last executing test programs: 1h5m40.545980596s ago: executing program 32 (id=411): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003f40)={0x0, 0x3938700}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004080), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000004140)={0x20, 0x0, 0x0, 0x0, 0x0}) 1h5m5.674413309s ago: executing program 33 (id=481): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) setuid(0xee00) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 55m6.749396941s ago: executing program 2 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) 55m6.510356978s ago: executing program 2 (id=1163): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0xc131, 0xffffffffffffffff, 0x3547b000) 55m6.240412841s ago: executing program 2 (id=1165): mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x88, 0x20000}, 0xfffffffffffffed6) 55m6.062240535s ago: executing program 2 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000810) 55m5.810964442s ago: executing program 2 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}]}, 0x34}}, 0x0) 55m5.599813925s ago: executing program 2 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 54m16.886507148s ago: executing program 34 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 51m46.000817388s ago: executing program 4 (id=1499): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) close(0x4) 51m44.158879229s ago: executing program 4 (id=1502): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) 51m43.957495693s ago: executing program 4 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 51m43.732424238s ago: executing program 4 (id=1504): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@var={0xa, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x33}, 0x28) 51m43.619322265s ago: executing program 4 (id=1505): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$dsp(r0, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 51m42.672131254s ago: executing program 4 (id=1506): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000280)=@unlock_all, 0xb) 50m57.447053542s ago: executing program 35 (id=1506): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000280)=@unlock_all, 0xb) 46m48.620397112s ago: executing program 3 (id=1816): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x6, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 46m48.320995511s ago: executing program 3 (id=1817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x80000003) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x5}}}}}}, 0x0) 46m48.030423602s ago: executing program 3 (id=1818): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 46m47.691499795s ago: executing program 3 (id=1819): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9", 0x5f}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 46m45.870970838s ago: executing program 3 (id=1820): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x3, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 46m45.581486618s ago: executing program 3 (id=1821): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x39f63000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r4, 0x289e0cb5, 0x0) 46m0.621907578s ago: executing program 36 (id=1821): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x39f63000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r4, 0x289e0cb5, 0x0) 40m57.191871997s ago: executing program 5 (id=2184): unshare(0x28040680) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 40m56.91072205s ago: executing program 5 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x4004000) 40m56.632555981s ago: executing program 5 (id=2186): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c", 0x18}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b2404"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 40m56.340072574s ago: executing program 5 (id=2187): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 40m47.906780464s ago: executing program 5 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 40m26.810352939s ago: executing program 5 (id=2199): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 39m40.951938488s ago: executing program 37 (id=2199): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 37m26.370126678s ago: executing program 6 (id=2312): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000005, &(0x7f00000000c0)=[{0xd09, 0x80000001, 0x8}], 0x1, 0x20000000000, 0x68, 0x0, 0x2d, 0x5f}) 37m26.150975728s ago: executing program 6 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x37, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) 37m26.006261843s ago: executing program 6 (id=2315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x4008010}}], 0x1, 0x0) 37m25.839612047s ago: executing program 6 (id=2316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6", 0x11}], 0x1}], 0x1, 0x0) 37m25.641875958s ago: executing program 6 (id=2317): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c", 0x1c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 37m23.889494353s ago: executing program 6 (id=2322): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) personality(0x8) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x39f63000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r4, 0x289e0cb5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x0, 0x1fd, 0x7f, 0x0, 0xd}) 36m38.481676923s ago: executing program 38 (id=2322): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) personality(0x8) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x39f63000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r4, 0x289e0cb5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x0, 0x1fd, 0x7f, 0x0, 0xd}) 26m27.459543404s ago: executing program 8 (id=3019): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) 26m27.246562039s ago: executing program 8 (id=3021): mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800, &(0x7f0000000280)={0x0, 0x71, 0xe0000}, 0x20) 26m27.019250967s ago: executing program 8 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000360007012abd700000000000017c00000c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 26m26.741252269s ago: executing program 8 (id=3024): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x9) 26m26.610671223s ago: executing program 8 (id=3026): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26m26.080899344s ago: executing program 8 (id=3028): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getegid() keyctl$chown(0x4, 0x0, 0x0, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0x0, 0x200, 0x2, 0xa159}, 0x1d, [0xc54c, 0x2, 0xe, 0x7fff, 0x800, 0x80000001, 0x6, 0x3, 0x5, 0x0, 0x7, 0x8, 0x5, 0x5, 0xfffffe01, 0x0, 0xae000000, 0x8001, 0x86, 0x1, 0x8, 0x62, 0x5, 0xe0, 0x3, 0x1, 0xfdb2, 0x3, 0x5, 0x9, 0x6, 0xb, 0x0, 0x1, 0x7, 0x5, 0x0, 0x10000, 0x2, 0x9, 0x1, 0x1, 0x8, 0xe, 0x8000, 0x7ff, 0x0, 0x1, 0x6, 0xffff, 0x80, 0x6, 0x7, 0x10000, 0x7, 0xfffffffb, 0x6, 0x9, 0x8, 0x3, 0x3, 0x5, 0xa8, 0x1], [0x81, 0x0, 0xc, 0x1, 0xfc, 0x10001, 0xffffffff, 0x4, 0x6, 0xff, 0x5, 0x8, 0x80000001, 0xe, 0x1fffe, 0x5618, 0x8, 0xcfc, 0x7, 0x1, 0xf, 0x10000, 0x1, 0x0, 0xf, 0x7fffffff, 0x0, 0x0, 0x2, 0x5, 0x2d, 0x0, 0x4, 0x6, 0x0, 0xffffffff, 0x4, 0x101, 0xe9, 0x6, 0x3, 0x4, 0x37b0000, 0x3e, 0x4, 0x3, 0xfffff1e4, 0x1000, 0x8, 0x6, 0x4, 0x3, 0xfffff801, 0xe, 0x7, 0x4, 0x9, 0xc00, 0x3d4, 0x7, 0x0, 0x131ac, 0xfffffff9, 0x8], [0x3, 0xfffffffe, 0xa7e, 0x5, 0x4b, 0x0, 0x8, 0x3f, 0x1, 0x401, 0x0, 0x8, 0x0, 0x5, 0x47, 0x3, 0xa5, 0x6, 0x3, 0x8, 0x10fe, 0x4, 0x37a, 0xfffffff8, 0x7fffffff, 0x2, 0x8, 0x7, 0x2, 0x2, 0x9, 0x6, 0x0, 0xfffffff6, 0x7, 0x4, 0x8, 0x5, 0x40, 0x5, 0xfffffffb, 0x1c, 0xe9b, 0x8000, 0x8, 0x1, 0xb, 0x4, 0x92aa, 0x4, 0xffff, 0x200, 0x4, 0x1b60f6a3, 0x8, 0x4, 0x4, 0xfffffffc, 0x3, 0x8, 0x101, 0x6, 0xfff, 0xd], [0x80, 0x61, 0x5, 0x7, 0x9, 0x9ab, 0x10000, 0xb, 0x80, 0x3de, 0x2, 0xffff, 0x681, 0x6, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x7, 0x80000000, 0xbfffffff, 0x7ff, 0x1ff, 0xb, 0xfff, 0x0, 0xffff6030, 0x400, 0xffffffff, 0xb213, 0x7, 0x4, 0xe2b, 0xfffffe01, 0x0, 0x1000, 0x8, 0x63f, 0x5, 0x2, 0x5f, 0x750, 0x1, 0x101, 0x1, 0x1, 0x0, 0x1009, 0x7ff, 0x2, 0x0, 0x9, 0x40, 0x0, 0x3cc6f141, 0x1, 0x4, 0x8, 0xe, 0x8, 0xa, 0x8]}, 0x45c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 25m40.97602393s ago: executing program 39 (id=3028): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getegid() keyctl$chown(0x4, 0x0, 0x0, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0x0, 0x200, 0x2, 0xa159}, 0x1d, [0xc54c, 0x2, 0xe, 0x7fff, 0x800, 0x80000001, 0x6, 0x3, 0x5, 0x0, 0x7, 0x8, 0x5, 0x5, 0xfffffe01, 0x0, 0xae000000, 0x8001, 0x86, 0x1, 0x8, 0x62, 0x5, 0xe0, 0x3, 0x1, 0xfdb2, 0x3, 0x5, 0x9, 0x6, 0xb, 0x0, 0x1, 0x7, 0x5, 0x0, 0x10000, 0x2, 0x9, 0x1, 0x1, 0x8, 0xe, 0x8000, 0x7ff, 0x0, 0x1, 0x6, 0xffff, 0x80, 0x6, 0x7, 0x10000, 0x7, 0xfffffffb, 0x6, 0x9, 0x8, 0x3, 0x3, 0x5, 0xa8, 0x1], [0x81, 0x0, 0xc, 0x1, 0xfc, 0x10001, 0xffffffff, 0x4, 0x6, 0xff, 0x5, 0x8, 0x80000001, 0xe, 0x1fffe, 0x5618, 0x8, 0xcfc, 0x7, 0x1, 0xf, 0x10000, 0x1, 0x0, 0xf, 0x7fffffff, 0x0, 0x0, 0x2, 0x5, 0x2d, 0x0, 0x4, 0x6, 0x0, 0xffffffff, 0x4, 0x101, 0xe9, 0x6, 0x3, 0x4, 0x37b0000, 0x3e, 0x4, 0x3, 0xfffff1e4, 0x1000, 0x8, 0x6, 0x4, 0x3, 0xfffff801, 0xe, 0x7, 0x4, 0x9, 0xc00, 0x3d4, 0x7, 0x0, 0x131ac, 0xfffffff9, 0x8], [0x3, 0xfffffffe, 0xa7e, 0x5, 0x4b, 0x0, 0x8, 0x3f, 0x1, 0x401, 0x0, 0x8, 0x0, 0x5, 0x47, 0x3, 0xa5, 0x6, 0x3, 0x8, 0x10fe, 0x4, 0x37a, 0xfffffff8, 0x7fffffff, 0x2, 0x8, 0x7, 0x2, 0x2, 0x9, 0x6, 0x0, 0xfffffff6, 0x7, 0x4, 0x8, 0x5, 0x40, 0x5, 0xfffffffb, 0x1c, 0xe9b, 0x8000, 0x8, 0x1, 0xb, 0x4, 0x92aa, 0x4, 0xffff, 0x200, 0x4, 0x1b60f6a3, 0x8, 0x4, 0x4, 0xfffffffc, 0x3, 0x8, 0x101, 0x6, 0xfff, 0xd], [0x80, 0x61, 0x5, 0x7, 0x9, 0x9ab, 0x10000, 0xb, 0x80, 0x3de, 0x2, 0xffff, 0x681, 0x6, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x7, 0x80000000, 0xbfffffff, 0x7ff, 0x1ff, 0xb, 0xfff, 0x0, 0xffff6030, 0x400, 0xffffffff, 0xb213, 0x7, 0x4, 0xe2b, 0xfffffe01, 0x0, 0x1000, 0x8, 0x63f, 0x5, 0x2, 0x5f, 0x750, 0x1, 0x101, 0x1, 0x1, 0x0, 0x1009, 0x7ff, 0x2, 0x0, 0x9, 0x40, 0x0, 0x3cc6f141, 0x1, 0x4, 0x8, 0xe, 0x8, 0xa, 0x8]}, 0x45c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 14m3.77623867s ago: executing program 9 (id=4117): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 14m0.931092516s ago: executing program 9 (id=4118): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1c5) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000006c0)={r5, 0xd, 0x0, [0x100000000, 0x4, 0x7a9d36d5, 0x3, 0x101], [0x10001, 0x8ebd, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1, 0x9b61, 0x3ff, 0x1, 0x8, 0x2, 0x40000000000, 0x2, 0x3, 0x64e, 0x2, 0xbe3, 0x9, 0xfffffffffffffbff, 0x6, 0x6, 0x6, 0x8, 0x9, 0x1000, 0x0, 0x2, 0x80000000, 0x2, 0x5, 0x4, 0x4, 0x2, 0x36e6, 0x5, 0x0, 0x8001, 0x6, 0x6, 0x8, 0x5, 0x89, 0x3, 0x4, 0x12dd, 0x5, 0x0, 0x10001, 0x0, 0x8ac, 0x4, 0x6, 0x5, 0xa, 0xa9, 0x4, 0x1, 0x1d5, 0x7, 0x7f, 0x3, 0x8, 0x8, 0xa, 0x400, 0x4, 0x1, 0x5, 0x4, 0x8, 0x4, 0x6, 0x7, 0x20fd, 0x4, 0x4, 0x800, 0xffff, 0x3, 0x66, 0x2a, 0x100000001, 0x5, 0xfffffffffffffffe, 0x9, 0x5, 0x1, 0x0, 0x71c6d084, 0x3, 0x0, 0x5, 0x5, 0x3ff, 0x9, 0x100000000, 0x7fffffffffffffff, 0x3f79, 0x7, 0x5, 0x1, 0x7, 0xb703, 0x7, 0xa, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5fc, 0x62, 0x4000800000000000, 0x0, 0x2f, 0x7fffffffffffffff, 0x8000000000000000, 0x4, 0x3, 0xb2e61e4]}) ioctl$VT_GETMODE(r0, 0x5601, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r6 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r6, &(0x7f00000006c0)='184', 0x3) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffaf) 13m56.682090773s ago: executing program 9 (id=4125): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0xf, 0x4}, 0x80, 0x0}, 0x8010) 13m56.369712684s ago: executing program 9 (id=4127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m55.96134143s ago: executing program 9 (id=4130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 13m55.578482963s ago: executing program 9 (id=4132): r0 = open(&(0x7f0000000300)='./file0\x00', 0x10002, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES16], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x20020800) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) 13m10.540789801s ago: executing program 40 (id=4132): r0 = open(&(0x7f0000000300)='./file0\x00', 0x10002, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES16], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x20020800) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) 3m31.140401471s ago: executing program 7 (id=5107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 3m21.661209173s ago: executing program 7 (id=5117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x6, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 3m12.980221072s ago: executing program 7 (id=5118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000006000000000000000000000001"], 0x60}}, 0x0) 3m11.202577794s ago: executing program 7 (id=5120): r0 = syz_io_uring_setup(0x2bba, &(0x7f0000000080)={0x0, 0x94c3, 0x400, 0x3, 0x18b}, &(0x7f0000000100), &(0x7f0000000140), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 3m11.070338838s ago: executing program 7 (id=5121): rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0xe, 0x0) 3m10.409292472s ago: executing program 7 (id=5122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex', 0x29) 2m24.510048052s ago: executing program 41 (id=5122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex', 0x29) 27.910557632s ago: executing program 1 (id=5237): pipe2$watch_queue(&(0x7f0000001700), 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100060044"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) 27.340529657s ago: executing program 1 (id=5238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) 27.032928313s ago: executing program 1 (id=5240): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x500}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020600) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x9) 16.056668853s ago: executing program 1 (id=5258): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x40000003) 13.343553086s ago: executing program 1 (id=5260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, 0x0, 0x400e0) 12.691216763s ago: executing program 1 (id=5261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 1.260236027s ago: executing program 0 (id=5279): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 1.059839051s ago: executing program 0 (id=5280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d0}, 0x400e0) 819.563179ms ago: executing program 0 (id=5281): mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, &(0x7f0000000000)) 610.32888ms ago: executing program 0 (id=5282): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz', 0x3) 316.943765ms ago: executing program 0 (id=5283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 0s ago: executing program 0 (id=5284): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0x0, 0x1000c, 0xdddc, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0x4, 0x2000004, 0xf, 0xc000, 0x8, 0x4d0, 0x8e99, 0x1, 0xed, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x9, 0xaf, 0x2, 0x281, 0x8001, 0x9]}) kernel console output (not intermixed with test programs): .286068][ T28] audit: type=1400 audit(3095.200:2118): avc: denied { getopt } for pid=18372 comm="syz.7.