last executing test programs: 3m37.119307469s ago: executing program 4 (id=71): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3m35.784245103s ago: executing program 4 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3m35.191916229s ago: executing program 4 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 3m32.852135635s ago: executing program 4 (id=78): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, 0x0, &(0x7f0000000400), &(0x7f0000000500)) socket(0x1d, 0x2, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000004d867a74"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 3m30.093884604s ago: executing program 4 (id=82): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socket(0x1d, 0x2, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000004d867a74"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 3m27.679121125s ago: executing program 4 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 3m12.094053946s ago: executing program 32 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 2m14.309188849s ago: executing program 5 (id=171): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x5c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800383a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000090cad082b90363aeea0000000000000000110004000100000014"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, 0x0, 0x0) 2m10.153488197s ago: executing program 5 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x44444', 0x24) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 2m6.879947198s ago: executing program 5 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 2m2.804852004s ago: executing program 5 (id=183): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0), 0x0) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009000000000000000c0000e2852000e502000000950000000000f600"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$char_usb(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) close_range(r5, r3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2517e, &(0x7f0000000740)={0x0, 0x9aa, 0x1000, 0x2, 0x1cb}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) read$eventfd(r4, &(0x7f0000000000), 0x8) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000680)=""/161) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7a, 0x7, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0xfffffffffffffffd]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m56.714829092s ago: executing program 5 (id=188): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@updsa={0x2d8, 0x1a, 0x2, 0x70bd28, 0x25dfdbfb, {{@in6=@loopback, @in6=@empty, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x33}, {@in=@empty, 0x4d3, 0x6c}, @in=@broadcast, {0x4, 0x0, 0x8, 0x2, 0x50, 0x100000000, 0x88ea, 0x7}, {0xfa0, 0x7fffffffffffffff, 0xfff, 0x8}, {0x9, 0x7, 0x4}, 0x70bd29, 0x3500, 0xa, 0x2, 0x82, 0x5}, [@policy_type={0xa}, @algo_crypt={0x86, 0x2, {{'adiantum(lrw(twofish),fcrypt)\x00'}, 0x1f0, "13a64ff461462c7c39542892275131690bb67cff512e08ae11817a4a7d9e5ecd8a2cc9d8a71410dde733751f9234d4c50eb5d80869912279e41a8d92240f"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x80, 0x90, 0x2f, 0x0, 0xee01}, {0x7, 0x100000001, 0x8001, 0x2, 0x0, 0x5, 0xbe6, 0x7ff}, {0x4, 0x1, 0x0, 0x8}, 0x80000000, 0x6e6bbf, 0x2, 0x1, 0x6, 0x2}}, @migrate={0x9c, 0x11, [{@in=@local, @in6=@mcast2, @in=@empty, @in=@rand_addr=0x64010100, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2b, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @offload={0xc}]}, 0x2d8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m54.471745493s ago: executing program 5 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x444444444444444', 0x2e) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 1m38.370040167s ago: executing program 33 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0x70000, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0xffffffffffffffff}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x444444444444444', 0x2e) sendto$inet(r9, &(0x7f0000000100)="65b7e02057b4f1651e330a8ec721b1cb40b0d2455524180fbf4f392e6bcbcf2f491d28a15ea7d593adea3b49b222522fc4c5caeb5f730b628bf17caa40a9d4752cad1474556514f61a459e3a4fba6f69c251ac4e41", 0x55, 0x4000040, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) 9.682745569s ago: executing program 6 (id=379): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r3, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000001020102000000000000000000000000c8a6b0741cf46994a84b9431659438a04e6de1e7bd6c57f84b6c075d1c414bda999aeb3434871790ff208b85c36e2bc39ab6129b27d486b38d09e28173c8aaf55fc82665130c8bd9b2528f0327751291b979809a2ba83466aac37919d5ee595b3dd117e2928eebe979ff71052a7709647300963a23197377816ebc8a3d02c1b2062c0b4e3ea6ff737527dbc705d14a835b4da2ea9a4aa20f2bed3a034c7865805fe1ac7cf865413a32ad2f22906410aa6b994ad132c68fbfa99090b693ba5e90876555fe8b72ac2ab275fb7aeb44"], 0x24}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010100) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 8.523013407s ago: executing program 1 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.355971388s ago: executing program 2 (id=385): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0x40, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @nested={0x20, 0x67, 0x0, 0x1, [@nested={0x8, 0x4d, 0x0, 0x1, [@nested={0x4, 0x9f}]}, @typed={0xc, 0x7f, 0x0, 0x0, @str='cgroup2\x00'}, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x9}]}]}, 0x40}], 0x1}, 0x40040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 8.347597462s ago: executing program 3 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 8.265873882s ago: executing program 3 (id=387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3, 0x5e, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200), &(0x7f0000000240)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000d00)='sip_packet\x00', 0xb, 0x0, 0x0, 0x0) 8.257479476s ago: executing program 1 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioperm(0xffffffffffffffff, 0x2, 0x7e) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5bb65d3f2511", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @remote}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f919e2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 8.152278716s ago: executing program 3 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) 8.09027227s ago: executing program 3 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c09493c249282adf9799430288f2f9ad636132a734c6bc8e4d08e571907800e7"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x6, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000000}]}]}, 0x5c}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f00000000c0)=0xb0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc004aeba, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000563000/0xe000)=nil, 0xffffffff, 0x10}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 7.932590274s ago: executing program 2 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf, r0, 0x4b36baea9e1c7e99}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000126bd700001b133d62ec562bab7670a5b99ea33d7"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000500)={0x0, 0x12d9, 0x20, 0x3, 0xe9}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 7.076819595s ago: executing program 0 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) 6.228896692s ago: executing program 2 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 6.223423462s ago: executing program 0 (id=395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf, r0, 0x4b36baea9e1c7e99}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000126bd700001b133d62ec562bab7670a5b99ea33d7"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000500)={0x0, 0x12d9, 0x20, 0x3, 0xe9}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r10, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 5.846076814s ago: executing program 2 (id=396): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 5.744315408s ago: executing program 6 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r6}}]}) 5.010745705s ago: executing program 2 (id=398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x2841, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r15 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x888, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x0, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0xffff, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x1, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a8, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r16 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r16, &(0x7f0000000340)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @private0, 0x2}}, 0x80, &(0x7f0000000680)}, 0x4011) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4.260192952s ago: executing program 6 (id=399): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r4, &(0x7f0000008180)={0x2020}, 0xfffffdfc) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000fff9df250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840), 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4.205451454s ago: executing program 0 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) 4.132385897s ago: executing program 1 (id=401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 4.110719655s ago: executing program 3 (id=402): fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.067537031s ago: executing program 0 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rename(&(0x7f0000000100)='./dev\x00', &(0x7f0000000280)='./mnt\x00') 3.421528151s ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3c, 0x3000001, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$unix(r3, 0x0, 0x0) 2.539607849s ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) 2.240251957s ago: executing program 6 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r6}}]}) 2.19037109s ago: executing program 1 (id=407): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000080) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x810, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.951328082s ago: executing program 0 (id=408): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000080) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x810, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 888.974511ms ago: executing program 6 (id=409): mkdir(&(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0x140) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0', 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 787.165351ms ago: executing program 1 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r6}}]}) 546.432127ms ago: executing program 3 (id=411): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000003, 0x0, 0x9, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) 496.07776ms ago: executing program 2 (id=412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioperm(0xffffffffffffffff, 0x2, 0x7e) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5bb65d3f2511", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @remote}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f919e2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 0s ago: executing program 6 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4\n', 0x2) kernel console output (not intermixed with test programs): 0203518.941:906): avc: denied { prog_load } for pid=6450 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.789441][ T31] audit: type=1400 audit(1790203518.941:907): avc: denied { bpf } for pid=6450 comm="syz.2.120" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.789511][ T31] audit: type=1400 audit(1790203518.941:908): avc: denied { perfmon } for pid=6450 comm="syz.2.120" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.616100][ T31] audit: type=1400 audit(1790203519.771:909): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.619572][ T31] audit: type=1400 audit(1790203519.771:910): avc: denied { search } for pid=5264 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.619746][ T31] audit: type=1400 audit(1790203519.771:911): avc: denied { search } for pid=5264 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.619976][ T31] audit: type=1400 audit(1790203519.771:912): avc: denied { read } for pid=5264 comm="dhcpcd" name="n31" dev="tmpfs" ino=2309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.791159][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 169.884032][ T6315] hsr_slave_0: entered promiscuous mode [ 169.908322][ T6315] hsr_slave_1: entered promiscuous mode [ 169.970349][ T6315] debugfs: 'hsr0' already exists in 'hsr' [ 169.970426][ T6315] Cannot create hsr debugfs directory [ 170.099061][ T6468] ceph: No mds server is up or the cluster is laggy [ 170.102004][ T10] libceph: connect (1)[c::]:6789 error -101 [ 170.140045][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 170.903278][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'. [ 171.060957][ T25] libceph: connect (1)[c::]:6789 error -101 [ 171.061588][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 171.111602][ T6481] ceph: No mds server is up or the cluster is laggy [ 172.172490][ T25] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 172.334928][ T25] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 172.360866][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.361027][ T25] usb 4-1: Product: syz [ 172.361094][ T25] usb 4-1: Manufacturer: syz [ 172.361128][ T25] usb 4-1: SerialNumber: syz [ 172.393336][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 172.816730][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 172.834836][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 172.835130][ T6502] ceph: No mds server is up or the cluster is laggy [ 173.220013][ T6315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.298209][ T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 173.416377][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.440480][ T6315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.452803][ T6507] tmpfs: Bad value for 'mpol' [ 173.459210][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.459573][ T6315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.495862][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.496458][ T6315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.511912][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.651097][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 173.651114][ T31] audit: type=1400 audit(1790203523.801:983): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.651329][ T31] audit: type=1400 audit(1790203523.801:984): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.711939][ T31] audit: type=1400 audit(1790203523.871:985): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.769718][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 173.794818][ T31] audit: type=1400 audit(1790203523.951:986): avc: denied { create } for pid=6518 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.831117][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.857239][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.871662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.871707][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.887470][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.887525][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.986255][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 174.523253][ T31] audit: type=1400 audit(1790203524.191:987): avc: denied { read } for pid=6488 comm="syz.3.119" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.523301][ T31] audit: type=1400 audit(1790203524.191:988): avc: denied { open } for pid=6488 comm="syz.3.119" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.546780][ T31] audit: type=1400 audit(1790203524.681:989): avc: denied { ioctl } for pid=6488 comm="syz.3.119" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.548525][ T31] audit: type=1400 audit(1790203524.711:990): avc: denied { read } for pid=6506 comm="syz.0.127" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.548569][ T31] audit: type=1400 audit(1790203524.711:991): avc: denied { open } for pid=6506 comm="syz.0.127" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.612553][ T31] audit: type=1400 audit(1790203524.761:992): avc: denied { read } for pid=6506 comm="syz.0.127" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.240949][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 175.241105][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 175.278076][ T6519] ceph: No mds server is up or the cluster is laggy [ 175.538266][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'. [ 176.846564][ T10] usb 4-1: USB disconnect, device number 3 [ 176.879189][ T10] usblp0: removed [ 177.590882][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.811680][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 178.138362][ T6568] capability: warning: `syz.1.133' uses deprecated v2 capabilities in a way that may be insecure [ 178.267986][ T6315] veth0_vlan: entered promiscuous mode [ 178.286128][ T6315] veth1_vlan: entered promiscuous mode [ 178.343694][ T6315] veth0_macvtap: entered promiscuous mode [ 178.350526][ T6315] veth1_macvtap: entered promiscuous mode [ 178.393135][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.419539][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.455000][ T6141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.455052][ T6141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.455081][ T6141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.534922][ T6141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.636375][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.636394][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.666993][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 178.667008][ T31] audit: type=1400 audit(1790203528.821:1076): avc: denied { create } for pid=6585 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.769866][ T31] audit: type=1400 audit(1790203528.921:1077): avc: denied { setopt } for pid=6589 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.799748][ T31] audit: type=1400 audit(1790203528.951:1078): avc: denied { create } for pid=6585 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.825795][ T31] audit: type=1400 audit(1790203528.971:1079): avc: denied { setopt } for pid=6585 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.192240][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.192258][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.876151][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 180.969551][ T31] audit: type=1400 audit(1790203531.121:1080): avc: denied { ioctl } for pid=6595 comm="syz.3.134" path="socket:[11230]" dev="sockfs" ino=11230 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.040429][ T10] libceph: connect (1)[c::]:6789 error -101 [ 181.041185][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 181.081022][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'. [ 181.094355][ T10] libceph: connect (1)[c::]:6789 error -101 [ 181.094494][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 181.100591][ T6599] ceph: No mds server is up or the cluster is laggy [ 181.103077][ T31] audit: type=1400 audit(1790203531.251:1081): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.103120][ T31] audit: type=1400 audit(1790203531.251:1082): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.103152][ T31] audit: type=1400 audit(1790203531.251:1083): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.123782][ T31] audit: type=1400 audit(1790203531.281:1084): avc: denied { ioctl } for pid=6589 comm="syz.2.135" path="socket:[11189]" dev="sockfs" ino=11189 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.187262][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 181.187899][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 181.208489][ T6590] ceph: No mds server is up or the cluster is laggy [ 181.213654][ T31] audit: type=1400 audit(1790203531.351:1085): avc: denied { setopt } for pid=6589 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.005862][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 182.056419][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 182.057096][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 182.124946][ T6614] ceph: No mds server is up or the cluster is laggy [ 182.321745][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 182.329371][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 182.472632][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.99'. [ 182.642842][ T25] libceph: connect (1)[c::]:6789 error -101 [ 182.643003][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 182.730455][ T6621] ceph: No mds server is up or the cluster is laggy [ 182.832839][ T10] libceph: connect (1)[c::]:6789 error -101 [ 182.833009][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 183.016993][ T6627] tmpfs: Bad value for 'mpol' [ 183.897941][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 183.897957][ T31] audit: type=1400 audit(1790203533.171:1113): avc: denied { execmem } for pid=6626 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 183.897981][ T31] audit: type=1400 audit(1790203533.451:1114): avc: denied { read } for pid=6626 comm="syz.1.139" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.898002][ T31] audit: type=1400 audit(1790203533.451:1115): avc: denied { open } for pid=6626 comm="syz.1.139" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.898022][ T31] audit: type=1400 audit(1790203533.601:1116): avc: denied { read } for pid=6626 comm="syz.1.139" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.898042][ T31] audit: type=1400 audit(1790203533.601:1117): avc: denied { open } for pid=6626 comm="syz.1.139" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.898062][ T31] audit: type=1400 audit(1790203533.611:1118): avc: denied { ioctl } for pid=6626 comm="syz.1.139" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.044293][ T31] audit: type=1400 audit(1790203534.201:1119): avc: denied { read write } for pid=6632 comm="syz.0.140" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.044575][ T31] audit: type=1400 audit(1790203534.201:1120): avc: denied { open } for pid=6632 comm="syz.0.140" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.046286][ T31] audit: type=1400 audit(1790203534.201:1121): avc: denied { ioctl } for pid=6632 comm="syz.0.140" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.123546][ T31] audit: type=1400 audit(1790203534.271:1122): avc: denied { mount } for pid=6634 comm="syz.3.141" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 184.332442][ T5841] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 184.408401][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 184.521997][ T5841] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 184.560461][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.562288][ T5841] usb 1-1: Product: syz [ 184.562314][ T5841] usb 1-1: Manufacturer: syz [ 184.579734][ T5841] usb 1-1: SerialNumber: syz [ 184.927239][ T6647] ceph: No mds server is up or the cluster is laggy [ 184.945643][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 184.949470][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 185.851118][ T5841] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 187.241549][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 187.480724][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 188.693655][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.693709][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.907780][ T31] kauditd_printk_skb: 81 callbacks suppressed [ 188.907798][ T31] audit: type=1400 audit(1790203539.061:1204): avc: denied { read } for pid=6675 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.910961][ T31] audit: type=1400 audit(1790203539.061:1205): avc: denied { read open } for pid=6675 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.991088][ T31] audit: type=1400 audit(1790203539.131:1206): avc: denied { getattr } for pid=6675 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.039551][ T6668] ceph: No mds server is up or the cluster is laggy [ 189.058192][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 189.082982][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 189.286358][ T6665] ceph: No mds server is up or the cluster is laggy [ 189.286418][ T31] audit: type=1400 audit(1790203539.431:1207): avc: denied { getattr } for pid=6675 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.286841][ T25] libceph: connect (1)[c::]:6789 error -101 [ 189.286999][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 189.436259][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.150'. [ 189.471327][ T31] audit: type=1400 audit(1790203539.621:1208): avc: denied { execmem } for pid=6682 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 189.507421][ T25] usb 1-1: USB disconnect, device number 4 [ 189.525838][ T31] audit: type=1400 audit(1790203539.681:1209): avc: denied { read write } for pid=5600 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.525884][ T31] audit: type=1400 audit(1790203539.681:1210): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.525921][ T31] audit: type=1400 audit(1790203539.681:1211): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.531253][ T25] usblp0: removed [ 189.557759][ T31] audit: type=1400 audit(1790203539.711:1212): avc: denied { ioctl } for pid=6673 comm="syz.5.150" path="socket:[11783]" dev="sockfs" ino=11783 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.562189][ T31] audit: type=1400 audit(1790203539.711:1213): avc: denied { search } for pid=6681 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.673668][ T6678] ceph: No mds server is up or the cluster is laggy [ 189.674077][ T10] libceph: connect (1)[c::]:6789 error -101 [ 189.674230][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 189.890033][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 190.048101][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 190.071731][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 190.077733][ T6693] ceph: No mds server is up or the cluster is laggy [ 190.299853][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.153'. [ 190.764910][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 190.764943][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 190.764984][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 190.765011][ T4926] Bluetooth: hci0: command 0x0406 tx timeout [ 190.983442][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 191.118566][ T10] libceph: connect (1)[c::]:6789 error -101 [ 191.133825][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 191.213380][ T10] libceph: connect (1)[c::]:6789 error -101 [ 191.213992][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 191.234549][ T6710] ceph: No mds server is up or the cluster is laggy [ 191.272533][ T5719] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 191.322886][ T6715] tmpfs: Bad value for 'mpol' [ 192.206240][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 192.207200][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 192.294281][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 192.382382][ T5719] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 192.407777][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 192.407908][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.407938][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.407969][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.530610][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.530642][ T5719] usb 6-1: Product: syz [ 192.530676][ T5719] usb 6-1: Manufacturer: syz [ 192.530738][ T5719] usb 6-1: SerialNumber: syz [ 192.646304][ T5719] usb 6-1: config 0 descriptor?? [ 192.648519][ T6708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 192.928461][ T5719] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 192.931515][ T5719] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 193.019911][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 193.477345][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 193.477568][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 193.631396][ C0] powermate: config urb returned -71 [ 193.632196][ C0] powermate: config urb returned -71 [ 193.638955][ C0] powermate: config urb returned -71 [ 193.640342][ C0] powermate: config urb returned -71 [ 193.641466][ T10] usb 6-1: USB disconnect, device number 2 [ 193.641535][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 193.718082][ T6725] ceph: No mds server is up or the cluster is laggy [ 193.775818][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 193.776717][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 193.956081][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 193.960427][ T31] audit: type=1400 audit(1790203544.111:1289): avc: denied { read } for pid=6726 comm="syz.1.157" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.976406][ T31] audit: type=1400 audit(1790203544.111:1290): avc: denied { open } for pid=6726 comm="syz.1.157" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 194.000545][ T31] audit: type=1400 audit(1790203544.111:1291): avc: denied { prog_load } for pid=6726 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.019690][ T31] audit: type=1400 audit(1790203544.121:1292): avc: denied { bpf } for pid=6726 comm="syz.1.157" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.020248][ T31] audit: type=1400 audit(1790203544.121:1293): avc: denied { perfmon } for pid=6726 comm="syz.1.157" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.035590][ T31] audit: type=1400 audit(1790203544.131:1294): avc: denied { prog_run } for pid=6726 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.040740][ T31] audit: type=1400 audit(1790203544.141:1295): avc: denied { map_create } for pid=6726 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.242555][ T31] audit: type=1400 audit(1790203544.041:1285): avc: denied { open } for pid=4954 comm="acpid" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=2821 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.572269][ T31] audit: type=1400 audit(1790203544.711:1296): avc: denied { mounton } for pid=6720 comm="syz.3.158" path="/34/sys" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.574974][ T31] audit: type=1400 audit(1790203544.711:1297): avc: denied { mount } for pid=6720 comm="syz.3.158" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 194.586222][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 194.586363][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 195.531140][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 195.559396][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.160'. [ 198.604775][ T6750] ceph: No mds server is up or the cluster is laggy [ 198.611544][ T10] libceph: connect (1)[c::]:6789 error -101 [ 198.611694][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 198.641431][ T6746] ceph: No mds server is up or the cluster is laggy [ 198.641855][ T10] libceph: connect (1)[c::]:6789 error -101 [ 198.641992][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 198.973211][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 198.973228][ T31] audit: type=1400 audit(1790203549.131:1327): avc: denied { search } for pid=6768 comm="syz.0.156" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.973261][ T31] audit: type=1400 audit(1790203549.131:1328): avc: denied { search } for pid=6768 comm="syz.0.156" name="usb_gadget" dev="configfs" ino=3401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.975766][ T31] audit: type=1400 audit(1790203549.131:1329): avc: denied { search } for pid=6768 comm="syz.0.156" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.975866][ T31] audit: type=1400 audit(1790203549.131:1330): avc: denied { search } for pid=6768 comm="syz.0.156" name="usb_gadget" dev="configfs" ino=3401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.976123][ T31] audit: type=1400 audit(1790203549.131:1331): avc: denied { search } for pid=6768 comm="syz.0.156" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.978876][ T31] audit: type=1400 audit(1790203549.131:1332): avc: denied { search } for pid=6768 comm="syz.0.156" name="usb_gadget" dev="configfs" ino=3401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.982596][ T30] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 198.992045][ T31] audit: type=1400 audit(1790203549.141:1333): avc: denied { prog_load } for pid=6771 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.008359][ T31] audit: type=1400 audit(1790203549.141:1334): avc: denied { create } for pid=6771 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.013718][ T31] audit: type=1400 audit(1790203549.171:1335): avc: denied { setopt } for pid=6771 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.180361][ T30] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 199.264790][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.264840][ T30] usb 4-1: Product: syz [ 199.264878][ T30] usb 4-1: Manufacturer: syz [ 199.264915][ T30] usb 4-1: SerialNumber: syz [ 199.281156][ T31] audit: type=1400 audit(1790203549.431:1336): avc: denied { search } for pid=6768 comm="syz.0.156" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.517348][ T25] libceph: connect (1)[c::]:6789 error -101 [ 199.517523][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 200.098725][ T6775] ceph: No mds server is up or the cluster is laggy [ 200.160985][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 200.193428][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 200.273171][ T30] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 201.017881][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.167'. [ 201.244683][ T6805] ceph: No mds server is up or the cluster is laggy [ 201.262769][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 201.299616][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 203.809925][ T5841] usb 4-1: USB disconnect, device number 4 [ 203.848547][ T5841] usblp0: removed [ 204.020069][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 204.020087][ T31] audit: type=1400 audit(1790203554.171:1424): avc: denied { allowed } for pid=6829 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 204.020982][ T31] audit: type=1400 audit(1790203554.171:1425): avc: denied { create } for pid=6829 comm="syz.1.172" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.082545][ T5712] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.095940][ T31] audit: type=1400 audit(1790203554.251:1426): avc: denied { map } for pid=6829 comm="syz.1.172" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.096146][ T31] audit: type=1400 audit(1790203554.251:1427): avc: denied { read write } for pid=6829 comm="syz.1.172" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 205.077116][ T2163] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 205.092381][ T5712] usb 6-1: Using ep0 maxpacket: 8 [ 205.094260][ T5712] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 205.098735][ T5712] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 205.098773][ T5712] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.098796][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.098818][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.119464][ T31] audit: type=1400 audit(1790203555.271:1428): avc: denied { create } for pid=6833 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.143520][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.143542][ T5712] usb 6-1: Product: syz [ 205.143554][ T5712] usb 6-1: Manufacturer: syz [ 205.143567][ T5712] usb 6-1: SerialNumber: syz [ 205.145954][ T5712] usb 6-1: config 0 descriptor?? [ 205.147432][ T6824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 205.266005][ T2163] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 205.298353][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.173'. [ 205.317660][ T2163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.319995][ T31] audit: type=1400 audit(1790203555.471:1429): avc: denied { ioctl } for pid=6833 comm="syz.3.173" path="socket:[11967]" dev="sockfs" ino=11967 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.413419][ T31] audit: type=1400 audit(1790203555.571:1430): avc: denied { read } for pid=6826 comm="syz.0.169" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.413453][ T31] audit: type=1400 audit(1790203555.571:1431): avc: denied { open } for pid=6826 comm="syz.0.169" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 205.497974][ T31] audit: type=1400 audit(1790203555.651:1432): avc: denied { read } for pid=6840 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.530217][ T31] audit: type=1400 audit(1790203555.651:1433): avc: denied { read open } for pid=6840 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.600870][ T6838] ceph: No mds server is up or the cluster is laggy [ 205.602606][ T25] libceph: connect (1)[c::]:6789 error -101 [ 205.603419][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 205.708331][ T2163] usb 3-1: config 0 descriptor?? [ 205.732042][ T5712] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 205.863679][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 205.864217][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 206.296916][ T5712] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 206.304194][ C0] powermate: config urb returned -71 [ 206.304373][ C0] powermate: config urb returned -71 [ 206.304552][ C0] powermate: config urb returned -71 [ 206.304719][ C0] powermate: config urb returned -71 [ 206.310277][ T5712] usb 6-1: USB disconnect, device number 3 [ 206.310379][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 206.372684][ T2163] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 206.467846][ T2163] [drm:udl_init] *ERROR* Selecting channel failed [ 207.512013][ T2163] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 207.512036][ T2163] [drm] Initialized udl on minor 1 [ 207.586360][ T2163] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.597730][ T2163] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 208.192074][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.178'. [ 208.226051][ T2163] usb 3-1: USB disconnect, device number 2 [ 208.234010][ T5712] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 208.392820][ T6864] ceph: No mds server is up or the cluster is laggy [ 208.460183][ T5712] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 208.563879][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 208.564486][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 209.760477][ T9] libceph: connect (1)[c::]:6789 error -101 [ 209.761173][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 209.777608][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 209.777628][ T31] audit: type=1400 audit(1790203559.051:1454): avc: denied { execmem } for pid=6869 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.777728][ T31] audit: type=1400 audit(1790203559.361:1455): avc: denied { read } for pid=6869 comm="syz.2.179" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.777824][ T31] audit: type=1400 audit(1790203559.361:1456): avc: denied { open } for pid=6869 comm="syz.2.179" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.777917][ T31] audit: type=1400 audit(1790203559.511:1457): avc: denied { map_create } for pid=6869 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.778023][ T31] audit: type=1400 audit(1790203559.521:1458): avc: denied { perfmon } for pid=6869 comm="syz.2.179" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.778129][ T31] audit: type=1400 audit(1790203559.521:1459): avc: denied { map_read map_write } for pid=6869 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.778260][ T31] audit: type=1400 audit(1790203559.621:1460): avc: denied { prog_load } for pid=6869 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.778340][ T31] audit: type=1400 audit(1790203559.621:1461): avc: denied { bpf } for pid=6869 comm="syz.2.179" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.733346][ T31] audit: type=1400 audit(1790203560.881:1462): avc: denied { read write } for pid=5603 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.733379][ T31] audit: type=1400 audit(1790203560.881:1463): avc: denied { open } for pid=5603 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.055197][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 211.337904][ T10] libceph: connect (1)[c::]:6789 error -101 [ 211.338064][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 211.433412][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.182'. [ 211.562004][ T30] libceph: connect (1)[c::]:6789 error -101 [ 211.570724][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 211.592747][ T9] libceph: connect (1)[c::]:6789 error -101 [ 211.592906][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 211.630688][ T6890] ceph: No mds server is up or the cluster is laggy [ 211.823954][ T30] libceph: connect (1)[c::]:6789 error -101 [ 211.824616][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 212.102762][ T10] libceph: connect (1)[c::]:6789 error -101 [ 212.102934][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 212.334374][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 212.335055][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 213.179741][ T6881] ceph: No mds server is up or the cluster is laggy [ 213.639757][ T10] libceph: connect (1)[c::]:6789 error -101 [ 213.640557][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 214.819332][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 214.819348][ T31] audit: type=1400 audit(1790203564.971:1493): avc: denied { read } for pid=6899 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.823205][ T31] audit: type=1400 audit(1790203564.981:1494): avc: denied { open } for pid=6899 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.824467][ T31] audit: type=1400 audit(1790203564.981:1495): avc: denied { getattr } for pid=6899 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.910966][ T31] audit: type=1400 audit(1790203565.061:1496): avc: denied { unmount } for pid=6315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 214.941695][ T31] audit: type=1400 audit(1790203565.091:1497): avc: denied { getattr } for pid=6885 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.941739][ T31] audit: type=1400 audit(1790203565.091:1498): avc: denied { write } for pid=6885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.941773][ T31] audit: type=1400 audit(1790203565.091:1499): avc: denied { add_name } for pid=6885 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.941808][ T31] audit: type=1400 audit(1790203565.091:1500): avc: denied { create } for pid=6885 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.941846][ T31] audit: type=1400 audit(1790203565.091:1501): avc: denied { write } for pid=6885 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.950935][ T31] audit: type=1400 audit(1790203565.101:1502): avc: denied { read write } for pid=6315 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.308961][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 215.372431][ T5712] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 215.523253][ T5712] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 215.535768][ T30] libceph: connect (1)[c::]:6789 error -101 [ 215.536405][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 215.536605][ T6907] ceph: No mds server is up or the cluster is laggy [ 215.576195][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.576228][ T5712] usb 6-1: Product: syz [ 215.576240][ T5712] usb 6-1: Manufacturer: syz [ 215.576252][ T5712] usb 6-1: SerialNumber: syz [ 216.491449][ T5712] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 216.947201][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 217.068629][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 217.069283][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 217.118115][ T6927] ceph: No mds server is up or the cluster is laggy [ 217.324554][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 217.325158][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 217.850681][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 217.884257][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 219.431845][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 220.767038][ T6944] ceph: No mds server is up or the cluster is laggy [ 220.771601][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 220.771616][ T31] audit: type=1400 audit(1790203570.921:1573): avc: denied { mount } for pid=6934 comm="syz.1.187" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 220.782056][ T10] libceph: connect (1)[c::]:6789 error -101 [ 220.787818][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 220.788180][ T10] usb 6-1: USB disconnect, device number 4 [ 220.870178][ T10] usblp0: removed [ 221.017899][ T31] audit: type=1400 audit(1790203571.171:1574): avc: denied { read write } for pid=6315 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.017946][ T31] audit: type=1400 audit(1790203571.171:1575): avc: denied { open } for pid=6315 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.061351][ T31] audit: type=1400 audit(1790203571.211:1576): avc: denied { ioctl } for pid=6315 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.070074][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 221.070246][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 221.194940][ T31] audit: type=1400 audit(1790203571.351:1577): avc: denied { create } for pid=6940 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.251910][ T31] audit: type=1400 audit(1790203571.351:1578): avc: denied { execmem } for pid=6950 comm="syz.5.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 223.251955][ T31] audit: type=1400 audit(1790203571.641:1579): avc: denied { read } for pid=6950 comm="syz.5.188" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 223.251992][ T31] audit: type=1400 audit(1790203571.641:1580): avc: denied { open } for pid=6950 comm="syz.5.188" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 223.252027][ T31] audit: type=1400 audit(1790203571.841:1581): avc: denied { prog_load } for pid=6950 comm="syz.5.