last executing test programs: 8.843989369s ago: executing program 1 (id=2106): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000001, 0x400200) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x34, 0x7, 0x8, 0x178}) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000000a0000001800048013000100a11b40210a6f62726f616463617374"], 0x2c}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.999709646s ago: executing program 1 (id=2118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x1, {{@in=@broadcast, @in6=@remote}, 0x1000000}, [@migrate={0x50, 0x11, [{@in6=@private1, @in=@empty, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in=@multicast2, 0x0, 0x2}}]}, 0xcc}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x51, 0x57, 0xd, 0x8, 0xdf6, 0x50, 0x202b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x7f, 0x0, 0x5, "", [{{0x9, 0x4, 0x35, 0x73, 0x0, 0xdb, 0xac, 0x2, 0x1}}]}}]}}, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0}) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x11000000c}) 4.896026467s ago: executing program 1 (id=2140): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x80111500, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_perm_addr}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0xf3d, @none, 0x7}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x8006, 0x0, 0x80, 0x4, 0x11, r5}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.851407678s ago: executing program 2 (id=2148): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x9da, 0xff, 0x0, 0x0, 0xfd}, 0x8) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980904000000000100000a040006030000000000c191000000000009241c3f73030000010000ff0924050000f8431cfd0924030604030204001b24040402090400"/101, @ANYRESOCT], 0x0) 2.608975023s ago: executing program 2 (id=2155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) r4 = socket$inet6(0xa, 0x5, 0xf8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x1000000, @dev={0xfe, 0x80, '\x00', 0x74}, 0x2}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.533341278s ago: executing program 2 (id=2159): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x41e}}, {0xfa, 0x0}]}) syz_usb_connect$midi(0x1, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x4, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x7, [@ms_header={0x7, 0x24, 0x1, 0xd3f5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x3, 0x2, [{0x5, 0x33}, {0x2, 0xc0}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x63}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0xb7, 0x6, {0xc, 0x25, 0x1, 0x8, "e0f49208ed6858ef"}}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x5f, 0x5, {0x5, 0x25, 0x1, 0x1, 'r'}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0x10, 0x6, {0xc, 0x25, 0x1, 0x8, "1cfdbeebd81e40b2"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xfe, 0x9, 0xb, 0x8, 0x7}, 0x2e, &(0x7f0000000140)={0x5, 0xf, 0x2e, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x10a, 0xee0f, 0x5, [0x0, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x4, 0xffff, 0x6}]}, 0x2, [{0x63, &(0x7f0000000180)=@string={0x63, 0x3, "094d35261e764b55bb04bb08064d2064b6d52cad6717b8a0bde0768d74e032e9bc962595c31d435c61305d3a71065d0ae0851344d67ac53bd619dfe1f63c71bd500a5f5312197702e4b07e59a02051cda74a2fdf56867765d87b5e8904c0c2a133"}}, {0xc5, &(0x7f00000002c0)=@string={0xc5, 0x3, "9a80789f2b2a8c1b8268e4aeb608ae92f4e753e29cfa129c4806735e472304fe75e2b49fb8cd47589a5016b59623346ac826b33d2afb0d32f68465002510c5396d8e3974024fa99529b4bec1c619c23cb4c4fc8e6f3ae28af7d934130d575e3c5821c848b178c5c71fdfc0518ffd8ceb72a81784ac4581370bebff18b6b8d8e6fe3ab67791f7ba3e0c1d2de65fd7b003570f49d661ae0e56abd69e5a760f579fc86f689774b95be4c79fb0c5b7ea52b3a24a71cd0b8fa95e29cbd8db6367da536cba01"}}]}) 2.06640885s ago: executing program 3 (id=2165): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000400000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 1.975931096s ago: executing program 3 (id=2166): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x4, 0x1800) timerfd_settime(r0, 0x3, &(0x7f0000000040), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000311ffc)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000000)=0x10) setsockopt$inet_int(r1, 0x0, 0x27, &(0x7f0000000240)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x4044885}, 0x4000080) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x82, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c72cd5eca16c2ee9e17f0c70a8ac4e830303030303030303030303030303030", @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8fa}}, 0x50) read$FUSE(r4, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0xfffffff1) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001400010004000000000000000a000000040000000c00088008009b00", @ANYRES32, @ANYBLOB="140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x600000, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42, 0x2000000}}}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) 1.875244363s ago: executing program 1 (id=2167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70ad33, 0x3, {{}, {@void, @val={0xc, 0x99, {0x4, 0x400059}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70ad33, 0x3, {{}, {@void, @val={0xc, 0x99, {0x4, 0x400059}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r6, 0x8cee000) ioctl$EVIOCSCLOCKID(r5, 0x40084503, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fdc000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b90d040000b80068ffffbaffffffff0f30f30f090f4b12a002000000c744240000000000c74424021edc0000c7442406000000000f011424f20f598100500000b9000a0000b87854fba8ba000000000f30f08000a8660fc4630caa2e26660fc459ab00", 0x63}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.706093334s ago: executing program 1 (id=2168): syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="1201500200000040447059cf9e000102010109022000010101800109040000010103300209070c1a"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0x10) syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="1201500200000040447059cf9e000102010109022000010101800109040000010103300209070c1a"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0x10) (async) 1.195956089s ago: executing program 3 (id=2172): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f0000000040)={'sit0\x00', @local}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000180)=ANY=[@ANYBLOB="ac0344ed1cf02265c3708c1c5cf87875a0ff2964623e3e9bd4c04c045cf8cf841e0501752770a48d9bb65d0bca58b04b0a27bf9fd95ecf73ab4d37c8a11df8bec08c7e55f70b060a954f6c52f3ecc6c1e5ef2d7fd2de59d834795a05119b98ec165882000000"]) (async, rerun: 32) r1 = geteuid() (rerun: 32) mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r1]) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x7}}) (async, rerun: 32) mount$9p_unix(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1103c80, &(0x7f0000000280)={'trans=unix,', {[{@version_9p2000}, {@cache_loose}, {@access_any}, {@cache_none}, {@version_L}, {@noextend}], [{@hash}, {@subj_type={'subj_type', 0x3d, '+'}}, {@fowner_gt={'fowner>', r1}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, ',,}'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_channels={0x3c, 0x6, 0xa54a, 0x28, 0xffffffff, 0x1, 0xbb2, 0x6, 0x4}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (rerun: 32) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000200)={0x404, 0x0, 0x1}, 0x18, 0x6) 1.195172949s ago: executing program 2 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x200, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8091) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000000)={0x0, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x4000, 0xffffffffffffffff, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$security_capability(r5, &(0x7f0000000180), &(0x7f0000000300)=@v3={0x3000000, [{0x2, 0xb}, {0x8, 0x200}], r7}, 0x18, 0x0) mount$fuseblk(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x4000, &(0x7f0000000d00)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}}) 1.18089892s ago: executing program 3 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f00000006c0)={0x12e0, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "d474dd91459a3ebcc5b761d5e6d579ed38e08894a32a235bdc6a2dae213979847f6efdefeeee144f10eb0e5d808ab30cda5fbef039afe3963ff39f3130c7017a76ade82053bcdc42c86627cd3d391709a1c6d01518733442fd8edc52673757c9db9bb583b4938511165cd226850c1bc17ec995c1afc1b5ff685d6cc05669bb77b15d8ad6e44dcc57c1b7742a48bb271cabe0a139625ed064b44e2f1d926b2574d079c6d95505ec2d5b535a911cc7ed802be57012debf163f285106f4aa3755c34044006d719ef0d2b5c500dbdab0a3f0d73dd3588ca5011a7e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x119c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x4}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',.+&&\xf9@^][.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff0}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$-\x9f.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\xe1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4817}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '*'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!$!)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$\x03(-]]}'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']$+}{,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*@*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\&\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "d41c8a9813bcd4c418f2bde92a3edd9e496ab19920d2439abfc10b9eccc3f79b14a77d828e7e4bb56ad045444b173a79341363f06835bd4fc46279e1da589beb8cb0674757f0e50a75ab69b52f0789d6080cb77a54ead4df671951d30bffe28066f5733268acbcc4fdc888dce6ec2cc8cb883d8fb83ad52b1bb6590fdede2f8271bfc49a0fca60a3aef03e6ead9d4f0ec4c29281e8529ec2ef51c2c6dbf697507884c196c6188ebc72e8612d18049502cb8ca7956d05194009c3415253b85ad0bf1c2ab735dd51d9778c35eb42e34ec3a496e7b88fe1765dcbc3e43b12946a9e16010db378426dc2f2554afad020f4d124fe19ce9c798ceede47c455139873d80b45e534e78d9a549ef32afd6c219fd82629f8dbba151c72f399e05beae77b5c69f438e95ea460ef4617beb59b3320203c589e4c3137b91c7325ce78c8959e7c0532fb00d33f9e185385dd1d91bd123a775ed00e647d1633dba27c4f78fbe725c87eeae0b74475589ec15b368f0fda15f3743789aaf08e2536ab9a9a16840db636ee58c9b80ca4c1c32ce949f63652b28e8e7a6af0d68d4370623a3a356780f87f0b4148116a1c32c10d45c83c00083654898e32e3ac8b0fd446b6fe4a05b8a77ac44d0257d5847a3c76e3ebbb8fc3bfc3ea39aa2344b981b0c3a914edbdcac04eb836ea47d222d2090b66dd846fe8f34ce06c67cdf63f45763c317e1399e7614f29cca20058c316a71c1b4e8cb8939a4f94a5fe618c80d9c2a12d5b1ba240730fb7adf0bf473cf1e19ae1a750f08fe53588fb993fea176ec7d7dfcf3d57b0bc722fa289c61835b82e75e1391deacff7735631be7866bbf84b951ab04de6a1e75602f7e4ca39412e26988ca78e569a318f79170bb2fadf3519aa6028fa86aaefbd70f7c608f5a5f8f57cefe5b250fe41c999dec0fe765c68243d0dc4a19222df62f6d5d25bd6e003efd9176942bf3d880436869633e64a844b13e150c81f806f2cc7bcf7df9f7088d75d239ceb76cd8430b754053d2d009f309586c2c9ea11357f8784487484e76871ef3256b13ccc8f83e03a1e3de6951224cbd241d41cc060770d76327f5cb2b12dd76a4a82a89cb3eef6bf3aa81999ccd9e96f6e06e68952b6794cdbdcb265f765f88c703f6a66e50af7703dd235a408b4c6d6f33cba8ea5e7423b73dbacac09c411d1aff03228d5ba8bfd3e02520713fff3caf4d290c3db3c598b194c12ba5aec759287d1edbec7104eddb1f9e7ac34c806f4768e09b20326c86375b012ea254cd85ffb5c1aa7e7475bbd29fdc112191dc4f4b87a50cd0474c499b1009d8fafee025a9f81b4cc9a3e33053a4f7209bca66b2990642ae40606ef173ddba83ee945a74a705fa33473e4645067e86dc5a73472f73921f82c037288810d12e1efc4cc19df7df91c9da0c3faf2751e01c757caab2a68be31344c9ac5284b895a18561f6a940e42dd5215ea063f59df0b6b87f8e4d6b54f3b4f16773bf9170f2c93d543bdd42afdcaa64c3cef24701f953316bb0f0c7a2e092ab49d41e1b710f508ad131ba35a6324aeda8554a9096a1af22246f58fe449d79377ff862efe97c669ae2f1b4157ad652a1370e257eca5ccec7dfb1ad0ae2a1260ce7fbd3f9df835d98ecfa9ae44671defe78c2162a260c781b1fc2ca79c530dd71a16e9e48342327a408efffd12a24a47405aa6831217bc96db4509b2a785239b239c3517d07391a030553213b7e6ff5b747f1efac938badd5793a6d044f70a92f1e4dc2a595c8e65bb232458a98a203af69d504980846e4a1301dade810f1cfbff9798cc4d4bff05b731e2156c27fcba3982215b5b31d4de646901ba5c2dc34c7fdca7fd1ef94f9442e41b81c12b1cbf80cdcc41374410ccc46bc9809e150fff26d4c13798f407fda505ed66beb6fb98ae94d7601e9da5072d79e55d7777248525e8fb8629651ccb20fab140128de58a826ebec0d617309343989e89483e36b7e18dbcbd339f0bc35275878a0f1890f76bc5effb12d39d3d8d54a69debfff5c2d62ac7953d4f0cd145c3cedc98cf7be291a61428e7d649467a3359f4d0a26625839ae5bfcf25d2168250d791849444ebab727ae610b71fc5693649a9a1c19803813de294aadc22e02a2ff2a22c5e9ff2d94ca205281b6fa7837f18dcd3f95724afbb36024a1d131e38165b796035dcb639339cd21bbf55bbab235a727a970b02c128995e36046fbd230cb3721a00623731e32d0ee58cbff6c8b5db55a3ba582031084fd9531833d498de4a4679bab2b0c220c636569abc5fc751305524efeb473373bd23e978b6fb27970df4a054c939702b28556635d0a3c404d0668f4dddfb02bd68d6d002ab06d6006cc98712e582f4d0b12cddc9d2217f618101b919434595aca6a60b07db4b51a9f8010010add0482ad4d1ff57412f173b53b3256f63f3e218d413bfad3ff8759575b0a136cd799566f2d2649b114f119d2185bb96f5126a69b217df4690ad9513e58e11beb0808fa29f85f4715dd4dd56d78ff53935b909c33126475b95b035827d2a7f1d41987f553e491a07b4ee6342c802fe83d100536e4b6c45ac608511de36115979f28081df226396f1e2c750caddf7692492541c0d0e866b74f17a19ec0d85dfc3f54fbd8252cf5dc26347d572bccb5695b5b2475bec1482559f7390aa669d7c20aa24c954cf1955be561b6528526a2164a148151829474fb5c91388df869291ac0d5dc9cefe9f1be0cf6f71a0810adf97120b57b5084920e5c678276cc83fb8b4b2f1da6d0cc544b00e09c4360670782495d3b943b1fe361b236129c97b66400bfae562a0d9aa2bf0408290141fbdefd7eeae06522426716f5f63c59927319d4c8e61d75965c4eb7d841e023cb0d08e068186ab5738dcd40042a398ab326f5e711cc75f1deb18fc91a10fe48f774ecde543c53365140e6eec1d373f3ad34c97436e7d72ce555c246572cabc5a87d8d2f27c73bd6374cd3fb9d10cf6436c095609166ca1bf1236a1db1b75fa32c9e17e37e8a40af4849ded71e09b5d30ec1c01334ceee6e42d08d4d7114b97ea1ce13488226b4d63b3051ec47b7a28199a6c6a849bd32c43270fd30eab91c86435294deacc3e6618a852b74fb4674dbbe7fac59247d52b1eec5ee3dd448ec957c2ec2fa3fbe6649791f63efbac36a1d22ba7c5425d06ffe299173306bfe866fa2f0bb31d07fda2ca77a9add6f61783fddea7d0d45ae27fb77f02ef4391dec5469be04be091240e7e0070ccc7c8d5c7fa3db0e03cd7cab18028373416305adfeb5e58dec265fedf3431aac53c8917a5593f18849a5ed92b253779a9803c2fd461c08fe38d55d8e725e634a2b51308dda1e9999783730b165de9683e9d8dae62cdd262438cc2202fd2e55a92378b50f8785c48ffc0d067fa493d9fa4a16044de2633ea9fd233a05d315173b5355d2229cefb755a2608a44b6fc74af7008ccc4505110491fcd8b8e13aca9383c589c57ed6e914ed42398ac1b8e705141a9689da0a873e907a448f3018326eb48350d43830f43f0dd9c8c53a33b1e6b59516125ef33c4d0b668b731e2829e8ccfd1a47c8ed8cc1b7c17bd1cba16992897c4668b80408bd3ee3dfb1978700a0e7b6bcb84b8e865495fdd26b911b444521dbd08d0cce6ab6d5760f910d627f5e5358785a235a519f64d9a7c79fb8de5c9b06be1a2bc4172ef07249642c4f4ba8e809e402c9fc925edb71ee2d324cead1b127d416448d7177a019091f624e39be6981412559953d31d36053223d1aeae2eb33466fdf6fc6292d428503cd0e58ac8cc1d89f7fb173cb2e0d4fa66eb28d75d927ff197db1a6ce68d79ac608bf3d0603c80c820fb20f680da7687977f4716c6e9e3a83f747b8684cd6e7447e4655d477f4b6f4bac6268871dd692b735e210746c6cee8bf551129c830451529ed39cfab30103e2cf95fa6d1a63ab7b74638fdf6788fe3acfd16daab84ffe1e974f321e13ee49424a0ffcd4f86b80bcf84e6e47d2b4585100e7bb6f790e3370322118341ce11715f37752ff8337c0e73a77ab3651341df54536605bd6bd64a9116628c33911e4118096be7024a55c81cab513aec79e7aa4964dcde3e6d96fcab33bdb6987afd9b10823e52b477e3bb9f8b866ed499dc2011b8ee1cf3395f32576fc5b01e754bebc81f874bc48c1cb0280487012cc9f1ac013f40565883e636cb55e7302bed30dcbb664a3d51dbe2b123f1287ca491766f50e21452f4d0c7984c5d4e03a3f9ef32fc5390b7281d3ee18ebce5f976d738941beeb1c55ba57dc65cc5d2d63ca3e8f7b6bacb6b50d0d59184f03730d037fd55443dfdf0a3aa5f1bf181d9bcc37f3d0eba9512041ce50ec19ad17a083c78c8be9eabde8f489416e92402f29a67ce007eb5054e8890bf551e6ab409c71857e170659b85809683a79b379d8f47b07f5b09cce1141dc6383da2ecfaa8ec0879f9d64621c7aacae2fced501c4b38f1a8323338cfb971db11d82717f079de9169070a6a7b3813c8c309f01e1ee9d9c74df3007b635852f59b00ffeb36cb60b6dd9077b0df4e77be0ef148ff74ad700a10cbbaa8939d1cc847b01982b5269958ff0375692ddeea565bfa45005daf91fde5b7d0058d13e8b347f205b236403a37e968cfa1c37dbefaad200bf0e66971bb4f77b7468eb9dfd3aa4cec78ea3aabfe3bbd66a85c893343ea97dd51c2f73bf9dcba0c0753a50a980c24d60f62ed475afd03355572fd5eda032a8d07efa6f1fcf26c8284c434506cb1bf8948450a386035b6bfd3c72e16b9d5d57e0ca484b4f829960d69c4415627d13b5ee2709b85bf3f630706e2bbc0a1c6192617e01c8a2aec0d1d7645ee163083edcc713601c964362e4241b386b002bf48db4a2973baada3db6642e0ab314745d27c9898d14fed082c4853e16915becce692154dc2fef1d41fa8801bc751c213d70df451af99eaf2ba141f8571dc895e435c4d3f6cbf13559b14f7a87f9261391699d086cb842bda06c989f3a9072112794a7477e65eaf82d531ef290e424a165d490f78e8953aacfb78f786e51262bae11742601a66982e1878cdf29adb0f259cbacf793e9bcc6f4c0bef1ca699da60a470345e6691404a30ff89e629267b18e5b84aece91cc935878871368a8ff6ea771c4f1a1c46dc492d6d7a9f337ee78e665a6e44d554ebf57fda4b66b5e50086ec2ce0bb2c5e05fd4d1d9c18e7d8a5b087b4f891e85802f3abacc955d436aa466d11cf64d1689765b4e4478f3c167057deb39053f18c128e134002c76142b5eee10a1a27e082cf4811f82967ff2f4efb6fd28dbe3acb78ebab65c948c69233be00272a408aa0421c25f3e4d8f74ded61865b4cc71efe281b5f058f30bb47566b2a35b8ba6093d11fda812ce1459fa32111658040d79d3c3ff985113da0cc503c5f5dbebde8f3a60667a40c94a2ae5913d463cd69f973659ba381a5acdcf036096b9c177f0b3c8184405299020459e1cd6656a674989d7aa919d2c206a423d39c23d59fb35ea56c40edcd172b155e3a42d7f00689c51a829aafd5c904d276697e6cb71c657fce31a502862df0714ef1245dfc8fce02875c0932a38f9a77c1dbd03d8ea49e82e54b6f753070fda541e86ad0b657d99c329e4e2588ab75a5f5eb45d6ea571408e9b5a99b7c05441d8913f04cc37ab5ad9fc2324f18dbe527a1f6682186b2a94864b8850821abb85ef616218a725e2c09efd6705f66a66a89fa0d353dd185bf81cca10382a1e63a61028d28e7c2ce8a0a4d9bfe672e6395f6036b89b327b3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4558dcce}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e00090002000000fddbdf25090000000c00010008"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.112887355s ago: executing program 3 (id=2175): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008480)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4, @local, 