last executing test programs: 2.025702787s ago: executing program 1 (id=1391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400a00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x138a, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000027c0)=ANY=[@ANYBLOB="38010000fe00002b094b5626245e5f82390ebe6263639c49f0a5c6a850a4"], 0x138) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000180)=0x5ca3b63f) 2.023007927s ago: executing program 1 (id=1394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xc0, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fbdbdf25020000000c00030004000000000000000800010000000000100007800c00018008000100", @ANYRES32=r3, @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) mremap(&(0x7f00004cc000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00004ce000/0x2000)=nil) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x10, r5, 0x5bc7000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fbdbdf25020000000c00030004000000000000000800010000000000100007800c00018008000100", @ANYRES32=r3, @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r6, 0x0, &(0x7f0000000200)) (async) mremap(&(0x7f00004cc000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00004ce000/0x2000)=nil) (async) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x10, r5, 0x5bc7000) (async) 172.188998ms ago: executing program 0 (id=1445): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff001000e26af9d19c7264c7502e75d15bf6f528bb4a5843e0eff1c2cbff56aa6f2b1925722f056b8366962ecb8092f5874a563b413c024c744fd4e5f1dfdefb131ad109f233d65886fc814d3c626a0cfd0b3decd350c35f7080126b206d0521aea72c5b26dec798732f8b4256829dba094e5bc39c9fb3426521e2a88a5fda94cd3818a264dbf0070a2571"], 0x15) dup(r1) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'wlan1\x00', 0xc8}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) r6 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, &(0x7f00000000c0)) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x1814800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ':\xd4\x06\x8d\x1e\xcf\xec~el\xdfI\xac8\xf4\xe5#U\xcaTEr\xc3\a\xb4\x7fj\x12\xe1\x17\rT\x8d\xa9\xa6\x89\xba\xfb\xb8\xec\x06b\xaa\xf8\xb2\x89\xc3l^\x05\xa0\xacW/,\xcd\xdd\xc0[\f}'}}], [], 0x6b}}) read$FUSE(r3, &(0x7f00000017c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_procfs(r7, &(0x7f0000000080)='net/arp\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) 169.484869ms ago: executing program 3 (id=1446): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xffffd000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x7ff, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0xffff7ffc, 0xfffffffd, 0x72aa, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0xc, 0x1000}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2", 0xf70) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r4, 0x301801) 169.374949ms ago: executing program 0 (id=1447): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'batadv_slave_0\x00', {}, 0x88}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1) ioctl$BINDER_FREEZE(r2, 0x400c620e, 0x0) 159.940489ms ago: executing program 0 (id=1448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382) sendfile(r1, r1, 0x0, 0x24002de8) r2 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000003f4ab4ef7ec0c41c27959918f48af14deae4258f1ab4653d0912ba03dcb5c0ea4ec872f9d7d9d2dcdffb65c3d6f728772475a33fa2c9b1f1ec31947c416e23e8be8c1c1c7400f04f467d15d588ada7a7212f90caef583e7cd70cb28080764700ea05f2ecccd67aac7be8e0c14f2ab42a7de64b67f0cf547e71afec2cbedc351fc649dbbe584b8d08cce1eb9f867ad0adc8e56ab0ffab26c800f96b1218d7e1bcd43ef08821dcf714df4f7a89bbe5cccb", @ANYRESHEX=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x7fff, 0x4) 145.39977ms ago: executing program 0 (id=1449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5418, 0x7fffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000004000000405d62aec4d410a5e310e8d6a6ab29d5d9f3daa26f31"]) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xe40cba990837148, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 88.422674ms ago: executing program 0 (id=1450): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d1050120000200000001090212"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 66.714435ms ago: executing program 2 (id=1451): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9800, &(0x7f0000000040)={0x0, 0x80, 0x80000}, 0x20) (async, rerun: 32) r1 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x2000) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) r4 = getpgrp(0x0) ptrace$getenv(0x4201, r4, 0x1, &(0x7f00000000c0)) 60.207406ms ago: executing program 3 (id=1452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) close(r1) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffff7) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) close(r1) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffff7) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) (async) 4.23529ms ago: executing program 2 (id=1453): r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c0000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300f7ff140000000000af148f582c652973d2eebeac2f258b511b8b32"], 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=184462432,\x00']) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x0, 0x0) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r4, &(0x7f0000000340)=""/72, 0x48) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0xde8}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 3.23547ms ago: executing program 3 (id=1454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.818549ms ago: executing program 3 (id=1455): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5a", 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r0, 0xf648c000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x1005, 0xfffffffffffffffe) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f0000000040)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffd}, 0x10) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ee", 0xfffffffffffffe70}], 0x1}}], 0x1, 0x9200000000000080) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000007c0)}, 0x7fff}], 0x1, 0x40003020, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f06397105b4bc071eb7092da21b9c394f1ad3a7d92d0aaaadc8cb50098f77d14ef193459c2f", @ANYRES8=r0, @ANYRES64=r6, @ANYRESOCT, @ANYRESOCT=r7], 0x5c}}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 0s ago: executing program 3 (id=1456): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xa8083) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000) kernel console output (not intermixed with test programs): iptor read/64, error -71 [ 46.915433][ T9] usb usb4-port1: attempt power cycle [ 47.117732][ T36] audit: type=1400 audit(1759808528.792:303): avc: denied { getopt } for pid=1363 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.139842][ T1364] overlay: Bad value for 'metacopy' [ 47.218818][ T36] audit: type=1400 audit(1759808528.892:304): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.255253][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 47.276352][ T9] usb 4-1: device descriptor read/8, error -71 [ 47.346705][ T36] audit: type=1326 audit(1759808529.022:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1392 comm="syz.2.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f865058eec9 code=0x0 [ 47.592395][ T1398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215 [ 47.624218][ T1400] rust_binder: Error while translating object. [ 47.633943][ T1400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.640587][ T1400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 47.666371][ T1402] futex_wake_op: syz.0.348 tries to shift op by 32; fix this program [ 48.223830][ T36] audit: type=1400 audit(1759808529.892:306): avc: denied { read write } for pid=1409 comm="syz.0.351" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.280725][ T36] audit: type=1400 audit(1759808529.892:307): avc: denied { open } for pid=1409 comm="syz.0.351" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.357994][ T9] usb 4-1: device descriptor read/8, error -71 [ 48.514783][ T1433] Unsupported ieee802154 address type: 0 [ 48.539535][ T1435] 9pnet_fd: Insufficient options for proto=fd [ 48.559136][ T1437] __vm_enough_memory: pid: 1437, comm: syz.1.360, bytes: 18014402804453376 not enough memory for the allocation [ 48.598142][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 48.675222][ T410] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.741948][ T1459] rust_binder: Write failure EFAULT in pid:298 [ 48.763953][ T1461] ./cgroup: Can't lookup blockdev [ 48.789221][ T1463] __vm_enough_memory: pid: 1463, comm: syz.1.369, bytes: 18014402804453376 not enough memory for the allocation [ 48.835209][ T410] usb 1-1: Using ep0 maxpacket: 8 [ 48.843789][ T410] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.855311][ T410] usb 1-1: config 179 has no interface number 0 [ 48.861649][ T410] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 48.873679][ T410] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 48.886098][ T410] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 48.896898][ T410] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.910661][ T410] usb 1-1: config 179 interface 65 has no altsetting 0 [ 48.917944][ T410] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 48.927603][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.035251][ T9] usb 4-1: device not accepting address 12, error -71 [ 49.042284][ T9] usb usb4-port1: unable to enumerate USB device [ 49.096369][ T1483] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.139060][ T1495] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 144, size: 193) [ 49.224304][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.242524][ T1495] rust_binder: Error while translating object. [ 49.261321][ T1495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.265396][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.267875][ T1495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 49.288798][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.307408][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.320270][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.322376][ T430] usb 1-1: USB disconnect, device number 12 [ 49.331214][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.415233][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.567713][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 49.576882][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.584991][ T9] usb 4-1: Product: syz [ 49.589276][ T9] usb 4-1: Manufacturer: syz [ 49.593906][ T9] usb 4-1: SerialNumber: syz [ 49.879121][ T1519] netlink: 92 bytes leftover after parsing attributes in process `syz.0.387'. [ 50.030390][ T1536] netlink: 'syz.2.393': attribute type 4 has an invalid length. [ 50.038204][ T1536] netlink: 'syz.2.393': attribute type 6 has an invalid length. [ 50.046063][ T1536] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.393'. [ 50.086033][ T1538] veth1: entered allmulticast mode [ 50.145217][ T430] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.176422][ T1541] rust_binder: Error while translating object. [ 50.176474][ T1541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 50.182809][ T1541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:205 [ 50.215188][ T1543] rust_binder: 207: no such ref 0 [ 50.230112][ T1543] rust_binder: Read failure Err(EAGAIN) in pid:207 [ 50.252962][ T1545] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.267724][ T1545] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 50.276701][ T1545] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 50.284651][ T1545] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 50.305195][ T430] usb 1-1: Using ep0 maxpacket: 8 [ 50.340011][ T1550] rust_binder: 213: no such ref 2 [ 50.354759][ T1550] rust_binder: Write failure EINVAL in pid:213 [ 50.364641][ T430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.369572][ T1558] rust_binder: Write failure EFAULT in pid:215 [ 50.383618][ T430] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 50.403158][ T1560] rust_binder: Error while translating object. [ 50.403230][ T1560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 50.406001][ T430] usb 1-1: can't read configurations, error -71 [ 50.412436][ T1560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 50.442284][ T1567] overlayfs: failed to clone upperpath [ 50.460727][ T1569] binder: Bad value for 'stats' [ 50.487379][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.487411][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.494007][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.502053][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.508797][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.517104][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.517115][ T1575] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 50.517135][ T1575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.523721][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.549354][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.551514][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:226 [ 