last executing test programs: 2m33.907296183s ago: executing program 1 (id=940): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001600010000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="140000000000ffff7f00000114000200fe8000000000000000000000004000aa"], 0x40}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000030400000000000083778f172e8b9214a5695032ad009a650000", @ANYBLOB="040001000008000008000f0006000000"], 0x28}, 0x1, 0xffffffea, 0x0, 0x4041041}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0x6084, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x3, 0x4147}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6f739a2e2f6465762f6370752f232f6d737200d0bf34ef6b234eae537e424be315a2f53487847b53bc278f06d2ee620699d0583567fc443f751f5182f4a7099d5e7d58e618ab9a2a9665e87b586f013a7c4fb43f762f49db2053ee49f2e8c6d60f1362670a4e2e563faae2f9c2d994fc7595d20a699704e548ca34f870cd2fa89af07f65fadfa2fb2f39445d7b60d77d213109c98d5f45b15e7370dbc7bf4cb98caa89376e902a25025b5c3f88eeb09234052d50e7c8d4fdc35eb84654bc635721930f2b4b8a5cb807e87b3066ffb5803472f77df9d91bf61c8f1851a3db"], &(0x7f0000000280)='*]\x00', 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m31.610374728s ago: executing program 1 (id=948): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000", @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf250b0000000800040008000000080005000000000008000600000000002400028005000d000100000005000d000000000008000700d8b2f71f08000800020000003000038008000300040000000800010001000000060007004e20000014000600fc00"/119], 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x21, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socket$kcm(0x2, 0x3, 0x84) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m31.157451251s ago: executing program 1 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x10, 0x0, 0x0, 0x0, 0x8, 0x16}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x20}}]}, 0x30}}, 0x40080) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) userfaultfd(0x801) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980), 0x0, 0x20008000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000f24000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000500)="0f2c660f38810d1ad30f30f3f7cefe5666b8000000000f23c80f21f866350800e0000f23f86f0f235e660f3882aaf77fbaf80c66b8ea94598d66efbafc0cb83badef", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2m28.580297722s ago: executing program 1 (id=954): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090222000100000000090400020221f768000905013d000401ff070905021008"], 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x480, 0x62) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x80000004, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) (async) keyctl$clear(0x3, 0xfffffffffffffffd) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) close(r1) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r4}, 0x38) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async, rerun: 32) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) (async, rerun: 32) io_submit(0x0, 0x0, 0x0) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 2m28.360725719s ago: executing program 1 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "5bdc2487a315253f", "0ee8e5710b8018567f1636c16b18b844", "57ebed03", "8ae370cf900e7287"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 2m27.179929403s ago: executing program 1 (id=957): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x17) 2m12.05777196s ago: executing program 32 (id=957): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x17) 16.637909796s ago: executing program 3 (id=1446): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 15.288373429s ago: executing program 3 (id=1454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 14.973867469s ago: executing program 3 (id=1459): io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 11.815212999s ago: executing program 0 (id=1474): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 10.087191662s ago: executing program 0 (id=1479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.368965048s ago: executing program 0 (id=1481): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32, @ANYBLOB="0417220e38afaa91e7b27a40631a99f2b46d05000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7897, 0x400, 0x1, 0x232}) connect$phonet_pipe(r1, &(0x7f0000000000), 0x10) socket$kcm(0x10, 0x2, 0x0) 7.867918124s ago: executing program 0 (id=1489): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 7.726335266s ago: executing program 0 (id=1491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}], 0x1, 0x2400c040) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0xf, 0x121080) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0xd66b, 0x6e5, 0x201a, 0x4, 0x4, 0x2, 0x0, 0x3}}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1409, 0x1, 0x50bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40014}, 0x20000004) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x101000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) 6.583499519s ago: executing program 2 (id=1494): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d0001"], 0x10}}, 0x0) 5.596290021s ago: executing program 5 (id=1497): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="38e73a0367f5e0d2daf0271264f9b960f56a839e2d466bb500d6fe36445bf49df119c5d051f49baf56410ba2feedf339e3572b23302d9a3c59d3734957e5f9febaef0ff3f13c4670cd97beac8b99af96062796b00997b1dfbb178797d6effa9bcceb322a0e2da7e0b0f92ba0b856223646569dd863edc7a35cde", 0x7a}], 0x1}, 0x8000) socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000140)="313eb945b8f87b270a9d810fe7a4b1a545", 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 5.520863719s ago: executing program 5 (id=1498): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4.748850201s ago: executing program 2 (id=1500): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0xc0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.513970125s ago: executing program 5 (id=1501): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001280)={r0, r1, r2}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) 4.385092509s ago: executing program 5 (id=1502): r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, 0x0, 0x1) 4.367196178s ago: executing program 5 (id=1503): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c001080"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) utime(0x0, 0x0) 3.439358396s ago: executing program 5 (id=1504): creat(0x0, 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xae, 0x800002, &(0x7f0000006680)) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) pipe2$9p(0x0, 0x0) 3.164833798s ago: executing program 3 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1) 3.163394696s ago: executing program 2 (id=1506): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 3.037217815s ago: executing program 4 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.896792197s ago: executing program 4 (id=1509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x28243, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="010000000000000003000040"]) 2.861163175s ago: executing program 4 (id=1510): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008804) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000002b40)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 2.803148783s ago: executing program 4 (id=1511): fsopen(&(0x7f00000002c0)='ocfs2_dlmfs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7736, 0x80, 0xfffffffc, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.163567688s ago: executing program 4 (id=1512): socket$rds(0x15, 0x5, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.075969089s ago: executing program 2 (id=1513): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000880), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r7, 0x40445637, &(0x7f0000002080)={0xa, "431b8e0e0ff107ce356300", 0x8, 0x4, 0xfffffffc, 0x10, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.936562915s ago: executing program 3 (id=1514): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, &(0x7f0000000440)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.068371169s ago: executing program 2 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 837.008537ms ago: executing program 3 (id=1516): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2ac", 0x2}], 0x1, 0xc) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 831.24474ms ago: executing program 4 (id=1517): io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 159.046231ms ago: executing program 0 (id=1518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=1519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4800) kernel console output (not intermixed with test programs): dm_r:sysadm_t tclass=capability2 permissive=1 [ 368.962581][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.971039][ T30] audit: type=1400 audit(1748434363.166:11454): avc: denied { perfmon } for pid=9930 comm="syz.2.983" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 368.992168][ T30] audit: type=1400 audit(1748434363.166:11455): avc: denied { allowed } for pid=9930 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 369.011411][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.021267][ T30] audit: type=1400 audit(1748434363.186:11456): avc: denied { write } for pid=9924 comm="syz.0.981" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.044777][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.056071][ T30] audit: type=1400 audit(1748434363.186:11457): avc: denied { open } for pid=9924 comm="syz.0.981" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.080030][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.294063][ T9948] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 369.530329][ T9948] netlink: 228 bytes leftover after parsing attributes in process `syz.0.986'. [ 369.735573][ T9948] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 371.186080][ T9978] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 371.252358][ T9978] veth3: entered promiscuous mode [ 371.259907][ T9978] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 371.371331][ T9978] veth5: entered promiscuous mode [ 371.390561][ T9978] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 371.701720][ T9990] fuse: Bad value for 'fd' [ 373.849965][ T30] kauditd_printk_skb: 306 callbacks suppressed [ 373.868386][ T30] audit: type=1400 audit(1748434368.066:11764): avc: denied { create } for pid=10004 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.893188][ T30] audit: type=1400 audit(1748434368.086:11765): avc: denied { module_request } for pid=10004 comm="syz.3.1003" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 373.916156][ T30] audit: type=1400 audit(1748434368.166:11766): avc: denied { setopt } for pid=10004 comm="syz.3.1003" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.077326][ T30] audit: type=1400 audit(1748434368.186:11767): avc: denied { map_create } for pid=10004 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 374.370280][ T30] audit: type=1400 audit(1748434368.186:11768): avc: denied { perfmon } for pid=10004 comm="syz.3.1003" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 374.392150][ T30] audit: type=1400 audit(1748434368.196:11769): avc: denied { map_read map_write } for pid=10004 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 374.412097][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.439805][ T30] audit: type=1400 audit(1748434368.266:11770): avc: denied { recv } for pid=10004 comm="syz.3.1003" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 374.465336][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.494153][ T30] audit: type=1400 audit(1748434368.526:11771): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.720129][ T7679] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 374.820120][ T30] audit: type=1400 audit(1748434368.526:11772): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.850423][ T30] audit: type=1400 audit(1748434368.556:11773): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.895492][ T7679] usb 3-1: Using ep0 maxpacket: 16 [ 374.942374][ T7679] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 375.041623][ T7679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 375.053787][ T7679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 375.096538][ T7679] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 375.167283][ T7679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.185650][ T7679] usb 3-1: Product: syz [ 375.197665][ T7679] usb 3-1: Manufacturer: syz [ 375.210085][ T7679] usb 3-1: SerialNumber: syz [ 375.265101][ T7679] usb 3-1: config 0 descriptor?? [ 375.332431][ T7679] appledisplay 3-1:0.0: Submitting URB failed [ 375.350296][ T7679] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 375.630193][ T5856] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 375.851103][ T7679] usb 3-1: USB disconnect, device number 35 [ 375.940569][T10037] netlink: zone id is out of range [ 375.946147][T10037] netlink: zone id is out of range [ 375.951624][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 375.957348][T10037] netlink: zone id is out of range [ 375.958269][ T5856] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 375.971890][ T5856] usb 4-1: config 0 has no interface number 0 [ 375.972007][T10037] netlink: zone id is out of range [ 375.983200][ T5856] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.983225][ T5856] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 375.983249][ T5856] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.983273][ T5856] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.983611][ T5856] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.994979][T10037] netlink: zone id is out of range [ 376.044650][T10037] netlink: zone id is out of range [ 376.049899][T10037] netlink: zone id is out of range [ 376.057404][T10037] netlink: zone