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3097.070197][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3097.072730][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3110.027442][T18414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.035976][T18414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3112.937978][T18432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3112.940578][T18432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3116.956307][T18459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3116.963596][T18459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3118.026858][ T28] audit: type=1400 audit(3117.940:2119): avc: denied { bind } for pid=18471 comm="syz.7.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3118.059905][ T28] audit: type=1400 audit(3117.980:2120): avc: denied { accept } for pid=18471 comm="syz.7.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3120.064721][T18492] socket: no more sockets [ 3121.165660][T18502] socket: no more sockets [ 3124.026690][T18514] socket: no more sockets [ 3124.362531][T18517] input: syz1 as /devices/virtual/input/input15 [ 3124.681739][ T28] audit: type=1400 audit(3124.600:2121): avc: denied { execute } for pid=18527 comm="syz.7.3648" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3125.554640][T18537] socket: no more sockets [ 3125.612381][T18536] socket: no more sockets [ 3126.997655][T18548] socket: no more sockets [ 3129.617616][T18571] fuse: Bad value for 'fd' [ 3130.591374][T18575] socket: no more sockets [ 3132.271598][T18582] fuse: Bad value for 'fd' [ 3136.529497][T18599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.531779][T18599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.018001][T18603] socket: no more sockets [ 3139.401567][T18616] socket: no more sockets [ 3141.139293][T18630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3141.140952][T18630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3141.317953][T18634] socket: no more sockets [ 3142.859342][ T28] audit: type=1326 audit(3142.770:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.861192][ T28] audit: type=1326 audit(3142.770:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.889323][ T28] audit: type=1326 audit(3142.800:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.889914][ T28] audit: type=1326 audit(3142.800:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.890235][ T28] audit: type=1326 audit(3142.800:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.890443][ T28] audit: type=1326 audit(3142.800:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.890629][ T28] audit: type=1326 audit(3142.800:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.890827][ T28] audit: type=1326 audit(3142.800:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.891017][ T28] audit: type=1326 audit(3142.800:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3142.891219][ T28] audit: type=1326 audit(3142.800:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18645 comm="syz.7.3696" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3146.197673][T18672] socket: no more sockets [ 3148.712351][T18695] socket: no more sockets [ 3150.060315][T18705] socket: no more sockets [ 3151.104216][T18710] socket: no more sockets [ 3152.302598][T18719] socket: no more sockets [ 3152.735474][T18721] socket: no more sockets [ 3153.237208][T18723] socket: no more sockets [ 3154.155426][T18729] socket: no more sockets [ 3154.431120][T18731] socket: no more sockets [ 3154.830566][T18733] socket: no more sockets [ 3155.730326][T18739] socket: no more sockets [ 3156.687540][T18744] socket: no more sockets [ 3157.327667][T18750] socket: no more sockets [ 3158.057204][T18757] socket: no more sockets [ 3158.631610][T18760] socket: no more sockets [ 3160.259886][T18773] socket: no more sockets [ 3161.580349][T18783] socket: no more sockets [ 3162.997723][T18793] socket: no more sockets [ 3164.676939][T18805] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3768'. [ 3166.440000][T18822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3166.443668][T18822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3168.826614][T18845] socket: no more sockets [ 3169.317016][T18850] fuse: Bad value for 'fd' [ 3170.255287][T18858] socket: no more sockets [ 3170.685036][T18862] fuse: Bad value for 'fd' [ 3171.651344][T18871] socket: no more sockets [ 3171.858201][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 3171.860601][ T28] audit: type=1400 audit(3171.770:2145): avc: denied { nlmsg_write } for pid=18873 comm="syz.9.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 3172.978021][T18888] socket: no more sockets [ 3174.511987][T18901] socket: no more sockets [ 3174.849122][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3174.850339][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3174.886322][T13719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3174.921883][T13719] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3177.147928][T18930] socket: no more sockets [ 3177.160864][T18930] socket: no more sockets [ 3177.176253][T18930] socket: no more sockets [ 3177.192174][T18930] socket: no more sockets [ 3177.882315][T18936] random: crng reseeded on system resumption [ 3180.271578][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3180.276916][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3180.491904][T18966] binder: 18965:18966 ioctl c0306201 20000300 returned -14 [ 3180.962104][T18970] syzkaller1: entered promiscuous mode [ 3180.963097][T18970] syzkaller1: entered allmulticast mode [ 3181.514842][T18978] binder: 18977:18978 ioctl c018620b 0 returned -14 [ 3181.702897][T18980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3181.704869][T18980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3184.533094][ T28] audit: type=1400 audit(3184.450:2146): avc: denied { bind } for pid=18986 comm="syz.7.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3190.089462][T19051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3190.090954][T19051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3190.593134][T19060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3190.597214][T19060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3191.990790][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3191.992423][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3193.825248][T19105] socket: no more sockets [ 3200.624289][T19117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3200.634870][T19117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3200.831007][T19121] socket: no more sockets [ 3202.874173][T19132] socket: no more sockets [ 3220.203145][T19294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3220.209632][T19294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3230.989854][ T28] audit: type=1326 audit(3230.900:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3230.990242][ T28] audit: type=1326 audit(3230.910:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.007055][ T28] audit: type=1326 audit(3230.920:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.010517][ T28] audit: type=1326 audit(3230.920:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=426 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.019551][ T28] audit: type=1326 audit(3230.920:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.029613][ T28] audit: type=1326 audit(3230.920:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.033560][ T28] audit: type=1326 audit(3230.920:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.037479][ T28] audit: type=1326 audit(3230.920:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3231.044646][ T28] audit: type=1326 audit(3230.920:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19333 comm="syz.7.3974" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3234.230619][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3978'. [ 3235.993503][ T28] audit: type=1400 audit(3235.910:2156): avc: denied { write } for pid=19357 comm="syz.7.3983" name="configs" dev="configfs" ino=9998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3236.019047][ T28] audit: type=1400 audit(3235.930:2157): avc: denied { write } for pid=19357 comm="syz.7.3983" name="functions" dev="configfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3238.748298][ T28] audit: type=1400 audit(3238.650:2158): avc: denied { write } for pid=19376 comm="syz.7.3991" name="functions" dev="configfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3239.102954][ T28] audit: type=1400 audit(3239.020:2159): avc: denied { write } for pid=19376 comm="syz.7.3991" name="c.1" dev="configfs" ino=10822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3257.749659][ T28] audit: type=1400 audit(3257.660:2160): avc: denied { audit_write } for pid=19422 comm="syz.9.4007" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3258.483274][T13719] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 3258.490076][T13719] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3263.344652][ T28] audit: type=1326 audit(3263.260:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.9.4010" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x0 [ 3274.131138][T19494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3274.133741][T19494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3283.858344][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3283.860726][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3303.071499][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3303.073357][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3306.133606][T19617] SELinux: invalid class [ 3306.165049][T19617] SELinux: failed to load policy [ 3310.076596][T19629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3310.086132][T19629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3319.096495][T19650] syz.7.4080: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 3319.112080][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.7.4080 Tainted: G L syzkaller #0 PREEMPT [ 3319.112300][T19650] Tainted: [L]=SOFTLOCKUP [ 3319.112346][T19650] Hardware name: ARM-Versatile Express [ 3319.112593][T19650] Call trace: [ 3319.112847][T19650] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3319.113176][T19650] r7:60000113 r6:60000113 r5:82333190 r4:00000000 [ 3319.113267][T19650] [<80201a74>] (show_stack) from [<8021e60c>] (dump_stack_lvl+0x5c/0x70) [ 3319.113331][T19650] [<8021e5b0>] (dump_stack_lvl) from [<8021e638>] (dump_stack+0x18/0x1c) [ 3319.113398][T19650] r7:8639c080 r6:8234fa34 r5:85870c40 r4:00000000 [ 3319.113418][T19650] [<8021e620>] (dump_stack) from [<805353bc>] (warn_alloc+0xdc/0xf8) [ 3319.113480][T19650] [<805352e0>] (warn_alloc) from [<80522d54>] (__vmalloc_node_range_noprof+0x268/0x6a4) [ 3319.113539][T19650] r3:00001000 r2:8234fa34 [ 3319.113567][T19650] r6:86167a40 r5:00000000 r4:00000000 [ 3319.113585][T19650] [<80522aec>] (__vmalloc_node_range_noprof) from [<805235dc>] (__vmalloc_noprof+0x88/0xa0) [ 3319.113669][T19650] r10:0000017f r9:85870c40 r8:87cb40cc r7:00000000 r6:00001000 r5:00001000 [ 3319.113703][T19650] r4:00000000 [ 3319.113722][T19650] [<80523554>] (__vmalloc_noprof) from [<803db7a8>] (bpf_prog_alloc_no_stats+0x38/0x1c8) [ 3319.113786][T19650] r5:00000dc0 r4:00000050 [ 3319.113804][T19650] [<803db770>] (bpf_prog_alloc_no_stats) from [<803db950>] (bpf_prog_alloc+0x18/0xc8) [ 3319.113874][T19650] r9:85870c40 r8:87cb40cc r7:80390b78 r6:00000001 r5:00400000 r4:00000050 [ 3319.113900][T19650] [<803db938>] (bpf_prog_alloc) from [<816931e0>] (bpf_prog_create_from_user+0x50/0x16c) [ 3319.113970][T19650] r7:80390b78 r6:00000001 r5:dfcc1f5c r4:00000050 [ 3319.113990][T19650] [<81693190>] (bpf_prog_create_from_user) from [<80392bb8>] (do_seccomp+0x25c/0xce4) [ 3319.114064][T19650] r10:0000017f r9:85870c40 r8:87cb4080 r7:8253f73c r6:20000000 r5:85870c40 [ 3319.114087][T19650] r4:00000000 [ 3319.114103][T19650] [<8039295c>] (do_seccomp) from [<8039385c>] (sys_seccomp+0x10/0x14) [ 3319.114202][T19650] r10:0000017f r9:85870c40 r8:8020029c r7:0000017f r6:00356310 r5:00000000 [ 3319.114223][T19650] r4:00000000 [ 3319.114239][T19650] [<8039384c>] (sys_seccomp) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3319.114372][T19650] Exception stack(0xdfcc1fa8 to 0xdfcc1ff0) [ 3319.114534][T19650] 1fa0: 00000000 00000000 00000001 00000000 20000000 00000000 [ 3319.114629][T19650] 1fc0: 00000000 00000000 00356310 0000017f 003562d8 00000000 00000001 76fb30dc [ 3319.114660][T19650] 1fe0: 76fb2e88 76fb2e78 00018fa0 001309d0 [ 3319.168482][T19650] Mem-Info: [ 3319.170023][T19650] active_anon:6102 inactive_anon:2313 isolated_anon:0 [ 3319.170023][T19650] active_file:0 inactive_file:44502 isolated_file:0 [ 3319.170023][T19650] unevictable:768 dirty:8 writeback:0 [ 3319.170023][T19650] slab_reclaimable:1518 slab_unreclaimable:9581 [ 3319.170023][T19650] mapped:5350 shmem:5951 pagetables:844 [ 3319.170023][T19650] sec_pagetables:0 bounce:0 [ 3319.170023][T19650] kernel_misc_reclaimable:0 [ 3319.170023][T19650] free:417172 free_pcp:1947 free_cma:4032 [ 3319.190121][T19650] Node 0 active_anon:24408kB inactive_anon:9252kB active_file:0kB inactive_file:178008kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:21400kB dirty:32kB writeback:0kB shmem:23804kB kernel_stack:2260kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3319.190892][T19650] Normal free:1355708kB boost:0kB min:4768kB low:6188kB high:7608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4716kB unevictable:0kB writepending:4kB zspages:0kB present:1556480kB managed:1424824kB mlocked:0kB bounce:0kB free_pcp:1104kB local_pcp:1104kB free_cma:0kB [ 3319.191182][T19650] lowmem_reserve[]: 0 4224 4224 [ 3319.192026][T19650] HighMem free:312980kB boost:0kB min:512kB low:1052kB high:1592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24400kB inactive_anon:9252kB active_file:0kB inactive_file:173292kB unevictable:3072kB writepending:28kB zspages:1612kB present:540672kB managed:540672kB mlocked:0kB bounce:0kB free_pcp:6684kB local_pcp:6684kB free_cma:16128kB [ 3319.192222][T19650] lowmem_reserve[]: 0 0 0 [ 3319.193220][T19650] Normal: 175*4kB (UM) 70*8kB (UME) 15*16kB (UME) 13*32kB (U) 25*64kB (UE) 10*128kB (UME) 3*256kB (UM) 3*512kB (UE) 9*1024kB (UME) 4*2048kB (UME) 325*4096kB (UM) = 1355708kB [ 3319.232025][T19650] HighMem: 1*4kB (U) 0*8kB 2*16kB (UM) 4*32kB (UM) 58*64kB (UM) 37*128kB (UM) 23*256kB (UMC) 13*512kB (UMC) 11*1024kB (UMC) 5*2048kB (UC) 66*4096kB (UMC) = 312996kB [ 3319.272796][T19650] 50457 total pagecache pages [ 3319.273622][T19650] 4 pages in swap cache [ 3319.279506][T19650] Free swap = 122704kB [ 3319.292827][T19650] Total swap = 124996kB [ 3319.293338][T19650] 524288 pages RAM [ 3319.293526][T19650] 135168 pages HighMem/MovableOnly [ 3319.293681][T19650] 32914 pages reserved [ 3319.293839][T19650] 4096 pages cma reserved [ 3330.360551][T19673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3330.362759][T19673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3335.631378][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3335.634796][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3341.255608][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3341.270301][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.211514][ T28] audit: type=1107 audit(3343.130:2162): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3343.470116][ T28] audit: type=1400 audit(3343.380:2163): avc: denied { getopt } for pid=19750 comm="syz.9.