last executing test programs: 1m34.086133764s ago: executing program 2 (id=23): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m33.820246097s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x0104\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='48000\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='2\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1m33.643024832s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x0104\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='48000\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r4) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m33.016562784s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0x1d6b\x00'/16, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='0x0104\x00'/16, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) 1m32.84284629s ago: executing program 2 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='debugfs\x00', &(0x7f0000000180)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) 1m32.68875878s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x0104\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='48000\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='2\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1m21.825747308s ago: executing program 1 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 1m21.74486923s ago: executing program 1 (id=163): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x107, 0x203, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) dup3(r2, r4, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.664711057s ago: executing program 1 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) listen(r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m21.581690474s ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m20.946617593s ago: executing program 1 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='debugfs\x00', &(0x7f0000000180)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) 1m20.87227032s ago: executing program 1 (id=174): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x107, 0x203, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) dup3(r2, r4, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.611266884s ago: executing program 32 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0x0104\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='3\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='48000\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='2\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1m5.779147192s ago: executing program 33 (id=174): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x107, 0x203, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) dup3(r2, r4, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 56.673535432s ago: executing program 6 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x0525\n\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 55.911601876s ago: executing program 6 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 55.341708519s ago: executing program 6 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x44, r6, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x44}}, 0x804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0805}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0xb, 0x1, 0x16c0, 0x5df, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x419, 0xff, 0x18, 0x3, 0xfff, "29d0199be01ccf5c901a181df2d42543af991fa8970ea51e83906109557daa8e15a4650dd1501ee94307a4973e25ad42e7e1763c3ae1ad9d7f53f3c4168469bc57fdfbb3fa915ad31623e6cf294150df774a0c496b6c8a434e330f317278eb444ba28273861f4ea15deb1e8811b749576ae7162bb69fb88353963266400f9082"}) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/fib_triestat\x00') preadv(r11, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) io_uring_setup(0x23f4, &(0x7f0000000500)={0x0, 0x5bdc, 0x100, 0x1, 0x1c1, 0x0, r11}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@can_delroute={0x1c, 0x19, 0x800, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x1) 55.07126113s ago: executing program 6 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='0x0525\n\x00', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r1) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r3, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r3) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 54.370697095s ago: executing program 6 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) 54.214585574s ago: executing program 6 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 38.417333646s ago: executing program 34 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 3.828501569s ago: executing program 5 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 3.608281328s ago: executing program 5 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 2.972317103s ago: executing program 7 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.900711265s ago: executing program 5 (id=852): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0x0) 2.768699347s ago: executing program 0 (id=854): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 2.358023337s ago: executing program 7 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='disconnect\n', 0xb) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 2.175264506s ago: executing program 7 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='disconnect\n', 0xb) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 2.057936707s ago: executing program 0 (id=859): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) 1.972732335s ago: executing program 0 (id=861): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r2, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) 1.954375185s ago: executing program 5 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 1.861995572s ago: executing program 7 (id=863): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffffff, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='Linux Foundation\x00', 0x10) 1.750368271s ago: executing program 0 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 1.613722578s ago: executing program 7 (id=866): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) r3 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r3, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) 1.541931121s ago: executing program 3 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 1.418080708s ago: executing program 7 (id=869): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.360637101s ago: executing program 0 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.303865976s ago: executing program 3 (id=871): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) 1.242665016s ago: executing program 3 (id=872): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r2 = openat(r1, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0x1d6b\x00', 0x6) r4 = openat(r2, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r2, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r5 = openat(r2, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='fedcba9876543210\x00', 0x10) r7 = openat(r5, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='Linux Foundation\x00', 0x10) r8 = openat(r5, &(0x7f0000000440)='product\x00', 0x2, 0x0) write(r8, &(0x7f0000000480)='UAC2 Gadget\x00', 0xb) mkdirat(r2, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) mkdirat(r2, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r2, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) r10 = openat(r9, &(0x7f00000005c0)='strings/0x409\x00', 0x0, 0x0) r11 = openat(r10, &(0x7f0000000600)='configuration\x00', 0x2, 0x0) write(r11, &(0x7f0000000640)='UAC2\x00', 0x4) symlinkat(&(0x7f0000000680)='functions/uac2.usb0\x00', r9, &(0x7f0000000700)='uac2.usb0\x00') r12 = openat(r2, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r12, &(0x7f0000000780)='usbip-vudc.0\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x2, 0x0) write(r13, &(0x7f0000000880)='3\x00', 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='sys/devices/platform/vhci_hcd.0/attach\x00', 0x2, 0x0) writev(r14, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4', 0x1}, {&(0x7f00000009c0)=' 0 2\n', 0x5}], 0x3) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) close(r0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 1.142506522s ago: executing program 5 (id=873): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0x0) 804.601823ms ago: executing program 0 (id=875): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='0x0525', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0xa4a1', 0x6) close(r4) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='syzkaller%d', 0xb) close(r5) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001500)='dummy_udc.0', 0xb) close(r6) socket(0x2, 0x2, 0x0) 758.437132ms ago: executing program 4 (id=876): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r3, &(0x7f0000000440)='product\x00', 0x2, 0x0) 701.96636ms ago: executing program 4 (id=877): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r1, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) 649.885144ms ago: executing program 4 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 479.722999ms ago: executing program 4 (id=879): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) r4 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='Linux Foundation\x00', 0x10) 415.234537ms ago: executing program 4 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 338.650538ms ago: executing program 3 (id=881): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='fedcba9876543210\x00', 0x10) r6 = openat(r4, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='Linux Foundation\x00', 0x10) openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) 247.466725ms ago: executing program 3 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 239.67971ms ago: executing program 5 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 185.250132ms ago: executing program 4 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 3 (id=885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): with an up link [ 78.179702][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.186900][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.194109][ T5606] bridge_slave_1: entered allmulticast mode [ 78.200971][ T5606] bridge_slave_1: entered promiscuous mode [ 78.207782][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.215074][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.222264][ T5619] bridge_slave_1: entered allmulticast mode [ 78.229495][ T5619] bridge_slave_1: entered promiscuous mode [ 78.236528][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.243609][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.250821][ T5607] bridge_slave_1: entered allmulticast mode [ 78.257691][ T5607] bridge_slave_1: entered promiscuous mode [ 78.265081][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.272194][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.280301][ T5616] bridge_slave_1: entered allmulticast mode [ 78.287399][ T5616] bridge_slave_1: entered promiscuous mode [ 78.304829][ T5615] Bluetooth: hci1: command tx timeout [ 78.346448][ T5610] team0: Port device team_slave_0 added [ 78.378450][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.387746][ T4928] Bluetooth: hci0: command tx timeout [ 78.388008][ T5615] Bluetooth: hci3: command tx timeout [ 78.396397][ T5610] team0: Port device team_slave_1 added [ 78.400414][ T5609] Bluetooth: hci2: command tx timeout [ 78.410778][ T4928] Bluetooth: hci4: command tx timeout [ 78.419609][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.431068][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.442705][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.454277][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.476558][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.487998][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.499299][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.518991][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.526105][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.552200][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.566061][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.573027][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.599037][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.677168][ T5616] team0: Port device team_slave_0 added [ 78.685286][ T5616] team0: Port device team_slave_1 added [ 78.700487][ T5606] team0: Port device team_slave_0 added [ 78.708220][ T5619] team0: Port device team_slave_0 added [ 78.716718][ T5607] team0: Port device team_slave_0 added [ 78.732613][ T5606] team0: Port device team_slave_1 added [ 78.739585][ T5619] team0: Port device team_slave_1 added [ 78.754626][ T5607] team0: Port device team_slave_1 added [ 78.760926][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.768168][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.796068][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.839168][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.846649][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.872714][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.904937][ T5610] hsr_slave_0: entered promiscuous mode [ 78.911411][ T5610] hsr_slave_1: entered promiscuous mode [ 78.933892][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.940972][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.966919][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.978586][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.985862][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.011931][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.025066][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.032041][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.058051][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.069524][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.076742][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.102703][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.115027][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.121958][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.147924][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.160252][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.167639][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.194387][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.311383][ T5616] hsr_slave_0: entered promiscuous mode [ 79.317770][ T5616] hsr_slave_1: entered promiscuous mode [ 79.323728][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 79.329588][ T5616] Cannot create hsr debugfs directory [ 79.346272][ T5607] hsr_slave_0: entered promiscuous mode [ 79.352488][ T5607] hsr_slave_1: entered promiscuous mode [ 79.358741][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.364762][ T5607] Cannot create hsr debugfs directory [ 79.391878][ T5619] hsr_slave_0: entered promiscuous mode [ 79.398100][ T5619] hsr_slave_1: entered promiscuous mode [ 79.404199][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.409959][ T5619] Cannot create hsr debugfs directory [ 79.431911][ T5606] hsr_slave_0: entered promiscuous mode [ 79.438368][ T5606] hsr_slave_1: entered promiscuous mode [ 79.444634][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 79.450380][ T5606] Cannot create hsr debugfs directory [ 