id is out of range [ 376.058276][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.089246][T10037] netlink: zone id is out of range [ 376.090325][ T5856] usb 4-1: config 0 descriptor?? [ 376.097247][T10037] netlink: zone id is out of range [ 376.114952][ T5856] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 378.144287][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.176875][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.185170][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.192665][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.200802][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.208064][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.341636][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 378.537368][T10067] chnl_net:caif_netlink_parms(): no params data found [ 378.852687][ T30] kauditd_printk_skb: 293 callbacks suppressed [ 378.852705][ T30] audit: type=1400 audit(1748434373.336:12067): avc: denied { ioctl } for pid=10080 comm="syz.4.1023" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.883537][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.012240][ T30] audit: type=1400 audit(1748434373.516:12068): avc: denied { map_create } for pid=10074 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.035353][ T30] audit: type=1400 audit(1748434373.516:12069): avc: denied { write } for pid=10074 comm="syz.0.1022" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.089253][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.096756][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.104221][T10067] bridge_slave_0: entered allmulticast mode [ 379.112645][T10067] bridge_slave_0: entered promiscuous mode [ 379.121930][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.129128][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.136464][T10067] bridge_slave_1: entered allmulticast mode [ 379.143857][T10067] bridge_slave_1: entered promiscuous mode [ 379.159138][ T30] audit: type=1400 audit(1748434373.516:12070): avc: denied { prog_load } for pid=10074 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.181748][ T5856] usb 4-1: USB disconnect, device number 24 [ 379.200238][ T5856] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 379.208595][ T30] audit: type=1400 audit(1748434373.516:12071): avc: denied { bpf } for pid=10074 comm="syz.0.1022" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.234001][ T30] audit: type=1400 audit(1748434373.516:12072): avc: denied { perfmon } for pid=10074 comm="syz.0.1022" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.255660][ T30] audit: type=1400 audit(1748434373.516:12073): avc: denied { map } for pid=10074 comm="syz.0.1022" path="socket:[23319]" dev="sockfs" ino=23319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 379.289041][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.305093][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.329784][ T30] audit: type=1400 audit(1748434373.516:12074): avc: denied { write } for pid=10074 comm="syz.0.1022" path="socket:[23318]" dev="sockfs" ino=23318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.370241][ T30] audit: type=1400 audit(1748434373.596:12075): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.406436][ T30] audit: type=1400 audit(1748434373.596:12076): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.411393][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 379.505391][T10067] team0: Port device team_slave_0 added [ 379.535891][T10067] team0: Port device team_slave_1 added [ 379.675753][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.683751][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.162642][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.176034][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.183051][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.209484][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.221982][ T49] Bluetooth: hci5: command tx timeout [ 380.456308][T10105] netlink: 'syz.4.1027': attribute type 4 has an invalid length. [ 380.488154][T10067] hsr_slave_0: entered promiscuous mode [ 380.510995][T10067] hsr_slave_1: entered promiscuous mode [ 380.526761][T10067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.564393][T10067] Cannot create hsr debugfs directory [ 380.585887][T10109] sp0: Synchronizing with TNC [ 380.622172][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 380.629561][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 380.708467][T10111] ceph: No mds server is up or the cluster is laggy [ 380.802843][T10116] hugetlbfs: Unknown parameter 'nrGs' [ 380.941740][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 381.018706][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 381.178816][T10120] input: syz1 as /devices/virtual/input/input15 [ 381.213626][T10120] input: failed to attach handler leds to device input15, error: -6 [ 382.300095][ T49] Bluetooth: hci5: command tx timeout [ 382.525639][T10067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.595173][T10067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.633673][T10067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.652823][T10067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.678381][T10132] netlink: 'syz.0.1033': attribute type 15 has an invalid length. [ 382.686850][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'. [ 383.383942][T10067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.439009][T10067] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.459656][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.466790][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.468089][T10140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1034'. [ 383.499863][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1034'. [ 383.563347][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.570465][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.779292][T10067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.800484][T10067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.937762][T10153] SELinux: Context system_u:object_r:autofs_device_t:s0 is not valid (left unmapped). [ 384.010108][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 384.010138][ T30] audit: type=1400 audit(1748434378.386:12312): avc: denied { execmem } for pid=10146 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 384.224537][ T30] audit: type=1400 audit(1748434378.446:12313): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.248892][ T30] audit: type=1400 audit(1748434378.446:12314): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.273248][ T30] audit: type=1400 audit(1748434378.446:12315): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.299906][ T30] audit: type=1400 audit(1748434378.596:12316): avc: denied { read write } for pid=10146 comm="syz.4.1036" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 384.328055][ T30] audit: type=1400 audit(1748434378.596:12317): avc: denied { open } for pid=10146 comm="syz.4.1036" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 384.380201][ T49] Bluetooth: hci5: command tx timeout [ 384.575288][ T30] audit: type=1400 audit(1748434378.596:12318): avc: denied { mac_admin } for pid=10146 comm="syz.4.1036" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.596476][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.606946][ T30] audit: type=1400 audit(1748434378.606:12319): avc: denied { relabelto } for pid=10146 comm="syz.4.1036" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:autofs_device_t:s0" [ 384.634463][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.680069][ T30] audit: type=1400 audit(1748434378.606:12320): avc: denied { associate } for pid=10146 comm="syz.4.1036" name="video2" dev="devtmpfs" ino=932 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:autofs_device_t:s0" [ 384.729752][ T30] audit: type=1400 audit(1748434378.616:12321): avc: denied { create } for pid=10146 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 384.754495][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 384.848199][T10067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.913367][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 385.337157][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 385.350323][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 385.495244][T10179] ceph: No mds server is up or the cluster is laggy [ 385.621860][ T9] libceph: connect (1)[c::]:6789 error -101 [ 385.643519][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 386.044866][T10201] fuse: Unknown parameter '0x000000000000000c [ 386.044866][T10201] ' [ 386.460628][ T49] Bluetooth: hci5: command tx timeout [ 386.624266][T10067] veth0_vlan: entered promiscuous mode [ 386.856174][T10067] veth1_vlan: entered promiscuous mode [ 386.978554][T10067] veth0_macvtap: entered promiscuous mode [ 386.996060][T10067] veth1_macvtap: entered promiscuous mode [ 387.027826][T10067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.178592][T10067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.198586][T10067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.208029][T10067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.698503][T10067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.707293][T10067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.726416][T10221] : entered promiscuous mode [ 387.888153][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.899820][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.915623][T10226] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1051'. [ 387.945332][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.976135][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.029758][T10226] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1051'. [ 389.173667][ T30] kauditd_printk_skb: 340 callbacks suppressed [ 389.173680][ T30] audit: type=1400 audit(1748434383.736:12662): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.234970][ T30] audit: type=1400 audit(1748434383.736:12663): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.262492][ T30] audit: type=1400 audit(1748434383.776:12664): avc: denied { mounton } for pid=10234 comm="syz.3.1053" path="/208/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 389.285629][ T30] audit: type=1400 audit(1748434383.786:12665): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 389.312452][ T30] audit: type=1400 audit(1748434383.786:12666): avc: denied { mount } for pid=10234 comm="syz.3.1053" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 389.354288][ T30] audit: type=1400 audit(1748434383.816:12667): avc: denied { unmount } for pid=10234 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 389.446337][ T30] audit: type=1400 audit(1748434383.896:12668): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 389.645708][ T30] audit: type=1400 audit(1748434383.896:12669): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.822552][T10254] fuse: Unknown parameter '0x000000000000000c [ 389.822552][T10254] ' [ 389.833669][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 389.839736][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 389.914133][T10250] ceph: No mds server is up or the cluster is laggy [ 390.061025][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 390.067551][ C0] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 390.152766][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 390.158804][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 391.173959][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 392.600295][T10292] SELinux: syz.2.1066 (10292) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 393.230108][T10294] FAULT_INJECTION: forcing a failure. [ 393.230108][T10294] name failslab, interval 1, probability 0, space 0, times 0 [ 393.230178][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.3.1065 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 393.230201][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.230211][T10294] Call Trace: [ 393.230217][T10294] [ 393.230224][T10294] dump_stack_lvl+0x16c/0x1f0 [ 393.230246][T10294] should_fail_ex+0x512/0x640 [ 393.230262][T10294] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 393.230294][T10294] should_failslab+0xc2/0x120 [ 393.230313][T10294] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 393.230339][T10294] ? preempt_schedule_thunk+0x16/0x30 [ 393.230359][T10294] ? copy_process+0x4d8/0x9170 [ 393.230384][T10294] copy_process+0x4d8/0x9170 [ 393.230406][T10294] ? find_held_lock+0x2b/0x80 [ 393.230425][T10294] ? bpf_trace_run4+0x27e/0x5a0 [ 393.230455][T10294] ? bpf_trace_run4+0x2be/0x5a0 [ 393.230483][T10294] ? __pfx_copy_process+0x10/0x10 [ 393.230504][T10294] ? __lock_acquire+0xb8a/0x1c90 [ 393.230531][T10294] ? rcu_is_watching+0x12/0xc0 [ 393.230549][T10294] ? irqentry_exit+0x3b/0x90 [ 393.230565][T10294] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.230603][T10294] kernel_clone+0xfc/0x960 [ 393.230622][T10294] ? finish_task_switch.isra.0+0x221/0xc10 [ 393.230642][T10294] ? __pfx_kernel_clone+0x10/0x10 [ 393.230676][T10294] __do_sys_clone+0xce/0x120 [ 393.230696][T10294] ? __pfx___do_sys_clone+0x10/0x10 [ 393.230716][T10294] ? __pfx___schedule+0x10/0x10 [ 393.230749][T10294] ? ksys_write+0x1ac/0x250 [ 393.230784][T10294] do_syscall_64+0xcd/0x4c0 [ 393.230804][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.230821][T10294] RIP: 0033:0x7ff78478e969 [ 393.230835][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.230852][T10294] RSP: 002b:00007ff7855f2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 393.230869][T10294] RAX: ffffffffffffffda RBX: 00007ff7849b6160 RCX: 00007ff78478e969 [ 393.230880][T10294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070980000 [ 393.230891][T10294] RBP: 00007ff7855f3090 R08: 0000000000000000 R09: 0000000000000000 [ 393.230906][T10294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 393.230917][T10294] R13: 