last executing test programs: 4.883146751s ago: executing program 1 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 4.6325702s ago: executing program 1 (id=160): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='fedcba9876543210\x00', 0x10) r6 = openat(r4, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='Linux Foundation\x00', 0x10) r7 = openat(r4, &(0x7f0000000440)='product\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)='UAC2 Gadget\x00', 0xb) mkdirat(r1, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r8 = openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) openat(r8, &(0x7f00000005c0)='strings/0x409\x00', 0x0, 0x0) openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) 4.509726587s ago: executing program 1 (id=163): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 3.635134263s ago: executing program 4 (id=183): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 3.486503628s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) write(0xffffffffffffffff, &(0x7f0000001800)='disconnect\n', 0xb) close(0xffffffffffffffff) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 3.371247627s ago: executing program 4 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) write(0xffffffffffffffff, &(0x7f0000001800)='disconnect\n', 0xb) close(0xffffffffffffffff) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 3.213329416s ago: executing program 4 (id=186): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) 3.150749347s ago: executing program 4 (id=187): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='0x0525', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0xa4a1', 0x6) close(r4) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='syzkaller%d', 0xb) close(r5) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001500)='dummy_udc.0', 0xb) close(r6) socket(0x2, 0x2, 0x0) 2.796413282s ago: executing program 0 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 2.532661682s ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b\x00'/16, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104\x00'/16, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) 2.314451922s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 1.615856152s ago: executing program 3 (id=204): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) close(r4) 1.562589444s ago: executing program 0 (id=205): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.485441971s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) write(0xffffffffffffffff, &(0x7f0000001800)='disconnect\n', 0xb) close(0xffffffffffffffff) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 1.427861165s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) 1.397603494s ago: executing program 1 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n\x00\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b\x00'/16, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104\x00'/16, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) 1.328495061s ago: executing program 0 (id=210): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='0x0525', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0xa4a1', 0x6) close(r4) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) 1.289448277s ago: executing program 1 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.219445526s ago: executing program 2 (id=212): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) listen(r1, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x4040) 1.2187681s ago: executing program 3 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) 1.153011967s ago: executing program 2 (id=214): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='fedcba9876543210\x00', 0x10) r6 = openat(r4, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='Linux Foundation\x00', 0x10) r7 = openat(r4, &(0x7f0000000440)='product\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)='UAC2 Gadget\x00', 0xb) mkdirat(r1, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r8 = openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) r9 = openat(0xffffffffffffffff, &(0x7f0000000600)='configuration\x00', 0x2, 0x0) write(r9, &(0x7f0000000640)='UAC2\x00', 0x4) 1.0404288s ago: executing program 2 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.GS0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.GS0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.GS0/console\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='1\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='console message test\n\x00', 0x15) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x1dcd6500}, 0x0) 997.421423ms ago: executing program 3 (id=216): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='fedcba9876543210\x00', 0x10) r6 = openat(r4, &(0x7f00000003c0)='manufacturer\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='Linux Foundation\x00', 0x10) r7 = openat(r4, &(0x7f0000000440)='product\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)='UAC2 Gadget\x00', 0xb) mkdirat(r1, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) 916.000627ms ago: executing program 3 (id=217): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) close(r4) 755.688936ms ago: executing program 3 (id=218): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='0x0525', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0xa4a1', 0x6) close(r4) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='syzkaller%d', 0xb) close(r5) symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') 694.179505ms ago: executing program 1 (id=219): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 287.353458ms ago: executing program 2 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r5, &(0x7f0000001800)='disconnect\n', 0xb) close(r5) 212.431205ms ago: executing program 2 (id=221): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) close(r4) 113.142916ms ago: executing program 2 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n\x00\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b\x00'/16, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104\x00'/16, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='dummy_udc.0\n\x00\x00\x00\x00', 0xc) 0s ago: executing program 4 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r4, &(0x7f0000001800)='disconnect\n', 0xb) close(r4) nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 72.884927][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 72.884943][ T30] audit: type=1400 audit(1784900700.362:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.916493][ T30] audit: type=1400 audit(1784900700.392:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.920034][ T5596] cgroup: Unknown subsys name 'net' [ 72.947428][ T30] audit: type=1400 audit(1784900700.422:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.049846][ T5596] cgroup: Unknown subsys name 'cpuset' [ 73.058849][ T5596] cgroup: Unknown subsys name 'rlimit' [ 73.186304][ T30] audit: type=1400 audit(1784900700.662:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.221155][ T30] audit: type=1400 audit(1784900700.662:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.253985][ T30] audit: type=1400 audit(1784900700.662:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.276857][ T30] audit: type=1400 audit(1784900700.662:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.297735][ T30] audit: type=1400 audit(1784900700.662:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.312014][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 73.323085][ T30] audit: type=1400 audit(1784900700.662:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.354752][ T30] audit: type=1400 audit(1784900700.802:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.353654][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.674439][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.684515][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.694571][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.697453][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.702894][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.716443][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.720376][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.724724][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.738316][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.739855][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.748012][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.753345][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.768479][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.770873][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.778337][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.790227][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.790780][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.797940][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.806611][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.812690][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.822898][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.827198][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.833906][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.853858][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.870920][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.316482][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.325850][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.333512][ T5611] bridge_slave_0: entered allmulticast mode [ 78.341800][ T5611] bridge_slave_0: entered promiscuous mode [ 78.353514][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.360766][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.368567][ T5611] bridge_slave_1: entered allmulticast mode [ 78.376292][ T5611] bridge_slave_1: entered promiscuous mode [ 78.497759][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.519184][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.526401][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.534673][ T5608] bridge_slave_0: entered allmulticast mode [ 78.541689][ T5608] bridge_slave_0: entered promiscuous mode [ 78.548928][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.556857][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.564264][ T5612] bridge_slave_0: entered allmulticast mode [ 78.571081][ T5612] bridge_slave_0: entered promiscuous mode [ 