last executing test programs: 8.853341656s ago: executing program 3 (id=396): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r3, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 8.391059843s ago: executing program 0 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000039000000", @ANYRES32=r3, @ANYBLOB="1c005a80180000801400050000000000000000000000000000000008"], 0x38}}, 0x0) 7.8623057s ago: executing program 2 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getdents64(0xffffffffffffffff, 0x0, 0x43) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 7.597138843s ago: executing program 2 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) dup(0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x8, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x28) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6.086363129s ago: executing program 2 (id=410): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.162978438s ago: executing program 2 (id=411): r0 = socket$kcm(0x10, 0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 4.556232082s ago: executing program 3 (id=412): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) 4.522977095s ago: executing program 0 (id=414): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 4.416034701s ago: executing program 3 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getdents64(0xffffffffffffffff, 0x0, 0x43) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 4.251426612s ago: executing program 0 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 3.563155418s ago: executing program 2 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="010000002b0000000100000002000000090400000000000000090400000000000000090401000000000000", 0x2b) 3.342561778s ago: executing program 0 (id=421): openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004001810000007fd17e5ffff080004000000000000", 0x39}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.170704742s ago: executing program 4 (id=423): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0547 2235\n\x00', 0xa) 2.086725741s ago: executing program 3 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}}, 0x24}}, 0x0) 2.037306243s ago: executing program 2 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) 2.036992496s ago: executing program 4 (id=426): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) 2.002047885s ago: executing program 0 (id=427): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 1.976627107s ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r3) 1.933585591s ago: executing program 4 (id=429): socket(0x2, 0x80805, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x5, 0x0}) 1.795983031s ago: executing program 4 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 1.691537617s ago: executing program 1 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) 1.67959349s ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.653660941s ago: executing program 4 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) 1.6509774s ago: executing program 3 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getdents64(0xffffffffffffffff, 0x0, 0x43) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 1.511035797s ago: executing program 1 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) 1.257737313s ago: executing program 1 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="010000002b0000000100000002000000090400000000000000090400000000000000090401000000000000", 0x2b) 1.25644525s ago: executing program 4 (id=437): openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004001810000007fd17e5ffff080004000000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.009109141s ago: executing program 1 (id=438): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r3, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 717.769281ms ago: executing program 3 (id=439): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0547 2235\n\x00', 0xa) 0s ago: executing program 1 (id=440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x4, 0xb9, 0x6120, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) kernel console output (not intermixed with test programs): [ 54.077198][ T30] audit: type=1400 audit(1784932543.005:111): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.129195][ T30] audit: type=1400 audit(1784932543.055:112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.259252][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 55.259266][ T30] audit: type=1400 audit(1784932544.185:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.314475][ T30] audit: type=1400 audit(1784932544.245:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.489342][ T30] audit: type=1400 audit(1784932544.415:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.531503][ T30] audit: type=1400 audit(1784932544.455:124): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.704308][ T30] audit: type=1400 audit(1784932544.635:125): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.758348][ T30] audit: type=1400 audit(1784932544.685:126): avc: denied { write } for pid=5568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.933840][ T30] audit: type=1400 audit(1784932544.865:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.986561][ T30] audit: type=1400 audit(1784932544.915:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 60.685336][ T30] audit: type=1400 audit(1784932549.615:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.709012][ T30] audit: type=1400 audit(1784932549.635:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.712550][ T5593] cgroup: Unknown subsys name 'net' [ 60.738148][ T30] audit: type=1400 audit(1784932549.665:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.914338][ T5593] cgroup: Unknown subsys name 'cpuset' [ 60.922785][ T5593] cgroup: Unknown subsys name 'rlimit' [ 61.062227][ T30] audit: type=1400 audit(1784932549.995:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.086384][ T30] audit: type=1400 audit(1784932549.995:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.113947][ T30] audit: type=1400 audit(1784932549.995:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.146593][ T30] audit: type=1400 audit(1784932549.995:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.167369][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.170409][ T30] audit: type=1400 audit(1784932550.005:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.201313][ T30] audit: type=1400 audit(1784932550.005:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.226501][ T30] audit: type=1400 audit(1784932550.115:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.191965][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.317173][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.333623][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.344572][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.353197][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.353298][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.363205][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.370909][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.377888][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.388158][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.390529][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.400086][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.405904][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.411231][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.418554][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.427543][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.434840][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.439051][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.448157][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.462112][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.470662][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.500281][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.510091][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.518275][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.526238][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.536357][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.712480][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.720128][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.727364][ T5605] bridge_slave_0: entered allmulticast mode [ 65.734086][ T5605] bridge_slave_0: entered promiscuous mode [ 65.777939][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.785077][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.792437][ T5605] bridge_slave_1: entered allmulticast mode [ 65.799366][ T5605] bridge_slave_1: entered promiscuous mode [ 65.847457][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.854827][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.862167][ T5606] bridge_slave_0: entered allmulticast mode [ 65.868865][ T5606] bridge_slave_0: entered promiscuous mode [ 65.904140][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.914211][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.921333][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.929017][ T5606] bridge_slave_1: entered allmulticast mode [ 65.935848][ T5606] bridge_slave_1: entered promiscuous mode [ 65.942567][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.949743][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.957119][ T5621] bridge_slave_0: entered allmulticast mode [ 65.963817][ T5621] bridge_slave_0: entered promiscuous mode [ 65.985682][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.001054][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.008658][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.015995][ T5621] bridge_slave_1: entered allmulticast mode [ 66.023100][ T5621] bridge_slave_1: entered promiscuous mode [ 66.029902][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.037181][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.044377][ T5614] bridge_slave_0: entered allmulticast mode [ 66.051051][ T5614] bridge_slave_0: entered promiscuous mode [ 66.079862][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.087040][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.094430][ T5614] bridge_slave_1: entered allmulticast mode [ 66.101067][ T5614] bridge_slave_1: entered promiscuous mode [ 66.120778][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.148754][ T5605] team0: Port device team_slave_0 added [ 66.156136][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.167486][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.178186][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.180188][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.185796][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.209860][ T5605] team0: Port device team_slave_1 added [ 66.234914][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.272268][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.281479][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.288760][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.296584][ T5613] bridge_slave_0: entered allmulticast mode [ 66.303442][ T5613] bridge_slave_0: entered promiscuous mode [ 66.310883][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.317980][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.343882][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.357016][ T5606] team0: Port device team_slave_0 added [ 66.364173][ T5621] team0: Port device team_slave_0 added [ 66.376672][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.383853][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.391102][ T5613] bridge_slave_1: entered allmulticast mode [ 66.398820][ T5613] bridge_slave_1: entered promiscuous mode [ 66.405694][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.412885][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.438901][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.450769][ T5606] team0: Port device team_slave_1 added [ 66.457797][ T5621] team0: Port device team_slave_1 added [ 66.492745][ T50] Bluetooth: hci3: command tx timeout [ 66.498797][ T4927] Bluetooth: hci2: command tx timeout [ 66.504541][ T5618] Bluetooth: hci1: command tx timeout [ 66.509345][ T5614] team0: Port device team_slave_0 added [ 66.528855][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.535840][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.561897][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.571738][ T5618] Bluetooth: hci0: command tx timeout [ 66.578067][ T4927] Bluetooth: hci4: command tx timeout [ 66.579480][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.590901][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.616982][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.629209][ T5614] team0: Port device team_slave_1 added [ 66.642970][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.653098][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.660081][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.687043][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.702509][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.709546][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.736162][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.762116][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.789169][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.796232][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.822285][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.844207][ T5605] hsr_slave_0: entered promiscuous mode [ 66.850447][ T5605] hsr_slave_1: entered promiscuous mode [ 66.858721][ T5613] team0: Port device team_slave_0 added [ 66.867136][ T5613] team0: Port device team_slave_1 added [ 66.879822][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.886939][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.913010][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.959070][ T5606] hsr_slave_0: entered promiscuous mode [ 66.965151][ T5606] hsr_slave_1: entered promiscuous mode [ 66.970995][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 66.976921][ T5606] Cannot create hsr debugfs directory [ 66.982953][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.989965][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.015881][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.049045][ T5621] hsr_slave_0: entered promiscuous mode [ 67.055085][ T5621] hsr_slave_1: entered promiscuous mode [ 67.060951][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 67.066739][ T5621] Cannot create hsr debugfs directory [ 67.072953][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.079902][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.106411][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.174435][ T5614] hsr_slave_0: entered promiscuous mode [ 67.180493][ T5614] hsr_slave_1: entered promiscuous mode [ 67.186583][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 67.192891][ T5614] Cannot create hsr debugfs directory [ 67.275057][ T5613] hsr_slave_0: entered promiscuous mode [ 67.281115][ T5613] hsr_slave_1: entered promiscuous mode [ 67.287179][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 67.293557][ T5613] Cannot create hsr debugfs directory [ 