50.557148][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.575014][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.581715][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.589570][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.596403][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.602981][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.609853][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.616650][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.623174][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.630111][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.636794][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.643430][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.650353][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.657287][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.664350][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.671098][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.677709][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.684256][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.690753][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.697374][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.704040][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.710771][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.717628][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.724659][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.731515][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.738514][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.745135][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.751648][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.758133][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.764698][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.771280][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.778090][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.784546][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.791071][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.797675][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.804159][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.810651][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.817127][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.823580][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.830340][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.836936][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.843522][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.850101][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.856655][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.863145][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.869717][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.876302][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.882961][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.889873][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.896656][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.903373][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.910544][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.916610][ T1589] 9pnet_fd: Insufficient options for proto=fd [ 50.917135][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.923807][ T1589] tmpfs: Unknown parameter '' [ 50.930181][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.942261][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.949016][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.285251][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 51.446782][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.454944][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 51.463620][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.465369][ T430] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 51.474235][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.491661][ T10] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.505861][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 51.515718][ T10] usb 2-1: string descriptor 0 read error: -22 [ 51.522107][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.532047][ T10] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 51.560668][ T1608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 51.626440][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 51.637486][ T430] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 51.651537][ T430] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 51.660713][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.669413][ T430] usb 1-1: config 0 descriptor?? [ 51.674757][ T1600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.682965][ T430] usbhid 1-1:0.0: can't add hid device: -22 [ 51.689033][ T430] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 51.750363][ T1616] 9pnet_fd: Insufficient options for proto=fd [ 51.750539][ T430] usb 2-1: USB disconnect, device number 11 [ 51.775467][ T31] usb 4-1: USB disconnect, device number 13 [ 51.805524][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 51.805542][ T36] audit: type=1400 audit(1759808533.482:326): avc: denied { getopt } for pid=1624 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.883411][ T10] usb 1-1: USB disconnect, device number 14 [ 51.915132][ T36] audit: type=1400 audit(1759808533.582:327): avc: denied { bind } for pid=1629 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.961216][ T1633] rust_binder: 312: no such ref 1 [ 51.966506][ T1633] rust_binder: inc_ref_done called when no active inc_refs [ 51.966527][ T1633] rust_binder: 312: no such ref 1 [ 51.979236][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 51.979999][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 52.002817][ T36] audit: type=1400 audit(1759808533.672:328): avc: denied { mount } for pid=1634 comm="syz.3.428" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.047433][ T36] audit: type=1326 audit(1759808533.722:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.3.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x0 [ 52.287769][ T36] audit: type=1400 audit(1759808533.962:330): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 52.315562][ T1642] binder: Unknown parameter '01777777777777777777777' [ 52.324275][ T1642] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.350989][ T1650] fuse: Unknown parameter '' [ 52.479427][ T1661] overlayfs: failed to clone upperpath [ 52.497965][ T36] audit: type=1400 audit(1759808534.172:331): avc: denied { accept } for pid=1662 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 52.523790][ T1666] No source specified [ 52.528610][ T1666] No source specified [ 52.969391][ T1673] rust_binder: Error in use_page_slow: ESRCH [ 52.969412][ T1673] rust_binder: use_range failure ESRCH [ 52.981340][ T1673] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 52.981373][ T1673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.989629][ T1673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:319 [ 53.255299][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 53.283409][ T1704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1704 comm=syz.1.450 [ 53.385553][ T1712] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 53.385573][ T1712] rust_binder: Error while translating object. [ 53.394637][ T1712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.401275][ T1712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 53.410856][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 53.426616][ T10] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 53.436018][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 53.445953][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 53.455100][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.539521][ T1714] rust_binder: Error in use_page_slow: ESRCH [ 53.539542][ T1714] rust_binder: use_range failure ESRCH [ 53.545719][ T1714] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 53.551301][ T1714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.559678][ T1714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:271 [ 53.627269][ T1720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 53.627290][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 53.667501][ T10] usb 4-1: string descriptor 0 read error: -71 [ 53.686397][ T10] usb 4-1: USB disconnect, device number 14 [ 53.740416][ T1728] netlink: 'syz.0.458': attribute type 27 has an invalid length. [ 53.748294][ T1728] lo: entered promiscuous mode [ 53.753287][ T1728] lo: entered allmulticast mode [ 53.759331][ T1728] tunl0: entered promiscuous mode [ 53.764550][ T1728] tunl0: entered allmulticast mode [ 53.770071][ T1728] gre0: entered promiscuous mode [ 53.775087][ T1728] gre0: entered allmulticast mode [ 53.780611][ T1728] gretap0: entered promiscuous mode [ 53.785900][ T1728] gretap0: entered allmulticast mode [ 53.791861][ T1728] erspan0: entered promiscuous mode [ 53.798048][ T1728] erspan0: entered allmulticast mode [ 53.803926][ T1728] ip_vti0: entered promiscuous mode [ 53.809240][ T1728] ip_vti0: entered allmulticast mode [ 53.814971][ T1728] ip6_vti0: entered promiscuous mode [ 53.820501][ T1728] ip6_vti0: entered allmulticast mode [ 53.826445][ T1728] sit0: entered promiscuous mode [ 53.831425][ T1728] sit0: entered allmulticast mode [ 53.837123][ T1728] ip6tnl0: entered promiscuous mode [ 53.842397][ T1728] ip6tnl0: entered allmulticast mode [ 53.848158][ T1728] ip6gre0: entered promiscuous mode [ 53.853500][ T1728] ip6gre0: entered allmulticast mode [ 53.859411][ T1728] ip6gretap0: entered promiscuous mode [ 53.864915][ T1728] ip6gretap0: entered allmulticast mode [ 53.871076][ T1728] bridge0: entered promiscuous mode [ 53.876528][ T1728] bridge0: entered allmulticast mode [ 53.882446][ T1728] vcan0: entered promiscuous mode [ 53.887557][ T1728] vcan0: entered allmulticast mode [ 53.892860][ T1728] dummy0: entered promiscuous mode [ 53.898396][ T1728] dummy0: entered allmulticast mode [ 53.903956][ T1728] veth0: entered promiscuous mode [ 53.909450][ T1728] veth0: entered allmulticast mode [ 53.915317][ T1728] veth1: entered promiscuous mode [ 53.920970][ T1728] veth1: entered allmulticast mode [ 53.926706][ T1728] wg0: entered promiscuous mode [ 53.931739][ T1728] wg0: entered allmulticast mode [ 53.937428][ T1728] wg1: entered promiscuous mode [ 53.942471][ T1728] wg1: entered allmulticast mode [ 53.947883][ T1728] wg2: entered promiscuous mode [ 53.952916][ T1728] wg2: entered allmulticast mode [ 53.958525][ T1728] veth0_to_bridge: entered promiscuous mode [ 53.964595][ T1728] veth0_to_bridge: entered allmulticast mode [ 53.972317][ T1728] veth1_to_bridge: entered promiscuous mode [ 53.978402][ T1728] veth1_to_bridge: entered allmulticast mode [ 53.985770][ T1728] veth0_to_bond: entered promiscuous mode [ 53.991743][ T1728] veth0_to_bond: entered allmulticast mode [ 53.998250][ T1728] bond_slave_0: entered promiscuous mode [ 54.004071][ T1728] bond_slave_0: entered allmulticast mode [ 54.010483][ T1728] veth1_to_bond: entered promiscuous mode [ 54.016421][ T1728] veth1_to_bond: entered allmulticast mode [ 54.023060][ T1728] bond_slave_1: entered promiscuous mode [ 54.028914][ T1728] bond_slave_1: entered allmulticast mode [ 54.035056][ T1728] veth0_to_team: entered promiscuous mode [ 54.040873][ T523] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 54.041535][ T1728] veth0_to_team: entered allmulticast mode [ 54.055322][ T1728] team_slave_0: entered promiscuous mode [ 54.061098][ T1728] team_slave_0: entered allmulticast mode [ 54.067467][ T1728] veth1_to_team: entered promiscuous mode [ 54.073347][ T1728] veth1_to_team: entered allmulticast mode [ 54.079857][ T1728] team_slave_1: entered promiscuous mode [ 54.085640][ T1728] team_slave_1: entered allmulticast mode [ 54.091860][ T1728] veth0_to_batadv: entered promiscuous mode [ 54.097883][ T1728] veth0_to_batadv: entered allmulticast mode [ 54.104352][ T1728] batadv_slave_0: entered promiscuous mode [ 54.110222][ T1728] batadv_slave_0: entered allmulticast mode [ 54.117002][ T1728] veth1_to_batadv: entered promiscuous mode [ 54.123113][ T1728] veth1_to_batadv: entered allmulticast mode [ 54.131094][ T1728] batadv_slave_1: entered promiscuous mode [ 54.137122][ T1728] batadv_slave_1: entered allmulticast mode [ 54.143716][ T1728] xfrm0: entered promiscuous mode [ 54.148980][ T1728] xfrm0: entered allmulticast mode [ 54.154509][ T1728] veth0_to_hsr: entered promiscuous mode [ 54.160242][ T1728] veth0_to_hsr: entered allmulticast mode [ 54.166722][ T1728] hsr_slave_0: entered promiscuous mode [ 54.172295][ T1728] hsr_slave_0: entered allmulticast mode [ 54.178814][ T1728] veth1_to_hsr: entered promiscuous mode [ 54.185187][ T1728] veth1_to_hsr: entered allmulticast mode [ 54.188727][ T36] audit: type=1400 audit(1759808535.862:332): avc: denied { shutdown } for pid=1735 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.192026][ T1728] hsr_slave_1: entered promiscuous mode [ 54.219935][ T1728] hsr_slave_1: entered allmulticast mode [ 54.226659][ T1728] veth1_virt_wifi: entered promiscuous mode [ 54.226666][ T523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.226695][ T523] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.232798][ T1728] veth1_virt_wifi: entered allmulticast mode [ 54.243080][ T523] usb 1-1: config 1 has no interface number 1 [ 54.253390][ T1728] veth0_virt_wifi: entered promiscuous mode [ 54.259301][ T523] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 54.265547][ T1728] veth0_virt_wifi: entered allmulticast mode [ 54.271355][ T523] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.285660][ T1728] veth1_vlan: entered promiscuous mode [ 54.307094][ T1728] veth1_vlan: entered allmulticast mode [ 54.313475][ T1728] veth0_vlan: entered allmulticast mode [ 54.324844][ T523] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.326505][ T1728] vlan0: entered promiscuous mode [ 54.334351][ T523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.339507][ T1728] vlan0: entered allmulticast mode [ 54.348026][ T523] usb 1-1: Product: syz [ 54.356950][ T523] usb 1-1: Manufacturer: syz [ 54.367218][ T523] usb 1-1: SerialNumber: syz [ 54.368290][ T1728] vlan1: entered promiscuous mode [ 54.377442][ T1728] vlan1: entered allmulticast mode [ 54.383130][ T1728] veth1_macvtap: entered allmulticast mode [ 54.390013][ T1728] veth0_macvtap: entered promiscuous mode [ 54.397656][ T1728] veth0_macvtap: entered allmulticast mode [ 54.404409][ T1728] macsec0: entered promiscuous mode [ 54.410069][ T1728] macsec0: entered allmulticast mode [ 54.417223][ T1728] tap0: entered promiscuous mode [ 54.422227][ T1728] tap0: entered allmulticast mode [ 54.428280][ T1728] syztnl0: entered promiscuous mode [ 54.433788][ T1728] syztnl0: entered allmulticast mode [ 54.589340][ T1764] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1764 comm=syz.2.471 [ 54.604043][ T1764] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2049 sclass=netlink_tcpdiag_socket pid=1764 