78.581040][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.602364][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.609795][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.617107][ T5608] bridge_slave_1: entered allmulticast mode [ 78.624162][ T5608] bridge_slave_1: entered promiscuous mode [ 78.630962][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.638515][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.645884][ T5612] bridge_slave_1: entered allmulticast mode [ 78.652928][ T5612] bridge_slave_1: entered promiscuous mode [ 78.740874][ T5611] team0: Port device team_slave_0 added [ 78.761035][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.772628][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.783708][ T5611] team0: Port device team_slave_1 added [ 78.794663][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.801857][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.809410][ T5609] bridge_slave_0: entered allmulticast mode [ 78.816484][ T5609] bridge_slave_0: entered promiscuous mode [ 78.826665][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.837734][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.861643][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.869115][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.876375][ T5609] bridge_slave_1: entered allmulticast mode [ 78.883809][ T5621] Bluetooth: hci2: command tx timeout [ 78.883805][ T5627] Bluetooth: hci0: command tx timeout [ 78.891473][ T5609] bridge_slave_1: entered promiscuous mode [ 78.896229][ T5628] Bluetooth: hci4: command tx timeout [ 78.938260][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.945483][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.952848][ T5610] bridge_slave_0: entered allmulticast mode [ 78.959792][ T5610] bridge_slave_0: entered promiscuous mode [ 78.964326][ T5621] Bluetooth: hci3: command tx timeout [ 78.971594][ T5628] Bluetooth: hci1: command tx timeout [ 78.999676][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.006870][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.033180][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.047627][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.054912][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.081320][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.092973][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.100182][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.107585][ T5610] bridge_slave_1: entered allmulticast mode [ 79.114554][ T5610] bridge_slave_1: entered promiscuous mode [ 79.131037][ T5608] team0: Port device team_slave_0 added [ 79.138342][ T5612] team0: Port device team_slave_0 added [ 79.162096][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.173293][ T5608] team0: Port device team_slave_1 added [ 79.181252][ T5612] team0: Port device team_slave_1 added [ 79.215120][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.240630][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.247667][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.273748][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.287151][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.312733][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.320431][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.346387][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.357820][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.364977][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.390925][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.403679][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.439948][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.448455][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.474493][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.500387][ T5609] team0: Port device team_slave_0 added [ 79.512363][ T5611] hsr_slave_0: entered promiscuous mode [ 79.518799][ T5611] hsr_slave_1: entered promiscuous mode [ 79.547802][ T5610] team0: Port device team_slave_0 added [ 79.555457][ T5609] team0: Port device team_slave_1 added [ 79.587414][ T5610] team0: Port device team_slave_1 added [ 79.608995][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.616101][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.643136][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.685779][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.693140][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.719165][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.744214][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.751299][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.777680][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.795049][ T5612] hsr_slave_0: entered promiscuous mode [ 79.801351][ T5612] hsr_slave_1: entered promiscuous mode [ 79.807637][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 79.813739][ T5612] Cannot create hsr debugfs directory [ 79.842152][ T5608] hsr_slave_0: entered promiscuous mode [ 79.848409][ T5608] hsr_slave_1: entered promiscuous mode [ 79.854670][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.860416][ T5608] Cannot create hsr debugfs directory [ 79.866755][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.874174][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.901054][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.041703][ T5609] hsr_slave_0: entered promiscuous mode [ 80.048445][ T5609] hsr_slave_1: entered promiscuous mode [ 80.054705][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 80.060430][ T5609] Cannot create hsr debugfs directory [ 80.115099][ T5610] hsr_slave_0: entered promiscuous mode [ 80.121825][ T5610] hsr_slave_1: entered promiscuous mode [ 80.128166][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 80.134371][ T5610] Cannot create hsr debugfs directory [ 80.406779][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.422998][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.460028][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.469580][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.477713][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.486806][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.512754][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.521983][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.597537][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.608477][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.617215][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.627187][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.636001][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.644863][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.652594][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.661637][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.756604][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.767102][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.776286][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.786098][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.804800][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.815164][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.825294][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.837025][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.946795][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.956973][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.963374][ T5621] Bluetooth: hci2: command tx timeout [ 80.965806][ T5627] Bluetooth: hci0: command tx timeout [ 80.969423][ T5628] Bluetooth: hci4: command tx timeout [ 80.996213][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.006455][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.014801][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.025433][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.042956][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.043081][ T5621] Bluetooth: hci3: command tx timeout [ 81.054132][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.055862][ T5628] Bluetooth: hci1: command tx timeout [ 81.071188][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.141047][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.177064][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.213681][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.221374][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.241390][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.256089][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.264021][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.275650][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.286048][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.293231][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.302519][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.317856][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.329083][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.337386][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.347280][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.361654][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.368777][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.402402][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.409548][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.456717][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.551503][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.587339][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.594533][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.622526][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.664063][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.671214][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.762715][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.796157][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.803387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.851842][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.888032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.895204][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.009092][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.081999][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.089295][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.130393][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.137648][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.431088][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.605523][ T5611] veth0_vlan: entered promiscuous mode [ 82.667773][ T5611] veth1_vlan: entered promiscuous mode [ 82.803319][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.839297][ T5611] veth0_macvtap: entered promiscuous mode [ 82.866601][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.885901][ T5611] veth1_macvtap: entered promiscuous mode [ 82.983443][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.020394][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.044411][ T5628] Bluetooth: hci0: command tx timeout [ 83.044459][ T5621] Bluetooth: hci4: command tx timeout [ 83.050165][ T5628] Bluetooth: hci2: command tx timeout [ 83.121147][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.128292][ T5621] Bluetooth: hci1: command tx timeout [ 83.134290][ T5627] Bluetooth: hci3: command tx timeout [ 83.146141][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166654][ T5608] veth0_vlan: entered promiscuous mode [ 83.175904][ T5612] veth0_vlan: entered promiscuous mode [ 83.183946][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194003][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235939][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.256025][ T5608] veth1_vlan: entered promiscuous mode [ 83.279315][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.325363][ T5612] veth1_vlan: entered promiscuous mode [ 83.351610][ T5608] veth0_macvtap: entered promiscuous mode [ 83.404396][ T5608] veth1_macvtap: entered promiscuous mode [ 83.475555][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.490019][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.504277][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.516410][ T5609] veth0_vlan: entered promiscuous mode [ 83.550750][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.585831][ T5609] veth1_vlan: entered promiscuous mode [ 83.608124][ T5612] veth0_macvtap: entered promiscuous mode [ 83.617571][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637340][ T3419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.646346][ T3419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.658208][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.671430][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.678944][ T3419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.694313][ T5612] veth1_macvtap: entered promiscuous mode [ 83.719193][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 83.719210][ T30] audit: type=1400 audit(1784900711.192:152): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.h4v6oI/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.753991][ T30] audit: type=1400 audit(1784900711.192:153): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.774895][ T5610] veth0_vlan: entered promiscuous mode [ 83.781501][ T30] audit: type=1400 audit(1784900711.202:154): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.h4v6oI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.809521][ T30] audit: type=1400 audit(1784900711.202:155): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.831991][ T30] audit: type=1400 audit(1784900711.202:156): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.h4v6oI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.865929][ T30] audit: type=1400 audit(1784900711.232:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.h4v6oI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.896736][ T30] audit: type=1400 audit(1784900711.232:158): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.917745][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.934933][ T30] audit: type=1400 audit(1784900711.282:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.961268][ T30] audit: type=1400 audit(1784900711.282:160): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=8354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.966340][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.987487][ T30] audit: type=1400 audit(1784900711.282:161): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.030015][ T5610] veth1_vlan: entered promiscuous mode [ 84.091769][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.135288][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143329][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.161489][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.192392][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.207084][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.220315][ T5609] veth0_macvtap: entered promiscuous mode [ 84.246224][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.281877][ T5609] veth1_macvtap: entered promiscuous mode [ 84.292431][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.301730][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.324212][ T5610] veth0_macvtap: entered promiscuous mode [ 84.350569][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.366770][ T5610] veth1_macvtap: entered promiscuous mode [ 84.413908][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.488053][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.524950][ T3419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.554520][ T3419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609334][ T3419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.628427][ T3419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.650541][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.669454][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.669981][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.753142][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.801808][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.824440][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.898586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.907206][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.923041][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131825][ T5621] Bluetooth: hci2: command tx timeout [ 85.144035][ T5627] Bluetooth: hci0: command tx timeout [ 85.144046][ T5628] Bluetooth: hci4: command tx timeout [ 85.196131][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.204781][ T5627] Bluetooth: hci1: command tx timeout [ 85.210222][ T5621] Bluetooth: hci3: command tx timeout [ 85.222381][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.268332][ T5820] syzkaller0: entered promiscuous mode [ 85.294038][ T5820] syzkaller0: entered allmulticast mode [ 85.363906][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.371932][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.554071][ T5734] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.575895][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.589075][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.706869][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.728785][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.750452][ T5824] batman_adv: batadv0: Adding interface: dummy0 [ 85.768496][ T5824] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.812990][ T5824] batman_adv: batadv0: Interface activated: dummy0 [ 85.822369][ T5734] usb 1-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 85.838212][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.867938][ T5734] usb 1-1: Product: syz [ 85.872141][ T5734] usb 1-1: Manufacturer: syz [ 85.921244][ T5734] usb 1-1: SerialNumber: syz [ 85.959376][ T5734] qcserial 1-1:1.0: Qualcomm USB modem converter detected [ 85.970846][ T5824] batadv0: mtu less than device minimum [ 85.988015][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.001469][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.013802][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.025336][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.036839][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.048483][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.060061][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.071585][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.083121][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.124054][ T5734] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 86.168735][ T5719] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.188566][ T5822] dummy_hcd dummy_hcd.0: remove, state 1 [ 86.199218][ T5822] usb usb1: USB disconnect, device number 1 [ 86.205824][ T5822] usb 1-1: USB disconnect, device number 2 [ 86.277936][ T5822] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 86.285344][ T5831] UDC core: g1: couldn't find an available UDC or it's busy [ 86.353162][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 86.358897][ T5822] qcserial 1-1:1.0: device disconnected [ 86.371710][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.386051][ T5719] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 86.395614][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.434785][ T5719] usb 3-1: Product: syz [ 86.450627][ T5719] usb 3-1: Manufacturer: syz [ 86.470975][ T5719] usb 3-1: SerialNumber: syz [ 86.476232][ T5836] file system registered [ 86.550717][ T5836] read descriptors [ 86.578787][ T5822] dummy_hcd dummy_hcd.0: stopped [ 86.593710][ T5822] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 86.645813][ T5611] ffs_data_put(): freeing [ 86.650600][ T5833] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 86.688416][ T29] cfg80211: failed to load regulatory.db [ 86.694085][ T5833] dummy_hcd dummy_hcd.0: Dummy host controller [ 86.737593][ T5833] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 86.819581][ T5719] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 86.866246][ T5833] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 86.879836][ T5719] usb 3-1: unit 37 not found! [ 86.897191][ T5833] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 86.903072][ T5719] usb 3-1: unit 0 not found! [ 86.917920][ T5833] usb usb1: Product: Dummy host controller [ 86.934744][ T5833] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 86.954584][ T5833] usb usb1: SerialNumber: dummy_hcd.0 [ 86.993399][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.034514][ T5833] hub 1-0:1.0: USB hub found [ 87.047173][ T5833] hub 1-0:1.0: 1 port detected [ 87.173109][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 87.197429][ T29] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.223701][ T29] usb 4-1: config 0 has no interface number 0 [ 87.231289][ T5719] usb 3-1: USB disconnect, device number 2 [ 87.255395][ T29] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 87.278654][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.360732][ T29] usb 4-1: config 0 descriptor?? [ 87.403053][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.482449][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.586302][ T29] viperboard 4-1:0.143: version 0.00 found at bus 004 address 002 [ 87.739740][ T5621] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 87.780182][ T29] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 87.795207][ T29] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 87.827442][ T29] usb 4-1: USB disconnect, device number 2 [ 88.215775][ T5612] ffs_data_put(): freeing [ 88.392642][ T5853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 88.542681][ T5838] syz.4.10 (5838): drop_caches: 2 [ 88.687327][ T5860] bridge0: port 3(syz_tun) entered blocking state [ 88.694175][ T5860] bridge0: port 3(syz_tun) entered disabled state [ 88.702755][ T5860] syz_tun: entered allmulticast mode [ 88.711801][ T5860] syz_tun: entered promiscuous mode [ 88.718139][ T5860] bridge0: port 3(syz_tun) entered blocking state [ 88.726009][ T5860] bridge0: port 3(syz_tun) entered forwarding state [ 88.743270][ T5864] bridge0: port 3(syz_tun) entered blocking state [ 88.751155][ T5864] bridge0: port 3(syz_tun) entered disabled state [ 88.770974][ T5864] syz_tun: entered allmulticast mode [ 88.797738][ T5864] syz_tun: entered promiscuous mode [ 88.821217][ T5864] bridge0: port 3(syz_tun) entered blocking state [ 88.827858][ T5864] bridge0: port 3(syz_tun) entered forwarding state [ 88.855802][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 88.855818][ T30] audit: type=1400 audit(1784900716.332:234): avc: denied { create } for pid=5869 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.888162][ T30] audit: type=1400 audit(1784900716.362:235): avc: denied { write } for pid=5869 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.933910][ T5870] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 88.987354][ T5870] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 89.022313][ T5870] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 89.037883][ T5870] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.068788][ T5870] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.130882][ T5872] siw: device registration error -23 [ 89.159027][ T30] audit: type=1400 audit(1784900716.632:236): avc: denied { create } for pid=5863 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.313025][ T5734] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 89.355589][ T30] audit: type=1400 audit(1784900716.822:237): avc: denied { read append } for pid=5877 comm="syz.0.24" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.385048][ T30] audit: type=1400 audit(1784900716.822:238): avc: denied { open } for pid=5877 comm="syz.0.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.385098][ T30] audit: type=1400 audit(1784900716.832:239): avc: denied { create } for pid=5877 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.414599][ T30] audit: type=1400 audit(1784900716.882:240): avc: denied { create } for pid=5877 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.414657][ T30] audit: type=1400 audit(1784900716.882:241): avc: denied { read } for pid=5877 comm="syz.0.24" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.414697][ T30] audit: type=1400 audit(1784900716.882:242): avc: denied { open } for pid=5877 comm="syz.0.24" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.435157][ T30] audit: type=1400 audit(1784900716.912:243): avc: denied { ioctl } for pid=5877 comm="syz.0.24" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.592942][ T5719] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.610188][ T5734] usb 5-1: not running at top speed; connect to a high speed hub [ 89.642609][ T5734] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 89.651812][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.669739][ T5734] usb 5-1: Product: syz [ 89.713149][ T5734] usb 5-1: Manufacturer: syz [ 89.719470][ T5734] usb 5-1: SerialNumber: syz [ 89.756035][ T5734] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 89.756210][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 89.795682][ T5719] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.801331][ T5734] ums-datafab 5-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 89.801331][ T5734] Please send a copy of this message to and [ 89.813689][ T5719] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 89.813742][ T5719] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.813772][ T5719] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.816132][ T5719] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.929375][ T5734] scsi host1: usb-storage 5-1:1.0 [ 90.027675][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.051295][ T5875] dummy_hcd dummy_hcd.0: remove, state 4 [ 90.060346][ T5719] usb 3-1: Product: syz [ 90.068169][ T5875] usb usb1: USB disconnect, device number 1 [ 90.074594][ T5719] usb 3-1: Manufacturer: syz [ 90.080681][ T5719] usb 3-1: SerialNumber: syz [ 90.174162][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 90.175409][ T5875] dummy_hcd dummy_hcd.0: stopped [ 90.196006][ T5875] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 90.239155][ T5896] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 90.245477][ T5719] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input5 [ 90.280260][ T5899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.284439][ T5896] dummy_hcd dummy_hcd.0: Dummy host controller [ 90.326587][ T5896] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 90.373411][ T5719] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 90.374914][ T5896] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 90.399275][ T5719] (id 0x00) [ 90.431668][ T5896] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 90.456233][ T5896] usb usb1: Product: Dummy host controller [ 90.462222][ T5896] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 90.470229][ T5896] usb usb1: SerialNumber: dummy_hcd.0 [ 90.492496][ T5719] rc_core: IR keymap rc-imon-pad not found [ 90.505613][ T5719] Registered IR keymap rc-empty [ 90.516428][ T5896] hub 1-0:1.0: USB hub found [ 90.521483][ T5719] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 90.533537][ T5896] hub 1-0:1.0: 1 port detected [ 90.539953][ T5719] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.601847][ T5719] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 90.640012][ T5719] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input6 [ 90.718596][ T5719] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:3> initialized [ 90.830455][ T5719] usb 3-1: USB disconnect, device number 3 [ 90.969761][ T5616] udevd[5616]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 90.987995][ T48] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 91.022192][ T48] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 91.135886][ T48] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 91.188252][ T48] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 91.879051][ T29] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 92.071132][ T5734] usb 5-1: USB disconnect, device number 2 [ 92.104025][ T36] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 92.106131][ T961] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 92.127606][ T36] sd 1:0:0:0: [sdb] Sense not available. [ 92.148158][ T36] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 92.169359][ T36] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 92.183798][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 92.192276][ T29] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.207419][ T961] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 92.210197][ T36] sd 1:0:0:0: [sdb] Write Protect is off [ 92.219182][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.256096][ T36] sd 1:0:0:0: [sdb] Asking for cache data failed [ 92.267636][ T961] sd 1:0:0:1: [sdc] Sense not available. [ 92.275235][ T961] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 92.276159][ T36] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 92.282775][ T29] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 92.305221][ T961] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 92.311313][ T961] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 92.313345][ T5907] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 92.347829][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 92.358432][ T961] sd 1:0:0:1: [sdc] Asking for cache data failed [ 92.364904][ T961] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 92.372384][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 92.393570][ T29] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 92.420654][ T5907] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 92.433202][ T36] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 92.454254][ T29] usb 3-1: config 168 interface 0 has no altsetting 0 [ 92.487572][ T5842] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 92.500309][ T961] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 92.509619][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 92.528672][ T29] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.565048][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.624873][ T29] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 92.642066][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 92.709587][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 92.739089][ T29] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 92.742747][ T5841] udevd[5841]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 92.812529][ T29] usb 3-1: config 168 interface 0 has no altsetting 0 [ 92.839067][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 92.858332][ T29] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.886449][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.949524][ T29] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x47, changing to 0x7 [ 92.960873][ T5616] udevd[5616]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 92.964361][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 is Bulk; changing to Interrupt [ 93.015175][ T29] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x7 has invalid wMaxPacketSize 0 [ 93.061663][ T29] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 93.088898][ T29] usb 3-1: config 