0000000000000000 R14: 00007ff7849b6160 R15: 00007fff62d761e8 [ 393.230941][T10294] [ 393.272101][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 394.005966][T10305] hugetlbfs: Unknown parameter 'nrGs' [ 394.195875][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 394.195914][ T30] audit: type=1400 audit(1748434388.856:12886): avc: denied { prog_load } for pid=10306 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 394.272415][T10308] input: syz1 as /devices/virtual/input/input17 [ 394.273415][T10308] input: failed to attach handler leds to device input17, error: -6 [ 394.284289][ T30] audit: type=1400 audit(1748434388.866:12887): avc: denied { ioctl } for pid=10304 comm="syz.5.1070" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.285494][ T30] audit: type=1400 audit(1748434388.866:12888): avc: denied { bpf } for pid=10306 comm="syz.4.1064" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.285906][ T30] audit: type=1400 audit(1748434388.876:12889): avc: denied { perfmon } for pid=10306 comm="syz.4.1064" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.286233][ T30] audit: type=1400 audit(1748434388.906:12890): avc: denied { create } for pid=10306 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.286502][ T30] audit: type=1400 audit(1748434388.916:12891): avc: denied { create } for pid=10306 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.286795][ T30] audit: type=1400 audit(1748434388.946:12892): avc: denied { allowed } for pid=10309 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.331766][ T30] audit: type=1400 audit(1748434388.966:12893): avc: denied { create } for pid=10309 comm="syz.0.1071" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 394.332413][ T30] audit: type=1400 audit(1748434388.966:12894): avc: denied { map } for pid=10309 comm="syz.0.1071" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 394.332595][ T30] audit: type=1400 audit(1748434388.966:12895): avc: denied { read write } for pid=10309 comm="syz.0.1071" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 394.413611][ T7679] libceph: connect (1)[c::]:6789 error -101 [ 394.870332][ T7679] libceph: mon0 (1)[c::]:6789 connect error [ 394.933753][T10318] bond0: (slave syz_tun): Releasing backup interface [ 394.957016][T10325] netlink: 'syz.4.1072': attribute type 15 has an invalid length. [ 394.970314][T10312] ceph: No mds server is up or the cluster is laggy [ 395.052042][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 395.645114][T10318] bridge_slave_0: left allmulticast mode [ 395.650909][T10318] bridge_slave_0: left promiscuous mode [ 395.657754][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.675888][T10318] bridge_slave_1: left allmulticast mode [ 395.681974][T10318] bridge_slave_1: left promiscuous mode [ 396.154709][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.193734][T10318] bond0: (slave bond_slave_0): Releasing backup interface [ 396.234653][T10318] bond0: (slave bond_slave_1): Releasing backup interface [ 396.556144][T10318] team0: Port device team_slave_0 removed [ 396.569283][T10345] FAULT_INJECTION: forcing a failure. [ 396.569283][T10345] name failslab, interval 1, probability 0, space 0, times 0 [ 396.584049][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.5.1076 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 396.584073][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.584084][T10345] Call Trace: [ 396.584090][T10345] [ 396.584096][T10345] dump_stack_lvl+0x16c/0x1f0 [ 396.584118][T10345] should_fail_ex+0x512/0x640 [ 396.584140][T10345] should_failslab+0xc2/0x120 [ 396.584159][T10345] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 396.584180][T10345] ? sidtab_sid2str_get+0x17a/0x680 [ 396.584203][T10345] kmemdup_noprof+0x29/0x60 [ 396.584221][T10345] sidtab_sid2str_get+0x17a/0x680 [ 396.584242][T10345] sidtab_entry_to_string+0x33/0x110 [ 396.584272][T10345] security_sid_to_context_core+0x35c/0x640 [ 396.584303][T10345] avc_audit_post_callback+0x1aa/0x8f0 [ 396.584324][T10345] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 396.584341][T10345] ? skb_put+0x138/0x1b0 [ 396.584360][T10345] ? audit_log_n_string+0x253/0x540 [ 396.584394][T10345] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 396.584411][T10345] common_lsm_audit+0x24b/0x300 [ 396.584440][T10345] ? __pfx_common_lsm_audit+0x10/0x10 [ 396.584474][T10345] slow_avc_audit+0x186/0x210 [ 396.584495][T10345] ? __pfx_slow_avc_audit+0x10/0x10 [ 396.584512][T10345] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.584540][T10345] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.584565][T10345] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 396.584606][T10345] avc_has_extended_perms+0xa40/0x1090 [ 396.584634][T10345] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 396.584656][T10345] ? kasan_quarantine_put+0x10a/0x240 [ 396.584681][T10345] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.584712][T10345] ? find_held_lock+0x2b/0x80 [ 396.584737][T10345] ? tomoyo_path_number_perm+0x18d/0x580 [ 396.584771][T10345] ? __pfx___might_resched+0x10/0x10 [ 396.584799][T10345] ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 396.584822][T10345] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.584850][T10345] ? hook_file_ioctl_common+0x145/0x410 [ 396.584883][T10345] ? selinux_file_ioctl+0x180/0x270 [ 396.584899][T10345] selinux_file_ioctl+0x180/0x270 [ 396.584920][T10345] security_file_ioctl+0xc6/0x240 [ 396.584947][T10345] __x64_sys_ioctl+0xb7/0x210 [ 396.584975][T10345] do_syscall_64+0xcd/0x4c0 [ 396.584993][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.585011][T10345] RIP: 0033:0x7f950bd8e969 [ 396.585026][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.585043][T10345] RSP: 002b:00007f950ccb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.585060][T10345] RAX: ffffffffffffffda RBX: 00007f950bfb5fa0 RCX: 00007f950bd8e969 [ 396.585071][T10345] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 396.585082][T10345] RBP: 00007f950ccb9090 R08: 0000000000000000 R09: 0000000000000000 [ 396.585092][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.585102][T10345] R13: 0000000000000000 R14: 00007f950bfb5fa0 R15: 00007fff19024568 [ 396.585124][T10345] [ 396.886327][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.951872][T10318] team0: Port device team_slave_1 removed [ 396.959039][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.968093][T10318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.979898][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.989874][T10318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.016022][T10318] bond0: (slave wlan1): Releasing backup interface [ 397.096645][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 397.273669][T10357] mkiss: ax0: crc mode is auto. [ 397.572007][T10361] mkiss: ax0: crc mode is auto. [ 397.595840][T10361] 9pnet_virtio: no channels available for device ./cgroup [ 398.584140][T10370] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1082'. [ 398.751721][T10370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1082'. [ 398.834515][T10372] dlm: Unknown command passed to DLM device : 0 [ 398.834515][T10372] [ 399.204611][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 399.204626][ T30] audit: type=1400 audit(1748434393.866:13126): avc: denied { create } for pid=10375 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.243271][ T30] audit: type=1400 audit(1748434393.896:13127): avc: denied { ioctl } for pid=10369 comm="syz.4.1082" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.302775][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1083'. [ 399.330179][ T30] audit: type=1400 audit(1748434393.906:13128): avc: denied { allowed } for pid=10375 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 399.349660][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 399.375931][ T30] audit: type=1400 audit(1748434393.906:13129): avc: denied { create } for pid=10375 comm="syz.5.1083" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.423399][ T30] audit: type=1400 audit(1748434393.906:13130): avc: denied { map } for pid=10375 comm="syz.5.1083" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.451937][ T30] audit: type=1400 audit(1748434393.906:13131): avc: denied { read write } for pid=10375 comm="syz.5.1083" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.480114][ T9] usb 5-1: device descriptor read/64, error -71 [ 399.487689][ T30] audit: type=1400 audit(1748434393.906:13132): avc: denied { create } for pid=10375 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.514463][ T30] audit: type=1400 audit(1748434393.906:13133): avc: denied { read } for pid=10375 comm="syz.5.1083" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 399.542704][ T30] audit: type=1400 audit(1748434393.906:13134): avc: denied { open } for pid=10375 comm="syz.5.1083" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 399.568160][ T30] audit: type=1400 audit(1748434393.936:13135): avc: denied { prog_load } for pid=10377 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 399.716339][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 399.722423][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 399.907897][ T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 400.231938][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 400.238023][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 400.249383][T10386] ceph: No mds server is up or the cluster is laggy [ 400.390115][ T9] usb 5-1: device descriptor read/64, error -71 [ 400.500772][ T9] usb usb5-port1: attempt power cycle [ 401.034593][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 401.093916][ T9] usb 5-1: device descriptor read/8, error -71 [ 401.142397][T10407] netlink: 'syz.2.1089': attribute type 15 has an invalid length. [ 401.150629][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 401.905377][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 402.118237][ T9] usb 5-1: device descriptor read/8, error -71 [ 402.412556][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 402.440396][ T9] usb usb5-port1: unable to enumerate USB device [ 402.714155][T10421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10421 comm=syz.4.1092 [ 403.206697][ T5856] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 403.380100][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 403.415648][ T5856] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 403.481898][ T5856] usb 1-1: config 0 has no interface number 0 [ 403.488037][ T5856] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.516458][ T5856] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 403.694294][ T5856] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 403.719038][T10425] fuse: Unknown parameter 'fd0x000000000000000c [ 403.719038][T10425] ' [ 403.741939][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 403.770635][ T5856] usb 1-1: Product: syz [ 403.828211][ T5856] usb 1-1: SerialNumber: syz [ 403.843544][ T5856] usb 1-1: config 0 descriptor?? [ 403.862594][ T5856] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 403.874513][ T5856] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input18 [ 404.255181][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 404.255199][ T30] audit: type=1400 audit(1748434398.916:13366): avc: denied { prog_load } for pid=10431 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.264976][T10415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.291467][ T30] audit: type=1400 audit(1748434398.916:13367): avc: denied { bpf } for pid=10431 comm="syz.2.1097" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.312130][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.334603][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 404.394280][ T30] audit: type=1400 audit(1748434398.916:13368): avc: denied { perfmon } for pid=10431 comm="syz.2.1097" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.420570][ T30] audit: type=1400 audit(1748434398.986:13369): avc: denied { create } for pid=10438 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.446397][ T30] audit: type=1400 audit(1748434398.996:13370): avc: denied { ioctl } for pid=10414 comm="syz.0.1091" path="/newroot/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.680174][ T7679] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 404.745443][ T5856] usb 1-1: USB disconnect, device number 25 [ 404.751452][ T30] audit: type=1400 audit(1748434398.996:13371): avc: denied { write } for pid=10438 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.758599][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 404.872534][ T7679] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 404.880025][ T30] audit: type=1400 audit(1748434398.996:13372): avc: denied { ioctl } for pid=10414 comm="syz.0.1091" path="/newroot/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.906087][ T7679] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 404.950951][ T5856] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 404.973352][ T7679] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.992790][ T30] audit: type=1400 audit(1748434399.016:13373): avc: denied { read } for pid=10438 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.997584][ T7679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.022541][ T30] audit: type=1400 audit(1748434399.016:13374): avc: denied { write } for pid=10438 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.043050][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.061771][ T30] audit: type=1400 audit(1748434399.026:13375): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.294405][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'. [ 405.731853][ T5860] usb 3-1: USB disconnect, device number 36 [ 405.740141][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 406.130168][T10463] block device autoloading is deprecated and will be removed. [ 