comm=syz.2.471 [ 54.647443][ T523] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 54.655932][ T523] usb 1-1: found format II with max.bitrate = 0, frame size=30401 [ 54.664348][ T523] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 54.676992][ T523] usb 1-1: USB disconnect, device number 15 [ 54.693991][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.900659][ T1783] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 54.913279][ T46] tipc: Subscription rejected, illegal request [ 54.965848][ T36] audit: type=1400 audit(1759808536.642:333): avc: denied { create } for pid=1786 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 55.134090][ T36] audit: type=1400 audit(1759808536.802:334): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.168934][ T36] audit: type=1400 audit(1759808536.842:335): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.200016][ T1816] netlink: 312 bytes leftover after parsing attributes in process `syz.1.488'. [ 55.223380][ T1818] syz.0.490(1818): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 55.239776][ T1818] loop6: detected capacity change from 0 to 7 [ 55.488794][ T1822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.491'. [ 55.500817][ T1822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1822 comm=syz.3.491 [ 55.517098][ T1822] binder: Unknown parameter 'context[7' [ 55.574860][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288 [ 55.583081][ T1833] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 55.866321][ T1861] SELinux: policydb version 473262657 does not match my version range 15-33 [ 55.886107][ T1861] SELinux: failed to load policy [ 56.125201][ T430] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 56.272176][ T1873] rust_binder: Failed copying remainder into alloc: EFAULT [ 56.272208][ T1873] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 56.280276][ T1873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.288507][ T430] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.289211][ T1873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:356 [ 56.306806][ T430] usb 2-1: not running at top speed; connect to a high speed hub [ 56.332950][ T430] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 56.351583][ T430] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 56.370184][ T430] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 56.390039][ T430] usb 2-1: config 129 has no interface number 0 [ 56.405199][ T430] usb 2-1: config 129 has no interface number 1 [ 56.415226][ T430] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 56.445233][ T430] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 56.800261][ T430] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 56.841971][ T523] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 57.025895][ T430] usb 2-1: config 129 interface 135 has no altsetting 0 [ 57.045624][ T430] usb 2-1: config 129 interface 5 has no altsetting 0 [ 57.073958][ T430] usb 2-1: string descriptor 0 read error: -22 [ 57.097712][ T523] usb 1-1: unable to get BOS descriptor set [ 57.121796][ T523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 57.153882][ T523] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 57.193745][ T523] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 57.207105][ T523] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.220765][ T523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.237442][ T523] usb 1-1: Product:  [ 57.247739][ T523] usb 1-1: Manufacturer: ⠊ [ 57.258182][ T523] usb 1-1: SerialNumber: ᐉ [ 57.274242][ T1878] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 57.350236][ T430] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 57.362500][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.377270][ T430] usb 2-1: MIDIStreaming interface descriptor not found [ 57.491563][ T1891] netlink: 5 bytes leftover after parsing attributes in process `syz.3.514'. [ 57.501994][ T1891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.594000][ T430] usb 2-1: USB disconnect, device number 12 [ 57.622903][ T1901] netlink: 'syz.3.517': attribute type 32 has an invalid length. [ 57.702645][ T1878] netlink: 57 bytes leftover after parsing attributes in process `syz.0.509'. [ 57.717524][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 57.717554][ T36] audit: type=1400 audit(1759808539.392:341): avc: denied { bind } for pid=1876 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.946186][ T1915] GUP no longer grows the stack in syz.2.521 (1915): 200000005000-200000008000 (200000004000) [ 57.977545][ T1915] CPU: 0 UID: 0 PID: 1915 Comm: syz.2.521 Not tainted syzkaller #0 fb7788b0c98d0be826a5a6580fd4830f58b39720 [ 57.977588][ T1915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.977612][ T1915] Call Trace: [ 57.977620][ T1915] [ 57.977633][ T1915] __dump_stack+0x21/0x30 [ 57.977672][ T1915] dump_stack_lvl+0x10c/0x190 [ 57.977703][ T1915] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.977733][ T1915] ? futex_lock_pi_atomic+0xdd/0xc70 [ 57.977763][ T1915] dump_stack+0x19/0x20 [ 57.977793][ T1915] fixup_user_fault+0x63d/0x6d0 [ 57.977823][ T1915] fault_in_user_writeable+0x76/0xe0 [ 57.977846][ T1915] futex_lock_pi+0x258/0xa10 [ 57.977872][ T1915] ? futex_unqueue+0x136/0x160 [ 57.977895][ T1915] ? should_fail+0xf/0x20 [ 57.977918][ T1915] ? __cfi_futex_lock_pi+0x10/0x10 [ 57.977945][ T1915] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.977975][ T1915] ? futex_setup_timer+0xb4/0xd0 [ 57.977997][ T1915] ? __cfi_futex_wake_mark+0x10/0x10 [ 57.978027][ T1915] ? _raw_spin_unlock+0x45/0x60 [ 57.978055][ T1915] ? __switch_to_asm+0x3d/0x70 [ 57.978089][ T1915] do_futex+0x25c/0x500 [ 57.978114][ T1915] ? __cfi_do_futex+0x10/0x10 [ 57.978139][ T1915] __se_sys_futex+0x28f/0x300 [ 57.978164][ T1915] ? __x64_sys_futex+0x110/0x110 [ 57.978189][ T1915] ? __kasan_check_write+0x18/0x20 [ 57.978227][ T1915] __x64_sys_futex+0xe9/0x110 [ 57.978251][ T1915] x64_sys_call+0x227f/0x2ee0 [ 57.978285][ T1915] do_syscall_64+0x58/0xf0 [ 57.978312][ T1915] ? clear_bhb_loop+0x50/0xa0 [ 57.978336][ T1915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.978373][ T1915] RIP: 0033:0x7f865058eec9 [ 57.978397][ T1915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.978419][ T1915] RSP: 002b:00007f86514a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.978449][ T1915] RAX: ffffffffffffffda RBX: 00007f86507e5fa0 RCX: 00007f865058eec9 [ 57.978467][ T1915] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 57.978484][ T1915] RBP: 00007f8650611f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.978499][ T1915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.978514][ T1915] R13: 00007f86507e6038 R14: 00007f86507e5fa0 R15: 00007ffedd982688 [ 57.978540][ T1915] [ 58.064694][ T1925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=1925 comm=syz.2.524 [ 58.080196][ T1924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=1924 comm=syz.2.524 [ 58.131565][ T36] audit: type=1400 audit(1759808539.802:342): avc: denied { mount } for pid=1926 comm="syz.1.525" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.140443][ T523] cdc_ncm 1-1:1.0: bind() failure [ 58.142708][ T1927] rust_binder: Error while translating object. [ 58.147494][ T523] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 58.167536][ T1927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.175105][ T523] cdc_ncm 1-1:1.1: bind() failure [ 58.183587][ T1927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 58.196362][ T523] usb 1-1: USB disconnect, device number 16 [ 58.224663][ T1931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 58.268510][ T1935] tmpfs: Unknown parameter '' [ 58.270729][ T36] audit: type=1400 audit(1759808539.942:343): avc: denied { remount } for pid=1934 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.278763][ T1931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 58.363335][ T36] audit: type=1400 audit(1759808540.042:344): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.387730][ T36] audit: type=1400 audit(1759808540.062:345): avc: denied { watch watch_reads } for pid=1936 comm="syz.1.528" path="/101" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.445953][ T36] audit: type=1326 audit(1759808540.122:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.1.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6abd8eec9 code=0x0 [ 58.546360][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 58.559343][ T1939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 58.601224][ T1950] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 58.614928][ T1950] rust_binder: Error while translating object. [ 58.614964][ T1950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.621458][ T1950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 58.632310][ T36] audit: type=1400 audit(1759808540.302:347): avc: denied { read } for pid=1949 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.750517][ T36] audit: type=1400 audit(1759808540.422:348): avc: denied { write } for pid=1972 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.755749][ T1973] tmpfs: Unknown parameter 'u7' [ 58.774760][ T1974] tmpfs: Unknown parameter 'u7' [ 59.045321][ T523] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.147172][ T1993] netlink: 76 bytes leftover after parsing attributes in process `syz.0.544'. [ 59.157620][ T1993] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 59.205267][ T523] usb 4-1: Using ep0 maxpacket: 8 [ 59.220416][ T523] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 59.230915][ T523] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.244454][ T523] usb 4-1: config 1 interface 0 has no altsetting 0 [ 59.254489][ T523] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.263717][ T523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.272250][ T523] usb 4-1: Product: 纽퐦䵝붣᭲皓拏⎞댮淚硫껴既碚‑ቷ㇯濌鑜錰潊’슆柯랕ʩ抝쁭끆ㄑ뫍ᕀ [ 59.285836][ T523] usb 4-1: Manufacturer: 뉧ຠ㙴쏞ᆲᙟበ絣䢶㷷嶑쥡漫ᇤࠝ [ 59.294735][ T523] usb 4-1: SerialNumber: ୎鮧澭粩⡿⎟仳Ἕ侶薯⴬⻧뻮ㄑ꫶筹͡柠逺뮗묳ἧሌ骁欶蓭暄腾ੑ벆␼몥芉銕䤊ﵢ鈗濓緕筞좳ퟨ構鈮竜ㄔ飘⽨䱅礀朂磤頞娂쀂ℙ斘룑 [ 59.318291][ T1980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.326802][ T1980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.736164][ T1980] rust_binder: Write failure EFAULT in pid:397 [ 59.738047][ T523] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 59.761157][ T523] usb 4-1: USB disconnect, device number 15 [ 60.084641][ T36] audit: type=1400 audit(1759808541.752:349): avc: denied { execute } for pid=2021 comm="syz.2.555" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.109344][ T36] audit: type=1400 audit(1759808541.772:350): avc: denied { getopt } for pid=2021 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.135269][ T430] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.295250][ T430] usb 1-1: Using ep0 maxpacket: 16 [ 60.301736][ T430] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 60.310237][ T430] usb 1-1: config 0 has no interface number 0 [ 60.318175][ T430] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 60.327450][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.335528][ T430] usb 1-1: Product: syz [ 60.339745][ T430] usb 1-1: Manufacturer: syz [ 60.344347][ T430] usb 1-1: SerialNumber: syz [ 60.350335][ T430] usb 1-1: config 0 descriptor?? [ 60.415287][ T523] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 60.442729][ T2043] binder: Bad value for 'max' [ 60.448266][ T2043] binder: Bad value for 'max' [ 60.467417][ T2048] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 60.467444][ T2048] rust_binder: Error while translating object. [ 60.477865][ T2048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.484463][ T2048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 60.509039][ T2050] binder: Unknown parameter 'appraise' [ 60.538526][ T2055] netlink: 168 bytes leftover after parsing attributes in process `syz.3.565'. [ 60.557260][ T430] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 60.563911][ T430] usb 1-1: No valid video chain found. [ 60.582225][ T523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.588474][ T2057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 60.593394][ T2057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:419 [ 60.593393][ T523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.593435][ T523] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 60.629060][ T2059] FAT-fs (rnullb0): bogus number of reserved sectors [ 60.633129][ T523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.639525][ T2059] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 60.648299][ T523] usb 2-1: config 0 descriptor?? [ 60.678886][ T2061] netlink: 'syz.3.568': attribute type 11 has an invalid length. [ 60.746572][ T2072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 60.761100][ T430] usb 1-1: USB disconnect, device number 17 [ 60.867973][ T523] usbhid 2-1:0.0: can't add hid device: -71 [ 60.874246][ T523] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.884444][ T523] usb 2-1: USB disconnect, device number 13 [ 60.955208][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 61.115198][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 61.120974][ T9] usb 4-1: too many configurations: 236, using maximum allowed: 8 [ 61.130649][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.138674][ T9] usb 4-1: can't read configurations, error -61 [ 61.275258][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 61.435207][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 61.441025][ T9] usb 4-1: too many configurations: 236, using maximum allowed: 8 [ 61.450555][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.458557][ T9] usb 4-1: can't read configurations, error -61 [ 61.465356][ T9] usb usb4-port1: attempt power cycle [ 61.635980][ T2102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.581'. [ 61.685211][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.815424][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 61.836265][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 61.851971][ T10] usb 1-1: config 0 has no interface number 0 [ 61.861578][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 61.872620][ T9] usb 