168 interface 0 has no altsetting 0 [ 93.110917][ T29] usb 3-1: string descriptor 0 read error: -22 [ 93.117436][ T29] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 93.139607][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.182770][ T5917] configfs-gadget.g1 gadget.32: Error: incorrect playback sampling rate [ 93.200289][ T29] adutux 3-1:168.0: interrupt endpoints not found [ 93.220852][ T5917] udc usbip-vudc.0: failed to start g1: -22 [ 93.252467][ T5917] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 93.253472][ T5616] udevd[5616]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 93.267496][ T5917] UDC core: g1: couldn't find an available UDC or it's busy [ 93.503846][ T5734] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.534292][ T5868] net_ratelimit: 12 callbacks suppressed [ 93.534328][ T5868] Set syz1 is full, maxelem 65536 reached [ 93.691164][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 93.716397][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.757337][ T5921] NFSD: Failed to start, no listeners configured. [ 93.792109][ T5734] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.801341][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.809391][ T5734] usb 5-1: Product: syz [ 93.813639][ T5734] usb 5-1: Manufacturer: syz [ 93.818238][ T5734] usb 5-1: SerialNumber: syz [ 93.828358][ T5734] usb 5-1: config 0 descriptor?? [ 93.850613][ T5734] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.860126][ T5734] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 93.940886][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 93.940906][ T30] audit: type=1400 audit(1784900721.412:281): avc: denied { write } for pid=5922 comm="syz.1.36" name="functions" dev="configfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.990558][ T30] audit: type=1400 audit(1784900721.462:282): avc: denied { write } for pid=5922 comm="syz.1.36" name="uncompressed" dev="configfs" ino=9295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.062949][ T30] audit: type=1400 audit(1784900721.462:283): avc: denied { write } for pid=5922 comm="syz.1.36" name="u" dev="configfs" ino=9304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.139188][ T30] audit: type=1400 audit(1784900721.612:284): avc: denied { write } for pid=5924 comm="syz.1.37" name="functions" dev="configfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.192257][ T30] audit: type=1400 audit(1784900721.662:285): avc: denied { write } for pid=5924 comm="syz.1.37" name="c.1" dev="configfs" ino=8762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.219128][ T5925] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.230404][ T5925] udc dummy_udc.0: failed to start g1: -22 [ 94.237423][ T5925] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.260118][ T5925] UDC core: g1: couldn't find an available UDC or it's busy [ 94.288602][ T30] audit: type=1400 audit(1784900721.762:286): avc: denied { write } for pid=5927 comm="syz.3.38" name="functions" dev="configfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.398320][ T30] audit: type=1400 audit(1784900721.872:287): avc: denied { write } for pid=5929 comm="syz.3.39" name="functions" dev="configfs" ino=7548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.514071][ T5734] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 94.537086][ T30] audit: type=1400 audit(1784900722.012:288): avc: denied { write } for pid=5931 comm="syz.3.40" name="ep.0" dev="configfs" ino=8986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.574467][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.583394][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 94.589361][ T30] audit: type=1400 audit(1784900722.042:289): avc: denied { write } for pid=5931 comm="syz.3.40" name="c.1" dev="configfs" ino=8762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.593378][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.612498][ T30] audit: type=1400 audit(1784900722.042:290): avc: denied { write } for pid=5931 comm="syz.3.40" name="c.1" dev="configfs" ino=8762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.650993][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 94.663561][ T5933] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.672222][ T5933] udc dummy_udc.0: failed to start g1: -22 [ 94.679066][ T5933] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.694577][ T5933] UDC core: g1: couldn't find an available UDC or it's busy [ 94.736240][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.746125][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 94.752093][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.767949][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 94.790384][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.799088][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 94.805559][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.818766][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 94.838321][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.847898][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 94.854523][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.868799][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 94.893206][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.901845][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 94.908212][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 94.920077][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 94.946933][ T5734] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 94.959047][ T5933] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 94.992163][ T5734] em28xx 5-1:0.0: board has no eeprom [ 94.996895][ T5933] udc dummy_udc.0: failed to start g1: -22 [ 95.023029][ T5933] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.054114][ T5933] UDC core: g1: couldn't find an available UDC or it's busy [ 95.091278][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 95.103800][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 95.109772][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.121704][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 95.162581][ T5936] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 95.171554][ T5936] udc dummy_udc.0: failed to start g1: -22 [ 95.178476][ T5936] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.197906][ T5936] UDC core: g1: couldn't find an available UDC or it's busy [ 95.227537][ T5932] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 95.237103][ T5932] udc dummy_udc.0: failed to start g1: -22 [ 95.244258][ T5932] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.267709][ T5932] UDC core: g1: couldn't find an available UDC or it's busy [ 95.313668][ T5734] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 95.334330][ T5734] em28xx 5-1:0.0: dvb set to bulk mode. [ 95.358001][ T5344] em28xx 5-1:0.0: Binding DVB extension [ 95.389015][ T5734] usb 5-1: USB disconnect, device number 3 [ 95.397218][ T5734] em28xx 5-1:0.0: Disconnecting em28xx [ 95.503056][ T5344] em28xx 5-1:0.0: Registering input extension [ 95.520597][ T5734] em28xx 5-1:0.0: Closing input extension [ 95.585132][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.618836][ T5734] em28xx 5-1:0.0: Freeing device [ 95.673403][ T5719] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.792918][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 95.799887][ T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 95.808759][ T9] usb 2-1: config 0 has no interface number 0 [ 95.816620][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 95.826054][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 95.831294][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.855021][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.872939][ T5615] usb 3-1: USB disconnect, device number 4 [ 95.885548][ T9] usb 2-1: config 0 descriptor?? [ 95.894673][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.919802][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.930237][ T5719] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 95.966758][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.993621][ T5719] usb 4-1: config 0 descriptor?? [ 96.044188][ T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 96.070360][ T5945] rdma_rxe: rxe_newlink: failed to add syz_tun [ 96.084172][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 96.109221][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 96.147659][ T9] usb 2-1: USB disconnect, device number 2 [ 96.333145][ T5615] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.434829][ T5719] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 96.443531][ T5719] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 96.450909][ T5719] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 96.458624][ T5719] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 96.466052][ T5719] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 96.503776][ T5719] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 96.515552][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 96.532208][ T5615] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 96.545520][ T5615] usb 3-1: config 0 has no interface number 0 [ 96.561521][ T5615] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 96.581322][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.609625][ T5615] usb 3-1: config 0 descriptor?? [ 96.711091][ T9] usb 4-1: USB disconnect, device number 3 [ 96.764732][ T5615] viperboard 3-1:0.143: version 0.00 found at bus 003 address 005 [ 96.828945][ T5615] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 96.881123][ T5615] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 96.970045][ T5949] binder_alloc: 5948: pid 5948 spamming oneway? 1 buffers allocated for a total size of 4096 [ 97.010963][ T5615] usb 3-1: USB disconnect, device number 5 [ 97.050775][ T5949] binder_alloc: 5948: pid 5948 spamming oneway? 