406.416650][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.428391][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.438639][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.453145][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.491024][T10466] netlink: 'syz.3.1102': attribute type 4 has an invalid length. [ 406.531026][T10454] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.577882][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.820116][T10468] netlink: 'syz.0.1103': attribute type 15 has an invalid length. [ 406.834620][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 407.910372][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 407.918984][ T5856] usb 6-1: USB disconnect, device number 2 [ 408.083216][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 408.144804][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 408.172952][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.190971][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.645539][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.659248][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.234494][ T9] usb 3-1: USB disconnect, device number 37 [ 409.282095][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 409.282106][ T30] audit: type=1400 audit(1748434403.946:13613): avc: denied { prog_load } for pid=10496 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 409.350570][ T30] audit: type=1400 audit(1748434403.976:13614): avc: denied { bpf } for pid=10496 comm="syz.0.1111" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.371904][ T30] audit: type=1400 audit(1748434403.976:13615): avc: denied { perfmon } for pid=10496 comm="syz.0.1111" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.410653][ T30] audit: type=1400 audit(1748434403.986:13616): avc: denied { read } for pid=10496 comm="syz.0.1111" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 409.714504][ T30] audit: type=1400 audit(1748434403.986:13617): avc: denied { open } for pid=10496 comm="syz.0.1111" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 409.741235][ T30] audit: type=1400 audit(1748434403.986:13618): avc: denied { read } for pid=10496 comm="syz.0.1111" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 409.765472][ T30] audit: type=1400 audit(1748434403.986:13619): avc: denied { open } for pid=10496 comm="syz.0.1111" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 409.790075][ T30] audit: type=1400 audit(1748434403.986:13620): avc: denied { ioctl } for pid=10496 comm="syz.0.1111" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 409.931016][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 410.387030][ T30] audit: type=1400 audit(1748434404.006:13621): avc: denied { read } for pid=10496 comm="syz.0.1111" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 410.412283][ T30] audit: type=1400 audit(1748434404.006:13622): avc: denied { open } for pid=10496 comm="syz.0.1111" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 410.854192][T10515] netlink: 'syz.0.1114': attribute type 4 has an invalid length. [ 411.113267][T10527] mkiss: ax0: crc mode is auto. [ 411.316608][T10537] netlink: 'syz.5.1121': attribute type 15 has an invalid length. [ 411.362105][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1121'. [ 412.224867][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.234090][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.470223][ T7679] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 412.483334][ T5857] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 412.666154][T10565] xt_hashlimit: size too large, truncated to 1048576 [ 412.770123][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 412.770285][ T7679] usb 3-1: Invalid ep0 maxpacket: 64 [ 412.778655][ T5857] usb 6-1: config 1 interface 0 altsetting 48 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.798290][ T5857] usb 6-1: config 1 interface 0 has no altsetting 0 [ 412.807906][ T5857] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 412.817375][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.819932][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 412.834141][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 412.842231][ T5857] usb 6-1: Product: Þ½ã¢è á¡àµ¯ï¡£îŽ¶á†€à¿¹ï«‘鱡縮톦쑭䦹îœé£’㧚涞䭄૊黵ꕇⅩ᪽갡毜ï€ä£¹áŠ˜ì²ë™ë’•î»£å†‹à¶âŽ‹ï®¸ê³á©©ë„ꬠⅪá¯æ»˜á‰”ఙ䮴匚蹆ࢥã±ì¶ºåªœç±î›ºìƒ‹ç»ë¼»ä©ì€ˆë¡•äº³æ•’䦭긗ⷢæ¹á°·ìƒŸï°˜ï¦‰æ ‡á€­ì†³â­°å” í˜µá…⑤çˆê•å·ë­–壺ì«åŒ¥ãˆ›ëž­ï‡ˆï¶ªâ“”ﾕ惙݀Ἂâ¥å›è±Ÿç±”ê¬ [ 412.880049][ T5857] usb 6-1: Manufacturer: ᚢៃå©á¢ [ 412.930235][ T7679] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 412.933815][ T5857] usb 6-1: SerialNumber: syz [ 412.974776][T10570] ceph: No mds server is up or the cluster is laggy [ 413.063454][T10560] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 413.173682][ T7679] usb 3-1: Invalid ep0 maxpacket: 64 [ 413.198194][ T7679] usb usb3-port1: attempt power cycle [ 413.304456][ T5857] usb 6-1: USB disconnect, device number 3 [ 413.508112][T10581] netlink: 'syz.3.1129': attribute type 4 has an invalid length. [ 413.550186][ T7679] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 413.577831][ T7679] usb 3-1: Invalid ep0 maxpacket: 64 [ 413.720123][ T7679] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 413.744110][ T7679] usb 3-1: Invalid ep0 maxpacket: 64 [ 413.749685][ T7679] usb usb3-port1: unable to enumerate USB device [ 413.794909][T10587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10587 comm=syz.3.1132 [ 413.890056][ T5856] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 413.950059][ T5890] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 414.041497][ T5856] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 414.049810][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 414.080063][ T5890] usb 5-1: device descriptor read/64, error -71 [ 414.082778][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 414.101453][ T5856] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 414.120017][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.128002][ T5856] usb 1-1: Product: syz [ 414.140687][ T5856] usb 1-1: Manufacturer: syz [ 414.145262][ T5856] usb 1-1: SerialNumber: syz [ 414.167169][ T5856] usb 1-1: config 0 descriptor?? [ 414.320033][ T5890] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 414.340037][ T5857] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 414.388858][ T5860] usb 1-1: USB disconnect, device number 26 [ 414.450039][ T5890] usb 5-1: device descriptor read/64, error -71 [ 414.491416][ T5857] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.503272][ T5857] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.513218][ T5857] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.522508][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.534024][T10591] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 414.542890][ T5857] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.560261][ T5890] usb usb5-port1: attempt power cycle [ 414.579546][ T30] kauditd_printk_skb: 303 callbacks suppressed [ 414.579560][ T30] audit: type=1400 audit(1748434409.236:13926): avc: denied { recv } for pid=5809 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.616221][ T30] audit: type=1400 audit(1748434409.246:13927): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.624391][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1134'. [ 414.653599][ T30] audit: type=1400 audit(1748434409.246:13928): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.666278][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 414.681641][ T30] audit: type=1400 audit(1748434409.246:13929): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.713637][ T30] audit: type=1400 audit(1748434409.306:13930): avc: denied { egress } for pid=5145 comm="jbd2/sda1-8" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 414.738535][ T30] audit: type=1400 audit(1748434409.306:13931): avc: denied { sendto } for pid=5145 comm="jbd2/sda1-8" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 414.761893][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.770301][ T30] audit: type=1400 audit(1748434409.316:13932): avc: denied { ioctl } for pid=10583 comm="syz.4.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.795303][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.863299][ T30] audit: type=1400 audit(1748434409.316:13933): avc: denied { ioctl } for pid=10583 comm="syz.4.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.905759][ T30] audit: type=1400 audit(1748434409.316:13934): avc: denied { recv } for pid=10592 comm="syz.3.1134" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.931332][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.940322][ T5890] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 414.991139][ T5890] usb 5-1: device descriptor read/8, error -71 [ 414.993949][ T30] audit: type=1400 audit(1748434409.316:13935): avc: denied { mounton } for pid=10592 comm="syz.3.1134" path="/222/bus" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 415.101124][T10599] netlink: 'syz.0.1136': attribute type 15 has an invalid length. [ 415.120153][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 415.232182][ T5890] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 415.418687][ T5890] usb 5-1: device descriptor read/8, error -71 [ 415.545086][ T5890] usb usb5-port1: unable to enumerate USB device [ 416.500051][ T5890] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 416.590081][ T5860] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 416.934184][ T5860] usb 1-1: config 1 interface 2 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 417.018734][ T5860] usb 1-1: config 1 interface 2 has no altsetting 2 [ 417.060858][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.072313][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.081069][ T5860] usb 1-1: Product: ïºÞªá´œä€£ê¢†ï€á²¬çµ¿æ°±ã—¦ìˆ‚曺è–汫ᗠꂫî¶ã³„鹿∔褐碼텰僳ﱯ䟓í¸Ð‰î’²à¨™â’‹â•Œâ‰µì¢©ìž±ê²ªì¬Šê«’ﺘ裘鼊酗㔩廆屶ꇵ煅炟楴ᗉ艽٬垷㔡혮ãŽæ££çª¯ç¤Ÿï¾¬ì·¯ì¿œì’½íˆïž¯è¶ [ 417.094520][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.105564][ T5860] usb 1-1: Manufacturer: 俵输憟ꋗ凕ꈀ够ê®ãƒ˜å˜©î¹™êº«é’Šâ¬»å¸°æŸê’韛갸ȹè€éœì¤¤ë–¡ [ 417.124830][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.129437][ T5860] usb 1-1: SerialNumber: 맳앹褴캸礥☫雑伃χ騛罃这唗沙㟆죨勲즋ì¶ê»ˆë„¦éŽ¼Éžè¾¦ëŒ…ࣛ庨â‘㵶▲孫 [ 417.151080][ T54] usb 6-1: USB disconnect, device number 4 [ 417.163245][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.192606][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.211444][ T5890] usb 3-1: Product: syz [ 417.219733][ T5890] usb 3-1: Manufacturer: syz [ 417.229685][ T5890] usb 3-1: SerialNumber: syz [ 417.612417][T10624] netlink: 'syz.5.1142': attribute type 4 has an invalid length. [ 417.730385][ T5890] usb 3-1: 0:2 : does not exist [ 418.897287][ T5860] usb 1-1: USB disconnect, device number 27 [ 419.004223][T10630] fuse: Unknown parameter 'fd0x000000000000000c [ 419.004223][T10630] ' [ 419.012901][T10646] netlink: 'syz.0.1148': attribute type 15 has an invalid length. [ 419.023684][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 419.648249][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 419.648263][ T30] audit: type=1400 audit(1748434414.306:14188): avc: denied { prog_load } for pid=10653 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 419.650316][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1150'. [ 419.711526][ T30] audit: type=1400 audit(1748434414.346:14189): avc: denied { recv } for pid=10657 comm="syz.3.1150" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 419.740222][ T30] audit: type=1400 audit(1748434414.346:14190): avc: denied { bpf } for pid=10653 comm="syz.5.1149" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 419.763275][ T30] audit: type=1400 audit(1748434414.346:14191): avc: denied { perfmon } for pid=10653 comm="syz.5.1149" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 419.789936][ T30] audit: type=1400 audit(1748434414.346:14192): avc: denied { bpf } for pid=10653 comm="syz.5.1149" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 419.802260][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 419.861356][ T30] audit: type=1400 audit(1748434414.356:14193): avc: denied { mounton } for pid=10657 comm="syz.3.1150" path="/227/bus" dev="tmpfs" ino=1224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 419.990375][ T30] audit: type=1400 audit(1748434414.356:14194): avc: denied { create } for pid=10653 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.041985][ T9] usb 3-1: USB disconnect, device number 42 [ 420.064116][ T30] audit: type=1400 audit(1748434414.356:14195): avc: denied { bind } for pid=10653 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.113993][ T30] audit: type=1400 audit(1748434414.356:14196): avc: denied { unlink } for pid=10657 comm="syz.3.1150" name="#1a" dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.301492][ T30] audit: type=1400 audit(1748434414.446:14197): avc: denied { setopt } for pid=10653 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.891337][T10687] netlink: 'syz.5.1154': attribute type 4 has an invalid length. [ 421.609571][T10696] FAULT_INJECTION: forcing a failure. [ 421.609571][T10696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.640047][T10696] CPU: 1 UID: 0 PID: 10696 Comm: syz.2.1159 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 421.640074][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.640083][T10696] Call Trace: [ 421.640089][T10696] [ 421.640096][T10696] dump_stack_lvl+0x16c/0x1f0 [ 421.640117][T10696] should_fail_ex+0x512/0x640 [ 421.640138][T10696] _copy_from_iter+0x29f/0x16f0 [ 421.640159][T10696] ? __alloc_skb+0x200/0x380 [ 421.640182][T10696] ? __pfx__copy_from_iter+0x10/0x10 [ 421.640202][T10696] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 421.640235][T10696] netlink_sendmsg+0x829/0xdd0 [ 421.640264][T10696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.640299][T10696] ____sys_sendmsg+0xa95/0xc70 [ 