last executing test programs: 2.635722688s ago: executing program 1 (id=1282): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xc) (async) r2 = fsmount(r1, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) mkdir(0x0, 0x0) rmdir(0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x80000000) (async) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x80000000) ioctl$BLKRRPART(r4, 0x125f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r7, &(0x7f0000001f80)=""/4096, 0x1000) (async) getdents(r7, &(0x7f0000001f80)=""/4096, 0x1000) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x1) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, 0x5, 0x7, 0x801, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x1}, [@nested={0xc, 0x142, 0x0, 0x1, [@nested={0x4, 0x105}, @nested={0x4, 0x5f}]}, @nested={0xf2, 0xef, 0x0, 0x1, [@typed={0xc, 0x112, 0x0, 0x0, @u64}, @typed={0x17, 0x52, 0x0, 0x0, @str='./binderfs/binder1\x00'}, @generic="e0cdcadcf57f3f22c54073eb470949b4bbb0ec0dfc6c2d215294dfd3357181ffeb52a162dcd93130f2f6bb914206c510dc0adc7cdd2ea240515c97d5f7db20346693a1576dfd0da5e94fa91a51ec2a794dc61ce4b7db6ff30b7c6f18ce3ff3adf1201b8bda68bdacdb537869b6f31c1f1c0f1bf2f12eb3ab", @generic="ea6b5dc50745e1050931b44d3d55d3cfa7268afae8c119c28b5f31c3f5fff09534c3b39be9c9df8971f8951ef567bb637b5e7fbc391829841a63852cb5fe15113b181d9aaa844f5a154db972577ca61ca52b", @generic]}, @typed={0x4, 0xd0}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 2.571316043s ago: executing program 1 (id=1283): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) fcntl$dupfd(r0, 0x406, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0xa, &(0x7f0000000100)=[{0x8, 0x7, 0xf6, 0x7}, {0xcbc, 0x3, 0x3, 0x4}, {0x0, 0x0, 0x6, 0x10001}, {0x6, 0x5, 0x7}, {0xfffa, 0x6, 0x8, 0xffffffff}, {0x4, 0x1, 0x80, 0x5}, {0xfff9, 0x80, 0x38, 0x10001}, {0xa2a2, 0x2, 0x6, 0x8}, {0xff6e, 0xd0, 0xb2, 0x6}, {0x0, 0x1, 0x7f, 0x9}]}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(&(0x7f0000000180)) 2.513480698s ago: executing program 1 (id=1284): mmap(&(0x7f0000590000/0x2000)=nil, 0x2000, 0x100000b, 0x10, 0xffffffffffffffff, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x7}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x8}) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x5}) 2.502168449s ago: executing program 1 (id=1285): inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000480)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x4e20, 0xacc3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x30081, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) chroot(&(0x7f0000000480)='./file0/file0\x00') (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) socket$igmp6(0xa, 0x3, 0x2) (async) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x4e20, 0xacc3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x30081, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) 2.499720789s ago: executing program 1 (id=1286): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x97) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000003c0)={[0x800, 0x8, 0x2450, 0x7, 0x401, 0x2, 0x8, 0x800, 0x1000, 0x8, 0x3, 0x6, 0xff, 0x8, 0x4, 0x400, 0x88, 0x3, 0xc, 0x2, 0xffffffff, 0x401, 0x1, 0x2, 0x3, 0x3, 0x6, 0x2, 0x5, 0x3, 0x6, 0x66, 0x1, 0x0, 0x6, 0x800, 0xfffffff7, 0x3, 0x4, 0x6, 0x32bf, 0xf9, 0xfffffff8, 0x0, 0x5, 0x2, 0x3e75d2ed, 0x8, 0x6, 0x6, 0x8, 0x6, 0x6, 0x7, 0xe, 0x8000, 0x9f, 0x5, 0x1, 0x9, 0x3, 0x3ff, 0x6, 0x8, 0x2, 0x2, 0x8827, 0x7, 0xff, 0x1, 0xffff, 0x8, 0x9, 0x8b1, 0xffffffff, 0x9, 0xe, 0xf31, 0xa, 0x7, 0xffffffff, 0x2, 0x7, 0x2, 0xc79, 0x200, 0x5, 0x0, 0x2, 0x5, 0x1000, 0x0, 0xfffffff8, 0x4, 0x80, 0x4, 0x5, 0x8001, 0x0, 0x200, 0x1, 0x8, 0x0, 0xffffff03, 0x9, 0xbc, 0x9, 0x3, 0x1000fff, 0x4, 0xff, 0x20000006, 0x9, 0xe4, 0x3, 0x80000000, 0x5, 0x4, 0x9, 0x8, 0x6, 0xff, 0x7, 0x5, 0x8, 0x101, 0x2, 0x6, 0x3ff, 0xf490, 0xf, 0x4, 0x10000, 0x8000, 0x8, 0x2, 0x4, 0x3, 0x3, 0x1, 0x3, 0x101, 0xe4eb, 0x1ff, 0xa, 0xb, 0x1000, 0x1, 0x0, 0x7eef, 0x3ff, 0xe, 0x3, 0x6, 0xffffffff, 0x0, 0x2, 0x4, 0x1, 0x7, 0x6, 0x47, 0x0, 0xfff, 0x80000000, 0x1ff, 0x0, 0x8, 0xcf9, 0x85, 0x52496444, 0x8, 0x8, 0x3, 0x599cde38, 0x901, 0xcd, 0x9, 0x8, 0x9, 0x6, 0x9, 0x80000000, 0x30000, 0x4c14, 0x0, 0x401, 0xba5089cf, 0x7fffffff, 0x2, 0x9, 0x7fe000, 0x81, 0xff, 0xf, 0x300, 0x6c6, 0x1b200000, 0x8000, 0x7, 0x200, 0xd, 0x2eaac367, 0xc5, 0x1, 0x8, 0x10001, 0x9, 0x200, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffff, 0x8, 0x6, 0x3, 0x7, 0xffff, 0xfffffffe, 0x2, 0x7, 0x7, 0x7fffffff, 0x6, 0x4, 0x1ff, 0x6, 0x50, 0x2, 0x0, 0x10, 0x8, 0xfffffffb, 0xd, 0x4, 0x2, 0x1, 0x7fffffff, 0xffff, 0x4, 0x0, 0x96, 0x3, 0x4, 0x3, 0x7, 0x4, 0x4, 0x8, 0x40000, 0x2, 0x163, 0x8, 0x939, 0x1f62, 0x3, 0x4, 0x2, 0xd, 0xfffffff4, 0xff, 0x2, 0x9, 0x8001, 0xffffffff, 0x400, 0x8, 0x0, 0x6, 0xfffffff9, 0x47a0, 0x10000, 0x1, 0x9, 0x2, 0x6, 0xa, 0x7, 0x47c, 0x5, 0x15a1d1c4, 0x80000001, 0x8, 0x7, 0x9, 0x4, 0x80000010, 0x4, 0x2, 0x9, 0x0, 0x6a70686, 0xf14b, 0x100, 0x10000003, 0x1, 0x43c, 0x5a, 0x5, 0x4, 0x9, 0x3, 0xd55a, 0xf, 0x7, 0x2, 0x1, 0x7, 0x101, 0xe, 0x6, 0x7, 0xfff, 0x73bb, 0x5, 0x0, 0x3, 0xffffff80, 0x3, 0xfffffff7, 0x4, 0x1a7, 0x1000, 0xfffffeff, 0xa, 0xf11, 0x8, 0x8, 0x6, 0x6, 0x0, 0xff, 0x8, 0x9, 0xfffffe53, 0x8, 0x9, 0x101, 0xfffffffd, 0x6, 0x64a, 0xdd9, 0x7, 0x1, 0x6, 0x1, 0x1, 0x2, 0x7, 0x10000, 0x5, 0xfae0, 0x2, 0x0, 0x5, 0x6, 0x2, 0x5, 0x2, 0xf91, 0x3, 0xb, 0x3, 0x6, 0x1, 0x46f4, 0xfff, 0x3ff, 0x1, 0x7, 0x1, 0xd2, 0x4, 0x3, 0x7fffffff, 0x7, 0x1, 0xb, 0x80000000, 0xe962, 0x5, 0x9, 0xfff, 0xffff8000, 0x1bd3, 0x0, 0xfffffffb, 0x1, 0x6, 0x5, 0x1, 0x5, 0x5, 0x4, 0x6879, 0x1, 0x3ff, 0x6, 0xffffffff, 0x7a79, 0x5, 0x4, 0xfffeffff, 0xfffffff8, 0x5, 0x6, 0x1135391a, 0x4, 0x2, 0x4, 0x14c, 0x1000, 0x5f93, 0x29, 0x84f, 0x8, 0x9, 0x5142, 0x7fffffff, 0x9, 0x7, 0x9, 0x80, 0x8, 0xd58, 0x7, 0xc81, 0x5, 0xcf, 0x1ff, 0x3, 0x6, 0xf, 0x3, 0x6, 0x80000000, 0xfffff000, 0xd, 0x9, 0x8, 0xc5, 0x4, 0x8, 0x5, 0x1a, 0x5, 0xfffff000, 0x0, 0x0, 0xf5cb, 0x80000000, 