last executing test programs: 1m17.327089654s ago: executing program 3 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x3e, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0x3, 0x7, 0x100005, 0x79, 0x3, 0x2, 0xfffffffffffffffd], 0x3332d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x0, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.031265471s ago: executing program 3 (id=1231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000002000000000000000000000000000000000000000004e21000300000000020000202f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000500000000000000000000000000000044010500"], 0x1fc}}, 0x0) 1m16.875544883s ago: executing program 3 (id=1234): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) 1m16.814501315s ago: executing program 3 (id=1237): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000040180c200000ebbbbbbbbbbbb08004500002000684000032f907800001fe1e0000001a0004e21000c90780109000080842f9858a0aba96ec0eb36183bf2fa4a38d0884cea83b4c1e7dd8a15c461e60afc353e2a00ba5bc58765fd854e8f65aa21cff535b4bd6e902925f0037b7302e8d9fe5e973f91afa83d18780f01ddd7ee854a48ced613a888b8d9167f5b04939c7c8b23973cf7e71a6e684bb92285c8e6a3b2fac582373b0c7b1767b8f4866bc21d03c273e4e45f6d9a2de39f10876d3099ed"], 0x32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f0000000440)={0x84a00000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x20, 0x0, 0x0}, 0x58) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000001840)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xffffffffffffff48}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0x4004e502, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x53, 0x86, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x8, 0x20, 0xe3e1, 0x20cfe}}) 1m16.147491279s ago: executing program 3 (id=1249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x3e, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0x3, 0x7, 0x100005, 0x79, 0x3, 0x2, 0xfffffffffffffffd], 0x3332d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x0, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.014223732s ago: executing program 3 (id=1251): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0) 1m15.835377006s ago: executing program 32 (id=1251): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0) 8.079888087s ago: executing program 0 (id=2007): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async, rerun: 32) sendfile(r1, r0, &(0x7f0000000100)=0xfffffffffffffffd, 0x80) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) write$UHID_DESTROY(r5, &(0x7f0000000000), 0x4) (async) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000b80)=""/147, 0x93}], 0x1) read$FUSE(r1, &(0x7f0000005d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@empty, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4f}, {0x1, 0x1000000000, 0x800, 0xffffffffffffffff, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x404d3, 0x32}, 0x0, @in6=@private1, 0x0, 0x2}}, 0xe8) (rerun: 32) fcntl$setlease(r4, 0x400, 0x0) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004"], 0x21c}}, 0x8840) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES32=r6, @ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c9}, 0x400284d) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r9, 0x0, 0x7000, 0x200, 0x0) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64) write$FUSE_LSEEK(r1, &(0x7f0000007d40)={0x18, 0x0, r6, {0x7}}, 0x18) r10 = socket(0x22, 0x803, 0x0) setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000040)=0x801, 0x4) (async) sendto(r10, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r10, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xe06b}], 0x1, 0x10002, 0x0) (rerun: 32) 4.887248645s ago: executing program 0 (id=2024): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x6) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xc100092e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x8000, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000600)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd70"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x8000000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x60d3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500200000010732b340040000102030109028e000301004000080b000201032005090400000001012000092401ffff011500030c2403020404fc02030700ff0904010000010220000904010101010220000924020104f9eb040710240102f1010000000003e20700000409050109000206ff0f0825"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 2.059211946s ago: executing program 1 (id=2052): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x1, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000540)="a73c4189570497069fb3ed19cd33", 0xe, 0xab) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x2}}, 0x10, 0x0}, 0x81) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c00"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 2.017427257s ago: executing program 1 (id=2053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) (async) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) truncate(&(0x7f00000000c0)='./file0/file2\x00', 0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.965453278s ago: executing program 1 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x4000000000000000) 1.86335079s ago: executing program 1 (id=2056): r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x2, 0x0, @pic={0x1, 0x3, 0x1, 0xff, 0x6, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2, 0x6, 0xff, 0x7, 0x7, 0x7}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000480)={&(0x7f0000000440)=[{0x1, 0x0, 0xe, 0x9, 0x0, 0x3, 0xffffffffffff5b55, 0x8000}], 0x1, 0x38, 0x1, 0x6}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x3, 0x2, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.768709142s ago: executing program 0 (id=2057): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfff8, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3a}, @fda={0x66646185, 0x9, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.554221467s ago: executing program 0 (id=2058): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) 1.467518969s ago: executing program 1 (id=2060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1000000, 0x28, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3a}, @fda={0x66646185, 0x9, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.414366569s ago: executing program 4 (id=2061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc02000000000000000000000000002b000000000000000000000000000000004e21000300000000020000202f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000500000000000000000000000000000044010500fc0200000000000000000000000000010000000032"], 0x1fc}}, 0x0) 1.3990807s ago: executing program 0 (id=2062): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f000000cdc0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="8c", 0x1}], 0x1}}], 0x1, 0x8000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)="89e7ee0c", 0x4}, {0x0}], 0x2) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1.244962093s ago: executing program 1 (id=2063): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) fchmod(0xffffffffffffffff, 0x21) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0xeb, 0x2, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xe1, 0x8, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x54, 0x97, 0x4, 0x20, 0x86}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0xa, [{0x31, &(0x7f0000000100)=@string={0x31, 0x3, "dbef5dc7b05cc2f2a73297d437a2e2b3c7868fad20ceeb0490646dca0c39aff1c1ef57cc0279b0297f51e9fa845aff"}}, {0xf9, &(0x7f0000000140)=@string={0xf9, 0x3, "a8b061f0466bf9031da960b7dacc847bf11597f0824856289bf4fe1fb7678ba7a349b43f0b6ef1cf25cb5eb7b257d2aa96525f93fa6d0d9a6130f3a2eff25eb8726b62b6afbf6456c21796610648fd3caf0d048a5959701202e07744fb40d470a2437528fbe4638fa7b1bfc6930377738d918e21871453cf39a9e7da23732f1ba0c5170ff31db08953c23119f137244a93fc151dbd826d44d5c46c593b3e453b8a2844a997653e9baf85a42bc3be15185a25e9837beab07fb5a1aef2289e7b8d069f1ce820d66c23ffa1fcbd65f7add411733358affa098d13e05913bcebd765ea9a2809f9f358a99aadffbba9a0e84b32bfdef923e9a0"}}, {0xf, &(0x7f0000000240)=@string={0xf, 0x3, "216835c3ae631059ba14fca226"}}, {0x32, &(0x7f0000000280)=@string={0x32, 0x3, "27fae2f5f59dd7d53ace3f531642ada27922fdf5f0989462a866990f8f6f9dd5ab2e0640ae3e1653ae9ed328bc64cc6d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1406}}, {0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "4003cc96d908d454700a48d2b87118c9a77aae8dd9caf7054934edf6eadb1eceb2845795aa6ad3a87506e27514319bbe91aa276a05e6595d9a582382d222d6ca5d9f3cd599a8a7b1a7eae3ea142b107a99405e18c0bc6c61"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x419}}, {0xc1, &(0x7f0000000440)=@string={0xc1, 0x3, "0529c39811e52c797565911ccebd566d4dcc9ffc10b2ad766d628ff8e5014141495d96c9753a5fc35e16af4a7d51e57b6dcc52db828f57984bb32ee0c2226b242283b3e1bd468e0c41088b3e15996abce7ef7dee8e15b1245d579c2fb62eb503d954357e798badf1320b6a2a7ec0e898ca2b37df087cc356f52c83ccfdf1443ea3841ebbd882197d54243a583df49f124b23faa4d978bb6054c31b00f490a7fe0f62432175f791e3a1d9ecfb5d69a8f4611fcf15a28cf8825f91f0d837ab2a"}}]}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 1.244727443s ago: executing program 4 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x5f00000000000000) 1.184118105s ago: executing program 4 (id=2065): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000280)={0x3, 0x7}) wait4(r4, &(0x7f0000000180), 0x2, &(0x7f00000001c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r8}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x4b29, 0x7, 0xa14, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000006200)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)={0x90, 0x0, 0x7fff, {0x40000004, 0x0, 0x8, 0x0, 0x80000000, 0x3, {0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xdc9e, 0x7, 0x7, 0x1, 0x652, 0x4000, 0xda, r11, r12, 0x4, 0xffff2eae}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@empty, @in6=@loopback, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x0, 0x0, r8, r11}, {0x2, 0xfffffffffffffff9, 0x80, 0x2, 0x2, 0xb, 0x80, 0x8001}, {0x10001, 0x47e, 0x1, 0x7fffffffffffffff}, 0x3, 0x6e6bb6, 0x2, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x2b}, 0x2, @in=@local, 0x3501, 0x2, 0x3, 0x10, 0xa, 0x400, 0x9}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r2, 0x0, 0x2) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000340)={0xb890200, 0x0, 0x0, 0x0, {0x213}, 0x0, 0x0, 0x0, 0x0, 0xffffff2d, {r13}}, 0xfffffffffffffd18) 1.130931896s ago: executing program 4 (id=2066): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 1.035333207s ago: executing program 4 (id=2067): socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0xf3b, 0x0, 0x4, 0x100}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000040)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) readv(r9, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x9, 0xc}}]}) recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x0, 0xffffffff}}]}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 475.54272ms ago: executing program 2 (id=2069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000000000000003300000000000000000000004e21000300000000020000202f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000500000000000000000000000000000044010500"], 0x1fc}}, 0x0) 385.867202ms ago: executing program 2 (id=2070): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) 241.646305ms ago: executing program 2 (id=2071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000032000000000000000000000000000000004e21000300000000020000202f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000500000000000000000000000000000044010500fc0200000000000000000000000000010000000032"], 0x1fc}}, 0x0) 184.679086ms ago: executing program 2 (id=2072): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x2, @mcast1, 0x25}, 0x7) process_vm_readv(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x844) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xd) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x0, 0x0, 0x7}, 0x4}}, 0x18) pwrite64(r5, &(0x7f0000000100)="a6d4f1c3b514857b165cb2332f6a0b4e1179150ebf8c2bee04477303e12b46a3b9f58cdedbec8c3e303bbb8573181260620a068f61f5acc38fc8794056e571b19c9eb9756cfe0c12a620a50ebb0958ac3719beeddc1ea091d0187296e2", 0x5d, 0x6) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_clone(0x5b1e8700, 0x0, 0x24, 0x0, 0x0, 0x0) 99.494638ms ago: executing program 2 (id=2073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000000, 0x28, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3a}, @fda={0x66646185, 0x9, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 99.010838ms ago: executing program 4 (id=2074): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) (async) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1679, 0x10, 0x1, 0x358, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f17, 0x2000, 0x0, 0x3b7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a1e, 0x4000, 0x0, 0x3be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x45a0, 0x1000, 0x2, 0x104, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb18, 0x0, 0x1, 0x42, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r6, '\x00', {0x2, 0xea2, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1679, 0x10, 0x1, 0x358, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f17, 0x2000, 0x0, 0x3b7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a1e, 0x4000, 0x0, 0x3be}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x45a0, 0x1000, 0x2, 0x104, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb18, 0x0, 0x1, 0x42, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r6, '\x00', {0x2, 0xea2, 0x0, 0x0}}, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_ublk_add_dev(r1, r2, r3, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0x8d4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x81}}}, &(0x7f00000003c0)) (async) syz_ublk_add_dev(r1, r2, r3, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0x8d4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x81}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r8, r11, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) (async) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_SET_TSC_KHZ_vm(r14, 0xaea2, 0x4) (async) ioctl$KVM_SET_TSC_KHZ_vm(r14, 0xaea2, 0x4) pread64$ublk_ch(r13, &(0x7f0000000dc0)=@buf_max_buf, 0x1000, 0x27) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000116000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x8, 0x2000008, 0x13, r12, 0x34d1f4ed) 11.39964ms ago: executing program 0 (id=2075): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000100)) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 0s ago: executing program 2 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x1, 0x0, 0x5fa, 0x4, 0xd, "0100c90040ec5d7d257100004000"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) kernel console output (not intermixed with test programs): it: type=1400 audit(1785918808.269:17309): avc: denied { ioctl } for pid=4808 comm="syz.4.1668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.880160][ T36] audit: type=1400 audit(1785918808.289:17310): avc: denied { read } for pid=4812 comm="syz.0.1669" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.902983][ T36] audit: type=1400 audit(1785918808.289:17311): avc: denied { read open } for pid=4812 comm="syz.0.1669" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.911741][ T63] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.926690][ T36] audit: type=1400 audit(1785918808.289:17312): avc: denied { ioctl } for pid=4812 comm="syz.0.1669" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.958783][ T45] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 194.960205][ T36] audit: type=1400 audit(1785918808.349:17313): avc: denied { ioctl } for pid=4808 comm="syz.4.1668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.983695][ T45] usb 2-1: device descriptor read/8, error -71 [ 195.015581][ T36] audit: type=1400 audit(1785918808.369:17314): avc: denied { ioctl } for pid=4776 comm="syz.1.1654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.041728][ T36] audit: type=1400 audit(1785918808.429:17315): avc: denied { ioctl } for pid=4808 comm="syz.4.1668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.096723][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.106829][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.121697][ T63] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.134061][ T45] usb 2-1: device descriptor read/8, error -71 [ 195.136238][ T63] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 195.153440][ T63] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 195.166794][ T63] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.177745][ T63] usb 5-1: config 1 interface 1 has no altsetting 0 [ 195.189016][ T63] usb 5-1: string descriptor 0 read error: -22 [ 195.195235][ T63] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 195.204314][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.251933][ T348] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 195.381740][ T45] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 195.391678][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 195.401681][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 195.409604][ T45] usb 2-1: device descriptor read/8, error -71 [ 195.415831][ T348] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 195.424048][ T348] usb 1-1: config 0 has no interface number 0 [ 195.430145][ T348] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 195.443830][ T348] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 195.452910][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.460904][ T348] usb 1-1: Product: syz [ 195.465094][ T348] usb 1-1: Manufacturer: syz [ 195.469688][ T348] usb 1-1: SerialNumber: syz [ 195.475838][ T348] usb 1-1: config 0 descriptor?? [ 195.482529][ T4815] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 195.541671][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 195.549221][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.560900][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.564331][ T45] usb 2-1: device descriptor read/8, error -71 [ 195.571479][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.589748][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.598883][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.608632][ T10] usb 3-1: config 0 descriptor?? [ 195.622331][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.638426][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.651986][ T63] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 195.670328][ T63] usb 5-1: USB disconnect, device number 20 [ 195.685904][ T45] usb usb2-port1: unable to enumerate USB device [ 195.692916][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.703853][ T4815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4815 comm=syz.0.1670 [ 196.036502][ T4820] UDC core: g1: couldn't find an available UDC or it's busy [ 196.053340][ T4820] loop7: detected capacity change from 0 to 16384 [ 196.083074][ T4820] loop7: detected capacity change from 16384 to 16383 [ 196.093189][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 196.099286][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.111958][ T10] usb 3-1: USB disconnect, device number 87 [ 196.261854][ T4827] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.261874][ T4827] rust_binder: Read failure Err(EFAULT) in pid:164 [ 196.294990][ T4827] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.305705][ T4827] rust_binder: Read failure Err(EFAULT) in pid:164 [ 196.316031][ T4827] rust_binder: Failure in copy_transaction_data: EINVAL [ 196.323214][ T4827] rust_binder: 4826:4827 transaction call to 4826:0 failed EINVAL, code 0 size 0-24 [ 196.341121][ T10] rust_binder: 4826: undelivered TRANSACTION_ERROR: 29201 [ 196.697353][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 196.884052][ T4839] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.884074][ T4839] rust_binder: Read failure Err(EFAULT) in pid:1097 [ 196.916212][ T4839] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.930481][ T4839] rust_binder: Read failure Err(EFAULT) in pid:1097 [ 197.200088][ T4844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.392328][ T4851] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 197.392351][ T4851] rust_binder: Read failure Err(EFAULT) in pid:1026 [ 197.405928][ T4851] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 197.412677][ T4851] rust_binder: Read failure Err(EFAULT) in pid:1026 [ 197.422837][ T4851] rust_binder: Failure in copy_transaction_data: EINVAL [ 197.429449][ T4851] rust_binder: 4850:4851 transaction call to 4850:0 failed EINVAL, code 0 size 0-24 [ 197.449002][ T63] rust_binder: 4850: undelivered TRANSACTION_ERROR: 29201 [ 197.581726][ T31] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 197.731686][ T63] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 197.734169][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.752303][ T31] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 197.761399][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.770998][ T31] usb 3-1: config 0 descriptor?? [ 197.778312][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 197.891682][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 197.900110][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.909524][ T63] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 197.920614][ T63] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.933712][ T63] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 197.942815][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.950801][ T63] usb 2-1: Product: syz [ 197.955015][ T63] usb 2-1: Manufacturer: syz [ 197.959608][ T63] usb 2-1: SerialNumber: syz [ 198.018493][ T348] asix 1-1:0.188: probe with driver asix failed with error -71 [ 198.040355][ T348] usb 1-1: USB disconnect, device number 68 [ 198.065530][ T4858] tipc: Started in network mode [ 198.070476][ T4858] tipc: Node identity , cluster identity 4711 [ 198.110311][ T4860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.110336][ T4860] rust_binder: Read failure Err(EFAULT) in pid:752 [ 198.122925][ T4860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.129705][ T4860] rust_binder: Read failure Err(EFAULT) in pid:752 [ 198.178618][ T4856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.193869][ T4856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.204563][ T63] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 198.221945][ T63] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 198.246395][ T63] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 198.265290][ T63] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 198.321316][ T63] usb 2-1: USB disconnect, device number 98 [ 198.419928][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.604203][ T4875] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.604228][ T4875] rust_binder: Read failure Err(EFAULT) in pid:760 [ 198.616680][ T4875] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.625818][ T4875] rust_binder: Read failure Err(EFAULT) in pid:760 [ 198.784888][ T4884] tipc: Cannot configure node identity twice [ 198.855336][ T4886] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.855358][ T4886] rust_binder: Read failure Err(EFAULT) in pid:1032 [ 198.884383][ T4886] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.903081][ T4886] rust_binder: Read failure Err(EFAULT) in pid:1032 [ 199.162425][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 199.647891][ T4901] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.647914][ T4901] rust_binder: Read failure Err(EFAULT) in pid:766 [ 199.674953][ T4901] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.682200][ T4904] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.690333][ T4901] rust_binder: Read failure Err(EFAULT) in pid:766 [ 199.692554][ T4905] tipc: Started in network mode [ 199.699825][ T4904] rust_binder: Read failure Err(EFAULT) in pid:1041 [ 199.711184][ T4901] rust_binder: 4900:4901 FDA parent offset not aligned correctly [ 199.721660][ T4905] tipc: Node identity , cluster identity 4711 [ 199.745688][ T4901] rust_binder: 4900:4901 error while translating object: EINVAL [ 199.761476][ T4904] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.761498][ T4904] rust_binder: Read failure Err(EFAULT) in pid:1041 [ 199.771778][ T4901] rust_binder: Failure in copy_transaction_data: EINVAL [ 199.779703][ T4901] rust_binder: 4900:4901 transaction call to 4900:0 failed EINVAL, code 0 size 112-24 [ 199.801692][ T36] kauditd_printk_skb: 1809 callbacks suppressed [ 199.801709][ T36] audit: type=1400 audit(1785918813.289:19125): avc: denied { ioctl } for pid=4902 comm="syz.1.1701" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 199.825048][ T31] rust_binder: 4900: undelivered TRANSACTION_ERROR: 29201 [ 199.866702][ T36] audit: type=1400 audit(1785918813.289:19126): avc: denied { call } for pid=4902 comm="syz.1.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 199.895784][ T36] audit: type=1400 audit(1785918813.329:19127): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.910401][ T4910] overlayfs: failed to resolve './file1': -2 [ 199.919969][ T36] audit: type=1400 audit(1785918813.329:19128): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.955673][ T36] audit: type=1400 audit(1785918813.329:19129): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.993562][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 200.010480][ T36] audit: type=1400 audit(1785918813.339:19130): avc: denied { create } for pid=4907 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.035863][ T36] audit: type=1400 audit(1785918813.349:19131): avc: denied { write } for pid=4907 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.059130][ T36] audit: type=1400 audit(1785918813.349:19132): avc: denied { nlmsg_write } for pid=4907 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.121676][ T36] audit: type=1400 audit(1785918813.389:19133): avc: denied { read write } for pid=2098 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.191683][ T36] audit: type=1400 audit(1785918813.389:19134): avc: denied { read write open } for pid=2098 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.331441][ T31] usb 3-1: USB disconnect, device number 88 [ 200.411078][ T4932] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.411102][ T4932] rust_binder: Read failure Err(EFAULT) in pid:1107 [ 200.447120][ T4934] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.447480][ T4932] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.466843][ T4934] rust_binder: Read failure Err(EFAULT) in pid:774 [ 200.474864][ T4932] rust_binder: Read failure Err(EFAULT) in pid:1107 [ 200.482023][ T4936] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.488625][ T4936] rust_binder: Read failure Err(EFAULT) in pid:1053 [ 200.508614][ T4934] rust_binder: 4933:4934 got reply transaction with no transaction stack [ 200.527509][ T4936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.527923][ T4936] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.535548][ T4936] rust_binder: Read failure Err(EFAULT) in pid:1053 [ 200.544516][ T4934] rust_binder: 4933:4934 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 200.561287][ T4939] overlayfs: failed to resolve './file1': -2 [ 200.572133][ T4936] rust_binder: 4935:4936 got transaction to invalid handle 1 [ 200.579527][ T4936] rust_binder: 4935:4936 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 200.609347][ T4938] rust_binder: Failure in copy_transaction_data: EINVAL [ 200.609381][ T4938] rust_binder: 4933:4938 transaction call to 4933:0 failed EINVAL, code 0 size 40-24 [ 200.646422][ T348] rust_binder: 4935: undelivered TRANSACTION_ERROR: 29201 [ 200.715383][ T31] rust_binder: 4933: undelivered TRANSACTION_ERROR: 29201 [ 200.722600][ T31] rust_binder: 4933: undelivered TRANSACTION_ERROR: 29201 [ 200.753227][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 200.771985][ T4945] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.772008][ T4945] rust_binder: Read failure Err(EFAULT) in pid:1055 [ 200.800932][ T4945] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.841714][ T4945] rust_binder: Read failure Err(EFAULT) in pid:1055 [ 201.051673][ T31] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 201.162336][ T4961] overlayfs: failed to resolve './file1': -2 [ 201.228663][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 201.241675][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.270759][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 201.285763][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.297713][ T31] usb 1-1: config 0 descriptor?? [ 201.310764][ T4949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.501689][ T381] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 201.541687][ T63] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 201.655190][ T381] usb 2-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 201.671697][ T381] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.681512][ T381] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 201.703148][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 201.710259][ T381] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 201.729922][ T63] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 201.732493][ T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.747764][ T381] usb 2-1: Product: syz [ 201.751677][ T63] usb 3-1: config 0 has no interface number 0 [ 201.752976][ T381] usb 2-1: Manufacturer: syz [ 201.758001][ T63] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 201.774368][ T381] usb 2-1: SerialNumber: syz [ 201.785576][ T381] usb-storage 2-1:1.0: USB Mass Storage device detected [ 201.793661][ T63] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 201.814254][ T381] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 201.821672][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.830066][ T63] usb 3-1: Product: syz [ 201.837381][ T381] scsi host1: usb-storage 2-1:1.0 [ 201.841668][ T63] usb 3-1: Manufacturer: syz [ 201.861703][ T63] usb 3-1: SerialNumber: syz [ 201.868289][ T63] usb 3-1: config 0 descriptor?? [ 201.876247][ T4964] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 201.933035][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.951998][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.966640][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 201.981779][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.000374][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.008191][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.015097][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.021675][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 