79.893190][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.908386][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.916773][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.926526][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.936037][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.945790][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.953671][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.964841][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.039586][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.049308][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.060925][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.072517][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.080801][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.090785][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.113745][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.123533][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.188486][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.200817][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.219701][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.232284][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.241028][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.252936][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.261237][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.271353][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.384546][ T5609] Bluetooth: hci1: command tx timeout [ 80.395388][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.402335][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.413174][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.421784][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.432196][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.451275][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.460365][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.468447][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.474775][ T5609] Bluetooth: hci2: command tx timeout [ 80.475708][ T4928] Bluetooth: hci4: command tx timeout [ 80.481448][ T5615] Bluetooth: hci3: command tx timeout [ 80.486606][ T50] Bluetooth: hci0: command tx timeout [ 80.502694][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.596819][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.603736][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.618096][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.628023][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.638152][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.646490][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.655681][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.668690][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.679547][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.689090][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.716260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.724197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.747781][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.757609][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764856][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.797945][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.805121][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.816423][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.823574][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.851141][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.909315][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.939588][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.946757][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.981606][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.988739][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.078733][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.169049][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.198529][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.205731][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.280739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.287957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.321746][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.425775][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.453235][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.460446][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.536444][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.543596][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.023453][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.074683][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.286825][ T5610] veth0_vlan: entered promiscuous mode [ 82.323376][ T5610] veth1_vlan: entered promiscuous mode [ 82.352103][ T5616] veth0_vlan: entered promiscuous mode [ 82.403241][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.451702][ T5616] veth1_vlan: entered promiscuous mode [ 82.469377][ T50] Bluetooth: hci1: command tx timeout [ 82.529431][ T5610] veth0_macvtap: entered promiscuous mode [ 82.544129][ T50] Bluetooth: hci0: command tx timeout [ 82.550293][ T50] Bluetooth: hci4: command tx timeout [ 82.555935][ T4928] Bluetooth: hci3: command tx timeout [ 82.562119][ T5615] Bluetooth: hci2: command tx timeout [ 82.571622][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.595824][ T5610] veth1_macvtap: entered promiscuous mode [ 82.636066][ T5616] veth0_macvtap: entered promiscuous mode [ 82.646502][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.675625][ T5616] veth1_macvtap: entered promiscuous mode [ 82.696687][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.708198][ T5607] veth0_vlan: entered promiscuous mode [ 82.738529][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.749240][ T5607] veth1_vlan: entered promiscuous mode [ 82.769475][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.803133][ T5619] veth0_vlan: entered promiscuous mode [ 82.814465][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.822664][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853432][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.863811][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.884518][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.895156][ T113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916457][ T5619] veth1_vlan: entered promiscuous mode [ 82.938737][ T113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.974960][ T113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997969][ T113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010793][ T5607] veth0_macvtap: entered promiscuous mode [ 83.046126][ T5607] veth1_macvtap: entered promiscuous mode [ 83.118333][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.126684][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.132440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.137485][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.176722][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.208411][ T5619] veth0_macvtap: entered promiscuous mode [ 83.219156][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.220578][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.230265][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.268275][ T5619] veth1_macvtap: entered promiscuous mode [ 83.271732][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 83.271748][ T29] audit: type=1400 audit(1784900644.676:152): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.BcAXhQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.285721][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.306475][ T3345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.318444][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.331233][ T29] audit: type=1400 audit(1784900644.736:153): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.365524][ T5606] veth0_vlan: entered promiscuous mode [ 83.385070][ T3345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395982][ T29] audit: type=1400 audit(1784900644.736:154): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.BcAXhQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.400880][ T3345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425063][ T29] audit: type=1400 audit(1784900644.736:155): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.453188][ T29] audit: type=1400 audit(1784900644.736:156): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.BcAXhQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.492394][ T5606] veth1_vlan: entered promiscuous mode [ 83.493045][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.515057][ T3345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.517462][ T29] audit: type=1400 audit(1784900644.746:157): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.BcAXhQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.581940][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.657025][ T29] audit: type=1400 audit(1784900644.746:158): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.678999][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.682538][ T29] audit: type=1400 audit(1784900644.776:159): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.718714][ T29] audit: type=1400 audit(1784900644.776:160): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="gadgetfs" ino=8403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.741502][ T29] audit: type=1400 audit(1784900644.786:161): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.821419][ T113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.832863][ T113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.863622][ T5606] veth0_macvtap: entered promiscuous mode [ 83.871222][ T113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.886517][ T113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908681][ T5606] veth1_macvtap: entered promiscuous mode [ 83.926755][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.950753][ T5711] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.960769][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.011849][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.062869][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.117631][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 84.142105][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150022][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 84.162906][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.183439][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.191296][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.201409][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.203525][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.212460][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.221469][ T5711] usb 3-1: Product: syz [ 84.236523][ T5711] usb 3-1: Manufacturer: syz [ 84.241988][ T5711] usb 3-1: SerialNumber: syz [ 84.263607][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.277976][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.291872][ T5711] usb 3-1: config 0 descriptor?? [ 84.297721][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.331390][ T5711] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.359696][ T5711] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 84.405233][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.426293][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.554666][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.567771][ T5615] Bluetooth: hci1: command tx timeout [ 84.581555][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.626296][ T5615] Bluetooth: hci4: command tx timeout [ 84.632458][ T5615] Bluetooth: hci0: command tx timeout [ 84.634322][ T4928] Bluetooth: hci2: command tx timeout [ 84.638819][ T5615] Bluetooth: hci3: command tx timeout [ 84.757283][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.769285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.946939][ T5711] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 84.968035][ T5801] IPVS: starting estimator thread 0... [ 85.052819][ T5817] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.074929][ T5816] IPVS: using max 46 ests per chain, 110400 per kthread [ 85.347831][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.539071][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 85.546592][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.558974][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 85.569189][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.578590][ T10] usb 5-1: Product: syz [ 85.582876][ T10] usb 5-1: Manufacturer: syz [ 85.591571][ T10] usb 5-1: SerialNumber: syz [ 85.639730][ T5711] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 85.651329][ T5711] em28xx 3-1:0.0: board has no eeprom [ 85.862984][ T10] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 85.907592][ T10] usb 5-1: unit 37 not found! [ 85.931016][ T10] usb 5-1: unit 0 not found! [ 85.954343][ T5711] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 85.967331][ T5711] em28xx 3-1:0.0: dvb set to bulk mode. [ 85.982255][ T5719] em28xx 3-1:0.0: Binding DVB extension [ 86.137402][ T5837] Need at least one configuration in g1. [ 86.146219][ T5711] usb 3-1: USB disconnect, device number 2 [ 86.178770][ T5711] em28xx 3-1:0.0: Disconnecting em28xx [ 86.207540][ T5837] udc dummy_udc.0: failed to start g1: -22 [ 86.247625][ T5837] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 86.267334][ T5719] em28xx 3-1:0.0: Registering input extension [ 86.288794][ T5711] em28xx 3-1:0.0: Closing input extension [ 86.317816][ T5837] UDC core: g1: couldn't find an available UDC or it's busy [ 86.368529][ T5833] console message test [ 86.376242][ T10] usb 5-1: USB disconnect, device number 2 [ 86.432607][ T5711] em28xx 3-1:0.0: Freeing device [ 86.538841][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.623458][ T5844] Config c/1 of g1 needs at least one function. [ 86.632278][ T1220] cfg80211: failed to load regulatory.db [ 86.632373][ T5844] udc dummy_udc.0: failed to start g1: -22 [ 86.646242][ T5844] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 86.711390][ T5844] UDC core: g1: couldn't find an available UDC or it's busy [ 86.755681][ T5851] console message test [ 87.401476][ T5862] UDC core: g1: couldn't find an available UDC or it's busy [ 87.558895][ T10] IPVS: starting estimator thread 0... [ 87.603686][ T5805] Set syz1 is full, maxelem 65536 reached [ 87.631303][ T5873] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.22'. [ 87.674008][ T5869] IPVS: using max 43 ests per chain, 103200 per kthread [ 87.761377][ T5875] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 87.870507][ T5879] udc dummy_udc.0: failed to start g1: -19 [ 87.888294][ T5879] UDC core: g1: couldn't find an available UDC or it's busy [ 87.992134][ T5881] console message test [ 88.125739][ T5615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 88.136308][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 88.136339][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.136358][ T5615] Workqueue: hci4 hci_rx_work [ 88.136407][ T5615] Call Trace: [ 88.136413][ T5615] [ 88.136421][ T5615] dump_stack_lvl+0x100/0x190 [ 88.136456][ T5615] sysfs_warn_dup.cold+0x1c/0x28 [ 88.136489][ T5615] sysfs_create_dir_ns+0x24b/0x2b0 [ 88.136522][ T5615] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.136553][ T5615] ? find_held_lock+0x2b/0x80 [ 88.136584][ T5615] ? kobject_add_internal+0x25f/0x930 [ 88.136613][ T5615] ? kobject_add_internal+0x25f/0x930 [ 88.136641][ T5615] ? do_raw_spin_unlock+0x145/0x1e0 [ 88.136680][ T5615] kobject_add_internal+0x2c8/0x930 [ 88.136712][ T5615] kobject_add+0x16a/0x1e0 [ 88.136739][ T5615] ? __pfx_kobject_add+0x10/0x10 [ 88.136764][ T5615] ? class_to_subsys+0x10f/0x150 [ 88.136798][ T5615] ? kobject_put+0xb9/0x640 [ 88.136823][ T5615] ? _raw_spin_unlock+0x28/0x50 [ 88.136859][ T5615] device_add+0x294/0x1970 [ 88.136885][ T5615] ? __pfx_dev_set_name+0x10/0x10 [ 88.136917][ T5615] ? __pfx_device_add+0x10/0x10 [ 88.136946][ T5615] ? mgmt_send_event_skb+0x2fb/0x460 [ 88.136989][ T5615] hci_conn_add_sysfs+0x1a3/0x260 [ 88.137013][ T5615] le_conn_complete_evt+0x11eb/0x1f60 [ 88.137052][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.137085][ T5615] ? hci_event_packet+0x186/0xcd0 [ 88.137123][ T5615] hci_le_conn_complete_evt+0x23c/0x3a0 [ 88.137153][ T5615] ? skb_pull_data+0x15f/0x1e0 [ 88.137183][ T5615] hci_le_meta_evt+0x34a/0x5f0 [ 88.137204][ T5615] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 88.137235][ T5615] hci_event_packet+0x51c/0xcd0 [ 88.137262][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.137280][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 88.137309][ T5615] ? kcov_remote_start+0x384/0x670 [ 88.137328][ T5615] ? lockdep_hardirqs_on+0x78/0x100 [ 88.137350][ T5615] hci_rx_work+0x451/0xfc0 [ 88.137386][ T5615] process_one_work+0xa23/0x1940 [ 88.137417][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 88.137444][ T5615] ? __pfx_hci_rx_work+0x10/0x10 [ 88.137474][ T5615] worker_thread+0x5ef/0xe50 [ 88.137500][ T5615] ? kthread+0x13a/0x450 [ 88.137525][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 88.137542][ T5615] kthread+0x370/0x450 [ 88.137567][ T5615] ? __pfx_kthread+0x10/0x10 [ 88.137601][ T5615] ret_from_fork+0x72b/0xd50 [ 88.137630][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 88.137665][ T5615] ? rcu_is_watching+0x12/0xc0 [ 88.137696][ T5615] ? __switch_to+0x800/0x10f0 [ 88.137714][ T5615] ? __pfx_kthread+0x10/0x10 [ 88.137742][ T5615] ret_from_fork_asm+0x1a/0x30 [ 88.137781][ T5615] [ 88.138155][ T5615] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.374556][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.402110][ T5615] Bluetooth: hci4: failed to register connection device [ 88.503300][ T5894] udc dummy_udc.0: failed to start g1: -19 [ 88.510398][ T5894] UDC core: g1: couldn't find an available UDC or it's busy [ 88.585719][ T5897] console message test [ 88.594790][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 88.619824][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.652050][ T10] usb 4-1: config 0 has no interfaces? [ 88.667342][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 88.683510][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.695111][ T5902] udc dummy_udc.0: failed to start g1: -19 [ 88.699027][ T10] usb 4-1: Product: syz [ 88.705692][ T5902] UDC core: g1: couldn't find an available UDC or it's busy [ 88.720371][ T10] usb 4-1: Manufacturer: syz [ 88.725868][ T10] usb 4-1: SerialNumber: syz [ 88.733593][ T10] usb 4-1: config 0 descriptor?? [ 88.847160][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 88.847176][ T29] audit: type=1400 audit(1784900650.256:242): avc: denied { mounton } for pid=5905 comm="syz.2.37" path="/7/sys/kernel/debug" dev="sysfs" ino=1442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 88.881418][ T29] audit: type=1400 audit(1784900650.286:243): avc: denied { mount } for pid=5905 comm="syz.2.37" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.201964][ T5773] IPVS: starting estimator thread 0... [ 89.270771][ T5919] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.42'. [ 89.295633][ T5920] udc dummy_udc.0: failed to start g1: -19 [ 89.305821][ T5920] UDC core: g1: couldn't find an available UDC or it's busy [ 89.324048][ T5915] IPVS: using max 45 ests per chain, 108000 per kthread [ 89.381689][ T5923] console message test [ 90.041998][ T5928] udc dummy_udc.0: failed to start g1: -19 [ 90.062759][ T5928] UDC core: g1: couldn't find an available UDC or it's busy [ 90.777004][ T5948] udc dummy_udc.0: failed to start g1: -19 [ 90.800341][ T5948] UDC core: g1: couldn't find an available UDC or it's busy [ 90.883307][ T5953] console message test [ 91.112280][ T5955] udc dummy_udc.0: failed to start g1: -19 [ 91.118483][ T5808] usb 4-1: USB disconnect, device number 2 [ 91.150283][ T5955] UDC core: g1: couldn't find an available UDC or it's busy [ 91.224807][ T5955] console message test [ 91.374335][ T5961] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.59'. [ 91.542244][ T5965] udc dummy_udc.0: failed to start g1: -19 [ 91.573645][ T5965] UDC core: g1: couldn't find an available UDC or it's busy [ 92.205040][ T5986] bridge0: port 3(syz_tun) entered blocking state [ 92.225794][ T5986] bridge0: port 3(syz_tun) entered disabled state [ 92.236761][ T5986] syz_tun: entered allmulticast mode [ 92.264872][ T5986] syz_tun: entered promiscuous mode [ 92.287293][ T5986] bridge0: port 3(syz_tun) entered blocking state [ 92.295109][ T5986] bridge0: port 3(syz_tun) entered forwarding state [ 92.410535][ T5991] UDC core: g1: couldn't find an available UDC or it's busy [ 92.517867][ T5996] console message test [ 92.552406][ T5998] UDC core: g1: couldn't find an available UDC or it's busy [ 92.711779][ T6001] udc dummy_udc.0: failed to start g1: -19 [ 92.734977][ T6001] UDC core: g1: couldn't find an available UDC or it's busy [ 92.813271][ T6007] console message test [ 93.237110][ T6020] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.81'. [ 93.487580][ T29] audit: type=1400 audit(1784900654.896:244): avc: denied { connect } for pid=6023 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.500721][ T6024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 93.556655][ T29] audit: type=1400 audit(1784900654.966:245): avc: denied { write } for pid=6023 comm="syz.4.84" name="fib_triestat" dev="proc" ino=4026533356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.629260][ T29] audit: type=1400 audit(1784900654.966:246): avc: denied { allowed } for pid=6023 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.649936][ T29] audit: type=1400 audit(1784900654.996:247): avc: denied { create } for pid=6023 comm="syz.4.84" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.919707][ T6034] UDC core: g1: couldn't find an available UDC or it's busy [ 94.110811][ T6040] udc dummy_udc.0: failed to start g1: -19 [ 94.132369][ T6040] UDC core: g1: couldn't find an available UDC or it's busy [ 94.229990][ T6044] console message test [ 94.474046][ T6053] UDC core: g1: couldn't find an available UDC or it's busy [ 94.552879][ T6056] console message test [ 95.081397][ T6069] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.445946][ T29] audit: type=1400 audit(1784900656.856:248): avc: denied { write } for pid=6081 comm="syz.4.108" name="functions" dev="configfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.499494][ T6082] udc dummy_udc.0: failed to start g1: -19 [ 95.504359][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 95.510922][ T6082] UDC core: g1: couldn't find an available UDC or it's busy [ 95.519761][ T29] audit: type=1400 audit(1784900656.886:249): avc: denied { write } for pid=6081 comm="syz.4.108" name="ep.0" dev="configfs" ino=9463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.557309][ T29] audit: type=1400 audit(1784900656.906:250): avc: denied { write } for pid=6081 comm="syz.4.108" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.600712][ T29] audit: type=1400 audit(1784900656.906:251): avc: denied { write } for pid=6081 comm="syz.4.108" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.686986][ T6086] udc dummy_udc.0: failed to start g1: -19 [ 95.693603][ T6086] UDC core: g1: couldn't find an available UDC or it's busy [ 95.761517][ T6089] console message test [ 96.008143][ T6097] udc dummy_udc.0: failed to start g1: -19 [ 96.016149][ T6097] UDC core: g1: couldn't find an available UDC or it's busy [ 96.083360][ T6100] console message test [ 96.876917][ T6122] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.125'. [ 97.148530][ T6130] udc dummy_udc.0: failed to start g1: -19 [ 97.173875][ T6130] UDC core: g1: couldn't find an available UDC or it's busy [ 97.264650][ T6136] console message test [ 97.668876][ T6142] udc dummy_udc.0: failed to start g1: -19 [ 97.703699][ T6142] UDC core: g1: couldn't find an available UDC or it's busy [ 97.776508][ T6142] console message test [ 98.557011][ T6168] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.687881][ T6172] udc dummy_udc.0: failed to start g1: -19 [ 98.695206][ T6172] UDC core: g1: couldn't find an available UDC or it's busy [ 98.768402][ T6175] console message test [ 99.355974][ T6187] udc dummy_udc.0: failed to start g1: -19 [ 99.389052][ T6187] UDC core: g1: couldn't find an available UDC or it's busy [ 99.479174][ T6187] console message test [ 100.132358][ T6211] udc dummy_udc.0: failed to start g1: -19 [ 100.154629][ T6211] UDC core: g1: couldn't find an available UDC or it's busy [ 100.240210][ T6215] console message test [ 100.307422][ T6218] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.168'. [ 100.929525][ T6232] udc dummy_udc.0: failed to start g1: -19 [ 100.945404][ T6232] UDC core: g1: couldn't find an available UDC or it's busy [ 101.023835][ T6235] console message test [ 101.820351][ T6243] udc dummy_udc.0: failed to start g1: -19 [ 101.846018][ T6243] UDC core: g1: couldn't find an available UDC or it's busy [ 102.299227][ T6255] udc dummy_udc.0: failed to start g1: -19 [ 102.335088][ T6255] UDC core: g1: couldn't find an available UDC or it's busy [ 102.412408][ T6259] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.188'. [ 102.431708][ T6258] console message test [ 103.067861][ T6265] udc dummy_udc.0: failed to start g1: -19 [ 103.085062][ T6265] UDC core: g1: couldn't find an available UDC or it's busy [ 103.159650][ T6266] console message test [ 103.397204][ T6272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.588191][ T6275] syzkaller0: entered promiscuous mode [ 103.596904][ T6275] syzkaller0: entered allmulticast mode [ 103.791109][ T29] audit: type=1400 audit(1784900665.196:252): avc: denied { read } for pid=6276 comm="syz.4.196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.825261][ T29] audit: type=1400 audit(1784900665.226:253): avc: denied { open } for pid=6276 comm="syz.4.196" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.890575][ T29] audit: type=1400 audit(1784900665.226:254): avc: denied { ioctl } for pid=6276 comm="syz.4.196" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.041389][ T29] audit: type=1400 audit(1784900665.446:255): avc: denied { prog_load } for pid=6278 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.115977][ T29] audit: type=1400 audit(1784900665.476:256): avc: denied { bpf } for pid=6278 comm="syz.3.197" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.145755][ T6282] udc dummy_udc.0: failed to start g1: -19 [ 104.180501][ T6282] UDC core: g1: couldn't find an available UDC or it's busy [ 104.225685][ T29] audit: type=1400 audit(1784900665.476:257): avc: denied { write } for pid=6278 comm="syz.3.197" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.287648][ T29] audit: type=1400 audit(1784900665.476:258): avc: denied { open } for pid=6278 comm="syz.3.197" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.366082][ T29] audit: type=1400 audit(1784900665.486:259): avc: denied { ioctl } for pid=6278 comm="syz.3.197" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.431393][ T6288] udc dummy_udc.0: failed to start g1: -19 [ 104.450160][ T29] audit: type=1400 audit(1784900665.576:260): avc: denied { read write } for pid=6283 comm="syz.4.200" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.453826][ T6288] UDC core: g1: couldn't find an available UDC or it's busy [ 104.475943][ T29] audit: type=1400 audit(1784900665.576:261): avc: denied { open } for pid=6283 comm="syz.4.200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.506509][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.518494][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.526720][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.537467][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.548043][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.577435][ T6288] console message test [ 105.069445][ T3345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.270187][ T3345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.283623][ T6309] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.205'. [ 105.389433][ T3345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.516987][ T3345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.820173][ T6312] udc dummy_udc.0: failed to start g1: -19 [ 105.832276][ T6312] UDC core: g1: couldn't find an available UDC or it's busy [ 105.912259][ T6315] console message test [ 106.305571][ T3345] bridge_slave_1: left allmulticast mode [ 106.339290][ T3345] bridge_slave_1: left promiscuous mode [ 106.358994][ T3345] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.453294][ T3345] bridge_slave_0: left allmulticast mode [ 106.478895][ T3345] bridge_slave_0: left promiscuous mode [ 106.492115][ T3345] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.513709][ T6327] udc dummy_udc.0: failed to start g1: -19 [ 106.560024][ T6327] UDC core: g1: couldn't find an available UDC or it's busy [ 106.625920][ T5615] Bluetooth: hci5: command tx timeout [ 107.147476][ T6354] udc dummy_udc.0: failed to start g1: -19 [ 107.181629][ T6354] UDC core: g1: couldn't find an available UDC or it's busy [ 107.244866][ T6354] console message test [ 107.401290][ T3345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.428279][ T3345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.445654][ T3345] bond0 (unregistering): Released all slaves [ 107.639343][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.987202][ T6362] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 108.210597][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.230057][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.247447][ T6289] bridge_slave_0: entered allmulticast mode [ 108.270955][ T6289] bridge_slave_0: entered promiscuous mode [ 108.335649][ T3345] hsr_slave_0: left promiscuous mode [ 108.358171][ T3345] hsr_slave_1: left promiscuous mode [ 108.376556][ T3345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.399752][ T6373] udc dummy_udc.0: failed to start g1: -19 [ 108.407540][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.416988][ T6373] UDC core: g1: couldn't find an available UDC or it's busy [ 108.435833][ T3345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.463642][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.501439][ T6380] console message test [ 108.558832][ T3345] veth1_macvtap: left promiscuous mode [ 108.589276][ T3345] veth0_macvtap: left promiscuous mode [ 108.622406][ T3345] veth1_vlan: left promiscuous mode [ 108.635821][ T3345] veth0_vlan: left promiscuous mode [ 108.707310][ T5615] Bluetooth: hci5: command tx timeout [ 108.837636][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 108.837652][ T29] audit: type=1400 audit(1784900670.246:279): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.058690][ T29] audit: type=1400 audit(1784900670.466:280): avc: denied { write } for pid=6391 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.378445][ T6397] udc dummy_udc.0: failed to start g1: -19 [ 109.408986][ T6397] UDC core: g1: couldn't find an available UDC or it's busy [ 109.420542][ T3345] team0 (unregistering): Port device team_slave_1 removed [ 109.484436][ T3345] team0 (unregistering): Port device team_slave_0 removed [ 109.513112][ T6286] syz.4.200 (6286) used greatest stack depth: 19640 bytes left [ 109.709249][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.716664][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.731017][ T6289] bridge_slave_1: entered allmulticast mode [ 109.753980][ T6289] bridge_slave_1: entered promiscuous mode [ 109.803434][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.872524][ T6404] bridge0: port 3(syz_tun) entered disabled state [ 109.886547][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.897460][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.980864][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.996542][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.145596][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.208904][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.258674][ T29] audit: type=1400 audit(1784900671.666:281): avc: denied { create } for pid=6408 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.285765][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.316074][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.408347][ T6412] udc dummy_udc.0: failed to start g1: -19 [ 110.439509][ T6412] UDC core: g1: couldn't find an available UDC or it's busy [ 110.450769][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.465862][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.526742][ T6415] console message test [ 110.545841][ T6289] team0: Port device team_slave_0 added [ 110.597831][ T6289] team0: Port device team_slave_1 added [ 110.723173][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.741611][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.788051][ T5615] Bluetooth: hci5: command tx timeout [ 110.802117][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.853566][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.869751][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.904479][ T29] audit: type=1326 audit(1784900672.316:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.3.226" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f9de99 code=0x0 [ 110.930699][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.187180][ T6289] hsr_slave_0: entered promiscuous mode [ 111.203085][ T6431] udc dummy_udc.0: failed to start g1: -19 [ 111.220497][ T6289] hsr_slave_1: entered promiscuous mode [ 111.235888][ T29] audit: type=1400 audit(1784900672.646:283): avc: denied { write } for pid=6417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.243501][ T6431] UDC core: g1: couldn't find an available UDC or it's busy [ 111.387360][ T6431] console message test [ 111.440802][ T29] audit: type=1400 audit(1784900672.846:284): avc: denied { write } for pid=6437 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.559855][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.151601][ T6454] udc dummy_udc.0: failed to start g1: -19 [ 112.166999][ T6289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.190949][ T6454] UDC core: g1: couldn't find an available UDC or it's busy [ 112.207569][ T29] audit: type=1400 audit(1784900673.616:285): avc: denied { write } for pid=6441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.237790][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.279382][ T6289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.326315][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.355340][ T6289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.388052][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.411076][ T6289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.436940][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.463231][ T6476] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.236'. [ 112.482653][ T29] audit: type=1400 audit(1784900673.886:286): avc: denied { write } for pid=6466 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.589449][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.670172][ T6480] udc dummy_udc.0: failed to start g1: -19 [ 112.672637][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.696889][ T6480] UDC core: g1: couldn't find an available UDC or it's busy [ 112.727200][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.750628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.757847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.783342][ T6482] console message test [ 112.799144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.806331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.868361][ T5615] Bluetooth: hci5: command tx timeout [ 113.167682][ T6493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.370010][ T6499] udc dummy_udc.0: failed to start g1: -19 [ 113.404698][ T6499] UDC core: g1: couldn't find an available UDC or it's busy [ 113.643237][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.959918][ T6517] udc dummy_udc.0: failed to start g1: -19 [ 113.971497][ T6289] veth0_vlan: entered promiscuous mode [ 113.980500][ T6517] UDC core: g1: couldn't find an available UDC or it's busy [ 113.990610][ T6289] veth1_vlan: entered promiscuous mode [ 114.036773][ T6289] veth0_macvtap: entered promiscuous mode [ 114.059662][ T6289] veth1_macvtap: entered promiscuous mode [ 114.070186][ T6519] console message test [ 114.129590][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.174617][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.218970][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.258377][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.279828][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.322313][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.399227][ T6527] udc dummy_udc.0: failed to start g1: -19 [ 114.443086][ T6527] UDC core: g1: couldn't find an available UDC or it's busy [ 114.596232][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.617703][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.690871][ T29] audit: type=1400 audit(1784900676.096:287): avc: denied { create } for pid=6536 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.729030][ T29] audit: type=1400 audit(1784900676.096:288): avc: denied { write } for pid=6536 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.751546][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.768634][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.826489][ T29] audit: type=1400 audit(1784900676.236:289): avc: denied { unmount } for pid=6289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.868947][ T29] audit: type=1400 audit(1784900676.266:290): avc: denied { mount } for pid=6289 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.916295][ T6540] udc dummy_udc.0: failed to start g1: -19 [ 114.937362][ T6540] UDC core: g1: couldn't find an available UDC or it's busy [ 114.991760][ T29] audit: type=1400 audit(1784900676.396:291): avc: denied { write } for pid=6541 comm="syz.5.198" name="functions" dev="configfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.018903][ T6543] console message test [ 115.029046][ T6542] udc dummy_udc.0: failed to start g1: -19 [ 115.036514][ T6542] UDC core: g1: couldn't find an available UDC or it's busy [ 115.048291][ T29] audit: type=1400 audit(1784900676.406:292): avc: denied { write } for pid=6541 comm="syz.5.198" name="header" dev="configfs" ino=12025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.076555][ T29] audit: type=1400 audit(1784900676.406:293): avc: denied { write } for pid=6541 comm="syz.5.198" name="header" dev="configfs" ino=12038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.132429][ T29] audit: type=1400 audit(1784900676.416:294): avc: denied { write } for pid=6541 comm="syz.5.198" name="fs" dev="configfs" ino=12034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.167458][ T5801] IPVS: starting estimator thread 0... [ 115.198893][ T29] audit: type=1400 audit(1784900676.416:295): avc: denied { write } for pid=6541 comm="syz.5.198" name="fs" dev="configfs" ino=12034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.226236][ T6547] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.253'. [ 115.245019][ T29] audit: type=1400 audit(1784900676.416:296): avc: denied { write } for pid=6541 comm="syz.5.198" name="ss" dev="configfs" ino=12035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.304040][ T6546] IPVS: using max 38 ests per chain, 91200 per kthread [ 115.906464][ T6560] udc dummy_udc.0: failed to start g1: -19 [ 115.936625][ T6560] UDC core: g1: couldn't find an available UDC or it's busy [ 115.994646][ T6564] udc dummy_udc.0: failed to start g1: -19 [ 116.012947][ T6564] UDC core: g1: couldn't find an available UDC or it's busy [ 116.185258][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.197445][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.206862][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.221051][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.232986][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.336534][ T6579] udc dummy_udc.0: failed to start g1: -19 [ 116.354828][ T6579] UDC core: g1: couldn't find an available UDC or it's busy [ 116.376147][ T6576] udc dummy_udc.0: failed to start g1: -19 [ 116.385360][ T6576] UDC core: g1: couldn't find an available UDC or it's busy [ 116.429643][ T6582] console message test [ 116.812214][ T6592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 116.962337][ T3345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.131858][ T3345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.154612][ T6606] udc dummy_udc.0: failed to start g1: -19 [ 117.161250][ T6606] UDC core: g1: couldn't find an available UDC or it's busy [ 117.242086][ T6611] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.273'. [ 117.259552][ T3345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.356076][ T3345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.812536][ T6631] Zero length message leads to an empty skb [ 117.928513][ T3345] bridge_slave_1: left allmulticast mode [ 117.948684][ T3345] bridge_slave_1: left promiscuous mode [ 117.966679][ T3345] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.997555][ T3345] bridge_slave_0: left allmulticast mode [ 118.018427][ T3345] bridge_slave_0: left promiscuous mode [ 118.038262][ T3345] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.114195][ T6652] udc dummy_udc.0: failed to start g1: -19 [ 118.120954][ T6652] UDC core: g1: couldn't find an available UDC or it's busy [ 118.204343][ T6655] console message test [ 118.288076][ T3345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.303448][ T3345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.314787][ T5609] Bluetooth: hci2: command tx timeout [ 118.325114][ T3345] bond0 (unregistering): Released all slaves [ 118.341069][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.348380][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.356982][ T6567] bridge_slave_0: entered allmulticast mode [ 118.366143][ T6567] bridge_slave_0: entered promiscuous mode [ 118.411406][ T6648] warning: `syz.4.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.442978][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.485133][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.505397][ T6567] bridge_slave_1: entered allmulticast mode [ 118.513080][ T6567] bridge_slave_1: entered promiscuous mode [ 118.522265][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 118.662939][ T6666] udc dummy_udc.0: failed to start g1: -19 [ 118.673729][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.677608][ T6666] UDC core: g1: couldn't find an available UDC or it's busy [ 118.699218][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.949097][ T6567] team0: Port device team_slave_0 added [ 118.974081][ T6567] team0: Port device team_slave_1 added [ 119.106768][ T3345] hsr_slave_0: left promiscuous mode [ 119.136769][ T3345] hsr_slave_1: left promiscuous mode [ 119.160782][ T3345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.190157][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.213629][ T3345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.233611][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.277449][ T3345] veth1_macvtap: left promiscuous mode [ 119.291433][ T3345] veth0_macvtap: left promiscuous mode [ 119.313750][ T3345] veth1_vlan: left promiscuous mode [ 119.329739][ T3345] veth0_vlan: left promiscuous mode [ 119.742656][ T5801] IPVS: starting estimator thread 0... [ 119.844265][ T6705] IPVS: using max 36 ests per chain, 86400 per kthread [ 119.862046][ T6712] udc dummy_udc.0: failed to start g1: -19 [ 119.879532][ T6712] UDC core: g1: couldn't find an available UDC or it's busy [ 119.974468][ T6712] console message test [ 119.981492][ T3345] team0 (unregistering): Port device team_slave_1 removed [ 120.002438][ T3345] team0 (unregistering): Port device team_slave_0 removed [ 120.147564][ T6718] udc dummy_udc.0: failed to start g1: -19 [ 120.160060][ T6718] UDC core: g1: couldn't find an available UDC or it's busy [ 120.203460][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.213619][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.267114][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.298808][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.309212][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.335636][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.369276][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 120.394113][ T5609] Bluetooth: hci2: command tx timeout [ 120.558797][ T6567] hsr_slave_0: entered promiscuous mode [ 120.588187][ T6567] hsr_slave_1: entered promiscuous mode [ 120.602528][ T6567] debugfs: 'hsr0' already exists in 'hsr' [ 120.608402][ T6567] Cannot create hsr debugfs directory [ 120.870584][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 120.870603][ T29] audit: type=1400 audit(1784900682.276:332): avc: denied { map_create } for pid=6734 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.928944][ T3345] IPVS: stop unused estimator thread 0... [ 120.962950][ T29] audit: type=1400 audit(1784900682.306:333): avc: denied { map_read map_write } for pid=6734 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.034543][ T29] audit: type=1400 audit(1784900682.426:334): avc: denied { write } for pid=6739 comm="syz.4.304" name="001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.070338][ T6740] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.182116][ T29] audit: type=1400 audit(1784900682.586:335): avc: denied { read append } for pid=6745 comm="syz.0.305" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.202279][ T6746] dummy_hcd dummy_hcd.0: remove, state 4 [ 121.248752][ T6746] usb usb1: USB disconnect, device number 1 [ 121.271023][ T29] audit: type=1400 audit(1784900682.586:336): avc: denied { open } for pid=6745 comm="syz.0.305" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.437834][ T6746] dummy_hcd dummy_hcd.0: stopped [ 121.471597][ T6746] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 121.577750][ T6748] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 