421.640316][T10696] ? copy_msghdr_from_user+0x10a/0x160 [ 421.640339][T10696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.640367][T10696] ___sys_sendmsg+0x134/0x1d0 [ 421.640391][T10696] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.640411][T10696] ? __lock_acquire+0x622/0x1c90 [ 421.640466][T10696] __sys_sendmsg+0x16d/0x220 [ 421.640488][T10696] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.640527][T10696] do_syscall_64+0xcd/0x4c0 [ 421.640547][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.640566][T10696] RIP: 0033:0x7fe1b7d8e969 [ 421.640580][T10696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.640596][T10696] RSP: 002b:00007fe1b5bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.640613][T10696] RAX: ffffffffffffffda RBX: 00007fe1b7fb5fa0 RCX: 00007fe1b7d8e969 [ 421.640624][T10696] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 421.640634][T10696] RBP: 00007fe1b5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.640644][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.640654][T10696] R13: 0000000000000000 R14: 00007fe1b7fb5fa0 R15: 00007ffdea447858 [ 421.640677][T10696] [ 422.150262][ T5890] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 422.290199][ T5890] usb 5-1: device descriptor read/64, error -71 [ 423.080039][ T5890] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 423.210134][ T5890] usb 5-1: device descriptor read/64, error -71 [ 423.630794][ T5890] usb usb5-port1: attempt power cycle [ 424.297990][T10736] netlink: 'syz.5.1168': attribute type 4 has an invalid length. [ 424.422960][ T7679] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 424.480262][ T5890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 424.560755][ T5890] usb 5-1: device descriptor read/8, error -71 [ 424.656883][ T30] kauditd_printk_skb: 281 callbacks suppressed [ 424.656892][ T30] audit: type=1400 audit(1748434419.316:14479): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.712302][ T7679] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 424.732636][ T7679] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 424.749824][T10740] fuse: Bad value for 'group_id' [ 424.762373][ T7679] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 424.762380][T10740] fuse: Bad value for 'group_id' [ 424.762464][ T7679] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 424.787316][ T30] audit: type=1400 audit(1748434419.326:14480): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 424.812681][ T7679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 424.822849][ T30] audit: type=1400 audit(1748434419.346:14481): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 424.848807][ T7679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 424.859105][ T7679] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 424.885485][ T30] audit: type=1400 audit(1748434419.356:14482): avc: denied { read write open } for pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.919463][ T7679] usb 1-1: string descriptor 0 read error: -22 [ 424.934161][ T7679] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 424.950954][ T7679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.959224][ T30] audit: type=1400 audit(1748434419.356:14483): avc: denied { ioctl } for pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.076417][ T7679] usb 1-1: config 0 descriptor?? [ 425.107042][ T7679] hub 1-1:0.0: bad descriptor, ignoring hub [ 425.109430][T10746] 9pnet: bogus RWRITE count (2 > 1) [ 425.132232][ T7679] hub 1-1:0.0: probe with driver hub failed with error -5 [ 425.153849][ T30] audit: type=1400 audit(1748434419.376:14484): avc: denied { ioctl } for pid=10728 comm="syz.0.1166" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.194184][ T7679] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 425.208866][ T30] audit: type=1400 audit(1748434419.396:14485): avc: denied { allowed } for pid=10741 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 425.250749][ T30] audit: type=1400 audit(1748434419.406:14486): avc: denied { read write } for pid=10734 comm="syz.2.1167" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 425.292512][ T30] audit: type=1400 audit(1748434419.406:14487): avc: denied { read write open } for pid=10734 comm="syz.2.1167" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 425.319240][ T30] audit: type=1400 audit(1748434419.406:14488): avc: denied { mounton } for pid=10734 comm="syz.2.1167" path="/214/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.380810][ T7679] usb 1-1: USB disconnect, device number 28 [ 425.546176][T10754] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1173'. [ 426.034351][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1175'. [ 426.465496][T10773] 9pnet_fd: Insufficient options for proto=fd [ 427.093148][T10781] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 427.832095][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 428.338294][T10802] fuse: Bad value for 'fd' [ 429.633843][T10808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1188'. [ 429.665510][ T30] kauditd_printk_skb: 289 callbacks suppressed [ 429.665524][ T30] audit: type=1400 audit(1748434424.326:14774): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.695932][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.777988][ T30] audit: type=1400 audit(1748434424.356:14775): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 430.140445][ T30] audit: type=1400 audit(1748434424.376:14776): avc: denied { read write open } for pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.165557][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.244938][ T30] audit: type=1400 audit(1748434424.376:14777): avc: denied { ioctl } for pid=5819 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.251518][ T7679] kernel write not supported for file bpf-map (pid: 7679 comm: kworker/1:7) [ 430.301368][T10818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.310340][T10820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.316863][T10820] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 430.330744][ T30] audit: type=1400 audit(1748434424.426:14778): avc: denied { read write } for pid=10807 comm="syz.3.1188" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 430.355190][T10818] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64 [ 430.355289][T10820] audit: backlog limit exceeded [ 430.363090][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 430.489134][T10822] netlink: 'syz.5.1192': attribute type 4 has an invalid length. [ 430.580096][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 430.620745][ T5890] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 430.650020][ T5890] usb 1-1: config 0 has no interface number 0 [ 430.680339][ T5890] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.706899][ T5890] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 430.726700][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 430.743631][ T5890] usb 1-1: Product: syz [ 430.752478][ T5890] usb 1-1: SerialNumber: syz [ 430.791629][ T5890] usb 1-1: config 0 descriptor?? [ 430.813627][ T5890] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 430.834598][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 431.088438][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 431.095543][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 431.180404][ T5890] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 431.421618][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 431.427669][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 431.485264][T10835] ceph: No mds server is up or the cluster is laggy [ 431.866969][ T5890] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 431.897397][ T5890] usb 4-1: config 0 has no interface number 0 [ 432.379382][ T5890] usb 4-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=87.db [ 432.452112][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.463622][ T5890] usb 4-1: Product: syz [ 432.470156][ T5890] usb 4-1: Manufacturer: syz [ 432.480123][ T5890] usb 4-1: SerialNumber: syz [ 432.527498][ T5890] usb 4-1: config 0 descriptor?? [ 432.572129][ T5890] gspca_main: sonixb-2.14.0 probing 0c45:6007 [ 432.930185][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 433.125999][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 433.459476][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 433.470210][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.477348][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.490009][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.497132][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.510090][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 433.516402][ T9] usb 1-1: USB disconnect, device number 29 [ 433.517022][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 433.522947][ T5857] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 433.671994][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 433.672596][ T5890] sonixb 4-1:0.189: Error reading register 00: -110 [ 433.751841][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.764441][ T5856] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 433.772624][ T5857] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.776706][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.794242][ T5857] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.797265][ T5856] usb 6-1: config 0 descriptor?? [ 433.818564][ T5857] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.838185][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.870600][T10850] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 433.880647][ T5857] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.992380][ T5860] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 434.181380][ T5860] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 434.193604][ T5860] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 434.204587][ T5860] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.214771][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.231628][ T5856] logitech 0003:046D:C287.000E: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 434.243468][ T5856] logitech 0003:046D:C287.000E: no inputs found [ 434.384127][T10860] fuse: Bad value for 'group_id' [ 434.389182][T10860] fuse: Bad value for 'group_id' [ 434.583870][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.594311][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.745149][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 434.745190][ T30] audit: type=1400 audit(1748434429.216:15036): avc: denied { create } for pid=10854 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.828882][ T30] audit: type=1400 audit(1748434429.236:15037): avc: denied { read write } for pid=10854 comm="syz.4.1201" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.832831][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 434.854894][ T30] audit: type=1400 audit(1748434429.236:15038): avc: denied { open } for pid=10854 comm="syz.4.1201" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.885439][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1198'. [ 434.909574][ T30] audit: type=1400 audit(1748434429.236:15039): avc: denied { ioctl } for pid=10854 comm="syz.4.1201" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.936141][ T30] audit: type=1400 audit(1748434429.326:15040): avc: denied { read write } for pid=10854 comm="syz.4.1201" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 434.961084][ T30] audit: type=1400 audit(1748434429.326:15041): avc: denied { open } for pid=10854 comm="syz.4.1201" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 434.985562][ T30] audit: type=1400 audit(1748434429.336:15042): avc: denied { recv } for pid=10854 comm="syz.4.1201" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 435.014344][ T30] audit: type=1400 audit(1748434429.406:15043): avc: denied { setopt } for pid=10845 comm="syz.5.1198" laddr=fe80::13 lport=42032 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 435.039915][ T30] audit: type=1400 audit(1748434429.406:15044): avc: denied { ioctl } for pid=10845 comm="syz.5.1198" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26388 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.067696][ T30] audit: type=1400 audit(1748434429.566:15045): avc: denied { name_bind } for pid=10845 comm="syz.5.1198" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 435.103075][ T5856] usb 6-1: USB disconnect, device number 5 [ 435.127559][ T5860] usb 5-1: USB disconnect, device number 44 [ 435.163059][ T5857] usb 4-1: USB disconnect, device number 25 [ 435.896789][T10871] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 435.985439][ T5857] usb 3-1: USB disconnect, device number 43 [ 436.248678][T10877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1206'. [ 436.872343][T10889] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1213'. [ 438.956526][T10927] sctp: [Deprecated]: syz.3.1219 (pid 10927) Use of int in max_burst socket option deprecated. [ 438.956526][T10927] Use struct sctp_assoc_value instead [ 439.582392][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.772188][ T30] kauditd_printk_skb: 322 callbacks suppressed [ 439.772224][ T30] audit: type=1400 audit(1748434434.436:15368): avc: denied { recv } for pid=10934 comm="syz.3.1226" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 439.874003][ T5996] Bluetooth: (null): Too short H5 packet [ 439.880505][ T5996] Bluetooth: (null): Invalid header checksum [ 439.940055][ T5996] Bluetooth: (null): Invalid header checksum [ 440.020394][ T3425] Bluetooth: (null): Invalid header checksum [ 440.080033][ T30] audit: type=1400 audit(1748434434.436:15369): avc: denied { recv } for pid=10938 comm="syz.5.1227" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 440.108648][ T36] Bluetooth: (null): Invalid header checksum [ 440.135996][ T30] audit: type=1400 audit(1748434434.436:15370): avc: denied { create } for pid=10934 