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.252059][ T31] audit: type=1400 audit(1790203571.851:1582): avc: denied { bpf } for pid=6950 comm="syz.5.188" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.298266][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 224.101772][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'. [ 224.350581][ T6972] ceph: No mds server is up or the cluster is laggy [ 224.367167][ T30] libceph: connect (1)[c::]:6789 error -101 [ 224.367968][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 224.562348][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'. [ 225.167524][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 225.717282][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 225.934875][ T6977] ceph: No mds server is up or the cluster is laggy [ 226.249883][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 226.250045][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 226.669421][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 226.703760][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 226.964620][ T10] libceph: connect (1)[c::]:6789 error -101 [ 226.965436][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 227.130657][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 227.130670][ T31] audit: type=1400 audit(1790203577.271:1607): avc: denied { read write } for pid=5600 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.130695][ T31] audit: type=1400 audit(1790203577.271:1608): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.130715][ T31] audit: type=1400 audit(1790203577.271:1609): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.274768][ T31] audit: type=1400 audit(1790203577.431:1610): avc: denied { prog_load } for pid=6983 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.371038][ T31] audit: type=1400 audit(1790203577.521:1611): avc: denied { create } for pid=6983 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.393732][ T31] audit: type=1400 audit(1790203577.551:1612): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.443493][ T31] audit: type=1400 audit(1790203577.591:1613): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.443523][ T31] audit: type=1400 audit(1790203577.591:1614): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.443544][ T31] audit: type=1400 audit(1790203577.591:1615): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.450168][ T31] audit: type=1400 audit(1790203577.601:1616): avc: denied { create } for pid=6986 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.641549][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 227.692087][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 229.484635][ T6991] ceph: No mds server is up or the cluster is laggy [ 229.656873][ T30] libceph: connect (1)[c::]:6789 error -101 [ 229.656966][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 230.232429][ T5719] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 230.271845][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'. [ 230.421581][ T5719] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 230.460220][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.460247][ T5719] usb 1-1: Product: syz [ 230.460262][ T5719] usb 1-1: Manufacturer: syz [ 230.460275][ T5719] usb 1-1: SerialNumber: syz [ 230.539578][ T7009] ceph: No mds server is up or the cluster is laggy [ 230.550877][ T25] libceph: connect (1)[c::]:6789 error -101 [ 230.551895][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 230.804226][ T25] libceph: connect (1)[c::]:6789 error -101 [ 230.804993][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 231.314680][ T30] libceph: connect (1)[c::]:6789 error -101 [ 231.315849][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 231.464077][ T5719] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 231.761880][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 231.843717][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.191'. [ 232.966391][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 232.966412][ T31] audit: type=1400 audit(1790203583.121:1669): avc: denied { read write } for pid=7001 comm="syz.0.198" name="lp0" dev="devtmpfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 232.967803][ T31] audit: type=1400 audit(1790203583.121:1670): avc: denied { open } for pid=7001 comm="syz.0.198" path="/dev/usb/lp0" dev="devtmpfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 233.982581][ T7029] ceph: No mds server is up or the cluster is laggy [ 233.984084][ T31] audit: type=1400 audit(1790203584.131:1671): avc: denied { mount } for pid=7019 comm="syz.5.191" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 234.085211][ T31] audit: type=1400 audit(1790203584.221:1672): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.085341][ T31] audit: type=1400 audit(1790203584.221:1673): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.085433][ T31] audit: type=1400 audit(1790203584.231:1674): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.128776][ T31] audit: type=1400 audit(1790203584.291:1675): avc: denied { mount } for pid=7020 comm="syz.1.200" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 234.270711][ T7030] ceph: No mds server is up or the cluster is laggy [ 234.278971][ T30] libceph: connect (1)[c::]:6789 error -101 [ 234.279625][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 234.533847][ T30] libceph: connect (1)[c::]:6789 error -101 [ 234.534480][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 234.571936][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 234.572094][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 234.662215][ T31] audit: type=1400 audit(1790203584.811:1676): avc: denied { prog_load } for pid=7040 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.709767][ T30] usb 1-1: USB disconnect, device number 5 [ 234.711623][ T30] usblp0: removed [ 234.728008][ T31] audit: type=1400 audit(1790203584.881:1678): avc: denied { allowed } for pid=7042 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 234.728644][ T31] audit: type=1400 audit(1790203584.881:1679): avc: denied { create } for pid=7042 comm="syz.3.201" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.651988][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 235.652131][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 235.668902][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 235.669075][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 235.795577][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 236.017443][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 236.018138][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 236.043259][ T7048] ceph: No mds server is up or the cluster is laggy [ 236.135714][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 236.275606][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 236.276437][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 237.187517][ T7055] ceph: No mds server is up or the cluster is laggy [ 237.205515][ T30] libceph: connect (1)[c::]:6789 error -101 [ 237.206248][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 237.484304][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 237.484983][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 238.005940][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 238.006041][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 238.223430][ T25] libceph: connect (1)[c::]:6789 error -101 [ 238.223528][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 238.611288][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 238.671211][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 238.671230][ T31] audit: type=1400 audit(1790203588.821:1692): avc: denied { unmount } for pid=6315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 238.771676][ T31] audit: type=1400 audit(1790203588.921:1693): avc: denied { ioctl } for pid=7059 comm="syz.0.203" path="socket:[12903]" dev="sockfs" ino=12903 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.829928][ T31] audit: type=1400 audit(1790203588.981:1694): avc: denied { read write } for pid=6315 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.831490][ T31] audit: type=1400 audit(1790203588.981:1695): avc: denied { open } for pid=6315 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.898595][ T31] audit: type=1400 audit(1790203588.991:1696): avc: denied { ioctl } for pid=6315 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.960037][ T31] audit: type=1400 audit(1790203589.111:1697): avc: denied { setopt } for pid=7059 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.966935][ T31] audit: type=1400 audit(1790203589.121:1698): avc: denied { mounton } for pid=7059 comm="syz.0.203" path="/39/sys" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 238.992912][ T31] audit: type=1400 audit(1790203589.151:1699): avc: denied { mount } for pid=7059 comm="syz.0.203" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.050156][ T7062] ceph: No mds server is up or the cluster is laggy [ 239.056019][ T9] libceph: connect (1)[c::]:6789 error -101 [ 239.056754][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 239.210515][ T31] audit: type=1400 audit(1790203589.351:1700): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.211958][ T31] audit: type=1400 audit(1790203589.361:1701): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.967274][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 241.306715][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 241.306880][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 241.329752][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.351782][ T7068] ceph: No mds server is up or the cluster is laggy [ 241.352903][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.355073][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.367855][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.368256][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.694324][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 242.895828][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 242.896432][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 242.899204][ T7101] ceph: No mds server is up or the cluster is laggy [ 243.156295][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 243.157078][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 243.392421][ T52] Bluetooth: hci5: command tx timeout [ 243.722491][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 243.722514][ T31] audit: type=1400 audit(1790203593.871:1766): avc: denied { create } for pid=7097 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.888418][ T31] audit: type=1400 audit(1790203594.041:1767): avc: denied { write } for pid=7097 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.977012][ T31] audit: type=1400 audit(1790203594.131:1768): avc: denied { prog_load } for pid=7109 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.005927][ T31] audit: type=1400 audit(1790203594.141:1769): avc: denied { create } for pid=7109 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.005956][ T31] audit: type=1400 audit(1790203594.141:1770): avc: denied { setopt } for pid=7109 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.049434][ T31] audit: type=1400 audit(1790203594.211:1771): avc: denied { create } for pid=7097 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.057897][ T31] audit: type=1400 audit(1790203594.211:1772): avc: denied { setopt } for pid=7097 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.062771][ T31] audit: type=1400 audit(1790203594.211:1773): avc: denied { create } for pid=7097 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.069702][ T31] audit: type=1400 audit(1790203594.231:1774): avc: denied { sys_module } for pid=7083 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.069919][ T31] audit: type=1400 audit(1790203594.231:1775): avc: denied { module_request } for pid=7083 comm="syz-executor" kmod="nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.179152][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 244.405074][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 244.405823][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 244.413476][ T7115] ceph: No mds server is up or the cluster is laggy [ 244.414398][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 244.415121][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 244.464493][ T5698] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 244.614620][ T5698] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 244.674953][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 244.675751][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 244.700925][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.700959][ T5698] usb 3-1: Product: syz [ 244.700999][ T5698] usb 3-1: Manufacturer: syz [ 244.701045][ T5698] usb 3-1: SerialNumber: syz [ 245.324953][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 245.330382][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 245.472423][ T52] Bluetooth: hci5: command tx timeout [ 245.655292][ T5698] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 245.866809][ T7123] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 246.049869][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 246.232386][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.275857][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 246.276721][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 246.413426][ T7133] ceph: No mds server is up or the cluster is laggy [ 246.558687][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 246.559551][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 246.560622][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 246.607708][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.612749][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.911892][ T25] usb 1-1: config 0 descriptor?? [ 247.563567][ T52] Bluetooth: hci5: command tx timeout [ 248.120628][ T25] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 248.120710][ T6139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.316219][ T6139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.344056][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 248.395191][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 248.395205][ T25] [drm] Initialized udl on minor 1 [ 248.406117][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.406290][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 248.416660][ T5841] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.419101][ T25] usb 1-1: USB disconnect, device number 6 [ 248.431442][ T5841] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.436467][ T5841] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 248.588049][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 248.928261][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 248.928282][ T31] audit: type=1400 audit(1790203599.071:1826): avc: denied { ioctl } for pid=7141 comm="syz.3.217" path="socket:[13097]" dev="sockfs" ino=13097 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.940614][ T31] audit: type=1400 audit(1790203599.091:1827): avc: denied { perfmon } for pid=7143 comm="syz.1.218" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.027435][ T5698] usb 3-1: USB disconnect, device number 3 [ 249.031100][ T5698] usblp0: removed [ 249.071576][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 249.071739][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 249.087603][ T31] audit: type=1400 audit(1790203599.241:1828): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.091943][ T7148] ceph: No mds server is up or the cluster is laggy [ 249.144242][ T31] audit: type=1400 