121.591315][ T6748] dummy_hcd dummy_hcd.0: Dummy host controller [ 121.595830][ T6567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.632204][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.658175][ T6567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.703687][ T6748] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 121.725927][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.735985][ T6748] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 121.746548][ T6748] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 121.761943][ T6567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.765729][ T6748] usb usb1: Product: Dummy host controller [ 121.781365][ T29] audit: type=1400 audit(1784900683.186:337): avc: denied { write } for pid=6736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.788311][ T6748] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 121.839950][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.844630][ T6767] udc dummy_udc.0: failed to start g1: -19 [ 121.858641][ T6748] usb usb1: SerialNumber: dummy_hcd.0 [ 121.870624][ T6767] UDC core: g1: couldn't find an available UDC or it's busy [ 121.872402][ T6567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.893983][ T29] audit: type=1400 audit(1784900683.196:338): avc: denied { write } for pid=6766 comm="syz.5.311" name="functions" dev="configfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.951762][ T6567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.957982][ T6748] hub 1-0:1.0: USB hub found [ 121.969879][ T29] audit: type=1400 audit(1784900683.236:339): avc: denied { write } for pid=6766 comm="syz.5.311" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.983627][ T6748] hub 1-0:1.0: 1 port detected [ 122.045276][ T29] audit: type=1400 audit(1784900683.236:340): avc: denied { write } for pid=6766 comm="syz.5.311" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.113860][ T29] audit: type=1400 audit(1784900683.236:341): avc: denied { write } for pid=6766 comm="syz.5.311" name="os_desc" dev="configfs" ino=8959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.278485][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.317198][ T6785] udc dummy_udc.0: failed to start g1: -19 [ 122.321662][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.340522][ T6785] UDC core: g1: couldn't find an available UDC or it's busy [ 122.393748][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.438797][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.444387][ T6787] console message test [ 122.447144][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.476046][ T5609] Bluetooth: hci2: command tx timeout [ 122.511574][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.518761][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.280191][ T6821] UDC core: g1: couldn't find an available UDC or it's busy [ 123.431515][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 123.481024][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.780732][ T6844] udc dummy_udc.0: failed to start g1: -19 [ 123.787576][ T6844] UDC core: g1: couldn't find an available UDC or it's busy [ 123.859983][ T6847] console message test [ 124.185904][ T6567] veth0_vlan: entered promiscuous mode [ 124.210987][ T6567] veth1_vlan: entered promiscuous mode [ 124.246284][ T6567] veth0_macvtap: entered promiscuous mode [ 124.276894][ T6567] veth1_macvtap: entered promiscuous mode [ 124.298393][ T6864] UDC core: g1: couldn't find an available UDC or it's busy [ 124.312844][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.343885][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.364910][ T3345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.375768][ T3345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.393748][ T3345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.415711][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.544751][ T5609] Bluetooth: hci2: command tx timeout [ 124.560474][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.589816][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.728002][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.742976][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.040983][ T6887] udc dummy_udc.0: failed to start g1: -19 [ 125.059441][ T6887] UDC core: g1: couldn't find an available UDC or it's busy [ 125.122335][ T6894] udc dummy_udc.0: failed to start g1: -19 [ 125.130731][ T6894] UDC core: g1: couldn't find an available UDC or it's busy [ 125.131021][ T6887] console message test [ 125.168225][ T6895] UDC core: g1: couldn't find an available UDC or it's busy [ 125.197558][ T6898] console message test [ 126.233683][ T6931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 126.479052][ T6951] udc dummy_udc.0: failed to start g1: -19 [ 126.511902][ T6951] UDC core: g1: couldn't find an available UDC or it's busy [ 126.596032][ T6955] console message test [ 126.601759][ T6959] udc dummy_udc.0: failed to start g1: -19 [ 126.610284][ T6959] UDC core: g1: couldn't find an available UDC or it's busy [ 126.631881][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 126.631896][ T29] audit: type=1400 audit(1784900688.036:352): avc: denied { write } for pid=6939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.683362][ T6962] console message test [ 126.761820][ T29] audit: type=1400 audit(1784900688.166:353): avc: denied { write } for pid=6965 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.040492][ T29] audit: type=1400 audit(1784900688.446:354): avc: denied { write } for pid=6968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.130733][ T29] audit: type=1400 audit(1784900688.536:355): avc: denied { write } for pid=6982 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.250495][ T6987] udc dummy_udc.0: failed to start g1: -19 [ 127.276611][ T6987] UDC core: g1: couldn't find an available UDC or it's busy [ 127.832380][ T29] audit: type=1400 audit(1784900689.236:356): avc: denied { write } for pid=6988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.975942][ T29] audit: type=1400 audit(1784900689.386:357): avc: denied { write } for pid=7017 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.122988][ T7023] udc dummy_udc.0: failed to start g1: -19 [ 128.145533][ T7023] UDC core: g1: couldn't find an available UDC or it's busy [ 128.219013][ T7026] console message test [ 128.313825][ T7028] udc dummy_udc.0: failed to start g1: -19 [ 128.322377][ T7028] UDC core: g1: couldn't find an available UDC or it's busy [ 128.393185][ T7031] console message test [ 128.619898][ T7033] udc dummy_udc.0: failed to start g1: -19 [ 128.627375][ T7033] UDC core: g1: couldn't find an available UDC or it's busy [ 129.942991][ T7063] udc dummy_udc.0: failed to start g1: -19 [ 129.982659][ T7063] UDC core: g1: couldn't find an available UDC or it's busy [ 130.018734][ T7065] udc dummy_udc.0: failed to start g1: -19 [ 130.036094][ T7065] UDC core: g1: couldn't find an available UDC or it's busy [ 130.117199][ T7066] console message test [ 130.950460][ T7079] udc dummy_udc.0: failed to start g1: -19 [ 130.965515][ T7079] UDC core: g1: couldn't find an available UDC or it's busy [ 131.048883][ T7082] console message test [ 132.072487][ T7094] udc dummy_udc.0: failed to start g1: -19 [ 132.088339][ T7094] UDC core: g1: couldn't find an available UDC or it's busy [ 132.716438][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724855][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.745460][ T7101] udc dummy_udc.0: failed to start g1: -19 [ 132.755300][ T7101] UDC core: g1: couldn't find an available UDC or it's busy [ 132.828920][ T7103] console message test [ 133.278973][ T7114] udc dummy_udc.0: failed to start g1: -19 [ 133.297443][ T7114] UDC core: g1: couldn't find an available UDC or it's busy [ 133.376976][ T7118] console message test [ 133.531632][ T7126] udc dummy_udc.0: failed to start g1: -19 [ 133.572365][ T7126] UDC core: g1: couldn't find an available UDC or it's busy [ 133.876122][ T29] audit: type=1400 audit(1784900695.286:358): avc: denied { write } for pid=7119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.060767][ T29] audit: type=1400 audit(1784900695.466:359): avc: denied { write } for pid=7144 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.941881][ T7163] udc dummy_udc.0: failed to start g1: -19 [ 134.959327][ T7163] UDC core: g1: couldn't find an available UDC or it's busy [ 135.045866][ T7164] console message test [ 136.446128][ T7170] udc dummy_udc.0: failed to start g1: -19 [ 136.456328][ T7170] UDC core: g1: couldn't find an available UDC or it's busy [ 136.639308][ T7175] udc dummy_udc.0: failed to start g1: -19 [ 136.647360][ T7175] UDC core: g1: couldn't find an available UDC or it's busy [ 136.726099][ T7176] console message test [ 137.874301][ T7196] udc dummy_udc.0: failed to start g1: -19 [ 137.881890][ T7196] UDC core: g1: couldn't find an available UDC or it's busy [ 137.951224][ T7200] console message test [ 138.086394][ T29] audit: type=1400 audit(1784900699.496:360): avc: denied { write } for pid=7180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.211909][ T29] audit: type=1400 audit(1784900699.616:361): avc: denied { write } for pid=7207 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.670558][ T7223] console message test [ 138.871103][ T7226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 139.005216][ T29] audit: type=1400 audit(1784900700.416:362): avc: denied { write } for pid=7212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.191243][ T29] audit: type=1400 audit(1784900700.596:363): avc: denied { write } for pid=7241 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.576529][ T7255] udc dummy_udc.0: failed to start g1: -19 [ 139.606984][ T7255] UDC core: g1: couldn't find an available UDC or it's busy [ 139.693030][ T7256] console message test [ 140.732903][ T7275] console message test [ 143.334531][ T7295] udc dummy_udc.0: failed to start g1: -19 [ 143.361645][ T7295] UDC core: g1: couldn't find an available UDC or it's busy [ 143.454490][ T7295] console message test [ 143.677740][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.686330][ T7312] console message test [ 143.697761][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.709363][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.718631][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.728665][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.918928][ T29] audit: type=1400 audit(1784900705.326:364): avc: denied { write } for pid=7289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.248006][ T29] audit: type=1400 audit(1784900705.646:365): avc: denied { write } for pid=7328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.472809][ T7339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 144.580142][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.769143][ T7350] UDC core: g1: couldn't find an available UDC or it's busy [ 144.941051][ T7354] udc dummy_udc.0: failed to start g1: -19 [ 144.948023][ T7354] UDC core: g1: couldn't find an available UDC or it's busy [ 145.028949][ T7355] console message test [ 145.514809][ T7366] console message test [ 145.746674][ T29] audit: type=1400 audit(1784900707.156:366): avc: denied { ioctl } for pid=7368 comm="syz.0.484" path="socket:[16106]" dev="sockfs" ino=16106 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.830208][ T5609] Bluetooth: hci1: command tx timeout [ 147.350749][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.561508][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.599424][ T7393] UDC core: g1: couldn't find an available UDC or it's busy [ 147.773950][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.793304][ T29] audit: type=1400 audit(1784900709.196:367): avc: denied { write } for pid=7399 comm="syz.3.493" name="usb_gadget" dev="configfs" ino=2976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.832179][ T29] audit: type=1400 audit(1784900709.226:368): avc: denied { write } for pid=7401 comm="syz.5.494" name="extensions" dev="configfs" ino=12036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.873478][ T29] audit: type=1400 audit(1784900709.236:369): avc: denied { write } for pid=7399 comm="syz.3.493" name="functions" dev="configfs" ino=16180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.905261][ T5609] Bluetooth: hci1: command tx timeout [ 147.935483][ T29] audit: type=1400 audit(1784900709.246:370): avc: denied { write } for pid=7399 comm="syz.3.493" name="configs" dev="configfs" ino=16181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.973710][ T29] audit: type=1400 audit(1784900709.256:371): avc: denied { write } for pid=7399 comm="syz.3.493" name="c.1" dev="configfs" ino=16581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.038547][ T29] audit: type=1400 audit(1784900709.266:372): avc: denied { write } for pid=7399 comm="syz.3.493" name="c.1" dev="configfs" ino=16581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.539034][ T7421] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.612019][ T29] audit: type=1400 audit(1784900710.016:373): avc: denied { ioctl } for pid=7426 comm="syz.5.499" path="socket:[16731]" dev="sockfs" ino=16731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.836364][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.856754][ T29] audit: type=1400 audit(1784900710.266:374): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.882236][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.916761][ T7309] bridge_slave_0: entered allmulticast mode [ 148.958877][ T7309] bridge_slave_0: entered promiscuous mode [ 149.009550][ T13] bridge_slave_1: left allmulticast mode [ 149.027184][ T7442] udc dummy_udc.0: failed to start g1: -19 [ 149.034777][ T7442] UDC core: g1: couldn't find an available UDC or it's busy [ 149.034918][ T13] bridge_slave_1: left promiscuous mode [ 149.068272][ T7444] udc dummy_udc.0: failed to start g1: -19 [ 149.079637][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.093350][ T7444] UDC core: g1: couldn't find an available UDC or it's busy [ 149.148103][ T13] bridge_slave_0: left allmulticast mode [ 149.166949][ T13] bridge_slave_0: left promiscuous mode [ 149.188572][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.200463][ T7448] console message test [ 149.282119][ T7453] console message test [ 149.319646][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 149.319662][ T29] audit: type=1400 audit(1784900710.726:380): avc: denied { write } for pid=7425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.460682][ T29] audit: type=1400 audit(1784900710.866:381): avc: denied { write } for pid=7458 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.640031][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.657288][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.671040][ T13] bond0 (unregistering): Released all slaves [ 149.689308][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.696813][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.704961][ T7309] bridge_slave_1: entered allmulticast mode [ 149.713108][ T7309] bridge_slave_1: entered promiscuous mode [ 149.756366][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 149.989327][ T5609] Bluetooth: hci1: command tx timeout [ 150.052826][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.120666][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.279348][ T7309] team0: Port device team_slave_0 