67.566565][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.578113][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.587074][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.595669][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.604031][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.614646][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.628748][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.637605][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.682874][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.695263][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.703210][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.713311][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.720874][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.729661][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.738651][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.747002][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.814142][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.824212][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.836890][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.845910][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.863378][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.872682][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.880895][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.890330][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.954490][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.963631][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.978611][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.988192][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.996564][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.006930][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.015263][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.025154][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.050517][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.133859][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.144032][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.151545][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.161115][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.179649][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.187036][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.195885][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.209566][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.217819][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.226383][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.257788][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.265225][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.281520][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.288656][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.303315][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.325275][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.332403][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.354950][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.362056][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.391702][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.443616][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.471108][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.485184][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.492321][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.518950][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.526134][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.560513][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.572446][ T5618] Bluetooth: hci1: command tx timeout [ 68.578417][ T4927] Bluetooth: hci2: command tx timeout [ 68.584987][ T5618] Bluetooth: hci3: command tx timeout [ 68.618596][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.625766][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.635999][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.643167][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.653642][ T5618] Bluetooth: hci0: command tx timeout [ 68.659058][ T4927] Bluetooth: hci4: command tx timeout [ 68.682866][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.741304][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.789994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.797091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.834087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.841270][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.217926][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.353948][ T5605] veth0_vlan: entered promiscuous mode [ 69.378222][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.406294][ T5605] veth1_vlan: entered promiscuous mode [ 69.496515][ T5605] veth0_macvtap: entered promiscuous mode [ 69.519535][ T5605] veth1_macvtap: entered promiscuous mode [ 69.572969][ T5606] veth0_vlan: entered promiscuous mode [ 69.610702][ T5606] veth1_vlan: entered promiscuous mode [ 69.659423][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.687603][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.703364][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.714464][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.749752][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.759870][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.777910][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.786791][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.802767][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.814847][ T5606] veth0_macvtap: entered promiscuous mode [ 69.861557][ T5606] veth1_macvtap: entered promiscuous mode [ 69.924684][ T5614] veth0_vlan: entered promiscuous mode [ 69.940049][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.960259][ T5621] veth0_vlan: entered promiscuous mode [ 70.003060][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.033902][ T5614] veth1_vlan: entered promiscuous mode [ 70.043325][ T5621] veth1_vlan: entered promiscuous mode [ 70.059545][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.070306][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.081539][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.107023][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.117074][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.143001][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.156341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.163137][ T5614] veth0_macvtap: entered promiscuous mode [ 70.167699][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.187041][ T5621] veth0_macvtap: entered promiscuous mode [ 70.200141][ T5614] veth1_macvtap: entered promiscuous mode [ 70.218448][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 70.218463][ T30] audit: type=1400 audit(1784932559.145:153): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.dcYf91/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.222688][ T5621] veth1_macvtap: entered promiscuous mode [ 70.232518][ T30] audit: type=1400 audit(1784932559.155:154): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.279039][ T30] audit: type=1400 audit(1784932559.155:155): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.dcYf91/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.308424][ T5613] veth0_vlan: entered promiscuous mode [ 70.310026][ T30] audit: type=1400 audit(1784932559.155:156): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.341307][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.350000][ T30] audit: type=1400 audit(1784932559.155:157): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.dcYf91/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.379973][ T30] audit: type=1400 