780a400) [ 597.987602][ C1] [ 597.989893][ C1] The buggy address belongs to the physical page: [ 597.996266][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27808 [ 598.004989][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 598.013461][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 598.020971][ C1] page_type: f5(slab) [ 598.024920][ C1] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 598.033475][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 598.042025][ C1] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 598.050659][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 598.059304][ C1] head: 00fff00000000003 ffffea00009e0201 ffffffffffffffff 0000000000000000 [ 598.067945][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 598.076585][ C1] page dumped because: kasan: bad access detected [ 598.082960][ C1] page_owner tracks the page as allocated [ 598.088639][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5904, tgid 5904 (kworker/1:6), ts 69217551641, free_ts 69195750928 [ 598.107786][ C1] post_alloc_hook+0x181/0x1b0 [ 598.112522][ C1] get_page_from_freelist+0xfce/0x2f80 [ 598.117946][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 598.123804][ C1] alloc_pages_mpol+0x1fc/0x540 [ 598.128621][ C1] new_slab+0x23d/0x330 [ 598.132752][ C1] ___slab_alloc+0xc5d/0x1720 [ 598.137401][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 598.142742][ C1] __kmalloc_noprof+0x2ec/0x510 [ 598.147557][ C1] ___neigh_create+0x14ee/0x28e0 [ 598.152459][ C1] ip6_finish_output2+0x130c/0x20a0 [ 598.157626][ C1] ip6_finish_output+0x3f9/0x1360 [ 598.162619][ C1] ip6_output+0x1f8/0x540 [ 598.166916][ C1] mld_sendpack+0x9f0/0x11d0 [ 598.171475][ C1] mld_ifc_work+0x740/0xca0 [ 598.175958][ C1] process_one_work+0x9c5/0x1ba0 [ 598.180864][ C1] worker_thread+0x6c8/0xf00 [ 598.185431][ C1] page last free pid 5982 tgid 5969 stack trace: [ 598.191719][ C1] free_frozen_pages+0x6db/0xfb0 [ 598.196628][ C1] __folio_put+0x32a/0x450 [ 598.201017][ C1] put_page+0x21e/0x280 [ 598.205151][ C1] page_to_skb+0x79b/0xa20 [ 598.209546][ C1] receive_buf+0x759/0x30b0 [ 598.214016][ C1] virtnet_poll+0xfe5/0x39f0 [ 598.218573][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 598.223913][ C1] net_rx_action+0xa94/0x1010 [ 598.228557][ C1] handle_softirqs+0x213/0x8f0 [ 598.233296][ C1] __irq_exit_rcu+0x109/0x170 [ 598.237945][ C1] irq_exit_rcu+0x9/0x30 [ 598.242161][ C1] common_interrupt+0xbf/0xe0 [ 598.246817][ C1] asm_common_interrupt+0x26/0x40 [ 598.251812][ C1] [ 598.254101][ C1] Memory state around the buggy address: [ 598.259695][ C1] ffff888027809f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.267720][ C1] ffff88802780a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.275746][ C1] >ffff88802780a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.283768][ C1] ^ [ 598.288320][ C1] ffff88802780a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.296346][ C1] ffff88802780a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.304378][ C1] ================================================================== [ 598.312410][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 598.319574][ C1] CPU: 1 UID: 0 PID: 11490 Comm: syz.4.1413 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 598.330295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.340317][ C1] Call Trace: [ 598.343575][ C1] [ 598.346391][ C1] dump_stack_lvl+0x3d/0x1f0 [ 598.350952][ C1] panic+0x71d/0x800 [ 598.354813][ C1] ? __pfx_panic+0x10/0x10 [ 598.359198][ C1] ? rcu_is_watching+0x12/0xc0 [ 598.363929][ C1] ? __pfx_lock_release+0x10/0x10 [ 598.368924][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 598.374004][ C1] check_panic_on_warn+0xab/0xb0 [ 598.378909][ C1] end_report+0x117/0x180 [ 598.383206][ C1] kasan_report+0xe9/0x110 [ 598.387589][ C1] ? register_lock_class+0x1033/0x1240 [ 598.393018][ C1] ? register_lock_class+0x1033/0x1240 [ 598.398447][ C1] register_lock_class+0x1033/0x1240 [ 598.403703][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 598.409306][ C1] __lock_acquire+0x135/0x3c40 [ 598.414041][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 598.419208][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 598.424380][ C1] lock_acquire.part.0+0x11b/0x380 [ 598.429462][ C1] ? __wake_up+0x1c/0x60 [ 598.433674][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 598.439276][ C1] ? rcu_is_watching+0x12/0xc0 [ 598.444006][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 598.449171][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.454508][ C1] ? __wake_up+0x1c/0x60 [ 598.458719][ C1] ? lock_acquire+0x2f/0xb0 [ 598.463191][ C1] ? __wake_up+0x1c/0x60 [ 598.467403][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 598.472568][ C1] ? __wake_up+0x1c/0x60 [ 598.476780][ C1] __wake_up+0x1c/0x60 [ 598.480825][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 598.486258][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 598.491600][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 598.496770][ C1] dummy_timer+0x17f7/0x3960 [ 598.501342][ C1] ? mark_lock+0xb5/0xc60 [ 598.505641][ C1] ? __pfx_lock_release+0x10/0x10 [ 598.510644][ C1] ? lock_acquire+0x2f/0xb0 [ 598.515116][ C1] ? debug_object_deactivate+0x13b/0x370 [ 598.520724][ C1] ? find_held_lock+0x2d/0x110 [ 598.525455][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 598.530793][ C1] ? __pfx_lock_release+0x10/0x10 [ 598.535787][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 598.540701][ C1] ? mark_held_locks+0x9f/0xe0 [ 598.545439][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 598.551214][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 598.556125][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 598.561300][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 598.566987][ C1] ? read_tsc+0x9/0x20 [ 598.571025][ C1] hrtimer_run_softirq+0x17d/0x350 [ 598.576102][ C1] handle_softirqs+0x213/0x8f0 [ 598.580843][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 598.586101][ C1] __irq_exit_rcu+0x109/0x170 [ 598.590749][ C1] irq_exit_rcu+0x9/0x30 [ 598.594961][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 598.600570][ C1] [ 598.603477][ C1] [ 598.606378][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.612328][ C1] RIP: 0010:__kasan_unpoison_pages+0x0/0x50 [ 598.618199][ C1] Code: fe 31 d2 48 81 e7 00 80 ff ff 81 e6 ff 7f 00 00 e9 25 3e 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 b8 00 00 00 00 00 16 00 00 89 f1 0f b6 d2 48 01 c7 [ 598.637961][ C1] RSP: 0018:ffffc90003f87048 EFLAGS: 00000246 [ 598.644006][ C1] RAX: dffffc0000000000 RBX: ffffea0001248080 RCX: 0000000000000000 [ 598.651957][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffea0001248080 [ 598.659911][ C1] RBP: 0000000000140cca R08: 0000000000001000 R09: 00000000000ff000 [ 598.667856][ C1] R10: ffffffff96ec5cff R11: dffffc0000000000 R12: 0000000000000001 [ 598.675803][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 598.683762][ C1] post_alloc_hook+0x90/0x1b0 [ 598.688415][ C1] get_page_from_freelist+0xfce/0x2f80 [ 598.693849][ C1] ? __pfx___might_resched+0x10/0x10 [ 598.699118][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 598.704981][ C1] ? should_fail_alloc_page+0xee/0x130 [ 598.710413][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 598.716715][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 