4-1: too many configurations: 236, using maximum allowed: 8 [ 61.885686][ T10] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b [ 61.899931][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 61.912971][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.931551][ T9] usb 4-1: can't read configurations, error -61 [ 61.945318][ T10] usb 1-1: Product: syz [ 61.959763][ T10] usb 1-1: Manufacturer: syz [ 61.974926][ T10] usb 1-1: SerialNumber: syz [ 61.992707][ T10] usb 1-1: config 0 descriptor?? [ 62.085219][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 62.121578][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 62.127337][ T9] usb 4-1: too many configurations: 236, using maximum allowed: 8 [ 62.136842][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 62.145086][ T9] usb 4-1: can't read configurations, error -61 [ 62.152191][ T9] usb usb4-port1: unable to enumerate USB device [ 62.214945][ T2093] tipc: Started in network mode [ 62.221834][ T2093] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 62.235277][ T2093] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 62.243896][ T2093] tipc: Enabled bearer , priority 10 [ 62.425600][ T10] rtl8150 1-1:0.51: couldn't find required endpoints [ 62.433317][ T10] rtl8150 1-1:0.51: probe with driver rtl8150 failed with error -5 [ 62.441663][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 62.450597][ T10] usb 1-1: USB disconnect, device number 18 [ 62.615272][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 62.620941][ T9] usb 2-1: too many configurations: 169, using maximum allowed: 8 [ 62.630129][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 62.637908][ T9] usb 2-1: can't read configurations, error -61 [ 62.765433][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 62.800785][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 62.800804][ T36] audit: type=1400 audit(1759808544.472:361): avc: denied { accept } for pid=2153 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.872312][ T36] audit: type=1400 audit(1759808544.542:362): avc: denied { setattr } for pid=2157 comm="syz.2.600" name="" dev="pipefs" ino=11136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 62.915279][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 62.920975][ T9] usb 2-1: too many configurations: 169, using maximum allowed: 8 [ 62.936274][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 62.944351][ T9] usb 2-1: can't read configurations, error -61 [ 62.951272][ T9] usb usb2-port1: attempt power cycle [ 62.958676][ T2160] binder: Bad value for 'defcontext' [ 63.215424][ T523] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.295297][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.315668][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 63.321244][ T9] usb 2-1: too many configurations: 169, using maximum allowed: 8 [ 63.330477][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 63.339099][ T9] usb 2-1: can't read configurations, error -61 [ 63.355269][ T10] tipc: Node number set to 1 [ 63.365321][ T523] usb 1-1: Using ep0 maxpacket: 8 [ 63.372481][ T523] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 63.381415][ T523] usb 1-1: config 179 has no interface number 0 [ 63.388377][ T523] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 63.400201][ T36] audit: type=1400 audit(1759808545.072:363): avc: denied { create } for pid=2163 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 63.421518][ T523] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 63.433588][ T523] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 63.444660][ T523] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 63.458507][ T523] usb 1-1: config 179 interface 65 has no altsetting 0 [ 63.465616][ T523] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 63.474863][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.485227][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 63.515603][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 63.521207][ T9] usb 2-1: too many configurations: 169, using maximum allowed: 8 [ 63.530440][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 63.537166][ T36] audit: type=1400 audit(1759808545.212:364): avc: denied { remount } for pid=2175 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 63.538214][ T9] usb 2-1: can't read configurations, error -61 [ 63.558754][ T2176] incfs: ino conflict with backing FS 1 [ 63.565341][ T9] usb usb2-port1: unable to enumerate USB device [ 63.572732][ T36] audit: type=1400 audit(1759808545.242:365): avc: denied { mounton } for pid=2175 comm="syz.2.607" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.686500][ T9] usb 1-1: USB disconnect, device number 19 [ 64.125306][ T430] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.207814][ T2198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 64.219731][ T2200] netlink: 'syz.0.614': attribute type 13 has an invalid length. [ 64.278250][ T430] usb 4-1: Using ep0 maxpacket: 16 [ 64.290618][ T430] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.295222][ T2208] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 64.300924][ T2208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 64.301001][ T430] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.310910][ T430] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.319403][ T2208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:333 [ 64.328204][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.328240][ T430] usb 4-1: Product: syz [ 64.328256][ T430] usb 4-1: Manufacturer: syz [ 64.328271][ T430] usb 4-1: SerialNumber: syz [ 64.388217][ T2211] overlay: Bad value for 'xino' [ 64.507617][ T36] audit: type=1400 audit(1759808546.182:366): avc: denied { map } for pid=2217 comm="syz.0.620" path="socket:[11783]" dev="sockfs" ino=11783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.553294][ T2188] __vm_enough_memory: pid: 2188, comm: syz.3.610, bytes: 18014402804453376 not enough memory for the allocation [ 64.566846][ T2218] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 64.679354][ T2225] TCP: TCP_TX_DELAY enabled [ 64.925305][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 65.076903][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 65.085954][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.097240][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 65.111453][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.120882][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.129469][ T9] usb 1-1: SerialNumber: syz [ 65.135448][ T2227] rust_binder: Error in use_page_slow: ESRCH [ 65.135488][ T2227] rust_binder: use_range failure ESRCH [ 65.140719][ T9] cdc_acm 1-1:1.0: Zero length descriptor references [ 65.141718][ T2227] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 65.148987][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 65.154425][ T2227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.170426][ T2227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:443 [ 65.297283][ T2244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=2244 comm=syz.2.629 [ 65.319696][ T2232] incfs: Can't find or create .index dir in ./cgroup [ 65.326544][ T2232] incfs: mount failed -22 [ 65.340841][ T2232] kvm: pic: non byte write [ 65.350479][ T9] usb 1-1: USB disconnect, device number 20 [ 65.353927][ T2232] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 65.378782][ T36] audit: type=1400 audit(1759808547.052:367): avc: denied { relabelto } for pid=2231 comm="syz.3.626" name="bus" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 65.405761][ T2250] __vm_enough_memory: pid: 2250, comm: syz.1.625, bytes: 18014402804453376 not enough memory for the allocation [ 65.405946][ T2250] __vm_enough_memory: pid: 2250, comm: syz.1.625, bytes: 18014402804453376 not enough memory for the allocation [ 65.420459][ T36] audit: type=1400 audit(1759808547.052:368): avc: denied { associate } for pid=2231 comm="syz.3.626" name="bus" dev="tmpfs" ino=760 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netcontrol_device_t:s0" [ 65.521485][ T2257] netlink: 'syz.2.631': attribute type 4 has an invalid length. [ 65.605661][ T2268] rust_binder: Error in use_page_slow: ESRCH [ 65.605684][ T2268] rust_binder: use_range failure ESRCH [ 65.611901][ T2268] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 65.617948][ T2269] rust_binder: Error in use_page_slow: ESRCH [ 65.618814][ T2268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.626389][ T2269] rust_binder: use_range failure ESRCH [ 65.632267][ T2268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:355 [ 65.641773][ T2269] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 65.656395][ T2269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.667986][ T2269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:355 [ 65.871905][ T2291] rust_binder: Write failure EFAULT in pid:347 [ 66.006328][ T2288] 9pnet_fd: Insufficient options for proto=fd [ 66.138674][ T36] audit: type=1400 audit(1759808547.812:369): avc: denied { map } for pid=2314 comm="syz.0.655" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.163732][ T36] audit: type=1400 audit(1759808547.812:370): avc: denied { execute } for pid=2314 comm="syz.0.655" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.189374][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.206042][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.217579][ T2318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 66.422137][ T2340] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.569595][ T2345] batadv_slave_1: entered promiscuous mode [ 66.584961][ T2344] batadv_slave_1: left promiscuous mode [ 66.766246][ T2335] __vm_enough_memory: pid: 2335, comm: syz.0.658, bytes: 18014402804453376 not enough memory for the allocation [ 66.790216][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.802152][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.818005][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.831850][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.842813][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.852606][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.862937][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.872416][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.882349][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.891655][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.901815][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.911190][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.316758][ T2373] binder: Bad value for 'max' [ 67.316764][ T2372] binder: Bad value for 'max' [ 67.354591][ T2377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 67.360444][ T2379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.468897][ T2383] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 67.475582][ T2383] rust_binder: Error while translating object. [ 67.484368][ T2383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.490874][ T2383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 67.586930][ T2392] rust_binder: Failed copying remainder into alloc: EFAULT [ 67.596611][ T2392] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 67.604103][ T2392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.612795][ T2392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:483 [ 67.694717][ T2395] rust_binder: validate_parent_fixup: new_min_offset=140737488355411, sg_entry.length=238 [ 67.704066][ T2395] rust_binder: Error while translating object. [ 67.714573][ T2395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.721411][ T2395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 67.795213][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.956444][ T9] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 67.964748][ T9] usb 1-1: config 0 has no interface number 1 [ 67.971059][ T9] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 67.981392][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.993035][ T9] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 68.002241][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.010309][ T9] usb 1-1: SerialNumber: syz [ 68.015872][ T9] usb 1-1: config 0 descriptor?? [ 68.203531][ T2397] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 68.203561][ T2397] rust_binder: Error while translating object. [ 68.213209][ T2397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.219761][ T2397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 68.225984][ T2389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.265821][ T2389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.717208][ T2407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 68.937271][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 68.937293][ T36] audit: type=1326 audit(1759808550.612:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7e98eec9 code=0x0 [ 68.950929][ T9] usb 1-1: Found UVC 0.00 device (0002:0000) [ 68.977502][ T36] audit: type=1326 audit(1759808550.612:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7e98eec9 code=0x0 [ 68.994292][ T9] usb 1-1: No valid video chain found. [ 69.001704][ T36] audit: type=1326 audit(1759808550.682:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7e98eec9 code=0x0 [ 69.031069][ T9] usb 1-1: USB disconnect, device number 21 [ 69.113564][ T36] audit: type=1400 audit(1759808550.782:378): avc: denied { setattr } for pid=2422 comm="syz.3.690" name="PACKET" dev="sockfs" ino=12997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.251281][ T2431] tipc: New replicast peer: 0.0.0.0 [ 69.257541][ T2431] tipc: Enabled bearer , priority 10 [ 69.276346][ T2431] netlink: 'syz.0.688': attribute type 16 has an invalid length. [ 69.290469][ T2431] netlink: 51490 bytes leftover after parsing attributes in process `syz.0.688'. [ 69.397563][ T2438] sock: sock_set_timeout: `syz.1.693' (pid 2438) tries to set negative timeout [ 69.444033][ T2440] rust_binder: Error while translating object. [ 69.444080][ T2440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.450102][ T430] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 69.455708][ T2440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 69.486084][ T430] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.526726][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.628733][ T2444] rust_binder: Error while translating object. [ 69.628786][ T2444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 69.644987][ T2444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:403 [ 69.660035][ T2445] cgroup: No subsys list or none specified [ 69.663785][ T36] audit: type=1400 audit(1759808551.332:379): avc: denied { create } for pid=2441 comm="syz.2.