audit(1784932559.195:158): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.dcYf91/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.385481][ T5613] veth1_vlan: entered promiscuous mode [ 70.408436][ T30] audit: type=1400 audit(1784932559.205:159): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.435315][ T30] audit: type=1400 audit(1784932559.235:160): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.435941][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.458540][ T30] audit: type=1400 audit(1784932559.255:161): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="gadgetfs" ino=7373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.489829][ T30] audit: type=1400 audit(1784932559.255:162): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.520611][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.546165][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.555787][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.576908][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.579905][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.596035][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.606205][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.616692][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.627210][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.636540][ T93] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.651015][ T93] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.662502][ T5618] Bluetooth: hci3: command tx timeout [ 70.667952][ T4927] Bluetooth: hci2: command tx timeout [ 70.673500][ T50] Bluetooth: hci1: command tx timeout [ 70.689338][ T93] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.710366][ T93] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.734399][ T4927] Bluetooth: hci0: command tx timeout [ 70.739851][ T5618] Bluetooth: hci4: command tx timeout [ 70.740463][ T5613] veth0_macvtap: entered promiscuous mode [ 70.770520][ T5613] veth1_macvtap: entered promiscuous mode [ 70.784102][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.792804][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.902388][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.954094][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.988195][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.012843][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.043921][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.054546][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.063288][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.086140][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168529][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.186595][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.290631][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.305700][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.458311][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.466723][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.470090][ T755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.482820][ T755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.556403][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.564669][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.732199][ T5618] Bluetooth: hci2: command tx timeout [ 72.738413][ T4927] Bluetooth: hci3: command tx timeout [ 72.743899][ T50] Bluetooth: hci1: command tx timeout [ 72.812599][ T50] Bluetooth: hci4: command tx timeout [ 72.812911][ T4927] Bluetooth: hci0: command tx timeout [ 72.932259][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 72.939328][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 72.947580][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 72.956168][ T5839] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 72.970767][ T5839] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 72.988493][ T5839] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 73.002710][ T5839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.017875][ T5839] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.113102][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 73.126532][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 73.139739][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 73.153030][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 73.167428][ T5839] wlan0 speed is unknown, defaulting to 1000 [ 73.577897][ T5840] smbdirect: ib_dev[syz0] removed [ 74.924041][ T5849] binder_alloc: 5848: binder_alloc_buf, no vma [ 75.422616][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 75.422632][ T30] audit: type=1400 audit(1784932564.355:249): avc: denied { create } for pid=5861 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.600688][ T30] audit: type=1400 audit(1784932564.405:250): avc: denied { setopt } for pid=5861 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.686541][ T30] audit: type=1400 audit(1784932564.605:251): avc: denied { read } for pid=5861 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.053373][ T30] audit: type=1400 audit(1784932564.985:252): avc: denied { create } for pid=5865 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.085141][ T30] audit: type=1400 audit(1784932564.995:253): avc: denied { create } for pid=5865 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.068362][ T30] audit: type=1400 audit(1784932564.995:254): avc: denied { allowed } for pid=5852 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.087611][ T30] audit: type=1400 audit(1784932565.005:255): avc: denied { sqpoll } for pid=5852 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.137707][ T30] audit: type=1400 audit(1784932565.005:256): avc: denied { map } for pid=5852 comm="syz.2.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.203426][ T30] audit: type=1400 audit(1784932565.005:257): avc: denied { read write } for pid=5852 comm="syz.2.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.287973][ T30] audit: type=1400 audit(1784932565.015:258): avc: denied { create } for pid=5870 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.651534][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.660558][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.670206][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.679520][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.688430][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.698593][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.714369][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.723356][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.732307][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.741196][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.315302][ T5909] ======================================================= [ 78.315302][ T5909] WARNING: The mand mount option has been deprecated and [ 78.315302][ T5909] and is ignored by this kernel. Remove the mand [ 78.315302][ T5909] option from the mount to silence this warning. [ 78.315302][ T5909] ======================================================= [ 78.368856][ T5909] 9p: Bad value for 'rfdno' [ 78.514829][ T5917] syzkaller1: entered promiscuous mode [ 78.550750][ T5917] syzkaller1: entered allmulticast mode [ 78.646287][ T5924] Zero length message leads to an empty skb [ 78.758316][ T5928] clocksource: Switched to clocksource acpi_pm [ 80.512009][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 80.512025][ T30] audit: type=1400 audit(1784932569.438:297): avc: denied { write } for pid=5976 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.613616][ T30] audit: type=1400 audit(1784932569.488:298): avc: denied { read } for pid=5971 comm="syz.2.55" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.678566][ T5981] binder: BINDER_SET_CONTEXT_MGR already set [ 80.687756][ T30] audit: type=1400 audit(1784932569.488:299): avc: denied { open } for pid=5971 comm="syz.2.55" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.719067][ T5981] binder: 5980:5981 ioctl 4018620d 200000004a80 returned -16 [ 81.560293][ T29] cfg80211: failed to load regulatory.db [ 82.984585][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.026775][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.057739][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.094654][ T6018] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.140456][ T6018] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.180505][ T6018] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 83.262323][ T6018] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.359064][ T30] audit: type=1400 audit(1784932572.288:300): avc: denied { transfer } for pid=6026 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 83.434444][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.479569][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.516069][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.542090][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 83.684259][ T6018] wlan0 speed is unknown, defaulting to 1000 [ 84.719024][ T30] audit: type=1400 audit(1784932573.648:301): avc: denied { write } for pid=6041 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.221719][ T30] audit: type=1400 audit(1784932574.108:302): avc: denied { name_bind } for pid=6052 comm="syz.3.82" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.285734][ T30] audit: type=1400 audit(1784932574.108:303): avc: denied { name_connect } for pid=6052 comm="syz.3.82" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.368392][ T30] audit: type=1400 audit(1784932574.298:304): avc: denied { create } for pid=6058 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.438602][ T30] audit: type=1400 audit(1784932574.348:305): avc: denied { write } for pid=6058 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.488440][ T30] audit: type=1400 audit(1784932574.348:306): avc: denied { nlmsg_write } for pid=6058 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.595978][ T30] audit: type=1400 audit(1784932574.528:307): avc: denied { write } for pid=6064 comm="syz.4.87" name="system" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.114805][ T6084] netlink: 'syz.4.97': attribute type 10 has an invalid length. [ 86.459874][ T30] audit: type=1400 audit(1784932575.388:308): avc: denied { write } for pid=6093 comm="syz.1.102" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.529697][ T30] audit: type=1400 audit(1784932575.388:309): avc: denied { write } for pid=6093 comm="syz.1.102" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.603106][ T30] audit: type=1400 audit(1784932575.448:310): avc: denied { mount } for pid=6092 comm="syz.3.100" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.625792][ T30] audit: type=1400 audit(1784932575.528:311): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.350515][ T30] audit: type=1400 audit(1784932576.278:312): avc: denied { create } for pid=6108 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.932418][ T30] audit: type=1400 audit(1784932577.848:313): avc: denied { create } for pid=6114 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.046517][ T30] audit: type=1400 audit(1784932577.888:314): avc: denied { bind } for pid=6114 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.103284][ T30] audit: type=1400 audit(1784932577.888:315): avc: denied { listen } for pid=6114 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.141409][ T30] audit: type=1400 audit(1784932577.888:316): avc: denied { read } for pid=6114 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.761709][ T6084] syz_tun: entered promiscuous mode [ 89.778311][ T6146] 9pnet_fd: Insufficient options for proto=fd [ 89.785080][ T6084] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.051009][ T6154] binder_alloc: 6153: binder_alloc_buf, no vma [ 90.645033][ T6181] binder_alloc: 6178: binder_alloc_buf, no vma [ 90.882202][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 90.882218][ T30] audit: type=1400 audit(1784932579.818:325): avc: denied { create } for pid=6188 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.972114][ T30] audit: type=1400 audit(1784932579.858:326): avc: denied { setopt } for pid=6188 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.002907][ T755] syzkaller0: tun_net_xmit 76 [ 91.027827][ T755] syzkaller0: tun_net_xmit 48 [ 91.034636][ T5822] syzkaller0: tun_net_xmit 76 [ 91.088250][ T30] audit: type=1400 audit(1784932579.958:327): avc: denied { write } for pid=6191 comm="syz.3.138" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.202520][ T30] audit: type=1400 audit(1784932579.958:328): avc: denied { write } for pid=6191 comm="syz.3.138" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.282560][ T30] audit: type=1400 audit(1784932580.118:329): avc: denied { bind } for pid=6188 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.436198][ T30] audit: type=1400 audit(1784932580.358:330): avc: denied { bind } for pid=6205 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.527488][ T30] audit: type=1400 audit(1784932580.358:331): avc: denied { write } for pid=6205 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.596359][ T30] audit: type=1400 audit(1784932580.368:332): avc: denied { read } for pid=6205 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.225485][ T30] audit: type=1400 audit(1784932581.158:333): avc: denied { write } for pid=6232 comm="syz.3.150" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.282111][ T30] audit: type=1400 audit(1784932581.158:334): avc: denied { write } for pid=6232 comm="syz.3.150" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.117092][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 96.117108][ T30] audit: type=1400 audit(1784932585.048:337): avc: denied { ioctl } for pid=6275 comm="syz.2.168" path="socket:[10011]" dev="sockfs" ino=10011 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.395235][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 96.405345][ T6285] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 96.526025][ T30] audit: type=1400 audit(1784932585.308:338): avc: denied { bind } for pid=6275 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.554924][ T5796] IPVS: starting estimator thread 0... [ 96.701387][ T30] audit: type=1400 audit(1784932585.308:339): avc: denied { write } for pid=6275 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.752117][ T6286] IPVS: using max 21 ests per chain, 50400 per kthread [ 96.789611][ T30] audit: type=1400 audit(1784932585.318:340): avc: denied { ioctl } for pid=6275 comm="syz.2.168" path="socket:[10718]" dev="sockfs" ino=10718 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.869987][ T30] audit: type=1400 audit(1784932585.338:341): avc: denied { setopt } for pid=6275 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.943067][ T30] audit: type=1400 audit(1784932585.608:342): avc: denied { write } for pid=6282 comm="syz.3.172" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.965626][ T30] audit: type=1400 audit(1784932585.608:343): avc: denied { write } for pid=6282 comm="syz.3.172" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.988671][ T30] audit: type=1400 audit(1784932585.698:344): avc: denied { listen } for pid=6289 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.077436][ T30] audit: type=1400 audit(1784932585.708:345): avc: denied { accept } for pid=6289 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.199276][ T30] audit: type=1400 audit(1784932585.718:346): avc: denied { write } for pid=6292 comm="syz.1.175" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.170314][ T6327] siw: device registration error -23 [ 98.674800][ T6330] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 98.710917][ T6330] syz_tun: entered promiscuous mode [ 98.776072][ T6330] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.047411][ T6350] sch_fq: defrate 678942120 ignored. [ 100.007030][ T6369] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 100.209035][ T6378] siw: device registration error -23 [ 101.030815][ T6388] binder: BINDER_SET_CONTEXT_MGR already set [ 101.054947][ T6388] binder: 6385:6388 ioctl 4018620d 200000004a80 returned -16 [ 101.366855][ T6398] 9p: Bad value for 'wfdno' [ 101.717499][ T6406] netlink: 'syz.4.221': attribute type 10 has an invalid length. [ 105.055096][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 105.055134][ T30] audit: type=1400 audit(1784932593.978:352): avc: denied { shutdown } for pid=6429 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.411677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 105.848632][ T30] audit: type=1400 audit(1784932593.978:353): avc: denied { ioctl } for pid=6429 comm="syz.3.229" path="socket:[11335]" dev="sockfs" ino=11335 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.919194][ T30] audit: type=1400 audit(1784932593.988:354): avc: denied { read } for pid=6429 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.712891][ T6453] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 106.734715][ T6453] syz_tun: entered promiscuous mode [ 106.782618][ T6453] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.321090][ T29] IPVS: starting estimator thread 0... [ 110.451626][ T6480] IPVS: using max 13 ests per chain, 31200 per kthread [ 110.716777][ T6495] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 110.744420][ T6495] syz_tun: entered promiscuous mode [ 110.779616][ T6495] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.987581][ T30] audit: type=1400 audit(1784932601.548:355): avc: denied { write } for pid=6482 comm="syz.1.244" name="ipv6_route" dev="proc" ino=4026533038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.086760][ T6530] netlink: 'syz.2.261': attribute type 10 has an invalid length. [ 114.408653][ T6538] __nla_validate_parse: 45 callbacks suppressed [ 114.408684][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.425079][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.434994][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.443990][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.453005][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.467714][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.477184][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.486313][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.495399][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.504545][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 114.633820][ T6537] binder_alloc: 6536: binder_alloc_buf, no vma [ 114.674587][ T6541] sch_fq: defrate 678942120 ignored. [ 114.763153][ T6543] binder_alloc: 6542: binder_alloc_buf, no vma [ 116.061538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 116.125934][ T6566] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 116.301819][ T6573] sch_fq: defrate 678942120 ignored. [ 117.207274][ T5800] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 117.650270][ T6594] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 118.199640][ T6609] siw: device registration error -23 [ 118.278109][ T6611] binder_alloc: 6607: binder_alloc_buf, no vma [ 120.935035][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.956713][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.183143][ T6660] siw: device registration error -23 [ 123.569313][ T6670] binder_alloc: 6662: binder_alloc_buf, no vma [ 126.340993][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.366144][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.769235][ T30] audit: type=1400 audit(1784932615.697:356): avc: denied { name_bind } for pid=6707 comm="syz.3.323" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 126.837098][ T30] audit: type=1400 audit(1784932615.737:357): avc: denied { write } for pid=6706 comm="syz.2.316" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.859685][ T30] audit: type=1400 audit(1784932615.737:358): avc: denied { write } for pid=6706 comm="syz.2.316" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.270104][ T6718] siw: device registration error -23 [ 127.624011][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.640161][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.617589][ T6724] __nla_validate_parse: 45 callbacks suppressed [ 128.617611][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 129.161218][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.181114][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.633818][ T30] audit: type=1400 audit(1784932619.567:359): avc: denied { write } for pid=6743 comm="syz.1.335" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.707859][ T30] audit: type=1400 audit(1784932619.567:360): avc: denied { write } for pid=6743 comm="syz.1.335" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.071938][ T5800] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 132.285850][ T5800] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.305505][ T5800] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 132.326241][ T5800] usb 5-1: config 142 has no interface number 0 [ 132.342973][ T5800] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 132.363757][ T5800] usb 5-1: config 142 interface 251 has no altsetting 0 [ 132.386609][ T5800] usb 5-1: string descriptor 0 read error: -22 [ 132.393391][ T5800] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 132.411688][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.605975][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.625293][ T5800] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 132.638669][ T5800] cyphidcom ttyUSB0: required endpoint is missing [ 132.908600][ T30] audit: type=1400 audit(1784932621.837:361): avc: denied { bind } for pid=6758 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.942125][ T4927] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 132.953017][ T4927] CPU: 0 UID: 0 PID: 4927 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.953054][ T4927] Tainted: [L]=SOFTLOCKUP [ 132.953061][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.953075][ T4927] Workqueue: hci1 hci_rx_work [ 132.953101][ T4927] Call Trace: [ 132.953109][ T4927] [ 132.953117][ T4927] dump_stack_lvl+0x100/0x190 [ 132.953153][ T4927] sysfs_warn_dup.cold+0x1c/0x28 [ 132.953184][ T4927] sysfs_create_dir_ns+0x24b/0x2b0 [ 132.953218][ T4927] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 132.953246][ T4927] ? find_held_lock+0x2b/0x80 [ 132.953276][ T4927] ? kobject_add_internal+0x25f/0x930 [ 132.953305][ T4927] ? kobject_add_internal+0x25f/0x930 [ 132.953333][ T4927] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.953360][ T4927] kobject_add_internal+0x2c8/0x930 [ 132.953389][ T4927] kobject_add+0x16a/0x1e0 [ 132.953413][ T4927] ? __pfx_kobject_add+0x10/0x10 [ 132.953434][ T4927] ? class_to_subsys+0x10f/0x150 [ 132.953465][ T4927] ? kobject_put+0xb9/0x640 [ 132.953483][ T4927] ? _raw_spin_unlock+0x28/0x50 [ 132.953515][ T4927] device_add+0x294/0x1970 [ 132.953538][ T4927] ? __pfx_dev_set_name+0x10/0x10 [ 132.953566][ T4927] ? __pfx_device_add+0x10/0x10 [ 132.953591][ T4927] ? mgmt_send_event_skb+0x2fb/0x460 [ 132.953618][ T4927] hci_conn_add_sysfs+0x1a3/0x260 [ 132.953641][ T4927] le_conn_complete_evt+0x11eb/0x1f60 [ 132.953668][ T4927] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 132.953687][ T4927] ? hci_event_packet+0x186/0xcd0 [ 132.953712][ T4927] hci_le_conn_complete_evt+0x23c/0x3a0 [ 132.953733][ T4927] ? skb_pull_data+0x15f/0x1e0 [ 132.953764][ T4927] hci_le_meta_evt+0x34a/0x5f0 [ 132.953786][ T4927] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 132.953810][ T4927] hci_event_packet+0x51c/0xcd0 [ 132.953831][ T4927] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 132.953853][ T4927] ? __pfx_hci_event_packet+0x10/0x10 [ 132.953875][ T4927] ? kcov_remote_start+0x384/0x670 [ 132.953894][ T4927] ? lockdep_hardirqs_on+0x78/0x100 [ 132.953918][ T4927] hci_rx_work+0x451/0xfc0 [ 132.953941][ T4927] process_one_work+0xa23/0x1940 [ 132.953972][ T4927] ? __pfx_process_one_work+0x10/0x10 [ 132.954000][ T4927] ? __pfx_hci_rx_work+0x10/0x10 [ 132.954022][ T4927] worker_thread+0x5ef/0xe50 [ 132.954049][ T4927] ? __pfx_worker_thread+0x10/0x10 [ 132.954070][ T4927] ? kthread+0x13a/0x450 [ 132.954084][ T4927] ? __pfx_worker_thread+0x10/0x10 [ 132.954103][ T4927] kthread+0x370/0x450 [ 132.954121][ T4927] ? __pfx_kthread+0x10/0x10 [ 132.954148][ T4927] ret_from_fork+0x72b/0xd50 [ 132.954175][ T4927] ? __pfx_ret_from_fork+0x10/0x10 [ 132.954201][ T4927] ? __switch_to+0x800/0x10f0 [ 132.954218][ T4927] ? __pfx_kthread+0x10/0x10 [ 132.954235][ T4927] ret_from_fork_asm+0x1a/0x30 [ 132.954271][ T4927] [ 132.955019][ T4927] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.250762][ T4927] Bluetooth: hci1: failed to register connection device [ 133.253137][ T29] usb 5-1: USB disconnect, device number 2 [ 133.339632][ T29] cypress_m8 5-1:142.251: device disconnected [ 135.347974][ T30] audit: type=1400 audit(1784932624.277:362): avc: denied { read } for pid=6793 comm="syz.1.352" path="socket:[12581]" dev="sockfs" ino=12581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.922537][ T30] audit: type=1400 audit(1784932624.857:363): avc: denied { name_bind } for pid=6795 comm="syz.2.353" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 137.339626][ T30] audit: type=1326 audit(1784932626.177:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.4.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f94d42c9cba code=0x0 [ 137.518990][ T6823] wlan0 speed is unknown, defaulting to 1000 [ 138.550403][ T6829] file system registered [ 138.555142][ T30] audit: type=1400 audit(1784932627.477:365): avc: denied { write } for pid=6828 comm="syz.3.361" name="functions" dev="configfs" ino=7647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.600723][ T30] audit: type=1400 audit(1784932627.527:366): avc: denied { mount } for pid=6828 comm="syz.3.361" name="/" dev="functionfs" ino=12097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 138.631851][ T6829] read descriptors [ 138.700514][ T30] audit: type=1400 audit(1784932627.627:367): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 138.766299][ T5605] ffs_data_put(): freeing [ 138.834822][ T6835] siw: device registration error -23 [ 139.362368][ T30] audit: type=1400 audit(1784932628.297:368): avc: denied { create } for pid=6846 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.512547][ T30] audit: type=1400 audit(1784932628.297:369): avc: denied { ioctl } for pid=6846 comm="syz.3.368" path="socket:[12684]" dev="sockfs" ino=12684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.600599][ T6851] 9pnet_fd: Insufficient options for proto=fd [ 139.950185][ T5796] IPVS: starting estimator thread 0... [ 139.992945][ T30] audit: type=1400 audit(1784932628.527:370): avc: denied { read write } for pid=6846 comm="syz.3.368" dev="sockfs" ino=12684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.142045][ T6852] IPVS: using max 14 ests per chain, 33600 per kthread [ 140.630668][ T29] IPVS: starting estimator thread 0... [ 140.699306][ T30] audit: type=1400 audit(1784932629.627:371): avc: denied { write } for pid=6862 comm="syz.3.371" name="functions" dev="configfs" ino=7647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.790495][ T6861] IPVS: using max 14 ests per chain, 33600 per kthread [ 140.791759][ T30] audit: type=1400 audit(1784932629.627:372): avc: denied { write } for pid=6862 comm="syz.3.371" name="header" dev="configfs" ino=12156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.865901][ T6867] binder: BINDER_SET_CONTEXT_MGR already set [ 140.872278][ T6867] binder: 6866:6867 ioctl 4018620d 200000000040 returned -16 [ 140.944760][ T30] audit: type=1400 audit(1784932629.627:373): avc: denied { write } for pid=6862 comm="syz.3.371" name="header" dev="configfs" ino=12169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.977374][ T30] audit: type=1400 audit(1784932629.627:374): avc: denied { write } for pid=6862 comm="syz.3.371" name="ss" dev="configfs" ino=12166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.322471][ T6884] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 142.450307][ T6884] syz_tun: entered promiscuous mode [ 142.476780][ T6884] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 142.660889][ T6903] binder: 6900:6903 ioctl 4018620d 0 returned -22 [ 142.918355][ T6912] 9pnet_fd: Insufficient options for proto=fd [ 143.031468][ T5822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.294720][ T5822] usb 5-1: device descriptor read/64, error -71 [ 143.661392][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 143.661428][ T30] audit: type=1400 audit(1784932632.557:389): avc: denied { read } for pid=6915 comm="syz.3.388" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.131759][ T30] audit: type=1400 audit(1784932632.557:390): avc: denied { open } for pid=6915 comm="syz.3.388" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.370213][ T30] audit: type=1400 audit(1784932632.567:391): avc: denied { ioctl } for pid=6915 comm="syz.3.388" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.501256][ T5822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.641217][ T5822] usb 5-1: device descriptor read/64, error -71 [ 144.997821][ T5822] usb usb5-port1: attempt power cycle [ 145.525954][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 145.552755][ T5822] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.581997][ T5822] usb 5-1: device descriptor read/8, error -71 [ 145.786160][ T6945] fuse: Bad value for 'fd' [ 145.869500][ T6947] clocksource: Switched to clocksource tsc [ 145.950565][ T6949] siw: device registration error -23 [ 146.679904][ T6968] 9pnet_fd: Insufficient options for proto=fd [ 146.687000][ T6968] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 147.008964][ T5702] IPVS: starting estimator thread 0... [ 147.198178][ T6971] vivid-000: kernel_thread() failed [ 147.771746][ T6970] IPVS: using max 41 ests per chain, 98400 per kthread [ 147.978824][ T6980] siw: device registration error -23 [ 149.517924][ T6988] binder: BINDER_SET_CONTEXT_MGR already set [ 149.547523][ T6988] binder: 6986:6988 ioctl 4018620d 200000004a80 returned -16 [ 151.821630][ T5621] ffs_data_put(): freeing [ 151.922969][ T7016] siw: device registration error -23 [ 152.044094][ T30] audit: type=1400 audit(1784932640.976:392): avc: denied { write } for pid=7018 comm="syz.1.428" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.119710][ T30] audit: type=1400 audit(1784932640.976:393): avc: denied { write } for pid=7018 comm="syz.1.428" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.153504][ T7028] binder: 7027:7028 ioctl c0306201 0 returned -14 [ 152.285304][ T30] audit: type=1400 audit(1784932641.216:394): avc: denied { write } for pid=7030 comm="syz.1.431" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.382354][ T30] audit: type=1400 audit(1784932641.236:395): avc: denied { write } for pid=7030 comm="syz.1.431" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.576997][ T30] audit: type=1400 audit(1784932641.246:396): avc: denied { ioctl } for pid=7030 comm="syz.1.431" path="/dev/video0" dev="devtmpfs" ino=933 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 152.658452][ T5613] ffs_data_put(): freeing [ 152.697073][ T30] audit: type=1400 audit(1784932641.366:397): avc: denied { write } for pid=7038 comm="syz.1.435" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.796163][ T30] audit: type=1400 audit(1784932641.366:398): avc: denied { write } for pid=7038 comm="syz.1.435" name="c.1" dev="configfs" ino=7652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.843555][ T5606] ffs_data_put(): freeing [ 152.873730][ T7047] netlink: 'syz.4.437': attribute type 4 has an invalid length. [ 153.731340][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.952920][ T29] usb 4-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 154.089137][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.111537][ T29] usb 4-1: Product: syz [ 154.634543][ T29] usb 4-1: Manufacturer: syz [ 154.657408][ T29] usb 4-1: SerialNumber: syz [ 154.855531][ T29] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 154.867832][ T29] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 154.877490][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.888255][ T29] Tainted: [L]=SOFTLOCKUP [ 154.892591][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.902823][ T29] Workqueue: usb_hub_wq hub_event [ 154.908174][ T29] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 154.913919][ T29] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 154.933808][ T29] RSP: 0018:ffffc90000a46fc8 EFLAGS: 00010202 [ 154.939857][ T29] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001a953000 [ 154.948731][ T29] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff88801eed0000 [ 154.957825][ T29] RBP: ffff888076101e90 R08: 0000000000000005 R09: 0000000000000000 [ 154.966836][ T29] R10: 00000000ffffffff R11: ffffffff827ab504 R12: ffff8880236d70b0 [ 154.976836][ T29] R13: ffff888075c558d0 R14: ffff888075c55800 R15: 00000000ffffffff [ 154.985844][ T29] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 154.995730][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.002425][ T29] CR2: 0000001b33122ff8 CR3: 000000006144e000 CR4: 00000000003526f0 [ 155.010397][ T29] Call Trace: [ 155.013680][ T29] [ 155.016609][ T29] ? mark_held_locks+0x40/0x70 [ 155.021378][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 155.027350][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 155.032613][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.038798][ T29] usb_probe_interface+0x303/0x8f0 [ 155.044522][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 155.052904][ T29] really_probe+0x241/0xa60 [ 155.057607][ T29] __driver_probe_device+0x20e/0x450 [ 155.063852][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.071324][ T29] driver_probe_device+0x4a/0x140 [ 155.077491][ T29] __device_attach_driver+0x1df/0x320 [ 155.082957][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 155.089032][ T29] bus_for_each_drv+0x159/0x1e0 [ 155.093891][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.099642][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 155.104862][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.110694][ T29] __device_attach+0x1e4/0x4d0 [ 155.115486][ T29] ? __pfx___device_attach+0x10/0x10 [ 155.121048][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.126243][ T29] device_initial_probe+0xaf/0xd0 [ 155.131264][ T29] bus_probe_device+0x64/0x160 [ 155.136538][ T29] device_add+0x121d/0x1970 [ 155.141918][ T29] ? __pfx_device_add+0x10/0x10 [ 155.148021][ T29] ? mark_held_locks+0x40/0x70 [ 155.153326][ T29] usb_set_configuration+0xd97/0x1c60 [ 155.159311][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 155.165536][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 155.171713][ T29] usb_probe_device+0xef/0x400 [ 155.176572][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 155.182582][ T29] really_probe+0x241/0xa60 [ 155.188426][ T29] __driver_probe_device+0x20e/0x450 [ 155.195050][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.202687][ T29] driver_probe_device+0x4a/0x140 [ 155.209804][ T29] __device_attach_driver+0x1df/0x320 [ 155.217210][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 155.223435][ T29] bus_for_each_drv+0x159/0x1e0 [ 155.228765][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 155.234262][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 155.239903][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.246834][ T29] __device_attach+0x1e4/0x4d0 [ 155.253621][ T29] ? __pfx___device_attach+0x10/0x10 [ 155.259027][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.264567][ T29] device_initial_probe+0xaf/0xd0 [ 155.270989][ T29] bus_probe_device+0x64/0x160 [ 155.276596][ T29] device_add+0x121d/0x1970 [ 155.282241][ T29] ? __pfx_device_add+0x10/0x10 [ 155.287584][ T29] ? add_device_randomness+0xc9/0x110 [ 155.293014][ T29] usb_new_device.cold+0x685/0x115c [ 155.299011][ T29] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 155.305212][ T29] ? do_raw_spin_lock+0x128/0x260 [ 155.310442][ T29] ? __pfx_usb_new_device+0x10/0x10 [ 155.316047][ T29] ? mark_held_locks+0x40/0x70 [ 155.320937][ T29] hub_event+0x30a3/0x4a60 [ 155.325535][ T29] ? __pfx_hub_event+0x10/0x10 [ 155.330556][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 155.336523][ T29] ? rcu_is_watching+0x12/0xc0 [ 155.341411][ T29] process_one_work+0xa23/0x1940 [ 155.346788][ T29] ? __pfx_process_one_work+0x10/0x10 [ 155.352421][ T29] ? __pfx_hub_event+0x10/0x10 [ 155.357482][ T29] worker_thread+0x5ef/0xe50 [ 155.362336][ T29] ? kthread+0x13a/0x450 [ 155.367805][ T29] ? __pfx_worker_thread+0x10/0x10 [ 155.373911][ T29] kthread+0x370/0x450 [ 155.378818][ T29] ? __pfx_kthread+0x10/0x10 [ 155.383571][ T29] ret_from_fork+0x72b/0xd50 [ 155.388240][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 155.394120][ T29] ? __switch_to+0x800/0x10f0 [ 155.398900][ T29] ? __pfx_kthread+0x10/0x10 [ 155.403844][ T29] ret_from_fork_asm+0x1a/0x30 [ 155.408603][ T29] [ 155.411610][ T29] Modules linked in: [ 155.416200][ T29] ---[ end trace 0000000000000000 ]--- [ 155.483207][ T30] audit: type=1400 audit(1784932644.376:399): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 155.505902][ T30] audit: type=1400 audit(1784932644.376:400): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.527869][ T30] audit: type=1400 audit(1784932644.376:401): avc: denied { write search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.550474][ T29] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 155.556125][ T29] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 155.578912][ T29] RSP: 0018:ffffc90000a46fc8 EFLAGS: 00010202 [ 155.651546][ T29] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001a953000 [ 155.667746][ T29] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff88801eed0000 [ 155.689686][ T29] RBP: ffff888076101e90 R08: 0000000000000005 R09: 0000000000000000 [ 155.721641][ T29] R10: 00000000ffffffff R11: ffffffff827ab504 R12: ffff8880236d70b0 [ 155.753350][ T29] R13: ffff888075c558d0 R14: ffff888075c55800 R15: 00000000ffffffff [ 155.780096][ T29] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 155.794142][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.816980][ T29] CR2: 000000110c2b62cf CR3: 0000000075fec000 CR4: 00000000003526f0 [ 155.831372][ T29] Kernel panic - not syncing: Fatal exception [ 155.837664][ T29] Kernel Offset: disabled [ 155.841978][ T29] Rebooting in 86400 seconds..