2 buffers allocated for a total size of 5120 [ 97.275024][ T5956] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 97.309710][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.319173][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.436481][ T5962] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 97.552044][ T5965] dummy_hcd dummy_hcd.0: remove, state 4 [ 97.566909][ T5965] usb usb1: USB disconnect, device number 1 [ 97.617420][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.644601][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.654619][ T5965] dummy_hcd dummy_hcd.0: stopped [ 97.668152][ T5965] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 97.692395][ T5967] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 97.737169][ T5967] dummy_hcd dummy_hcd.0: Dummy host controller [ 97.786425][ T5967] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 97.826297][ T5967] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 97.841250][ T5967] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 97.863464][ T5967] usb usb1: Product: Dummy host controller [ 97.865303][ T5890] Set syz1 is full, maxelem 65536 reached [ 97.890642][ T5967] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 97.900327][ T5967] usb usb1: SerialNumber: dummy_hcd.0 [ 97.934462][ T5967] hub 1-0:1.0: USB hub found [ 97.953167][ T5967] hub 1-0:1.0: 1 port detected [ 97.983039][ T5956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.009426][ T5957] bridge0: port 3(syz_tun) entered blocking state [ 98.033275][ T5957] bridge0: port 3(syz_tun) entered disabled state [ 98.071914][ T5957] syz_tun: entered allmulticast mode [ 98.102634][ T5957] syz_tun: entered promiscuous mode [ 98.120389][ T5962] bridge0: port 3(syz_tun) entered blocking state [ 98.127013][ T5962] bridge0: port 3(syz_tun) entered forwarding state [ 98.144946][ T5962] syz_tun: left allmulticast mode [ 98.150613][ T5962] bridge0: port 3(syz_tun) entered disabled state [ 98.196739][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.218447][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.239832][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.275080][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.365072][ T5980] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 98.393680][ T5980] udc dummy_udc.0: failed to start g1: -22 [ 98.407958][ T5980] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 98.434348][ T5980] UDC core: g1: couldn't find an available UDC or it's busy [ 98.474985][ T5984] batman_adv: batadv0: Interface deactivated: dummy0 [ 98.523857][ T5990] udc usbip-vudc.0: UDC had already stopped [ 98.536725][ T5984] batman_adv: batadv0: Removing interface: dummy0 [ 98.580495][ T5984] bridge_slave_0: left allmulticast mode [ 98.616152][ T5984] bridge_slave_0: left promiscuous mode [ 98.622181][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.648442][ T5984] bridge_slave_1: left allmulticast mode [ 98.654773][ T5984] bridge_slave_1: left promiscuous mode [ 98.661412][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.686824][ T5984] bond0: (slave bond_slave_0): Releasing backup interface [ 98.710205][ T5984] bond0: (slave bond_slave_1): Releasing backup interface [ 98.732648][ T5984] team0: Port device team_slave_0 removed [ 98.745715][ T5984] team0: Port device team_slave_1 removed [ 98.752089][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.760712][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.769713][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.778218][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.789827][ T5984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.822022][ T5991] team0: Mode changed to "loadbalance" [ 98.844686][ T5997] team0: Port device xfrm0 added [ 98.864252][ T5615] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.973013][ T5344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.026006][ T5615] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.039972][ T5615] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.050235][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.058873][ T5615] usb 1-1: SerialNumber: syz [ 99.124880][ T5344] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.139107][ T5344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.148886][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.157063][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.164632][ T5344] usb 3-1: SerialNumber: syz [ 99.225000][ T6004] db_root: cannot be changed because it's in use [ 99.239606][ T6004] se_dev->se_dev_ptr already set for storage object [ 99.250429][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 99.250445][ T30] audit: type=1400 audit(1784900726.722:327): avc: denied { write } for pid=6003 comm="syz.1.66" name="acls" dev="configfs" ino=8139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.255605][ T6004] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 99.336209][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.353611][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.362721][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.371620][ T29] usb 4-1: SerialNumber: syz [ 99.430555][ T30] audit: type=1400 audit(1784900726.902:328): avc: denied { create } for pid=6007 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.452762][ T30] audit: type=1400 audit(1784900726.902:329): avc: denied { ioctl } for pid=6007 comm="syz.1.68" path="socket:[9483]" dev="sockfs" ino=9483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.710216][ T5615] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 99.777722][ T30] audit: type=1400 audit(1784900727.252:330): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.810244][ T30] audit: type=1400 audit(1784900727.252:331): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.831222][ T5344] cdc_ether 3-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 99.852896][ T30] audit: type=1400 audit(1784900727.252:332): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.907805][ T30] audit: type=1400 audit(1784900727.252:333): avc: denied { read } for pid=5273 comm="dhcpcd" name="n30" dev="tmpfs" ino=2258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.952914][ T30] audit: type=1400 audit(1784900727.252:334): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.999796][ T30] audit: type=1400 audit(1784900727.252:335): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.034716][ T29] cdc_ether 4-1:1.0 usb2: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 100.048036][ T30] audit: type=1400 audit(1784900727.472:336): avc: denied { read } for pid=6016 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.112043][ T29] usb 1-1: USB disconnect, device number 2 [ 100.157055][ T29] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 100.232192][ T5718] usb 3-1: USB disconnect, device number 6 [ 100.285642][ T5718] cdc_ether 3-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 100.465117][ T5344] usb 4-1: USB disconnect, device number 4 [ 100.484940][ T5344] cdc_ether 4-1:1.0 usb2: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 100.952519][ T6037] udc usbip-vudc.0: UDC had already stopped [ 101.046160][ T6042] udc usbip-vudc.0: UDC had already stopped [ 101.317070][ T6056] db_root: cannot be changed because it's in use [ 101.373500][ T5718] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.383632][ T6058] db_root: cannot be changed because it's in use [ 101.542901][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 101.555273][ T5718] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 101.585770][ T5718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.603300][ T5718] usb 3-1: config 1 has no interface number 0 [ 101.610760][ T5718] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 101.638105][ T5718] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 101.657887][ T5718] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 101.684776][ T5718] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 101.715020][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.718742][ T6072] udc usbip-vudc.0: UDC had already stopped [ 101.733416][ T5718] usb 3-1: Product: syz [ 101.742709][ T5718] usb 3-1: Manufacturer: syz [ 101.748653][ T5718] usb 3-1: SerialNumber: syz [ 101.763753][ T5734] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.787886][ T6075] udc usbip-vudc.0: UDC had already stopped [ 101.928639][ T5734] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.959755][ T5734] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.975728][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.984098][ T5734] usb 1-1: SerialNumber: syz [ 102.089940][ T6083] db_root: cannot be changed because it's in use [ 102.256039][ T6088] db_root: cannot be changed because it's in use [ 102.451261][ T6096] udc usbip-vudc.0: UDC had already stopped [ 102.594996][ T6102] udc usbip-vudc.0: UDC had already stopped [ 102.627077][ T5734] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 102.926514][ T5734] usb 3-1: USB disconnect, device number 7 [ 103.031979][ T29] usb 1-1: USB disconnect, device number 3 [ 103.119480][ T29] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 103.174249][ T5718] IPVS: starting estimator thread 0... [ 103.284927][ T6126] IPVS: using max 35 ests per chain, 84000 per kthread [ 103.308847][ T6131] db_root: cannot be changed because it's in use [ 103.499294][ T6143] db_root: cannot be changed because it's in use [ 103.842546][ T6157] udc usbip-vudc.0: UDC had already stopped [ 104.079388][ T6167] db_root: cannot be changed because it's in use [ 104.096774][ T6167] se_dev->se_dev_ptr already set for storage object [ 104.115243][ T6167] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 104.364618][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 104.364635][ T30] audit: type=1800 audit(1784900731.842:401): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.125" name="idVendor" dev="configfs" ino=10450 res=0 errno=0 [ 104.398578][ T30] audit: type=1800 audit(1784900731.842:402): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.125" name="idProduct" dev="configfs" ino=10451 res=0 errno=0 [ 104.510922][ T5734] IPVS: starting estimator thread 0... [ 104.528753][ T6188] db_root: cannot be changed because it's in use [ 104.538792][ T6188] se_dev->se_dev_ptr already set for storage object [ 104.612914][ T6187] IPVS: using max 45 ests per chain, 108000 per kthread [ 104.657733][ T30] audit: type=1800 audit(1784900732.132:403): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.131" name="idVendor" dev="configfs" ino=9850 res=0 errno=0 [ 104.683740][ T30] audit: type=1800 audit(1784900732.132:404): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.131" name="idProduct" dev="configfs" ino=9852 res=0 errno=0 [ 104.707799][ T30] audit: type=1800 audit(1784900732.132:405): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.131" name="serialnumber" dev="configfs" ino=9854 res=0 errno=0 [ 104.748449][ T30] audit: type=1800 audit(1784900732.132:406): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.131" name="manufacturer" dev="configfs" ino=9855 res=0 errno=0 [ 104.807961][ T30] audit: type=1800 audit(1784900732.142:407): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.131" name="product" dev="configfs" ino=9856 res=0 errno=0 [ 104.851846][ T30] audit: type=1400 audit(1784900732.322:408): avc: denied { mount } for pid=6196 comm="syz.3.132" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.852480][ T6201] console message test [ 104.925909][ T30] audit: type=1400 audit(1784900732.322:409): avc: denied { write } for pid=6196 comm="syz.3.132" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 104.951185][ T30] audit: type=1800 audit(1784900732.392:410): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.134" name="idVendor" dev="configfs" ino=10492 res=0 errno=0 [ 104.999754][ T6207] UDC core: g1: couldn't find an available UDC or it's busy [ 105.241246][ T6217] db_root: cannot be changed because it's in use [ 105.252022][ T6217] se_dev->se_dev_ptr already set for storage object [ 105.790018][ T6239] db_root: cannot be changed because it's in use [ 105.797979][ T6235] UDC core: g1: couldn't find an available UDC or it's busy [ 105.811686][ T6239] se_dev->se_dev_ptr already set for storage object [ 105.974263][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.018337][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.032970][ T6252] udc usbip-vudc.0: UDC had already stopped [ 106.065245][ T6253] console message test [ 106.168303][ T6259] db_root: cannot be changed because it's in use [ 106.179721][ T6259] se_dev->se_dev_ptr already set for storage object [ 106.190099][ T6259] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 106.292555][ T6262] udc usbip-vudc.0: UDC had already stopped [ 106.461272][ T6271] db_root: cannot be changed because it's in use [ 106.471453][ T6271] se_dev->se_dev_ptr already set for storage object [ 106.481436][ T6271] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 106.568224][ T6276] db_root: cannot be changed because it's in use [ 106.614082][ T6276] se_dev->se_dev_ptr already set for storage object [ 106.670737][ T6281] udc usbip-vudc.0: UDC had already stopped [ 106.680444][ T6279] UDC core: g1: couldn't find an available UDC or it's busy [ 106.855776][ T6288] db_root: cannot be changed because it's in use [ 106.892725][ T6288] se_dev->se_dev_ptr already set for storage object [ 106.916850][ T6288] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 106.936238][ T6293] udc usbip-vudc.0: UDC had already stopped [ 107.103936][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.120624][ T6301] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 107.130114][ T6301] udc dummy_udc.0: failed to start g1: -22 [ 107.137446][ T6301] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 107.155935][ T6301] UDC core: g1: couldn't find an available UDC or it's busy [ 107.220000][ T6306] console message test [ 107.274364][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.291465][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.306827][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.318750][ T29] usb 3-1: SerialNumber: syz [ 107.634063][ T6313] udc usbip-vudc.0: UDC had already stopped [ 107.849740][ T6318] db_root: cannot be changed because it's in use [ 107.861572][ T6318] se_dev->se_dev_ptr already set for storage object [ 107.870899][ T6318] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 107.984839][ T29] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 108.030148][ T6326] udc usbip-vudc.0: UDC had already stopped [ 108.314023][ T6342] udc usbip-vudc.0: UDC had already stopped [ 108.330639][ T6340] UDC core: g1: couldn't find an available UDC or it's busy [ 108.386808][ T5718] usb 3-1: USB disconnect, device number 8 [ 108.410244][ T5718] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 108.488233][ T6349] configfs-gadget.g1 gadget.0: Error: incorrect playback sampling rate [ 108.500423][ T6349] udc dummy_udc.0: failed to start g1: -22 [ 108.507344][ T6349] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 108.532708][ T6349] UDC core: g1: couldn't find an available UDC or it's busy [ 108.602718][ T6352] console message test [ 108.941493][ T6366] udc usbip-vudc.0: UDC had already stopped [ 109.158392][ T6374] db_root: cannot be changed because it's in use [ 109.184951][ T6374] se_dev->se_dev_ptr already set for storage object [ 109.300641][ T6378] udc usbip-vudc.0: UDC had already stopped [ 109.351647][ T6382] udc usbip-vudc.0: UDC had already stopped [ 109.374474][ T6384] UDC core: g1: couldn't find an available UDC or it's busy [ 109.570890][ T6392] udc usbip-vudc.0: UDC had already stopped [ 109.600188][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 109.600204][ T30] audit: type=1800 audit(1784900737.072:523): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.214" name="idVendor" dev="configfs" ino=10916 res=0 errno=0 [ 109.630413][ T30] audit: type=1800 audit(1784900737.082:524): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.214" name="idProduct" dev="configfs" ino=10917 res=0 errno=0 [ 109.653143][ T30] audit: type=1800 audit(1784900737.082:525): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.214" name="serialnumber" dev="configfs" ino=10918 res=0 errno=0 [ 109.676973][ T30] audit: type=1800 audit(1784900737.082:526): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.214" name="manufacturer" dev="configfs" ino=10919 res=0 errno=0 [ 109.703212][ T5734] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.717710][ T30] audit: type=1800 audit(1784900737.082:527): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.214" name="product" dev="configfs" ino=10920 res=0 errno=0 [ 109.743973][ T6396] UDC core: g1: couldn't find an available UDC or it's busy [ 109.767471][ T30] audit: type=1800 audit(1784900737.242:528): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.216" name="idVendor" dev="configfs" ino=10931 res=0 errno=0 [ 109.791103][ T30] audit: type=1800 audit(1784900737.242:529): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.216" name="idProduct" dev="configfs" ino=10932 res=0 errno=0 [ 109.815355][ T30] audit: type=1800 audit(1784900737.252:530): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.216" name="serialnumber" dev="configfs" ino=10933 res=0 errno=0 [ 109.837518][ T30] audit: type=1800 audit(1784900737.252:531): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.216" name="manufacturer" dev="configfs" ino=10934 res=0 errno=0 [ 109.860477][ T30] audit: type=1800 audit(1784900737.252:532): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.216" name="product" dev="configfs" ino=10935 res=0 errno=0 [ 109.861174][ T6396] console message test [ 109.885232][ T5734] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.902129][ T5734] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.904485][ T6401] db_root: cannot be changed because it's in use [ 109.919407][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.926193][ T6401] se_dev->se_dev_ptr already set for storage object [ 109.928021][ T5734] usb 1-1: SerialNumber: syz [ 110.222966][ T5718] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.375508][ T5718] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.389567][ T5718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.398785][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.407090][ T5718] usb 4-1: SerialNumber: syz [ 110.474233][ T6407] udc usbip-vudc.0: UDC had already stopped [ 110.535056][ T6409] db_root: cannot be changed because it's in use [ 110.551339][ T6409] se_dev->se_dev_ptr already set for storage object [ 110.563353][ T5734] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 110.677808][ T9] usb 1-1: USB disconnect, device number 4 [ 110.702300][ T9] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 110.734034][ T6412] UDC core: g1: couldn't find an available UDC or it's busy [ 110.773643][ T6386] ================================================================== [ 110.781785][ T6386] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 110.784006][ T6414] udc usbip-vudc.0: UDC had already stopped [ 110.788760][ T6386] Read of size 1 at addr ffff888034f293e0 by task syz.0.210/6386 [ 110.788784][ T6386] [ 110.788809][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 110.788836][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.788857][ T6386] Call Trace: [ 110.788865][ T6386] [ 110.788874][ T6386] dump_stack_lvl+0x100/0x190 [ 110.788910][ T6386] print_report+0x13d/0x4b0 [ 110.788940][ T6386] ? __virt_addr_valid+0x239/0x430 [ 110.788968][ T6386] ? string+0x471/0x4d0 [ 110.788997][ T6386] kasan_report+0xdf/0x1c0 [ 110.789024][ T6386] ? string+0x471/0x4d0 [ 110.789057][ T6386] string+0x471/0x4d0 [ 110.789087][ T6386] ? __pfx_string+0x10/0x10 [ 110.789119][ T6386] vsnprintf+0x422/0x1300 [ 110.789154][ T6386] ? __pfx_vsnprintf+0x10/0x10 [ 110.789191][ T6386] snprintf+0xc7/0x100 [ 110.789208][ T6386] ? __pfx_snprintf+0x10/0x10 [ 110.789227][ T6386] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 110.789263][ T6386] ? is_bpf_text_address+0x94/0x1a0 [ 110.789290][ T6386] ? kernel_text_address+0x8d/0x100 [ 110.789314][ T6386] dev_vprintk_emit+0x375/0x3e0 [ 110.789342][ T6386] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 110.789370][ T6386] ? stack_trace_save+0x8e/0xc0 [ 110.789388][ T6386] ? __pfx_stack_trace_save+0x10/0x10 [ 110.789411][ T6386] dev_printk_emit+0xd2/0x10d [ 110.789436][ T6386] ? __pfx_dev_printk_emit+0x10/0x10 [ 110.789462][ T6386] ? kasan_save_stack+0x30/0x50 [ 110.789484][ T6386] ? memdup_user+0x2a/0xe0 [ 110.789503][ T6386] ? raw_alloc_io_data+0x186/0x1c0 [ 110.789531][ T6386] ? raw_ioctl+0x223/0x2b80 [ 110.789557][ T6386] ? __x64_sys_ioctl+0x18e/0x210 [ 110.789585][ T6386] ? do_syscall_64+0x115/0x870 [ 110.789605][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.789632][ T6386] __dev_printk+0xcb/0x100 [ 110.789658][ T6386] _dev_err+0xef/0x127 [ 110.789682][ T6386] ? __pfx__dev_err+0x10/0x10 [ 110.789710][ T6386] ? dummy_queue+0x3ca/0xb90 [ 110.789746][ T6386] ? find_held_lock+0x2b/0x80 [ 110.789779][ T6386] ? raw_process_ep_io+0x5e1/0xc40 [ 110.789812][ T6386] raw_process_ep_io.cold+0x43/0x83 [ 110.789845][ T6386] ? __pfx_raw_process_ep_io+0x10/0x10 [ 110.789878][ T6386] ? memdup_user+0x82/0xe0 [ 110.789900][ T6386] raw_ioctl+0x25a/0x2b80 [ 