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.737664][ T36] audit: type=1400 audit(1759808551.332:380): avc: denied { mounton } for pid=2441 comm="syz.2.697" path="/259/file0" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.806243][ T2448] netlink: 'syz.0.699': attribute type 4 has an invalid length. [ 69.826192][ T2448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 69.850644][ T2448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 69.850682][ T2448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:406 [ 69.875173][ T36] audit: type=1400 audit(1759808551.542:381): avc: denied { ioctl } for pid=2451 comm="syz.2.701" path="socket:[13679]" dev="sockfs" ino=13679 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.055784][ T36] audit: type=1400 audit(1759808551.732:382): avc: denied { bind } for pid=2463 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.213993][ T2485] rust_binder: Got transaction with invalid offset. [ 70.214041][ T2485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.221039][ T2485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 70.254792][ T2487] rust_binder: Error while translating object. [ 70.264404][ T2487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 70.271939][ T2487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:510 [ 70.395197][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 70.502135][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.510968][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.555216][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 70.561645][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.572019][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 70.583084][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.592985][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7 [ 70.605572][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.615291][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.623309][ T9] usb 2-1: Product: syz [ 70.627642][ T9] usb 2-1: Manufacturer: syz [ 70.632269][ T9] usb 2-1: SerialNumber: syz [ 70.839834][ T2475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 70.840841][ T9] usb 2-1: unknown interface protocol 0x10, assuming v1 [ 70.857551][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 70.865439][ T9] usb 2-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 70.873905][ T9] usb 2-1: found format II with max.bitrate = 8, frame size=5 [ 70.881931][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 70.891700][ T9] usb 2-1: USB disconnect, device number 18 [ 70.901936][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.402022][ T2559] exFAT-fs (rnullb0): invalid boot record signature [ 71.414429][ T2559] exFAT-fs (rnullb0): failed to read boot sector [ 71.422259][ T2559] exFAT-fs (rnullb0): failed to recognize exfat type [ 71.481372][ T2565] binder: Unknown parameter '' [ 71.525667][ T2567] netlink: 'syz.2.736': attribute type 12 has an invalid length. [ 71.603076][ T2577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.603109][ T2577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.616432][ T2581] bpf: Bad value for 'uid' [ 71.650063][ T2581] 9p: Unknown uid 00000000004294967295 [ 71.656657][ T2584] rust_binder: Write failure EFAULT in pid:423 [ 71.737357][ T2587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=2587 comm=syz.1.743 [ 71.827337][ T2596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.745'. [ 71.944128][ T2609] SELinux: security_context_str_to_sid () failed with errno=-22 [ 71.982458][ T2615] netlink: 'syz.2.753': attribute type 7 has an invalid length. [ 72.033072][ T36] audit: type=1326 audit(1759808553.702:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865058eec9 code=0x7ffc0000 [ 72.056590][ T36] audit: type=1326 audit(1759808553.702:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865058eec9 code=0x7ffc0000 [ 72.080145][ T2627] VFS: Mount too revealing [ 72.179994][ T2646] tipc: Enabling of bearer rejected, already enabled [ 72.349135][ T2651] bpf: Bad value for 'mode' [ 72.357408][ T2662] overlayfs: failed to resolve './file1': -2 [ 72.467816][ T2656] rust_binder: 2651 RLIMIT_NICE not set [ 72.811693][ T2687] .N: renamed from veth0_to_bond (while UP) [ 73.023057][ T2690] incfs: ino conflict with backing FS 1 [ 73.074943][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 73.555692][ T2733] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 73.628689][ T2735] tipc: Started in network mode [ 73.628986][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.792'. [ 73.636868][ T2735] tipc: Node identity ac14140f, cluster identity 4711 [ 73.653912][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.792'. [ 73.658724][ T2735] tipc: New replicast peer: 255.255.255.255 [ 73.667969][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.792'. [ 73.674126][ T2735] tipc: Enabled bearer , priority 10 [ 73.682561][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.792'. [ 73.698388][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.792'. [ 73.749731][ T2741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 73.763224][ T2743] rust_binder: Write failure EFAULT in pid:543 [ 73.786211][ T2745] tipc: Enabled bearer , priority 10 [ 73.816656][ T2747] rust_binder: 547: no such ref 3 [ 73.821799][ T2747] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 73.829148][ T2747] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 73.836414][ T2747] rust_binder: 547: no such ref 0 [ 73.881282][ T2753] rust_binder: Write failure EFAULT in pid:553 [ 73.975239][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 74.092993][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 74.093012][ T36] audit: type=1400 audit(1759808555.762:399): avc: denied { accept } for pid=2767 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.135231][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 74.142183][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.162645][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 74.172363][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.181448][ T31] usb 2-1: config 0 descriptor?? [ 74.200608][ T2774] rust_binder: Error while translating object. [ 74.200643][ T2774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 74.207163][ T2774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:571 [ 74.589953][ T31] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 74.785259][ T31] tipc: Node number set to 2886997007 [ 74.792949][ T31] usb 2-1: USB disconnect, device number 19 [ 74.987717][ T2782] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.987741][ T2782] rust_binder: Read failure Err(EFAULT) in pid:574 [ 74.987906][ T2783] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.002710][ T2783] rust_binder: Read failure Err(EFAULT) in pid:574 [ 75.023756][ T36] audit: type=1326 audit(1759808556.692:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7e98eec9 code=0x0 [ 75.075797][ T2788] 9pnet_fd: Insufficient options for proto=fd [ 75.241980][ T2797] binder: Unknown parameter '' [ 75.260580][ T2799] mmap: syz.0.818 (2799) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.275871][ T2799] tipc: Bearer : already 2 bearers with priority 10 [ 75.283803][ T2799] tipc: Bearer : trying with adjusted priority [ 75.291250][ T2799] tipc: Enabled bearer , priority 9 [ 75.299569][ T2799] __vm_enough_memory: pid: 2799, comm: syz.0.818, bytes: 18014402804453376 not enough memory for the allocation [ 75.336358][ T2805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.337251][ T2807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 75.371066][ T2811] __nla_validate_parse: 60 callbacks suppressed [ 75.371083][ T2811] netlink: 188 bytes leftover after parsing attributes in process `syz.0.823'. [ 75.423613][ T2814] exFAT-fs (rnullb0): invalid boot record signature [ 75.430772][ T2814] exFAT-fs (rnullb0): failed to read boot sector [ 75.438790][ T2814] exFAT-fs (rnullb0): failed to recognize exfat type [ 75.549400][ T2819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.549535][ T2819] rust_binder: Error while translating object. [ 75.556205][ T2819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.562441][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 75.582378][ T2819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.611077][ T2823] binder: Unknown parameter '' [ 75.637030][ T2828] netlink: 'syz.2.828': attribute type 11 has an invalid length. [ 75.705609][ T2845] bpf: Bad value for 'mode' [ 76.183112][ T36] audit: type=1326 audit(1759808557.852:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6abd8eec9 code=0x7fc00000 [ 76.248159][ T2872] input: syz1 as /devices/virtual/input/input14 [ 76.294323][ T36] audit: type=1400 audit(1759808557.962:402): avc: denied { relabelfrom } for pid=2877 comm="syz.0.841" name="" dev="pipefs" ino=14934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.354461][ T2884] netlink: 'syz.0.844': attribute type 7 has an invalid length. [ 76.625217][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.746895][ T2905] rust_binder: Error while translating object. [ 76.746931][ T2905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.753215][ T2905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 76.776267][ T45] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 76.777501][ T2907] overlay: Unknown parameter '/' [ 76.787311][ T45] usb 2-1: config 0 has no interface number 1 [ 76.806111][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 76.808717][ T2907] 9pnet_fd: Insufficient options for proto=fd [ 76.822760][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.839780][ T45] usb 2-1: config 0 descriptor?? [ 76.856882][ T2909] rust_binder: Error while translating object. [ 76.856918][ T2909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 76.863457][ T2909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:588 [ 76.951258][ T2916] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 77.044348][ T2927] overlayfs: failed to resolve './file1': -2 [ 77.051450][ T2927] fuse: Unknown parameter 'blkio.bfq.idle_time' [ 77.126316][ T523] usb 2-1: USB disconnect, device number 20 [ 83.971290][ T2938] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.021759][ T2947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:482 [ 84.032795][ T2948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.065607][ T2948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.195953][ T2964] overlayfs: failed to clone upperpath [ 84.222881][ T2964] overlay: Unknown parameter 'subj_role' [ 84.425224][ T523] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 84.535083][ T2966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.876'. [ 84.544041][ T2966] netlink: 51 bytes leftover after parsing attributes in process `syz.2.876'. [ 84.553003][ T2966] netlink: 'syz.2.876': attribute type 4 has an invalid length. [ 84.576435][ T523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.587641][ T523] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 84.596980][ T523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.605838][ T523] usb 2-1: config 0 descriptor?? [ 84.765615][ T2978] tmpfs: Unknown parameter 'noinode32' [ 85.013062][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.022227][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.031917][ T2963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2963 comm=syz.1.875 [ 85.044584][ T2963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=2963 comm=syz.1.875 [ 85.065364][ T2963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:492 [ 85.067170][ T523] usbhid 2-1:0.0: can't add hid device: -71 [ 85.082575][ T523] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.091513][ T523] usb 2-1: USB disconnect, device number 21 [ 85.199754][ T36] audit: type=1400 audit(1759808566.872:403): avc: denied { map } for pid=2995 comm="syz.2.885" path="socket:[16021]" dev="sockfs" ino=16021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.313223][ T3006] fuse: Unknown parameter '!