598.722575][ C1] ? __pfx_mark_lock+0x10/0x10 [ 598.727309][ C1] ? hlock_class+0x4e/0x130 [ 598.731790][ C1] ? mark_lock+0xb5/0xc60 [ 598.736095][ C1] ? hlock_class+0x4e/0x130 [ 598.740566][ C1] ? mark_lock+0xb5/0xc60 [ 598.744865][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 598.751158][ C1] ? hlock_class+0x4e/0x130 [ 598.755630][ C1] ? mark_lock+0xb5/0xc60 [ 598.759928][ C1] ? __pfx_mark_lock+0x10/0x10 [ 598.764663][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 598.770527][ C1] ? policy_nodemask+0xea/0x4e0 [ 598.775344][ C1] alloc_pages_mpol+0x1fc/0x540 [ 598.780163][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 598.785504][ C1] ? find_held_lock+0x2d/0x110 [ 598.790236][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 598.795578][ C1] shmem_alloc_folio+0x135/0x160 [ 598.800483][ C1] shmem_alloc_and_add_folio+0x48e/0xc10 [ 598.806087][ C1] ? shmem_huge_global_enabled+0x72/0x6b0 [ 598.811773][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 598.817896][ C1] ? shmem_allowable_huge_orders+0xd0/0x410 [ 598.823759][ C1] shmem_get_folio_gfp+0x689/0x1530 [ 598.828936][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 598.834537][ C1] ? filemap_map_pages+0xf92/0x16b0 [ 598.839707][ C1] shmem_fault+0x200/0xae0 [ 598.844092][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 598.849008][ C1] ? do_pte_missing+0xde9/0x3e10 [ 598.853911][ C1] ? __pfx_lock_release+0x10/0x10 [ 598.858916][ C1] __do_fault+0x10a/0x490 [ 598.863216][ C1] do_pte_missing+0xecf/0x3e10 [ 598.867946][ C1] __handle_mm_fault+0x1166/0x2c60 [ 598.873033][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 598.878457][ C1] ? follow_page_pte+0x3ac/0x1490 [ 598.883446][ C1] ? __pfx_lock_release+0x10/0x10 [ 598.888443][ C1] handle_mm_fault+0x3fa/0xaa0 [ 598.893174][ C1] __get_user_pages+0x773/0x36f0 [ 598.898079][ C1] ? __pfx_mt_find+0x10/0x10 [ 598.902651][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 598.908254][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 598.913591][ C1] ? __mm_populate+0x21d/0x380 [ 598.918323][ C1] populate_vma_page_range+0x27f/0x3a0 [ 598.923749][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 598.929694][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 598.935470][ C1] ? vm_mmap_pgoff+0x29b/0x3a0 [ 598.940205][ C1] __mm_populate+0x1d6/0x380 [ 598.944761][ C1] ? __pfx___mm_populate+0x10/0x10 [ 598.949838][ C1] ? up_write+0x1b2/0x520 [ 598.954138][ C1] vm_mmap_pgoff+0x2d3/0x3a0 [ 598.958696][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 598.963773][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 598.968679][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 598.973596][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 598.978243][ C1] ? rcu_is_watching+0x12/0xc0 [ 598.982974][ C1] __x64_sys_mmap+0x125/0x190 [ 598.987621][ C1] do_syscall_64+0xcd/0x250 [ 598.992095][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.997957][ C1] RIP: 0033:0x7fe104b8d169 [ 599.002342][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.021917][ C1] RSP: 002b:00007fe10591f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 599.030295][ C1] RAX: ffffffffffffffda RBX: 00007fe104da5fa0 RCX: 00007fe104b8d169 [ 599.038242][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 599.046182][ C1] RBP: 00007fe104c0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 599.054120][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 599.062058][ C1] R13: 0000000000000000 R14: 00007fe104da5fa0 R15: 00007ffdfa9b9268 [ 599.070001][ C1] [ 600.142553][ C1] Shutting down cpus with NMI [ 600.147444][ C1] Kernel Offset: disabled [ 600.151741][ C1] Rebooting in 86400 seconds..