added [ 150.301096][ T7309] team0: Port device team_slave_1 added [ 150.394614][ T13] hsr_slave_0: left promiscuous mode [ 150.407084][ T13] hsr_slave_1: left promiscuous mode [ 150.420449][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.436804][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.457034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.474447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.512767][ T13] veth1_macvtap: left promiscuous mode [ 150.547222][ T13] veth0_macvtap: left promiscuous mode [ 150.568270][ T13] veth1_vlan: left promiscuous mode [ 150.599413][ T13] veth0_vlan: left promiscuous mode [ 150.643405][ T29] audit: type=1400 audit(1784900712.046:382): avc: denied { write } for pid=7473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.820587][ T7487] UDC core: g1: couldn't find an available UDC or it's busy [ 150.922166][ T29] audit: type=1400 audit(1784900712.326:383): avc: denied { write } for pid=7490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.236416][ T7500] console message test [ 151.252143][ T7501] console message test [ 151.389317][ T13] team0 (unregistering): Port device team_slave_1 removed [ 151.411959][ T13] team0 (unregistering): Port device team_slave_0 removed [ 151.581473][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.595772][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.647679][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.655833][ T7412] Set syz1 is full, maxelem 65536 reached [ 151.669877][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 151.678140][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.689388][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.734428][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.877453][ T7309] hsr_slave_0: entered promiscuous mode [ 151.904994][ T7309] hsr_slave_1: entered promiscuous mode [ 151.946417][ T7309] debugfs: 'hsr0' already exists in 'hsr' [ 151.967025][ T7309] Cannot create hsr debugfs directory [ 152.076567][ T5609] Bluetooth: hci1: command tx timeout [ 152.166721][ T7517] bridge_slave_0: left allmulticast mode [ 152.172495][ T7517] bridge_slave_0: left promiscuous mode [ 152.217736][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.247808][ T7517] bridge_slave_1: left allmulticast mode [ 152.253698][ T7517] bridge_slave_1: left promiscuous mode [ 152.261020][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.283586][ T7517] bond0: (slave bond_slave_0): Releasing backup interface [ 152.299010][ T7517] bond0: (slave bond_slave_1): Releasing backup interface [ 152.326144][ T7517] team0: Port device team_slave_0 removed [ 152.343865][ T7517] team0: Port device team_slave_1 removed [ 152.351814][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.360478][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.371313][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.382526][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.392643][ T7517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.408554][ T29] audit: type=1400 audit(1784900713.816:384): avc: denied { write } for pid=7515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.477111][ T7520] team0: Mode changed to "loadbalance" [ 152.567778][ T7529] team0: Port device xfrm0 added [ 152.575391][ T29] audit: type=1400 audit(1784900713.986:385): avc: denied { write } for pid=7538 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.727909][ T29] audit: type=1400 audit(1784900714.126:386): avc: denied { write } for pid=7542 comm="syz.5.526" name="functions" dev="configfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.770976][ T7543] udc dummy_udc.0: failed to start g1: -19 [ 152.785678][ T29] audit: type=1400 audit(1784900714.136:387): avc: denied { write } for pid=7542 comm="syz.5.526" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.809338][ T29] audit: type=1400 audit(1784900714.136:388): avc: denied { write } for pid=7542 comm="syz.5.526" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.827388][ T7543] UDC core: g1: couldn't find an available UDC or it's busy [ 152.837889][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 152.874946][ T7549] console message test [ 152.970239][ T7553] console message test [ 153.034117][ T7309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 153.048653][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.057137][ T7309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 153.070599][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.080119][ T7309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 153.111185][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.129620][ T7309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 153.170389][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.276168][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.306671][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.307439][ T29] audit: type=1400 audit(1784900714.716:389): avc: denied { write } for pid=7554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.344956][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.352110][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.370765][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.378010][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.641196][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 154.221254][ T7613] console message test [ 154.255867][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.471679][ T7309] veth0_vlan: entered promiscuous mode [ 154.502025][ T7309] veth1_vlan: entered promiscuous mode [ 154.510171][ T7623] console message test [ 154.536973][ T7309] veth0_macvtap: entered promiscuous mode [ 154.554458][ T7309] veth1_macvtap: entered promiscuous mode [ 154.575051][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.595943][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.625941][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.640542][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.660235][ T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.672566][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.840878][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.851983][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.927635][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.969740][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.039446][ T7638] udc usbip-vudc.0: UDC had already stopped [ 155.232117][ T7646] udc dummy_udc.0: failed to start g1: -19 [ 155.241152][ T7646] UDC core: g1: couldn't find an available UDC or it's busy [ 155.488291][ T7656] console message test [ 155.604130][ T5801] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 155.778819][ T5801] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.788350][ T7666] udc usbip-vudc.0: UDC had already stopped [ 155.804321][ T5801] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.820772][ T5801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.831640][ T5801] usb 8-1: SerialNumber: syz [ 155.982250][ T7674] console message test [ 156.051076][ T7676] syz.0.563 uses obsolete (PF_INET,SOCK_PACKET) [ 156.071018][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 156.071032][ T29] audit: type=1400 audit(1784900717.476:396): avc: denied { ioctl } for pid=7675 comm="syz.0.563" path="socket:[18472]" dev="sockfs" ino=18472 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.261017][ T7680] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 156.364024][ T5719] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.514010][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 156.528289][ T5719] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 156.563755][ T5719] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.590121][ T5719] usb 6-1: config 1 has no interface number 0 [ 156.613834][ T5719] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 156.618009][ T5801] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 156.627594][ T5719] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 156.657178][ T7688] console message test [ 156.671615][ T5719] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 156.728270][ T5719] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 156.749070][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.766756][ T5719] usb 6-1: Product: syz [ 156.783567][ T5719] usb 6-1: Manufacturer: syz [ 156.792612][ T7690] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 156.813209][ T5719] usb 6-1: SerialNumber: syz [ 157.138208][ T29] audit: type=1400 audit(1784900718.536:397): avc: denied { write } for pid=7649 comm="syz.7.553" name="functions" dev="configfs" ino=8956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.155176][ T7650] udc dummy_udc.0: failed to start g1: -19 [ 157.190503][ T29] audit: type=1400 audit(1784900718.546:398): avc: denied { write } for pid=7649 comm="syz.7.553" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.201759][ T7650] UDC core: g1: couldn't find an available UDC or it's busy [ 157.253483][ T29] audit: type=1400 audit(1784900718.546:399): avc: denied { write } for pid=7649 comm="syz.7.553" name="c.1" dev="configfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.385541][ T5801] usb 8-1: USB disconnect, device number 2 [ 157.421734][ T5801] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 157.791254][ T29] audit: type=1400 audit(1784900719.196:400): avc: denied { write } for pid=7694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.880318][ T5719] usb 6-1: USB disconnect, device number 2 [ 157.973985][ T29] audit: type=1400 audit(1784900719.376:401): avc: denied { write } for pid=7714 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.231726][ T7721] console message test [ 158.549911][ T29] audit: type=1400 audit(1784900719.956:402): avc: denied { write } for pid=7720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.694717][ T29] audit: type=1400 audit(1784900720.106:403): avc: denied { write } for pid=7747 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.737440][ T7749] console message test [ 158.925284][ T7757] udc usbip-vudc.0: UDC had already stopped [ 159.470297][ T7782] console message test [ 159.879892][ T7804] console message test [ 160.512248][ T7835] udc dummy_udc.0: failed to start g1: -19 [ 160.521339][ T7835] UDC core: g1: couldn't find an available UDC or it's busy [ 160.588104][ T7839] udc usbip-vudc.0: UDC had already stopped [ 160.597415][ T7840] console message test [ 160.676654][ T7842] udc usbip-vudc.0: UDC had already stopped [ 160.700471][ T7844] udc usbip-vudc.0: UDC had already stopped [ 161.030735][ T7862] udc dummy_udc.0: failed to start g1: -19 [ 161.041197][ T7863] console message test [ 161.048104][ T7862] UDC core: g1: couldn't find an available UDC or it's busy [ 161.210435][ T7870] udc usbip-vudc.0: UDC had already stopped [ 161.219975][ T7871] udc usbip-vudc.0: UDC had already stopped [ 161.296063][ T1220] IPVS: starting estimator thread 0... [ 161.319272][ T7876] udc usbip-vudc.0: UDC had already stopped [ 161.372541][ T7879] udc usbip-vudc.0: UDC had already stopped [ 161.394050][ T7874] IPVS: using max 47 ests per chain, 112800 per kthread [ 161.438959][ T7882] udc usbip-vudc.0: UDC had already stopped [ 161.739754][ T7892] udc dummy_udc.0: failed to start g1: -19 [ 161.761973][ T7892] UDC core: g1: couldn't find an available UDC or it's busy [ 161.827832][ T7899] udc usbip-vudc.0: UDC had already stopped [ 161.863286][ T7902] console message test [ 161.866578][ T7901] udc usbip-vudc.0: UDC had already stopped [ 161.933397][ T7904] udc usbip-vudc.0: UDC had already stopped [ 161.983134][ T7906] udc usbip-vudc.0: UDC had already stopped [ 162.075711][ T7908] udc usbip-vudc.0: UDC had already stopped [ 162.293630][ T7922] console message test [ 162.338589][ T7924] udc dummy_udc.0: failed to start g1: -19 [ 162.346478][ T7924] UDC core: g1: couldn't find an available UDC or it's busy [ 162.443103][ T7928] udc usbip-vudc.0: UDC had already stopped [ 162.483503][ T7930] udc usbip-vudc.0: UDC had already stopped [ 162.627420][ T7932] udc usbip-vudc.0: UDC had already stopped [ 162.776829][ T7938] udc usbip-vudc.0: UDC had already stopped [ 162.843479][ T7940] udc usbip-vudc.0: UDC had already stopped [ 162.913996][ T1220] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 163.017480][ T7952] udc dummy_udc.0: failed to start g1: -19 [ 163.028974][ T7952] UDC core: g1: couldn't find an available UDC or it's busy [ 163.038977][ T7953] console message test [ 163.076881][ T1220] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.088287][ T7955] udc usbip-vudc.0: UDC had already stopped [ 163.099900][ T1220] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.110663][ T1220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.119603][ T1220] usb 8-1: SerialNumber: syz [ 163.231910][ T7959] udc usbip-vudc.0: UDC had already stopped [ 163.610586][ T7963] udc usbip-vudc.0: UDC had already stopped [ 163.783440][ T7965] udc usbip-vudc.0: UDC had already stopped [ 163.801825][ T1220] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 163.877911][ T7970] udc usbip-vudc.0: UDC had already stopped [ 163.893386][ T7972] console message test [ 164.209794][ T7982] udc dummy_udc.0: failed to start g1: -19 [ 164.221215][ T5773] usb 8-1: USB disconnect, device number 3 [ 164.232106][ T7982] UDC core: g1: couldn't find an available UDC or it's busy [ 164.245064][ T5773] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 164.265870][ T7987] udc usbip-vudc.0: UDC had already stopped [ 164.431286][ T7993] udc usbip-vudc.0: UDC had already stopped [ 164.447733][ T29] audit: type=1400 audit(1784900725.856:404): avc: denied { write } for pid=7974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.490160][ T7998] console message test [ 164.546700][ T8002] udc usbip-vudc.0: UDC had already stopped [ 164.589138][ T29] audit: type=1400 audit(1784900725.996:405): avc: denied { write } for pid=8003 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.855524][ T8017] udc usbip-vudc.0: UDC had already stopped [ 164.938938][ T29] audit: type=1400 audit(1784900726.346:406): avc: denied { write } for pid=8005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.076524][ T29] audit: type=1400 audit(1784900726.486:407): avc: denied { write } for pid=8024 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.158609][ T8026] udc usbip-vudc.0: UDC had already stopped [ 165.238995][ T29] audit: type=1400 audit(1784900726.646:408): avc: denied { read } for pid=8031 comm="syz.0.694" name="/" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.272275][ T29] audit: type=1400 audit(1784900726.646:409): avc: denied { open } for pid=8031 comm="syz.0.694" path="/158/config" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.306619][ T8032] UDC core: g1: couldn't find an available UDC or it's busy [ 165.329254][ T29] audit: type=1400 audit(1784900726.666:410): avc: denied { read } for pid=8031 comm="syz.0.694" name="g1" dev="configfs" ino=8955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.410830][ T29] audit: type=1800 audit(1784900726.676:411): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.694" name="idVendor" dev="configfs" ino=19705 res=0 errno=0 [ 165.457453][ T8040] udc dummy_udc.0: failed to start g1: -19 [ 165.484750][ T8040] UDC core: g1: couldn't find an available UDC or it's busy [ 165.492347][ T29] audit: type=1800 audit(1784900726.676:412): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.694" name="idProduct" dev="configfs" ino=19706 