0xe56, 0x2, 0xdf, 0x3, 0x40, 0x0, 0x7, 0x7fff, 0x4, 0x1, 0x9, 0x4, 0x4, 0x3, 0x358, 0x10001, 0xa531, 0x4, 0x8, 0x401, 0x8, 0xfffffffe, 0x3, 0xcca, 0x3, 0x5, 0x7, 0xffff, 0x9d2, 0x9, 0x7, 0x7fffffff, 0x8, 0x2, 0x9, 0x200, 0xe, 0x200, 0x5, 0x3, 0x0, 0x2, 0x1, 0x0, 0x8, 0x3, 0x2, 0xee, 0x40, 0x3, 0x5, 0x6, 0xe3, 0xe2b2, 0xce3, 0x9, 0x400, 0xb, 0x2, 0x80, 0x2, 0x7, 0x3, 0x2, 0xffffffff, 0x1, 0xfffffffd, 0x1, 0x2, 0x3, 0xc, 0x1000, 0x2, 0x6, 0x2, 0x1ff, 0x5, 0x919f, 0x2, 0x1123, 0x8001, 0xc9, 0x0, 0x8, 0x80000001, 0x4, 0x1, 0x8, 0xfe2b, 0x0, 0x7, 0x7, 0x4, 0x8001, 0x3, 0x1, 0xa5, 0x5, 0x3, 0x1ff, 0x4, 0x1, 0x8d, 0x3, 0xe, 0x0, 0x2, 0x0, 0x5, 0x6, 0x5aa, 0x4, 0xc79, 0x8, 0x9, 0xfffffffc, 0x8, 0x8, 0x3, 0x61, 0xece5, 0xffffffff, 0x3, 0x9, 0x33, 0x0, 0x4f6, 0x7, 0x5, 0x5, 0x8001, 0x40, 0x1, 0x3, 0x10001, 0x6, 0xdc, 0x1, 0xd, 0x7fffffff, 0xe44, 0x6, 0x4, 0x1, 0x2, 0x9, 0x6, 0x1, 0x815, 0x800000, 0x200, 0x2, 0x6, 0x5, 0x7de5, 0xffffffff, 0x7, 0x101, 0x8, 0x5, 0x8, 0xb73, 0x3, 0x0, 0x0, 0x2, 0x7, 0xa0bd, 0x8001, 0x3, 0xeb, 0x5, 0x0, 0x6, 0xfffffffc, 0xf422, 0x1, 0xd3d, 0x0, 0xb7, 0x7, 0x5, 0xfffffff7, 0x8, 0x101, 0x6c8c, 0x9, 0xc4, 0xffff, 0x2b98, 0xb1, 0x4, 0x3, 0x3, 0x70000, 0x7, 0x1a4c596d, 0x5b6, 0x7b, 0xe2, 0x7, 0x10, 0xffffffff, 0x6, 0x0, 0x85, 0x3, 0xfffffeff, 0xe0a5c2b, 0x10, 0xa, 0x734f, 0x6, 0x1ff, 0x4, 0x5, 0x6, 0x8, 0x5, 0x3, 0x5, 0x6, 0x9, 0x4, 0x7, 0x9, 0x5, 0x3, 0x5, 0x4, 0x1ff, 0x9, 0x80, 0x0, 0x7fff, 0x3, 0x0, 0x6, 0x8, 0x3, 0xf, 0x400, 0x10, 0x4, 0x5, 0x0, 0x5, 0x9, 0x1, 0x7, 0x3bf, 0x9, 0x6, 0x3, 0x4, 0x1, 0x82b1, 0x101, 0x3, 0x401, 0x4, 0xb, 0x2, 0x3, 0x8001, 0xfffff9a5, 0x6, 0x8, 0x4, 0x3, 0xbf08, 0x4, 0x7, 0x72f1232d, 0x8, 0x5, 0x4, 0xd, 0x3, 0x0, 0xe0f, 0xfffff000, 0x7fffffff, 0x2, 0xaa, 0x3, 0x23a, 0x3, 0x4, 0x800, 0x1b8, 0x419, 0x9, 0x9, 0x3, 0x2, 0x1fffc0, 0x9, 0x4, 0x80000001, 0xf15d, 0x7, 0x3, 0x101, 0xa52, 0x8, 0x1, 0xfffff961, 0xfffffff7, 0xfffffff9, 0x9, 0x4, 0xfffffffe, 0x63, 0x0, 0x2, 0x8, 0x7, 0x2, 0x6, 0x0, 0xdd, 0x0, 0x2, 0x3, 0x6, 0x2000, 0x2, 0x2, 0x1, 0xc19, 0x4, 0xfffffffc, 0x5, 0x2a8, 0xffff2745, 0x9, 0x1, 0x2, 0x3ff, 0x2, 0xab, 0x8, 0x8, 0x7e, 0x3ff, 0x7, 0x1, 0x4, 0xf, 0x6, 0x4, 0xf48, 0x57, 0x0, 0x400, 0x8001, 0x8, 0xe, 0x6, 0xb93, 0x4, 0x10001, 0x10, 0x7fff, 0x3a, 0x5, 0xfff, 0x4, 0xb6a, 0x0, 0x5, 0x3ff, 0x7, 0xfffffffd, 0x9, 0x1, 0x6, 0x6, 0x3, 0x2, 0x7, 0xff, 0x5, 0x0, 0xab9, 0x5, 0x0, 0x2, 0x2, 0x4, 0x6, 0x4, 0x8, 0x6, 0x10000, 0x4, 0x80000001, 0x7ff, 0x9, 0x401, 0x3, 0x5, 0x9, 0x8, 0x4, 0xff, 0x7, 0xb256, 0xfffffffe, 0x7, 0x100, 0x8, 0x5, 0x3, 0x1, 0xfffffe00, 0x4, 0x11, 0xcb, 0x7fffffff, 0x4, 0x76c166cb, 0x8, 0x9, 0x3ff, 0x4, 0x80000000, 0x9, 0x1, 0x3, 0x8, 0x146, 0x1, 0x6, 0xfffffffd, 0x9, 0x5, 0x7, 0xca9, 0xf, 0x6, 0x38000000, 0x3, 0x7f, 0x0, 0x8, 0x5, 0x7, 0x4, 0x3ea24c97, 0x0, 0x4, 0x3f5, 0x8, 0xd8c, 0x1000, 0x6, 0x100, 0xfffffffb, 0xc5e, 0x8, 0x60225058, 0xfffffffd, 0x0, 0x6, 0xfa, 0x5, 0x3, 0xf, 0x9, 0x8000006, 0x53, 0xd, 0x7fff, 0x7, 0x8, 0x0, 0x7ff, 0x5, 0x2420, 0xc55, 0x9, 