ʕfd' [ 85.320646][ T3008] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 85.397817][ T36] audit: type=1400 audit(1759808567.072:404): avc: denied { ioctl } for pid=3015 comm="syz.3.895" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.446249][ T3024] rust_binder: Write failure EFAULT in pid:620 [ 85.460930][ T36] audit: type=1400 audit(1759808567.132:405): avc: denied { read } for pid=3025 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.602063][ T3029] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 85.643445][ T36] audit: type=1400 audit(1759808567.312:406): avc: denied { create } for pid=3033 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 85.644245][ T3034] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.671943][ T3034] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 85.680763][ T3034] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.689290][ T3034] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 85.717159][ T3037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 85.730542][ T3038] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 85.754770][ T36] audit: type=1400 audit(1759808567.422:407): avc: denied { create } for pid=3039 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 85.876159][ T3057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.876190][ T3057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.883506][ T3057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.889646][ T3057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.018438][ T3065] netlink: 'syz.1.912': attribute type 13 has an invalid length. [ 86.156207][ T3073] binfmt_misc: register: failed to install interpreter file ./cgroup [ 86.164762][ T3073] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 86.310525][ T3081] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 86.335108][ T3084] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 86.346619][ T3087] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.358063][ T36] audit: type=1400 audit(1759808568.032:408): avc: denied { relabelto } for pid=3083 comm="syz.3.920" name="file0" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 86.388820][ T36] audit: type=1400 audit(1759808568.032:409): avc: denied { associate } for pid=3083 comm="syz.3.920" name="file0" dev="tmpfs" ino=1089 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 86.421388][ T36] audit: type=1400 audit(1759808568.092:410): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 86.434395][ T3091] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 86.457993][ T3091] SELinux: failed to load policy [ 86.467673][ T3091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.467700][ T3091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:631 [ 86.595250][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 86.640876][ T3095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 86.651906][ T3095] input: syz1 as /devices/virtual/input/input16 [ 86.755249][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 86.767186][ T9] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 86.781067][ T9] usb 2-1: config 0 has no interface number 0 [ 86.793030][ T9] usb 2-1: config 0 interface 185 has no altsetting 0 [ 86.808117][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5580, bcdDevice=6a.61 [ 86.817579][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.826138][ T9] usb 2-1: Product: syz [ 86.830623][ T9] usb 2-1: Manufacturer: 㗸ꥱ੨嵩䗸Ή᫨횸ꖝ䈐᥯ [ 86.838300][ T9] usb 2-1: SerialNumber: syz [ 86.845462][ T9] usb 2-1: config 0 descriptor?? [ 86.886620][ T3117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 86.890045][ T3117] netlink: 'syz.3.932': attribute type 15 has an invalid length. [ 86.907611][ T3117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.932'. [ 86.969702][ T3119] 9pnet_fd: Insufficient options for proto=fd [ 86.969755][ T3120] 9pnet_fd: Insufficient options for proto=fd [ 87.033613][ T3122] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.053595][ T3087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.059274][ T3124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653 [ 87.063043][ T3087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.089390][ T9] usb 2-1: USB disconnect, device number 22 [ 87.114867][ T3129] rust_binder: Write failure EFAULT in pid:657 [ 87.441477][ T36] audit: type=1400 audit(1759808569.112:411): avc: denied { ioctl } for pid=3145 comm="syz.0.944" path="socket:[16288]" dev="sockfs" ino=16288 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.445190][ T3146] netlink: 104 bytes leftover after parsing attributes in process `syz.0.944'. [ 87.831863][ T3155] netlink: 9 bytes leftover after parsing attributes in process `syz.1.948'. [ 87.840862][ T3155] z00X: renamed from gretap0 (while UP) [ 87.847759][ T3155] z00X: entered allmulticast mode [ 87.909299][ T3162] SELinux: ebitmap: start bit 64 comes after start bit 1152 [ 87.917852][ T3162] SELinux: failed to load policy [ 87.982117][ T3169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.990313][ T3167] netlink: 'syz.1.953': attribute type 16 has an invalid length. [ 87.990760][ T3169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.006840][ T3167] binder: Unknown parameter 's&tal' [ 88.275235][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 88.405235][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.573741][ T36] audit: type=1400 audit(1759808570.242:412): avc: denied { nlmsg_tty_audit } for pid=3190 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.631230][ T3199] overlay: Bad value for 'verity' [ 88.646363][ T3192] rust_binder: Error while translating object. [ 88.646468][ T3192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.652846][ T3192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:665 [ 88.662401][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.915235][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 89.045241][ T9] usb 2-1: device descriptor read/64, error -71 [ 89.295198][ T9] usb 2-1: device descriptor read/64, error -71 [ 89.725347][ T9] usb usb2-port1: attempt power cycle [ 89.784967][ T3236] overlayfs: failed to resolve './file1': -2 [ 89.923615][ T3243] 9pnet_fd: Insufficient options for proto=fd [ 90.065301][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 90.086311][ T9] usb 2-1: device descriptor read/8, error -71 [ 90.101429][ T3247] x_tables: duplicate underflow at hook 1 [ 90.216327][ T9] usb 2-1: device descriptor read/8, error -71 [ 90.455230][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 90.476523][ T9] usb 2-1: device descriptor read/8, error -71 [ 90.606567][ T9] usb 2-1: device descriptor read/8, error -71 [ 90.694706][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 90.694723][ T36] audit: type=1326 audit(1759808572.362:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3264 comm="syz.0.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4601b8eec9 code=0x0 [ 90.724602][ T9] usb usb2-port1: unable to enumerate USB device [ 91.445215][ T45] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 91.596431][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.606864][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.616074][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 91.627375][ T45] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.636573][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.645796][ T3268] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.653884][ T45] hub 2-1:1.0: bad descriptor, ignoring hub [ 91.660034][ T45] hub 2-1:1.0: probe with driver hub failed with error -5 [ 91.667588][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 91.672838][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 91.678833][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 91.684918][ T45] cdc_wdm 2-1:1.0: Unknown control protocol [ 91.705595][ T36] audit: type=1400 audit(1759808573.382:416): avc: denied { mounton } for pid=3282 comm="syz.3.997" path="/proc/671/cgroup" dev="proc" ino=16770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 91.762036][ T3288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.762064][ T3288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:676 [ 91.965963][ T45] usb 2-1: USB disconnect, device number 27 [ 92.295281][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 92.446424][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.456598][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.465639][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 92.476670][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 92.485745][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.494824][ T3268] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 92.502782][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 92.508838][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 92.516191][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 92.521508][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 92.527754][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 92.533715][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.650779][ T36] audit: type=1400 audit(1759808574.322:417): avc: denied { listen } for pid=3301 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.679672][ T36] audit: type=1400 audit(1759808574.322:418): avc: denied { shutdown } for pid=3301 comm="syz.3.1005" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.727952][ T3311] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.727978][ T3311] rust_binder: Read failure Err(EFAULT) in pid:685 [ 92.785030][ T36] audit: type=1400 audit(1759808574.452:419): avc: denied { nlmsg_write } for pid=3314 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.817514][ T45] usb 2-1: USB disconnect, device number 28 [ 92.856159][ T36] audit: type=1400 audit(1759808574.522:420): avc: denied { mount } for pid=3324 comm="syz.0.1012" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.035184][ T36] audit: type=1400 audit(1759808574.702:421): avc: denied { setattr } for pid=3352 comm="syz.0.1021" name="KEY" dev="sockfs" ino=17631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.136348][ T36] audit: type=1400 audit(1759808574.812:422): avc: denied { read } for pid=3371 comm="syz.2.1026" name="file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.162708][ T36] audit: type=1400 audit(1759808574.812:423): avc: denied { open } for pid=3371 comm="syz.2.1026" path="/356/file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.325823][ T3408] rust_binder: 3400 RLIMIT_NICE not set [ 93.326107][ T3400] rust_binder: Write failure EINVAL in pid:714 [ 93.356139][ T523] rust_binder: 3399: removing orphan mapping 0:1168 [ 93.382028][ T3412] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 93.391395][ T3416] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 93.391421][ T3416] rust_binder: Error while translating object. [ 93.402459][ T3416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.409244][ T3416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:717 [ 93.445041][ T3420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:568 [ 93.457460][ T36] audit: type=1400 audit(1759808575.132:424): avc: denied { audit_write } for pid=3422 comm="syz.3.1045" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 93.525998][ T3432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.526106][ T3432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 93.583863][ T3439] rust_binder: 3433 RLIMIT_NICE not set [ 93.594079][ T3433] rust_binder: Write failure EINVAL in pid:571 [ 93.594277][ T3442] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 93.605941][ T3442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 93.613872][ T3442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:733 [ 93.636504][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 93.983925][ T3444] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 93.983947][ T3444] rust_binder: Error while translating object. [ 93.996921][ T3444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.003288][ T3444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 94.035747][ T3451] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1054'. [ 94.175250][ T3460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1057'. [ 94.250677][ T3466] mmap: syz.0.1058 (3466): VmData 29212672 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 94.316942][ T45] rust_binder: 3424: removing orphan mapping 0:1168 [ 94.557657][ T3473] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 94.566064][ T3473] rust_binder: Write failure EINVAL in pid:739 [ 95.123345][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.146826][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.162375][ T3480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.162415][ T3480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:743 [ 95.675241][ T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 95.750752][ T3493] rust_binder: Write failure EFAULT in pid:745 [ 95.778375][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.793293][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.806396][ T3497] incfs: Options parsing error. -22 [ 95.811891][ T3497] incfs: mount failed -22 [ 95.817043][ T3497] tmpfs: Unsupported parameter 'mpol' [ 95.822691][ T3497] binder: Bad value for 'defcontext' [ 95.836224][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.846652][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.857874][ T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.867090][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.875104][ T45] usb 2-1: SerialNumber: syz [ 96.081999][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 96.091725][ T3491] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 96.093539][ T45] usb 2-1: 0:2 : does not exist [ 96.108267][ T45] usb 2-1: USB disconnect, device number 29 [ 96.117624][ T3089] udevd[3089]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.375905][ T3504] rust_binder: Write failure EFAULT in pid:751 [ 96.408095][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 96.408116][ T36] audit: type=1400 audit(1759808578.082:432): avc: denied { bind } for pid=3507 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.415757][ T3508] 9pnet_fd: p9_fd_create_tcp (3508): problem connecting socket to 127.0.0.1 [ 96.471616][ T3515] rust_binder: 757: no such ref 2 [ 96.498738][ T36] audit: type=1400 audit(1759808578.172:433): avc: denied { write } for pid=3519 comm="syz.3.1081" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.542842][ T36] audit: type=1400 audit(1759808578.212:434): avc: denied { execute } for pid=3523 comm="syz.0.1082" name="file0" dev="ramfs" ino=17368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 96.548717][ T3524] x_tables: duplicate entry at hook 2 [ 96.565387][ T36] audit: type=1400 audit(1759808578.212:435): avc: denied { execute_no_trans } for pid=3523 comm="syz.0.1082" path="/file0" dev="ramfs" ino=17368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 96.574025][ T3524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1082'. [ 96.628911][ T3527] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 96.628942][ T3527] rust_binder: Error while translating object. [ 96.643166][ T3527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.652033][ T3527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 96.663888][ T3529] exFAT-fs (rnullb0): invalid boot record signature [ 96.687746][ T3532] cgroup: Name too long [ 96.688286][ T36] audit: type=1400 audit(1759808578.362:436): avc: denied { read } for pid=3531 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.695610][ T3529] exFAT-fs (rnullb0): failed to read boot sector [ 96.723846][ T3529] exFAT-fs (rnullb0): failed