res=0 errno=0 [ 165.533654][ T8047] udc dummy_udc.0: failed to start g1: -19 [ 165.541058][ T8045] udc usbip-vudc.0: UDC had already stopped [ 165.553441][ T8047] UDC core: g1: couldn't find an available UDC or it's busy [ 165.553500][ T29] audit: type=1400 audit(1784900726.676:413): avc: denied { read } for pid=8031 comm="syz.0.694" name="0x409" dev="configfs" ino=7898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.675719][ T8049] console message test [ 166.006785][ T5719] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.178535][ T5719] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.206412][ T5719] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.217477][ T8074] console message test [ 166.231415][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.249593][ T5719] usb 5-1: SerialNumber: syz [ 166.863488][ T8089] udc usbip-vudc.0: UDC had already stopped [ 166.930431][ T5719] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 167.153618][ T8100] udc dummy_udc.0: failed to start g1: -19 [ 167.168211][ T8102] udc usbip-vudc.0: UDC had already stopped [ 167.204601][ T8100] UDC core: g1: couldn't find an available UDC or it's busy [ 167.378891][ T5801] usb 5-1: USB disconnect, device number 3 [ 167.420993][ T5801] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 167.552638][ T8109] se_device not configured yet, cannot port link [ 167.728229][ T8121] udc dummy_udc.0: failed to start g1: -19 [ 167.734936][ T8121] UDC core: g1: couldn't find an available UDC or it's busy [ 167.808722][ T8123] console message test [ 168.304315][ T8140] console message test [ 168.709315][ T8151] UDC core: g1: couldn't find an available UDC or it's busy [ 168.731634][ T8149] udc dummy_udc.0: failed to start g1: -19 [ 168.751194][ T8149] UDC core: g1: couldn't find an available UDC or it's busy [ 168.988554][ T8154] udc usbip-vudc.0: UDC had already stopped [ 169.289284][ T8168] udc dummy_udc.0: failed to start g1: -19 [ 169.306683][ T8168] UDC core: g1: couldn't find an available UDC or it's busy [ 169.365356][ T5773] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.390587][ T8171] console message test [ 169.448183][ T8055] Set syz1 is full, maxelem 65536 reached [ 169.528825][ T5773] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.549300][ T5773] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.567802][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.606864][ T5773] usb 4-1: SerialNumber: syz [ 169.612323][ T8178] udc dummy_udc.0: failed to start g1: -19 [ 169.640098][ T8178] UDC core: g1: couldn't find an available UDC or it's busy [ 169.667861][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 169.667878][ T29] audit: type=1800 audit(1784900731.076:449): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.735" name="idVendor" dev="configfs" ino=19399 res=0 errno=0 [ 169.696880][ T29] audit: type=1800 audit(1784900731.106:450): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.735" name="idProduct" dev="configfs" ino=19896 res=0 errno=0 [ 169.725178][ T8179] console message test [ 169.729071][ T29] audit: type=1800 audit(1784900731.106:451): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.735" name="serialnumber" dev="configfs" ino=19897 res=0 errno=0 [ 169.814792][ T8187] udc usbip-vudc.0: UDC had already stopped [ 169.956208][ T29] audit: type=1800 audit(1784900731.366:452): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.738" name="idVendor" dev="configfs" ino=19406 res=0 errno=0 [ 170.004942][ T29] audit: type=1800 audit(1784900731.386:453): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.738" name="idProduct" dev="configfs" ino=19914 res=0 errno=0 [ 170.055978][ T29] audit: type=1800 audit(1784900731.386:454): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.738" name="serialnumber" dev="configfs" ino=19915 res=0 errno=0 [ 170.083355][ T29] audit: type=1800 audit(1784900731.396:455): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.738" name="manufacturer" dev="configfs" ino=19916 res=0 errno=0 [ 170.270326][ T5773] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 170.375806][ T29] audit: type=1800 audit(1784900731.776:456): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.744" name="idVendor" dev="configfs" ino=19949 res=0 errno=0 [ 170.384065][ T5719] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.415755][ T29] audit: type=1800 audit(1784900731.806:457): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.744" name="idProduct" dev="configfs" ino=19950 res=0 errno=0 [ 170.441180][ T29] audit: type=1800 audit(1784900731.806:458): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.744" name="serialnumber" dev="configfs" ino=19951 res=0 errno=0 [ 170.546951][ T8206] udc dummy_udc.0: failed to start g1: -19 [ 170.579895][ T8206] UDC core: g1: couldn't find an available UDC or it's busy [ 170.591994][ T5719] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 170.607958][ T5719] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.624359][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.632820][ T5719] usb 5-1: SerialNumber: syz [ 170.715221][ T5773] usb 4-1: USB disconnect, device number 3 [ 170.729407][ T5773] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 170.746957][ T8215] udc dummy_udc.0: failed to start g1: -19 [ 170.784184][ T8215] UDC core: g1: couldn't find an available UDC or it's busy [ 170.821018][ T8220] udc usbip-vudc.0: UDC had already stopped [ 170.855190][ T8215] console message test [ 171.164044][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 171.324285][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.352594][ T5719] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 171.354886][ T8242] db_root: cannot be changed because it's in use [ 171.379503][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.412799][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.437641][ T10] usb 1-1: SerialNumber: syz [ 171.469814][ T8242] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 171.768660][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 171.797968][ T8260] UDC core: g1: couldn't find an available UDC or it's busy [ 171.838062][ T10] usb 1-1: USB disconnect, device number 2 [ 171.861893][ T46] usb 5-1: USB disconnect, device number 4 [ 171.870475][ T8225] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 171.910737][ T46] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 172.034344][ T8266] udc usbip-vudc.0: UDC had already stopped [ 172.357700][ T8277] udc dummy_udc.0: failed to start g1: -19 [ 172.367781][ T8277] UDC core: g1: couldn't find an available UDC or it's busy [ 172.432679][ T8280] console message test [ 172.551645][ T8282] db_root: cannot be changed because it's in use [ 172.561671][ T8282] se_dev->se_dev_ptr already set for storage object [ 172.712648][ T8288] UDC core: g1: couldn't find an available UDC or it's busy [ 172.915970][ T8296] udc usbip-vudc.0: UDC had already stopped [ 172.999291][ T8298] udc usbip-vudc.0: UDC had already stopped [ 173.091501][ T8302] db_root: cannot be changed because it's in use [ 173.115715][ T8302] se_dev->se_dev_ptr already set for storage object [ 173.132259][ T8302] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 173.263592][ T8310] db_root: cannot be changed because it's in use [ 173.333598][ T8306] db_root: cannot be changed because it's in use [ 173.343080][ T8310] se_dev->se_dev_ptr already set for storage object [ 173.353258][ T8312] UDC core: g1: couldn't find an available UDC or it's busy [ 173.364381][ T5773] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.377996][ T8306] se_dev->se_dev_ptr already set for storage object [ 173.498643][ T8316] udc dummy_udc.0: failed to start g1: -19 [ 173.505479][ T8316] UDC core: g1: couldn't find an available UDC or it's busy [ 173.568271][ T8323] console message test [ 173.573435][ T5773] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.590909][ T8321] udc usbip-vudc.0: UDC had already stopped [ 173.591746][ T5773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.612133][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.621421][ T5773] usb 6-1: SerialNumber: syz [ 173.670277][ T8325] UDC core: g1: couldn't find an available UDC or it's busy [ 173.799264][ T8329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8329 comm=syz.0.790 [ 174.195325][ T8333] udc usbip-vudc.0: UDC had already stopped [ 174.255034][ T5773] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 174.413041][ T8341] db_root: cannot be changed because it's in use [ 174.424859][ T8341] se_dev->se_dev_ptr already set for storage object [ 174.433657][ T8341] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 174.546770][ T8346] db_root: cannot be changed because it's in use [ 174.586662][ T8346] se_dev->se_dev_ptr already set for storage object [ 174.627524][ T8350] db_root: cannot be changed because it's in use [ 174.685240][ T8350] se_dev->se_dev_ptr already set for storage object [ 174.717490][ T8350] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 174.740946][ T5773] usb 6-1: USB disconnect, device number 3 [ 174.778211][ T5773] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 174.852252][ T8359] udc usbip-vudc.0: UDC had already stopped [ 174.881745][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 174.881761][ T29] audit: type=1400 audit(1784900736.286:488): avc: denied { write } for pid=8339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.029179][ T8365] udc dummy_udc.0: failed to start g1: -19 [ 175.051505][ T8365] UDC core: g1: couldn't find an available UDC or it's busy [ 175.077325][ T29] audit: type=1800 audit(1784900736.486:489): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="idVendor" dev="configfs" ino=20823 res=0 errno=0 [ 175.149706][ T29] audit: type=1800 audit(1784900736.506:490): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="idProduct" dev="configfs" ino=20824 res=0 errno=0 [ 175.173304][ T8369] console message test [ 175.202923][ T29] audit: type=1800 audit(1784900736.516:491): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="serialnumber" dev="configfs" ino=20825 res=0 errno=0 [ 175.238792][ T8375] db_root: cannot be changed because it's in use [ 175.261802][ T29] audit: type=1800 audit(1784900736.516:492): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="manufacturer" dev="configfs" ino=20826 res=0 errno=0 [ 175.266000][ T8375] se_dev->se_dev_ptr already set for storage object [ 175.317378][ T29] audit: type=1800 audit(1784900736.516:493): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="product" dev="configfs" ino=20827 res=0 errno=0 [ 175.347965][ T8376] udc usbip-vudc.0: UDC had already stopped [ 175.375344][ T29] audit: type=1800 audit(1784900736.516:494): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.803" name="UDC" dev="configfs" ino=20828 res=0 errno=0 [ 175.403073][ T29] audit: type=1400 audit(1784900736.536:495): avc: denied { write } for pid=8366 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.498306][ T29] audit: type=1800 audit(1784900736.906:496): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.807" name="idVendor" dev="configfs" ino=20864 res=0 errno=0 [ 175.531800][ T8385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8385 comm=syz.3.808 [ 175.568055][ T29] audit: type=1800 audit(1784900736.926:497): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.807" name="serialnumber" dev="configfs" ino=20315 res=0 errno=0 [ 175.580487][ T8387] db_root: cannot be changed because it's in use [ 175.686180][ T8387] se_dev->se_dev_ptr already set for storage object [ 175.861310][ T8398] udc usbip-vudc.0: UDC had already stopped [ 175.887416][ T8402] db_root: cannot be changed because it's in use [ 175.910055][ T8402] se_dev->se_dev_ptr already set for storage object [ 175.923082][ T8402] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 175.945738][ T8405] udc usbip-vudc.0: UDC had already stopped [ 176.098726][ T8409] UDC core: g1: couldn't find an available UDC or it's busy [ 176.233388][ T8418] udc usbip-vudc.0: UDC had already stopped [ 176.324176][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 176.432609][ T8425] udc usbip-vudc.0: UDC had already stopped [ 176.481999][ T8428] udc dummy_udc.0: failed to start g1: -19 [ 176.485686][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.488789][ T8428] UDC core: g1: couldn't find an available UDC or it's busy [ 176.504071][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.523763][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.532154][ T10] usb 8-1: SerialNumber: syz [ 176.581100][ T8429] console message test [ 176.592956][ T8431] db_root: cannot be changed because it's in use [ 176.603787][ T8431] se_dev->se_dev_ptr already set for storage object [ 176.707920][ T8435] db_root: cannot be changed because it's in use [ 176.719878][ T8435] se_dev->se_dev_ptr already set for storage object [ 176.728725][ T8435] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 176.800433][ T8437] udc usbip-vudc.0: UDC had already stopped [ 176.992243][ T8439] udc usbip-vudc.0: UDC had already stopped [ 177.138655][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8448 comm=syz.0.831 [ 177.191762][ T10] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 177.202133][ T8451] udc usbip-vudc.0: UDC had already stopped [ 177.222521][ T8453] udc usbip-vudc.0: UDC had already stopped [ 177.452921][ T8464] db_root: cannot be changed because it's in use [ 177.468119][ T8464] se_dev->se_dev_ptr already set for storage object [ 177.606512][ T5719] usb 8-1: USB disconnect, device number 4 [ 177.633575][ T5719] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 177.838626][ T5801] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.849435][ T8482] udc usbip-vudc.0: UDC had already stopped [ 177.973314][ T8489] UDC core: g1: couldn't find an available UDC or it's busy [ 178.006496][ T5801] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.028484][ T5801] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.052103][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.068573][ T5801] usb 5-1: SerialNumber: syz [ 178.076681][ T8493] UDC core: g1: couldn't find an available UDC or it's busy [ 178.149778][ T8498] console message test [ 178.312287][ T8504] udc usbip-vudc.0: UDC had already stopped [ 178.389218][ T8507] udc usbip-vudc.0: UDC had already stopped [ 178.491163][ T8511] udc usbip-vudc.0: UDC had already stopped [ 178.549733][ T8513] db_root: cannot be changed because it's in use [ 178.731469][ T5801] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 178.806862][ T8523] udc usbip-vudc.0: UDC had already stopped [ 178.899355][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.919240][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.140536][ T8470] udc dummy_udc.0: failed to start g1: -19 [ 179.147317][ T8470] UDC core: g1: couldn't find an available UDC or it's busy [ 179.160819][ T5801] usb 5-1: USB disconnect, device number 5 [ 179.170385][ T5801] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 179.297181][ T8545] udc usbip-vudc.0: UDC had already stopped [ 179.545012][ T8557] udc usbip-vudc.0: UDC had already stopped [ 179.578505][ T8560] db_root: cannot be changed because it's in use [ 179.770258][ T8568] udc dummy_udc.0: failed to start g1: -19 [ 179.786936][ T8568] UDC core: g1: couldn't find an available UDC or it's busy [ 179.829714][ T8566] udc usbip-vudc.0: UDC had already stopped [ 179.901279][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 179.901296][ T29] audit: type=1800 audit(1784900741.306:543): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="idVendor" dev="configfs" ino=21180 res=0 errno=0 [ 179.904473][ T8570] console message test [ 179.912630][ T29] audit: type=1800 audit(1784900741.316:544): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="idProduct" dev="configfs" ino=21181 res=0 errno=0 [ 179.961932][ T29] audit: type=1800 audit(1784900741.316:545): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="serialnumber" dev="configfs" ino=21182 res=0 errno=0 [ 180.023565][ T8576] udc usbip-vudc.0: UDC had already stopped [ 180.034384][ T29] audit: type=1800 audit(1784900741.316:546): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="manufacturer" dev="configfs" ino=21183 res=0 errno=0 [ 180.089956][ T29] audit: type=1800 audit(1784900741.316:547): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="product" dev="configfs" ino=21184 res=0 errno=0 [ 180.118202][ T29] audit: type=1800 audit(1784900741.316:548): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.864" name="UDC" dev="configfs" ino=21185 res=0 errno=0 [ 180.155650][ T8582] udc usbip-vudc.0: UDC had already stopped [ 180.162518][ T29] audit: type=1800 audit(1784900741.496:549): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.866" name="idVendor" dev="configfs" ino=21198 res=0 errno=0 [ 180.186602][ T29] audit: type=1800 audit(1784900741.506:550): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.866" name="idProduct" dev="configfs" ino=21199 res=0 errno=0 [ 180.208523][ T29] audit: type=1800 audit(1784900741.506:551): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.866" name="manufacturer" dev="configfs" ino=21200 res=0 errno=0 [ 180.332474][ T8588] db_root: cannot be changed because it's in use [ 180.392009][ T29] audit: type=1800 audit(1784900741.796:552): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.872" name="idProduct" dev="configfs" ino=21217 res=0 errno=0 [ 180.422793][ T8590] UDC core: g1: couldn't find an available UDC or it's busy [ 180.484880][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 180.635883][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.653670][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.673503][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.692842][ T10] usb 8-1: SerialNumber: syz [ 180.718099][ T8596] udc usbip-vudc.0: UDC had already stopped [ 180.997274][ T8604] udc usbip-vudc.0: UDC had already stopped [ 181.064098][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.217308][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.239748][ T8608] udc usbip-vudc.0: UDC had already stopped [ 181.250401][ T5711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.260357][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.269038][ T5711] usb 1-1: SerialNumber: syz [ 181.332830][ T10] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 181.419953][ T8612] UDC core: g1: couldn't find an available UDC or it's busy [ 181.468401][ T8614] udc usbip-vudc.0: UDC had already stopped [ 181.499340][ T8615] console message test [ 181.740045][ T5711] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 181.756242][ T10] usb 8-1: USB disconnect, device number 5 [ 181.770208][ T10] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 181.783143][ T5711] usb 1-1: USB disconnect, device number 3 [ 181.894466][ T8598] ================================================================== [ 181.902558][ T8598] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 181.909550][ T8598] Read of size 1 at addr ffff888033a66ea0 by task syz.0.875/8598 [ 181.917285][ T8598] [ 181.919632][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 181.919665][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 181.919680][ T8598] Call Trace: [ 181.919688][ T8598] [ 181.919718][ T8598] dump_stack_lvl+0x100/0x190 [ 181.919754][ T8598] print_report+0x13d/0x4b0 [ 181.919788][ T8598] ? __virt_addr_valid+0x239/0x430 [ 181.919817][ T8598] ? string+0x471/0x4d0 [ 181.919848][ T8598] kasan_report+0xdf/0x1c0 [ 181.919877][ T8598] ? string+0x471/0x4d0 [ 181.919911][ T8598] string+0x471/0x4d0 [ 181.919943][ T8598] ? __pfx_string+0x10/0x10 [ 181.919978][ T8598] vsnprintf+0x422/0x1300 [ 181.920016][ T8598] ? __pfx_vsnprintf+0x10/0x10 [ 181.920049][ T8598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.920094][ T8598] ? is_bpf_text_address+0x94/0x1a0 [ 181.920123][ T8598] ? kernel_text_address+0x8d/0x100 [ 181.920147][ T8598] snprintf+0xc7/0x100 [ 181.920167][ T8598] ? __pfx_snprintf+0x10/0x10 [ 181.920190][ T8598] ? stack_trace_save+0x8e/0xc0 [ 181.920209][ T8598] dev_vprintk_emit+0x375/0x3e0 [ 181.920235][ T8598] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 181.920259][ T8598] ? __x64_sys_ioctl+0x18e/0x210 [ 181.920284][ T8598] ? do_syscall_64+0x115/0x870 [ 181.920304][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.920328][ T8598] dev_printk_emit+0xd2/0x10d [ 181.920354][ T8598] ? __pfx_dev_printk_emit+0x10/0x10 [ 181.920387][ T8598] __dev_printk+0xcb/0x100 [ 181.920414][ T8598] _dev_err+0xef/0x127 [ 181.920439][ T8598] ? __pfx__dev_err+0x10/0x10 [ 181.920463][ T8598] ? dummy_queue+0x3ca/0xb90 [ 181.920492][ T8598] ? find_held_lock+0x2b/0x80 [ 181.920523][ T8598] ? raw_process_ep0_io+0x314/0x9c0 [ 181.920556][ T8598] raw_process_ep0_io.cold+0x65/0x7f [ 181.920591][ T8598] raw_ioctl+0x1369/0x2b80 [ 181.920624][ T8598] ? __pfx_raw_ioctl+0x10/0x10 [ 181.920651][ T8598] ? selinux_file_ioctl+0xb6/0x290 [ 181.920681][ T8598] ? __pfx_raw_ioctl+0x10/0x10 [ 181.920709][ T8598] __x64_sys_ioctl+0x18e/0x210 [ 181.920739][ T8598] do_syscall_64+0x115/0x870 [ 181.920760][ T8598] ? clear_bhb_loop+0x40/0x90 [ 181.920787][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.920812][ T8598] RIP: 0033:0x7fd671f9db2b [ 181.920838][ T8598] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 181.920861][ T8598] RSP: 002b:00007fd672e58f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.920888][ T8598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd671f9db2b [ 181.920904][ T8598] RDX: 00007fd672e58fd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 181.920919][ T8598] RBP: 00007fd672e58fd0 R08: 000000000000001a R09: 0000000000000409 [ 181.920934][ T8598] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd672e58fd8 [ 181.920949][ T8598] R13: 0000200000000080 R14: 00007fd672225fa0 R15: 00007ffc7dd99a28 [ 181.920973][ T8598] [ 181.920981][ T8598] [ 182.206000][ T8598] Allocated by task 8470: [ 182.210432][ T8598] kasan_save_stack+0x30/0x50 [ 182.215127][ T8598] kasan_save_track+0x14/0x30 [ 182.219829][ T8598] __kasan_kmalloc+0xaa/0xb0 [ 182.224438][ T8598] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 182.230879][ T8598] kvasprintf+0xbc/0x150 [ 182.235138][ T8598] kvasprintf_const+0x66/0x1a0 [ 182.239918][ T8598] kobject_set_name_vargs+0x5a/0x140 [ 182.245236][ T8598] dev_set_name+0xc7/0x100 [ 182.249679][ T8598] usb_add_gadget+0x520/0x920 [ 182.254387][ T8598] usb_add_gadget_udc+0x26/0x70 [ 182.259272][ T8598] dummy_udc_probe+0x69e/0x960 [ 182.264064][ T8598] platform_probe+0x106/0x1d0 [ 182.268759][ T8598] really_probe+0x241/0xa60 [ 182.273272][ T8598] __driver_probe_device+0x20e/0x450 [ 182.278570][ T8598] device_driver_attach+0xd1/0x220 [ 182.283682][ T8598] bind_store+0xf4/0x190 [ 182.287925][ T8598] drv_attr_store+0x74/0xb0 [ 182.292427][ T8598] sysfs_kf_write+0xf2/0x150 [ 182.297029][ T8598] kernfs_fop_write_iter+0x3e0/0x5f0 [ 182.302324][ T8598] vfs_write+0x6ac/0x1050 [ 182.306660][ T8598] ksys_write+0x12a/0x250 [ 182.310986][ T8598] do_syscall_64+0x115/0x870 [ 182.315561][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.321441][ T8598] [ 182.323745][ T8598] Freed by task 8584: [ 182.327704][ T8598] kasan_save_stack+0x30/0x50 [ 182.332370][ T8598] kasan_save_track+0x14/0x30 [ 182.337060][ T8598] kasan_save_free_info+0x3b/0x70 [ 182.342078][ T8598] __kasan_slab_free+0x5f/0x80 [ 182.346828][ T8598] kfree+0x22b/0x6c0 [ 182.350718][ T8598] kfree_const+0x5a/0x70 [ 182.354945][ T8598] kobject_put+0x218/0x640 [ 182.359374][ T8598] put_device+0x1f/0x30 [ 182.363549][ T8598] platform_remove+0x5f/0x80 [ 182.368152][ T8598] device_remove+0xcb/0x180 [ 182.372643][ T8598] device_release_driver_internal+0x44e/0x620 [ 182.378706][ T8598] unbind_store+0xf8/0x110 [ 182.383152][ T8598] drv_attr_store+0x74/0xb0 [ 182.387648][ T8598] sysfs_kf_write+0xf2/0x150 [ 182.392235][ T8598] kernfs_fop_write_iter+0x3e0/0x5f0 [ 182.397510][ T8598] vfs_write+0x6ac/0x1050 [ 182.401835][ T8598] ksys_write+0x12a/0x250 [ 182.406161][ T8598] do_syscall_64+0x115/0x870 [ 182.410749][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.416648][ T8598] [ 182.418952][ T8598] The buggy address belongs to the object at ffff888033a66ea0 [ 182.418952][ T8598] which belongs to the cache kmalloc-16 of size 16 [ 182.432830][ T8598] The buggy address is located 0 bytes inside of [ 182.432830][ T8598] freed 16-byte region [ffff888033a66ea0, ffff888033a66eb0) [ 182.446350][ T8598] [ 182.448656][ T8598] The buggy address belongs to the physical page: [ 182.455085][ T8598] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33a66 [ 182.463840][ T8598] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.470936][ T8598] page_type: f5(slab) [ 182.474906][ T8598] raw: 00fff00000000000 ffff88813fe22640 dead000000000100 dead000000000122 [ 182.483516][ T8598] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 182.492078][ T8598] page dumped because: kasan: bad access detected [ 182.498477][ T8598] page_owner tracks the page as allocated [ 182.504177][ T8598] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6567, tgid 6567 (syz-executor), ts 124922248109, free_ts 124922085346 [ 182.525106][ T8598] post_alloc_hook+0xfd/0x120 [ 182.529795][ T8598] get_page_from_freelist+0xf48/0x3530 [ 182.535266][ T8598] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 182.541156][ T8598] new_slab+0xa2/0x650 [ 182.545218][ T8598] refill_objects+0xe3/0x410 [ 182.549807][ T8598] __pcs_replace_empty_main+0x376/0x680 [ 182.555347][ T8598] __kvmalloc_node_noprof+0x793/0x970 [ 182.560723][ T8598] do_replace_table+0x1c5/0x760 [ 182.565562][ T8598] xt_register_table+0x384/0x9a0 [ 182.570515][ T8598] ipt_register_table+0x137/0x2b0 [ 182.575528][ T8598] iptable_security_table_init+0x40/0x60 [ 182.581152][ T8598] xt_find_table_lock+0x2db/0x520 [ 182.586196][ T8598] xt_request_find_table_lock+0x28/0xf0 [ 182.591731][ T8598] get_info+0x1a7/0x790 [ 182.595874][ T8598] do_ipt_get_ctl+0x231/0xbf0 [ 182.600540][ T8598] nf_getsockopt+0x7c/0xe0 [ 182.604943][ T8598] page last free pid 6567 tgid 6567 stack trace: [ 182.611275][ T8598] free_pages_prepare+0x586/0xd80 [ 182.616301][ T8598] __free_contig_range_common+0x14f/0x250 [ 182.622038][ T8598] free_pages_bulk+0x12a/0x200 [ 182.626795][ T8598] vm_area_free_pages+0xad/0x2b0 [ 182.631726][ T8598] vfree+0x107/0x750 [ 182.635612][ T8598] do_ipt_get_ctl+0x9d7/0xbf0 [ 182.640276][ T8598] nf_getsockopt+0x7c/0xe0 [ 182.644679][ T8598] ip_getsockopt+0x192/0x1e0 [ 182.649255][ T8598] tcp_getsockopt+0xa1/0x110 [ 182.653863][ T8598] do_sock_getsockopt+0x50a/0x6e0 [ 182.658887][ T8598] __sys_getsockopt+0x148/0x260 [ 182.663735][ T8598] __x64_sys_getsockopt+0xbd/0x160 [ 182.668834][ T8598] do_syscall_64+0x115/0x870 [ 182.673409][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.679326][ T8598] [ 182.681630][ T8598] Memory state around the buggy address: [ 182.687243][ T8598] ffff888033a66d80: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 182.695286][ T8598] ffff888033a66e00: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 182.703347][ T8598] >ffff888033a66e80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 182.711400][ T8598] ^ [ 182.716501][ T8598] ffff888033a66f00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 182.724547][ T8598] ffff888033a66f80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 182.732588][ T8598] ================================================================== [ 182.801667][ T8647] gadget €—_,€ˆÿÿˆ!: fail, usb_ep_queue returned -22 [ 182.834153][ T8598] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.841396][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 182.850609][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.860684][ T8598] Call Trace: [ 182.863975][ T8598] [ 182.866916][ T8598] dump_stack_lvl+0x100/0x190 [ 182.871610][ T8598] vpanic+0x552/0x970 [ 182.875600][ T8598] ? __pfx_vpanic+0x10/0x10 [ 182.880119][ T8598] ? rcu_is_watching+0x12/0xc0 [ 182.884916][ T8598] ? string+0x471/0x4d0 [ 182.889089][ T8598] panic+0xd1/0xe0 [ 182.892817][ T8598] ? __pfx_panic+0x10/0x10 [ 182.897249][ T8598] ? string+0x471/0x4d0 [ 182.901438][ T8598] ? preempt_schedule_common+0x42/0xc0 [ 182.906926][ T8598] check_panic_on_warn.cold+0x19/0x34 [ 182.912334][ T8598] end_report.part.0+0x3a/0x90 [ 182.917292][ T8598] kasan_report.cold+0xe/0x18 [ 182.922005][ T8598] ? string+0x471/0x4d0 [ 182.926168][ T8598] string+0x471/0x4d0 [ 182.930159][ T8598] ? __pfx_string+0x10/0x10 [ 182.934667][ T8598] vsnprintf+0x422/0x1300 [ 182.939000][ T8598] ? __pfx_vsnprintf+0x10/0x10 [ 182.943762][ T8598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.949917][ T8598] ? is_bpf_text_address+0x94/0x1a0 [ 182.955108][ T8598] ? kernel_text_address+0x8d/0x100 [ 182.960297][ T8598] snprintf+0xc7/0x100 [ 182.964351][ T8598] ? __pfx_snprintf+0x10/0x10 [ 182.969017][ T8598] ? stack_trace_save+0x8e/0xc0 [ 182.973857][ T8598] dev_vprintk_emit+0x375/0x3e0 [ 182.978701][ T8598] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 182.984073][ T8598] ? __x64_sys_ioctl+0x18e/0x210 [ 182.989012][ T8598] ? do_syscall_64+0x115/0x870 [ 182.993762][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.999821][ T8598] dev_printk_emit+0xd2/0x10d [ 183.004494][ T8598] ? __pfx_dev_printk_emit+0x10/0x10 [ 183.009779][ T8598] __dev_printk+0xcb/0x100 [ 183.014195][ T8598] _dev_err+0xef/0x127 [ 183.018279][ T8598] ? __pfx__dev_err+0x10/0x10 [ 183.022966][ T8598] ? dummy_queue+0x3ca/0xb90 [ 183.027559][ T8598] ? find_held_lock+0x2b/0x80 [ 183.032257][ T8598] ? raw_process_ep0_io+0x314/0x9c0 [ 183.037456][ T8598] raw_process_ep0_io.cold+0x65/0x7f [ 183.042740][ T8598] raw_ioctl+0x1369/0x2b80 [ 183.047156][ T8598] ? __pfx_raw_ioctl+0x10/0x10 [ 183.051916][ T8598] ? selinux_file_ioctl+0xb6/0x290 [ 183.057026][ T8598] ? __pfx_raw_ioctl+0x10/0x10 [ 183.061784][ T8598] __x64_sys_ioctl+0x18e/0x210 [ 183.066549][ T8598] do_syscall_64+0x115/0x870 [ 183.071215][ T8598] ? clear_bhb_loop+0x40/0x90 [ 183.075888][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.081775][ T8598] RIP: 0033:0x7fd671f9db2b [ 183.086184][ T8598] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 183.105785][ T8598] RSP: 002b:00007fd672e58f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.114191][ T8598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd671f9db2b [ 183.122331][ T8598] RDX: 00007fd672e58fd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 183.130297][ T8598] RBP: 00007fd672e58fd0 R08: 000000000000001a R09: 0000000000000409 [ 183.138264][ T8598] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd672e58fd8 [ 183.146226][ T8598] R13: 0000200000000080 R14: 00007fd672225fa0 R15: 00007ffc7dd99a28 [ 183.154210][ T8598] [ 183.157366][ T8598] Kernel Offset: disabled [ 183.161678][ T8598] Rebooting in 86400 seconds..