202.021941][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.036304][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.043263][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.050119][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.056973][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.063876][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.070681][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.077557][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.084432][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.091339][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.098174][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.105056][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.111973][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.117054][ T4964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4964 comm=syz.2.1727 [ 202.118870][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.138619][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.146535][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.154223][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.157740][ T63] asix 3-1:0.188: probe with driver asix failed with error -71 [ 202.164428][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.182120][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.191948][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 202.197281][ T63] usb 3-1: USB disconnect, device number 89 [ 202.204086][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.213376][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 202.222410][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.234181][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 202.244004][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.252137][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.273454][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.276626][ T9] usb 5-1: Product: syz [ 202.288195][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.291750][ T9] usb 5-1: Manufacturer: syz [ 202.298544][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.306421][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.309719][ T9] usb 5-1: SerialNumber: syz [ 202.313264][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.321070][ T4968] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 202.335239][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.342150][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.349953][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.356851][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.363756][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.370655][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.377507][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.384387][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.391383][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.398266][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.405093][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.412062][ T31] kone 0003:1E7D:2CED.0011: unknown main item tag 0x0 [ 202.437718][ T31] kone 0003:1E7D:2CED.0011: hidraw0: USB HID v80.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 202.464633][ T31] usb 1-1: USB disconnect, device number 69 [ 202.504730][ T4972] fido_id[4972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 202.559604][ T4968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.568175][ T4968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.581217][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 202.598877][ T9] usb 5-1: USB disconnect, device number 21 [ 202.713687][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.779729][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 202.857509][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 202.952751][ T4979] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.952786][ T4979] rust_binder: Read failure Err(EFAULT) in pid:1117 [ 202.981728][ T4979] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.994944][ T4979] rust_binder: Read failure Err(EFAULT) in pid:1117 [ 203.016765][ T4979] rust_binder: Failure in copy_transaction_data: EINVAL [ 203.031683][ T4979] rust_binder: 4978:4979 transaction call to 4978:0 failed EINVAL, code 0 size 40-24 [ 203.062077][ T2985] rust_binder: 4978: undelivered TRANSACTION_ERROR: 29201 [ 203.282168][ T4986] overlayfs: failed to resolve './file0': -2 [ 203.407301][ T31] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 203.564764][ T4992] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 203.564791][ T4992] rust_binder: Read failure Err(EFAULT) in pid:224 [ 203.595594][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.596198][ T4992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.603711][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 203.622958][ T4992] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 203.623963][ T4992] rust_binder: Read failure Err(EFAULT) in pid:224 [ 203.627502][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.643003][ T4992] rust_binder: 4991:4992 got transaction to invalid handle 1 [ 203.650260][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.665644][ T4992] rust_binder: 4991:4992 transaction call to 0:0 failed ENOENT, code 0 size 65528-24 [ 203.669708][ T31] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 203.694047][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.703062][ T2985] rust_binder: 4991: undelivered TRANSACTION_ERROR: 29201 [ 203.740919][ T31] usb 3-1: Product: syz [ 203.750470][ T31] usb 3-1: Manufacturer: syz [ 203.761376][ T31] usb 3-1: SerialNumber: syz [ 203.919604][ T5002] syzkaller0: refused to change device tx_queue_len [ 204.029808][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.041505][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.057509][ T9] usb 2-1: USB disconnect, device number 99 [ 204.090517][ T31] usb 3-1: unit 14 not found! [ 204.129789][ T31] usb 3-1: USB disconnect, device number 90 [ 204.496127][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.689335][ T5048] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1766'. [ 204.811784][ T36] kauditd_printk_skb: 769 callbacks suppressed [ 204.811801][ T36] audit: type=1400 audit(1785918818.309:19892): avc: denied { read } for pid=5055 comm="syz.2.1771" dev="nsfs" ino=4026532470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.861129][ T36] audit: type=1400 audit(1785918818.309:19893): avc: denied { create } for pid=5054 comm="syz.1.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.911680][ T36] audit: type=1400 audit(1785918818.309:19894): avc: denied { write } for pid=5054 comm="syz.1.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.971708][ T36] audit: type=1400 audit(1785918818.319:19895): avc: denied { read write } for pid=3745 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.014667][ T5074] tipc: Started in network mode [ 205.019547][ T5074] tipc: Node identity , cluster identity 4711 [ 205.041701][ T36] audit: type=1400 audit(1785918818.319:19896): avc: denied { read write open } for pid=3745 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.078013][ T5078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.085820][ T5082] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.090917][ T36] audit: type=1400 audit(1785918818.319:19897): avc: denied { ioctl } for pid=3745 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.094738][ T5082] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 205.131718][ T5078] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 205.149652][ T5085] rust_binder: 5079:5085 no such ref 0 [ 205.157744][ T5085] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 205.157776][ T5085] rust_binder: Read failure Err(EFAULT) in pid:806 [ 205.176366][ T5082] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 205.183003][ T5082] rust_binder: Read failure Err(EFAULT) in pid:806 [ 205.197347][ T5082] rust_binder: 5079:5082 got transaction to invalid handle 1 [ 205.241673][ T5082] rust_binder: 5079:5082 transaction call to 0:0 failed ENOENT, code 0 size 65528-24 [ 205.263564][ T31] rust_binder: 5079: undelivered TRANSACTION_ERROR: 29201 [ 205.271665][ T45] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 205.451695][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 205.481641][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.542714][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.571912][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 205.596284][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.621670][ T45] usb 2-1: SerialNumber: syz [ 205.642115][ T45] usb 2-1: cannot find UAC_HEADER [ 205.659601][ T5101] syzkaller1: entered promiscuous mode [ 205.675337][ T5101] syzkaller1: entered allmulticast mode [ 205.681190][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.781676][ T2985] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.931017][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.946789][ T2985] usb 5-1: device descriptor read/64, error -71 [ 205.955869][ T45] usb 2-1: USB disconnect, device number 100 [ 206.191675][ T2985] usb 5-1: device descriptor read/64, error -71 [ 206.250893][ T5117] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.250916][ T5117] rust_binder: Read failure Err(EFAULT) in pid:822 [ 206.273102][ T5117] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.289848][ T5117] rust_binder: Read failure Err(EFAULT) in pid:822 [ 206.431678][ T2985] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 206.510823][ T5128] FAULT_INJECTION: forcing a failure. [ 206.510823][ T5128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.541974][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: syz.1.1798 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 206.542009][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.542022][ T5128] Call Trace: [ 206.542029][ T5128] [ 206.542038][ T5128] __dump_stack+0x21/0x30 [ 206.542069][ T5128] dump_stack_lvl+0x140/0x1c0 [ 206.542089][ T5128] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.542113][ T5128] ? bpf_lsm_file_permission+0xd/0x20 [ 206.542138][ T5128] ? check_stack_object+0x10f/0x150 [ 206.542168][ T5128] dump_stack+0x19/0x20 [ 206.542188][ T5128] should_fail_ex+0x3c2/0x510 [ 206.542206][ T5128] should_fail+0xf/0x20 [ 206.542222][ T5128] should_fail_usercopy+0x1e/0x30 [ 206.542240][ T5128] _copy_from_user+0x20/0xa0 [ 206.542264][ T5128] __sys_bind+0x1f4/0x430 [ 206.542290][ T5128] ? __cfi___sys_bind+0x10/0x10 [ 206.542317][ T5128] ? __kasan_check_read+0x15/0x20 [ 206.542337][ T5128] __x64_sys_bind+0x7e/0x90 [ 206.542362][ T5128] x64_sys_call+0x1ffd/0x2ee0 [ 206.542380][ T5128] do_syscall_64+0x57/0xf0 [ 206.542402][ T5128] ? clear_bhb_loop+0x50/0xa0 [ 206.542427][ T5128] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.542452][ T5128] RIP: 0033:0x7fce96b9e019 [ 206.542468][ T5128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.542485][ T5128] RSP: 002b:00007fce979c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 206.542507][ T5128] RAX: ffffffffffffffda RBX: 00007fce96e25fa0 RCX: 00007fce96b9e019 [ 206.542523][ T5128] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 206.542536][ T5128] RBP: 00007fce979c6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.542549][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.542562][ T5128] R13: 00007fce96e26038 R14: 00007fce96e25fa0 R15: 00007ffe2cca1da8 [ 206.542579][ T5128] [ 206.711865][ T45] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 206.727837][ T2985] usb 5-1: device descriptor read/64, error -71 [ 206.871441][ T5134] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.871465][ T5134] rust_binder: Read failure Err(EFAULT) in pid:831 [ 206.929116][ T5138] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.939764][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 206.958734][ T5138] rust_binder: Read failure Err(EFAULT) in pid:1092 [ 206.965773][ T5138] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.978771][ T5138] rust_binder: Read failure Err(EFAULT) in pid:1092 [ 206.985588][ T5139] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 206.986876][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.993454][ T2985] usb 5-1: device descriptor read/64, error -71 [ 207.005378][ T5138] rust_binder: Write failure EINVAL in pid:1092 [ 207.028168][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 207.035655][ T5139] rust_binder: Read failure Err(EFAULT) in pid:831 [ 207.077884][ T45] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 207.102762][ T5140] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 207.102785][ T5140] rust_binder: Failure in copy_transaction_data: ENOSPC [ 207.119526][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.134813][ T5140] rust_binder: 5129:5140 transaction call to 5129:0 failed ENOSPC, code 0 size 65528-24 [ 207.145609][ T2985] usb usb5-port1: attempt power cycle [ 207.149601][ T45] usb 3-1: config 0 descriptor?? [ 207.274081][ T5146] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 207.274103][ T5146] rust_binder: Read failure Err(EFAULT) in pid:1098 [ 207.287315][ T5146] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 207.294779][ T5146] rust_binder: Read failure Err(EFAULT) in pid:1098 [ 207.424284][ T381] rust_binder: 5129: undelivered TRANSACTION_ERROR: 29201 [ 207.491732][ T2985] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 207.524043][ T2985] usb 5-1: device descriptor read/8, error -71 [ 207.536403][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 207.589993][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 207.601722][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 207.623388][ T45] usb 3-1: USB disconnect, device number 91 [ 207.660705][ T2985] usb 5-1: device descriptor read/8, error -71 [ 207.698896][ T5160] tipc: Cannot configure node identity twice [ 207.722282][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 207.799411][ T5167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 207.799435][ T5167] rust_binder: Read failure Err(EFAULT) in pid:1117 [ 207.812406][ T5167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 207.819072][ T5167] rust_binder: Read failure Err(EFAULT) in pid:1117 [ 207.829261][ T5167] rust_binder: 5166:5167 FDA parent offset not aligned correctly [ 207.844686][ T5167] rust_binder: 5166:5167 error while translating object: EINVAL [ 207.852919][ T5167] rust_binder: Failure in copy_transaction_data: EINVAL [ 207.852947][ T5167] rust_binder: 5166:5167 transaction call to 5166:0 failed EINVAL, code 0 size 112-24 [ 207.870215][ T45] rust_binder: 5166: undelivered TRANSACTION_ERROR: 29201 [ 207.891675][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 207.904056][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.915166][ T2985] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 207.926839][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.938215][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 207.948405][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.956472][ T9] usb 1-1: SerialNumber: syz [ 207.965159][ T9] usb 1-1: cannot find UAC_HEADER [ 207.971974][ T2985] usb 5-1: device descriptor read/8, error -71 [ 