0x1f}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@dontfrag={{0x14, 0x29, 0x36, 0x5}}], 0x18}}], 0x1, 0x4044800) (async) sendmmsg$inet6(r0, &(0x7f0000008480)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4, @local, 0x1f}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@dontfrag={{0x14, 0x29, 0x36, 0x5}}], 0x18}}], 0x1, 0x4044800) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x34, 0x0, &(0x7f0000001000)) r2 = socket(0x8000000010, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_to_team\x00', 0x3e8b}) 1.03995851s ago: executing program 3 (id=2176): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cdd244eccc8d1660000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',msize=0']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',msize=0']) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x29, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x15031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r8 = openat(r3, &(0x7f00000001c0)='./file1\x00', 0x121600, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@dont_appraise}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x101042, 0x63) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x101042, 0x63) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 1.0396134s ago: executing program 2 (id=2177): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xd9a77000) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x4e20, 0x80, @private0}}, {{0xa, 0x4e21, 0x8, @empty, 0x80}}}, 0x108) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0x0, 0x5, 0x5, 0x12, 0x40, 0x80000000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="c0179a2870"]}, 0x1c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) write$rfkill(r6, &(0x7f00000000c0)={0x6, 0x6, 0x1}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0x800007, 0x0, 0x1, 0x475, 0xfffffff9, 0x10021}]}) ioctl$XFS_IOC_BULKSTAT(r6, 0x8040587f, &(0x7f0000000200)={{0x0, 0x0, 0x1, 0x10001, 0xfff00000}, &(0x7f0000000140)=[{}]}) 966.788015ms ago: executing program 2 (id=2178): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 623.871898ms ago: executing program 0 (id=2180): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap$IORING_OFF_SQES(&(0x7f0000673000/0x4000)=nil, 0x4000, 0x8, 0x1010, 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 547.974083ms ago: executing program 0 (id=2181): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) mlock(&(0x7f000018b000/0x2000)=nil, 0x2000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0x101, 0x4) sendto$inet(r0, &(0x7f0000000900)='.U/]', 0x4, 0x12, 0x0, 0x0) munlockall() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 440.28951ms ago: executing program 0 (id=2182): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x9ad9a000) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x72de81, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3f}, 0x1c) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3", 0x5, 0x8004, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x8, 0x6, @multicast}, 0x14) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 326.111358ms ago: executing program 1 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) 310.289359ms ago: executing program 0 (id=2184): futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0xe}, 0x6, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x9, 0x1, 0xd09}) prctl$PR_SET_MM_AUXV(0x49, 0xc, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 167.809109ms ago: executing program 0 (id=2185): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, 0x0, &(0x7f00000001c0)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0x3) fcntl$setlease(r0, 0x400, 0x0) ptrace(0x11, r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x4e24, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x80, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x0, 0x0, 0x3, 0x4, 0x1}}, 0xe8) prlimit64(r1, 0xa, &(0x7f0000000100)={0x8, 0x1000}, &(0x7f0000000140)) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 0 (id=2186): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010101, @in6=@private0, 0x0, 0xfbd, 0x4e20, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0xd4, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x1, 0x0, 0x4, 0xfffffffd, 0xfffffffc}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x7}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001900010001000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000002020000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000fe80000000000000000000000000002f0000000033000000300000000a010101000000000000000000000000043500000101010000000000bf0a000000000001000000000000000000"], 0x13c}}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @fda={0x66646185, 0x0, 0x1, 0xb}, @fda={0x66646185, 0x3, 0x0, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 283.239675][ T31] usb 1-1: config 0 descriptor?? [ 283.284295][ T6091] deleting an unspecified loop device is not supported. [ 283.315079][ T629] usb 2-1: USB disconnect, device number 12 [ 283.360164][ T97] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 283.394370][ T97] usb 3-1: device descriptor read/8, error -71 [ 283.452456][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.461216][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.533043][ T97] usb 3-1: device descriptor read/8, error -71 [ 283.677396][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.686841][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.698210][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.707103][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.718485][ T31] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 283.729001][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003C/input/input59 [ 283.770070][ T97] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 283.792187][ T97] usb 3-1: device descriptor read/8, error -71 [ 283.808561][ T31] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 283.894222][ T6102] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 283.922608][ T97] usb 3-1: device descriptor read/8, error -71 [ 283.943247][ T31] usb 1-1: USB disconnect, device number 9 [ 284.005657][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 284.032523][ T97] usb usb3-port1: unable to enumerate USB device [ 284.567274][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.583951][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.670042][ T97] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 284.800082][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.822964][ T97] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x1 has invalid maxpacket 64 [ 284.833534][ T97] usb 2-1: config 1 interface 0 altsetting 235 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.846888][ T97] usb 2-1: config 1 interface 0 has no altsetting 0 [ 284.859965][ T97] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 284.869792][ T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.877983][ T97] usb 2-1: Product: 圊ꠘ᮰℗쭘詼戴ᨄꅦꊏ᎙᰽絘㰗ᚻ [ 284.886764][ T97] usb 2-1: Manufacturer: 䳭㩕㹗⚣Ḝ쳂焇ᱟ洖턛贜ࢅഀ拫囝鍶å⾣竇扜쥮詩偖დ謝妽蒔ኃ西ꀁㅤ위⁽ె斯ࡷ䄔㶈犼໠ᐻ⠯䧈瓯⁨眒鈺®櫣 [ 284.905416][ T97] usb 2-1: SerialNumber: М [ 284.912449][ T6116] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 284.953476][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.964957][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.980995][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.004033][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.021435][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.040115][ T31] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.048517][ T31] usb 1-1: Manufacturer: syz [ 285.057318][ T31] usb 1-1: config 0 descriptor?? [ 285.060046][ T629] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 285.132540][ T97] usb 2-1: USB disconnect, device number 13 [ 285.219243][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.231903][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.232142][ T629] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 285.249516][ T629] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 285.260162][ T629] usb 3-1: config 8 has no interface number 0 [ 285.266361][ T629] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.286241][ T629] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 285.293236][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.300476][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.312343][ T629] usb 3-1: Product: syz [ 285.316546][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.321807][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.325062][ T629] usb 3-1: Manufacturer: syz [ 285.337511][ T629] usb 3-1: SerialNumber: syz [ 285.338879][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.552439][ T36] kauditd_printk_skb: 669 callbacks suppressed [ 285.552485][ T36] audit: type=1400 audit(1775308933.035:13485): avc: denied { ioctl } for pid=6117 comm="syz.0.1786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.554164][ T31] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 285.561349][ T36] audit: type=1400 audit(1775308933.035:13486): avc: denied { ioctl } for pid=6117 comm="syz.0.1786" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.588828][ T31] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 285.601771][ T629] usb 3-1: USB disconnect, device number 24 [ 285.632394][ T31] appleir 0003:05AC:8243.003D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 285.659657][ T36] audit: type=1400 audit(1775308933.135:13487): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.684376][ T36] audit: type=1400 audit(1775308933.135:13488): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.722956][ T36] audit: type=1400 audit(1775308933.145:13489): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.749268][ T36] audit: type=1400 audit(1775308933.155:13490): avc: denied { read } for pid=6130 comm="syz.1.1791" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.790080][ T97] usb 1-1: USB disconnect, device number 10 [ 285.867420][ T36] audit: type=1400 audit(1775308933.155:13491): avc: denied { read open } for pid=6130 comm="syz.1.1791" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.891338][ T36] audit: type=1400 audit(1775308933.165:13492): avc: denied { ioctl } for pid=6130 comm="syz.1.1791" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.960712][ T36] audit: type=1400 audit(1775308933.175:13493): avc: denied { create } for pid=6130 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.998748][ T6136] fido_id[6136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 286.018069][ T36] audit: type=1400 audit(1775308933.175:13494): avc: denied { create } for pid=6130 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.182740][ T6150] Invalid ELF header type: 3 != 1 [ 286.330029][ T97] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 286.494164][ T97] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.523076][ T97] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 286.534006][ T97] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 286.561429][ T97] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 286.586202][ T97] usb 2-1: config 129 has no interface number 0 [ 286.594039][ T97] usb 2-1: config 129 has no interface number 1 [ 286.603688][ T97] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.627834][ T97] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 286.649049][ T97] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 286.670067][ T97] usb 2-1: config 129 interface 135 has no altsetting 0 [ 286.678099][ T97] usb 2-1: config 129 interface 5 has no altsetting 0 [ 286.697767][ T97] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 286.713728][ T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.728437][ T97] usb 2-1: Product: syz [ 286.737072][ T97] usb 2-1: Manufacturer: syz [ 286.747119][ T97] usb 2-1: SerialNumber: syz [ 286.756757][ T6185] syzkaller1: left promiscuous mode [ 286.785682][ T6185] syzkaller1: left allmulticast mode [ 286.984024][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.012826][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.013045][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.041436][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.095245][ T97] usb 2-1: MIDIStreaming interface descriptor not found [ 287.150190][ T97] usb 2-1: USB disconnect, device number 14 [ 287.252853][ T507] udevd[507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.376453][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.387058][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.703859][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1810'. [ 288.050031][ T97] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 288.140034][ T629] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 288.245449][ T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.259561][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.268176][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.288773][ T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.299557][ T97] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.310352][ T97] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.317925][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.328278][ T97] usb 3-1: config 0 descriptor?? [ 288.331331][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.336519][ T97] hub 3-1:0.0: USB hub found [ 288.471842][ T629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.499414][ T629] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 288.517242][ T629] usb 2-1: can't read configurations, error -71 [ 288.567798][ T97] hub 3-1:0.0: 1 port detected [ 288.671498][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.765889][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.935146][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.962708][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.980138][ T97] usb 3-1: USB disconnect, device number 25 [ 289.200851][ T6248] netlink: 'syz.0.1822': attribute type 9 has an invalid length. [ 289.222241][ T6248] netlink: 'syz.0.1822': attribute type 2 has an invalid length. [ 289.710080][ T97] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 289.830028][ T629] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 289.862642][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1825'. [ 289.874851][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 289.880041][ T97] usb 3-1: device descriptor read/64, error -71 [ 289.885992][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 289.993094][ T629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.004504][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.013086][ T629] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.025921][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.074461][ T629] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.104173][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.122526][ T629] usb 2-1: Product: syz [ 290.126784][ T629] usb 2-1: Manufacturer: syz [ 290.140021][ T629] usb 2-1: SerialNumber: syz [ 290.181561][ T6270] tipc: Enabling of bearer rejected, failed to enable media [ 290.220063][ T97] usb 3-1: device descriptor read/64, error -71 [ 290.363133][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.388932][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.420683][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.429520][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.490889][ T629] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 290.500067][ T97] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 290.507785][ T629] usb 2-1: 1:1: All rates were zero [ 290.518513][ T629] usb 2-1: USB disconnect, device number 17 [ 290.570658][ T36] kauditd_printk_skb: 642 callbacks suppressed [ 290.570680][ T36] audit: type=1400 audit(1775308938.055:14137): avc: denied { ioctl } for pid=6279 comm="syz.0.1832" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.589115][ T6282] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1833'. [ 290.615493][ T6283] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1833'. [ 290.630906][ T36] audit: type=1400 audit(1775308938.055:14138): avc: denied { create } for pid=6281 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.639927][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.653446][ T36] audit: type=1400 audit(1775308938.055:14139): avc: denied { write } for pid=6281 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.690063][ T97] usb 3-1: device descriptor read/64, error -71 [ 290.710035][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 290.739105][ T36] audit: type=1400 audit(1775308938.055:14140): avc: denied { nlmsg_write } for pid=6281 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.765097][ T36] audit: type=1400 audit(1775308938.095:14141): avc: denied { ioctl } for pid=6249 comm="syz.2.1821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.798042][ T6286] SELinux: policydb magic number 0x70737265 does not match expected magic number 0xf97cff8c [ 290.810080][ T6286] SELinux: failed to load policy [ 290.820886][ T36] audit: type=1400 audit(1775308938.095:14142): avc: denied { write } for pid=6281 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.846621][ T36] audit: type=1400 audit(1775308938.095:14143): avc: denied { nlmsg_write } for pid=6281 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.888650][ T36] audit: type=1400 audit(1775308938.135:14144): avc: denied { ioctl } for pid=6279 comm="syz.0.1832" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.914185][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 290.939860][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.950664][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.992727][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.010031][ T36] audit: type=1400 audit(1775308938.195:14145): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.022087][ T6290] devpts: called with bogus options [ 291.034852][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.040296][ T97] usb 3-1: device descriptor read/64, error -71 [ 291.063144][ T31] usb 1-1: Product: syz [ 291.068051][ T31] usb 1-1: Manufacturer: syz [ 291.079486][ T36] audit: type=1400 audit(1775308938.195:14146): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.110601][ T6163] syz.2.1798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 291.126099][ T31] usb 1-1: SerialNumber: syz [ 291.161784][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.2.1798 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 291.161829][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.161843][ T6163] Call Trace: [ 291.161851][ T6163] [ 291.161860][ T6163] __dump_stack+0x21/0x30 [ 291.161894][ T6163] dump_stack_lvl+0x140/0x1c0 [ 291.161922][ T6163] ? __cfi_dump_stack_lvl+0x10/0x10 [ 291.161949][ T6163] ? ___ratelimit+0x40e/0x5b0 [ 291.161981][ T6163] dump_stack+0x19/0x20 [ 291.162007][ T6163] dump_header+0xd6/0x490 [ 291.162032][ T6163] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 291.162058][ T6163] oom_kill_process+0x35d/0x640 [ 291.162091][ T6163] out_of_memory+0x624/0xa30 [ 291.162123][ T6163] ? __cfi_out_of_memory+0x10/0x10 [ 291.162153][ T6163] ? mutex_lock_killable+0x97/0x1d0 [ 291.162178][ T6163] ? __cfi_mutex_lock_killable+0x10/0x10 [ 291.162205][ T6163] mem_cgroup_out_of_memory+0x2c8/0x390 [ 291.162235][ T6163] ? css_next_descendant_pre+0x202/0x230 [ 291.162258][ T6163] ? drain_obj_stock+0xed0/0xed0 [ 291.162288][ T6163] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 291.162318][ T6163] try_charge_memcg+0x91c/0xe10 [ 291.162344][ T6163] ? __cfi_try_charge_memcg+0x10/0x10 [ 291.162369][ T6163] ? __alloc_pages_noprof+0x35f/0x7e0 [ 291.162395][ T6163] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 291.162422][ T6163] __mem_cgroup_charge+0xfc/0x420 [ 291.162450][ T6163] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 291.162478][ T6163] ? __switch_to_asm+0x3d/0x70 [ 291.162508][ T6163] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 291.162534][ T6163] ? put_swap_device+0x130/0x130 [ 291.162556][ T6163] ? shmem_huge_global_enabled+0x2da/0x360 [ 291.162589][ T6163] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 291.162620][ T6163] ? __kasan_check_write+0x18/0x20 [ 291.162649][ T6163] ? _raw_spin_lock+0x92/0x120 [ 291.162678][ T6163] shmem_get_folio_gfp+0x607/0x1390 [ 291.162712][ T6163] ? shmem_get_folio+0xc0/0xc0 [ 291.162740][ T6163] ? follow_page_pte+0x90f/0xbc0 [ 291.162765][ T6163] ? inode_to_bdi+0x6d/0x100 [ 291.162791][ T6163] shmem_write_begin+0xf4/0x270 [ 291.162813][ T6163] generic_perform_write+0x328/0x970 [ 291.162840][ T6163] ? __cfi_generic_perform_write+0x10/0x10 [ 291.162864][ T6163] ? down_write+0xee/0x2b0 [ 291.162889][ T6163] ? file_update_time+0xa3/0x210 [ 291.162910][ T6163] shmem_file_write_iter+0x105/0x130 [ 291.162931][ T6163] __kernel_write_iter+0x42f/0x8a0 [ 291.162955][ T6163] ? __cfi___kernel_write_iter+0x10/0x10 [ 291.162987][ T6163] ? get_dump_page+0x165/0x220 [ 291.163006][ T6163] ? __asan_memset+0x39/0x50 [ 291.163029][ T6163] ? iov_iter_bvec+0xc0/0x180 [ 291.163046][ T6163] dump_user_range+0xb8b/0xe60 [ 291.163073][ T6163] ? __cfi_dump_user_range+0x10/0x10 [ 291.163097][ T6163] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 291.163122][ T6163] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 291.163147][ T6163] ? elf_core_dump+0x24c0/0x3960 [ 291.163165][ T6163] elf_core_dump+0x2e7e/0x3960 [ 291.163186][ T6163] ? __cfi_elf_core_dump+0x10/0x10 [ 291.163209][ T6163] ? dump_interrupted+0xf0/0xf0 [ 291.163232][ T6163] ? filp_open+0x199/0x1f0 [ 291.163251][ T6163] ? 0xffffffffff600000 [ 291.163266][ T6163] do_coredump+0x208a/0x2fe0 [ 291.163292][ T6163] ? __cfi_do_coredump+0x10/0x10 [ 291.163315][ T6163] ? asm_exc_page_fault+0x2b/0x30 [ 291.163359][ T6163] ? __kasan_slab_free+0x6a/0x80 [ 291.163377][ T6163] ? kmem_cache_free+0x1bd/0x4f0 [ 291.163402][ T6163] ? get_signal+0xa74/0x14e0 [ 291.163424][ T6163] get_signal+0x11f8/0x14e0 [ 291.163447][ T6163] arch_do_signal_or_restart+0xbc/0x760 [ 291.163473][ T6163] ? fixup_vdso_exception+0x20d/0x310 [ 291.163500][ T6163] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 291.163528][ T6163] irqentry_exit_to_user_mode+0x4d/0xb0 [ 291.163551][ T6163] irqentry_exit+0x16/0x60 [ 291.163572][ T6163] exc_page_fault+0x65/0xc0 [ 291.163592][ T6163] asm_exc_page_fault+0x2b/0x30 [ 291.163617][ T6163] RIP: 0033:0x7fce9ea527f7 [ 291.163633][ T6163] Code: e8 8e fa ff ff 89 f2 48 8d 3d 8d 40 1b 00 48 8d 35 6c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 291.163650][ T6163] RSP: 002b:00007fce9fadb120 EFLAGS: 00010202 [ 291.163670][ T6163] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fce9eb9c819 [ 291.163686][ T6163] RDX: 00007fce9fadb140 RSI: 00007fce9fadb270 RDI: 000000000000000b [ 291.163700][ T6163] RBP: 00007fce9ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 291.163713][ T6163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.163725][ T6163] R13: 00007fce9ee16038 R14: 00007fce9ee15fa0 R15: 00007ffe459d3528 [ 291.163743][ T6163] [ 291.163779][ T6163] memory: usage 307200kB, limit 307200kB, failcnt 21729 [ 291.190666][ T97] usb usb3-port1: attempt power cycle [ 291.225004][ T6163] memory+swap: usage 432104kB, limit 9007199254740988kB, failcnt 0 [ 291.310057][ T629] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 291.315914][ T6163] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.492656][ T629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.496385][ T31] usb 1-1: 0:2 : does not exist [ 291.500350][ T6163] Memory cgroup stats for [ 291.506979][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 291.510418][ T6163] /syz2: [ 291.530125][ T31] usb 1-1: USB disconnect, device number 11 [ 291.541965][ T629] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.604346][ T6163] cache 314068992 [ 291.607005][ T97] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 291.644660][ T6163] rss 454656 [ 291.645898][ T629] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.665829][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.671995][ T629] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.674153][ T6163] rss_huge 0 [ 291.689264][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.709943][ T6163] shmem 314068992 [ 291.711227][ T629] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 291.713456][ T6163] mapped_file 0 [ 291.713468][ T6163] dirty 0 [ 291.713476][ T6163] writeback 0 [ 291.713484][ T6163] workingset_refault_anon 69 [ 291.734318][ T629] usb 2-1: Product: syz [ 291.784717][ T6163] workingset_refault_file 34 [ 291.786251][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.794247][ T6163] swap 127901696 [ 291.808149][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.815195][ T6163] swapcached 94208 [ 291.825626][ T6163] pgpgin 193083 [ 291.825696][ T97] usb 3-1: device descriptor read/8, error -71 [ 291.829507][ T6163] pgpgout 117816 [ 291.839184][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.844774][ T629] usb 2-1: SerialNumber: syz [ 291.850762][ T6163] pgfault 95049 [ 291.855417][ T6163] pgmajfault 96 [ 291.870107][ T6163] inactive_anon 180895744 [ 291.874515][ T6163] active_anon 133677056 [ 291.878800][ T6163] inactive_file 0 [ 291.882538][ T6163] active_file 0 [ 291.886107][ T6163] unevictable 0 [ 291.889569][ T6163] hierarchical_memory_limit 314572800 [ 291.894981][ T6163] hierarchical_memsw_limit 9223372036854771712 [ 291.901190][ T6163] total_cache 314068992 [ 291.905353][ T6163] total_rss 454656 [ 291.909074][ T6163] total_rss_huge 0 [ 291.912852][ T6163] total_shmem 314068992 [ 291.917039][ T6163] total_mapped_file 0 [ 291.921059][ T6163] total_dirty 0 [ 291.924542][ T6163] total_writeback 0 [ 291.928371][ T6163] total_workingset_refault_anon 69 [ 291.933574][ T6163] total_workingset_refault_file 34 [ 291.938729][ T6163] total_swap 127901696 [ 291.942967][ T6163] total_swapcached 94208 [ 291.947250][ T6163] total_pgpgin 193083 [ 291.951314][ T6163] total_pgpgout 117816 [ 291.955517][ T6163] total_pgfault 95049 [ 291.959537][ T6163] total_pgmajfault 96 [ 291.963695][ T6163] total_inactive_anon 180895744 [ 291.968749][ T6163] total_active_anon 133677056 [ 291.973791][ T6163] total_inactive_file 0 [ 291.978035][ T6163] total_active_file 0 [ 291.982326][ T6163] total_unevictable 0 [ 291.986870][ T6163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1798,pid=6163,uid=0 [ 292.002124][ T97] usb 3-1: device descriptor read/8, error -71 [ 292.002607][ T6163] Memory cgroup out of memory: Killed process 6163 (syz.2.1798) total-vm:90504kB, anon-rss:1372kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 292.068339][ T6292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1837'. [ 292.092735][ T6292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1837'. [ 292.126612][ T6292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1837'. [ 292.151532][ T6292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1837'. [ 292.163455][ T6160] syz.2.1798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 292.183671][ T629] cdc_ncm 2-1:1.0: skipping garbage [ 292.196679][ T629] cdc_ncm 2-1:1.0: skipping garbage [ 292.201061][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.2.1798 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 292.201098][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.201111][ T6160] Call Trace: [ 292.201118][ T6160] [ 292.201127][ T6160] __dump_stack+0x21/0x30 [ 292.201156][ T6160] dump_stack_lvl+0x140/0x1c0 [ 292.201181][ T6160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 292.201205][ T6160] ? ___ratelimit+0x40e/0x5b0 [ 292.201226][ T6160] dump_stack+0x19/0x20 [ 292.201249][ T6160] dump_header+0xd6/0x490 [ 292.201271][ T6160] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 292.201294][ T6160] oom_kill_process+0x35d/0x640 [ 292.201324][ T6160] out_of_memory+0x624/0xa30 [ 292.201352][ T6160] ? __cfi_out_of_memory+0x10/0x10 [ 292.201386][ T6160] ? mutex_lock_killable+0x97/0x1d0 [ 292.201409][ T6160] ? __cfi_mutex_lock_killable+0x10/0x10 [ 292.201432][ T6160] mem_cgroup_out_of_memory+0x2c8/0x390 [ 292.201459][ T6160] ? css_next_descendant_pre+0x202/0x230 [ 292.201481][ T6160] ? drain_obj_stock+0xed0/0xed0 [ 292.201508][ T6160] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 292.201535][ T6160] try_charge_memcg+0x91c/0xe10 [ 292.201558][ T6160] ? __cfi_try_charge_memcg+0x10/0x10 [ 292.201581][ T6160] ? __alloc_pages_noprof+0x35f/0x7e0 [ 292.201604][ T6160] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 292.201628][ T6160] __mem_cgroup_charge+0xfc/0x420 [ 292.201653][ T6160] ? folio_add_lru+0x116/0x400 [ 292.201681][ T6160] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 292.201707][ T6160] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 292.201729][ T6160] ? put_swap_device+0x130/0x130 [ 292.201748][ T6160] ? shmem_huge_global_enabled+0x2da/0x360 [ 292.201778][ T6160] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 292.201805][ T6160] ? __kasan_check_write+0x18/0x20 [ 292.201830][ T6160] ? _raw_spin_lock+0x92/0x120 [ 292.201863][ T6160] shmem_get_folio_gfp+0x607/0x1390 [ 292.201893][ T6160] ? shmem_get_folio+0xc0/0xc0 [ 292.201919][ T6160] ? __kasan_check_write+0x18/0x20 [ 292.201944][ T6160] ? inode_to_bdi+0x6d/0x100 [ 292.201967][ T6160] shmem_write_begin+0xf4/0x270 [ 292.201986][ T6160] generic_perform_write+0x328/0x970 [ 292.202008][ T6160] ? inode_update_timestamps+0x4f0/0x700 [ 292.202032][ T6160] ? __cfi_generic_perform_write+0x10/0x10 [ 292.202053][ T6160] ? down_write+0xee/0x2b0 [ 292.202075][ T6160] ? mnt_get_write_access_file+0x1af/0x3b0 [ 292.202098][ T6160] ? mnt_put_write_access_file+0xc2/0x100 [ 292.202122][ T6160] ? file_update_time+0x1de/0x210 [ 292.202147][ T6160] shmem_file_write_iter+0x105/0x130 [ 292.202170][ T6160] __kernel_write_iter+0x42f/0x8a0 [ 292.202197][ T6160] ? __cfi___kernel_write_iter+0x10/0x10 [ 292.202222][ T6160] ? get_dump_page+0x165/0x220 [ 292.202245][ T6160] ? __asan_memset+0x39/0x50 [ 292.202269][ T6160] ? iov_iter_bvec+0xc0/0x180 [ 292.202288][ T6160] dump_user_range+0xb8b/0xe60 [ 292.202317][ T6160] ? __cfi_dump_user_range+0x10/0x10 [ 292.202343][ T6160] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 292.202377][ T6160] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 292.202403][ T6160] ? elf_core_dump+0x24c0/0x3960 [ 292.202423][ T6160] elf_core_dump+0x2e7e/0x3960 [ 292.202446][ T6160] ? __cfi_elf_core_dump+0x10/0x10 [ 292.202470][ T6160] ? dump_interrupted+0xf0/0xf0 [ 292.202494][ T6160] ? filp_open+0x199/0x1f0 [ 292.202515][ T6160] ? 0xffffffffff600000 [ 292.202532][ T6160] do_coredump+0x208a/0x2fe0 [ 292.202559][ T6160] ? __cfi_do_coredump+0x10/0x10 [ 292.202582][ T6160] ? asm_exc_page_fault+0x2b/0x30 [ 292.202615][ T6160] ? __kasan_slab_free+0x6a/0x80 [ 292.202633][ T6160] ? kmem_cache_free+0x1bd/0x4f0 [ 292.202660][ T6160] ? get_signal+0xa74/0x14e0 [ 292.202692][ T6160] get_signal+0x11f8/0x14e0 [ 292.202717][ T6160] arch_do_signal_or_restart+0xbc/0x760 [ 292.202745][ T6160] ? fixup_vdso_exception+0x20d/0x310 [ 292.202773][ T6160] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 292.202803][ T6160] irqentry_exit_to_user_mode+0x4d/0xb0 [ 292.202827][ T6160] irqentry_exit+0x16/0x60 [ 292.202850][ T6160] exc_page_fault+0x65/0xc0 [ 292.202872][ T6160] asm_exc_page_fault+0x2b/0x30 [ 292.202898][ T6160] RIP: 0033:0x7fce9ea527f7 [ 292.202916][ T6160] Code: e8 8e fa ff ff 89 f2 48 8d 3d 8d 40 1b 00 48 8d 35 6c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 292.202934][ T6160] RSP: 002b:00007fce9fadb120 EFLAGS: 00010202 [ 292.202954][ T6160] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fce9eb9c819 [ 292.202969][ T6160] RDX: 00007fce9fadb140 RSI: 00007fce9fadb270 RDI: 000000000000000b [ 292.202984][ T6160] RBP: 00007fce9ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 292.202997][ T6160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.203010][ T6160] R13: 00007fce9ee16038 R14: 00007fce9ee15fa0 R15: 00007ffe459d3528 [ 292.203027][ T6160] [ 292.203035][ T6160] memory: usage 307200kB, limit 307200kB, failcnt 22506 [ 292.240065][ T629] cdc_ncm 2-1:1.0: skipping garbage [ 292.249177][ T6160] memory+swap: usage 431924kB, limit 9007199254740988kB, failcnt 0 [ 292.260045][ T97] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 292.264545][ T6160] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 292.272125][ T629] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 292.338411][ T6160] Memory cgroup stats for [ 292.347260][ T629] cdc_ncm 2-1:1.0: bind() failure [ 292.354091][ T6160] /syz2 [ 292.365271][ T97] usb 3-1: device descriptor read/8, error -71 [ 292.366141][ T6160] : [ 292.379224][ T629] usb 2-1: USB disconnect, device number 18 [ 292.400061][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.413990][ T6160] cache 314077184 [ 292.489709][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.502041][ T6160] rss 446464 [ 292.570104][ T31] usb 1-1: device descriptor read/64, error -71 [ 292.574487][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.648300][ T6160] rss_huge 0 [ 292.675603][ T97] usb 3-1: device descriptor read/8, error -71 [ 292.691875][ T6160] shmem 314077184 [ 292.718043][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.726447][ T6160] mapped_file 0 [ 292.734351][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.741196][ T6160] dirty 0 [ 292.758569][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.772412][ T6160] writeback 0 [ 292.781481][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.786947][ T6160] workingset_refault_anon 69 [ 292.810733][ T97] usb usb3-port1: unable to enumerate USB device [ 292.817842][ T6160] workingset_refault_file 35 [ 292.856234][ T6160] swap 127717376 [ 292.859789][ T6160] swapcached 94208 [ 292.863556][ T6160] pgpgin 193086 [ 292.867135][ T6160] pgpgout 117819 [ 292.870893][ T31] usb 1-1: device descriptor read/64, error -71 [ 292.877220][ T6160] pgfault 95050 [ 292.881004][ T6160] pgmajfault 97 [ 292.884483][ T6160] inactive_anon 180899840 [ 292.888888][ T6160] active_anon 133672960 [ 292.893099][ T6160] inactive_file 0 [ 292.896754][ T6160] active_file 0 [ 292.900443][ T6160] unevictable 0 [ 292.904017][ T6160] hierarchical_memory_limit 314572800 [ 292.909384][ T6160] hierarchical_memsw_limit 9223372036854771712 [ 292.915668][ T6160] total_cache 314077184 [ 292.919917][ T6160] total_rss 446464 [ 292.923678][ T6160] total_rss_huge 0 [ 292.927588][ T6160] total_shmem 314077184 [ 292.931763][ T6160] total_mapped_file 0 [ 292.935849][ T6160] total_dirty 0 [ 292.939297][ T6160] total_writeback 0 [ 292.943129][ T6160] total_workingset_refault_anon 69 [ 292.948686][ T6160] total_workingset_refault_file 35 [ 292.953858][ T6160] total_swap 127717376 [ 292.957929][ T6160] total_swapcached 94208 [ 292.962308][ T6160] total_pgpgin 193086 [ 292.966292][ T6160] total_pgpgout 117819 [ 292.970293][ T629] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 292.970383][ T6160] total_pgfault 95050 [ 292.982287][ T6160] total_pgmajfault 97 [ 292.986286][ T6160] total_inactive_anon 180899840 [ 292.991167][ T6160] total_active_anon 133672960 [ 292.996019][ T6160] total_inactive_file 0 [ 293.000332][ T6160] total_active_file 0 [ 293.004325][ T6160] total_unevictable 0 [ 293.008610][ T6160] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1798,pid=6162,uid=0 [ 293.024636][ T6160] Memory cgroup out of memory: Killed process 6162 (syz.2.1798) total-vm:90504kB, anon-rss:1236kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 293.110065][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 293.140081][ T629] usb 2-1: Using ep0 maxpacket: 8 [ 293.150235][ T629] usb 2-1: config 255 has an invalid interface number: 201 but max is 3 [ 293.169068][ T629] usb 2-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 