110.789931][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 110.789959][ T6386] ? selinux_file_ioctl+0xb6/0x290 [ 110.789990][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 110.790019][ T6386] __x64_sys_ioctl+0x18e/0x210 [ 110.790048][ T6386] do_syscall_64+0x115/0x870 [ 110.790067][ T6386] ? clear_bhb_loop+0x40/0x90 [ 110.790095][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.790118][ T6386] RIP: 0033:0x7f5831b9db2b [ 110.790137][ T6386] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 110.790158][ T6386] RSP: 002b:00007f5832aadf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.790185][ T6386] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5831b9db2b [ 110.790200][ T6386] RDX: 00007f5832aadfe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 110.790215][ T6386] RBP: 0000000000000003 R08: 00007f5831f50320 R09: 0000000000000000 [ 110.790229][ T6386] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000002340 [ 110.790243][ T6386] R13: 000000000000000a R14: 00007f5831e25fa0 R15: 00007ffd1da71278 [ 110.790265][ T6386] [ 110.790273][ T6386] [ 111.123271][ T6386] Allocated by task 6384: [ 111.127618][ T6386] kasan_save_stack+0x30/0x50 [ 111.132298][ T6386] kasan_save_track+0x14/0x30 [ 111.136963][ T6386] __kasan_kmalloc+0xaa/0xb0 [ 111.141539][ T6386] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 111.147944][ T6386] kvasprintf+0xbc/0x150 [ 111.152179][ T6386] kvasprintf_const+0x66/0x1a0 [ 111.156931][ T6386] kobject_set_name_vargs+0x5a/0x140 [ 111.162205][ T6386] dev_set_name+0xc7/0x100 [ 111.166629][ T6386] usb_add_gadget+0x520/0x920 [ 111.171302][ T6386] usb_add_gadget_udc+0x26/0x70 [ 111.176142][ T6386] dummy_udc_probe+0x69e/0x960 [ 111.180893][ T6386] platform_probe+0x106/0x1d0 [ 111.185559][ T6386] really_probe+0x241/0xa60 [ 111.190051][ T6386] __driver_probe_device+0x20e/0x450 [ 111.195359][ T6386] device_driver_attach+0xd1/0x220 [ 111.200464][ T6386] bind_store+0xf4/0x190 [ 111.204697][ T6386] drv_attr_store+0x74/0xb0 [ 111.209206][ T6386] sysfs_kf_write+0xf2/0x150 [ 111.213787][ T6386] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.219059][ T6386] vfs_write+0x6ac/0x1050 [ 111.223465][ T6386] ksys_write+0x12a/0x250 [ 111.227788][ T6386] do_syscall_64+0x115/0x870 [ 111.232360][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.238239][ T6386] [ 111.240543][ T6386] Freed by task 6412: [ 111.244499][ T6386] kasan_save_stack+0x30/0x50 [ 111.249167][ T6386] kasan_save_track+0x14/0x30 [ 111.253825][ T6386] kasan_save_free_info+0x3b/0x70 [ 111.258842][ T6386] __kasan_slab_free+0x5f/0x80 [ 111.263594][ T6386] kfree+0x22b/0x6c0 [ 111.267483][ T6386] kfree_const+0x5a/0x70 [ 111.271710][ T6386] kobject_put+0x218/0x640 [ 111.276113][ T6386] put_device+0x1f/0x30 [ 111.280262][ T6386] platform_remove+0x5f/0x80 [ 111.284840][ T6386] device_remove+0xcb/0x180 [ 111.289327][ T6386] device_release_driver_internal+0x44e/0x620 [ 111.295382][ T6386] unbind_store+0xf8/0x110 [ 111.299808][ T6386] drv_attr_store+0x74/0xb0 [ 111.304315][ T6386] sysfs_kf_write+0xf2/0x150 [ 111.308896][ T6386] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.314167][ T6386] vfs_write+0x6ac/0x1050 [ 111.318490][ T6386] ksys_write+0x12a/0x250 [ 111.322811][ T6386] do_syscall_64+0x115/0x870 [ 111.327384][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.333263][ T6386] [ 111.335571][ T6386] The buggy address belongs to the object at ffff888034f293e0 [ 111.335571][ T6386] which belongs to the cache kmalloc-16 of size 16 [ 111.349442][ T6386] The buggy address is located 0 bytes inside of [ 111.349442][ T6386] freed 16-byte region [ffff888034f293e0, ffff888034f293f0) [ 111.362959][ T6386] [ 111.365266][ T6386] The buggy address belongs to the physical page: [ 111.371663][ T6386] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034f29b80 pfn:0x34f29 [ 111.381709][ T6386] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 111.389763][ T6386] page_type: f5(slab) [ 111.393729][ T6386] raw: 00fff00000000200 ffff88813fe22640 ffffea00015409d0 ffffea00007fb6d0 [ 111.402300][ T6386] raw: ffff888034f29b80 000000080080007b 00000000f5000000 0000000000000000 [ 111.410860][ T6386] page dumped because: kasan: bad access detected [ 111.417261][ T6386] page_owner tracks the page as allocated [ 111.422953][ T6386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5610, tgid 5610 (syz-executor), ts 101676951155, free_ts 101676872118 [ 111.443883][ T6386] post_alloc_hook+0xfd/0x120 [ 111.448592][ T6386] get_page_from_freelist+0xf48/0x3530 [ 111.454062][ T6386] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 111.459951][ T6386] new_slab+0xa2/0x650 [ 111.464019][ T6386] refill_objects+0xe3/0x410 [ 111.468602][ T6386] __pcs_replace_empty_main+0x376/0x680 [ 111.474138][ T6386] __kvmalloc_node_noprof+0x793/0x970 [ 111.479496][ T6386] do_replace_table+0x1c5/0x760 [ 111.484334][ T6386] xt_replace_table+0x2e/0x130 [ 111.489089][ T6386] __do_replace+0x1cf/0x980 [ 111.493577][ T6386] do_ipt_set_ctl+0xa53/0xcf0 [ 111.498257][ T6386] nf_setsockopt+0x8d/0xf0 [ 111.502656][ T6386] ip_setsockopt+0xcb/0xf0 [ 111.507056][ T6386] tcp_setsockopt+0xa7/0x100 [ 111.511637][ T6386] do_sock_setsockopt+0xf3/0x1d0 [ 111.516563][ T6386] __sys_setsockopt+0x195/0x220 [ 111.521420][ T6386] page last free pid 5610 tgid 5610 stack trace: [ 111.527737][ T6386] __free_frozen_pages+0x79f/0x1090 [ 111.532944][ T6386] __kasan_populate_vmalloc+0x164/0x210 [ 111.538478][ T6386] alloc_vmap_area+0x95d/0x2bb0 [ 111.543327][ T6386] __get_vm_area_node+0x1ca/0x330 [ 111.548353][ T6386] __vmalloc_node_range_noprof+0x228/0x1630 [ 111.554323][ T6386] __vmalloc_node_noprof+0xad/0xf0 [ 111.559423][ T6386] xt_counters_alloc+0x4c/0x70 [ 111.564170][ T6386] __do_replace+0x97/0x980 [ 111.568573][ T6386] do_ipt_set_ctl+0xa53/0xcf0 [ 111.573245][ T6386] nf_setsockopt+0x8d/0xf0 [ 111.577655][ T6386] ip_setsockopt+0xcb/0xf0 [ 111.582057][ T6386] tcp_setsockopt+0xa7/0x100 [ 111.586634][ T6386] do_sock_setsockopt+0xf3/0x1d0 [ 111.591579][ T6386] __sys_setsockopt+0x195/0x220 [ 111.596448][ T6386] __x64_sys_setsockopt+0xbd/0x160 [ 111.601564][ T6386] do_syscall_64+0x115/0x870 [ 111.606156][ T6386] [ 111.608495][ T6386] Memory state around the buggy address: [ 111.614140][ T6386] ffff888034f29280: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 111.622200][ T6386] ffff888034f29300: fa fb fc fc fa fb fc fc 00 05 fc fc fa fb fc fc [ 111.630253][ T6386] >ffff888034f29380: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 111.638296][ T6386] ^ [ 111.645480][ T6386] ffff888034f29400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 111.653578][ T6386] ffff888034f29480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 111.661622][ T6386] ================================================================== [ 111.699332][ T6386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.706568][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 111.715780][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.725843][ T6386] Call Trace: [ 111.729129][ T6386] [ 111.732069][ T6386] dump_stack_lvl+0x100/0x190 [ 111.736824][ T6386] vpanic+0x552/0x970 [ 111.740844][ T6386] ? __pfx_vpanic+0x10/0x10 [ 111.745359][ T6386] ? rcu_is_watching+0x12/0xc0 [ 111.750154][ T6386] ? string+0x471/0x4d0 [ 111.754340][ T6386] panic+0xd1/0xe0 [ 111.758108][ T6386] ? __pfx_panic+0x10/0x10 [ 111.762576][ T6386] ? string+0x471/0x4d0 [ 111.766745][ T6386] ? preempt_schedule_common+0x42/0xc0 [ 111.772227][ T6386] check_panic_on_warn.cold+0x19/0x34 [ 111.777616][ T6386] end_report.part.0+0x3a/0x90 [ 111.782413][ T6386] kasan_report.cold+0xe/0x18 [ 111.787115][ T6386] ? string+0x471/0x4d0 [ 111.791285][ T6386] string+0x471/0x4d0 [ 111.795270][ T6386] ? __pfx_string+0x10/0x10 [ 111.799778][ T6386] vsnprintf+0x422/0x1300 [ 111.804114][ T6386] ? __pfx_vsnprintf+0x10/0x10 [ 111.808901][ T6386] snprintf+0xc7/0x100 [ 111.812957][ T6386] ? __pfx_snprintf+0x10/0x10 [ 111.817623][ T6386] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.823782][ T6386] ? is_bpf_text_address+0x94/0x1a0 [ 111.828974][ T6386] ? kernel_text_address+0x8d/0x100 [ 111.834163][ T6386] dev_vprintk_emit+0x375/0x3e0 [ 111.839022][ T6386] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 111.844484][ T6386] ? stack_trace_save+0x8e/0xc0 [ 111.849381][ T6386] ? __pfx_stack_trace_save+0x10/0x10 [ 111.854750][ T6386] dev_printk_emit+0xd2/0x10d [ 111.859427][ T6386] ? __pfx_dev_printk_emit+0x10/0x10 [ 111.864709][ T6386] ? kasan_save_stack+0x30/0x50 [ 111.869584][ T6386] ? memdup_user+0x2a/0xe0 [ 111.873989][ T6386] ? raw_alloc_io_data+0x186/0x1c0 [ 111.879095][ T6386] ? raw_ioctl+0x223/0x2b80 [ 111.883588][ T6386] ? __x64_sys_ioctl+0x18e/0x210 [ 111.888524][ T6386] ? do_syscall_64+0x115/0x870 [ 111.893277][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.899338][ T6386] __dev_printk+0xcb/0x100 [ 111.903755][ T6386] _dev_err+0xef/0x127 [ 111.907817][ T6386] ? __pfx__dev_err+0x10/0x10 [ 111.912485][ T6386] ? dummy_queue+0x3ca/0xb90 [ 111.917072][ T6386] ? find_held_lock+0x2b/0x80 [ 111.921750][ T6386] ? raw_process_ep_io+0x5e1/0xc40 [ 111.926859][ T6386] raw_process_ep_io.cold+0x43/0x83 [ 111.932098][ T6386] ? __pfx_raw_process_ep_io+0x10/0x10 [ 111.937558][ T6386] ? memdup_user+0x82/0xe0 [ 111.941975][ T6386] raw_ioctl+0x25a/0x2b80 [ 111.946308][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 111.951069][ T6386] ? selinux_file_ioctl+0xb6/0x290 [ 111.956181][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 111.960949][ T6386] __x64_sys_ioctl+0x18e/0x210 [ 111.965717][ T6386] do_syscall_64+0x115/0x870 [ 111.970300][ T6386] ? clear_bhb_loop+0x40/0x90 [ 111.974969][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.980872][ T6386] RIP: 0033:0x7f5831b9db2b [ 111.985277][ T6386] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 112.004875][ T6386] RSP: 002b:00007f5832aadf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.013305][ T6386] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5831b9db2b [ 112.021268][ T6386] RDX: 00007f5832aadfe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 112.029229][ T6386] RBP: 0000000000000003 R08: 00007f5831f50320 R09: 0000000000000000 [ 112.037191][ T6386] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000002340 [ 112.045153][ T6386] R13: 000000000000000a R14: 00007f5831e25fa0 R15: 00007ffd1da71278 [ 112.053122][ T6386] [ 112.056441][ T6386] Kernel Offset: disabled [ 112.060748][ T6386] Rebooting in 86400 seconds..