audit(1790203599.241:1829): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.144355][ T31] audit: type=1400 audit(1790203599.281:1830): avc: denied { setopt } for pid=7141 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.144472][ T31] audit: type=1400 audit(1790203599.281:1831): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.144569][ T31] audit: type=1400 audit(1790203599.301:1832): avc: denied { mounton } for pid=7141 comm="syz.3.217" path="/50/sys" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 249.147854][ T31] audit: type=1400 audit(1790203599.301:1833): avc: denied { mount } for pid=7141 comm="syz.3.217" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 249.584204][ T6139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.639024][ T52] Bluetooth: hci5: command tx timeout [ 250.124027][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.124104][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.222457][ T31] audit: type=1400 audit(1790203600.371:1834): avc: denied { allowed } for pid=7152 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.222486][ T31] audit: type=1400 audit(1790203600.371:1835): avc: denied { create } for pid=7152 comm="syz.1.219" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 251.362807][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 252.159954][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 252.160685][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 252.161985][ T7164] ceph: No mds server is up or the cluster is laggy [ 252.183596][ T6139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.894763][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 253.139825][ T7172] ceph: No mds server is up or the cluster is laggy [ 253.149716][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 253.150453][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 254.013749][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 254.013771][ T31] audit: type=1400 audit(1790203604.171:1866): avc: denied { create } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.142674][ T31] audit: type=1400 audit(1790203604.291:1867): avc: denied { read } for pid=7176 comm="syz.0.224" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 254.143915][ T31] audit: type=1400 audit(1790203604.301:1868): avc: denied { open } for pid=7176 comm="syz.0.224" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 254.213679][ T31] audit: type=1400 audit(1790203604.371:1869): avc: denied { create } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.573615][ T31] audit: type=1400 audit(1790203604.731:1870): avc: denied { write } for pid=7176 comm="syz.0.224" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.581822][ T31] audit: type=1400 audit(1790203604.731:1871): avc: denied { create } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.613387][ T31] audit: type=1400 audit(1790203604.771:1872): avc: denied { ioctl } for pid=7176 comm="syz.0.224" path="socket:[13110]" dev="sockfs" ino=13110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.615617][ T31] audit: type=1400 audit(1790203604.771:1873): avc: denied { connect } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.617230][ T31] audit: type=1400 audit(1790203604.771:1874): avc: denied { write } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.680377][ T31] audit: type=1400 audit(1790203604.831:1875): avc: denied { prog_load } for pid=7176 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.148414][ T6139] bridge_slave_1: left allmulticast mode [ 257.148439][ T6139] bridge_slave_1: left promiscuous mode [ 257.149047][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.197458][ T6139] bridge_slave_0: left allmulticast mode [ 257.197482][ T6139] bridge_slave_0: left promiscuous mode [ 257.197631][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.317898][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 259.317917][ T31] audit: type=1400 audit(1790203609.191:1912): avc: denied { read } for pid=7198 comm="syz.2.223" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.317954][ T31] audit: type=1400 audit(1790203609.191:1913): avc: denied { open } for pid=7198 comm="syz.2.223" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.317998][ T31] audit: type=1400 audit(1790203609.211:1914): avc: denied { ioctl } for pid=7198 comm="syz.2.223" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.318034][ T31] audit: type=1400 audit(1790203609.221:1915): avc: denied { set_context_mgr } for pid=7198 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 259.429002][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.455975][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.460609][ T6139] bond0 (unregistering): Released all slaves [ 259.517055][ T31] audit: type=1400 audit(1790203609.671:1916): avc: denied { write } for pid=7190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.520424][ T31] audit: type=1400 audit(1790203609.671:1917): avc: denied { add_name } for pid=7190 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.520465][ T31] audit: type=1400 audit(1790203609.671:1918): avc: denied { create } for pid=7190 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.526432][ T31] audit: type=1400 audit(1790203609.671:1919): avc: denied { write } for pid=7190 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=2922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.526469][ T31] audit: type=1400 audit(1790203609.681:1920): avc: denied { append } for pid=7190 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=2922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.549985][ T7200] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 259.744544][ T31] audit: type=1400 audit(1790203609.901:1921): avc: denied { name_bind } for pid=7208 comm="syz.1.225" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 260.015532][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'. [ 260.316074][ T7218] ceph: No mds server is up or the cluster is laggy [ 260.321526][ T2163] libceph: connect (1)[c::]:6789 error -101 [ 260.329664][ T2163] libceph: mon0 (1)[c::]:6789 connect error [ 260.590416][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 260.591067][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 261.632948][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 261.943842][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'. [ 262.206868][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 262.207032][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 262.232280][ T6139] hsr_slave_0: left promiscuous mode [ 262.236015][ T6139] hsr_slave_1: left promiscuous mode [ 262.237652][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.237670][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.271096][ T7233] ceph: No mds server is up or the cluster is laggy [ 262.463188][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 262.463349][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 262.632130][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.634001][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.211438][ T6139] veth1_macvtap: left promiscuous mode [ 263.211521][ T6139] veth0_macvtap: left promiscuous mode [ 263.211905][ T6139] veth1_vlan: left promiscuous mode [ 263.212029][ T6139] veth0_vlan: left promiscuous mode [ 263.252520][ T5841] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 263.406345][ T5841] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 263.426950][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.426978][ T5841] usb 3-1: Product: syz [ 263.427014][ T5841] usb 3-1: Manufacturer: syz [ 263.427050][ T5841] usb 3-1: SerialNumber: syz [ 263.856579][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 263.878497][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 263.956099][ T5841] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 264.068299][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.068814][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.068916][ T7083] bridge_slave_0: entered allmulticast mode [ 264.080310][ T7083] bridge_slave_0: entered promiscuous mode [ 264.090255][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.090321][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.090397][ T7083] bridge_slave_1: entered allmulticast mode [ 264.104501][ T7083] bridge_slave_1: entered promiscuous mode [ 264.219604][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.220925][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.296718][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 264.325968][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 264.326016][ T31] audit: type=1400 audit(1790203614.481:1982): avc: denied { read write } for pid=7240 comm="syz.2.229" name="lp0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 264.378324][ T31] audit: type=1400 audit(1790203614.531:1983): avc: denied { open } for pid=7240 comm="syz.2.229" path="/dev/usb/lp0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 264.449882][ T31] audit: type=1400 audit(1790203614.601:1984): avc: denied { ioctl } for pid=7247 comm="syz.1.234" path="socket:[13889]" dev="sockfs" ino=13889 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.520278][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 264.701635][ T31] audit: type=1400 audit(1790203614.851:1985): avc: denied { bpf } for pid=7240 comm="syz.2.229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 264.729445][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 264.737942][ T31] audit: type=1400 audit(1790203614.891:1986): avc: denied { write } for pid=7240 comm="syz.2.229" name="ip_tables_names" dev="proc" ino=4026533317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 264.748691][ T31] audit: type=1400 audit(1790203614.901:1987): avc: denied { execmem } for pid=7240 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 264.849414][ T31] audit: type=1400 audit(1790203615.001:1988): avc: denied { read } for pid=7264 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.856286][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 264.857048][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 264.884981][ T31] audit: type=1400 audit(1790203615.041:1989): avc: denied { read open } for pid=7264 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.885750][ T31] audit: type=1400 audit(1790203615.041:1990): avc: denied { getattr } for pid=7264 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.958712][ T7261] ceph: No mds server is up or the cluster is laggy [ 264.984629][ T31] audit: type=1400 audit(1790203615.141:1992): avc: denied { mounton } for pid=7243 comm="syz.3.233" path="/53/sys" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.037545][ T7083] team0: Port device team_slave_0 added [ 265.044274][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 265.045018][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 265.088876][ T7266] ceph: No mds server is up or the cluster is laggy [ 265.107122][ T7083] team0: Port device team_slave_1 added [ 265.125575][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 265.126326][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 265.304460][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 265.305476][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 265.643859][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 265.644548][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 265.825258][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 265.826138][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 267.222808][ T7255] ceph: No mds server is up or the cluster is laggy [ 267.223176][ T25] libceph: connect (1)[c::]:6789 error -101 [ 267.223317][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 267.303636][ T5698] usb 3-1: USB disconnect, device number 4 [ 267.309596][ T5698] usblp0: removed [ 267.411239][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 267.420912][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.420925][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.420945][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.471123][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.471138][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.471159][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.924390][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 270.924408][ T31] audit: type=1400 audit(1790203621.081:2061): avc: denied { create } for pid=7297 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.958344][ T31] audit: type=1400 audit(1790203621.111:2062): avc: denied { setopt } for pid=7297 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.094275][ T31] audit: type=1400 audit(1790203621.251:2063): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 271.131241][ T31] audit: type=1400 audit(1790203621.281:2064): avc: denied { read } for pid=7300 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.196588][ T31] audit: type=1400 audit(1790203621.351:2065): avc: denied { open } for pid=7300 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.230956][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 271.407596][ T31] audit: type=1400 audit(1790203621.561:2066): avc: denied { ioctl } for pid=7297 comm="syz.0.239" path="socket:[13223]" dev="sockfs" ino=13223 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.471462][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 271.472107][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 271.529628][ T7306] ceph: No mds server is up or the cluster is laggy [ 271.538630][ T31] audit: type=1400 audit(1790203621.691:2067): avc: denied { mount } for pid=7297 comm="syz.0.239" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 271.724234][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 271.724973][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 271.824497][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 271.982687][ T31] audit: type=1400 audit(1790203622.131:2068): avc: denied { ioctl } for pid=7304 comm="syz.3.241" path="socket:[13238]" dev="sockfs" ino=13238 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.218885][ T7083] hsr_slave_0: entered promiscuous mode [ 274.221709][ T7083] hsr_slave_1: entered promiscuous mode [ 274.222003][ T7083] debugfs: 'hsr0' already exists in 'hsr' [ 274.222013][ T7083] Cannot create hsr debugfs directory [ 274.248155][ T7314] ceph: No mds server is up or the cluster is laggy [ 274.248671][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 274.248822][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 274.258156][ T31] audit: type=1400 audit(1790203624.411:2069): avc: denied { search } for pid=7305 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.258916][ T31] audit: type=1400 audit(1790203624.411:2070): avc: denied { read } for pid=7305 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.897640][ T7333] sctp: [Deprecated]: syz.2.244 (pid 7333) Use of int in max_burst socket option. [ 274.897640][ T7333] Use struct sctp_assoc_value instead [ 275.000812][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 275.135173][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 275.229751][ T7083] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.542969][ T30] libceph: connect (1)[c::]:6789 error -101 [ 275.543723][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 275.543985][ T7347] ceph: No mds server is up or the cluster is laggy [ 275.545318][ T30] libceph: connect (1)[c::]:6789 error -101 [ 275.545927][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 275.803908][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 