293.179308][ T629] usb 2-1: config 255 has an invalid interface number: 31 but max is 3 [ 293.188561][ T629] usb 2-1: config 255 has an invalid interface number: 129 but max is 3 [ 293.200013][ T629] usb 2-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 293.210823][ T629] usb 2-1: config 255 has an invalid interface number: 151 but max is 3 [ 293.220822][ T629] usb 2-1: config 255 has no interface number 0 [ 293.227543][ T629] usb 2-1: config 255 has no interface number 1 [ 293.235158][ T629] usb 2-1: config 255 has no interface number 2 [ 293.244241][ T629] usb 2-1: config 255 has no interface number 3 [ 293.251832][ T629] usb 2-1: config 255 interface 201 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 293.260099][ T31] usb 1-1: device descriptor read/64, error -71 [ 293.264200][ T629] usb 2-1: config 255 interface 201 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 293.280475][ T629] usb 2-1: config 255 interface 201 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 293.309679][ T629] usb 2-1: config 255 interface 201 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 293.322954][ T629] usb 2-1: config 255 interface 201 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 293.334950][ T629] usb 2-1: config 255 interface 201 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 293.350021][ T629] usb 2-1: config 255 interface 201 altsetting 3 endpoint 0xB has invalid maxpacket 1536, setting to 64 [ 293.362297][ T629] usb 2-1: config 255 interface 201 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 293.380819][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 293.392950][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 293.410272][ T629] usb 2-1: config 255 interface 31 altsetting 2 endpoint 0xD has invalid wMaxPacketSize 0 [ 293.424315][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 293.435985][ T629] usb 2-1: config 255 interface 31 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 293.447766][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 293.459655][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 293.471363][ T629] usb 2-1: config 255 interface 31 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 293.484407][ T629] usb 2-1: config 255 interface 129 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 293.496810][ T629] usb 2-1: config 255 interface 129 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 293.509323][ T629] usb 2-1: config 255 interface 129 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 293.530039][ T45] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 293.537928][ T31] usb 1-1: device descriptor read/64, error -71 [ 293.587794][ T629] usb 2-1: config 255 interface 129 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 293.600905][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 293.614682][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 293.633683][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 293.653355][ T31] usb usb1-port1: attempt power cycle [ 293.656595][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 293.680013][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 293.693241][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 293.699784][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 293.721905][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 293.743152][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 293.745336][ T45] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 293.764484][ T45] usb 3-1: config 0 has no interface number 0 [ 293.765734][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 293.800054][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 293.820612][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 293.842037][ T629] usb 2-1: config 255 interface 151 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 293.870528][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 293.893160][ T629] usb 2-1: config 255 interface 151 altsetting 5 has an endpoint descriptor with address 0x51, changing to 0x1 [ 293.913126][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 293.923890][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.924911][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 293.932856][ T45] usb 3-1: Product: syz [ 293.960295][ T45] usb 3-1: Manufacturer: syz [ 293.965329][ T45] usb 3-1: SerialNumber: syz [ 293.973340][ T629] usb 2-1: config 255 interface 151 altsetting 5 has an endpoint descriptor with address 0x7F, changing to 0xF [ 294.010028][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 294.019203][ T45] usb 3-1: config 0 descriptor?? [ 294.039560][ T31] usb 1-1: device descriptor read/8, error -71 [ 294.074695][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 294.111577][ T45] smsc95xx v2.0.0 [ 294.183317][ T31] usb 1-1: device descriptor read/8, error -71 [ 294.205834][ T629] usb 2-1: config 255 interface 151 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 294.242585][ T629] usb 2-1: config 255 interface 151 altsetting 5 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 294.277095][ T629] usb 2-1: config 255 interface 201 has no altsetting 0 [ 294.290023][ T629] usb 2-1: config 255 interface 31 has no altsetting 0 [ 294.297025][ T629] usb 2-1: config 255 interface 129 has no altsetting 0 [ 294.309309][ T629] usb 2-1: config 255 interface 151 has no altsetting 0 [ 294.323880][ T629] usb 2-1: New USB device found, idVendor=106c, idProduct=e63f, bcdDevice=bd.31 [ 294.334974][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.344554][ T629] usb 2-1: Product: syz [ 294.349104][ T629] usb 2-1: Manufacturer: А [ 294.355012][ T629] usb 2-1: SerialNumber: syz [ 294.383215][ T6318] netlink: 'syz.2.1846': attribute type 12 has an invalid length. [ 294.393180][ T6315] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 294.423689][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 294.430042][ T6315] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 294.440063][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 294.463071][ T31] usb 1-1: device descriptor read/8, error -71 [ 294.592690][ T31] usb 1-1: device descriptor read/8, error -71 [ 294.671982][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 294.690011][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.702697][ T31] usb usb1-port1: unable to enumerate USB device [ 294.731168][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.750722][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.780887][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.796178][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.883738][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 294.917375][ T45] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 294.935903][ T45] usb 3-1: USB disconnect, device number 30 [ 295.255166][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.263912][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.500069][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 295.580641][ T36] kauditd_printk_skb: 497 callbacks suppressed [ 295.580658][ T36] audit: type=1400 audit(1775308943.065:14644): avc: denied { ioctl } for pid=6333 comm="syz.2.1852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.650668][ T36] audit: type=1400 audit(1775308943.135:14645): avc: denied { ioctl } for pid=6333 comm="syz.2.1852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.653313][ T31] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.676511][ T36] audit: type=1400 audit(1775308943.135:14646): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.688865][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.715126][ T97] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 295.724571][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 295.733557][ T36] audit: type=1400 audit(1775308943.135:14647): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.744219][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 295.769827][ T36] audit: type=1400 audit(1775308943.135:14648): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.778691][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.804362][ T36] audit: type=1400 audit(1775308943.135:14649): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.834246][ T6328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.848084][ T36] audit: type=1400 audit(1775308943.135:14650): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.891616][ T629] usb 2-1: USB disconnect, device number 19 [ 295.907053][ T36] audit: type=1400 audit(1775308943.175:14651): avc: denied { ioctl } for pid=6327 comm="syz.0.1849" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.929935][ T6338] rust_binder: Got transaction with invalid offset. [ 295.932442][ T6338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 295.934041][ T36] audit: type=1400 audit(1775308943.235:14652): avc: denied { ioctl } for pid=6333 comm="syz.2.1852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.950446][ T6338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1441 [ 295.983552][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=6337 comm=syz.3.1853 [ 296.008785][ T36] audit: type=1400 audit(1775308943.265:14653): avc: denied { ioctl } for pid=6333 comm="syz.2.1852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.033867][ T97] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.052912][ T97] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.063122][ T97] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.085184][ T97] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 296.096465][ T97] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.105891][ T97] usb 3-1: Product: syz [ 296.111078][ T97] usb 3-1: Manufacturer: syz [ 296.115766][ T97] usb 3-1: SerialNumber: syz [ 296.125454][ T97] usb 3-1: selecting invalid altsetting 1 [ 296.134173][ T97] usb 3-1: unit 6 not found! [ 296.204784][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 296.311509][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.330133][ T6365] overlayfs: missing 'lowerdir' [ 296.338067][ T6345] cgroup: fork rejected by pids controller in /syz3 [ 296.344867][ T629] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 296.354964][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.365886][ T6334] netlink: 'syz.2.1852': attribute type 40 has an invalid length. [ 296.370259][ T6365] overlayfs: missing 'lowerdir' [ 296.381139][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.390096][ T6365] overlayfs: missing 'lowerdir' [ 296.401407][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.420012][ T6365] overlayfs: missing 'lowerdir' [ 296.436817][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.488501][ T6365] overlayfs: missing 'lowerdir' [ 296.495625][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.505492][ T6365] overlayfs: missing 'lowerdir' [ 296.510031][ T629] usb 2-1: Using ep0 maxpacket: 32 [ 296.520810][ T629] usb 2-1: config 8 has an invalid interface number: 74 but max is 0 [ 296.521244][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.529626][ T629] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 296.550309][ T629] usb 2-1: config 8 has no interface number 0 [ 296.552432][ T6365] overlayfs: missing 'lowerdir' [ 296.556883][ T629] usb 2-1: config 8 interface 74 has no altsetting 0 [ 296.574031][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.575608][ T629] usb 2-1: New USB device found, idVendor=19d2, idProduct=0015, bcdDevice=ec.1a [ 296.592856][ T6365] overlayfs: missing 'lowerdir' [ 296.597087][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.606724][ T629] usb 2-1: Product: syz [ 296.607226][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.612163][ T629] usb 2-1: Manufacturer: syz [ 296.625337][ T629] usb 2-1: SerialNumber: syz [ 296.625527][ T6365] overlayfs: missing 'lowerdir' [ 296.645782][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.665563][ T6365] overlayfs: missing 'lowerdir' [ 296.677138][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.690056][ T6365] overlayfs: missing 'lowerdir' [ 296.698008][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.707021][ T6365] overlayfs: missing 'lowerdir' [ 296.715013][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.724985][ T6365] overlayfs: missing 'lowerdir' [ 296.733186][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.742084][ T6365] overlayfs: missing 'lowerdir' [ 296.748541][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.758619][ T6365] overlayfs: missing 'lowerdir' [ 296.767295][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.777440][ T6365] overlayfs: missing 'lowerdir' [ 296.784915][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.795178][ T6365] overlayfs: missing 'lowerdir' [ 296.802519][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.812996][ T6365] overlayfs: missing 'lowerdir' [ 296.819563][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.830356][ T6365] overlayfs: missing 'lowerdir' [ 296.836857][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.847700][ T6365] overlayfs: missing 'lowerdir' [ 296.855182][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.866985][ T629] usb 2-1: bad CDC descriptors [ 296.893078][ T629] usb 2-1: USB disconnect, device number 20 [ 296.912737][ T6365] overlayfs: missing 'lowerdir' [ 296.940982][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.978742][ T6365] overlayfs: missing 'lowerdir' [ 296.986269][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.995140][ T6365] overlayfs: missing 'lowerdir' [ 297.002225][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.011139][ T6365] overlayfs: missing 'lowerdir' [ 297.017380][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.027110][ T6365] overlayfs: missing 'lowerdir' [ 297.033754][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.044060][ T6365] overlayfs: missing 'lowerdir' [ 297.051569][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.060904][ T6365] overlayfs: missing 'lowerdir' [ 297.067329][ T6365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.079023][ T6365] overlayfs: missing 'lowerdir' [ 297.363475][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.372574][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.402568][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.423376][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.670068][ T629] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 297.678248][ T6436] overlay: Unknown parameter '/' [ 297.778722][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.788893][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.830469][ T629] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 297.840260][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.848592][ T629] usb 2-1: Product: syz [ 297.855023][ T629] usb 2-1: Manufacturer: syz [ 297.859750][ T629] usb 2-1: SerialNumber: syz [ 297.928761][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.937601][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.301821][ T629] rtl8150 2-1:1.0: couldn't reset the device [ 298.308032][ T629] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 298.326218][ T629] usb 2-1: USB disconnect, device number 21 [ 298.477053][ T97] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 298.511651][ T97] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 298.531841][ T97] usb 3-1: USB disconnect, device number 31 [ 298.572201][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.607446][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.617493][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.625096][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.648262][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.839322][ T6470] input: syz0 as /devices/virtual/input/input61 [ 298.970076][ T97] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 299.090102][ T629] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 299.120724][ T97] usb 3-1: Using ep0 maxpacket: 8 [ 299.128675][ T97] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.138211][ T97] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 299.153318][ T97] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 299.162811][ T97] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.177706][ T97] usb 3-1: Product: syz [ 299.182696][ T97] usb 3-1: Manufacturer: syz [ 299.187329][ T97] usb 3-1: SerialNumber: syz [ 299.240622][ T629] usb 2-1: Using ep0 maxpacket: 16 [ 299.244484][ T6474] rust_binder: Write failure EFAULT in pid:1495 [ 299.251028][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.288000][ T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.299854][ T629] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 299.309863][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.324660][ T629] usb 2-1: config 0 descriptor?? [ 299.448868][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.461224][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.552858][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.561889][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.750806][ T629] apple 0003:05AC:024B.003E: unknown main item tag 0x3 [ 299.757820][ T629] apple 0003:05AC:024B.003E: unknown main item tag 0x0 [ 299.766110][ T629] apple 0003:05AC:024B.003E: item fetching failed at offset 24/69 [ 299.774886][ T629] apple 0003:05AC:024B.003E: parse failed [ 299.780848][ T629] apple 0003:05AC:024B.003E: probe with driver apple failed with error -22 [ 300.092390][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.107091][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.638852][ T36] kauditd_printk_skb: 678 callbacks suppressed [ 300.638872][ T36] audit: type=1400 audit(1775308948.115:15332): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.640143][ T6465] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 300.645381][ T36] audit: type=1400 audit(1775308948.115:15333): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.705485][ T1958] Bluetooth: hci0: Frame reassembly failed (-84) [ 300.718947][ T97] usb 3-1: USB disconnect, device number 32 [ 300.729152][ T36] audit: type=1400 audit(1775308948.115:15334): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.764876][ T36] audit: type=1400 audit(1775308948.245:15335): avc: denied { create } for pid=6503 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.787102][ T36] audit: type=1400 audit(1775308948.245:15336): avc: denied { write } for pid=6503 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.818909][ T36] audit: type=1400 audit(1775308948.245:15337): avc: denied { read } for pid=6503 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.883779][ T36] audit: type=1400 audit(1775308948.245:15338): avc: denied { read } for pid=6503 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.899479][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.946227][ T36] audit: type=1400 audit(1775308948.295:15339): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.980078][ T36] audit: type=1400 audit(1775308948.295:15340): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.021559][ T36] audit: type=1400 audit(1775308948.295:15341): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.481468][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.490611][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.838902][ T45] usb 2-1: USB disconnect, device number 22 [ 301.934372][ T6517] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 301.942289][ T6517] netlink: 'syz.1.1895': attribute type 2 has an invalid length. [ 302.050618][ T6528] tipc: Enabling of bearer rejected, already enabled [ 302.320096][ T31] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 302.327763][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input60 [ 302.387180][ T6531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.580084][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 302.619473][ T6542] overlayfs: disabling nfs_export due to verity=require [ 302.626707][ T6542] overlayfs: failed to clone upperpath [ 302.720074][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.720134][ T2306] Bluetooth: hci0: command 0x0c20 tx timeout [ 302.754760][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 302.763128][ T45] usb 2-1: can't read configurations, error -61 [ 302.900774][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 303.030138][ T31] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 303.063329][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 303.071240][ T45] usb 2-1: can't read configurations, error -61 [ 303.077944][ T45] usb usb2-port1: attempt power cycle [ 303.185791][ T31] usb 3-1: config 2 has an invalid interface number: 200 but max is 0 [ 303.200069][ T31] usb 3-1: config 2 has no interface number 0 [ 303.206209][ T31] usb 3-1: config 2 interface 200 has no altsetting 0 [ 303.213225][ T31] usb 3-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=64.06 [ 303.222702][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.420076][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 303.444552][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 303.453063][ T45] usb 2-1: can't read configurations, error -61 [ 303.459734][ T31] usb 3-1: string descriptor 0 read error: -71 [ 303.469832][ T31] usb 3-1: bad CDC descriptors [ 303.476766][ T31] cdc_acm 3-1:2.200: Zero length descriptor references [ 303.484150][ T31] cdc_acm 3-1:2.200: probe with driver cdc_acm failed with error -22 [ 303.493576][ T31] usb 3-1: USB disconnect, device number 33 [ 303.590052][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 303.614058][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 303.622015][ T45] usb 2-1: can't read configurations, error -61 [ 303.628464][ T45] usb usb2-port1: unable to enumerate USB device [ 303.827963][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.836593][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.848298][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.857070][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.102234][ T6573] 9pnet_fd: Insufficient options for proto=fd [ 304.403335][ T6575] netlink: 'syz.0.1920': attribute type 21 has an invalid length. [ 304.411674][ T6575] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1920'. [ 304.469013][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.477829][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.489156][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.499583][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.534830][ T6582] netlink: 'syz.2.1923': attribute type 58 has an invalid length. [ 304.543503][ T6582] netlink: 'syz.2.1923': attribute type 58 has an invalid length. [ 304.930042][ T97] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 305.070049][ T97] usb 3-1: device descriptor read/64, error -71 [ 305.162169][ T6611] .N: renamed from veth0_to_bond [ 305.226321][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.234961][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.310052][ T97] usb 3-1: device descriptor read/64, error -71 [ 305.486493][ T6619] netlink: 'syz.1.1938': attribute type 22 has an invalid length. [ 305.550063][ T97] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 305.690057][ T97] usb 3-1: device descriptor read/64, error -71 [ 305.800675][ T36] kauditd_printk_skb: 2151 callbacks suppressed [ 305.800696][ T36] audit: type=1400 audit(1775308953.285:17493): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.832331][ T36] audit: type=1400 audit(1775308953.285:17494): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.857812][ T36] audit: type=1400 audit(1775308953.285:17495): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.883438][ T36] audit: type=1400 audit(1775308953.285:17496): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.908799][ T36] audit: type=1400 audit(1775308953.285:17497): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.933890][ T36] audit: type=1400 audit(1775308953.285:17498): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.959155][ T36] audit: type=1400 audit(1775308953.285:17499): avc: denied { ioctl } for pid=6588 comm="syz.2.1926" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.960567][ T97] usb 3-1: device descriptor read/64, error -71 [ 305.985166][ T36] audit: type=1400 audit(1775308953.345:17500): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.019223][ T36] audit: type=1400 audit(1775308953.345:17501): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.048254][ T36] audit: type=1400 audit(1775308953.345:17502): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.100558][ T97] usb usb3-port1: attempt power cycle [ 306.204866][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.213574][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.232274][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.241824][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.450116][ T97] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 306.472259][ T97] usb 3-1: device descriptor read/8, error -71 [ 306.570044][ T629] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 306.602194][ T97] usb 3-1: device descriptor read/8, error -71 [ 306.722215][ T629] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 306.730371][ T629] usb 2-1: config 1 has no interface number 0 [ 306.736684][ T629] usb 2-1: config 1 interface 93 has no altsetting 0 [ 306.743501][ T629] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 306.752597][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.838701][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 306.840747][ T97] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 306.876747][ T97] usb 3-1: device descriptor read/8, error -71 [ 306.949808][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6649 comm=syz.0.1947 [ 306.966839][ T629] usb 2-1: string descriptor 0 read error: -71 [ 306.981217][ T629] gl620a 2-1:1.93: probe with driver gl620a failed with error -22 [ 307.011148][ T629] usb 2-1: USB disconnect, device number 27 [ 307.024791][ T97] usb 3-1: device descriptor read/8, error -71 [ 307.145643][ T97] usb usb3-port1: unable to enumerate USB device [ 307.192235][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1952'. [ 307.246486][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.260784][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.750055][ T97] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 307.838540][ T6683] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1960'. [ 307.873357][ T6688] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1961'. [ 307.924336][ T97] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.933018][ T97] usb 2-1: not running at top speed; connect to a high speed hub [ 307.937791][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1962'. [ 307.943194][ T97] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 307.955264][ T6690] rust_binder: Failed to allocate buffer. len:18446744073709551080, is_oneway:true [ 307.961080][ T6690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 307.965367][ T97] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 307.971642][ T6690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1244 [ 307.980993][ T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.007038][ T97] usb 2-1: Product: syz [ 308.011546][ T97] usb 2-1: Manufacturer: syz [ 308.016251][ T97] usb 2-1: SerialNumber: syz [ 308.055526][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.066424][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.159026][ T6699] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 308.167119][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 308.238113][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.250352][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 308.273918][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.293344][ T97] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 308.301930][ T97] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 308.312369][ T97] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 308.321816][ T97] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 308.331722][ T97] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 308.351397][ T97] usb 2-1: USB disconnect, device number 28 [ 308.447473][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 308.449388][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.469824][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.490056][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.518888][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.527900][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.532410][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.548093][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.570431][ T31] usb 3-1: Product: syz [ 308.576936][ T31] usb 3-1: Manufacturer: syz [ 308.591164][ T31] usb 3-1: SerialNumber: syz [ 308.593463][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.625636][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.740092][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 308.834161][ T6730] overlayfs: failed to clone upperpath [ 308.910925][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 309.022932][ T31] usb 3-1: 0:2 : does not exist [ 309.031563][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 309.054656][ T31] usb 3-1: USB disconnect, device number 38 [ 309.162425][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 309.333093][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.365520][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.850059][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 309.880067][ T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 310.000986][ T31] usb 3-1: too many configurations: 172, using maximum allowed: 8 [ 310.023550][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 310.032899][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 310.038018][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.046098][ T31] usb 3-1: Product: syz [ 310.050410][ T31] usb 3-1: Manufacturer: syz [ 310.055634][ T31] usb 3-1: SerialNumber: syz [ 310.063619][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.091619][ T45] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 310.101983][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.110952][ T45] usb 2-1: Product: syz [ 310.116157][ T45] usb 2-1: Manufacturer: syz [ 310.121611][ T45] usb 2-1: SerialNumber: syz [ 310.134755][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.147215][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.311127][ T31] rtl8150 3-1:1.0: couldn't reset the device [ 310.317239][ T31] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 310.328598][ T31] usb 3-1: USB disconnect, device number 39 [ 310.347568][ T45] usb 2-1: USB disconnect, device number 29 [ 310.437604][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 310.504619][ T6798] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.826610][ T36] kauditd_printk_skb: 942 callbacks suppressed [ 310.826643][ T36] audit: type=1400 audit(1775308958.305:18445): avc: denied { read } for pid=6811 comm="syz.2.2003" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.843013][ T6809] netlink: 'syz.0.2002': attribute type 9 has an invalid length. [ 310.858502][ T36] audit: type=1400 audit(1775308958.305:18446): avc: denied { read open } for pid=6811 comm="syz.2.2003" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.887887][ T36] audit: type=1400 audit(1775308958.325:18447): avc: denied { ioctl } for pid=6807 comm="syz.0.2002" path="socket:[53073]" dev="sockfs" ino=53073 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.923440][ T36] audit: type=1400 audit(1775308958.355:18448): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.947864][ T36] audit: type=1400 audit(1775308958.355:18449): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.980039][ T36] audit: type=1400 audit(1775308958.355:18450): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.018085][ T36] audit: type=1400 audit(1775308958.375:18451): avc: denied { read write } for pid=6807 comm="syz.0.2002" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 311.044299][ T36] audit: type=1400 audit(1775308958.375:18452): avc: denied { read write open } for pid=6807 comm="syz.0.2002" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 311.075328][ T36] audit: type=1400 audit(1775308958.375:18453): avc: denied { ioctl } for pid=6807 comm="syz.0.2002" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 311.104346][ T36] audit: type=1400 audit(1775308958.405:18454): avc: denied { read write } for pid=6814 comm="syz.1.2004" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.106916][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 311.149336][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 311.176189][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.188306][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.190009][ T10] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 311.351932][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.371230][ T10] usb 2-1: config 0 has no interface number 0 [ 311.377548][ T10] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.389177][ T10] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.399251][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 311.405948][ T10] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 311.415485][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.424624][ T10] usb 2-1: config 0 descriptor?? [ 311.636760][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.645522][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.962149][ T6858] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2017'. [ 311.971418][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 311.980401][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 312.061373][ T10] uclogic 0003:2179:0053.003F: failed retrieving string descriptor #100: -71 [ 312.070307][ T10] uclogic 0003:2179:0053.003F: failed retrieving pen parameters: -71 [ 312.078557][ T10] uclogic 0003:2179:0053.003F: pen probing failed: -71 [ 312.085603][ T10] uclogic 0003:2179:0053.003F: failed probing parameters: -71 [ 312.093363][ T10] uclogic 0003:2179:0053.003F: probe with driver uclogic failed with error -71 [ 312.104460][ T10] usb 2-1: USB disconnect, device number 30 [ 312.190091][ T45] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 312.342193][ T45] usb 3-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 312.352530][ T45] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.369387][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 312.379018][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.387415][ T45] usb 3-1: Product: syz [ 312.391947][ T45] usb 3-1: Manufacturer: syz [ 312.396627][ T45] usb 3-1: SerialNumber: syz [ 312.550368][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 312.559613][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 312.636341][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 312.673013][ T45] usb 3-1: USB disconnect, device number 40 [ 312.768658][ T6879] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6879 comm=syz.1.2024 [ 312.790050][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 312.807903][ T6879] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6879 comm=syz.1.2024 [ 312.962068][ T6897] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 312.972665][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.984397][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.223181][ T6902] +$<: renamed from bridge0 [ 313.270070][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 313.423220][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.437323][ T10] usb 2-1: string descriptor 0 read error: -22 [ 313.444161][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 