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3356.596620][ T28] audit: type=1400 audit(3356.510:2164): avc: denied { write } for pid=19769 comm="syz.9.4118" name="functions" dev="configfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3357.557176][T19771] SELinux: invalid class [ 3357.597127][T19771] SELinux: failed to load policy [ 3359.701768][ T28] audit: type=1326 audit(3359.610:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.7.4129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3359.703552][ T28] audit: type=1326 audit(3359.620:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.7.4129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3359.728491][ T28] audit: type=1326 audit(3359.640:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.7.4129" exe="/syz-executor" sig=0 arch=40000028 syscall=138 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3359.731285][ T28] audit: type=1326 audit(3359.640:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.7.4129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3359.736669][ T28] audit: type=1326 audit(3359.640:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.7.4129" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3365.320127][T19830] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4140'. [ 3371.986078][ T28] audit: type=1400 audit(3371.890:2170): avc: denied { name_bind } for pid=19873 comm="syz.7.4148" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 3372.481820][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3372.483526][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3373.169477][T19884] input: syz1 as /devices/virtual/input/input18 [ 3374.350081][T19892] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4153'. [ 3375.571055][ T28] audit: type=1400 audit(3375.480:2171): avc: denied { write } for pid=19891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3376.129191][ T28] audit: type=1326 audit(3376.040:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.130882][ T28] audit: type=1326 audit(3376.040:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.158077][ T28] audit: type=1326 audit(3376.060:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.165169][ T28] audit: type=1326 audit(3376.070:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=369 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.165572][ T28] audit: type=1326 audit(3376.070:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.165789][ T28] audit: type=1326 audit(3376.070:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.165997][ T28] audit: type=1326 audit(3376.070:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.166203][ T28] audit: type=1326 audit(3376.070:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.7.4157" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3376.431789][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4157'. [ 3377.170659][T19910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3377.171742][T19910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3379.082648][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 3379.082987][ T28] audit: type=1326 audit(3379.000:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.7.4164" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3379.093167][ T28] audit: type=1326 audit(3379.010:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.7.4164" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3379.115338][ T28] audit: type=1326 audit(3379.030:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.7.4164" exe="/syz-executor" sig=0 arch=40000028 syscall=52 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3379.115650][ T28] audit: type=1326 audit(3379.030:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.7.4164" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3379.115825][ T28] audit: type=1326 audit(3379.030:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.7.4164" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3379.980456][T19930] syz.7.4167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3385.530543][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4173'. [ 3404.627499][T19954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3404.628635][T19954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3405.327197][T19961] syzkaller0: entered promiscuous mode [ 3405.349442][T19961] syzkaller0: entered allmulticast mode [ 3413.443454][T19964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3413.495172][T19964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3418.049715][T19964] hsr_slave_0: entered promiscuous mode [ 3418.051553][T19964] hsr_slave_1: entered promiscuous mode [ 3418.063470][T19964] debugfs: 'hsr0' already exists in 'hsr' [ 3418.067203][T19964] Cannot create hsr debugfs directory [ 3418.545691][ T28] audit: type=1400 audit(3418.460:2512): avc: denied { listen } for pid=20175 comm="syz.7.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3419.129885][ T28] audit: type=1400 audit(3419.040:2513): avc: denied { accept } for pid=20175 comm="syz.7.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3420.349220][ T28] audit: type=1400 audit(3420.240:2514): avc: denied { write } for pid=20233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3420.659660][T19964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3420.678071][T19964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3420.682351][T19964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3420.723490][T19964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3420.760307][T19964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3420.817998][T19964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3420.846328][T19964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3420.890917][T19964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3421.895604][ T28] audit: type=1400 audit(3421.810:2515): avc: denied { write } for pid=20271 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3424.362675][ T28] audit: type=1400 audit(3424.260:2516): avc: denied { write } for pid=20276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3424.953575][T19964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3425.638388][ T28] audit: type=1400 audit(3425.550:2517): avc: denied { write } for pid=20283 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3427.489945][ T28] audit: type=1400 audit(3427.390:2518): avc: denied { write } for pid=20288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3428.879477][ T28] audit: type=1400 audit(3428.780:2519): avc: denied { write } for pid=20296 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3429.530502][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4187'. [ 3431.289196][ T28] audit: type=1400 audit(3431.190:2520): avc: denied { write } for pid=20305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3432.252322][ T28] audit: type=1400 audit(3432.160:2521): avc: denied { write } for pid=20315 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3434.049685][ T28] audit: type=1400 audit(3433.960:2522): avc: denied { write } for pid=20320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3435.069885][ T28] audit: type=1400 audit(3434.960:2523): avc: denied { write } for pid=20327 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3436.970041][ T28] audit: type=1400 audit(3436.850:2524): avc: denied { write } for pid=20332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3437.092896][T19964] veth0_vlan: entered promiscuous mode [ 3437.153689][T19964] veth1_vlan: entered promiscuous mode [ 3437.460564][T19964] veth0_macvtap: entered promiscuous mode [ 3437.513668][T19964] veth1_macvtap: entered promiscuous mode [ 3437.714929][ T1260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.715509][ T1260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.716020][ T1260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.716327][ T1260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3438.024682][ T28] audit: type=1400 audit(3437.940:2525): avc: denied { write } for pid=20338 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3440.279785][ T28] audit: type=1400 audit(3440.190:2526): avc: denied { write } for pid=20342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3441.539882][ T28] audit: type=1400 audit(3441.450:2527): avc: denied { write } for pid=20354 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3442.869447][ T28] audit: type=1400 audit(3442.770:2528): avc: denied { write } for pid=20357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3443.980496][ T28] audit: type=1400 audit(3443.870:2529): avc: denied { write } for pid=20363 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3445.869642][ T28] audit: type=1400 audit(3445.780:2530): avc: denied { write } for pid=20367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3446.946278][ T28] audit: type=1400 audit(3446.840:2531): avc: denied { write } for pid=20376 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3447.819530][T19257] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 3448.066821][T19257] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 3448.067201][T19257] usb 2-1: config 0 has no interface number 0 [ 3448.184403][T19257] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3448.184775][T19257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3448.185070][T19257] usb 2-1: Product: syz [ 3448.185247][T19257] usb 2-1: Manufacturer: syz [ 3448.185412][T19257] usb 2-1: SerialNumber: syz [ 3448.202419][T19257] usb 2-1: config 0 descriptor?? [ 3449.244202][T19257] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3449.244566][T19257] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 3449.245409][T19257] asix 2-1:0.251: probe with driver asix failed with error -61 [ 3449.468091][T19257] usb 2-1: USB disconnect, device number 2 [ 3450.149527][ T28] audit: type=1400 audit(3450.050:2532): avc: denied { write } for pid=20386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3451.229187][ T28] audit: type=1400 audit(3451.140:2533): avc: denied { write } for pid=20404 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3452.799745][ T28] audit: type=1400 audit(3452.710:2534): avc: denied { write } for pid=20408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3453.959395][ T28] audit: type=1400 audit(3453.860:2535): avc: denied { write } for pid=20416 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3456.339756][ T28] audit: type=1400 audit(3456.240:2536): avc: denied { write } for pid=20421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3457.370377][ T28] audit: type=1400 audit(3457.280:2537): avc: denied { write } for pid=20429 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3458.712611][T20440] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4212'. [ 3459.251931][ T28] audit: type=1400 audit(3459.160:2538): avc: denied { write } for pid=20436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3460.310049][ T28] audit: type=1400 audit(3460.220:2539): avc: denied { sys_nice } for pid=20450 comm="syz.1.4216" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 3460.449766][ T28] audit: type=1400 audit(3460.350:2540): avc: denied { write } for pid=20449 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3461.511860][ T28] audit: type=1400 audit(3461.430:2541): avc: granted { setsecparam } for pid=20456 comm="syz.1.4219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3462.812794][ T28] audit: type=1400 audit(3462.720:2542): avc: denied { write } for pid=20458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3463.819671][ T28] audit: type=1400 audit(3463.730:2543): avc: denied { write } for pid=20467 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3465.957090][ T28] audit: type=1400 audit(3465.870:2544): avc: denied { write } for pid=20474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3466.899002][ T28] audit: type=1400 audit(3466.780:2545): avc: denied { write } for pid=20485 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3469.166742][ T28] audit: type=1400 audit(3469.080:2546): avc: denied { write } for pid=20487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3470.560799][ T28] audit: type=1400 audit(3470.470:2547): avc: denied { write } for pid=20499 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3499.035137][ T28] audit: type=1326 audit(3498.950:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.035590][ T28] audit: type=1326 audit(3498.950:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.063469][ T28] audit: type=1326 audit(3498.980:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.063999][ T28] audit: type=1326 audit(3498.980:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.064517][ T28] audit: type=1326 audit(3498.980:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.109374][ T28] audit: type=1326 audit(3499.020:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=4 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.111341][ T28] audit: type=1326 audit(3499.020:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3499.116923][ T28] audit: type=1326 audit(3499.020:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.1.4245" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3503.504323][T20553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4251'. [ 3525.266934][T20591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4268'. [ 3527.197005][T20606] tmpfs: Unsupported parameter 'huge' [ 3533.793814][ T28] audit: type=1400 audit(3533.710:2556): avc: denied { connect } for pid=20611 comm="syz.1.