to recognize exfat type [ 96.825308][ T36] audit: type=1401 audit(1759808578.502:437): op=setxattr invalid_context="system_u:object_r:apt_var_lib_t:s0" [ 96.940751][ T3556] netlink: 'syz.0.1093': attribute type 64 has an invalid length. [ 96.948776][ T3556] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1093'. [ 96.974261][ T3561] fuse: Bad value for 'user_id' [ 96.979313][ T3561] fuse: Bad value for 'user_id' [ 97.009175][ T36] audit: type=1400 audit(1759808578.682:438): avc: denied { accept } for pid=3565 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.145412][ T3581] overlayfs: failed to clone lowerpath [ 97.151423][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 97.177017][ T3594] overlayfs: failed to clone upperpath [ 97.188098][ T3573] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 97.195312][ T3573] rust_binder: Write failure EINVAL in pid:779 [ 97.785569][ T36] audit: type=1400 audit(1759808579.462:439): avc: denied { read } for pid=3613 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.883763][ T36] audit: type=1400 audit(1759808579.552:440): avc: denied { map } for pid=3617 comm="syz.0.1113" path="socket:[18085]" dev="sockfs" ino=18085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.907368][ T36] audit: type=1400 audit(1759808579.572:441): avc: denied { ioctl } for pid=3617 comm="syz.0.1113" path="socket:[18084]" dev="sockfs" ino=18084 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.031738][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 98.078691][ T3626] 9pnet_fd: Insufficient options for proto=fd [ 98.570416][ T3635] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 98.570447][ T3635] rust_binder: Error while translating object. [ 98.582945][ T3635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.589501][ T3635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:787 [ 98.736876][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 98.897782][ T3654] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1127'. [ 98.947424][ T3659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:796 [ 98.987877][ T3661] rust_binder: Write failure EFAULT in pid:798 [ 99.107778][ T3669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.122953][ T3669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.475196][ T3686] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1139'. [ 99.739837][ T3713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1150'. [ 99.750282][ T3713] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1150'. [ 99.759555][ T3713] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1150'. [ 99.845404][ T3737] fuse: Bad value for 'group_id' [ 99.850435][ T3737] fuse: Bad value for 'group_id' [ 99.924568][ T3751] incfs: Error accessing: ./file0. [ 99.929910][ T3751] incfs: mount failed -20 [ 99.934695][ T3751] overlay: ./file0 is not a directory [ 100.212529][ T3780] tmpfs: Unknown parameter 'րNever' [ 100.269514][ T3784] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 100.362349][ T3791] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1178'. [ 100.544343][ T3811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:810 [ 100.544693][ T3811] netlink: 'syz.3.1185': attribute type 27 has an invalid length. [ 100.569056][ T3811] lo: entered promiscuous mode [ 100.573898][ T3811] lo: entered allmulticast mode [ 100.580559][ T3811] tunl0: entered promiscuous mode [ 100.587404][ T3811] tunl0: entered allmulticast mode [ 100.594177][ T3811] gre0: entered promiscuous mode [ 100.599321][ T3811] gre0: entered allmulticast mode [ 100.605460][ T3811] gretap0: entered promiscuous mode [ 100.610734][ T3811] gretap0: entered allmulticast mode [ 100.616708][ T3811] erspan0: entered promiscuous mode [ 100.622523][ T3811] erspan0: entered allmulticast mode [ 100.628555][ T3811] ip_vti0: entered promiscuous mode [ 100.633864][ T3811] ip_vti0: entered allmulticast mode [ 100.639873][ T3811] ip6_vti0: entered promiscuous mode [ 100.645481][ T3811] ip6_vti0: entered allmulticast mode [ 100.651384][ T3811] sit0: entered promiscuous mode [ 100.656611][ T3811] sit0: entered allmulticast mode [ 100.662404][ T3811] ip6tnl0: entered promiscuous mode [ 100.667842][ T3811] ip6tnl0: entered allmulticast mode [ 100.673721][ T3811] ip6gre0: entered promiscuous mode [ 100.679238][ T3811] ip6gre0: entered allmulticast mode [ 100.685117][ T3811] ip6gretap0: entered promiscuous mode [ 100.691187][ T3811] ip6gretap0: entered allmulticast mode [ 100.697414][ T3811] bridge0: entered promiscuous mode [ 100.702886][ T3811] bridge0: entered allmulticast mode [ 100.709241][ T3811] vcan0: entered promiscuous mode [ 100.714581][ T3811] vcan0: entered allmulticast mode [ 100.720475][ T3811] dummy0: entered promiscuous mode [ 100.725988][ T3811] dummy0: entered allmulticast mode [ 100.731719][ T3811] veth0: entered promiscuous mode [ 100.737360][ T3811] veth0: entered allmulticast mode [ 100.743034][ T3811] veth1: entered promiscuous mode [ 100.748409][ T3811] veth1: entered allmulticast mode [ 100.754136][ T3811] wg0: entered promiscuous mode [ 100.759407][ T3811] wg0: entered allmulticast mode [ 100.764854][ T3811] wg1: entered promiscuous mode [ 100.770256][ T3811] wg1: entered allmulticast mode [ 100.776024][ T3811] wg2: entered promiscuous mode [ 100.780973][ T3811] wg2: entered allmulticast mode [ 100.786604][ T3811] veth0_to_bridge: entered promiscuous mode [ 100.792770][ T3811] veth0_to_bridge: entered allmulticast mode [ 100.799948][ T3811] veth1_to_bridge: entered promiscuous mode [ 100.806412][ T3811] veth1_to_bridge: entered allmulticast mode [ 100.815540][ T3811] veth0_to_bond: entered promiscuous mode [ 100.821468][ T3811] veth0_to_bond: entered allmulticast mode [ 100.828587][ T3811] bond_slave_0: entered promiscuous mode [ 100.834348][ T3811] bond_slave_0: entered allmulticast mode [ 100.841158][ T3811] veth1_to_bond: entered promiscuous mode [ 100.847719][ T3811] veth1_to_bond: entered allmulticast mode [ 100.854305][ T3811] bond_slave_1: entered promiscuous mode [ 100.860221][ T3811] bond_slave_1: entered allmulticast mode [ 100.866747][ T3811] veth0_to_team: entered promiscuous mode [ 100.872632][ T3811] veth0_to_team: entered allmulticast mode [ 100.879402][ T3811] team_slave_0: entered promiscuous mode [ 100.885548][ T3811] team_slave_0: entered allmulticast mode [ 100.892176][ T3811] veth1_to_team: entered promiscuous mode [ 100.898349][ T3811] veth1_to_team: entered allmulticast mode [ 100.905550][ T3811] team_slave_1: entered promiscuous mode [ 100.911564][ T3811] team_slave_1: entered allmulticast mode [ 100.918934][ T3811] veth0_to_batadv: entered promiscuous mode [ 100.925303][ T3811] veth0_to_batadv: entered allmulticast mode [ 100.931951][ T3811] batadv_slave_0: entered promiscuous mode [ 100.938136][ T3811] batadv_slave_0: entered allmulticast mode [ 100.944661][ T3811] veth1_to_batadv: entered promiscuous mode [ 100.961226][ T3811] veth1_to_batadv: entered allmulticast mode [ 100.968082][ T3811] batadv_slave_1: entered promiscuous mode [ 100.984104][ T3811] batadv_slave_1: entered allmulticast mode [ 100.990960][ T3811] xfrm0: entered promiscuous mode [ 100.996857][ T3811] xfrm0: entered allmulticast mode [ 101.002557][ T3811] veth0_to_hsr: entered promiscuous mode [ 101.008312][ T3811] veth0_to_hsr: entered allmulticast mode [ 101.014525][ T3811] hsr_slave_0: entered promiscuous mode [ 101.020450][ T3811] hsr_slave_0: entered allmulticast mode [ 101.026972][ T3811] veth1_to_hsr: entered promiscuous mode [ 101.032706][ T3811] veth1_to_hsr: entered allmulticast mode [ 101.039434][ T3811] hsr_slave_1: entered promiscuous mode [ 101.045155][ T3811] hsr_slave_1: entered allmulticast mode [ 101.056053][ T3811] veth1_virt_wifi: entered promiscuous mode [ 101.062031][ T3811] veth1_virt_wifi: entered allmulticast mode [ 101.069568][ T3811] veth0_virt_wifi: entered promiscuous mode [ 101.075781][ T3811] veth0_virt_wifi: entered allmulticast mode [ 101.082780][ T3811] veth1_vlan: entered promiscuous mode [ 101.088802][ T3811] veth1_vlan: entered allmulticast mode [ 101.094997][ T3811] veth0_vlan: entered allmulticast mode [ 101.101727][ T3811] vlan0: entered promiscuous mode [ 101.107147][ T3811] vlan0: entered allmulticast mode [ 101.112805][ T3811] vlan1: entered promiscuous mode [ 101.118393][ T3811] vlan1: entered allmulticast mode [ 101.124145][ T3811] veth1_macvtap: entered allmulticast mode [ 101.130932][ T3811] veth0_macvtap: entered promiscuous mode [ 101.137613][ T3811] veth0_macvtap: entered allmulticast mode [ 101.144834][ T3811] macsec0: entered promiscuous mode [ 101.153195][ T3811] macsec0: entered allmulticast mode [ 101.378497][ T3843] input: syz1 as /devices/virtual/input/input18 [ 101.387920][ T3843] netlink: 'syz.3.1195': attribute type 4 has an invalid length. [ 101.449456][ T3864] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1202'. [ 101.484418][ T3871] 9pnet_fd: Insufficient options for proto=fd [ 101.570766][ T3881] rust_binder: Write failure EFAULT in pid:821 [ 101.598153][ T3884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.613331][ T3884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.622188][ T3884] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 101.622218][ T3884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 101.622231][ T3885] rust_binder: Error while translating object. [ 101.622268][ T3885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 101.630401][ T3884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:823 [ 101.640736][ T3885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:823 [ 102.307811][ T3897] input: syz0 as /devices/virtual/input/input19 [ 102.486629][ T3922] fuse: Unknown parameter 'fowner<00000000000943272803' [ 102.507809][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 102.507829][ T36] audit: type=1400 audit(1759808584.182:445): avc: denied { create } for pid=3925 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.551990][ T3936] rust_binder: Write failure EFAULT in pid:848 [ 102.584263][ T3938] netlink: 'syz.3.1228': attribute type 5 has an invalid length. [ 102.592102][ T3938] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1228'. [ 102.602334][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.610914][ T3939] rust_binder: Error in use_page_slow: ESRCH [ 102.616161][ T3939] rust_binder: use_range failure ESRCH [ 102.622987][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.628047][ T3939] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 102.629260][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.641415][ T3939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.650077][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.662356][ T3939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:850 [ 102.672044][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.685302][ T3945] veth0_to_team: mtu greater than device maximum [ 102.693693][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.727006][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.739939][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.754744][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.782850][ T36] audit: type=1400 audit(1759808584.452:446): avc: denied { bind } for pid=3953 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.810863][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.1228 [ 102.965714][ T3971] 9pnet_fd: Insufficient options for proto=fd [ 103.265974][ T4004] 9pnet_fd: Insufficient options for proto=fd [ 103.406823][ T4030] overlayfs: failed to clone upperpath [ 103.434556][ T36] audit: type=1326 audit(1759808585.102:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.2.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865058eec9 code=0x0 [ 103.494726][ T4042] overlayfs: regular lower layers cannot follow data lower layers [ 103.926927][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.936533][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.973501][ T36] audit: type=1400 audit(1759808585.642:448): avc: denied { read } for pid=4071 comm="syz.0.1271" name="file0" dev="tmpfs" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.068875][ T4086] netlink: 'syz.0.1277': attribute type 27 has an invalid length. [ 104.368210][ T4138] /dev/nbd0: Can't lookup blockdev [ 104.381564][ T4138] netlink: 'syz.0.1297': attribute type 13 has an invalid length. [ 104.456181][ T4155] 9pnet_fd: Insufficient options for proto=fd [ 104.569978][ T36] audit: type=1400 audit(1759808586.242:449): avc: denied { write } for pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19301 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.664839][ T4157] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1305'. [ 104.698999][ T4196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'. [ 104.728761][ T4204] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 104.747356][ T4206] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 104.801473][ T4212] x_tables: unsorted entry at hook 2 [ 104.850953][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.850993][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.857746][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.864186][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.873135][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.875773][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 104.879975][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.896429][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.902710][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.909208][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.915805][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.922150][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.928662][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.935186][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.941629][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.948550][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.954870][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.961211][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.967573][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.974419][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.980678][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.987040][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.993352][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 