275.806833][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 276.318833][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 276.319011][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 277.577073][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 277.790703][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 278.531140][ T31] kauditd_printk_skb: 86 callbacks suppressed [ 278.531180][ T31] audit: type=1400 audit(1790203628.681:2157): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 278.535462][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.536218][ T7083] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.571909][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.606629][ T31] audit: type=1400 audit(1790203628.751:2158): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.606676][ T31] audit: type=1400 audit(1790203628.751:2159): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.607037][ T31] audit: type=1400 audit(1790203628.751:2160): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.662429][ T31] audit: type=1400 audit(1790203628.811:2161): avc: denied { mounton } for pid=7354 comm="syz.1.250" path="/53/config" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 278.662477][ T31] audit: type=1400 audit(1790203628.811:2162): avc: denied { mount } for pid=7354 comm="syz.1.250" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 278.662509][ T31] audit: type=1400 audit(1790203628.811:2163): avc: denied { search } for pid=7354 comm="syz.1.250" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.662539][ T31] audit: type=1400 audit(1790203628.811:2164): avc: denied { search } for pid=7354 comm="syz.1.250" name="nullb" dev="configfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.662569][ T31] audit: type=1400 audit(1790203628.811:2165): avc: denied { search } for pid=7354 comm="syz.1.250" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.662605][ T31] audit: type=1400 audit(1790203628.811:2166): avc: denied { search } for pid=7354 comm="syz.1.250" name="nullb" dev="configfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.921765][ T7083] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.933093][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.961146][ T7083] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.970632][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.238137][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.261633][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.275859][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.275951][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.287186][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.287258][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.860404][ T7369] orangefs_mount: mount request failed with -4 [ 279.995430][ T7382] orangefs_mount: mount request failed with -4 [ 280.444820][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 280.800380][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.177251][ T7083] veth0_vlan: entered promiscuous mode [ 281.188611][ T7083] veth1_vlan: entered promiscuous mode [ 281.213978][ T7083] veth0_macvtap: entered promiscuous mode [ 281.217483][ T7083] veth1_macvtap: entered promiscuous mode [ 281.241454][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.252217][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.302458][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.302498][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.302526][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.302554][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.375459][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.375477][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.497036][ T7441] process 'syz.1.264' launched './file2' with NULL argv: empty string added [ 282.072459][ T7450] 9pnet_virtio: no channels available for device syz [ 283.112966][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 283.462626][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.462647][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.533437][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 283.533454][ T31] audit: type=1400 audit(1790203632.686:2267): avc: denied { mount } for pid=7083 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 283.540251][ T31] audit: type=1400 audit(1790203632.696:2268): avc: denied { mounton } for pid=7083 comm="syz-executor" path="/root/syzkaller.mxm3cG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 283.544606][ T31] audit: type=1400 audit(1790203632.706:2269): avc: denied { mounton } for pid=7083 comm="syz-executor" path="/root/syzkaller.mxm3cG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 283.554698][ T31] audit: type=1400 audit(1790203632.706:2270): avc: denied { unmount } for pid=7083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 283.558312][ T7461] syzkaller0: entered promiscuous mode [ 283.558327][ T7461] syzkaller0: entered allmulticast mode [ 283.575018][ T31] audit: type=1400 audit(1790203632.726:2271): avc: denied { mounton } for pid=7083 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 283.575831][ T31] audit: type=1400 audit(1790203632.726:2272): avc: denied { mount } for pid=7083 comm="syz-executor" name="/" dev="gadgetfs" ino=6962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 283.605479][ T31] audit: type=1400 audit(1790203632.756:2273): avc: denied { mount } for pid=7083 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 283.919322][ T31] audit: type=1400 audit(1790203633.076:2274): avc: denied { create } for pid=7463 comm="syz.6.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.921197][ T31] audit: type=1400 audit(1790203633.076:2275): avc: denied { write } for pid=7463 comm="syz.6.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.964242][ T31] audit: type=1400 audit(1790203633.126:2276): avc: denied { nlmsg_write } for pid=7463 comm="syz.6.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.964355][ T7464] netlink: 36 bytes leftover after parsing attributes in process `syz.6.205'. [ 286.013451][ T5841] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 286.219891][ T5841] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 286.241189][ T5841] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.241340][ T5841] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 286.241371][ T5841] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.328401][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 286.328435][ T5841] usb 1-1: Product: syz [ 286.328471][ T5841] usb 1-1: Manufacturer: syz [ 286.395940][ T7482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.398657][ T5841] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 286.445984][ T5841] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 286.653170][ T7482] ======================================================= [ 286.653170][ T7482] WARNING: The mand mount option has been deprecated and [ 286.653170][ T7482] and is ignored by this kernel. Remove the mand [ 286.653170][ T7482] option from the mount to silence this warning. [ 286.653170][ T7482] ======================================================= [ 287.411002][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 287.629823][ T5841] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 287.669395][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.669602][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.669673][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 287.669805][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.058913][ T5841] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 288.088067][ T5841] keyspan 4-1:1.0: unsupported endpoint type 0 [ 288.088444][ T5841] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 288.154732][ T5841] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 288.154822][ T5841] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 288.264125][ T25] usb 1-1: USB disconnect, device number 7 [ 288.564623][ T5841] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 288.730535][ T5841] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 288.730840][ T5841] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 288.840835][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 288.841140][ T25] garmin_gps 1-1:1.0: device disconnected [ 288.863705][ T5841] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 289.112011][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 289.112030][ T31] audit: type=1400 audit(1790203638.266:2289): avc: denied { name_bind } for pid=7504 comm="syz.0.279" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 289.112399][ T31] audit: type=1400 audit(1790203638.266:2290): avc: denied { node_bind } for pid=7504 comm="syz.0.279" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 289.184734][ T31] audit: type=1400 audit(1790203638.346:2291): avc: denied { write } for pid=7504 comm="syz.0.279" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 289.196841][ T31] audit: type=1400 audit(1790203638.356:2292): avc: denied { create } for pid=7504 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 289.586609][ T31] audit: type=1400 audit(1790203638.746:2293): avc: denied { ioctl } for pid=7513 comm="syz.6.282" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.588447][ T31] audit: type=1400 audit(1790203638.746:2294): avc: denied { set_context_mgr } for pid=7513 comm="syz.6.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 289.591447][ T7514] binder: 7513:7514 ioctl c0306201 0 returned -14 [ 289.831607][ T7454] syz.1.268 (7454): drop_caches: 1 [ 289.838215][ T7499] syz.3.278 (7499): drop_caches: 1 [ 289.885354][ T31] audit: type=1400 audit(1790203639.046:2295): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 289.971519][ T31] audit: type=1400 audit(1790203639.126:2296): avc: denied { bind } for pid=7515 comm="syz.6.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.002430][ T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 290.098467][ T7509] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 290.098494][ T7509] netlink: 208 bytes leftover after parsing attributes in process `syz.0.279'. [ 290.131044][ T31] audit: type=1400 audit(1790203639.286:2297): avc: denied { read write } for pid=7504 comm="syz.0.279" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 290.131075][ T31] audit: type=1400 audit(1790203639.286:2298): avc: denied { open } for pid=7504 comm="syz.0.279" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 290.182991][ T25] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 290.186679][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.186702][ T25] usb 3-1: Product: syz [ 290.186716][ T25] usb 3-1: Manufacturer: syz [ 290.186730][ T25] usb 3-1: SerialNumber: syz [ 290.188048][ T7499] syz.3.278 (7499): drop_caches: 1 [ 290.350244][ T5841] usb 4-1: USB disconnect, device number 5 [ 290.368934][ T5841] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 290.395774][ T5841] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 290.396114][ T5841] keyspan 4-1:1.0: device disconnected [ 290.444417][ T7535] netlink: 'syz.6.286': attribute type 1 has an invalid length. [ 290.675985][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 290.735338][ T2163] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.884704][ T2163] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 290.885616][ T2163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.896001][ T2163] usb 7-1: config 0 descriptor?? [ 291.025494][ T7545] overlay: Unknown parameter 'audit' [ 291.490220][ T2163] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 291.787020][ T2163] [drm:udl_init] *ERROR* Selecting channel failed [ 293.025062][ T2163] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 293.025085][ T2163] [drm] Initialized udl on minor 1 [ 293.047795][ T2163] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.048566][ T2163] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 293.087061][ T2163] usb 7-1: USB disconnect, device number 2 [ 293.094756][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 293.159454][ T5712] usb 3-1: USB disconnect, device number 5 [ 293.163692][ T5712] usblp0: removed [ 294.150981][ T7563] null_blk: rnullb0: using native zone append [ 294.525486][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 294.525503][ T31] audit: type=1400 audit(1790203643.686:2309): avc: denied { write } for pid=7548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.621432][ T31] audit: type=1400 audit(1790203643.776:2310): avc: denied { write } for pid=7576 comm="syz.1.297" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 295.054433][ T31] audit: type=1400 audit(1790203644.206:2311): avc: denied { create } for pid=7576 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.085470][ T31] audit: type=1400 audit(1790203644.246:2312): avc: denied { write } for pid=7576 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.137679][ T7563] null_blk: disk rnullb0 created [ 295.210107][ T31] audit: type=1400 audit(1790203644.366:2313): avc: denied { write } for pid=7583 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.597769][ T31] audit: type=1400 audit(1790203644.756:2314): avc: denied { read } for pid=7599 comm="syz.2.301" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.598910][ T31] audit: type=1400 audit(1790203644.756:2315): avc: denied { open } for pid=7599 comm="syz.2.301" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.696913][ T31] audit: type=1400 audit(1790203644.846:2316): avc: denied { ioctl } for pid=7599 comm="syz.2.301" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.790635][ T31] audit: type=1400 audit(1790203645.946:2317): avc: denied { write } for pid=7589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.881783][ T31] audit: type=1400 audit(1790203646.036:2318): avc: denied { write } for pid=7622 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.079128][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 297.142704][ T5793] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 297.309194][ T5841] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 297.328496][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.328696][ T5841] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 297.328746][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.369248][ T5793] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 297.422905][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 297.422970][ T5841] usb 2-1: Product: syz [ 297.423030][ T5841] usb 2-1: Manufacturer: syz [ 297.462992][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.463198][ T5793] usb 3-1: Product: syz [ 297.463296][ T5793] usb 3-1: Manufacturer: syz [ 297.463399][ T5793] usb 3-1: SerialNumber: syz [ 298.611213][ T7612] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.613088][ T5841] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 298.638167][ T5841] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 299.127147][ T5793] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 301.157011][ T2163] usb 3-1: USB disconnect, device number 6 [ 301.161069][ T9] usb 2-1: USB disconnect, device number 3 [ 301.176567][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 301.176856][ T9] garmin_gps 2-1:1.0: device disconnected [ 301.199776][ T2163] usblp0: removed [ 301.873149][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 301.873167][ T31] audit: type=1400 audit(1790203651.036:2324): avc: denied { write } for