207.981129][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.022722][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.104889][ T2985] usb 5-1: device descriptor read/8, error -71 [ 208.130953][ T5172] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.130974][ T5172] rust_binder: Read failure Err(EFAULT) in pid:1151 [ 208.143563][ T5172] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.150464][ T5172] rust_binder: Read failure Err(EFAULT) in pid:1151 [ 208.216735][ T2985] usb usb5-port1: unable to enumerate USB device [ 208.234380][ T45] usb 1-1: USB disconnect, device number 70 [ 208.642293][ T5195] tipc: Started in network mode [ 208.647231][ T5195] tipc: Node identity , cluster identity 4711 [ 208.687419][ T5197] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.687442][ T5197] rust_binder: Read failure Err(EFAULT) in pid:277 [ 208.699450][ T5197] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.706197][ T5197] rust_binder: Read failure Err(EFAULT) in pid:277 [ 208.715457][ T5197] rust_binder: 5196:5197 FDA parent offset not aligned correctly [ 208.729734][ T5197] rust_binder: 5196:5197 error while translating object: EINVAL [ 208.740577][ T5197] rust_binder: Failure in copy_transaction_data: EINVAL [ 208.740607][ T5197] rust_binder: 5196:5197 transaction call to 5196:0 failed EINVAL, code 0 size 112-24 [ 208.759890][ T2985] rust_binder: 5196: undelivered TRANSACTION_ERROR: 29201 [ 208.834650][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 208.844176][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 208.968560][ T5210] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.968582][ T5210] rust_binder: Read failure Err(EFAULT) in pid:281 [ 208.971418][ T5211] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 208.994254][ T5211] rust_binder: Read failure Err(EFAULT) in pid:1124 [ 209.021700][ T5210] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 209.028754][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.033591][ T5210] rust_binder: Read failure Err(EFAULT) in pid:281 [ 209.072215][ T5211] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 209.078753][ T5211] rust_binder: Read failure Err(EFAULT) in pid:1124 [ 209.302330][ T5220] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 209.309186][ T5220] rust_binder: Read failure Err(EFAULT) in pid:1128 [ 209.323290][ T5220] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 209.330272][ T5220] rust_binder: Read failure Err(EFAULT) in pid:1128 [ 209.341122][ T5220] rust_binder: Failure in copy_transaction_data: EINVAL [ 209.348571][ T5220] rust_binder: 5219:5220 transaction call to 5219:0 failed EINVAL, code 0 size 40-24 [ 209.366659][ T45] rust_binder: 5219: undelivered TRANSACTION_ERROR: 29201 [ 209.371673][ T2985] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 209.543632][ T2985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.571688][ T2985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.581449][ T2985] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 209.591442][ T2985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.612056][ T2985] usb 5-1: config 0 descriptor?? [ 209.741994][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 209.822581][ T36] kauditd_printk_skb: 2461 callbacks suppressed [ 209.822599][ T36] audit: type=1400 audit(1785918823.319:22348): avc: denied { mounton } for pid=5229 comm="syz.2.1838" path="/450/bus" dev="tmpfs" ino=2406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.823082][ T5230] overlayfs: failed to resolve './file0': -2 [ 209.858302][ T36] audit: type=1400 audit(1785918823.349:22349): avc: denied { ioctl } for pid=5223 comm="syz.1.1835" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.891381][ T36] audit: type=1400 audit(1785918823.379:22350): avc: denied { read write } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.916248][ T36] audit: type=1400 audit(1785918823.379:22351): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.941311][ T36] audit: type=1400 audit(1785918823.389:22352): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.951471][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 209.974241][ T36] audit: type=1400 audit(1785918823.399:22353): avc: denied { read write } for pid=5231 comm="syz.2.1839" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 209.997707][ T36] audit: type=1400 audit(1785918823.399:22354): avc: denied { read write open } for pid=5231 comm="syz.2.1839" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 210.022757][ T36] audit: type=1400 audit(1785918823.409:22355): avc: denied { mounton } for pid=5231 comm="syz.2.1839" path="/451/file0" dev="tmpfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 210.023661][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.049273][ T36] audit: type=1400 audit(1785918823.409:22356): avc: denied { mount } for pid=5231 comm="syz.2.1839" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 210.063134][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.076147][ T36] audit: type=1400 audit(1785918823.409:22357): avc: denied { read write } for pid=5231 comm="syz.2.1839" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.089813][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.117629][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.125057][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.132496][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.139869][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.147333][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.154777][ T2985] steelseries 0003:1038:12B6.0012: unknown main item tag 0x0 [ 210.163384][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 210.172459][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.180441][ T10] usb 2-1: SerialNumber: syz [ 210.185244][ T2985] steelseries 0003:1038:12B6.0012: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 210.208275][ T10] usb 2-1: cannot find UAC_HEADER [ 210.222759][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.244362][ T2985] steelseries 0003:1038:12B6.0012: hid_hw_raw_request() failed with -71 [ 210.274245][ T2985] usb 5-1: USB disconnect, device number 26 [ 210.289571][ T5235] fido_id[5235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 210.377759][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.443185][ T5244] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 210.443208][ T5244] rust_binder: Read failure Err(EFAULT) in pid:850 [ 210.508469][ T5244] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 210.521691][ T5244] rust_binder: Read failure Err(EFAULT) in pid:850 [ 210.539181][ T45] usb 2-1: USB disconnect, device number 101 [ 210.563336][ T5244] rust_binder: 5243:5244 FDA parent offset not aligned correctly [ 210.571086][ T5244] rust_binder: 5243:5244 error while translating object: EINVAL [ 210.594214][ T5244] rust_binder: Failure in copy_transaction_data: EINVAL [ 210.594243][ T5244] rust_binder: 5243:5244 transaction call to 5243:0 failed EINVAL, code 0 size 112-24 [ 210.641276][ T2985] rust_binder: 5243: undelivered TRANSACTION_ERROR: 29201 [ 210.920621][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 211.172589][ T5276] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.172613][ T5276] rust_binder: Read failure Err(EFAULT) in pid:1175 [ 211.190650][ T5276] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.209621][ T5276] rust_binder: Read failure Err(EFAULT) in pid:1175 [ 211.238180][ T5276] rust_binder: 5275:5276 FDA parent offset not aligned correctly [ 211.267182][ T5276] rust_binder: 5275:5276 error while translating object: EINVAL [ 211.282354][ T5276] rust_binder: Failure in copy_transaction_data: EINVAL [ 211.282384][ T5276] rust_binder: 5275:5276 transaction call to 5275:0 failed EINVAL, code 0 size 112-24 [ 211.311812][ T381] rust_binder: 5275: undelivered TRANSACTION_ERROR: 29201 [ 211.410333][ T5281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.446293][ T5284] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.446315][ T5284] rust_binder: Read failure Err(EFAULT) in pid:1138 [ 211.464506][ T5284] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.471131][ T5284] rust_binder: Read failure Err(EFAULT) in pid:1138 [ 211.511757][ T2985] rust_binder: 5283: undelivered TRANSACTION_COMPLETE [ 211.537464][ T2985] rust_binder: 5283: undelivered TRANSACTION_ERROR: 29189 [ 211.843008][ T5298] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.843030][ T5298] rust_binder: Read failure Err(EFAULT) in pid:305 [ 211.855607][ T5298] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 211.862217][ T5298] rust_binder: Read failure Err(EFAULT) in pid:305 [ 211.933952][ T63] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 211.989468][ T5302] tipc: Started in network mode [ 212.001762][ T5302] tipc: Node identity , cluster identity 4711 [ 212.123632][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 212.134606][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.147480][ T63] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 212.156536][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.166054][ T63] usb 3-1: config 0 descriptor?? [ 212.172834][ T5292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.301717][ T381] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 212.453942][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.464861][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.474619][ T381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.487423][ T381] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 212.496476][ T381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.505981][ T381] usb 1-1: config 0 descriptor?? [ 212.592807][ T63] waltop 0003:172F:0501.0013: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0 [ 212.803329][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.821840][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.841293][ T5317] FAULT_INJECTION: forcing a failure. [ 212.841293][ T5317] name failslab, interval 1, probability 0, space 0, times 0 [ 212.845770][ T63] usb 3-1: USB disconnect, device number 92 [ 212.854815][ T5317] CPU: 1 UID: 0 PID: 5317 Comm: syz.4.1871 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 212.854846][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.854859][ T5317] Call Trace: [ 212.854865][ T5317] [ 212.854873][ T5317] __dump_stack+0x21/0x30 [ 212.854902][ T5317] dump_stack_lvl+0x140/0x1c0 [ 212.854928][ T5317] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.854954][ T5317] dump_stack+0x19/0x20 [ 212.854976][ T5317] should_fail_ex+0x3c2/0x510 [ 212.854996][ T5317] should_failslab+0xac/0x100 [ 212.855018][ T5317] kmem_cache_alloc_node_noprof+0x45/0x420 [ 212.855037][ T5317] ? dup_task_struct+0xc1/0xd80 [ 212.855066][ T5317] ? kasan_save_alloc_info+0x3a/0x50 [ 212.855092][ T5317] ? __kasan_kmalloc+0x96/0xb0 [ 212.855113][ T5317] ? __kmalloc_cache_noprof+0x23c/0x470 [ 212.855132][ T5317] dup_task_struct+0xc1/0xd80 [ 212.855153][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855170][ T5317] ? _raw_spin_lock_irq+0x93/0x120 [ 212.855192][ T5317] ? copy_process+0x3350/0x3350 [ 212.855213][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855231][ T5317] copy_process+0x57c/0x3350 [ 212.855254][ T5317] ? kasan_save_alloc_info+0x3a/0x50 [ 212.855280][ T5317] ? __cfi_copy_process+0x10/0x10 [ 212.855301][ T5317] ? __kmalloc_cache_noprof+0x23c/0x470 [ 212.855320][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855337][ T5317] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 212.855359][ T5317] vhost_task_create+0x1f7/0x3f0 [ 212.855378][ T5317] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 212.855400][ T5317] ? __cfi_vhost_task_create+0x10/0x10 [ 212.855420][ T5317] ? __cfi_vhost_task_fn+0x10/0x10 [ 212.855443][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855461][ T5317] ? mutex_lock+0x97/0x1d0 [ 212.855485][ T5317] ? __cfi_mutex_lock+0x10/0x10 [ 212.855508][ T5317] ? kernel_text_address+0xa9/0xe0 [ 212.855531][ T5317] kvm_mmu_post_init_vm+0x161/0x300 [ 212.855556][ T5317] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 212.855580][ T5317] ? xfd_validate_state+0x68/0x140 [ 212.855604][ T5317] ? save_fpregs_to_fpstate+0x19d/0x230 [ 212.855623][ T5317] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 212.855647][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855665][ T5317] ? __switch_to+0xc6b/0x1320 [ 212.855689][ T5317] ? __cfi_sched_clock_cpu+0x10/0x10 [ 212.855714][ T5317] ? ioctl_has_perm+0x1bc/0x500 [ 212.855731][ T5317] ? __asan_memcpy+0x5a/0x80 [ 212.855749][ T5317] ? ioctl_has_perm+0x408/0x500 [ 212.855766][ T5317] ? has_cap_mac_admin+0xd0/0xd0 [ 212.855783][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855800][ T5317] ? mutex_lock_killable+0x97/0x1d0 [ 212.855825][ T5317] ? __cfi_mutex_lock_killable+0x10/0x10 [ 212.855850][ T5317] kvm_vcpu_ioctl+0xa43/0x1000 [ 212.855869][ T5317] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 212.855886][ T5317] ? __cfi_vfs_write+0x10/0x10 [ 212.855905][ T5317] ? __kasan_check_write+0x18/0x20 [ 212.855922][ T5317] ? mutex_unlock+0x90/0x240 [ 212.855944][ T5317] ? __cfi_mutex_unlock+0x10/0x10 [ 212.855968][ T5317] ? preempt_schedule_irq+0xab/0x110 [ 212.855992][ T5317] ? bpf_lsm_file_ioctl+0xd/0x20 [ 212.856013][ T5317] ? security_file_ioctl+0x3e/0x110 [ 212.856038][ T5317] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 212.856055][ T5317] __se_sys_ioctl+0x132/0x1b0 [ 212.856084][ T5317] __x64_sys_ioctl+0x7f/0xa0 [ 212.856104][ T5317] x64_sys_call+0x1878/0x2ee0 [ 212.856121][ T5317] do_syscall_64+0x57/0xf0 [ 212.856141][ T5317] ? clear_bhb_loop+0x50/0xa0 [ 212.856164][ T5317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.856187][ T5317] RIP: 0033:0x7f08e579e019 [ 212.856203][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.856219][ T5317] RSP: 002b:00007f08e6621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.856240][ T5317] RAX: ffffffffffffffda RBX: 00007f08e5a25fa0 RCX: 00007f08e579e019 [ 212.856254][ T5317] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 212.856266][ T5317] RBP: 00007f08e6621090 R08: 0000000000000000 R09: 0000000000000000 [ 212.856279][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.856290][ T5317] R13: 00007f08e5a26038 R14: 00007f08e5a25fa0 R15: 00007ffe81ec2c28 [ 212.856307][ T5317] [ 212.941851][ T381] usbhid 1-1:0.0: can't add hid device: -71 [ 213.076671][ T5321] overlayfs: failed to resolve './file1': -2 [ 213.078274][ T381] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.307767][ T381] usb 1-1: USB disconnect, device number 71 [ 213.454943][ T5333] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 213.454967][ T5333] rust_binder: Read failure Err(EFAULT) in pid:1160 [ 213.475317][ T5333] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 213.491676][ T5333] rust_binder: Read failure Err(EFAULT) in pid:1160 [ 213.514288][ T5333] rust_binder: Failure in copy_transaction_data: EINVAL [ 213.521733][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1876'. [ 213.524765][ T5333] rust_binder: 5332:5333 transaction call to 5332:0 failed EINVAL, code 0 size 40-24 [ 213.548633][ T381] rust_binder: 5332: undelivered TRANSACTION_ERROR: 29201 [ 213.901698][ T63] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.995059][ T5350] overlayfs: failed to resolve './file1': -2 [ 214.003862][ T5348] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.003882][ T5348] rust_binder: Read failure Err(EFAULT) in pid:870 [ 214.016248][ T5348] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.022809][ T5348] rust_binder: Read failure Err(EFAULT) in pid:870 [ 214.032069][ T5348] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 214.038585][ T5348] rust_binder: Failure in copy_transaction_data: ENOSPC [ 214.046722][ T5348] rust_binder: 5347:5348 transaction call to 5347:0 failed ENOSPC, code 0 size 65528-24 [ 214.051710][ T63] usb 5-1: device descriptor read/64, error -71 [ 214.054241][ T381] rust_binder: 5347: undelivered TRANSACTION_ERROR: 29201 [ 214.153325][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 214.341731][ T63] usb 5-1: device descriptor read/64, error -71 [ 214.361733][ T45] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 214.535078][ T45] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 214.560365][ T5374] overlayfs: failed to resolve './file1': -2 [ 214.568487][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.581697][ T63] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.598522][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.612330][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 214.628070][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.645391][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.654143][ T45] usb 3-1: SerialNumber: syz [ 214.697990][ T5377] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.698010][ T5377] rust_binder: Read failure Err(EFAULT) in pid:888 [ 214.710303][ T5377] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.716860][ T5377] rust_binder: Read failure Err(EFAULT) in pid:888 [ 214.726486][ T5377] rust_binder: validate_parent_fixup: new_min_offset=68, sg_entry.length=0 [ 214.733056][ T5377] rust_binder: 5376:5377 error while translating object: EINVAL [ 214.749370][ T5377] rust_binder: Failure in copy_transaction_data: EINVAL [ 214.749401][ T5377] rust_binder: 5376:5377 transaction call to 5376:0 failed EINVAL, code 0 size 112-24 [ 214.765993][ T63] usb 5-1: device descriptor read/64, error -71 [ 214.770732][ T381] rust_binder: 5376: undelivered TRANSACTION_ERROR: 29201 [ 214.837970][ T36] kauditd_printk_skb: 968 callbacks suppressed [ 214.837988][ T36] audit: type=1400 audit(1785918828.329:23326): avc: denied { create } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.866002][ T5380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 214.880131][ T5380] tipc: Cannot configure node identity twice [ 214.889449][ T36] audit: type=1400 audit(1785918828.349:23327): avc: denied { read write } for pid=2098 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.898260][ T45] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 214.926091][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 214.938210][ T36] audit: type=1400 audit(1785918828.349:23328): avc: denied { read write open } for pid=2098 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.951739][ T45] usb 3-1: USB disconnect, device number 93 [ 214.988667][ T36] audit: type=1400 audit(1785918828.349:23329): avc: denied { ioctl } for pid=2098 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.017240][ T36] audit: type=1400 audit(1785918828.369:23330): avc: denied { write } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.043811][ T36] audit: type=1400 audit(1785918828.369:23331): avc: denied { nlmsg_write } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.071682][ T63] usb 5-1: device descriptor read/64, error -71 [ 215.071801][ T36] audit: type=1400 audit(1785918828.369:23332): avc: denied { create } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.098667][ T36] audit: type=1400 audit(1785918828.369:23333): avc: denied { create } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.123528][ T36] audit: type=1400 audit(1785918828.369:23334): avc: denied { write } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.144039][ T36] audit: type=1400 audit(1785918828.369:23335): avc: denied { read } for pid=5379 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.164449][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 215.182107][ T63] usb usb5-port1: attempt power cycle [ 215.311701][ T2985] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 215.322119][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 215.329458][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.338893][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 215.347026][ T9] usb 2-1: config 0 has no interface number 0 [ 215.353154][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 215.363067][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 215.372452][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 215.381513][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 215.390266][ T9] usb 2-1: Product: syz [ 215.394486][ T9] usb 2-1: Manufacturer: syz [ 215.399058][ T9] usb 2-1: SerialNumber: syz [ 215.405062][ T9] usb 2-1: config 0 descriptor?? [ 215.463788][ T2985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.475206][ T2985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.500342][ T2985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.514373][ T2985] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.523679][ T63] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 215.531343][ T2985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.541760][ T2985] usb 1-1: config 0 descriptor?? [ 215.557945][ T63] usb 5-1: device descriptor read/8, error -71 [ 215.641697][ T9] usb 2-1: USB disconnect, device number 102 [ 215.693751][ T63] usb 5-1: device descriptor read/8, error -71 [ 215.941692][ T63] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 215.957742][ T2985] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 215.966747][ T2985] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 215.974578][ T63] usb 5-1: device descriptor read/8, error -71 [ 215.983530][ T2985] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 216.103721][ T63] usb 5-1: device descriptor read/8, error -71 [ 216.211858][ T63] usb usb5-port1: unable to enumerate USB device [ 216.324877][ T63] usb 1-1: USB disconnect, device number 72 [ 216.391675][ T45] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 216.561691][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 216.573998][ T45] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 216.582552][ T45] usb 2-1: config 0 has no interface number 0 [ 216.588732][ T45] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 216.614989][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 216.629207][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.641673][ T45] usb 2-1: Product: syz [ 216.645946][ T45] usb 2-1: Manufacturer: syz [ 216.650538][ T45] usb 2-1: SerialNumber: syz [ 216.661913][ T45] usb 2-1: config 0 descriptor?? [ 216.668467][ T5391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.801415][ T5407] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 216.801437][ T5407] rust_binder: Read failure Err(EFAULT) in pid:896 [ 216.827060][ T5407] rust_binder: 5406:5407 got transaction to invalid handle 1 [ 216.858004][ T5407] rust_binder: 5406:5407 transaction call to 0:0 failed ENOENT, code 0 size 65528-24 [ 216.868855][ T63] rust_binder: 5406: undelivered TRANSACTION_ERROR: 29201 [ 216.884463][ T45] asix 2-1:0.188: probe with driver asix failed with error -71 [ 216.912907][ T45] usb 2-1: USB disconnect, device number 103 [ 216.929893][ T5409] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 216.951684][ T5409] netlink: 'syz.4.1905': attribute type 5 has an invalid length. [ 216.959419][ T5409] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 217.505274][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 217.541709][ T45] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 217.701683][ T381] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 217.756251][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 217.769837][ T45] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 217.791696][ T45] usb 1-1: config 0 has no interface number 0 [ 217.797928][ T45] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 217.832716][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 217.851668][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.859696][ T45] usb 1-1: Product: syz [ 217.863935][ T381] usb 2-1: device descriptor read/64, error -71 [ 217.880282][ T45] usb 1-1: Manufacturer: syz [ 217.888447][ T45] usb 1-1: SerialNumber: syz [ 217.906562][ T45] usb 1-1: config 0 descriptor?? [ 217.913063][ T5423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.101670][ T381] usb 2-1: device descriptor read/64, error -71 [ 218.111671][ T31] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 218.130770][ T5423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.281664][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 218.294835][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 218.311654][ T31] usb 3-1: config 0 has no interface number 0 [ 218.329062][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 218.351709][ T381] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 218.365141][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 218.378543][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.387250][ T31] usb 3-1: Product: syz [ 218.392222][ T31] usb 3-1: Manufacturer: syz [ 218.396874][ T31] usb 3-1: SerialNumber: syz [ 218.404499][ T31] usb 3-1: config 0 descriptor?? [ 218.411283][ T5444] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 218.507340][ T5460] FAULT_INJECTION: forcing a failure. [ 218.507340][ T5460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.520701][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.4.1926 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 218.520734][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.520747][ T5460] Call Trace: [ 218.520753][ T5460] [ 218.520761][ T5460] __dump_stack+0x21/0x30 [ 218.520792][ T5460] dump_stack_lvl+0x140/0x1c0 [ 218.520817][ T5460] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.520844][ T5460] ? _parse_integer+0x2e/0x40 [ 218.520863][ T5460] dump_stack+0x19/0x20 [ 218.520887][ T5460] should_fail_ex+0x3c2/0x510 [ 218.520909][ T5460] should_fail_alloc_page+0xec/0x110 [ 218.520933][ T5460] __alloc_pages_noprof+0x1c0/0x7e0 [ 218.520961][ T5460] ? selinux_file_permission+0x318/0xb60 [ 218.520980][ T5460] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 218.521006][ T5460] ? avc_policy_seqno+0xd/0x30 [ 218.521028][ T5460] ? selinux_file_permission+0x318/0xb60 [ 218.521047][ T5460] ? mutex_lock+0x97/0x1d0 [ 218.521072][ T5460] ? __cfi_mutex_lock+0x10/0x10 [ 218.521096][ T5460] ? proc_fail_nth_write+0x184/0x220 [ 218.521122][ T5460] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 218.521150][ T5460] get_free_pages_noprof+0x14/0x40 [ 218.521176][ T5460] configfs_write_iter+0xbe/0x490 [ 218.521200][ T5460] vfs_write+0x762/0xfd0 [ 218.521220][ T5460] ? __cfi_vfs_write+0x10/0x10 [ 218.521239][ T5460] ? mutex_unlock+0x90/0x240 [ 218.521267][ T5460] __x64_sys_pwrite64+0x198/0x230 [ 218.521288][ T5460] ? __cfi___x64_sys_pwrite64+0x10/0x10 [ 218.521310][ T5460] ? __kasan_check_read+0x15/0x20 [ 218.521330][ T5460] x64_sys_call+0xd50/0x2ee0 [ 218.521347][ T5460] do_syscall_64+0x57/0xf0 [ 218.521368][ T5460] ? clear_bhb_loop+0x50/0xa0 [ 218.521390][ T5460] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.521413][ T5460] RIP: 0033:0x7f08e579e019 [ 218.521438][ T5460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.521455][ T5460] RSP: 002b:00007f08e6621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 218.521477][ T5460] RAX: ffffffffffffffda RBX: 00007f08e5a25fa0 RCX: 00007f08e579e019 [ 218.521492][ T5460] RDX: 000000000000000e RSI: 0000200000000540 RDI: 0000000000000003 [ 218.521506][ T5460] RBP: 00007f08e6621090 R08: 0000000000000000 R09: 0000000000000000 [ 218.521519][ T5460] R10: 00000000000000ab R11: 0000000000000246 R12: 0000000000000001 [ 218.521532][ T5460] R13: 00007f08e5a26038 R14: 00007f08e5a25fa0 R15: 00007ffe81ec2c28 [ 218.521549][ T5460] [ 218.521695][ T381] usb 2-1: device descriptor read/64, error -71 [ 218.771247][ T31] asix 3-1:0.188: probe with driver asix failed with error -71 [ 218.780949][ T31] usb 3-1: USB disconnect, device number 94 [ 218.935801][ T5469] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.935825][ T5469] rust_binder: Read failure Err(EFAULT) in pid:365 [ 218.948716][ T5469] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.956008][ T5469] rust_binder: Read failure Err(EFAULT) in pid:365 [ 218.965399][ T5469] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 218.972679][ T5469] rust_binder: Failure in copy_transaction_data: ENOSPC [ 218.981132][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 218.981361][ T5469] rust_binder: 5468:5469 transaction call to 5468:0 failed ENOSPC, code 0 size 65528-24 [ 218.988138][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 219.002855][ T2985] rust_binder: 5468: undelivered TRANSACTION_ERROR: 29201 [ 219.018992][ T45] asix 1-1:0.188: probe with driver asix failed with error -71 [ 219.038439][ T381] usb 2-1: device descriptor read/64, error -71 [ 219.065460][ T5471] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 219.065482][ T5471] rust_binder: Read failure Err(EFAULT) in pid:367 [ 219.073619][ T45] usb 1-1: USB disconnect, device number 73 [ 219.094116][ T5471] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 219.094137][ T5471] rust_binder: Read failure Err(EFAULT) in pid:367 [ 219.117579][ T5471] rust_binder: 5470:5471 got transaction to invalid handle 1 [ 219.131484][ T5471] rust_binder: 5470:5471 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 219.141362][ T31] rust_binder: 5470: undelivered TRANSACTION_ERROR: 29201 [ 219.161763][ T381] usb usb2-port1: attempt power cycle [ 219.191185][ T5473] syz.2.1931 (5473) used obsolete PPPIOCDETACH ioctl [ 219.250780][ T5473] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 219.277971][ T5477] tipc: Started in network mode [ 219.282973][ T5477] tipc: Node identity , cluster identity 4711 [ 219.462533][ T5483] FAULT_INJECTION: forcing a failure. [ 219.462533][ T5483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.475817][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: syz.4.1936 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 219.475848][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.475860][ T5483] Call Trace: [ 219.475867][ T5483] [ 219.475875][ T5483] __dump_stack+0x21/0x30 [ 219.475904][ T5483] dump_stack_lvl+0x140/0x1c0 [ 219.475929][ T5483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.475952][ T5483] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 219.475979][ T5483] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 219.475999][ T5483] dump_stack+0x19/0x20 [ 219.476022][ T5483] should_fail_ex+0x3c2/0x510 [ 219.476043][ T5483] should_fail+0xf/0x20 [ 219.476080][ T5483] should_fail_usercopy+0x1e/0x30 [ 219.476102][ T5483] _copy_from_iter+0x1a6/0x1520 [ 219.476126][ T5483] ? selinux_file_permission+0x318/0xb60 [ 219.476145][ T5483] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 219.476172][ T5483] ? __cfi__copy_from_iter+0x10/0x10 [ 219.476196][ T5483] ? mutex_lock+0x97/0x1d0 [ 219.476221][ T5483] ? __cfi_mutex_lock+0x10/0x10 [ 219.476245][ T5483] ? proc_fail_nth_write+0x184/0x220 [ 219.476273][ T5483] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 219.476300][ T5483] configfs_write_iter+0x105/0x490 [ 219.476324][ T5483] vfs_write+0x762/0xfd0 [ 219.476344][ T5483] ? __cfi_vfs_write+0x10/0x10 [ 219.476360][ T5483] ? mutex_unlock+0x90/0x240 [ 219.476385][ T5483] __x64_sys_pwrite64+0x198/0x230 [ 219.476406][ T5483] ? __cfi___x64_sys_pwrite64+0x10/0x10 [ 219.476427][ T5483] ? __kasan_check_read+0x15/0x20 [ 219.476454][ T5483] x64_sys_call+0xd50/0x2ee0 [ 219.476472][ T5483] do_syscall_64+0x57/0xf0 [ 219.476493][ T5483] ? clear_bhb_loop+0x50/0xa0 [ 219.476519][ T5483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 219.476543][ T5483] RIP: 0033:0x7f08e579e019 [ 219.476560][ T5483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.476578][ T5483] RSP: 002b:00007f08e6621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 219.476600][ T5483] RAX: ffffffffffffffda RBX: 00007f08e5a25fa0 RCX: 00007f08e579e019 [ 219.476616][ T5483] RDX: 000000000000000e RSI: 0000200000000540 RDI: 0000000000000003 [ 219.476629][ T5483] RBP: 00007f08e6621090 R08: 0000000000000000 R09: 0000000000000000 [ 219.476643][ T5483] R10: 00000000000000ab R11: 0000000000000246 R12: 0000000000000001 [ 219.476656][ T5483] R13: 00007f08e5a26038 R14: 00007f08e5a25fa0 R15: 00007ffe81ec2c28 [ 219.476673][ T5483] [ 219.541697][ T381] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 219.759769][ T5487] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 219.759790][ T5487] rust_binder: Read failure Err(EFAULT) in pid:377 [ 219.763694][ T381] usb 2-1: device descriptor read/8, error -71 [ 219.776585][ T5487] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 219.780635][ T5487] rust_binder: Read failure Err(EFAULT) in pid:377 [ 219.791672][ T45] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 219.791994][ T5487] rust_binder: 5486:5487 FDA parent offset not aligned correctly [ 219.817209][ T5487] rust_binder: 5486:5487 error while translating object: EINVAL [ 219.825092][ T5487] rust_binder: Failure in copy_transaction_data: EINVAL [ 219.825122][ T5487] rust_binder: 5486:5487 transaction call to 5486:0 failed EINVAL, code 0 size 112-24 [ 219.860152][ T2985] rust_binder: 5486: undelivered TRANSACTION_ERROR: 29201 [ 219.869234][ T36] kauditd_printk_skb: 726 callbacks suppressed [ 219.869252][ T36] audit: type=1400 audit(1785918833.349:24062): avc: denied { read write } for pid=5488 comm="syz.0.1939" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.899117][ T36] audit: type=1400 audit(1785918833.349:24063): avc: denied { read write open } for pid=5488 comm="syz.0.1939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.923862][ T36] audit: type=1400 audit(1785918833.349:24064): avc: denied { ioctl } for pid=5488 comm="syz.0.1939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.949070][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 219.954879][ T36] audit: type=1400 audit(1785918833.349:24065): avc: denied { ioctl } for pid=5488 comm="syz.0.1939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.957855][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.993355][ T381] usb 2-1: device descriptor read/8, error -71 [ 220.009684][ T36] audit: type=1400 audit(1785918833.359:24066): avc: denied { ioctl } for pid=5488 comm="syz.0.1939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.036451][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.045422][ T36] audit: type=1400 audit(1785918833.359:24067): avc: denied { ioctl } for pid=5488 comm="syz.0.1939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.071199][ T36] audit: type=1400 audit(1785918833.359:24068): avc: denied { ioctl } for pid=5480 comm="syz.2.1935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.100259][ T36] audit: type=1400 audit(1785918833.389:24069): avc: denied { unmount } for pid=3745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 220.121262][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 220.130360][ T31] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 220.138214][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.147575][ T45] usb 3-1: SerialNumber: syz [ 220.153997][ T36] audit: type=1400 audit(1785918833.419:24070): avc: denied { read write } for pid=3745 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.180983][ T45] usb 3-1: cannot find UAC_HEADER [ 220.189124][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 220.191713][ T36] audit: type=1400 audit(1785918833.419:24071): avc: denied { read write open } for pid=3745 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.238421][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.254228][ T381] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 220.284495][ T381] usb 2-1: device descriptor read/8, error -71 [ 220.292113][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 220.299121][ T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 220.307734][ T31] usb 1-1: config 0 has no interface number 0 [ 220.314286][ T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 220.328694][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 220.338800][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.347494][ T31] usb 1-1: Product: syz [ 220.352294][ T31] usb 1-1: Manufacturer: syz [ 220.356892][ T31] usb 1-1: SerialNumber: syz [ 220.364129][ T31] usb 1-1: config 0 descriptor?? [ 220.370663][ T5489] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 220.414346][ T381] usb 2-1: device descriptor read/8, error -71 [ 220.434430][ T2985] usb 3-1: USB disconnect, device number 95 [ 220.525607][ T381] usb usb2-port1: unable to enumerate USB device [ 220.601709][ T31] asix 1-1:0.188: probe with driver asix failed with error -71 [ 220.634426][ T31] usb 1-1: USB disconnect, device number 74 [ 220.753070][ T5512] tipc: Cannot configure node identity twice [ 221.121685][ T2985] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 221.135035][ T486] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 221.271677][ T2985] usb 2-1: device descriptor read/64, error -71 [ 221.301696][ T486] usb 5-1: Using ep0 maxpacket: 16 [ 221.309312][ T486] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 221.339380][ T486] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.354693][ T486] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 221.366225][ T486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.375874][ T486] usb 5-1: Product: syz [ 221.382733][ T486] usb 5-1: Manufacturer: syz [ 221.387394][ T486] usb 5-1: SerialNumber: syz [ 221.459383][ T5537] tipc: Started in network mode [ 221.464336][ T5537] tipc: Node identity , cluster identity 4711 [ 221.551700][ T2985] usb 2-1: device descriptor read/64, error -71 [ 221.612782][ T5520] tipc: Started in network mode [ 221.617683][ T5520] tipc: Node identity , cluster identity 4711 [ 221.644773][ T486] usb 5-1: 0:116 : does not exist [ 221.649832][ T486] usb 5-1: 0:114 : does not exist [ 221.667115][ T486] usb 5-1: USB disconnect, device number 31 [ 221.700689][ T5542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.710754][ T5542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.757401][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.792187][ T2985] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 221.921700][ T381] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 221.951709][ T2985] usb 2-1: device descriptor read/64, error -71 [ 222.071688][ T381] usb 3-1: Using ep0 maxpacket: 16 [ 222.077459][ T381] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 222.085617][ T31] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 222.104968][ T381] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 222.114025][ T381] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 222.122363][ T381] usb 3-1: Product: syz [ 222.126518][ T381] usb 3-1: Manufacturer: syz [ 222.140505][ T381] r8152-cfgselector 3-1: Unknown version 0x0000 [ 222.146796][ T381] r8152-cfgselector 3-1: config 0 descriptor?? [ 222.191675][ T2985] usb 2-1: device descriptor read/64, error -71 [ 222.241683][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 222.249805][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.261878][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.282363][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 222.291453][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.299546][ T31] usb 1-1: SerialNumber: syz [ 222.307833][ T31] usb 1-1: cannot find UAC_HEADER [ 222.317001][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.322652][ T2985] usb usb2-port1: attempt power cycle [ 222.356101][ T381] r8152-cfgselector 3-1: bad CDC descriptors [ 222.373841][ T381] r8152-cfgselector 3-1: USB disconnect, device number 96 [ 222.380548][ T5554] FAULT_INJECTION: forcing a failure. [ 222.380548][ T5554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.394330][ T5554] CPU: 0 UID: 0 PID: 5554 Comm: syz.4.1965 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 222.394362][ T5554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.394376][ T5554] Call Trace: [ 222.394383][ T5554] [ 222.394391][ T5554] __dump_stack+0x21/0x30 [ 222.394423][ T5554] dump_stack_lvl+0x140/0x1c0 [ 222.394448][ T5554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.394474][ T5554] ? check_stack_object+0x138/0x150 [ 222.394495][ T5554] dump_stack+0x19/0x20 [ 222.394540][ T5554] should_fail_ex+0x3c2/0x510 [ 222.394562][ T5554] should_fail+0xf/0x20 [ 222.394580][ T5554] should_fail_usercopy+0x1e/0x30 [ 222.394602][ T5554] _copy_to_user+0x24/0xa0 [ 222.394627][ T5554] simple_read_from_buffer+0xed/0x160 [ 222.394653][ T5554] proc_fail_nth_read+0x1aa/0x220 [ 222.394680][ T5554] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 222.394712][ T5554] ? bpf_lsm_file_permission+0xd/0x20 [ 222.394737][ T5554] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 222.394763][ T5554] vfs_read+0x28b/0xc70 [ 222.394783][ T5554] ? __cfi_vfs_read+0x10/0x10 [ 222.394801][ T5554] ? __kasan_check_write+0x18/0x20 [ 222.394820][ T5554] ? mutex_lock+0x97/0x1d0 [ 222.394846][ T5554] ? __cfi_mutex_lock+0x10/0x10 [ 222.394873][ T5554] ksys_read+0x145/0x260 [ 222.394892][ T5554] ? fput+0x1a4/0x230 [ 222.394914][ T5554] ? __cfi_ksys_read+0x10/0x10 [ 222.394934][ T5554] ? __x64_sys_pwrite64+0x1c2/0x230 [ 222.394956][ T5554] ? __kasan_check_read+0x15/0x20 [ 222.394975][ T5554] __x64_sys_read+0x7f/0x90 [ 222.394995][ T5554] x64_sys_call+0x2638/0x2ee0 [ 222.395012][ T5554] do_syscall_64+0x57/0xf0 [ 222.395034][ T5554] ? clear_bhb_loop+0x50/0xa0 [ 222.395060][ T5554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 222.395085][ T5554] RIP: 0033:0x7f08e575e84e [ 222.395103][ T5554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.395119][ T5554] RSP: 002b:00007f08e6620fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.395140][ T5554] RAX: ffffffffffffffda RBX: 00007f08e66216c0 RCX: 00007f08e575e84e [ 222.395156][ T5554] RDX: 000000000000000f RSI: 00007f08e66210a0 RDI: 0000000000000004 [ 222.395169][ T5554] RBP: 00007f08e6621090 R08: 0000000000000000 R09: 0000000000000000 [ 222.395182][ T5554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.395195][ T5554] R13: 00007f08e5a26038 R14: 00007f08e5a25fa0 R15: 00007ffe81ec2c28 [ 222.395212][ T5554] [ 222.439783][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.725446][ T31] usb 1-1: USB disconnect, device number 75 [ 222.741677][ T2985] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 222.758023][ T5558] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.758043][ T5558] rust_binder: Read failure Err(EFAULT) in pid:407 [ 222.770213][ T5558] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.777506][ T5558] rust_binder: Read failure Err(EFAULT) in pid:407 [ 222.779760][ T2985] usb 2-1: device descriptor read/8, error -71 [ 222.793851][ T5558] rust_binder: 5557:5558 got reply transaction with no transaction stack [ 222.807813][ T5558] rust_binder: 5557:5558 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 222.819632][ T63] rust_binder: 5557: undelivered TRANSACTION_ERROR: 29201 [ 222.897234][ T5560] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.897251][ T5560] rust_binder: Read failure Err(EFAULT) in pid:409 [ 222.908527][ T5560] rust_binder: 5559:5560 got transaction to invalid handle 1 [ 222.922518][ T5560] rust_binder: 5559:5560 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 222.934023][ T31] rust_binder: 5559: undelivered TRANSACTION_ERROR: 29201 [ 222.936305][ T2985] usb 2-1: device descriptor read/8, error -71 [ 223.191712][ T2985] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 223.223746][ T2985] usb 2-1: device descriptor read/8, error -71 [ 223.335506][ T5578] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1976'. [ 223.374878][ T2985] usb 2-1: device descriptor read/8, error -71 [ 223.486945][ T2985] usb usb2-port1: unable to enumerate USB device [ 223.521681][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 223.679594][ T31] usb 5-1: device descriptor read/64, error -71 [ 223.899158][ T5599] fuse: Invalid rootmode [ 223.931684][ T31] usb 5-1: device descriptor read/64, error -71 [ 224.171847][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 224.291692][ T2985] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 224.301709][ T31] usb 5-1: device descriptor read/64, error -71 [ 224.471698][ T2985] usb 2-1: Using ep0 maxpacket: 16 [ 224.478727][ T2985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.489500][ T2985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.500138][ T2985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 224.509792][ T2985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.517821][ T2985] usb 2-1: SerialNumber: syz [ 224.532486][ T2985] usb 2-1: cannot find UAC_HEADER [ 224.541919][ T31] usb 5-1: device descriptor read/64, error -71 [ 224.552436][ T381] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 224.554127][ T2985] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 224.609283][ T5612] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 224.609303][ T5612] rust_binder: Read failure Err(EFAULT) in pid:1245 [ 224.621223][ T5612] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 224.628122][ T5612] rust_binder: Read failure Err(EFAULT) in pid:1245 [ 224.637811][ T5612] rust_binder: Failure in copy_transaction_data: EINVAL [ 224.644537][ T5612] rust_binder: 5611:5612 transaction call to 5611:0 failed EINVAL, code 19456 size 40-24 [ 224.662476][ T31] usb usb5-port1: attempt power cycle [ 224.668797][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 224.674024][ T45] rust_binder: 5611: undelivered TRANSACTION_ERROR: 29201 [ 224.711678][ T381] usb 1-1: device descriptor read/64, error -71 [ 224.722370][ T5614] overlayfs: missing 'lowerdir' [ 224.806275][ T2985] usb 2-1: USB disconnect, device number 112 [ 224.888374][ T36] kauditd_printk_skb: 822 callbacks suppressed [ 224.888391][ T36] audit: type=1400 audit(1785918838.379:24894): avc: denied { name_bind } for pid=5617 comm="syz.2.1990" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 224.917654][ T36] audit: type=1400 audit(1785918838.379:24895): avc: denied { node_bind } for pid=5617 comm="syz.2.1990" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.942053][ T36] audit: type=1400 audit(1785918838.399:24896): avc: denied { read write } for pid=5617 comm="syz.2.1990" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.951703][ T381] usb 1-1: device descriptor read/64, error -71 [ 224.966326][ T36] audit: type=1400 audit(1785918838.399:24897): avc: denied { read write open } for pid=5617 comm="syz.2.1990" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.997695][ T36] audit: type=1400 audit(1785918838.399:24898): avc: denied { ioctl } for pid=5617 comm="syz.2.1990" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.001997][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 225.023484][ T36] audit: type=1400 audit(1785918838.409:24899): avc: denied { ioctl } for pid=5608 comm="syz.0.1986" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.056646][ T36] audit: type=1400 audit(1785918838.439:24900): avc: denied { ioctl } for pid=5574 comm="syz.4.1974" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.064624][ T31] usb 5-1: device descriptor read/8, error -71 [ 225.082545][ T36] audit: type=1400 audit(1785918838.559:24901): avc: denied { ioctl } for pid=5574 comm="syz.4.1974" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.114360][ T36] audit: type=1400 audit(1785918838.559:24902): avc: denied { ioctl } for pid=5574 comm="syz.4.1974" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.139990][ T36] audit: type=1400 audit(1785918838.559:24903): avc: denied { ioctl } for pid=5574 comm="syz.4.1974" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.221692][ T381] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 225.243944][ T31] usb 5-1: device descriptor read/8, error -71 [ 225.381720][ T381] usb 1-1: device descriptor read/64, error -71 [ 225.491857][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 225.531295][ T31] usb 5-1: device descriptor read/8, error -71 [ 225.571698][ T486] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 225.632028][ T381] usb 1-1: device descriptor read/64, error -71 [ 225.664781][ T31] usb 5-1: device descriptor read/8, error -71 [ 225.711719][ T486] usb 3-1: device descriptor read/64, error -71 [ 225.722028][ T5629] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 225.722048][ T5629] rust_binder: Read failure Err(EFAULT) in pid:1197 [ 225.733579][ T5629] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 225.740220][ T5629] rust_binder: Read failure Err(EFAULT) in pid:1197 [ 225.749042][ T381] usb usb1-port1: attempt power cycle [ 225.752587][ T5629] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 225.761005][ T5629] rust_binder: Failure in copy_transaction_data: ENOSPC [ 225.769100][ T5629] rust_binder: 5628:5629 transaction call to 5628:0 failed ENOSPC, code 0 size 65528-24 [ 225.772117][ T31] usb usb5-port1: unable to enumerate USB device [ 225.793430][ T2985] rust_binder: 5628: undelivered TRANSACTION_ERROR: 29201 [ 225.914898][ T5633] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 225.914914][ T5633] rust_binder: Read failure Err(EFAULT) in pid:1201 [ 225.928655][ T5633] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 225.935332][ T5633] rust_binder: Read failure Err(EFAULT) in pid:1201 [ 225.944462][ T5633] rust_binder: Failure in copy_transaction_data: EINVAL [ 225.951097][ T5633] rust_binder: 5632:5633 transaction call to 5632:0 failed EINVAL, code 16777216 size 40-24 [ 225.961697][ T486] usb 3-1: device descriptor read/64, error -71 [ 225.972556][ T31] rust_binder: 5632: undelivered TRANSACTION_ERROR: 29201 [ 226.091688][ T381] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 226.123553][ T381] usb 1-1: device descriptor read/8, error -71 [ 226.211757][ T486] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 226.253567][ T381] usb 1-1: device descriptor read/8, error -71 [ 226.327259][ T31] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 226.341744][ T486] usb 3-1: device descriptor read/64, error -71 [ 226.410522][ T5641] FAULT_INJECTION: forcing a failure. [ 226.410522][ T5641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.423695][ T5641] CPU: 1 UID: 0 PID: 5641 Comm: syz.4.2000 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 226.423716][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.423723][ T5641] Call Trace: [ 226.423728][ T5641] [ 226.423733][ T5641] __dump_stack+0x21/0x30 [ 226.423753][ T5641] dump_stack_lvl+0x140/0x1c0 [ 226.423767][ T5641] ? __cfi_dump_stack_lvl+0x10/0x10 [ 226.423781][ T5641] ? do_vfs_ioctl+0x182d/0x2010 [ 226.423794][ T5641] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 226.423808][ T5641] dump_stack+0x19/0x20 [ 226.423821][ T5641] should_fail_ex+0x3c2/0x510 [ 226.423832][ T5641] should_fail+0xf/0x20 [ 226.423843][ T5641] should_fail_usercopy+0x1e/0x30 [ 226.423855][ T5641] _copy_from_user+0x20/0xa0 [ 226.423869][ T5641] kvm_vm_ioctl+0x6c2/0xc40 [ 226.423884][ T5641] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 226.423898][ T5641] ? ioctl_has_perm+0x1bc/0x500 [ 226.423908][ T5641] ? __asan_memcpy+0x5a/0x80 [ 226.423919][ T5641] ? ioctl_has_perm+0x408/0x500 [ 226.423928][ T5641] ? has_cap_mac_admin+0xd0/0xd0 [ 226.423938][ T5641] ? proc_fail_nth_write+0x184/0x220 [ 226.423953][ T5641] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 226.423967][ T5641] ? selinux_file_ioctl+0x732/0x1480 [ 226.423977][ T5641] ? vfs_write+0xbcf/0xfd0 [ 226.423987][ T5641] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 226.423997][ T5641] ? __cfi_vfs_write+0x10/0x10 [ 226.424007][ T5641] ? __kasan_check_write+0x18/0x20 [ 226.424017][ T5641] ? mutex_unlock+0x90/0x240 [ 226.424032][ T5641] ? __cfi_mutex_unlock+0x10/0x10 [ 226.424047][ T5641] ? bpf_lsm_file_ioctl+0xd/0x20 [ 226.424060][ T5641] ? security_file_ioctl+0x3e/0x110 [ 226.424075][ T5641] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 226.424089][ T5641] __se_sys_ioctl+0x132/0x1b0 [ 226.424108][ T5641] __x64_sys_ioctl+0x7f/0xa0 [ 226.424119][ T5641] x64_sys_call+0x1878/0x2ee0 [ 226.424129][ T5641] do_syscall_64+0x57/0xf0 [ 226.424140][ T5641] ? clear_bhb_loop+0x50/0xa0 [ 226.424155][ T5641] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 226.424168][ T5641] RIP: 0033:0x7f08e579e019 [ 226.424179][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.424188][ T5641] RSP: 002b:00007f08e6621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.424201][ T5641] RAX: ffffffffffffffda RBX: 00007f08e5a25fa0 RCX: 00007f08e579e019 [ 226.424209][ T5641] RDX: 0000200000000140 RSI: 000000004008ae61 RDI: 0000000000000004 [ 226.424216][ T5641] RBP: 00007f08e6621090 R08: 0000000000000000 R09: 0000000000000000 [ 226.424223][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.424230][ T5641] R13: 00007f08e5a26038 R14: 00007f08e5a25fa0 R15: 00007ffe81ec2c28 [ 226.424239][ T5641] [ 226.641727][ T486] usb 3-1: device descriptor read/64, error -71 [ 226.668492][ T31] usb 2-1: config 0 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 226.717233][ T381] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 226.724842][ T31] usb 2-1: config 0 interface 0 altsetting 89 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.738383][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.745053][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 226.754314][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.764196][ T31] usb 2-1: config 0 descriptor?? [ 226.771195][ T381] usb 1-1: device descriptor read/8, error -71 [ 226.771467][ T5637] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 226.800137][ T486] usb usb3-port1: attempt power cycle [ 226.903673][ T381] usb 1-1: device descriptor read/8, error -71 [ 227.003305][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.024060][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.034124][ T381] usb usb1-port1: unable to enumerate USB device [ 227.047619][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.054747][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.062485][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.074265][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.081354][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.093715][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.100705][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.109444][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.116399][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.123369][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.130252][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.137163][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.144095][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.151776][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.158667][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.161688][ T486] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 227.191689][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.198764][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.205713][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.212645][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.214785][ T486] usb 3-1: device descriptor read/8, error -71 [ 227.219574][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.232641][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.239494][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.246389][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.253307][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.260438][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.267363][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.271696][ T2985] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 227.274263][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.288641][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.295538][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.302422][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.309281][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.316175][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.323108][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.329989][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.336928][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.343846][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.350725][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.357661][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.364581][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.365272][ T486] usb 3-1: device descriptor read/8, error -71 [ 227.371458][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.401683][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.408603][ T31] wacom 0003:056A:0017.0015: unknown main item tag 0x0 [ 227.421750][ T2985] usb 5-1: device descriptor read/64, error -71 [ 227.424097][ T31] wacom 0003:056A:0017.0015: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 227.439649][ T31] wacom 0003:056A:0017.0015: hidraw0: USB HID v0.09 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 227.452069][ T31] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0015/input/input30 [ 227.485928][ T31] usb 2-1: USB disconnect, device number 113 [ 227.525970][ T5658] fido_id[5658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 227.597108][ T45] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 227.606182][ T45] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.641707][ T486] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 227.664059][ T486] usb 3-1: device descriptor read/8, error -71 [ 227.672272][ T2985] usb 5-1: device descriptor read/64, error -71 [ 227.803849][ T486] usb 3-1: device descriptor read/8, error -71 [ 227.911763][ T31] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 227.911855][ T2985] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 227.927098][ T486] usb usb3-port1: unable to enumerate USB device [ 228.061741][ T2985] usb 5-1: device descriptor read/64, error -71 [ 228.065173][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.076961][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.089779][ T31] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 228.098864][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.106957][ T31] usb 2-1: Product: syz [ 228.111234][ T31] usb 2-1: Manufacturer: syz [ 228.115833][ T31] usb 2-1: SerialNumber: syz [ 228.301754][ T2985] usb 5-1: device descriptor read/64, error -71 [ 228.351884][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 228.372163][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 228.401582][ T31] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 228.421897][ T2985] usb usb5-port1: attempt power cycle [ 228.424144][ T31] usb 2-1: USB disconnect, device number 114 [ 228.449599][ T5666] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 228.449622][ T5666] rust_binder: Read failure Err(EFAULT) in pid:1259 [ 228.475454][ T5666] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 228.482223][ T5666] rust_binder: Read failure Err(EFAULT) in pid:1259 [ 228.496960][ T5666] rust_binder: validate_parent_fixup: new_min_offset=68, sg_entry.length=0 [ 228.499722][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.505571][ T5666] rust_binder: 5665:5666 error while translating object: EINVAL [ 228.536628][ T5666] rust_binder: Failure in copy_transaction_data: EINVAL [ 228.536659][ T5666] rust_binder: 5665:5666 transaction call to 5665:0 failed EINVAL, code 0 size 112-24 [ 228.558003][ T486] rust_binder: 5665: undelivered TRANSACTION_ERROR: 29201 [ 228.783047][ T2985] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 228.814311][ T2985] usb 5-1: device descriptor read/8, error -71 [ 228.944468][ T2985] usb 5-1: device descriptor read/8, error -71 [ 229.003737][ T5677] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 229.003759][ T5677] rust_binder: Read failure Err(EFAULT) in pid:1218 [ 229.122434][ T5678] rust_binder: 5676:5678 FDA parent offset not aligned correctly [ 229.136895][ T5678] rust_binder: 5676:5678 error while translating object: EINVAL [ 229.144573][ T5678] rust_binder: Failure in copy_transaction_data: EINVAL [ 229.144599][ T5678] rust_binder: 5676:5678 transaction call to 5676:0 failed EINVAL, code 0 size 112-24 [ 229.172546][ T31] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 229.181693][ T2985] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 229.203565][ T2985] usb 5-1: device descriptor read/8, error -71 [ 229.334499][ T2985] usb 5-1: device descriptor read/8, error -71 [ 229.335981][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.349962][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 229.361424][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 229.375335][ T31] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 229.384709][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.392724][ T31] usb 3-1: Product: syz [ 229.397047][ T31] usb 3-1: Manufacturer: syz [ 229.401676][ T31] usb 3-1: SerialNumber: syz [ 229.441803][ T2985] usb usb5-port1: unable to enumerate USB device [ 229.624280][ T31] usb 3-1: USB disconnect, device number 101 [ 229.669305][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.832548][ T31] rust_binder: 5676: undelivered TRANSACTION_ERROR: 29201 [ 229.864889][ T5680] overlayfs: missing 'workdir' [ 229.900141][ T36] kauditd_printk_skb: 650 callbacks suppressed [ 229.900158][ T36] audit: type=1400 audit(1785918843.389:25554): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.969457][ T36] audit: type=1400 audit(1785918843.389:25555): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.977263][ T5682] kvm: kvm [5681]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 229.995574][ T36] audit: type=1400 audit(1785918843.389:25556): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.028260][ T5682] kvm: kvm [5681]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 230.034949][ T36] audit: type=1400 audit(1785918843.399:25557): avc: denied { read } for pid=5681 comm="syz.1.2015" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.042230][ T5682] kvm: kvm [5681]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 230.061407][ T36] audit: type=1400 audit(1785918843.399:25558): avc: denied { read open } for pid=5681 comm="syz.1.2015" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.074647][ T5682] kvm: kvm [5681]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 230.106148][ T5682] kvm: kvm [5681]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 230.155193][ T36] audit: type=1400 audit(1785918843.399:25559): avc: denied { ioctl } for pid=5681 comm="syz.1.2015" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.209012][ T5688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.209036][ T5688] rust_binder: Read failure Err(EFAULT) in pid:1266 [ 230.222864][ T36] audit: type=1400 audit(1785918843.449:25560): avc: denied { read write } for pid=5681 comm="syz.1.2015" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.235229][ T5688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.266886][ T36] audit: type=1400 audit(1785918843.449:25561): avc: denied { read write open } for pid=5681 comm="syz.1.2015" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.303467][ T36] audit: type=1400 audit(1785918843.449:25562): avc: denied { ioctl } for pid=5681 comm="syz.1.2015" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.322147][ T5688] rust_binder: Read failure Err(EFAULT) in pid:1266 [ 230.332059][ T5691] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 230.339304][ T5691] rust_binder: Failure in copy_transaction_data: ENOSPC [ 230.347975][ T36] audit: type=1400 audit(1785918843.449:25563): avc: denied { read write } for pid=5681 comm="syz.1.2015" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.392945][ T5691] rust_binder: 5687:5691 transaction call to 5687:0 failed ENOSPC, code 0 size 65528-24 [ 230.408258][ T486] rust_binder: 5687: undelivered TRANSACTION_ERROR: 29201 [ 230.507415][ T5696] tipc: Cannot configure node identity twice [ 230.859085][ T5712] overlayfs: failed to resolve './file2': -2 [ 230.912408][ T31] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 230.977835][ T5717] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.977857][ T5717] rust_binder: Read failure Err(EFAULT) in pid:1284 [ 230.990120][ T5717] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.996885][ T5717] rust_binder: Read failure Err(EFAULT) in pid:1284 [ 231.006099][ T5717] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 231.012803][ T5717] rust_binder: Failure in copy_transaction_data: ENOSPC [ 231.020902][ T5717] rust_binder: 5716:5717 transaction call to 5716:0 failed ENOSPC, code 0 size 65528-24 [ 231.038223][ T10] rust_binder: 5716: undelivered TRANSACTION_ERROR: 29201 [ 231.051684][ T348] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 231.062211][ T31] usb 5-1: device descriptor read/64, error -71 [ 231.070330][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 231.147502][ T5721] tipc: Cannot configure node identity twice [ 231.191702][ T348] usb 1-1: device descriptor read/64, error -71 [ 231.311825][ T31] usb 5-1: device descriptor read/64, error -71 [ 231.380282][ T5734] overlayfs: missing 'lowerdir' [ 231.471680][ T348] usb 1-1: device descriptor read/64, error -71 [ 231.571705][ T31] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 231.593086][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 231.714215][ T348] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 231.731706][ T31] usb 5-1: device descriptor read/64, error -71 [ 231.881721][ T348] usb 1-1: device descriptor read/64, error -71 [ 231.981723][ T31] usb 5-1: device descriptor read/64, error -71 [ 232.001710][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 232.092160][ T31] usb usb5-port1: attempt power cycle [ 232.121720][ T348] usb 1-1: device descriptor read/64, error -71 [ 232.151681][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 232.158881][ T10] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.171960][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.178581][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 232.187880][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.197048][ T10] usb 2-1: config 0 descriptor?? [ 232.242193][ T348] usb usb1-port1: attempt power cycle [ 232.441684][ T31] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 232.463641][ T31] usb 5-1: device descriptor read/8, error -71 [ 232.581691][ T348] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 232.603413][ T31] usb 5-1: device descriptor read/8, error -71 [ 232.605847][ T10] usb 2-1: string descriptor 0 read error: -71 [ 232.616646][ T348] usb 1-1: device descriptor read/8, error -71 [ 232.622216][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 232.631931][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.640819][ T10] usb 2-1: USB disconnect, device number 115 [ 232.753535][ T348] usb 1-1: device descriptor read/8, error -71 [ 232.841720][ T31] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 232.863601][ T31] usb 5-1: device descriptor read/8, error -71 [ 232.991779][ T348] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 233.001060][ T31] usb 5-1: device descriptor read/8, error -71 [ 233.013531][ T348] usb 1-1: device descriptor read/8, error -71 [ 233.111790][ T31] usb usb5-port1: unable to enumerate USB device [ 233.155122][ T348] usb 1-1: device descriptor read/8, error -71 [ 233.184107][ T5760] overlayfs: missing 'lowerdir' [ 233.277209][ T5767] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.277233][ T5767] rust_binder: Read failure Err(EFAULT) in pid:1249 [ 233.281762][ T348] usb usb1-port1: unable to enumerate USB device [ 233.318186][ T5767] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.318208][ T5767] rust_binder: Read failure Err(EFAULT) in pid:1249 [ 233.328510][ T5767] rust_binder: Failure in copy_transaction_data: EINVAL [ 233.336476][ T5767] rust_binder: 5766:5767 transaction call to 5766:0 failed EINVAL, code 0 size 40-24 [ 233.359105][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 233.375167][ T31] rust_binder: 5766: undelivered TRANSACTION_ERROR: 29201 [ 233.434099][ T5776] batadv_slave_1: entered promiscuous mode [ 233.467159][ T5776] batadv_slave_1: left promiscuous mode [ 233.635685][ T5790] tipc: Cannot configure node identity twice [ 233.741778][ T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 233.882292][ T5798] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.882315][ T5798] rust_binder: Read failure Err(EFAULT) in pid:960 [ 233.897431][ T5798] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.911726][ T5798] rust_binder: Read failure Err(EFAULT) in pid:960 [ 233.923870][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.924792][ T5798] rust_binder: Failed to allocate buffer. len:69712, is_oneway:false [ 233.930941][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.941335][ T5798] rust_binder: Failure in copy_transaction_data: ENOSPC [ 233.941369][ T5798] rust_binder: 5796:5798 transaction call to 5796:0 failed ENOSPC, code 0 size 65528-24 [ 233.951194][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.964777][ T348] rust_binder: 5796: undelivered TRANSACTION_ERROR: 29201 [ 233.967210][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 234.015039][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.025967][ T10] usb 3-1: config 0 descriptor?? [ 234.047322][ T5801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.084640][ T5801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.203565][ T5805] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.203590][ T5805] rust_binder: Read failure Err(EFAULT) in pid:1269 [ 234.233817][ T5805] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.240436][ T5805] rust_binder: Read failure Err(EFAULT) in pid:1269 [ 234.276453][ T5805] rust_binder: Failure in copy_transaction_data: EINVAL [ 234.284098][ T5805] rust_binder: 5804:5805 transaction call to 5804:0 failed EINVAL, code 0 size 40-24 [ 234.303537][ T348] rust_binder: 5804: undelivered TRANSACTION_ERROR: 29201 [ 234.346308][ T5811] tipc: Started in network mode [ 234.351254][ T5811] tipc: Node identity , cluster identity 4711 [ 234.444459][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 234.451962][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 234.476148][ T10] usb 3-1: USB disconnect, device number 102 [ 234.551714][ T486] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 234.611754][ T5756] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 234.701687][ T486] usb 1-1: Using ep0 maxpacket: 16 [ 234.709472][ T486] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.718875][ T486] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.729198][ T486] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 234.740932][ T486] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 234.749991][ T486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.757993][ T486] usb 1-1: Product: syz [ 234.761673][ T5756] usb 2-1: device descriptor read/64, error -71 [ 234.762177][ T486] usb 1-1: Manufacturer: syz [ 234.773006][ T486] usb 1-1: SerialNumber: syz [ 234.942330][ T36] kauditd_printk_skb: 800 callbacks suppressed [ 234.942343][ T36] audit: type=1400 audit(1785918848.439:26364): avc: denied { ioctl } for pid=5812 comm="syz.1.2063" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.986005][ T486] usb 1-1: unit 2 not found! [ 235.000734][ T486] usb 1-1: USB disconnect, device number 84 [ 235.016253][ T5756] usb 2-1: device descriptor read/64, error -71 [ 235.024234][ T36] audit: type=1400 audit(1785918848.519:26365): avc: denied { read write } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.090211][ T36] audit: type=1400 audit(1785918848.519:26366): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.134381][ T36] audit: type=1400 audit(1785918848.519:26367): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.139858][ T1997] udevd[1997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.160179][ T36] audit: type=1400 audit(1785918848.559:26368): avc: denied { create } for pid=5821 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.202163][ T36] audit: type=1400 audit(1785918848.559:26369): avc: denied { read } for pid=5821 comm="syz.2.2068" dev="nsfs" ino=4026532470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.227395][ T36] audit: type=1400 audit(1785918848.559:26370): avc: denied { read open } for pid=5821 comm="syz.2.2068" path="net:[4026532470]" dev="nsfs" ino=4026532470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.232338][ T5826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.251267][ T36] audit: type=1400 audit(1785918848.559:26371): avc: denied { create } for pid=5821 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.278127][ T5826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.281316][ T36] audit: type=1400 audit(1785918848.559:26372): avc: denied { bind } for pid=5821 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.308328][ T36] audit: type=1400 audit(1785918848.559:26373): avc: denied { create } for pid=5821 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.331689][ T5756] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 235.451772][ T5833] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 235.451796][ T5833] rust_binder: Read failure Err(EFAULT) in pid:1334 [ 235.471701][ T5756] usb 2-1: device descriptor read/64, error -71 [ 235.495649][ T5833] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 235.495671][ T5833] rust_binder: Read failure Err(EFAULT) in pid:1334 [ 235.496986][ T5838] ublk_ctrl_add_dev: dev id not match 4294967295 1 [ 235.519647][ T5833] rust_binder: Failure in copy_transaction_data: EINVAL [ 235.519757][ T5833] rust_binder: 5832:5833 transaction call to 5832:0 failed EINVAL, code 0 size 40-24 [ 235.547497][ T348] rust_binder: 5832: undelivered TRANSACTION_ERROR: 29201 [ 235.572543][ T875] ------------[ cut here ]------------ [ 235.578069][ T875] WARNING: CPU: 0 PID: 875 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 235.588786][ T875] Modules linked in: [ 235.592773][ T875] CPU: 0 UID: 0 PID: 875 Comm: kworker/u8:33 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 235.604533][ T875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.614713][ T875] Workqueue: iou_exit io_ring_exit_work [ 235.620356][ T875] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 235.626837][ T875] Code: 5d e9 c3 bb 52 02 cc e8 9d 8e 33 fe 0f 0b eb e3 e8 94 8e 33 fe 0f 0b eb da e8 8b 8e 33 fe 0f 0b e9 4d fe ff ff e8 7f 8e 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 235.646687][ T875] RSP: 0018:ffffc900100ef990 EFLAGS: 00010293 [ 235.652843][ T875] RAX: ffffffff8353e341 RBX: 1ffff11020d7fe05 RCX: ffff88810cffb900 [ 235.660831][ T875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 235.668850][ T875] RBP: ffffc900100ef9e0 R08: 0000000000000003 R09: 0000000000000004 [ 235.676931][ T875] R10: 0000000000000000 R11: ffffffff8353d320 R12: ffff8881248a4c00 [ 235.685016][ T875] R13: ffff888106bff000 R14: ffff8881180f5100 R15: ffff8881180f5110 [ 235.693027][ T875] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.702084][ T875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.708299][ T5843] tipc: Enabled bearer , priority 10 [ 235.708669][ T875] CR2: 00007fbfa81eec38 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 235.722857][ T875] Call Trace: [ 235.726141][ T875] [ 235.729085][ T875] ublk_ch_uring_cmd+0x6f/0xa0 [ 235.733926][ T875] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 235.740036][ T875] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 235.745975][ T875] ? io_uring_cancel_generic+0x6eb/0x6eb [ 235.751649][ T875] io_ring_exit_work+0x23d/0x83b [ 235.756614][ T875] ? finish_task_switch+0x139/0x770 [ 235.761943][ T875] ? __cfi_io_ring_exit_work+0x10/0x10 [ 235.767419][ T875] ? kick_pool+0xb9/0x540 [ 235.771887][ T875] process_scheduled_works+0x7f7/0x1060 [ 235.777448][ T875] worker_thread+0xc99/0x13f0 [ 235.781677][ T5756] usb 2-1: device descriptor read/64, error -71 [ 235.782163][ T875] kthread+0x2c7/0x360 [ 235.792477][ T875] ? __cfi_worker_thread+0x10/0x10 [ 235.797597][ T875] ? __cfi_kthread+0x10/0x10 [ 235.802233][ T875] ret_from_fork+0x67/0xa0 [ 235.806712][ T875] ? __cfi_kthread+0x10/0x10 [ 235.811314][ T875] ret_from_fork_asm+0x1a/0x30 [ 235.816127][ T875] [ 235.819187][ T875] ---[ end trace 0000000000000000 ]--- [ 235.892185][ T5756] usb usb2-port1: attempt power cycle [ 236.241710][ T5756] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 236.264755][ T5756] usb 2-1: device descriptor read/8, error -71 [ 236.404945][ T5756] usb 2-1: device descriptor read/8, error -71 [ 236.651703][ T5756] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 236.684764][ T5756] usb 2-1: device descriptor read/8, error -71 [ 236.701799][ T31] tipc: Node number set to 3014689 [ 236.824700][ T5756] usb 2-1: device descriptor read/8, error -71 [ 236.932168][ T5756] usb usb2-port1: unable to enumerate USB device