104.999785][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.007568][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.013948][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.020368][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.026788][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.033080][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.040325][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.049389][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.055893][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.062217][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.071185][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.077479][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.084102][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.090604][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.097250][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.103540][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.109814][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.116227][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.122514][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.130351][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.136745][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.143056][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.149197][ T36] audit: type=1400 audit(2000000000.350:450): avc: denied { execute } for pid=4267 comm="syz.2.1341" path="/dev/ashmem" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.178782][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.178815][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.185225][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.191538][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.197850][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.204151][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.210596][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.217145][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.223452][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.230363][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.236852][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.243164][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.249542][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.255945][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.262236][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.268502][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.274721][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.280939][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.287277][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.293476][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.299717][ T4226] rust_binder: Write failure EINVAL in pid:876 [ 105.359047][ T4277] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 106.010525][ T36] audit: type=1326 audit(2000000001.220:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.1349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f865058eec9 code=0x0 [ 106.213863][ T4298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.222706][ T4298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.347777][ T36] audit: type=1326 audit(2000000001.560:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.1.1353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6abd8eec9 code=0x0 [ 107.191495][ T36] audit: type=1400 audit(2000000002.400:453): avc: denied { create } for pid=4331 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 107.480495][ T36] audit: type=1400 audit(2000000002.690:454): avc: denied { execute_no_trans } for pid=4390 comm="syz.2.1385" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.535173][ T36] audit: type=1326 audit(2000000002.690:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.585173][ T36] audit: type=1326 audit(2000000002.690:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.609701][ T36] audit: type=1326 audit(2000000002.690:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.633796][ T36] audit: type=1326 audit(2000000002.690:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.657289][ T36] audit: type=1326 audit(2000000002.690:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.680994][ T36] audit: type=1326 audit(2000000002.690:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.705164][ T36] audit: type=1326 audit(2000000002.690:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.729452][ T36] audit: type=1326 audit(2000000002.690:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.753065][ T36] audit: type=1326 audit(2000000002.690:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 107.777057][ T36] audit: type=1326 audit(2000000002.690:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7e98eec9 code=0x50000 [ 108.371941][ T4419] netlink: 680 bytes leftover after parsing attributes in process `syz.1.1394'. [ 108.393584][ T4424] fuse: Bad value for 'fd' [ 108.435810][ T4437] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1394'. [ 108.454113][ T4439] overlayfs: failed to clone upperpath [ 108.497803][ T4447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1403'. [ 108.604914][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.613830][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.620458][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.626837][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.633305][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.639583][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.645977][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.652224][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.658508][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.664927][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.671285][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.677809][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.684354][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.690785][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.697091][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.703768][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.710159][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.716680][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.723105][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.729734][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.736080][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.742316][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.749211][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.755893][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.762333][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.768799][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.775002][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.781476][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.787810][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.794152][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.800487][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.807115][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.813524][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.819891][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.826183][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.832552][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.838934][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.845499][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.851863][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.858159][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.864408][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.870688][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.877144][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.883390][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.889692][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.896004][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.902520][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.908925][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.917154][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.923558][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.929863][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.936300][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.942594][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.949164][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.955473][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.961939][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.968285][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.974793][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.981070][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.987493][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 108.993779][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 109.005427][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 109.011794][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 109.019215][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 109.025533][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 109.137437][ T4494] overlayfs: failed to clone upperpath [ 109.237487][ T4501] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1420'. [ 109.326361][ T4531] tipc: Enabling of bearer rejected, media not registered [ 109.797683][ T4571] Invalid ELF header magic: != ELF [ 110.137093][ T4579] 9pnet_fd: Insufficient options for proto=fd [ 110.137515][ T4581] 9pnet_fd: Insufficient options for proto=fd [ 110.174632][ T4587] incfs: Error accessing: ./file0. [ 110.180011][ T4589] incfs: Error accessing: ./file0. [ 110.185858][ T4589] incfs: mount failed -20 [ 110.190321][ T4587] incfs: mount failed -20 [ 110.345516][ T4616] ------------[ cut here ]------------ [ 110.351077][ T4616] WARNING: CPU: 1 PID: 4616 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 110.360589][ T4616] Modules linked in: [ 110.364629][ T4616] CPU: 1 UID: 0 PID: 4616 Comm: syz.2.1453 Not tainted syzkaller #0 fb7788b0c98d0be826a5a6580fd4830f58b39720 [ 110.376266][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.386514][ T4616] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 110.392565][ T4616] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1f ee 05 00 0f 85 be 00 00 00 c6 05 d5 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 110.413137][ T4616] RSP: 0018:ffffc9000e337860 EFLAGS: 00010246 [ 110.419477][ T4616] RAX: 0000000000000000 RBX: 000000000000001c RCX: 0000000000000000 [ 110.427713][ T4616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e337918 [ 110.436022][ T4616] RBP: ffffc9000e337988 R08: ffffc9000e337917 R09: 0000000000000000 [ 110.444342][ T4616] R10: ffffc9000e337900 R11: fffff52001c66f23 R12: ffffc9000e3378a0 [ 110.452794][ T4616] R13: dffffc0000000000 R14: 1ffff92001c66f10 R15: 0000000000000000 [ 110.461051][ T4616] FS: 00007f86514a96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 110.470068][ T4616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.476812][ T4616] CR2: 0000200000001000 CR3: 0000000115bae000 CR4: 00000000003526b0 [ 110.484833][ T4616] Call Trace: [ 110.488936][ T4616] [ 110.491900][ T4616] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.498057][ T4616] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 110.503827][ T4616] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 110.509515][ T4616] ___kmalloc_large_node+0x81/0x220 [ 110.514747][ T4616] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 110.520655][ T4616] __kmalloc_large_node_noprof+0x1e/0xe0 [ 110.526377][ T4616] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 110.532129][ T4616] __kmalloc_noprof+0x336/0x530 [ 110.537052][ T4616] ? __cfi_lockref_get+0x10/0x10 [ 110.542242][ T4616] incfs_realloc_mount_info+0xa7/0x4d0 [ 110.547992][ T4616] ? incfs_add_sysfs_node+0x118/0x240 [ 110.553439][ T4616] incfs_alloc_mount_info+0x479/0x600 [ 110.558967][ T4616] incfs_mount_fs+0x3ca/0x960 [ 110.563695][ T4616] ? __cfi_incfs_mount_fs+0x10/0x10 [ 110.569085][ T4616] ? vfs_parse_fs_string+0x102/0x170 [ 110.574425][ T4616] ? selinux_capable+0x38/0x50 [ 110.579287][ T4616] legacy_get_tree+0x106/0x1b0 [ 110.584219][ T4616] ? __cfi_incfs_mount_fs+0x10/0x10 [ 110.589495][ T4616] vfs_get_tree+0x9e/0x290 [ 110.593963][ T4616] do_new_mount+0x251/0xb40 [ 110.598698][ T4616] ? security_capable+0xcf/0xf0 [ 110.603595][ T4616] path_mount+0x688/0x1050 [ 110.608113][ T4616] ? putname+0x113/0x150 [ 110.612392][ T4616] __se_sys_mount+0x2bd/0x480 [ 110.617132][ T4616] ? __x64_sys_mount+0xf0/0xf0 [ 110.621941][ T4616] ? __kasan_check_write+0x18/0x20 [ 110.627111][ T4616] ? fpregs_restore_userregs+0x11d/0x260 [ 110.632955][ T4616] __x64_sys_mount+0xc3/0xf0 [ 110.637596][ T4616] x64_sys_call+0x2021/0x2ee0 [ 110.642370][ T4616] do_syscall_64+0x58/0xf0 [ 110.646864][ T4616] ? clear_bhb_loop+0x50/0xa0 [ 110.651757][ T4616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.657756][ T4616] RIP: 0033:0x7f865058eec9 [ 110.662213][ T4616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.681878][ T4616] RSP: 002b:00007f86514a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.690636][ T4616] RAX: ffffffffffffffda RBX: 00007f86507e5fa0 RCX: 00007f865058eec9 [ 110.698693][ T4616] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 110.707018][ T4616] RBP: 00007f8650611f91 R08: 0000200000000280 R09: 0000000000000000 [ 110.715549][ T4616] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 110.724638][ T4616] R13: 00007f86507e6038 R14: 00007f86507e5fa0 R15: 00007ffedd982688 [ 110.733135][ T4616] [ 110.736215][ T4616] ---[ end trace 0000000000000000 ]--- [ 110.742071][ T4616] incfs: Error allocating mount info. -12 [ 110.748002][ T4616] incfs: mount failed -12