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3556.567492][T19823] syz_tun (unregistering): left allmulticast mode [ 3556.681927][T14313] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3556.763182][T14313] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3556.896062][T14313] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3557.048591][T14313] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3557.764721][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3557.786961][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3557.807150][T14313] bond0 (unregistering): Released all slaves [ 3557.867560][T14313] hsr_slave_0: left promiscuous mode [ 3557.874949][T14313] hsr_slave_1: left promiscuous mode [ 3557.912100][T14313] veth1_macvtap: left promiscuous mode [ 3557.912868][T14313] veth0_macvtap: left promiscuous mode [ 3557.914633][T14313] veth1_vlan: left promiscuous mode [ 3557.915461][T14313] veth0_vlan: left promiscuous mode [ 3561.349255][ T28] audit: type=1400 audit(3561.230:2557): avc: denied { write } for pid=20788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3562.234848][ T28] audit: type=1400 audit(3562.150:2558): avc: denied { write } for pid=20799 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3562.802460][ T2958] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3564.329503][ T28] audit: type=1400 audit(3564.230:2559): avc: denied { write } for pid=20809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3565.129188][ T28] audit: type=1400 audit(3565.040:2560): avc: denied { write } for pid=20820 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3565.603355][ T2958] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3567.140074][ T28] audit: type=1400 audit(3567.030:2561): avc: denied { write } for pid=20834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3567.577134][ T28] audit: type=1400 audit(3567.480:2562): avc: denied { write } for pid=20837 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3567.689834][T19179] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3567.912539][T19179] usb 2-1: config 0 has no interfaces? [ 3567.912985][T19179] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 3567.913282][T19179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3567.930226][T19179] usb 2-1: config 0 descriptor?? [ 3568.037689][ T2958] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3568.196570][T20839] veth0: entered promiscuous mode [ 3568.280036][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 3568.336233][T20839] veth0 (unregistering): left promiscuous mode [ 3568.454607][T19179] usb 2-1: USB disconnect, device number 3 [ 3569.079378][T19175] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3569.239643][T19175] usb 2-1: Using ep0 maxpacket: 16 [ 3569.260121][T19175] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3569.264711][T19175] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 3569.349546][T19175] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 3569.349881][T19175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3569.350172][T19175] usb 2-1: Product: syz [ 3569.350356][T19175] usb 2-1: Manufacturer: syz [ 3569.350528][T19175] usb 2-1: SerialNumber: syz [ 3569.650417][ T28] audit: type=1400 audit(3569.550:2563): avc: denied { write } for pid=20869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3569.830211][T19175] usb 2-1: USB disconnect, device number 4 [ 3570.637255][ T28] audit: type=1400 audit(3570.550:2564): avc: denied { write } for pid=20906 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3571.291996][ T2958] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3574.410344][T20923] futex_wake_op: syz.1.4354 tries to shift op by 32; fix this program [ 3583.879925][T19181] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3584.012938][ T28] audit: type=1400 audit(3583.930:2565): avc: denied { write } for pid=20945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3584.032194][T19181] usb 2-1: Using ep0 maxpacket: 8 [ 3584.082840][T19181] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.083176][T19181] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3584.083488][T19181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3584.091939][T19181] usb 2-1: config 0 descriptor?? [ 3584.631262][T19181] hid (null): unknown global tag 0xe [ 3584.656252][T19181] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 3584.874396][T19181] usb 2-1: USB disconnect, device number 5 [ 3585.612772][ T28] audit: type=1400 audit(3585.520:2566): avc: denied { write } for pid=20968 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3587.659855][ T28] audit: type=1400 audit(3843.605:2567): avc: denied { write } for pid=20975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3588.258884][ T28] audit: type=1400 audit(3844.215:2568): avc: denied { write } for pid=20984 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3590.234916][ T28] audit: type=1400 audit(3846.185:2569): avc: denied { write } for pid=20994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3590.944060][ T28] audit: type=1400 audit(3846.905:2570): avc: denied { write } for pid=21000 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3592.127434][T21013] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4372'. [ 3593.151707][ T28] audit: type=1400 audit(3849.115:2571): avc: denied { write } for pid=21011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3594.302078][ T28] audit: type=1400 audit(3850.255:2572): avc: denied { write } for pid=21025 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3595.464302][T21034] SELinux: invalid class [ 3595.505967][T21034] SELinux: failed to load policy [ 3596.597253][T21045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4378'. [ 3618.359437][T19252] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3618.538202][T19252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3618.539252][T19252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3618.539577][T19252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3618.540052][T19252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3618.540232][T19252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3618.552165][T19252] usb 2-1: config 0 descriptor?? [ 3619.058409][T19252] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 3619.061321][T19252] plantronics 0003:047F:FFFF.0006: nested delimiters [ 3619.069362][T19252] plantronics 0003:047F:FFFF.0006: item 0 4 2 10 parsing failed [ 3619.071079][T19252] plantronics 0003:047F:FFFF.0006: parse failed [ 3619.072083][T19252] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 3619.263272][T19252] usb 2-1: USB disconnect, device number 6 [ 3620.229536][T16908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3620.385243][T16908] usb 2-1: Using ep0 maxpacket: 8 [ 3620.408569][T16908] usb 2-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3620.410416][T16908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3620.412382][T16908] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3620.413411][T16908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3620.431172][T16908] usb 2-1: config 0 descriptor?? [ 3620.943331][T16908] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 3620.951253][T16908] logitech 0003:046D:C20E.0007: unknown global tag 0xd [ 3620.955373][T16908] logitech 0003:046D:C20E.0007: item 0 2 1 13 parsing failed [ 3620.958091][T16908] logitech 0003:046D:C20E.0007: parse failed [ 3620.961608][T16908] logitech 0003:046D:C20E.0007: probe with driver logitech failed with error -22 [ 3621.147078][T16908] usb 2-1: USB disconnect, device number 7 [ 3621.592619][T16908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3621.741519][T16908] usb 2-1: Using ep0 maxpacket: 32 [ 3621.752369][T16908] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 3621.752672][T16908] usb 2-1: config 0 has no interface number 0 [ 3621.752865][T16908] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3621.753053][T16908] usb 2-1: config 0 interface 85 has no altsetting 0 [ 3621.824486][T16908] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3621.824812][T16908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3621.825096][T16908] usb 2-1: Product: syz [ 3621.825262][T16908] usb 2-1: Manufacturer: syz [ 3621.825421][T16908] usb 2-1: SerialNumber: syz [ 3621.836980][T16908] usb 2-1: config 0 descriptor?? [ 3622.553760][T16908] appletouch 2-1:0.85: Geyser mode initialized. [ 3622.570546][T16908] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input19 [ 3622.763509][T16908] usb 2-1: USB disconnect, device number 8 [ 3622.795913][T16908] appletouch 2-1:0.85: input: appletouch disconnected [ 3636.459698][T19252] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3636.624490][T19252] usb 2-1: Using ep0 maxpacket: 32 [ 3636.658297][T19252] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3636.673014][T19252] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3636.674218][T19252] usb 2-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3636.675369][T19252] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3636.715329][T19252] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3636.716544][T19252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3636.720236][T19252] usb 2-1: Product: syz [ 3636.721936][T19252] usb 2-1: Manufacturer: syz [ 3636.725353][T19252] usb 2-1: SerialNumber: syz [ 3636.783163][T21172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3636.801870][T21172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3637.098529][T19252] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 3637.146728][T19252] usb 2-1: USB disconnect, device number 9 [ 3638.335599][T19239] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3638.489638][T19239] usb 2-1: Using ep0 maxpacket: 8 [ 3638.511682][T19239] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 3638.512727][T19239] usb 2-1: config 179 has no interface number 0 [ 3638.516104][T19239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3638.528240][T19239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3638.531748][T19239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3638.533777][T19239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3638.535568][T19239] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3638.537560][T19239] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3638.543262][T19239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3638.558123][T21186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3638.597586][T19239] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 3638.860876][T19252] usb 2-1: USB disconnect, device number 10 [ 3645.252960][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 3651.585058][ T28] audit: type=1326 audit(3907.545:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.596493][ T28] audit: type=1326 audit(3907.545:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.606511][ T28] audit: type=1326 audit(3907.565:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.610347][ T28] audit: type=1326 audit(3907.575:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.617585][ T28] audit: type=1326 audit(3907.575:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.621417][ T28] audit: type=1326 audit(3907.575:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.623104][ T28] audit: type=1326 audit(3907.575:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.625590][ T28] audit: type=1326 audit(3907.575:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.639248][ T28] audit: type=1326 audit(3907.595:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3651.641366][ T28] audit: type=1326 audit(3907.595:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.1.4425" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3652.994157][T21259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4429'. [ 3653.341106][T19239] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3653.519300][T19239] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 3653.520593][T19239] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 3653.524293][T19239] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3653.552268][T19239] usb 2-1: string descriptor 0 read error: -22 [ 3653.553750][T19239] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 3653.557274][T19239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3654.133276][T19239] logitech 0003:046D:C626.0008: unknown main item tag 0x2 [ 3654.141728][T19239] logitech 0003:046D:C626.0008: unexpected long global item [ 3654.151044][T19239] logitech 0003:046D:C626.0008: parse failed [ 3654.151757][T19239] logitech 0003:046D:C626.0008: probe with driver logitech failed with error -22 [ 3654.335824][T19252] usb 2-1: USB disconnect, device number 11 [ 3656.500589][T21295] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4437'. [ 3676.674132][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 3676.677686][ T28] audit: type=1400 audit(3932.635:2606): avc: denied { write } for pid=21322 comm="syz.1.4449" name="functions" dev="configfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3676.727198][T21325] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 3676.733696][ T28] audit: type=1400 audit(3932.695:2607): avc: denied { relabelto } for pid=21322 comm="syz.1.4449" name="245" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 3676.734039][ T28] audit: type=1400 audit(3932.695:2608): avc: denied { associate } for pid=21322 comm="syz.1.4449" name="245" dev="tmpfs" ino=1262 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 3686.054447][T19239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3686.219840][T19239] usb 2-1: Using ep0 maxpacket: 16 [ 3686.848172][T19239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3686.854822][T19239] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3686.855240][T19239] usb 2-1: can't read