313.453341][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.465177][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 313.530198][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.545850][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.669611][ T10] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 313.684989][ T10] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 313.698022][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 313.720119][ T10] usb 2-1: USB disconnect, device number 31 [ 313.729542][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 313.855254][ T6915] netlink: 'syz.3.2036': attribute type 5 has an invalid length. [ 313.863247][ T6915] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2036'. [ 313.880062][ T629] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 314.030073][ T629] usb 3-1: Using ep0 maxpacket: 32 [ 314.037928][ T629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.052294][ T629] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 314.061545][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.069592][ T629] usb 3-1: Product: syz [ 314.073861][ T629] usb 3-1: Manufacturer: syz [ 314.078512][ T629] usb 3-1: SerialNumber: syz [ 314.090273][ T629] usb 3-1: config 0 descriptor?? [ 314.097454][ T629] usb 3-1: bad CDC descriptors [ 314.103530][ T629] usb 3-1: unsupported MDLM descriptors [ 314.133536][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.147967][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.162701][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.171355][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.186754][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.199250][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.245665][ T6922] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 314.304955][ T45] usb 3-1: USB disconnect, device number 41 [ 314.690069][ T629] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 314.739080][ T6935] overlayfs: failed to resolve './file1': -2 [ 314.749433][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.758125][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.840039][ T629] usb 2-1: Using ep0 maxpacket: 16 [ 314.849194][ T629] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.862034][ T629] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 314.871444][ T629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.879704][ T629] usb 2-1: SerialNumber: syz [ 314.886535][ T629] usb 2-1: config 0 descriptor?? [ 314.895053][ T629] hub 2-1:0.0: bad descriptor, ignoring hub [ 314.902569][ T629] hub 2-1:0.0: probe with driver hub failed with error -5 [ 314.910032][ T629] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 314.918772][ T629] usb 2-1: Detected SIO [ 314.924564][ T629] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 315.102483][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.111185][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.230147][ T45] usb 2-1: USB disconnect, device number 32 [ 315.236844][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 315.250454][ T45] ftdi_sio 2-1:0.0: device disconnected [ 315.302533][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.311181][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.643861][ T6953] overlayfs: conflicting options: metacopy=off,verity=require [ 315.749713][ T6963] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2051'. [ 315.818323][ T6970] fuse: Bad value for 'user_id' [ 315.823275][ T6970] fuse: Bad value for 'user_id' [ 315.831120][ T36] kauditd_printk_skb: 538 callbacks suppressed [ 315.831139][ T36] audit: type=1400 audit(1775308963.305:18993): avc: denied { read write } for pid=6969 comm="syz.2.2053" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.856375][ T6972] fuse: Bad value for 'group_id' [ 315.866712][ T6972] fuse: Bad value for 'group_id' [ 315.885082][ T36] audit: type=1400 audit(1775308963.315:18994): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.911011][ T36] audit: type=1400 audit(1775308963.315:18995): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.938564][ T36] audit: type=1400 audit(1775308963.315:18996): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.972839][ T36] audit: type=1400 audit(1775308963.335:18997): avc: denied { read write } for pid=6971 comm="syz.0.2054" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.997271][ T36] audit: type=1400 audit(1775308963.335:18998): avc: denied { read write open } for pid=6971 comm="syz.0.2054" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 316.022262][ T36] audit: type=1400 audit(1775308963.335:18999): avc: denied { mounton } for pid=6971 comm="syz.0.2054" path="/554/file0" dev="tmpfs" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 316.030176][ T629] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 316.046873][ T36] audit: type=1400 audit(1775308963.345:19000): avc: denied { read write open } for pid=6969 comm="syz.2.2053" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.062999][ T6979] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 316.088240][ T36] audit: type=1400 audit(1775308963.345:19001): avc: denied { ioctl } for pid=6969 comm="syz.2.2053" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.113466][ T45] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 316.121360][ T36] audit: type=1400 audit(1775308963.345:19002): avc: denied { ioctl } for pid=6969 comm="syz.2.2053" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.210115][ T629] usb 2-1: device descriptor read/64, error -71 [ 316.290051][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 316.297262][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.308826][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 544, setting to 64 [ 316.319589][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 7 [ 316.330935][ T45] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.341857][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9215, setting to 1024 [ 316.353052][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.363181][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 316.373995][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 316.393484][ T45] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.07 [ 316.402646][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.410860][ T45] usb 3-1: Product: syz [ 316.415080][ T45] usb 3-1: Manufacturer: syz [ 316.419683][ T45] usb 3-1: SerialNumber: syz [ 316.428522][ T6970] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 316.470067][ T629] usb 2-1: device descriptor read/64, error -71 [ 316.659035][ T6970] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 316.687350][ T45] usb 3-1: USB disconnect, device number 42 [ 316.710043][ T629] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 316.732718][ T507] udevd[507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 316.850044][ T629] usb 2-1: device descriptor read/64, error -71 [ 317.090119][ T629] usb 2-1: device descriptor read/64, error -71 [ 317.200580][ T629] usb usb2-port1: attempt power cycle [ 317.231925][ T6992] netlink: 'syz.2.2060': attribute type 10 has an invalid length. [ 317.239916][ T6992] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2060'. [ 317.474163][ T7002] overlayfs: failed to clone upperpath [ 317.520031][ T45] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 317.550048][ T629] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 317.572019][ T629] usb 2-1: device descriptor read/8, error -71 [ 317.672507][ T45] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 317.680885][ T45] usb 3-1: config 8 has an invalid descriptor of length 56, skipping remainder of the config [ 317.691124][ T45] usb 3-1: config 8 has no interface number 0 [ 317.697641][ T45] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 317.713860][ T45] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 317.722836][ T629] usb 2-1: device descriptor read/8, error -71 [ 317.723205][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.737748][ T45] usb 3-1: Product: syz [ 317.741969][ T45] usb 3-1: Manufacturer: syz [ 317.746711][ T45] usb 3-1: SerialNumber: syz [ 317.960073][ T629] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 317.964037][ T45] usb 3-1: USB disconnect, device number 43 [ 317.993775][ T629] usb 2-1: device descriptor read/8, error -71 [ 318.132053][ T629] usb 2-1: device descriptor read/8, error -71 [ 318.240312][ T629] usb usb2-port1: unable to enumerate USB device [ 318.583380][ T7023] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 318.592133][ T7023] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 318.636544][ T7025] SELinux: security_context_str_to_sid (=5] S9q#) failed with errno=-22 [ 318.662587][ T7025] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 319.030061][ T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 319.091061][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.099712][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.116180][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.128126][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.150084][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 319.170071][ T31] usb 3-1: device descriptor read/64, error -71 [ 319.276476][ T7052] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2081'. [ 319.300030][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 319.313310][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 319.330030][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.338431][ T45] usb 2-1: Product: syz [ 319.344186][ T45] usb 2-1: Manufacturer: syz [ 319.351592][ T45] usb 2-1: SerialNumber: syz [ 319.410055][ T31] usb 3-1: device descriptor read/64, error -71 [ 319.566484][ T45] usb 2-1: 1:1: invalid format type 0x9978 is detected, processed as PCM [ 319.580048][ T45] usb 2-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes [ 319.587725][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 319.600587][ T45] usb 2-1: USB disconnect, device number 37 [ 319.646875][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.662882][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 319.738251][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.747252][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.800094][ T31] usb 3-1: device descriptor read/64, error -71 [ 320.040060][ T31] usb 3-1: device descriptor read/64, error -71 [ 320.150112][ T31] usb usb3-port1: attempt power cycle [ 320.490029][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 320.513135][ T31] usb 3-1: device descriptor read/8, error -71 [ 320.642941][ T31] usb 3-1: device descriptor read/8, error -71 [ 320.839976][ T36] kauditd_printk_skb: 496 callbacks suppressed [ 320.839999][ T36] audit: type=1400 audit(1775308968.315:19499): avc: denied { read write } for pid=7089 comm="syz.1.2095" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.871070][ T36] audit: type=1400 audit(1775308968.325:19500): avc: denied { read write open } for pid=7089 comm="syz.1.2095" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.896612][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 320.904281][ T36] audit: type=1400 audit(1775308968.355:19501): avc: denied { ioctl } for pid=7089 comm="syz.1.2095" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.923200][ T31] usb 3-1: device descriptor read/8, error -71 [ 320.929487][ T36] audit: type=1400 audit(1775308968.405:19502): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.960876][ T36] audit: type=1400 audit(1775308968.405:19503): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.986260][ T36] audit: type=1400 audit(1775308968.405:19504): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.011679][ T36] audit: type=1400 audit(1775308968.405:19505): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.037778][ T36] audit: type=1400 audit(1775308968.405:19506): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.063972][ T36] audit: type=1400 audit(1775308968.425:19507): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.104243][ T36] audit: type=1400 audit(1775308968.575:19508): avc: denied { ioctl } for pid=7042 comm="syz.2.2078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.130363][ T31] usb 3-1: device descriptor read/8, error -71 [ 321.240122][ T31] usb usb3-port1: unable to enumerate USB device [ 322.170451][ T629] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 322.330079][ T629] usb 2-1: Using ep0 maxpacket: 8 [ 322.338920][ T629] usb 2-1: config 1 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 322.351041][ T629] usb 2-1: config 1 interface 0 altsetting 238 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 322.363780][ T629] usb 2-1: config 1 interface 0 has no altsetting 0 [ 322.374713][ T629] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40 [ 322.385495][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.394185][ T629] usb 2-1: Product: syz [ 322.399032][ T629] usb 2-1: Manufacturer: 퉴죍ꬹ峜䨅⧤굻䋅ņ蹣烰錦츿摀❺℘컋絘컚⬰舁鮚殾긲⨏녌훚욝磠忨⿤崲᛽絾ᘞӂ‣쀥ﭽ걯ₜﯦ澠ὤꛪ࢏근쿄뼘㴵뻳펮穽楃풋뿑걖ꏅ懺髣쀟圽잹졳ℏᇒ籡㮵䥴⨱뢨쇄靆뫃艠ﵱ㵩஀ᆇ豔낰鲴桯⭽⌺≕짉콏䫤て鞚ႆῧ鷌뚩㶬ﯛ㓾Ӳ雧䁨蕋鲷鍬᱕顤⏾ [ 322.435483][ T629] usb 2-1: SerialNumber: syz [ 322.651640][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.660418][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.685234][ T629] usbhid 2-1:1.0: can't add hid device: -71 [ 322.705126][ T629] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 322.717918][ T629] usb 2-1: USB disconnect, device number 38 [ 323.428109][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 323.710026][ T629] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 323.862481][ T629] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 323.873778][ T629] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.887177][ T629] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.893836][ T629] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 323.903103][ T629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.910102][ T31] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 323.919313][ T629] usb 3-1: config 0 descriptor?? [ 323.926037][ T7159] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 324.083464][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.093065][ T31] usb 2-1: config 11 has an invalid interface number: 53 but max is 0 [ 324.102444][ T31] usb 2-1: config 11 has no interface number 0 [ 324.108802][ T31] usb 2-1: config 11 interface 53 has no altsetting 0 [ 324.341639][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.348669][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.357346][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.364998][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.372815][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.379913][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.388024][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.395785][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.403698][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.412665][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.421089][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.428080][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.436059][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.443787][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.452413][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.459542][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.467694][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.475506][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.483531][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.492133][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.499532][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.508513][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.516519][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.524274][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.528946][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.532166][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.548204][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.552978][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.556658][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.570768][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.577862][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.586363][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.593439][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.600601][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.607582][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.614720][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.621885][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.629004][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.636230][ T629] waltop 0003:172F:0034.0040: unknown main item tag 0x0 [ 324.644416][ T629] waltop 0003:172F:0034.0040: hidraw0: USB HID v0.20 Device [HID 172f:0034] on usb-dummy_hcd.2-1/input0 [ 324.670134][ T629] usb 3-1: USB disconnect, device number 48 [ 324.709505][ T7189] fido_id[7189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 325.203767][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.206631][ T7198] SELinux: Context is not valid (left unmapped). [ 325.217255][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.241137][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.249896][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.423114][ T7204] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 325.932545][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 325.932573][ T36] audit: type=1400 audit(1775308973.415:19958): avc: denied { execute } for pid=7206 comm="syz.0.2134" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.961821][ T36] audit: type=1400 audit(1775308973.445:19959): avc: denied { execute_no_trans } for pid=7206 comm="syz.0.2134" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 326.016137][ T36] audit: type=1400 audit(1775308973.495:19960): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.048216][ T36] audit: type=1400 audit(1775308973.495:19961): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.074656][ T36] audit: type=1400 audit(1775308973.495:19962): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.102586][ T36] audit: type=1400 audit(1775308973.515:19963): avc: denied { create } for pid=7211 comm="syz.2.