0x6, 0x80000000, 0x6, 0xffffffff, 0x9, 0x9, 0x46, 0x2, 0x5, 0x800, 0x3, 0x9, 0x1000, 0x5, 0xfffffffa, 0x7, 0x9672, 0x2, 0x4, 0x9, 0x4, 0x3, 0x5, 0xc49, 0xffffffff, 0x400, 0x8, 0x57, 0x3, 0x81, 0x0, 0x1, 0xf60, 0x3, 0x9, 0x1, 0x98ad536f, 0x8, 0x4, 0x400, 0x9, 0xfffffffc, 0x4, 0x6, 0x3, 0x7fff, 0x4, 0x7, 0x4, 0x90, 0x200, 0x2, 0x7, 0x7, 0x2, 0x6a, 0xf, 0xb9a, 0x2, 0x7, 0x1, 0x40, 0x8, 0x4, 0x1, 0x45, 0x6, 0xff, 0x0, 0xff, 0x0, 0x4, 0x6, 0x61, 0x5, 0x70000, 0xb, 0xfffffffe, 0x4f, 0x2, 0x11, 0x1, 0x4f4e, 0x4, 0x9, 0x10]}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000015c0)=ANY=[@ANYBLOB='decodes io'], 0xf) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setuid(0xee01) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235000400000f300f204164660f3a0844b6d07866baf80cb80c7d0780ef66bafc0cecc4c17a5b9f0c0000003e650f01c2c4c11dd56192c4c281bb461c66ba4100ec6467360f7f9e0000", 0x50}], 0x1, 0xd, 0x0, 0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x60080, 0x0) pread64(r10, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffffffffff001) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = getuid() r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000001500)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "8d9bbb6d47ece2379e9c629c5476a219831a75858b025f800eb2d3e5b0bdf0ceea2e0639f8d37bf058359d51e22b121d2420ba8327b7768f61831257e64a1f2a", 0x16}, 0x48, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000340)={0x1d, r13}, 0x10, &(0x7f0000001480)={&(0x7f0000002600)=ANY=[@ANYBLOB="02000000020000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r14, @ANYRES64=r15/1000+60000, @ANYBLOB="040000e001000000040000202c000000823f5e1199878cbba3bb3ffdb2d56f3f2630359d35bb4292b87fb9d134e6c5ac5bedfc1a4199bc107321be8aa34318b45429771669a9c87c2929c9ee22a836252f73fdab7314c5d62abb849e049b883918608885c714308b33e37654e898d517c50e07186cd8b4b1a500fcb9435589497a15c509283f2e4e66b7a448b108b98d8e943b5734a6856bcccd35"], 0x80}, 0x1, 0x0, 0x0, 0x48800}, 0x4000800) keyctl$get_persistent(0x16, r11, r12) 2.269872647s ago: executing program 1 (id=1288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) utimensat(r4, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 2.269576287s ago: executing program 32 (id=1288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) utimensat(r4, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1.745270619s ago: executing program 4 (id=1296): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) eventfd(0xffffffff) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001040)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) pipe(&(0x7f00000007c0)) (async) close(r2) (async) eventfd(0xffffffff) (async) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001040)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) 1.689819414s ago: executing program 4 (id=1293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000140)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 1.659146396s ago: executing program 4 (id=1297): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 1.553436275s ago: executing program 4 (id=1300): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000004, 0x2010, r0, 0x8ee4b000) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="6eca67b9eb6b564f", 0x8}, {&(0x7f00000000c0)="c18985c3b189d6b3c4f7c128959df8850e67f13566a3c821a1ce845d298dd96b694046f0b1bf079c4b4c4e34aad522b9450c95bf3a88b57399ab22e84814c17a41141897347f87f5b9", 0x49}, {&(0x7f0000000140)="a56ffb2d96d59d0cc51ed7cb6abaa0e0cf5a58cfc5941520af789fa015cba77f1e21c046b6f3ceadf26f9534a1ee0994ef1a4c63eb756e48f378bbc39b39fe80592ef25d429adfe92144226f49050146b06fd612e5e50ab87f62fe2bbec1be02cf3bb8d6b40f478effffffff014ab99e1bf712ffd590274bc12ea0761bc1f06e99c4916b42bd58a79492d0337cf132190aa76015bf1d1207ec8e802c1a42fbfc808dcce5e8165f0b655b73f4824eda95c27f7faf1fd4deb43b2bcc4d647fa239422e7eb5a25e63d245e5c05c1bc7a58a45a287fd0c5015f6601a7eb12eef7efae47a2c0786207e24ec3b7e8a20f4e2e700"/254, 0xfe}], 0x3, 0xa) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.534668427s ago: executing program 4 (id=1301): syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 64) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') (rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) (async) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x604, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000533000/0x3000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0x8, 0x14}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r6, 0x5) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) (async) syz_open_dev$evdev(0x0, 0x0, 0x882) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (async, rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 869.01664ms ago: executing program 0 (id=1316): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400441, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000040)) 865.45144ms ago: executing program 0 (id=1317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) close_range(r0, r0, 0x0) (async, rerun: 64) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x143a82, 0x33) fremovexattr(r2, &(0x7f0000000000)=@known='security.apparmor\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) fchmod(r4, 0x20049549e2a2d659) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async, rerun: 64) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x1, 0xfe00000000000000, 0xff}}, 0x28) (async) write$FUSE_GETXATTR(r4, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) (rerun: 32) 863.02635ms ago: executing program 0 (id=1318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="02130000020000001e000004000000004f1607c8385a0b5e9ea370291d184a2386852e17ed038c7018e0ca"], 0x10}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x33324000, 0x5, 0x9, 0x5, 0x0, [{0x0, 0x9, 0x6, '\x00', 0x1}, {0x4, 0x6, 0x3, '\x00', 0xe0}, {0x6, 0x3, 0x6, '\x00', 0x3}, {0x0, 0x5, 0x1, '\x00', 0x80}, {0xd, 0x1, 0x3, '\x00', 0x9}, {0x3, 0x5, 0xa, '\x00', 0x1}, {0x3, 