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.174247][ T30] audit: type=1400 audit(1748434434.436:15371): avc: denied { create } for pid=10934 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.294120][ T64] Bluetooth: (null): Invalid header checksum [ 440.306904][ T30] audit: type=1400 audit(1748434434.436:15372): avc: denied { getopt } for pid=10934 comm="syz.3.1226" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.390719][ T36] Bluetooth: (null): Invalid header checksum [ 440.527494][ T36] Bluetooth: (null): Invalid header checksum [ 440.544972][ T36] Bluetooth: (null): Invalid header checksum [ 440.576340][ T30] audit: type=1400 audit(1748434434.436:15373): avc: denied { setopt } for pid=10934 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.601549][ T30] audit: type=1400 audit(1748434434.686:15374): avc: denied { read write } for pid=10941 comm="syz.4.1228" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.628953][ T30] audit: type=1400 audit(1748434434.686:15375): avc: denied { open } for pid=10941 comm="syz.4.1228" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.656211][ T30] audit: type=1400 audit(1748434434.686:15376): avc: denied { map_create } for pid=10943 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.676299][ T36] Bluetooth: (null): Invalid header checksum [ 440.687844][ T30] audit: type=1400 audit(1748434434.686:15377): avc: denied { bpf } for pid=10943 comm="syz.0.1229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.888681][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 440.960542][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 441.431607][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.464267][ T9] usb 5-1: config 0 has no interface number 0 [ 441.488805][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.456659][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.467173][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 442.478356][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.511845][ T9] usb 5-1: config 0 descriptor?? [ 443.055939][T10999] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1244'. [ 444.789600][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 444.789617][ T30] audit: type=1400 audit(1748434438.176:15531): avc: denied { create } for pid=11000 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 444.850526][ T30] audit: type=1400 audit(1748434438.186:15532): avc: denied { write } for pid=11000 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.900013][ T30] audit: type=1400 audit(1748434438.366:15533): avc: denied { recv } for pid=11000 comm="syz.3.1246" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 445.017430][ T30] audit: type=1400 audit(1748434438.846:15534): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 445.036392][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 445.070108][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 445.110218][ T30] audit: type=1400 audit(1748434439.456:15535): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.640044][ T9] usb 5-1: USB disconnect, device number 45 [ 445.647965][ T5857] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 445.649244][ T30] audit: type=1400 audit(1748434439.456:15536): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.723749][ T30] audit: type=1400 audit(1748434439.456:15537): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.785814][ T30] audit: type=1400 audit(1748434439.546:15538): avc: denied { recv } for pid=5819 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 445.885207][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.765952][ T5811] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.772542][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.782353][ T5811] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 446.790083][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.856354][ T5857] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.876195][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.889287][ T5857] usb 3-1: config 0 descriptor?? [ 446.894765][ T5857] usb 3-1: can't set config #0, error -71 [ 446.903954][ T5857] usb 3-1: USB disconnect, device number 44 [ 447.350963][ T49] Bluetooth: hci5: command 0x0405 tx timeout [ 448.103087][ T49] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 448.379050][T11049] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.392689][T11062] IPv6: Can't replace route, no match found [ 449.453130][T11062] sp0: Synchronizing with TNC [ 450.196613][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 450.196638][ T30] audit: type=1400 audit(1748434444.856:15720): avc: denied { recv } for pid=11030 comm="syz.2.1257" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 450.228461][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.292564][ T30] audit: type=1400 audit(1748434444.956:15721): avc: denied { create } for pid=11054 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 450.360180][ T30] audit: type=1400 audit(1748434445.016:15722): avc: denied { write } for pid=11054 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 450.431067][ T30] audit: type=1400 audit(1748434445.016:15723): avc: denied { connect } for pid=11054 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 450.533214][ T30] audit: type=1400 audit(1748434445.016:15724): avc: denied { name_connect } for pid=11054 comm="syz.0.1265" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 450.782649][ T30] audit: type=1400 audit(1748434445.066:15725): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.806900][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.939597][ T30] audit: type=1400 audit(1748434445.066:15726): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.645401][ T30] audit: type=1400 audit(1748434445.066:15727): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.860648][T10067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 451.861250][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 452.491797][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1273'. [ 455.279598][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 455.279613][ T30] audit: type=1400 audit(1748434449.936:15892): avc: denied { create } for pid=11120 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.379656][T11115] syz.5.1281 (11115): drop_caches: 2 [ 455.460176][ T30] audit: type=1400 audit(1748434450.046:15893): avc: denied { map_create } for pid=11119 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.521199][ T30] audit: type=1400 audit(1748434450.046:15894): avc: denied { map_read map_write } for pid=11119 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.543890][ T30] audit: type=1400 audit(1748434450.046:15895): avc: denied { prog_load } for pid=11119 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.577865][ T30] audit: type=1400 audit(1748434450.046:15896): avc: denied { bpf } for pid=11119 comm="syz.4.1285" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.607016][ T30] audit: type=1400 audit(1748434450.046:15897): avc: denied { perfmon } for pid=11119 comm="syz.4.1285" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.628975][ T30] audit: type=1400 audit(1748434450.046:15898): avc: denied { prog_run } for pid=11119 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.649423][ T30] audit: type=1400 audit(1748434450.056:15899): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 455.680133][ T30] audit: type=1400 audit(1748434450.056:15900): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.706918][ T30] audit: type=1400 audit(1748434450.066:15901): avc: denied { open } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.984497][T11136] net_ratelimit: 2 callbacks suppressed [ 455.984526][T11136] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 456.397323][T11136] hfs: unable to load iocharset "io#harset" [ 458.147578][T11145] Set syz1 is full, maxelem 65536 reached [ 460.838573][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 460.838591][ T30] audit: type=1400 audit(1748434454.946:16060): avc: denied { recv } for pid=11170 comm="syz.3.1303" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.034250][ T30] audit: type=1400 audit(1748434455.536:16061): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.061263][ T30] audit: type=1400 audit(1748434455.536:16062): avc: denied { open } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.539715][ T30] audit: type=1400 audit(1748434455.536:16063): avc: denied { ioctl } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.567555][ T30] audit: type=1400 audit(1748434455.546:16064): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.603145][ T30] audit: type=1400 audit(1748434455.546:16065): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.864945][ T30] audit: type=1400 audit(1748434455.546:16066): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.113460][ T30] audit: type=1400 audit(1748434455.546:16067): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 462.629490][ T30] audit: type=1400 audit(1748434455.556:16068): avc: denied { recv } for pid=13 comm="kworker/u8:1" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 462.662936][ T30] audit: type=1400 audit(1748434455.556:16069): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.170102][ T5856] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 464.337842][ T5856] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.529543][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 464.784966][ T5856] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 464.810584][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.856249][ T5856] usb 1-1: config 0 descriptor?? [ 465.935135][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 465.935151][ T30] audit: type=1400 audit(1748434460.596:16209): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 466.019807][ T30] audit: type=1400 audit(1748434460.676:16210): avc: denied { recv } for pid=10067 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 466.048710][ T30] audit: type=1400 audit(1748434460.706:16211): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.076314][ T30] audit: type=1400 audit(1748434460.706:16212): avc: denied { open } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.105959][ T30] audit: type=1400 audit(1748434460.706:16213): avc: denied { ioctl } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.265952][ T30] audit: type=1400 audit(1748434460.826:16214): avc: denied { execmem } for pid=11233 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 466.285494][ T30] audit: type=1400 audit(1748434460.876:16215): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 466.333698][ T30] audit: type=1400 audit(1748434460.996:16216): avc: denied { create } for pid=11232 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.455415][ T5856] usbhid 1-1:0.0: can't add hid device: -71 [ 467.462006][ T5856] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.500172][ T30] audit: type=1400 audit(1748434461.026:16217): avc: denied { prog_load } for pid=11232 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.540854][ T5856] usb 1-1: USB disconnect, device number 30 [ 467.565914][ T30] audit: type=1400 audit(1748434461.026:16218): avc: denied { bpf } for pid=11232 comm="syz.4.1322" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 468.870738][T11265] sp0: Synchronizing with TNC [ 469.062406][T11251] [U] è [ 470.375412][ T973] page_pool_release_retry() stalled pool shutdown: id 29, 17 inflight 60 sec [ 471.219491][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 471.219507][ T30] audit: type=1400 audit(1748434465.876:16375): avc: denied { recv } for pid=11279 comm="syz.4.1336" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 471.352987][ T30] audit: type=1400 audit(1748434465.936:16376): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 471.398713][ T30] audit: type=1400 audit(1748434465.936:16377): avc: denied { module_request } for pid=11279 comm="syz.4.1336" kmod="nft-obj-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 471.452926][ T30] audit: type=1400 audit(1748434465.936:16378): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 471.506783][ T30] audit: type=1400 audit(1748434465.936:16379): avc: denied { recv } for pid=11281 comm="syz.2.1335" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 471.538355][ T30] audit: type=1400 audit(1748434465.956:16380): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.602071][ T30] audit: type=1400 audit(1748434465.956:16381): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.626325][ T30] audit: type=1400 audit(1748434465.956:16382): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.685354][ T30] audit: type=1400 audit(1748434465.996:16383): avc: denied { read } for pid=11286 comm="syz.3.1338" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.731965][ T30] audit: type=1400 audit(1748434465.996:16384): avc: denied { open } for pid=11286 comm="syz.3.1338" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 473.557393][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 473.654333][T11318] erspan0: entered promiscuous mode [ 473.661300][T11318] erspan0: left promiscuous mode [ 473.731607][ T49] Bluetooth: hci5: Malformed LE Event: 0x0d [ 474.300476][ T7679] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 474.539903][ T7679] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.758039][ T7679] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.795945][ T7679] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.973830][ T7679] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 475.440271][ T7679] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 475.491697][ T7679] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.509422][ T7679] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.535561][ T7679] usb 3-1: Product: syz [ 475.552461][ T7679] usb 3-1: Manufacturer: syz [ 475.596889][ T7679] cdc_wdm 3-1:1.0: skipping garbage [ 475.700045][ T7679] cdc_wdm 3-1:1.0: skipping garbage [ 475.745011][ T7679] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 475.760046][ T7679] cdc_wdm 3-1:1.0: Unknown control protocol [ 476.226636][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 476.226653][ T30] audit: type=1400 audit(1748434470.886:16631): avc: denied { recv } for pid=11368 comm="syz.5.1368" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 476.280134][ T30] audit: type=1400 audit(1748434470.926:16632): avc: denied { read write } for pid=11368 comm="syz.5.1368" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 476.328712][ T30] audit: type=1400 audit(1748434470.946:16633): avc: denied { open } for pid=11368 comm="syz.5.1368" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 476.402508][ T30] audit: type=1400 audit(1748434470.946:16634): avc: denied { mounton } for pid=11368 comm="syz.5.1368" path="/72/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 476.417581][T11370] block device autoloading is deprecated and will be removed. [ 476.472099][ T30] audit: type=1400 audit(1748434470.946:16635): avc: denied { mount } for pid=11368 comm="syz.5.1368" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 476.518888][ T30] audit: type=1400 audit(1748434471.036:16636): avc: denied { read } for pid=11368 comm="syz.5.1368" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 476.593874][ T30] audit: type=1400 audit(1748434471.036:16637): avc: denied { read open } for pid=11368 comm="syz.5.1368" path="/72/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 476.670974][ T30] audit: type=1400 audit(1748434471.056:16638): avc: denied { read write } for pid=11332 comm="syz.2.1355" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 476.743327][ T30] audit: type=1400 audit(1748434471.056:16639): avc: denied { read write open } for pid=11332 comm="syz.2.1355" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 476.801567][ T30] audit: type=1400 audit(1748434471.066:16640): avc: denied { ioctl } for pid=11332 comm="syz.2.1355" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 477.584571][ T7679] usb 3-1: USB disconnect, device number 45 [ 478.409071][T11411] usb usb8: usbfs: process 11411 (syz.5.1384) did not claim interface 0 before use [ 479.384378][T11421] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 480.159110][T11419] "syz.3.1387" (11419) uses obsolete ecb(arc4) skcipher [ 480.167746][T11419] 9pnet_virtio: no channels available for device syz [ 481.019636][T11432] overlayfs: failed to clone upperpath [ 481.233082][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 481.233098][ T30] audit: type=1400 audit(1748434475.896:16850): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 481.828088][ T30] audit: type=1400 audit(1748434475.966:16851): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.888227][ T30] audit: type=1400 audit(1748434475.966:16852): avc: denied { open } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.917986][ T30] audit: type=1400 audit(1748434475.966:16853): avc: denied { ioctl } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.949085][ T30] audit: type=1400 audit(1748434475.966:16854): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 481.981447][ T30] audit: type=1400 audit(1748434476.046:16855): avc: denied { prog_load } for pid=11433 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.010162][ T30] audit: type=1400 audit(1748434476.046:16856): avc: denied { bpf } for pid=11433 comm="syz.4.1393" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.075711][ T30] audit: type=1400 audit(1748434476.526:16857): avc: denied { read write } for pid=11440 comm="syz.5.1396" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 482.114436][T11444] syz_tun: entered allmulticast mode [ 482.158637][T11444] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 482.167419][T11444] mroute: pending queue full, dropping entries [ 482.174997][ T30] audit: type=1400 audit(1748434476.526:16858): avc: denied { open } for pid=11440 comm="syz.5.1396" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 482.209367][T11444] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 482.217949][T11444] mroute: pending queue full, dropping entries [ 482.234908][ T30] audit: type=1400 audit(1748434476.526:16859): avc: denied { create } for pid=11438 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 482.261130][T11443] syz_tun: left allmulticast mode [ 482.679484][T11346] syz.0.1359 (11346): drop_caches: 1 [ 484.518365][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1408'. [ 484.538161][T11486] kernel profiling enabled (shift: 9) [ 484.900884][ T7679] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 485.533162][ T7679] usb 6-1: Using ep0 maxpacket: 32 [ 485.555939][ T7679] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.574275][ T7679] usb 6-1: config 0 has no interface number 0 [ 485.584688][ T7679] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 485.603459][ T7679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.611780][ T7679] usb 6-1: Product: syz [ 485.622621][ T7679] usb 6-1: Manufacturer: syz [ 485.627234][ T7679] usb 6-1: SerialNumber: syz [ 485.642089][ T7679] usb 6-1: config 0 descriptor?? [ 485.661086][ T7679] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 485.700409][ T7679] usb 6-1: selecting invalid altsetting 1 [ 485.711088][T11510] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 485.716975][ T7679] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 485.732528][T11510] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 485.758737][ T7679] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 485.798996][ T7679] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 485.824506][ T7679] usb 6-1: media controller created [ 485.862348][ T7679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.108946][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1419'. [ 486.645902][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 486.645921][ T30] audit: type=1400 audit(1748434481.306:17068): avc: denied { recv } for pid=11514 comm="syz.3.1417" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 486.677994][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.815471][ T30] audit: type=1400 audit(1748434481.396:17069): avc: denied { recv } for pid=11025 comm="kworker/0:2H" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 486.853032][ T30] audit: type=1400 audit(1748434481.516:17070): avc: denied { read append } for pid=11489 comm="syz.5.1409" name="i2c-1" dev="devtmpfs" ino=3218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.889581][ T30] audit: type=1400 audit(1748434481.516:17071): avc: denied { open } for pid=11489 comm="syz.5.1409" path="/dev/i2c-1" dev="devtmpfs" ino=3218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.938132][ T30] audit: type=1400 audit(1748434481.546:17072): avc: denied { ioctl } for pid=11489 comm="syz.5.1409" path="/dev/i2c-1" dev="devtmpfs" ino=3218 ioctlcmd=0x707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 487.012674][ T30] audit: type=1400 audit(1748434481.546:17073): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.131108][ T7679] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 487.342880][ T30] audit: type=1400 audit(1748434481.546:17074): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.367850][ T7679] zl10353_read_register: readreg error (reg=127, ret==-110) [ 487.390975][T11490] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 487.399291][ T30] audit: type=1400 audit(1748434481.546:17075): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.424911][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.441837][ T7679] usb 6-1: USB disconnect, device number 6 [ 487.505282][ T30] audit: type=1400 audit(1748434481.576:17076): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.531969][ T30] audit: type=1400 audit(1748434481.576:17077): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.556095][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.379166][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1430'. [ 489.571145][T11563] x_tables: duplicate underflow at hook 2 [ 491.026248][T11578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 491.796374][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 491.796392][ T30] audit: type=1400 audit(1748434485.506:17231): avc: denied { execmem } for pid=11575 comm="syz.2.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 492.288003][ T49] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 492.295041][ T49] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 492.363524][ T30] audit: type=1400 audit(1748434485.686:17232): avc: denied { create } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.383829][ T30] audit: type=1400 audit(1748434485.686:17233): avc: denied { create } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.403646][ T30] audit: type=1400 audit(1748434485.686:17234): avc: denied { read } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.471980][ T30] audit: type=1400 audit(1748434485.686:17235): avc: denied { create } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.497570][ T30] audit: type=1400 audit(1748434485.686:17236): avc: denied { write } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.530459][ T30] audit: type=1400 audit(1748434485.696:17237): avc: denied { prog_load } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.584178][ T30] audit: type=1400 audit(1748434485.696:17238): avc: denied { bpf } for pid=11572 comm="syz.0.1437" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.623377][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'. [ 492.670138][ T30] audit: type=1400 audit(1748434485.706:17239): avc: denied { create } for pid=11572 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 492.714786][ T30] audit: type=1400 audit(1748434485.906:17240): avc: denied { recv } for pid=11572 comm="syz.0.1437" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 493.192693][T11595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 493.763211][T11610] lo speed is unknown, defaulting to 1000 [ 493.769840][T11610] lo speed is unknown, defaulting to 1000 [ 493.786432][T11610] lo speed is unknown, defaulting to 1000 [ 493.877298][T11610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 494.033982][T11610] lo speed is unknown, defaulting to 1000 [ 494.041704][T11610] lo speed is unknown, defaulting to 1000 [ 494.095415][T11610] lo speed is unknown, defaulting to 1000 [ 494.117314][T11610] lo speed is unknown, defaulting to 1000 [ 494.127489][T11610] lo speed is unknown, defaulting to 1000 [ 494.146635][T11610] lo speed is unknown, defaulting to 1000 [ 494.249785][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 494.258710][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1456'. [ 494.335776][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1457'. [ 494.354953][T11621] bridge0: entered promiscuous mode [ 494.368799][T11621] bridge0: left promiscuous mode [ 494.429139][T11626] veth0_vlan: entered allmulticast mode [ 494.610481][T11630] veth0_vlan: left promiscuous mode [ 494.692846][T11631] input: syz0 as /devices/virtual/input/input21 [ 495.136908][T11630] veth0_vlan: entered promiscuous mode [ 495.196841][T11635] binder: 11634:11635 ioctl 400c620e 200000000540 returned -22 [ 495.465713][T11641] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1463'. [ 496.658719][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 496.667931][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'. [ 497.251696][ T30] kauditd_printk_skb: 303 callbacks suppressed [ 497.251713][ T30] audit: type=1400 audit(1748434491.416:17544): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 497.526615][ T30] audit: type=1400 audit(1748434491.916:17545): avc: denied { recv } for pid=11642 comm="syz.0.1465" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 497.641872][T11666] input: syz0 as /devices/virtual/input/input22 [ 497.647654][ T30] audit: type=1400 audit(1748434491.966:17546): avc: denied { prog_load } for pid=11653 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.692526][ T30] audit: type=1400 audit(1748434491.966:17547): avc: denied { bpf } for pid=11653 comm="syz.2.1470" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.716531][ T30] audit: type=1400 audit(1748434491.966:17548): avc: denied { read write } for pid=11653 comm="syz.2.1470" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 497.742799][ T30] audit: type=1400 audit(1748434491.966:17549): avc: denied { ioctl open } for pid=11653 comm="syz.2.1470" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 497.771124][ T30] audit: type=1400 audit(1748434491.986:17550): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.795604][ T30] audit: type=1400 audit(1748434491.986:17551): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.825871][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1474'. [ 497.840174][T11675] ip6gretap0: entered promiscuous mode [ 497.846157][ T30] audit: type=1400 audit(1748434491.986:17552): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.882511][T11675] ip6gretap0: left promiscuous mode [ 498.418023][ T30] audit: type=1400 audit(1748434491.986:17553): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 498.445358][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 498.454267][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 499.519567][T11686] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1478'. [ 501.061680][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.793713][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 501.802720][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1490'. [ 502.550147][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 502.550163][ T30] audit: type=1400 audit(1748434496.916:17769): avc: denied { recv } for pid=11716 comm="syz.5.1490" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 502.598920][ T30] audit: type=1400 