configurations, error -71 [ 3691.353704][ T28] audit: type=1326 audit(3947.295:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.370400][ T28] audit: type=1326 audit(3947.325:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=293 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.370634][ T28] audit: type=1326 audit(3947.325:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.370854][ T28] audit: type=1326 audit(3947.325:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.412579][ T28] audit: type=1326 audit(3947.375:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.414608][ T28] audit: type=1326 audit(3947.375:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.427001][ T28] audit: type=1326 audit(3947.375:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.475480][ T28] audit: type=1326 audit(3947.425:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.475926][ T28] audit: type=1326 audit(3947.425:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3691.476272][ T28] audit: type=1326 audit(3947.425:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.1.4470" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3696.188064][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4451'. [ 3711.619665][T21411] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4483'. [ 3711.627030][T21411] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4483'. [ 3711.631861][T21411] 0ªî{X¹¦: renamed from eql (while UP) [ 3711.642411][T21411] 0ªî{X¹¦: entered allmulticast mode [ 3711.650262][T21411] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 3718.384209][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4501'. [ 3718.873082][T21462] netlink: 'syz.1.4504': attribute type 52 has an invalid length. [ 3721.810131][T21487] netlink: 'syz.1.4517': attribute type 1 has an invalid length. [ 3729.018184][T21521] netlink: 'syz.1.4531': attribute type 29 has an invalid length. [ 3729.489369][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4533'. [ 3729.492566][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4533'. [ 3732.505654][T21549] netlink: 'syz.1.4543': attribute type 2 has an invalid length. [ 3732.509323][T21549] netlink: 'syz.1.4543': attribute type 1 has an invalid length. [ 3733.597191][T21559] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4548'. [ 3734.048345][T21563] netlink: 'syz.1.4550': attribute type 29 has an invalid length. [ 3734.070208][T21563] netlink: 'syz.1.4550': attribute type 29 has an invalid length. [ 3739.084998][T21607] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 3739.084998][T21607] Please contact the netfilter-devel mailing list or update your nftables rules. [ 3741.784385][T21630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'. [ 3750.876143][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 3750.876410][ T28] audit: type=1400 audit(4006.835:2634): avc: denied { nlmsg_read } for pid=21691 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 3752.246606][T21701] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4614'. [ 3752.255059][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4614'. [ 3754.853060][T21716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4620'. [ 3755.460121][T21722] netlink: 'syz.1.4624': attribute type 3 has an invalid length. [ 3767.269809][T21795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4650'. [ 3767.282485][T21795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4650'. [ 3770.573251][T21818] netlink: 'syz.1.4660': attribute type 10 has an invalid length. [ 3771.478075][T21824] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 3772.010690][T21829] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4664'. [ 3772.490119][T21835] netlink: 'syz.1.4668': attribute type 21 has an invalid length. [ 3772.490456][T21835] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4668'. [ 3773.248452][T21841] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4671'. [ 3776.279949][ T28] audit: type=1400 audit(4032.245:2635): avc: denied { setopt } for pid=21857 comm="syz.1.4677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3778.189824][T21876] netlink: 'syz.1.4685': attribute type 29 has an invalid length. [ 3778.191148][T21876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4685'. [ 3781.665084][T21908] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.4698'. [ 3784.821837][ T28] audit: type=1400 audit(4040.765:2636): avc: denied { write } for pid=21924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3785.266733][T21939] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4711'. [ 3785.296986][T21939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3785.565421][ T28] audit: type=1400 audit(4041.525:2637): avc: denied { write } for pid=21938 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3787.635230][T21953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4716'. [ 3787.650283][T21953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4716'. [ 3798.115563][T22070] tap0: tun_chr_ioctl cmd 1074025692 [ 3811.210543][T22216] IPv6: Can't replace route, no match found [ 3818.382200][T22237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4812'. [ 3818.866243][T22241] netlink: 'syz.1.4814': attribute type 10 has an invalid length. [ 3820.768407][T14308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.852471][T14308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3820.950306][T14308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3821.013701][T14308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3821.707919][T14308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3821.737956][T14308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3821.752248][T14308] bond0 (unregistering): Released all slaves [ 3821.884535][T14308] hsr_slave_0: left promiscuous mode [ 3821.900421][T14308] hsr_slave_1: left promiscuous mode [ 3821.923748][T14308] veth1_macvtap: left promiscuous mode [ 3821.939505][T14308] veth0_macvtap: left promiscuous mode [ 3821.939895][T14308] veth1_vlan: left promiscuous mode [ 3821.940091][T14308] veth0_vlan: left promiscuous mode [ 3824.562555][ T28] audit: type=1400 audit(4080.515:2638): avc: denied { write } for pid=22367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3824.796117][T22243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3824.822655][T22243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3825.353631][ T28] audit: type=1400 audit(4081.285:2639): avc: denied { write } for pid=22406 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3825.708226][ T2958] 8021q: adding VLAN 0 to HW filter on device eth29 [ 3827.155303][T22243] hsr_slave_0: entered promiscuous mode [ 3827.166753][T22243] hsr_slave_1: entered promiscuous mode [ 3827.544442][ T28] audit: type=1400 audit(4083.505:2640): avc: denied { write } for pid=22432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3828.394022][T22243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3828.403689][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3828.422967][T22243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3828.457601][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3828.462864][T22243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3828.479970][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3828.485474][T22243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3828.490272][ T28] audit: type=1400 audit(4084.445:2641): avc: denied { write } for pid=22534 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3828.498400][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3829.854350][ T28] audit: type=1400 audit(4085.815:2642): avc: denied { write } for pid=22562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3829.912312][T22243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3830.297780][ T28] audit: type=1400 audit(4086.255:2643): avc: denied { write } for pid=22569 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3831.251128][ T28] audit: type=1400 audit(4087.195:2644): avc: denied { write } for pid=22575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3831.872596][ T28] audit: type=1400 audit(4087.835:2645): avc: denied { write } for pid=22582 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3832.829455][ T28] audit: type=1400 audit(4088.785:2646): avc: denied { write } for pid=22587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3833.131136][ T28] audit: type=1400 audit(4089.085:2647): avc: denied { write } for pid=22594 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3834.287831][T22243] veth0_vlan: entered promiscuous mode [ 3834.312605][T22243] veth1_vlan: entered promiscuous mode [ 3834.360109][T22243] veth0_macvtap: entered promiscuous mode [ 3834.367445][T22243] veth1_macvtap: entered promiscuous mode [ 3834.480426][ T1260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.481324][ T1260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.481585][ T1260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3834.481781][ T1260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3844.872959][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.876429][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3844.895852][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.902459][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3844.917471][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.922211][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3844.937586][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.945239][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3844.956416][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.963986][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3844.970109][T22170] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3844.994575][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3844.997952][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.073840][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.078253][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.085971][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.088240][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.095866][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.104115][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.126594][T22170] usb 2-1: Using ep0 maxpacket: 8 [ 3845.145614][T22170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3845.152633][T22170] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3845.152951][T22170] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 3845.174078][T22170] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3845.174342][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3845.174615][T22170] usb 2-1: Product: syz [ 3845.174773][T22170] usb 2-1: Manufacturer: syz [ 3845.174925][T22170] usb 2-1: SerialNumber: syz [ 3845.293087][T22679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.303897][T22679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.414461][T22170] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 3845.443957][T22170] cdc_ncm 2-1:1.0: bind() failure [ 3845.473766][T22170] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3845.476849][T22170] cdc_ncm 2-1:1.1: bind() failure [ 3845.494393][T22170] usb 2-1: USB disconnect, device number 14 [ 3845.628158][T22679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.634823][T22679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3845.901186][T22170] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3845.990997][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3845.996340][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3846.050180][T22170] usb 2-1: Using ep0 maxpacket: 16 [ 3846.070274][T22170] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 3846.074938][T22170] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3846.077666][T22170] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3846.081580][T22170] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3846.083791][T22170] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3846.084110][T22170] usb 2-1: config 0 has no interface number 0 [ 3846.084559][T22170] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3846.084793][T22170] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3846.085007][T22170] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3846.085205][T22170] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3846.085464][T22170] usb 2-1: config 0 interface 125 has no altsetting 0 [ 3846.085640][T22170] usb 2-1: config 0 interface 125 has no altsetting 2 [ 3846.139277][T22170] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3846.139665][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3846.139950][T22170] usb 2-1: Product: syz [ 3846.140127][T22170] usb 2-1: Manufacturer: syz [ 3846.140289][T22170] usb 2-1: SerialNumber: syz [ 3846.152673][T22170] usb 2-1: config 0 descriptor?? [ 3846.214756][T22170] usb 2-1: selecting invalid altsetting 2 [ 3846.307148][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3846.374581][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3846.680314][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3846.685255][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3847.288430][T22170] get_1284_register timeout [ 3847.289755][ C0] usb 2-1: async_complete: urb error -104 [ 3847.289898][ C0] usb 2-1: async_complete: urb error -104 [ 3847.289957][ C0] usb 2-1: async_complete: urb error -104 [ 3847.354393][T22713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3847.358173][T22713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3847.390861][T22170] usb 2-1: USB disconnect, device number 15 [ 3847.842177][T22170] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3847.883072][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3847.887850][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3847.904477][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3847.912031][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3848.012116][T22170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 3848.012504][T22170] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 3848.012821][T22170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3848.024462][T22170] usb 2-1: config 0 descriptor?? [ 