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.125934][ T36] audit: type=1400 audit(1775308973.525:19964): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.154836][ T36] audit: type=1400 audit(1775308973.525:19965): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.181379][ T36] audit: type=1400 audit(1775308973.525:19966): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.208927][ T7222] tipc: MTU too low for tipc bearer [ 326.209632][ T36] audit: type=1400 audit(1775308973.565:19967): avc: denied { read } for pid=7214 comm="syz.2.2136" dev="nsfs" ino=4026532559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.470045][ T629] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 326.620079][ T629] usb 3-1: Using ep0 maxpacket: 16 [ 326.628270][ T629] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 326.643359][ T629] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 326.652852][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.662300][ T629] usb 3-1: Product: syz [ 326.667018][ T629] usb 3-1: Manufacturer: syz [ 326.672542][ T629] usb 3-1: SerialNumber: syz [ 326.673953][ T31] usb 2-1: New USB device found, idVendor=0df6, idProduct=0050, bcdDevice=20.2b [ 326.704152][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.724357][ T31] usb 2-1: can't set config #11, error -71 [ 326.736782][ T31] usb 2-1: USB disconnect, device number 39 [ 326.914308][ T629] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 326.930818][ T629] usb 3-1: USB disconnect, device number 49 [ 326.984000][ T7232] netlink: 'syz.3.2142': attribute type 16 has an invalid length. [ 326.992187][ T7232] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2142'. [ 326.994570][ T507] udevd[507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 327.114351][ T629] usb 4-1: USB disconnect, device number 6 [ 327.130032][ T31] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 327.300009][ T31] usb 2-1: device descriptor read/64, error -71 [ 327.342837][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.350927][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.358050][ T7236] bridge_slave_0: entered allmulticast mode [ 327.364608][ T7236] bridge_slave_0: entered promiscuous mode [ 327.372451][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.379794][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.387250][ T7236] bridge_slave_1: entered allmulticast mode [ 327.393853][ T7236] bridge_slave_1: entered promiscuous mode [ 327.519692][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.526989][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.534331][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.541487][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.554392][ T7244] 9p: Unknown access argument ffffffffffffffff: -22 [ 327.560027][ T31] usb 2-1: device descriptor read/64, error -71 [ 327.606113][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.628313][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.648413][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.668007][ T1935] bridge_slave_1: left allmulticast mode [ 327.675507][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.680347][ T1935] bridge_slave_1: left promiscuous mode [ 327.689376][ T1935] +$<: port 2(bridge_slave_1) entered disabled state [ 327.696946][ T1935] bridge_slave_0: left allmulticast mode [ 327.702882][ T1935] bridge_slave_0: left promiscuous mode [ 327.709433][ T1935] +$<: port 1(bridge_slave_0) entered disabled state [ 327.767066][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.775055][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.798748][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.805967][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.817265][ T1935] veth1_macvtap: left promiscuous mode [ 327.820037][ T31] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 327.823286][ T1935] veth0_vlan: left promiscuous mode [ 327.865793][ T1936] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.872978][ T1936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.946978][ T7236] veth0_vlan: entered promiscuous mode [ 327.970043][ T31] usb 2-1: device descriptor read/64, error -71 [ 327.986083][ T7236] veth1_macvtap: entered promiscuous mode [ 328.040077][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 328.200050][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 328.208066][ T45] usb 3-1: config index 0 descriptor too short (expected 2456, got 152) [ 328.219370][ T31] usb 2-1: device descriptor read/64, error -71 [ 328.225799][ T45] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 328.236295][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 328.248453][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.257696][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.265871][ T45] usb 3-1: Product: syz [ 328.270234][ T45] usb 3-1: Manufacturer: syz [ 328.274871][ T45] usb 3-1: SerialNumber: syz [ 328.280568][ T45] usb 3-1: config 0 descriptor?? [ 328.340098][ T31] usb usb2-port1: attempt power cycle [ 328.427201][ T7266] rust_binder: Write failure EFAULT in pid:1726 [ 328.429998][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.445072][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.456447][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.465149][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.489865][ T45] usb 3-1: USB disconnect, device number 50 [ 328.680094][ T31] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 328.702192][ T31] usb 2-1: device descriptor read/8, error -71 [ 328.832392][ T31] usb 2-1: device descriptor read/8, error -71 [ 329.070027][ T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 329.140345][ T31] usb 2-1: device descriptor read/8, error -71 [ 329.149240][ T7281] SELinux: policydb version -1518477366 does not match my version range 15-33 [ 329.158512][ T7281] SELinux: failed to load policy [ 329.271003][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.272905][ T31] usb 2-1: device descriptor read/8, error -71 [ 329.304209][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.360085][ T629] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 329.393218][ T7287] netlink: 'syz.0.2163': attribute type 27 has an invalid length. [ 329.403775][ T31] usb usb2-port1: unable to enumerate USB device [ 329.414941][ T7287] z00X: left allmulticast mode [ 329.427649][ T7287] wireguard: wg1: Could not create IPv4 socket [ 329.434098][ T7287] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 329.530120][ T629] usb 3-1: Using ep0 maxpacket: 8 [ 329.541738][ T629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.553360][ T629] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 329.563082][ T629] usb 3-1: config 0 has no interface number 0 [ 329.569219][ T629] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 329.580619][ T629] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 329.590805][ T629] usb 3-1: config 0 interface 88 has no altsetting 0 [ 329.608597][ T629] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 329.619348][ T629] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 329.627830][ T629] usb 3-1: Product: syz [ 329.632690][ T629] usb 3-1: SerialNumber: syz [ 329.638098][ T629] usb 3-1: config 0 descriptor?? [ 329.841462][ T7298] fuse: Unknown parameter 'r^ [ 329.841462][ T7298] 000000000000000000000000000000000000' [ 329.856987][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.870340][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.881416][ T629] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input63 [ 329.892540][ T629] usb 3-1: USB disconnect, device number 51 [ 330.010444][ T7307] bridge_slave_0 (unregistering): left allmulticast mode [ 330.017837][ T7307] bridge_slave_0 (unregistering): left promiscuous mode [ 330.024954][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.170026][ T97] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 330.279508][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.288204][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.334177][ T97] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.348382][ T97] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.358766][ T97] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.376531][ T97] usb 2-1: New USB device found, idVendor=7044, idProduct=cf59, bcdDevice= 0.9e [ 330.386456][ T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 330.394557][ T97] usb 2-1: Product: syz [ 330.405212][ T97] usb 2-1: Manufacturer: syz [ 330.420129][ T97] usb 2-1: SerialNumber: syz [ 330.471169][ T7323] fuseblk: Bad value for 'fd' [ 330.478782][ T7325] netlink: 'syz.3.2174': attribute type 1 has an invalid length. [ 330.487082][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 330.636727][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.652244][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.678062][ T97] usb 2-1: MIDIStreaming interface descriptor not found [ 330.694341][ T97] usb 2-1: USB disconnect, device number 44 [ 330.775815][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 330.850036][ T629] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 330.954236][ T36] kauditd_printk_skb: 881 callbacks suppressed [ 330.954256][ T36] audit: type=1400 audit(1775308978.435:20849): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.970022][ T31] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 330.995852][ T36] audit: type=1400 audit(1775308978.435:20850): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.030026][ T629] usb 4-1: Using ep0 maxpacket: 32 [ 331.042831][ T629] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.060010][ T629] usb 4-1: config 0 has no interface number 0 [ 331.071588][ T629] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.081052][ T36] audit: type=1400 audit(1775308978.435:20851): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.081632][ T629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.126254][ T36] audit: type=1400 audit(1775308978.485:20852): avc: denied { read } for pid=7345 comm="syz.0.2180" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.150004][ T629] usb 4-1: Product: syz [ 331.154248][ T7348] TCP: TCP_TX_DELAY enabled [ 331.154300][ T629] usb 4-1: Manufacturer: syz [ 331.170015][ T629] usb 4-1: SerialNumber: syz [ 331.176638][ T629] usb 4-1: config 0 descriptor?? [ 331.179071][ T36] audit: type=1400 audit(1775308978.485:20853): avc: denied { read open } for pid=7345 comm="syz.0.2180" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.197843][ T629] smsc95xx v2.0.0 [ 331.210026][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 331.237537][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 331.248101][ T31] usb 3-1: config 0 has no interface number 0 [ 331.260016][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 331.270952][ T36] audit: type=1400 audit(1775308978.485:20854): avc: denied { execmem } for pid=7345 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 331.297903][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 331.306975][ T36] audit: type=1400 audit(1775308978.505:20855): avc: denied { ioctl } for pid=7338 comm="syz.2.2178" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.307495][ T7355] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2183'. [ 331.335631][ T36] audit: type=1400 audit(1775308978.505:20856): avc: denied { ioctl } for pid=7338 comm="syz.2.2178" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.369292][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 331.379121][ T7355] 0{X: entered promiscuous mode [ 331.380144][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.394340][ T7355] 0{X: left allmulticast mode [ 331.400316][ T31] usb 3-1: Product: syz [ 331.400733][ T7330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.404612][ T31] usb 3-1: Manufacturer: syz [ 331.417482][ T7330] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 331.421577][ T31] usb 3-1: SerialNumber: syz [ 331.478416][ T31] usb 3-1: config 0 descriptor?? [ 331.517045][ T7339] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.615077][ T7364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.620741][ T97] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 331.622600][ T7364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2186'. [ 331.648360][ T7364] rust_binder: Error while translating object. [ 331.648422][ C1] BUG: TASK stack guard page was hit at ffffc90010637eb8 (stack is ffffc90010638000..ffffc90010640000) [ 331.648453][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 331.648473][ C1] CPU: 1 UID: 0 PID: 7364 Comm: syz.0.2186 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 331.648497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.648509][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 331.648540][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 331.648557][ C1] RSP: 0018:ffffc90010637ec0 EFLAGS: 00010286 [ 331.648575][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc90010638230 [ 331.648590][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 331.648603][ C1] RBP: ffffc90010638190 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 331.648618][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: 0000000000000680 [ 331.648633][ C1] R13: dffffc0000000000 R14: 1ffff920020c7038 R15: ffffc90010638230 [ 331.648649][ C1] FS: 00007f65c61e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 331.648679][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.648693][ C1] CR2: ffffc90010637eb8 CR3: 000000011ccc8000 CR4: 00000000003526b0 [ 331.648715][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 331.648731][ C1] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.648746][ C1] Call Trace: [ 331.648756][ C1] [ 331.648767][ C1] ? __kasan_check_read+0x15/0x20 [ 331.648797][ C1] ? static_key_count+0x45/0x70 [ 331.648819][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 331.648846][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 331.648874][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 331.648899][ C1] ? unwind_next_frame+0x3c1/0x750 [ 331.648922][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 331.648945][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 331.648972][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.648994][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 331.649019][ C1] ? stack_depot_save_flags+0x672/0x800 [ 331.649045][ C1] ? stack_depot_save+0x12/0x20 [ 331.649068][ C1] ? save_stack+0x133/0x240 [ 331.649087][ C1] ? free_contig_range+0x260/0x260 [ 331.649110][ C1] ? __reset_page_owner+0x450/0x450 [ 331.649128][ C1] ? zone_page_state_add+0x43/0x90 [ 331.649154][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 331.649174][ C1] ? prep_new_page+0x20/0x120 [ 331.649192][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 331.649215][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 331.649237][ C1] ? stack_depot_save_flags+0x672/0x800 [ 331.649261][ C1] ? kasan_save_track+0x4f/0x80 [ 331.649290][ C1] ? kasan_save_free_info+0x4a/0x60 [ 331.649314][ C1] ? __kasan_slab_free+0x5f/0x80 [ 331.649332][ C1] ? kfree+0x158/0x440 [ 331.649354][ C1] ? krealloc_noprof+0xfa/0x130 [ 331.649379][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 331.649425][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 331.649460][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 331.649494][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 331.649529][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 331.649559][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 331.649584][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 331.649606][ C1] ? sched_clock_noinstr+0xd/0x30 [ 331.649627][ C1] ? __set_page_owner+0x8e/0x600 [ 331.649645][ C1] ? __zone_watermark_ok+0x134/0x630 [ 331.649677][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 331.649698][ C1] ? kasan_unpoison+0x4a/0x70 [ 331.649722][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 331.649744][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 331.649766][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 331.649791][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 331.649817][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 331.649818][ T629] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 331.649846][ C1] ? prep_new_page+0x20/0x120 [ 331.649867][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 331.649892][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 331.649913][ C1] ? static_key_count+0x45/0x70 [ 331.649931][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 331.649955][ C1] ? lruvec_init+0x201/0x280 [ 331.649981][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 331.650002][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 331.650023][ C1] ? unwind_get_return_address+0x51/0x90 [ 331.650043][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.650062][ C1] ? arch_stack_walk+0x10a/0x170 [ 331.650089][ C1] ? stack_trace_save+0xaa/0x100 [ 331.650108][ C1] ? stack_depot_save_flags+0x672/0x800 [ 331.650132][ C1] ? kasan_save_track+0x4f/0x80 [ 331.650157][ C1] ? kasan_save_track+0x3e/0x80 [ 331.650181][ C1] ? kasan_save_free_info+0x4a/0x60 [ 331.650202][ C1] ? __kasan_slab_free+0x5f/0x80 [ 331.650219][ C1] ? kfree+0x158/0x440 [ 331.650241][ C1] ? krealloc_noprof+0xfa/0x130 [ 331.650264][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 331.650306][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 