audit(1748434497.196:17770): avc: denied { read write } for pid=10067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.631757][ T30] audit: type=1400 audit(1748434497.196:17771): avc: denied { open } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.656313][ T30] audit: type=1400 audit(1748434497.196:17772): avc: denied { ioctl } for pid=10067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.693284][ T30] audit: type=1400 audit(1748434497.216:17773): avc: denied { recv } for pid=5796 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 502.768754][ T30] audit: type=1400 audit(1748434497.286:17774): avc: denied { execmem } for pid=11719 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 502.808586][ T30] audit: type=1400 audit(1748434497.286:17775): avc: denied { recv } for pid=11720 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 503.306520][ T30] audit: type=1400 audit(1748434497.396:17776): avc: denied { create } for pid=11720 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 503.330827][ T30] audit: type=1400 audit(1748434497.416:17777): avc: denied { recv } for pid=11719 comm="syz.5.1492" saddr=10.128.0.169 src=30006 daddr=10.128.0.157 dest=48986 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 503.362170][ T30] audit: type=1400 audit(1748434497.426:17778): avc: denied { read } for pid=11720 comm="syz.0.1491" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 503.891573][T11727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1494'. [ 504.750203][T11749] lo speed is unknown, defaulting to 1000 [ 504.756020][T11749] lo speed is unknown, defaulting to 1000 [ 504.764119][T11749] lo speed is unknown, defaulting to 1000 [ 504.779507][T11749] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 504.822915][T11749] lo speed is unknown, defaulting to 1000 [ 504.830120][T11749] lo speed is unknown, defaulting to 1000 [ 504.837165][T11749] lo speed is unknown, defaulting to 1000 [ 504.844265][T11749] lo speed is unknown, defaulting to 1000 [ 504.851383][T11749] lo speed is unknown, defaulting to 1000 [ 504.858455][T11749] lo speed is unknown, defaulting to 1000 [ 505.198635][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 507.650221][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 507.650232][ T30] audit: type=1400 audit(1748434502.316:17957): avc: denied { create } for pid=11783 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 508.106187][ T30] audit: type=1400 audit(1748434502.416:17958): avc: denied { create } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.188568][ T30] audit: type=1400 audit(1748434502.416:17959): avc: denied { bind } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.268470][ T30] audit: type=1400 audit(1748434502.416:17960): avc: denied { setopt } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.289699][ T30] audit: type=1400 audit(1748434502.416:17961): avc: denied { accept } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.324943][ T30] audit: type=1400 audit(1748434502.426:17962): avc: denied { write } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.346232][ T30] audit: type=1400 audit(1748434502.426:17963): avc: denied { create } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.380841][ T30] audit: type=1400 audit(1748434502.436:17964): avc: denied { write } for pid=11781 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.499528][ T30] audit: type=1400 audit(1748434502.436:17965): avc: denied { read } for pid=11781 comm="syz.2.1513" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 508.525588][ T30] audit: type=1400 audit(1748434502.436:17966): avc: denied { open } for pid=11781 comm="syz.2.1513" path="net:[4026532952]" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 508.641537][T11795] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1515'. [ 508.651192][T11795] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1515'. [ 509.340420][ T31] INFO: task kworker/u8:10:6014 blocked for more than 143 seconds. [ 509.397126][ T31] Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 [ 509.595683][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 509.623080][ T31] task:kworker/u8:10 state:D stack:23592 pid:6014 tgid:6014 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 509.644820][ T31] Workqueue: events_unbound netfs_write_collection_worker [ 509.658482][ T31] Call Trace: [ 509.675178][ T31] [ 509.678160][ T31] __schedule+0x116a/0x5de0 [ 509.682872][ T31] ? add_lock_to_list+0x9d/0x130 [ 509.687896][ T31] ? __lock_acquire+0x622/0x1c90 [ 509.692882][ T31] ? __pfx___schedule+0x10/0x10 [ 509.697769][ T31] ? find_held_lock+0x2b/0x80 [ 509.702553][ T31] ? schedule+0x2d7/0x3a0 [ 509.706922][ T31] schedule+0xe7/0x3a0 [ 509.711073][ T31] bit_wait+0x15/0xe0 [ 509.715088][ T31] __wait_on_bit+0x62/0x180 [ 509.719625][ T31] ? __pfx_bit_wait+0x10/0x10 [ 509.724389][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 509.730528][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 509.736569][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 509.742212][ T31] netfs_retry_writes+0x300/0x1a50 [ 509.747401][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 509.752401][ T31] ? stack_trace_save+0x8e/0xc0 [ 509.757286][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 509.762710][ T31] ? __pfx_netfs_retry_writes+0x10/0x10 [ 509.768298][ T31] ? check_path.constprop.0+0x24/0x50 [ 509.773821][ T31] ? save_trace+0x1ad/0x380 [ 509.778388][ T31] netfs_write_collection_worker+0x23fd/0x3830 [ 509.784778][ T31] process_one_work+0x9cf/0x1b70 [ 509.789848][ T31] ? __pfx_process_one_work+0x10/0x10 [ 509.795350][ T31] ? assign_work+0x1a0/0x250 [ 509.800028][ T31] worker_thread+0x6c8/0xf10 [ 509.804687][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.809746][ T31] ? __pfx_worker_thread+0x10/0x10 [ 509.814974][ T31] kthread+0x3c5/0x780 [ 509.819096][ T31] ? __pfx_kthread+0x10/0x10 [ 509.823750][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.828540][ T31] ? __pfx_kthread+0x10/0x10 [ 509.833731][ T31] ret_from_fork+0x5d4/0x6f0 [ 509.838378][ T31] ? __pfx_kthread+0x10/0x10 [ 509.843020][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.847878][ T31] [ 509.851098][ T31] [ 509.851098][ T31] Showing all locks held in the system: [ 509.858839][ T31] 1 lock held by khungtaskd/31: [ 509.865211][ T31] #0: ffffffff8e3c27c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 509.875323][ T31] 2 locks held by getty/5575: [ 509.880081][ T31] #0: ffff8880328750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 509.890011][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 509.900446][ T31] 2 locks held by kworker/u8:10/6014: [ 509.905848][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 509.917177][ T31] #1: ffffc90005467d10 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 509.928729][ T31] 3 locks held by syz.1.957/9837: [ 509.934721][ T31] #0: ffff888079646428 (sb_writers#21){.+.+}-{0:0}, at: do_pwritev+0x1a6/0x270 [ 509.944057][ T31] #1: ffff88807eab0148 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80 [ 509.955224][ T31] #2: ffff88807eab0500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_begin_writethrough+0x64/0x1c0 [ 509.965591][ T31] 1 lock held by syz.0.1518/11801: [ 509.970757][ T31] #0: ffffffff8e3cdc40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 509.981983][ T31] [ 509.984377][ T31] ============================================= [ 509.984377][ T31] [ 509.999500][ T31] NMI backtrace for cpu 1 [ 509.999516][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 509.999537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.999547][ T31] Call Trace: [ 509.999553][ T31] [ 509.999560][ T31] dump_stack_lvl+0x116/0x1f0 [ 509.999587][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 509.999612][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.999635][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 509.999661][ T31] watchdog+0xf70/0x12c0 [ 509.999684][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.999697][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.999726][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.999749][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.999764][ T31] kthread+0x3c5/0x780 [ 509.999789][ T31] ? __pfx_kthread+0x10/0x10 [ 509.999815][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.999833][ T31] ? __pfx_kthread+0x10/0x10 [ 509.999858][ T31] ret_from_fork+0x5d4/0x6f0 [ 509.999879][ T31] ? __pfx_kthread+0x10/0x10 [ 509.999904][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.999936][ T31] [ 510.112790][ T31] Sending NMI from CPU 1 to CPUs 0: [ 510.118015][ C0] NMI backtrace for cpu 0 [ 510.118026][ C0] CPU: 0 UID: 0 PID: 11802 Comm: syz.0.1518 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 510.118044][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.118055][ C0] RIP: 0010:stack_trace_save+0x92/0xc0 [ 510.118075][ C0] Code: e1 a6 81 89 74 24 28 48 8d 74 24 20 89 54 24 2c 48 c7 44 24 30 00 00 00 00 65 48 8b 15 ff 2a 01 12 e8 12 96 ba ff 8b 44 24 30 <48> c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 54 24 78 65 48 2b [ 510.118088][ C0] RSP: 0018:ffffc9000fc37648 EFLAGS: 00000292 [ 510.118100][ C0] RAX: 000000000000000e RBX: fffff52001f86ec9 RCX: ffffc9000fc37514 [ 510.118109][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805ac8ccc4 [ 510.118117][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 510.118125][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 510.118133][ C0] R13: ffff88803360fd00 R14: ffffea0000ae1600 R15: 0000000000000000 [ 510.118142][ C0] FS: 0000000000000000(0000) GS:ffff88812499f000(0000) knlGS:0000000000000000 [ 510.118156][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.118165][ C0] CR2: 0000000000000000 CR3: 000000007fe10000 CR4: 00000000003526f0 [ 510.118173][ C0] Call Trace: [ 510.118178][ C0] [ 510.118183][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 510.118200][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 510.118217][ C0] kasan_save_stack+0x33/0x60 [ 510.118237][ C0] ? kasan_save_stack+0x33/0x60 [ 510.118255][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 510.118271][ C0] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 510.118290][ C0] ? kmem_cache_free+0x16d/0x4d0 [ 510.118309][ C0] ? exit_mmap+0x511/0xb90 [ 510.118326][ C0] ? __mmput+0x12a/0x410 [ 510.118339][ C0] ? mmput+0x62/0x70 [ 510.118350][ C0] ? do_exit+0xa3a/0x2c70 [ 510.118366][ C0] ? do_group_exit+0xd3/0x2a0 [ 510.118385][ C0] ? get_signal+0x2673/0x26d0 [ 510.118398][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 510.118420][ C0] ? exit_to_user_mode_loop+0x84/0x110 [ 510.118438][ C0] ? do_syscall_64+0x3f6/0x4c0 [ 510.118451][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.118476][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 510.118494][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 510.118510][ C0] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 510.118531][ C0] kmem_cache_free+0x16d/0x4d0 [ 510.118550][ C0] ? exit_mmap+0x511/0xb90 [ 510.118567][ C0] exit_mmap+0x511/0xb90 [ 510.118584][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 510.118610][ C0] __mmput+0x12a/0x410 [ 510.118624][ C0] mmput+0x62/0x70 [ 510.118637][ C0] do_exit+0xa3a/0x2c70 [ 510.118654][ C0] ? __pfx_do_exit+0x10/0x10 [ 510.118670][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 510.118688][ C0] ? find_held_lock+0x2b/0x80 [ 510.118702][ C0] do_group_exit+0xd3/0x2a0 [ 510.118718][ C0] get_signal+0x2673/0x26d0 [ 510.118735][ C0] ? __pfx_get_signal+0x10/0x10 [ 510.118747][ C0] ? do_futex+0x122/0x350 [ 510.118764][ C0] ? __pfx_do_futex+0x10/0x10 [ 510.118780][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 510.118800][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 510.118823][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 510.118839][ C0] exit_to_user_mode_loop+0x84/0x110 [ 510.118858][ C0] do_syscall_64+0x3f6/0x4c0 [ 510.118871][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.118884][ C0] RIP: 0033:0x7ff8dc58e969 [ 510.118894][ C0] Code: Unable to access opcode bytes at 0x7ff8dc58e93f. [ 510.118899][ C0] RSP: 002b:00007ff8dd3880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 510.118911][ C0] RAX: fffffffffffffe00 RBX: 00007ff8dc7b5fa8 RCX: 00007ff8dc58e969 [ 510.118920][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8dc7b5fa8 [ 510.118928][ C0] RBP: 00007ff8dc7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 510.118936][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8dc7b5fac [ 510.118944][ C0] R13: 0000000000000000 R14: 00007fff8e5d7000 R15: 00007fff8e5d70e8 [ 510.118957][ C0] [ 510.119341][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 510.515102][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 510.526543][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.536583][ T31] Call Trace: [ 510.539846][ T31] [ 510.542764][ T31] dump_stack_lvl+0x3d/0x1f0 [ 510.547345][ T31] panic+0x71c/0x800 [ 510.551234][ T31] ? __pfx_panic+0x10/0x10 [ 510.555638][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 510.560998][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 510.566963][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 510.572321][ T31] ? watchdog+0xdda/0x12c0 [ 510.576718][ T31] ? watchdog+0xdcd/0x12c0 [ 510.581122][ T31] watchdog+0xdeb/0x12c0 [ 510.585352][ T31] ? __pfx_watchdog+0x10/0x10 [ 510.590013][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.595206][ T31] ? __kthread_parkme+0x19e/0x250 [ 510.600217][ T31] ? __pfx_watchdog+0x10/0x10 [ 510.604878][ T31] kthread+0x3c5/0x780 [ 510.608936][ T31] ? __pfx_kthread+0x10/0x10 [ 510.613525][ T31] ? rcu_is_watching+0x12/0xc0 [ 510.618272][ T31] ? __pfx_kthread+0x10/0x10 [ 510.622855][ T31] ret_from_fork+0x5d4/0x6f0 [ 510.627431][ T31] ? __pfx_kthread+0x10/0x10 [ 510.632011][ T31] ret_from_fork_asm+0x1a/0x30 [ 510.636768][ T31] [ 510.639957][ T31] Kernel Offset: disabled [ 510.644258][ T31] Rebooting in 86400 seconds..