3848.037920][T22723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3848.307223][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.350196][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3848.529815][T22723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.535466][T22723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3848.614102][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.616548][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.623942][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.628411][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.633209][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.636277][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.637795][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.639693][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.641182][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.642731][T22170] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 3848.684247][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.687412][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3848.739530][T22170] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 3848.815091][T22170] usb 2-1: USB disconnect, device number 16 [ 3848.930561][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.932253][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3849.034916][T22761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3849.036645][T22761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3849.223722][T22170] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3849.392470][T22170] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 3849.392798][T22170] usb 2-1: config 0 has no interface number 0 [ 3849.414351][T22170] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 3849.415477][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3849.417967][T22170] usb 2-1: Product: syz [ 3849.423441][T22170] usb 2-1: Manufacturer: syz [ 3849.424377][T22170] usb 2-1: SerialNumber: syz [ 3849.432963][T22170] usb 2-1: config 0 descriptor?? [ 3849.733551][T22754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3849.756394][T22754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3849.887777][T22754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3849.905725][T22754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.029455][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.034789][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.060817][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.084901][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.103643][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.123054][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.172365][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.177566][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.520269][T22170] usb 2-1: selecting invalid altsetting 1 [ 3850.521138][T22170] comedi comedi5: could not switch to alternate setting 1 [ 3850.523889][T22170] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 3850.535945][T22170] usb 2-1: USB disconnect, device number 17 [ 3850.582126][T22790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.584250][T22790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.926239][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.932786][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.946214][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3850.956931][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.970920][T22170] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 3851.130172][T22170] usb 2-1: not running at top speed; connect to a high speed hub [ 3851.154880][T22170] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 3851.155234][T22170] usb 2-1: config 0 has no interface number 0 [ 3851.188408][T22170] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 3851.189156][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3851.189711][T22170] usb 2-1: Product: syz [ 3851.189880][T22170] usb 2-1: Manufacturer: syz [ 3851.190040][T22170] usb 2-1: SerialNumber: syz [ 3851.209830][T22170] usb 2-1: config 0 descriptor?? [ 3851.273290][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.275420][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.297749][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.306414][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.346304][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.363383][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.451974][T22170] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 3851.454377][T22170] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 3851.473154][T22170] usb 2-1: USB disconnect, device number 18 [ 3851.546083][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.547594][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.634412][T22827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.636503][T22827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.726967][T22831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.733636][T22831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.833729][T22835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.836072][T22835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3851.859505][T22170] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3851.946121][T22839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3851.948224][T22839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.009144][T22170] usb 2-1: Using ep0 maxpacket: 16 [ 3852.018270][T22170] usb 2-1: unable to get BOS descriptor set [ 3852.030255][T22170] usb 2-1: config 203 has an invalid interface number: 202 but max is 0 [ 3852.031419][T22170] usb 2-1: config 203 has no interface number 0 [ 3852.032074][T22170] usb 2-1: config 203 interface 202 has no altsetting 0 [ 3852.047377][T22170] usb 2-1: New USB device found, idVendor=0b05, idProduct=171d, bcdDevice=1a.45 [ 3852.047664][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3852.047838][T22170] usb 2-1: Product: syz [ 3852.047931][T22170] usb 2-1: Manufacturer: syz [ 3852.048015][T22170] usb 2-1: SerialNumber: syz [ 3852.353257][T22170] usb 2-1: USB disconnect, device number 19 [ 3852.468653][T22852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.475746][T22852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.493787][T22852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.497041][T22852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.657166][T22861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.678486][T22861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.800654][T22170] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3852.901471][T22865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.905231][T22865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.925755][T22865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3852.934401][T22865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3852.959431][T22170] usb 2-1: Using ep0 maxpacket: 16 [ 3853.201792][T22170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3853.204973][T22170] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3853.205440][T22170] usb 2-1: can't read configurations, error -71 [ 3853.640327][T22170] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3853.693060][T22879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3853.702635][T22879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3853.822317][T22170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3853.822656][T22170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3853.822996][T22170] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 3853.823184][T22170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3853.835126][T22170] usb 2-1: config 0 descriptor?? [ 3854.124680][T22885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3854.135692][T22885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3854.291758][T22170] hid_parser_main: 470 callbacks suppressed [ 3854.294414][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.295172][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.298525][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.300874][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.302402][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.304065][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.304325][T22170] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 3854.312126][T22170] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 3854.313148][T22170] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 3854.512984][ C0] hid-thrustmaster 0003:044F:B65D.000A: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 3854.523206][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3854.525355][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3854.545760][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3854.553129][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3854.704867][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3854.707825][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3854.724459][T22170] usb 2-1: USB disconnect, device number 21 [ 3855.064784][T22919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3855.067762][T22919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3855.209524][T22170] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3855.360716][T22170] usb 2-1: Using ep0 maxpacket: 16 [ 3855.396382][T22170] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3855.396699][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3855.396973][T22170] usb 2-1: Product: syz [ 3855.397139][T22170] usb 2-1: Manufacturer: syz [ 3855.397292][T22170] usb 2-1: SerialNumber: syz [ 3855.412943][T22170] usb 2-1: config 0 descriptor?? [ 3855.428345][T22170] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 3855.506739][T22919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3855.517183][T22919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3855.644786][T22170] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 3855.646715][T22170] visor 2-1:0.0: probe with driver visor failed with error -71 [ 3855.666618][T22170] usb 2-1: USB disconnect, device number 22 [ 3855.957876][T22937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3855.962776][T22937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3856.097766][T22941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3856.099860][T22170] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3856.114894][T22941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3856.132138][T22941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3856.135044][T22941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3856.249604][T22170] usb 2-1: Using ep0 maxpacket: 16 [ 3856.281618][T22170] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3856.281805][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3856.281996][T22170] usb 2-1: Product: syz [ 3856.282087][T22170] usb 2-1: Manufacturer: syz [ 3856.282208][T22170] usb 2-1: SerialNumber: syz [ 3856.291077][T22170] usb 2-1: config 0 descriptor?? [ 3856.300352][T22170] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 3856.420027][T22941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3856.881311][T22941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.360000][T22170] usb 2-1: clie_3_5_startup: get config number failed: -110 [ 3859.365478][T22170] visor 2-1:0.0: probe with driver visor failed with error -110 [ 3859.565768][T22952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.572780][T22952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.586469][T22952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.595297][T22952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.612553][T22952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.615419][T22952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.630695][T22952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.635605][T22952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.782146][T22962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.785292][T22962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3859.934715][T22966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.937880][T22966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3860.234712][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3860.237847][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3860.255445][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3860.257475][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3860.607461][ T28] audit: type=1400 audit(4116.565:2648): avc: denied { watch watch_reads } for pid=22975 comm="syz.7.4863" path="/proc/1089/net" dev="proc" ino=48672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3868.998508][ T28] audit: type=1800 audit(4124.955:2649): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4881" name="addr_trsvcid" dev="configfs" ino=48809 res=0 errno=0 [ 3869.008334][T23020] nvmet: Invalid value 'Et{ë4’ß[‹Î' for trsvcid [ 3869.487678][T22199] usb 2-1: USB disconnect, device number 23 [ 3869.944530][ T28] audit: type=1326 audit(4125.905:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.946996][ T28] audit: type=1326 audit(4125.905:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.949971][ T28] audit: type=1326 audit(4125.905:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.961778][ T28] audit: type=1326 audit(4125.915:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=180 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.962136][ T28] audit: type=1326 audit(4125.915:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.962466][ T28] audit: type=1326 audit(4125.915:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.962685][ T28] audit: type=1326 audit(4125.915:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.976208][ T28] audit: type=1326 audit(4125.935:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3869.993588][ T28] audit: type=1326 audit(4125.945:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.1.4888" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3873.315310][T23085] syzkaller0: entered promiscuous mode [ 3873.315726][T23085] syzkaller0: entered allmulticast mode [ 3874.592083][T23094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4903'. [ 3880.417445][T23110] se_dev->se_dev_ptr already set for storage object [ 3885.351423][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4927'. [ 3887.809436][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4937'. [ 3887.809721][T23173] netlink: 'syz.1.4937': attribute type 5 has an invalid length. [ 3887.809892][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4937'. [ 