331.650337][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 331.650368][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 331.650401][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 331.650430][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 331.650454][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 331.650485][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 331.650512][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 331.650534][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 331.650551][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 331.650568][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 331.650593][ C1] ? do_syscall_64+0x57/0xf0 [ 331.650618][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.650648][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 331.650684][ C1] ? kasan_save_free_info+0x4a/0x60 [ 331.650705][ C1] ? __kasan_slab_free+0x5f/0x80 [ 331.650722][ C1] ? kfree+0x158/0x440 [ 331.650743][ C1] ? krealloc_noprof+0xfa/0x130 [ 331.650768][ C1] ? krealloc_noprof+0xfa/0x130 [ 331.650791][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 331.650831][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 331.650855][ C1] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 331.650895][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 331.650937][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 331.650978][ C1] ? __kasan_check_write+0x18/0x20 [ 331.651001][ C1] ? _raw_spin_lock+0x92/0x120 [ 331.651025][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.651050][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 331.651082][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 331.651117][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 331.651146][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.651168][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 331.651197][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 331.651226][ C1] ? __kasan_check_write+0x18/0x20 [ 331.651248][ C1] ? _raw_spin_lock+0x92/0x120 [ 331.651272][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.651295][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 331.651328][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.651351][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 331.651385][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 331.651417][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 331.651446][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.651468][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 331.651497][ C1] ? __kasan_check_write+0x18/0x20 [ 331.651520][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 331.651551][ C1] ? __kasan_check_write+0x18/0x20 [ 331.651574][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.651599][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 331.651631][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.651661][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 331.651698][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 331.651728][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 331.651759][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 331.651790][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 331.651832][ C1] ? __kasan_check_write+0x18/0x20 [ 331.651854][ C1] ? mutex_unlock+0x90/0x240 [ 331.651879][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 331.651900][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 331.651921][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 331.651956][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 331.651988][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 331.652020][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.652043][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 331.652074][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 331.652105][ C1] ? __enqueue_entity+0x58a/0x630 [ 331.652131][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 331.652162][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 331.652193][ C1] ? desc_read+0x202/0x3e0 [ 331.652211][ C1] ? __kasan_check_write+0x18/0x20 [ 331.652233][ C1] ? desc_read+0x1ab/0x3e0 [ 331.652251][ C1] ? prb_first_seq+0x109/0x1d0 [ 331.652268][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 331.652286][ C1] ? __kasan_check_write+0x18/0x20 [ 331.652308][ C1] ? desc_read+0x1ab/0x3e0 [ 331.652325][ C1] ? __kasan_check_read+0x15/0x20 [ 331.652347][ C1] ? this_cpu_in_panic+0x56/0x90 [ 331.652366][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 331.652384][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.652408][ C1] ? prb_read_valid+0x80/0x80 [ 331.652425][ C1] ? data_alloc+0x4d0/0x7e0 [ 331.652443][ C1] ? desc_read+0x202/0x3e0 [ 331.652460][ C1] ? __kasan_check_write+0x18/0x20 [ 331.652483][ C1] ? desc_read+0x1ab/0x3e0 [ 331.652500][ C1] ? prb_first_seq+0x109/0x1d0 [ 331.652517][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 331.652535][ C1] ? __kasan_check_write+0x18/0x20 [ 331.652557][ C1] ? desc_read+0x1ab/0x3e0 [ 331.652574][ C1] ? __kasan_check_read+0x15/0x20 [ 331.652597][ C1] ? this_cpu_in_panic+0x56/0x90 [ 331.652615][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 331.652633][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 331.652667][ C1] ? prb_read_valid+0x80/0x80 [ 331.652684][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.652709][ C1] ? up+0x10a/0x1b0 [ 331.652729][ C1] ? __cfi_up+0x10/0x10 [ 331.652748][ C1] ? __kasan_check_read+0x15/0x20 [ 331.652771][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 331.652797][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 331.652823][ C1] ? console_unlock+0x247/0x2c0 [ 331.652843][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.652869][ C1] ? __cfi_console_unlock+0x10/0x10 [ 331.652890][ C1] ? krealloc_noprof+0xfa/0x130 [ 331.652914][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 331.652937][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 331.652973][ C1] ? irq_work_queue+0xc9/0x160 [ 331.652994][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 331.653031][ C1] ? vprintk_emit+0x3e3/0x650 [ 331.653051][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 331.653071][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 331.653103][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 331.653136][ C1] ? vprintk_default+0x2a/0x40 [ 331.653155][ C1] ? vprintk+0x93/0xa0 [ 331.653178][ C1] ? _printk+0xde/0x140 [ 331.653196][ C1] ? __cfi___check_object_size+0x10/0x10 [ 331.653221][ C1] ? __cfi__printk+0x10/0x10 [ 331.653239][ C1] ? _copy_from_user+0x87/0xa0 [ 331.653256][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 331.653289][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 331.653319][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 331.653357][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 331.653441][ C1] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 331.653475][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 331.653498][ C1] ? kernel_text_address+0xa9/0xe0 [ 331.653519][ C1] ? core_kernel_text+0x20/0xa0 [ 331.653540][ C1] ? unwind_get_return_address+0x51/0x90 [ 331.653560][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.653583][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 331.653607][ C1] ? krealloc_noprof+0x8d/0x130 [ 331.653631][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 331.653683][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 331.653718][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 331.653744][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 331.653766][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 331.653783][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 331.653809][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 331.653855][ C1] ? __asan_memset+0x39/0x50 [ 331.653877][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 331.653922][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 331.653947][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 331.653993][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654015][ C1] ? mutex_unlock+0x90/0x240 [ 331.654034][ C1] ? avc_has_perm_noaudit+0x220/0x360 [ 331.654059][ C1] ? avc_has_perm+0x1ec/0x240 [ 331.654082][ C1] ? avc_has_perm+0x211/0x240 [ 331.654107][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 331.654129][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 331.654151][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654174][ C1] ? _raw_spin_lock+0x92/0x120 [ 331.654198][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 331.654217][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 331.654250][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 331.654284][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654306][ C1] ? _raw_spin_lock+0x92/0x120 [ 331.654329][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.654353][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 331.654379][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.654402][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 331.654438][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 331.654509][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 331.654532][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 331.654563][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.654586][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 331.654617][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 331.654648][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 331.654685][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 331.654715][ C1] ? desc_read+0x202/0x3e0 [ 331.654732][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654754][ C1] ? desc_read+0x1ab/0x3e0 [ 331.654771][ C1] ? prb_first_seq+0x109/0x1d0 [ 331.654788][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 331.654805][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654827][ C1] ? desc_read+0x1ab/0x3e0 [ 331.654844][ C1] ? __kasan_check_read+0x15/0x20 [ 331.654866][ C1] ? this_cpu_in_panic+0x56/0x90 [ 331.654884][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 331.654903][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.654925][ C1] ? prb_read_valid+0x80/0x80 [ 331.654943][ C1] ? data_alloc+0x4d0/0x7e0 [ 331.654960][ C1] ? desc_read+0x202/0x3e0 [ 331.654977][ C1] ? __kasan_check_write+0x18/0x20 [ 331.654998][ C1] ? desc_read+0x1ab/0x3e0 [ 331.655015][ C1] ? prb_first_seq+0x109/0x1d0 [ 331.655032][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 331.655049][ C1] ? __kasan_check_write+0x18/0x20 [ 331.655070][ C1] ? desc_read+0x1ab/0x3e0 [ 331.655087][ C1] ? __kasan_check_read+0x15/0x20 [ 331.655110][ C1] ? this_cpu_in_panic+0x56/0x90 [ 331.655127][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 331.655145][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 331.655170][ C1] ? __kasan_check_write+0x18/0x20 [ 331.655192][ C1] ? _raw_spin_lock+0x92/0x120 [ 331.655215][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 331.655238][ C1] ? prb_read_valid+0x80/0x80 [ 331.655254][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.655279][ C1] ? _raw_spin_unlock+0x45/0x60 [ 331.655303][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 331.655323][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 331.655349][ C1] ? put_dec+0xd7/0xf0 [ 331.655372][ C1] ? move_right+0x8e/0xb0 [ 331.655395][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 331.655421][ C1] ? format_decode+0x1bb/0x1610 [ 331.655444][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 331.655467][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.655489][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 331.655513][ C1] ? __kasan_check_write+0x18/0x20 [ 331.655535][ C1] ? desc_read+0x1ab/0x3e0 [ 331.655552][ C1] ? prb_first_seq+0x109/0x1d0 [ 331.655570][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 331.655587][ C1] ? __kasan_check_write+0x18/0x20 [ 331.655609][ C1] ? desc_read+0x1ab/0x3e0 [ 331.655625][ C1] ? __kasan_check_read+0x15/0x20 [ 331.655647][ C1] ? this_cpu_in_panic+0x56/0x90 [ 331.655671][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 331.655689][ C1] ? record_print_text+0x290/0x450 [ 331.655713][ C1] ? update_curr+0xf8/0x9e0 [ 331.655737][ C1] ? xfd_validate_state+0x68/0x140 [ 331.655759][ C1] ? __kasan_check_read+0x15/0x20 [ 331.655782][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 331.655804][ C1] ? __asan_memcpy+0x5a/0x80 [ 331.655827][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 331.655850][ C1] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 331.655868][ C1] ? psi_task_switch+0xad/0xa10 [ 331.655890][ C1] ? _raw_spin_unlock+0x45/0x60 [ 331.655915][ C1] ? finish_task_switch+0x139/0x760 [ 331.655936][ C1] ? __switch_to_asm+0x3d/0x70 [ 331.655960][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 331.655982][ C1] ? __schedule+0x13a1/0x1fa0 [ 331.656000][ C1] ? __sched_text_start+0x10/0x10 [ 331.656017][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.656043][ C1] ? up+0x10a/0x1b0 [ 331.656063][ C1] ? __cfi_up+0x10/0x10 [ 331.656086][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 331.656109][ C1] ? update_curr+0xf8/0x9e0 [ 331.656133][ C1] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 331.656160][ C1] ? __enqueue_entity+0x58a/0x630 [ 331.656190][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 331.656213][ C1] ? kernel_text_address+0xa9/0xe0 [ 331.656235][ C1] ? __kernel_text_address+0x11/0x40 [ 331.656256][ C1] ? unwind_get_return_address+0x51/0x90 [ 331.656276][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 331.656294][ C1] ? arch_stack_walk+0x10a/0x170 [ 331.656320][ C1] ? stack_trace_save+0xaa/0x100 [ 331.656339][ C1] ? stack_depot_save_flags+0x38/0x800 [ 331.656364][ C1] ? audit_log_end+0x1f1/0x240 [ 331.656388][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 331.656413][ C1] ? slow_avc_audit+0x19f/0x220 [ 331.656437][ C1] ? avc_has_extended_perms+0x8e1/0xe70 [ 331.656462][ C1] ? ioctl_has_perm+0x39a/0x500 [ 331.656484][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 331.656505][ C1] ? security_file_ioctl+0x87/0x110 [ 331.656526][ C1] ? __se_sys_ioctl+0x53/0x1b0 [ 331.656542][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 331.656559][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 331.656584][ C1] ? do_syscall_64+0x57/0xf0 [ 331.656607][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.656638][ C1] ? __kasan_slab_free+0x6a/0x80 [ 331.656663][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 331.656686][ C1] ? __wake_up+0x169/0x190 [ 331.656702][ C1] ? audit_log_end+0x1f1/0x240 [ 331.656727][ C1] ? audit_log_end+0x1f1/0x240 [ 331.656751][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 331.656776][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 331.656799][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 331.656824][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 331.656849][ C1] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 331.656870][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 331.656898][ C1] ? slow_avc_audit+0x19f/0x220 [ 331.656922][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 331.656947][ C1] ? avc_denied+0x112/0x180 [ 331.656972][ C1] ? avc_has_extended_perms+0x8e1/0xe70 [ 331.656997][ C1] ? avc_has_extended_perms+0x962/0xe70 [ 331.657024][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 331.657045][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 331.657062][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 331.657080][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 331.657099][ C1] ? try_to_wake_up+0xf9e/0x1db0 [ 331.657118][ C1] ? ____sys_sendmsg+0x7cb/0xae0 [ 331.657142][ C1] ? irqentry_exit+0x4a/0x60 [ 331.657163][ C1] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 331.657186][ C1] ? ioctl_has_perm+0x39a/0x500 [ 331.657208][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 331.657232][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 331.657254][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 331.657277][ C1] ? do_futex+0x37d/0x510 [ 331.657298][ C1] ? __cfi_do_futex+0x10/0x10 [ 331.657320][ C1] ? __fget_files+0x2c5/0x340 [ 331.657338][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 331.657356][ C1] ? security_file_ioctl+0x3e/0x110 [ 331.657377][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 331.657399][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 331.657417][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 331.657434][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 331.657458][ C1] ? do_syscall_64+0x57/0xf0 [ 331.657482][ C1] ? clear_bhb_loop+0x50/0xa0 [ 331.657500][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.657526][ C1] [ 331.657534][ C1] Modules linked in: [ 331.657547][ C1] ---[ end trace 0000000000000000 ]--- [ 331.657557][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 331.657601][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 331.657616][ C1] RSP: 0018:ffffc90010637ec0 EFLAGS: 00010286 [ 331.657632][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc90010638230 [ 331.657646][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 331.657665][ C1] RBP: ffffc90010638190 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 331.657680][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: 0000000000000680 [ 331.657693][ C1] R13: dffffc0000000000 R14: 1ffff920020c7038 R15: ffffc90010638230 [ 331.657708][ C1] FS: 00007f65c61e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 331.657725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.657739][ C1] CR2: ffffc90010637eb8 CR3: 000000011ccc8000 CR4: 00000000003526b0 [ 331.657757][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 331.657770][ C1] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.657785][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 331.667325][ C1] Kernel Offset: disabled