pid=7632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.921094][ T31] audit: type=1400 audit(1790203651.076:2325): avc: denied { unmount } for pid=7083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 302.102901][ T31] audit: type=1400 audit(1790203651.226:2326): avc: denied { write } for pid=7676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.249057][ T7683] overlay: Unknown parameter 'audit' [ 302.297908][ T31] audit: type=1400 audit(1790203651.456:2327): avc: denied { write } for pid=7677 comm="syz.6.317" name="configs" dev="configfs" ino=14014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.351815][ T31] audit: type=1400 audit(1790203651.456:2328): avc: denied { add_name } for pid=7677 comm="syz.6.317" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.352032][ T31] audit: type=1400 audit(1790203651.506:2329): avc: denied { create } for pid=7677 comm="syz.6.317" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 302.481286][ T31] audit: type=1400 audit(1790203651.636:2330): avc: denied { write } for pid=7677 comm="syz.6.317" name="functions" dev="configfs" ino=14013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.698331][ T31] audit: type=1400 audit(1790203651.846:2331): avc: denied { write } for pid=7677 comm="syz.6.317" name="c.1" dev="configfs" ino=16527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.738033][ T31] audit: type=1400 audit(1790203651.896:2332): avc: denied { create } for pid=7677 comm="syz.6.317" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 302.831716][ T31] audit: type=1400 audit(1790203651.956:2333): avc: denied { write } for pid=7677 comm="syz.6.317" name="c.1" dev="configfs" ino=16527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.137105][ T7685] UDC core: g1: couldn't find an available UDC or it's busy [ 304.746216][ T7707] Bluetooth: MGMT ver 1.23 [ 306.958951][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 306.958968][ T31] audit: type=1400 audit(1790203656.116:2338): avc: denied { bind } for pid=7728 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.992455][ T5712] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 307.195038][ T5712] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 307.202042][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.202073][ T5712] usb 1-1: Product: syz [ 307.202087][ T5712] usb 1-1: Manufacturer: syz [ 307.202100][ T5712] usb 1-1: SerialNumber: syz [ 307.214833][ T31] audit: type=1400 audit(1790203656.376:2339): avc: denied { write } for pid=7743 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.849296][ T5712] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 307.865772][ T31] audit: type=1400 audit(1790203657.026:2340): avc: denied { wake_alarm } for pid=7734 comm="syz.1.329" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.625246][ T7765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.782125][ T31] audit: type=1400 audit(1790203657.936:2341): avc: denied { read } for pid=7767 comm="syz.6.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.801675][ T5712] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 308.968944][ T31] audit: type=1400 audit(1790203658.126:2342): avc: denied { map } for pid=7767 comm="syz.6.327" path="/13/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 309.422090][ T5712] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 309.748625][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.835261][ T5712] usb 3-1: config 0 descriptor?? [ 309.979973][ T7759] syz.1.331 (7759): drop_caches: 1 [ 310.066229][ T5841] usb 1-1: USB disconnect, device number 8 [ 310.069044][ T5841] usblp0: removed [ 310.114227][ T7764] batman_adv: batadv0: Adding interface: macvtap1 [ 310.114245][ T7764] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.114269][ T7764] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 310.230125][ T7772] UDC core: g1: couldn't find an available UDC or it's busy [ 311.414911][ T7764] batman_adv: batadv0: Removing interface: macvtap1 [ 311.676635][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.676689][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.757426][ T7787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 312.804849][ T5712] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 312.805353][ T5712] [drm:udl_init] *ERROR* Selecting channel failed [ 312.862793][ T31] audit: type=1400 audit(1790203661.025:2343): avc: denied { unmount } for pid=7795 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 312.904309][ T5712] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 312.904331][ T5712] [drm] Initialized udl on minor 1 [ 312.925238][ T5712] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 312.925546][ T5712] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 312.941567][ T5712] usb 3-1: USB disconnect, device number 7 [ 312.943470][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 313.430655][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 315.941572][ T7821] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 315.989101][ T7821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.090786][ T5841] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 316.247343][ T5841] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 316.282365][ T2163] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 316.441249][ T2163] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.459068][ T2163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.460222][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.460242][ T5841] usb 1-1: Product: syz [ 316.460256][ T5841] usb 1-1: Manufacturer: syz [ 316.460268][ T5841] usb 1-1: SerialNumber: syz [ 316.616354][ T2163] usb 3-1: config 0 descriptor?? [ 317.148850][ T2163] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 317.615101][ T5841] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 317.696767][ T7835] overlay: Unknown parameter 'audit' [ 317.846853][ T2163] [drm:udl_init] *ERROR* Selecting channel failed [ 319.938308][ T2163] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 319.938329][ T2163] [drm] Initialized udl on minor 1 [ 319.940183][ T2163] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 319.940503][ T2163] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 319.972739][ T5698] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 319.975349][ T2163] usb 3-1: USB disconnect, device number 8 [ 319.977608][ T5698] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 319.977764][ T5698] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 321.361763][ T7863] syz.3.359 uses obsolete (PF_INET,SOCK_PACKET) [ 321.373799][ T31] audit: type=1400 audit(1790203668.535:2344): avc: denied { create } for pid=7862 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.380342][ T31] audit: type=1400 audit(1790203668.535:2345): avc: denied { listen } for pid=7862 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.415493][ T7863] netlink: 'syz.3.359': attribute type 2 has an invalid length. [ 321.420052][ T31] audit: type=1400 audit(1790203668.575:2346): avc: denied { connect } for pid=7862 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.421223][ T31] audit: type=1400 audit(1790203668.575:2347): avc: denied { write } for pid=7862 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.492457][ T5719] usb 1-1: USB disconnect, device number 9 [ 321.500017][ T5719] usblp0: removed [ 321.572970][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 321.735575][ T2163] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 321.894660][ T2163] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.901189][ T2163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.038885][ T2163] usb 2-1: config 0 descriptor?? [ 322.077524][ T7871] xt_cgroup: path and classid specified [ 323.641532][ T7861] batman_adv: batadv0: Adding interface: macvtap1 [ 323.641549][ T7861] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.641572][ T7861] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 323.812026][ T31] audit: type=1400 audit(1790203670.965:2348): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 324.012157][ T7885] netlink: 'syz.6.364': attribute type 2 has an invalid length. [ 324.108058][ T7861] batman_adv: batadv0: Removing interface: macvtap1 [ 324.663221][ T7897] netlink: 'syz.3.367': attribute type 2 has an invalid length. [ 324.857177][ T7901] tmpfs: Bad value for 'mpol' [ 325.562286][ T31] audit: type=1400 audit(1790203672.675:2349): avc: denied { read } for pid=7900 comm="syz.2.368" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.562326][ T31] audit: type=1400 audit(1790203672.675:2350): avc: denied { open } for pid=7900 comm="syz.2.368" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.562358][ T31] audit: type=1400 audit(1790203672.675:2351): avc: denied { ioctl } for pid=7900 comm="syz.2.368" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.647997][ T2163] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 325.648884][ T2163] [drm:udl_init] *ERROR* Selecting channel failed [ 325.695071][ T2163] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 325.695086][ T2163] [drm] Initialized udl on minor 1 [ 325.697230][ T2163] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.701998][ T2163] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.718041][ T2163] usb 2-1: USB disconnect, device number 4 [ 325.721151][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.721479][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.721624][ T5719] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 326.162348][ T25] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 326.435479][ T25] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 326.438464][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.438486][ T25] usb 1-1: Product: syz [ 326.438500][ T25] usb 1-1: Manufacturer: syz [ 326.438512][ T25] usb 1-1: SerialNumber: syz [ 326.584423][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 326.667749][ T7916] orangefs_mount: mount request failed with -4 [ 327.109797][ T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 327.325834][ T7922] orangefs_mount: mount request failed with -4 [ 327.887618][ T7927] orangefs_mount: mount request failed with -4 [ 328.423526][ T7953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.357686][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.379'. [ 329.607028][ T10] usb 1-1: USB disconnect, device number 10 [ 329.619677][ T10] usblp0: removed [ 332.163900][ T7983] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 332.164036][ T7983] netlink: 208 bytes leftover after parsing attributes in process `syz.3.390'. [ 333.813733][ T5785] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 334.050874][ T5785] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.068403][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.105662][ T5785] usb 3-1: config 0 descriptor?? [ 334.311929][ T6761] udevd[6761]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 335.154858][ T2163] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.254146][ T6761] udevd[6761]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 335.317524][ T2163] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 335.318517][ T2163] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.318556][ T2163] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 335.318577][ T2163] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.331473][ T2163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 335.331493][ T2163] usb 4-1: Product: syz [ 335.331506][ T2163] usb 4-1: Manufacturer: syz [ 335.364967][ T8028] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 335.374834][ T2163] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 335.410264][ T2163] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 335.507974][ T6761] udevd[6761]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 335.587564][ T31] audit: type=1400 audit(1790203680.740:2352): avc: denied { create } for pid=8045 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.770654][ T5719] usb 4-1: USB disconnect, device number 6 [ 335.781423][ T5719] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 335.781899][ T5719] garmin_gps 4-1:1.0: device disconnected [ 335.943770][ T5785] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 335.946246][ T5785] [drm:udl_init] *ERROR* Selecting channel failed [ 336.823416][ T5785] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 336.823437][ T5785] [drm] Initialized udl on minor 1 [ 336.831320][ T5785] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.881272][ T31] audit: type=1400 audit(1790203682.030:2353): avc: denied { setopt } for pid=8053 comm="syz.6.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.922037][ T31] audit: type=1400 audit(1790203682.070:2354): avc: denied { write } for pid=8053 comm="syz.6.409" name="functions" dev="configfs" ino=14013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.925933][ T31] audit: type=1400 audit(1790203682.080:2355): avc: denied { write } for pid=8053 comm="syz.6.409" name="c.1" dev="configfs" ino=16527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.928620][ T31] audit: type=1400 audit(1790203682.080:2356): avc: denied { write } for pid=8053 comm="syz.6.409" name="c.1" dev="configfs" ino=16527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.953111][ T5785] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 337.161043][ T8054] configfs-gadget.g1 gadget.0: HOST MAC fe:43:f5:f3:3f:0b [ 337.161068][ T8054] configfs-gadget.g1 gadget.0: MAC 3e:48:81:ce:06:2f [ 337.162056][ T5793] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 337.162902][ T5793] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 337.163071][ T5793] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 337.201677][ T5785] usb 3-1: USB disconnect, device number 9 [ 337.442531][ T5841] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 337.599883][ T5841] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 337.628642][ T5841] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.629155][ T5841] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.630285][ T5841] usb 1-1: Dual-Role OTG device on HNP port [ 337.651497][ T6780] udevd[6780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 337.652812][ T6845] udevd[6845]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 337.676012][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.727025][ C1] ------------[ cut here ]------------ [ 337.727036][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 337.727052][ C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#1: kworker/1:6/5785 [ 337.749778][ C1] Modules linked in: [ 337.753672][ C1] CPU: 1 UID: 0 PID: 5785 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 337.763042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 337.773096][ C1] Workqueue: usb_hub_wq hub_event [ 337.778141][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 337.783527][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 337.803121][ C1] RSP: 0018:ffffc90000a18a00 EFLAGS: 00010046 [ 337.809174][ C1] RAX: dffffc0000000000 RBX: ffff88802851c0e0 RCX: ffffffff8cda4960 [ 337.817129][ C1] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610 [ 337.825082][ C1] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 337.833041][ C1] R10: 0000000000000000 R11: ffffffff827f38e0 R12: ffffffff8cda05a0 [ 337.840997][ C1] R13: 0000000000000000 R14: ffff88802851c0e0 R15: ffff8880798e0da0 [ 337.848952][ C1] FS: 0000000000000000(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 