3887.845033][T21097] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3887.850132][T14308] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3887.851002][T14308] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3887.852916][T14308] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3888.742593][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 3888.744857][ T28] audit: type=1400 audit(4144.705:2686): avc: denied { connect } for pid=23181 comm="syz.1.4940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3893.280831][T23203] »»»»»»: renamed from vlan0 (while UP) [ 3894.297866][ T28] audit: type=1326 audit(4150.255:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.303100][ T28] audit: type=1326 audit(4150.265:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.330592][ T28] audit: type=1326 audit(4150.285:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.332482][ T28] audit: type=1326 audit(4150.285:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.336938][ T28] audit: type=1326 audit(4150.295:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.361889][ T28] audit: type=1326 audit(4150.325:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.372977][ T28] audit: type=1326 audit(4150.325:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.373409][ T28] audit: type=1326 audit(4150.325:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.373647][ T28] audit: type=1326 audit(4150.335:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=259 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3894.373857][ T28] audit: type=1326 audit(4150.335:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.1.4952" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3895.980343][T23222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3895.980865][T23222] IPv6: NLM_F_CREATE should be set when creating new route [ 3900.206784][T23235] netlink: 'syz.1.4962': attribute type 13 has an invalid length. [ 3900.565996][T23235] syzkaller0: entered promiscuous mode [ 3900.566619][T23235] syzkaller0: entered allmulticast mode [ 3901.403410][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4964'. [ 3901.405774][T23244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4964'. [ 3901.989589][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 3902.046767][T23250] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3902.090617][T23250] bond1 (unregistering): Released all slaves [ 3903.084429][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 3903.085819][ T28] audit: type=1400 audit(4159.045:2698): avc: denied { write } for pid=23321 comm="syz.1.4970" name="g1" dev="configfs" ino=9996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3903.087154][ T28] audit: type=1400 audit(4159.045:2699): avc: denied { remove_name } for pid=23321 comm="syz.1.4970" name="UDC" dev="configfs" ino=49494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3903.089685][ T28] audit: type=1400 audit(4159.045:2700): avc: denied { unlink } for pid=23321 comm="syz.1.4970" name="UDC" dev="configfs" ino=49494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 3903.780134][T23328] se_dev->se_dev_ptr already set for storage object [ 3904.651772][T23345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4978'. [ 3905.455525][T23355] Line length is too long: Should be less than 4094 [ 3907.125412][T23375] lo: Caught tx_queue_len zero misconfig [ 3907.125838][T23375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3912.622122][ T28] audit: type=1400 audit(4168.585:2701): avc: denied { bind } for pid=23421 comm="syz.1.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3912.634486][ T28] audit: type=1400 audit(4168.595:2702): avc: denied { read } for pid=23421 comm="syz.1.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3922.377583][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'. [ 3925.971949][T23474] xt_hashlimit: overflow, try lower: 0/0 [ 3951.830164][ T28] audit: type=1326 audit(4207.785:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.1.5037" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3951.836025][ T28] audit: type=1326 audit(4207.795:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.1.5037" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3951.838356][ T28] audit: type=1326 audit(4207.795:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.1.5037" exe="/syz-executor" sig=0 arch=40000028 syscall=328 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3951.841250][ T28] audit: type=1326 audit(4207.795:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.1.5037" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3951.841428][ T28] audit: type=1326 audit(4207.795:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.1.5037" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3958.580345][T18286] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3958.580826][T18286] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3958.582013][T18286] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3958.582226][T18286] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3958.582465][T18286] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3958.582663][T18286] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3958.582892][T18286] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3958.583076][T18286] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3959.008230][T23539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5051'. [ 3964.560548][T23561] lo: entered allmulticast mode [ 3964.669602][ T28] audit: type=1326 audit(4220.625:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.671787][ T28] audit: type=1326 audit(4220.635:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.677681][ T28] audit: type=1326 audit(4220.635:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.689306][ T28] audit: type=1326 audit(4220.645:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.698518][ T28] audit: type=1326 audit(4220.655:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.699350][ T28] audit: type=1326 audit(4220.655:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.699574][ T28] audit: type=1326 audit(4220.655:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.699798][ T28] audit: type=1326 audit(4220.655:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.699983][ T28] audit: type=1326 audit(4220.655:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3964.700163][ T28] audit: type=1326 audit(4220.655:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.1.5061" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 3965.152902][T23565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5063'. [ 3965.174914][T23565] ip6gre2: entered promiscuous mode [ 3965.176394][T23565] ip6gre2: entered allmulticast mode [ 3974.333577][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 3974.334018][ T28] audit: type=1400 audit(4230.295:2754): avc: denied { ioctl } for pid=23628 comm="syz.1.5082" path="socket:[50297]" dev="sockfs" ino=50297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3981.452119][ T28] audit: type=1400 audit(4237.415:2755): avc: denied { transfer } for pid=23658 comm="syz.7.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3986.081036][T23692] veth0: Caught tx_queue_len zero misconfig [ 4011.890101][T23740] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5124'. [ 4020.872136][T23748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5127'. [ 4020.888447][T23748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5127'. [ 4039.187431][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 4039.296950][T23785] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 4039.429316][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5137'. [ 4041.800390][ T28] audit: type=1400 audit(4297.745:2756): avc: denied { write } for pid=23807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4042.733228][ T28] audit: type=1400 audit(4298.685:2757): avc: denied { write } for pid=23819 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4044.515941][ T28] audit: type=1400 audit(4300.475:2758): avc: denied { write } for pid=23821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4045.306014][T23833] veth0_to_bond: Caught tx_queue_len zero misconfig [ 4045.365696][ T28] audit: type=1400 audit(4301.305:2759): avc: denied { write } for pid=23830 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4060.210873][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5150'. [ 4060.644624][T23848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4060.662744][T23848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4061.429954][T22173] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 4061.590814][T22173] usb 2-1: Using ep0 maxpacket: 32 [ 4061.662459][T22173] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 4061.662853][T22173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4061.663162][T22173] usb 2-1: config 0 has no interface number 0 [ 4061.663449][T22173] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 4061.758550][T22173] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 4061.759205][T22173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4061.759375][T22173] usb 2-1: Product: syz [ 4061.759476][T22173] usb 2-1: Manufacturer: syz [ 4061.759564][T22173] usb 2-1: SerialNumber: syz [ 4061.766428][T22173] usb 2-1: config 0 descriptor?? [ 4061.792615][T22173] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 4064.617310][T22173] usb 2-1: qt2_attach - failed to power on unit: -71 [ 4064.618527][T22173] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 4064.661765][T22173] usb 2-1: USB disconnect, device number 24 [ 4065.206792][T23848] hsr_slave_0: entered promiscuous mode [ 4065.221372][T23848] hsr_slave_1: entered promiscuous mode [ 4065.225918][T23848] debugfs: 'hsr0' already exists in 'hsr' [ 4065.241087][T23848] Cannot create hsr debugfs directory [ 4065.402280][T24042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5153'. [ 4066.689913][T23848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4066.716012][T23848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4066.723743][T23848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4066.753998][T23848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4066.764243][T23848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4066.793468][T23848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4066.798528][T23848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4066.822587][T23848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4067.069931][ T28] audit: type=1400 audit(4323.025:2760): avc: denied { write } for pid=24134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4067.147532][T22173] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 4067.350134][T22173] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 4067.350511][T22173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 4067.350803][T22173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 4067.425206][T22173] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 4067.426752][T22173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4067.430037][T22173] usb 2-1: Product: syz [ 4067.432102][T22173] usb 2-1: Manufacturer: syz [ 4067.443564][T22173] usb 2-1: SerialNumber: syz [ 4067.464493][T22173] usb 2-1: config 0 descriptor?? [ 4067.505004][T22173] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 4067.756066][T16910] usb 2-1: USB disconnect, device number 25 [ 4068.012084][ T28] audit: type=1400 audit(4323.965:2761): avc: denied { write } for pid=24181 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4068.110050][ T28] audit: type=1326 audit(4324.055:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24188 comm="syz.1.5158" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x0 [ 4068.690472][T24194] input: syz1 as /devices/virtual/input/input22 [ 4069.719485][T23848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4070.079877][ T28] audit: type=1400 audit(4326.035:2763): avc: denied { write } for pid=24197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4071.074508][ T28] audit: type=1400 audit(4326.995:2764): avc: denied { write } for pid=24213 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4071.098427][ T28] audit: type=1326 audit(4327.045:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.1.5163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 4071.131515][ T28] audit: type=1326 audit(4327.065:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.1.5163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 4071.131933][ T28] audit: type=1326 audit(4327.065:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.1.5163" exe="/syz-executor" sig=0 arch=40000028 syscall=283 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 4071.132249][ T28] audit: type=1326 audit(4327.065:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.1.5163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 4071.132464][ T28] audit: type=1326 audit(4327.085:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.1.5163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 4073.634168][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 4073.634409][ T28] audit: type=1400 audit(4329.595:2773): avc: denied { write } for pid=24225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4075.002551][T24240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=24240 comm=syz.1.5166 [ 4075.140684][ T28] audit: type=1400 audit(4331.095:2774): avc: denied { write } for pid=24237 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4077.569861][ T28] audit: type=1400 audit(4333.525:2775): avc: denied { write } for pid=24247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4078.906889][ T28] audit: type=1400 audit(4334.865:2776): avc: denied { write } for pid=24254 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4081.579722][ T28] audit: type=1400 audit(4337.505:2777): avc: denied { write } for pid=24259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4083.134607][ T28] audit: type=1400 audit(4339.095:2778): avc: denied { write } for pid=24267 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4084.644178][T23848] veth0_vlan: entered promiscuous mode [ 4084.813856][T23848] veth1_vlan: entered promiscuous mode [ 4085.225222][T23848] veth0_macvtap: entered promiscuous mode [ 4085.299829][T23848] veth1_macvtap: entered promiscuous mode [ 4085.620288][T21097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4085.620703][T21097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4085.621050][T21097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4085.621290][T21097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4085.816137][ T28] audit: type=1400 audit(4341.765:2779): avc: denied { write } for pid=24272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4087.402671][ T28] audit: type=1400 audit(4343.365:2780): avc: denied { write } for pid=24276 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4095.389918][ T28] audit: type=1400 audit(4351.345:2781): avc: denied { write } for pid=24283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4096.874646][ T28] audit: type=1400 audit(4352.815:2782): avc: denied { write } for pid=24297 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4099.920759][ T28] audit: type=1400 audit(4355.855:2783): avc: denied { write } for pid=24299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4101.339860][ T28] audit: type=1400 audit(4357.275:2784): avc: denied { write } for pid=24302 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4103.980346][ T28] audit: type=1400 audit(4359.925:2785): avc: denied { write } for pid=24304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4104.616474][T24308] input: syz1 as /devices/virtual/input/input23 [ 4105.667379][ T28] audit: type=1400 audit(4361.625:2786): avc: denied { write } for pid=24311 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4107.709794][ T28] audit: type=1400 audit(4363.665:2787): avc: denied { write } for pid=24318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4108.729183][ T28] audit: type=1400 audit(4364.665:2788): avc: denied { write } for pid=24322 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4110.796640][ T28] audit: type=1400 audit(4366.755:2789): avc: denied { write } for pid=24324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4111.951156][ T28] audit: type=1400 audit(4367.905:2790): avc: denied { write } for pid=24327 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4114.049451][ T28] audit: type=1400 audit(4370.005:2791): avc: denied { write } for pid=24330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4115.270136][ T28] audit: type=1400 audit(4371.225:2792): avc: denied { write } for pid=24340 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4117.260251][ T28] audit: type=1400 audit(4373.205:2793): avc: denied { write } for pid=24345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4118.214424][ T28] audit: type=1400 audit(4374.175:2794): avc: denied { write } for pid=24354 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4119.859332][ T28] audit: type=1400 audit(4375.805:2795): avc: denied { write } for pid=24360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4120.855969][ T28] audit: type=1400 audit(4376.805:2796): avc: denied { write } for pid=24363 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4122.258624][ T28] audit: type=1400 audit(4378.205:2797): avc: denied { write } for pid=24365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4123.458224][ T28] audit: type=1400 audit(4379.345:2798): avc: denied { write } for pid=24368 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4125.139963][ T28] audit: type=1400 audit(4381.095:2799): avc: denied { write } for pid=24371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4126.189285][ T28] audit: type=1400 audit(4382.125:2800): avc: denied { write } for pid=24375 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4132.639309][T24378] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 4132.670502][T24378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4132.672242][T24378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4133.050280][T24382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5187'. [ 4134.960707][T24390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4134.962658][T24390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.990827][ T28] audit: type=1400 audit(4392.945:2801): avc: denied { write } for pid=24393 comm="syz.0.5190" name="dlm" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4137.042959][ T28] audit: type=1400 audit(4392.985:2802): avc: denied { write } for pid=24393 comm="syz.0.5190" name="comms" dev="configfs" ino=51611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4137.053712][ T28] audit: type=1800 audit(4393.015:2803): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5190" name="local" dev="configfs" ino=51613 res=0 errno=0 [ 4142.165574][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4142.167302][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4153.217456][T24455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5212'. [ 4157.472929][T24468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5218'. [ 4157.474766][T24468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5218'. [ 4157.634131][T24468] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 4157.642740][T24468] bond1 (unregistering): Released all slaves [ 4167.789966][T24585] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5237'. [ 4172.546375][ T28] audit: type=1400 audit(4428.495:2804): avc: denied { write } for pid=24617 comm="syz.0.5247" name="c.1" dev="configfs" ino=10822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4172.548181][ T28] audit: type=1400 audit(4428.505:2805): avc: denied { write } for pid=24617 comm="syz.0.5247" name="c.1" dev="configfs" ino=10822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4172.842976][T24620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4172.844804][T24620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4177.844087][T24652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4177.849755][T24652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4178.078531][T24652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4178.081281][T24652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4178.516968][T24660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4178.531202][T24660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4182.505518][T24681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4188.413646][T24736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4188.416526][T24736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4194.087546][T24769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4194.090090][T24769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4195.621649][T24783] 8<--- cut here --- [ 4195.630453][T24783] Unable to handle kernel paging request at virtual address fee00140 when write [ 4195.637531][ T28] audit: type=1400 audit(4451.595:2806): avc: denied { read } for pid=2910 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 4195.650288][T24783] [fee00140] *pgd=80000080007003, *pmd=00000000 [ 4195.671279][ T28] audit: type=1400 audit(4451.625:2807): avc: denied { search } for pid=2910 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4195.671699][ T28] audit: type=1400 audit(4451.625:2808): avc: denied { write search } for pid=2910 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4195.672008][ T28] audit: type=1400 audit(4451.625:2809): avc: denied { add_name } for pid=2910 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4195.672209][ T28] audit: type=1400 audit(4451.625:2810): avc: denied { create } for pid=2910 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4195.672407][ T28] audit: type=1400 audit(4451.625:2811): avc: denied { append open } for pid=2910 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4195.672605][ T28] audit: type=1400 audit(4451.625:2812): avc: denied { getattr } for pid=2910 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4195.685948][T24783] Internal error: Oops: a06 [#1] SMP ARM [ 4195.687675][T24783] Modules linked in: [ 4195.688140][T24783] CPU: 0 UID: 0 PID: 24783 Comm: syz.0.5284 Tainted: G L syzkaller #0 PREEMPT [ 4195.688525][T24783] Tainted: [L]=SOFTLOCKUP [ 4195.688697][T24783] Hardware name: ARM-Versatile Express [ 4195.688936][T24783] PC is at parport_attach+0x5c/0x1e8 [ 4195.689212][T24783] LR is at parport_attach+0x50/0x1e8 [ 4195.689470][T24783] pc : [<81495cc8>] lr : [<81495cbc>] psr: 60000013 [ 4195.689751][T24783] sp : dfac5d30 ip : dfac5d30 fp : dfac5d54 [ 4195.690017][T24783] r10: 82d30eb4 r9 : 00000003 r8 : 842b79c0 [ 4195.690262][T24783] r7 : dfac5d90 r6 : dfac5d90 r5 : 842b79c0 r4 : 00000000 [ 4195.690546][T24783] r3 : fee00140 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 4195.690933][T24783] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 4195.691279][T24783] Control: 30c5387d Table: 86694800 DAC: fffffffd [ 4195.691588][T24783] Register r0 information: NULL pointer [ 4195.692250][T24783] Register r1 information: NULL pointer [ 4195.692509][T24783] Register r2 information: NULL pointer [ 4195.692759][T24783] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 4195.693338][T24783] Register r4 information: NULL pointer [ 4195.693567][T24783] Register r5 information: slab kmalloc-192 start 842b79c0 pointer offset 0 size 192 [ 4195.694504][T24783] Register r6 information: 2-page vmalloc region starting at 0xdfac4000 allocated at kernel_clone+0xc4/0x43c [ 4195.694969][T24783] Register r7 information: 2-page vmalloc region starting at 0xdfac4000 allocated at kernel_clone+0xc4/0x43c [ 4195.695418][T24783] Register r8 information: slab kmalloc-192 start 842b79c0 pointer offset 0 size 192 [ 4195.695871][T24783] Register r9 information: non-paged memory [ 4195.696164][T24783] Register r10 information: non-slab/vmalloc memory [ 4195.696516][T24783] Register r11 information: 2-page vmalloc region starting at 0xdfac4000 allocated at kernel_clone+0xc4/0x43c [ 4195.696952][T24783] Register r12 information: 2-page vmalloc region starting at 0xdfac4000 allocated at kernel_clone+0xc4/0x43c [ 4195.697395][T24783] Process syz.0.5284 (pid: 24783, stack limit = 0xdfac4000) [ 4195.697709][T24783] Stack: (0xdfac5d30 to 0xdfac6000) [ 4195.697937][T24783] 5d20: ffffffff 00000004 82bd8ea4 81e2e468 [ 4195.698306][T24783] 5d40: 00000000 dfac5d90 dfac5d8c dfac5d58 81491958 81495c78 40946400 00000000 [ 4195.698616][T24783] 5d60: dfac5d7c 200003c0 842b79c0 b5403587 40946400 00000002 00000003 8413e200 [ 4195.698928][T24783] 5d80: dfac5e4c dfac5d90 8148d15c 8149185c 656d6f63 705f6964 6f707261 00007472 [ 4195.699240][T24783] 5da0: 00000000 00000140 00000000 0001000c 0000dddc 00000000 00010000 00007fff [ 4195.699541][T24783] 5dc0: 00000006 00000007 00000004 02000004 0000000f 0000c000 00000008 000004d0 [ 4195.699885][T24783] 5de0: 00008e99 00000001 000000ed 00000006 00000008 00000004 00000000 0000000a [ 4195.700184][T24783] 5e00: 00000009 00000ffd 00000009 000000af 00000002 00000281 00008001 00000009 [ 4195.700479][T24783] 5e20: 00000000 b599dbea 00000000 8596bf00 842b79c0 200003c0 40946400 00000002 [ 4195.700751][T24783] 5e40: dfac5f14 dfac5e50 8148e484 8148d09c 00000000 b599dbea 00000000 00000000 [ 4195.701068][T24783] 5e60: 8254a844 dfac5ea4 0000005f 843d9dd8 00000064 842b79f0 dfac5ee4 dfac5e88 [ 4195.701344][T24783] 5e80: 80806c94 807fd34c 00000064 00000001 00000000 dfac5ea4 85897c10 8342c198 [ 4195.701622][T24783] 5ea0: 00006400 0000000b dfac5e98 00000000 00000000 b599dbea 00000000 8596bf00 [ 4195.701908][T24783] 5ec0: 40946400 200003c0 200003c0 8596bf00 00000003 8413e200 dfac5ef4 dfac5ee8 [ 4195.702185][T24783] 5ee0: 80806dc8 b599dbea dfac5f14 00000000 8596bf01 40946400 200003c0 8596bf00 [ 4195.702456][T24783] 5f00: 00000003 8413e200 dfac5fa4 dfac5f18 805bb544 8148e13c ecac8b10 8413e200 [ 4195.702734][T24783] 5f20: dfac5f3c dfac5f30 81b5d520 81b5d3ec dfac5f54 dfac5f40 8025a7a8 8028e490 [ 4195.703028][T24783] 5f40: dfac5fb0 40000000 dfac5f84 dfac5f58 80220bdc 8025a764 00000000 82a1eb0c [ 4195.703301][T24783] 5f60: dfac5fb0 0013eb70 ecac8b10 80220b30 00000000 b599dbea dfac5fac 00000000 [ 4195.703562][T24783] 5f80: 00000000 00356310 00000036 8020029c 8413e200 00000036 00000000 dfac5fa8 [ 4195.703867][T24783] 5fa0: 80200060 805bb30c 00000000 00000000 00000003 40946400 200003c0 00000000 [ 4195.704141][T24783] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f7c0dc [ 4195.704415][T24783] 5fe0: 76f7be88 76f7be78 00018fa0 001309d0 60000010 00000003 00000000 00000000 [ 4195.704710][T24783] Call trace: [ 4195.704919][T24783] [<81495c6c>] (parport_attach) from [<81491958>] (comedi_device_attach+0x108/0x244) [ 4195.705278][T24783] r7:dfac5d90 r6:00000000 r5:81e2e468 r4:82bd8ea4 [ 4195.705496][T24783] [<81491850>] (comedi_device_attach) from [<8148d15c>] (do_devconfig_ioctl+0xcc/0x218) [ 4195.705830][T24783] r10:8413e200 r9:00000003 r8:00000002 r7:40946400 r6:b5403587 r5:842b79c0 [ 4195.706083][T24783] r4:200003c0 [ 4195.706215][T24783] [<8148d090>] (do_devconfig_ioctl) from [<8148e484>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 4195.706554][T24783] r8:00000002 r7:40946400 r6:200003c0 r5:842b79c0 r4:8596bf00 [ 4195.706793][T24783] [<8148e130>] (comedi_unlocked_ioctl) from [<805bb544>] (sys_ioctl+0x244/0xb5c) [ 4195.707140][T24783] r10:8413e200 r9:00000003 r8:8596bf00 r7:200003c0 r6:40946400 r5:8596bf01 [ 4195.707392][T24783] r4:00000000 [ 4195.707529][T24783] [<805bb300>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4195.707848][T24783] Exception stack(0xdfac5fa8 to 0xdfac5ff0) [ 4195.708059][T24783] 5fa0: 00000000 00000000 00000003 40946400 200003c0 00000000 [ 4195.708357][T24783] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f7c0dc [ 4195.708653][T24783] 5fe0: 76f7be88 76f7be78 00018fa0 001309d0 [ 4195.708892][T24783] r10:00000036 r9:8413e200 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 4195.709179][T24783] r4:00000000 [ 4195.709561][T24783] Code: ebb67bd6 e5953064 e7f33053 e2433612 (e5c34000) [ 4195.711926][T24783] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4195.926440][T24783] Kernel panic - not syncing: Fatal exception [ 4195.927868][T24783] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:55:09 Registers: info registers vcpu 0 CPU#0 R00=dddd1580 R01=85876200 R02=00000001 R03=81b5dde0 R04=00000006 R05=82af9c48 R06=83fa8c40 R07=82af9c40 R08=83fa8c40 R09=82af9c48 R10=00000000 R11=ebba9cec R12=ebba9cf0 R13=ebba9ce0 R14=80348afc R15=81b5ddf0 PSR=800c0093 N--- A S svc32 s00=30343130 s01=65687720 d00=6568772030343130 s02=32545b5d s03=33383734 d01=3338373432545b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=6170206c s11=676e6967 d05=676e69676170206c s12=71657220 s13=74736575 d06=7473657571657220 s14=20746120 s15=74726976 d07=7472697620746120 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000040 R02=00000000 R03=30c53879 R04=00000001 R05=00000001 R06=30c0387d R07=82c834a4 R08=80003000 R09=414fc0f0 R10=00000000 R11=df865f64 R12=df865f68 R13=df865f50 R14=00000001 R15=8024abc0 PSR=a0070193 N-C- A S svc32 s00=62696c2f s01=646f6d2f d00=646f6d2f62696c2f s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000