337.857865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.864430][ C1] CR2: 000055ba2005b000 CR3: 0000000029eca000 CR4: 00000000003526f0 [ 337.872383][ C1] Call Trace: [ 337.875643][ C1] [ 337.878469][ C1] hidg_set_alt+0x190/0xa10 [ 337.882958][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 337.888145][ C1] ? rcu_is_watching+0x13/0xc0 [ 337.892898][ C1] composite_setup+0x2ccf/0x9290 [ 337.897825][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 337.902754][ C1] ? __pfx_composite_setup+0x10/0x10 [ 337.908019][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.913374][ C1] ? do_raw_spin_lock+0x128/0x260 [ 337.918384][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.923744][ C1] ? configfs_composite_setup+0xfb/0x130 [ 337.929363][ C1] configfs_composite_setup+0xfb/0x130 [ 337.934810][ C1] dummy_timer+0x2039/0x3700 [ 337.939394][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 337.945189][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 337.950812][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 337.955731][ C1] ? mark_held_locks+0x40/0x70 [ 337.960478][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 337.966273][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 337.971192][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 337.976385][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 337.981489][ C1] handle_softirqs+0x1e6/0x9d0 [ 337.986240][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 337.991507][ C1] ? _raw_spin_unlock+0x28/0x50 [ 337.996343][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 338.001968][ C1] __irq_exit_rcu+0x16a/0x210 [ 338.006625][ C1] irq_exit_rcu+0x9/0x30 [ 338.010873][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.016494][ C1] [ 338.019407][ C1] [ 338.022318][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.028279][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 338.034679][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 db 12 f6 48 89 df e8 3e 32 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 28 02 f6 65 48 83 3d 34 54 b8 08 00 74 16 5b [ 338.054268][ C1] RSP: 0018:ffffc90004b9ed18 EFLAGS: 00000246 [ 338.060315][ C1] RAX: 0000000000000006 RBX: ffffffff8edf81d8 RCX: 0000000000000040 [ 338.068267][ C1] RDX: 0000000000000001 RSI: ffffffff8e38d191 RDI: ffffffff8c623580 [ 338.076218][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 338.084167][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 338.092116][ C1] R13: ffff888033e204d0 R14: ffffffff8edf7c80 R15: 000000000000730d [ 338.100080][ C1] rcu_preempt_deferred_qs_irqrestore+0x8b9/0xb90 [ 338.106481][ C1] ? __rcu_read_unlock+0x26a/0x5e0 [ 338.111576][ C1] ? rcu_is_watching+0x13/0xc0 [ 338.116330][ C1] __rcu_read_unlock+0x27f/0x5e0 [ 338.121255][ C1] unwind_next_frame+0x3c8/0x2090 [ 338.126268][ C1] ? __unwind_start+0x2f7/0x7e0 [ 338.131113][ C1] __unwind_start+0x3cd/0x7e0 [ 338.135780][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.141914][ C1] arch_stack_walk+0x73/0xf0 [ 338.146496][ C1] ? arch_stack_walk+0x73/0xf0 [ 338.151252][ C1] stack_trace_save+0x8e/0xc0 [ 338.155910][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 338.161259][ C1] ? unwind_next_frame+0xbd/0x2090 [ 338.166359][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 338.171280][ C1] kasan_save_stack+0x30/0x50 [ 338.175974][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 338.181162][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 338.187214][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 338.193092][ C1] ? trace_contention_end+0x126/0x160 [ 338.198447][ C1] delete_node+0x200/0x8f0 [ 338.202849][ C1] ? __mutex_lock+0x26c/0x1bd0 [ 338.207606][ C1] __radix_tree_delete+0x193/0x3d0 [ 338.212713][ C1] radix_tree_delete_item+0xea/0x230 [ 338.217985][ C1] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 338.223866][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.229842][ C1] drm_mode_object_unregister+0xcf/0x1c0 [ 338.235457][ C1] drm_property_free_blob+0x19d/0x240 [ 338.240817][ C1] ? __pfx_drm_property_free_blob+0x10/0x10 [ 338.246699][ C1] drm_mode_object_put.part.0+0xf2/0x160 [ 338.252314][ C1] drm_mode_object_put+0x3c/0x50 [ 338.257232][ C1] drm_property_blob_put+0x1f/0x30 [ 338.262323][ C1] drm_mode_config_cleanup+0x565/0x9d0 [ 338.267771][ C1] ? __pfx___drm_dev_dbg+0x10/0x10 [ 338.272865][ C1] ? __pfx_drm_mode_config_cleanup+0x10/0x10 [ 338.278837][ C1] ? kasan_quarantine_put+0x104/0x240 [ 338.284194][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.289380][ C1] ? drm_managed_release+0x1c0/0x540 [ 338.294651][ C1] ? drm_managed_release+0x2a9/0x540 [ 338.299933][ C1] ? kfree+0x22b/0x6d0 [ 338.303993][ C1] ? __pfx_drm_mode_config_init_release+0x10/0x10 [ 338.310397][ C1] drm_managed_release+0x1bb/0x540 [ 338.315499][ C1] drm_dev_put.part.0+0xca/0x140 [ 338.320423][ C1] devm_drm_dev_init_release+0x1f/0x30 [ 338.325868][ C1] release_nodes+0xa5/0x120 [ 338.330359][ C1] devres_release_all+0x112/0x180 [ 338.335374][ C1] ? __pfx_devres_release_all+0x10/0x10 [ 338.340913][ C1] device_unbind_cleanup+0x81/0x270 [ 338.346096][ C1] device_release_driver_internal+0x4c4/0x620 [ 338.352157][ C1] bus_remove_device+0x2bc/0x560 [ 338.357078][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 338.362520][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 338.368140][ C1] device_del+0x376/0x9b0 [ 338.372457][ C1] ? __pfx_device_del+0x10/0x10 [ 338.377292][ C1] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 338.382994][ C1] ? lock_acquire+0x1d1/0x380 [ 338.387664][ C1] usb_disable_device+0x367/0x810 [ 338.392675][ C1] ? mark_held_locks+0x40/0x70 [ 338.397427][ C1] usb_disconnect+0x2e2/0x9a0 [ 338.402096][ C1] hub_event+0x1bb1/0x4420 [ 338.406528][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 338.411452][ C1] ? __pfx_hub_event+0x10/0x10 [ 338.416202][ C1] ? lockdep_count_forward_deps+0x180/0x200 [ 338.422082][ C1] ? lock_acquire+0x1d1/0x380 [ 338.426741][ C1] ? process_one_work+0xa2c/0x1b10 [ 338.431843][ C1] ? process_one_work+0x906/0x1b10 [ 338.436943][ C1] ? process_one_work+0x906/0x1b10 [ 338.442050][ C1] process_one_work+0xac7/0x1b10 [ 338.446986][ C1] ? __pfx_process_one_work+0x10/0x10 [ 338.452354][ C1] ? lock_acquire+0x1d1/0x380 [ 338.457018][ C1] ? __pfx_hub_event+0x10/0x10 [ 338.461775][ C1] worker_thread+0x5ef/0xe50 [ 338.466359][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.471466][ C1] ? kthread+0x13a/0x450 [ 338.475696][ C1] ? __pfx_worker_thread+0x10/0x10 [ 338.480797][ C1] kthread+0x373/0x450 [ 338.484853][ C1] ? __pfx_kthread+0x10/0x10 [ 338.489432][ C1] ret_from_fork+0x730/0xd60 [ 338.494005][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 338.499101][ C1] ? __switch_to+0x800/0x10f0 [ 338.503766][ C1] ? __pfx_kthread+0x10/0x10 [ 338.508343][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.513103][ C1] [ 338.516111][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.523372][ C1] CPU: 1 UID: 0 PID: 5785 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 338.532722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 338.542762][ C1] Workqueue: usb_hub_wq hub_event [ 338.547788][ C1] Call Trace: [ 338.551055][ C1] [ 338.553882][ C1] dump_stack_lvl+0x100/0x190 [ 338.558555][ C1] vpanic+0x553/0x970 [ 338.562522][ C1] ? __pfx_vpanic+0x10/0x10 [ 338.567014][ C1] panic+0xd1/0xe0 [ 338.570720][ C1] ? __pfx_panic+0x10/0x10 [ 338.575130][ C1] check_panic_on_warn.cold+0x19/0x34 [ 338.580488][ C1] ? usb_ep_enable+0x3e6/0x490 [ 338.585245][ C1] __warn.cold+0x191/0x318 [ 338.589645][ C1] __report_bug+0x30f/0x440 [ 338.594138][ C1] ? usb_ep_enable+0x3e6/0x490 [ 338.598896][ C1] ? __pfx___report_bug+0x10/0x10 [ 338.603907][ C1] ? devm_drm_dev_init_release+0x1f/0x30 [ 338.609525][ C1] ? release_nodes+0xa5/0x120 [ 338.614187][ C1] ? devres_release_all+0x112/0x180 [ 338.619377][ C1] ? kthread+0x373/0x450 [ 338.623610][ C1] ? ret_from_fork+0x730/0xd60 [ 338.628359][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 338.633283][ C1] report_bug_entry+0xe2/0x290 [ 338.638035][ C1] ? usb_ep_enable+0x3f8/0x490 [ 338.642791][ C1] handle_bug+0x1cd/0x2a0 [ 338.647117][ C1] exc_invalid_op+0x17/0x50 [ 338.651621][ C1] asm_exc_invalid_op+0x1a/0x20 [ 338.656455][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 338.661821][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 338.681412][ C1] RSP: 0018:ffffc90000a18a00 EFLAGS: 00010046 [ 338.687462][ C1] RAX: dffffc0000000000 RBX: ffff88802851c0e0 RCX: ffffffff8cda4960 [ 338.695414][ C1] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610 [ 338.703367][ C1] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 338.711326][ C1] R10: 0000000000000000 R11: ffffffff827f38e0 R12: ffffffff8cda05a0 [ 338.719293][ C1] R13: 0000000000000000 R14: ffff88802851c0e0 R15: ffff8880798e0da0 [ 338.727254][ C1] ? kasan_save_stack+0x30/0x50 [ 338.732103][ C1] hidg_set_alt+0x190/0xa10 [ 338.736587][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 338.741777][ C1] ? rcu_is_watching+0x13/0xc0 [ 338.746534][ C1] composite_setup+0x2ccf/0x9290 [ 338.751457][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 338.756388][ C1] ? __pfx_composite_setup+0x10/0x10 [ 338.761653][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.767012][ C1] ? do_raw_spin_lock+0x128/0x260 [ 338.772022][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.777387][ C1] ? configfs_composite_setup+0xfb/0x130 [ 338.783009][ C1] configfs_composite_setup+0xfb/0x130 [ 338.788456][ C1] dummy_timer+0x2039/0x3700 [ 338.793044][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.798838][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.804463][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 338.809383][ C1] ? mark_held_locks+0x40/0x70 [ 338.814131][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 338.819925][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 338.824846][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 338.830039][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 338.835146][ C1] handle_softirqs+0x1e6/0x9d0 [ 338.839896][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 338.845164][ C1] ? _raw_spin_unlock+0x28/0x50 [ 338.850001][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 338.855623][ C1] __irq_exit_rcu+0x16a/0x210 [ 338.860284][ C1] irq_exit_rcu+0x9/0x30 [ 338.864510][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.870135][ C1] [ 338.873047][ C1] [ 338.875963][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.881925][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 338.888325][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 db 12 f6 48 89 df e8 3e 32 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 28 02 f6 65 48 83 3d 34 54 b8 08 00 74 16 5b [ 338.907916][ C1] RSP: 0018:ffffc90004b9ed18 EFLAGS: 00000246 [ 338.913963][ C1] RAX: 0000000000000006 RBX: ffffffff8edf81d8 RCX: 0000000000000040 [ 338.921912][ C1] RDX: 0000000000000001 RSI: ffffffff8e38d191 RDI: ffffffff8c623580 [ 338.929863][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 338.937812][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 338.945761][ C1] R13: ffff888033e204d0 R14: ffffffff8edf7c80 R15: 000000000000730d [ 338.953724][ C1] rcu_preempt_deferred_qs_irqrestore+0x8b9/0xb90 [ 338.960124][ C1] ? __rcu_read_unlock+0x26a/0x5e0 [ 338.965220][ C1] ? rcu_is_watching+0x13/0xc0 [ 338.969973][ C1] __rcu_read_unlock+0x27f/0x5e0 [ 338.974984][ C1] unwind_next_frame+0x3c8/0x2090 [ 338.980002][ C1] ? __unwind_start+0x2f7/0x7e0 [ 338.984843][ C1] __unwind_start+0x3cd/0x7e0 [ 338.989510][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.995645][ C1] arch_stack_walk+0x73/0xf0 [ 339.000228][ C1] ? arch_stack_walk+0x73/0xf0 [ 339.004981][ C1] stack_trace_save+0x8e/0xc0 [ 339.009639][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 339.014990][ C1] ? unwind_next_frame+0xbd/0x2090 [ 339.020093][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 339.025013][ C1] kasan_save_stack+0x30/0x50 [ 339.029707][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 339.034895][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 339.040949][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 339.046826][ C1] ? trace_contention_end+0x126/0x160 [ 339.052186][ C1] delete_node+0x200/0x8f0 [ 339.056592][ C1] ? __mutex_lock+0x26c/0x1bd0 [ 339.061349][ C1] __radix_tree_delete+0x193/0x3d0 [ 339.066450][ C1] radix_tree_delete_item+0xea/0x230 [ 339.071726][ C1] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 339.077609][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.083585][ C1] drm_mode_object_unregister+0xcf/0x1c0 [ 339.089205][ C1] drm_property_free_blob+0x19d/0x240 [ 339.094568][ C1] ? __pfx_drm_property_free_blob+0x10/0x10 [ 339.100534][ C1] drm_mode_object_put.part.0+0xf2/0x160 [ 339.106150][ C1] drm_mode_object_put+0x3c/0x50 [ 339.111071][ C1] drm_property_blob_put+0x1f/0x30 [ 339.116179][ C1] drm_mode_config_cleanup+0x565/0x9d0 [ 339.121629][ C1] ? __pfx___drm_dev_dbg+0x10/0x10 [ 339.126723][ C1] ? __pfx_drm_mode_config_cleanup+0x10/0x10 [ 339.132693][ C1] ? kasan_quarantine_put+0x104/0x240 [ 339.138048][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.143236][ C1] ? drm_managed_release+0x1c0/0x540 [ 339.148508][ C1] ? drm_managed_release+0x2a9/0x540 [ 339.153786][ C1] ? kfree+0x22b/0x6d0 [ 339.157846][ C1] ? __pfx_drm_mode_config_init_release+0x10/0x10 [ 339.164249][ C1] drm_managed_release+0x1bb/0x540 [ 339.169353][ C1] drm_dev_put.part.0+0xca/0x140 [ 339.174279][ C1] devm_drm_dev_init_release+0x1f/0x30 [ 339.179727][ C1] release_nodes+0xa5/0x120 [ 339.184221][ C1] devres_release_all+0x112/0x180 [ 339.189239][ C1] ? __pfx_devres_release_all+0x10/0x10 [ 339.194785][ C1] device_unbind_cleanup+0x81/0x270 [ 339.199969][ C1] device_release_driver_internal+0x4c4/0x620 [ 339.206034][ C1] bus_remove_device+0x2bc/0x560 [ 339.210956][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 339.216395][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 339.222020][ C1] device_del+0x376/0x9b0 [ 339.226336][ C1] ? __pfx_device_del+0x10/0x10 [ 339.231173][ C1] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 339.236880][ C1] ? lock_acquire+0x1d1/0x380 [ 339.241556][ C1] usb_disable_device+0x367/0x810 [ 339.246572][ C1] ? mark_held_locks+0x40/0x70 [ 339.251323][ C1] usb_disconnect+0x2e2/0x9a0 [ 339.255992][ C1] hub_event+0x1bb1/0x4420 [ 339.260411][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 339.265336][ C1] ? __pfx_hub_event+0x10/0x10 [ 339.270087][ C1] ? lockdep_count_forward_deps+0x180/0x200 [ 339.275967][ C1] ? lock_acquire+0x1d1/0x380 [ 339.280627][ C1] ? process_one_work+0xa2c/0x1b10 [ 339.285731][ C1] ? process_one_work+0x906/0x1b10 [ 339.290836][ C1] ? process_one_work+0x906/0x1b10 [ 339.295942][ C1] process_one_work+0xac7/0x1b10 [ 339.300878][ C1] ? __pfx_process_one_work+0x10/0x10 [ 339.306242][ C1] ? lock_acquire+0x1d1/0x380 [ 339.310909][ C1] ? __pfx_hub_event+0x10/0x10 [ 339.315659][ C1] worker_thread+0x5ef/0xe50 [ 339.320244][ C1] ? __pfx_worker_thread+0x10/0x10 [ 339.325348][ C1] ? kthread+0x13a/0x450 [ 339.329576][ C1] ? __pfx_worker_thread+0x10/0x10 [ 339.334677][ C1] kthread+0x373/0x450 [ 339.338735][ C1] ? __pfx_kthread+0x10/0x10 [ 339.343315][ C1] ret_from_fork+0x730/0xd60 [ 339.347890][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 339.352986][ C1] ? __switch_to+0x800/0x10f0 [ 339.357649][ C1] ? __pfx_kthread+0x10/0x10 [ 339.362230][ C1] ret_from_fork_asm+0x1a/0x30 [ 339.366989][ C1] [ 339.370092][ C1] Kernel Offset: disabled [ 339.374392][ C1] Rebooting in 86400 seconds..