0x5, 0x3}, {0x7, 0x8, 0x6, '\x00', 0xca}, {0x1, 0x7f, 0x5, '\x00', 0x5}, {0x5, 0xff, 0x8d, '\x00', 0x3}, {0x7, 0x8, 0x3, '\x00', 0x3}, {0x7f, 0x62, 0xc, '\x00', 0x2c}, {0x5, 0x9, 0x0, '\x00', 0xa}, {0x73, 0x9, 0x1, '\x00', 0xe5}, {0x4, 0x7, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x6, 0x2, '\x00', 0x7}, {0xf, 0x4, 0x1, '\x00', 0xa}, {0x24, 0x5, 0x0, '\x00', 0x6}, {0x0, 0x1, 0x8, '\x00', 0x90}, {0x7, 0x40, 0xed, '\x00', 0x4}, {0x10, 0x3, 0xbe, '\x00', 0x5}, {0x1, 0x86, 0x27, '\x00', 0x7}, {0x1, 0x82, 0x1, '\x00', 0x1}]}}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66baa00066ed3666440738821d00000000263e47f4b9a5030000540f3232bad104b0fb6e3e0f01c53e0f21910f32440f20c0350e000000440f22c067660f32", 0x3f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0xf, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000003, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xa, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x0, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xfffffffa, 0x8, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x2, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0xd6a7, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10, 0x0, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000240)='ext2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='wg1\x00') setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x200, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="92000000", @ANYRES16=r9, @ANYBLOB="020025bd7000fcdbdf251100000008000400090000000c00038008000100020000002c00038008000500e0000001050008000600000006000400fd0900000800030002000000080003000200000008000600090000002400028008000900f8060000060002004e200000080004000400000008000800ffffffff0800050078c70000"], 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x44081) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYRESOCT=r9], 0x14}}, 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYRES16=r7, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r8], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x20040840) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x3, 0x101, 0x842}) 856.490231ms ago: executing program 0 (id=1319): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x2c}}, 0x8040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'pimreg\x00', @remote}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 842.178202ms ago: executing program 0 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109040, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002140)={0xf0, 0x0, r3, [{0x3, 0x1, 0x9, 0xfffffff9, '/dev/ppp\x00'}, {0x5, 0x9, 0x4, 0xe, '!}{]'}, {0x2, 0x0, 0x3, 0x8, '-/^'}, {0x3, 0x4, 0x9, 0xd, '/dev/ppp\x00'}, {0x2, 0x5, 0x13, 0x8, './binderfs/binder1\x00'}, {0x4, 0x800, 0x2, 0x4, ')+'}]}, 0xf0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x9]}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r7) close_range(r0, 0xffffffffffffffff, 0x0) 761.580589ms ago: executing program 0 (id=1321): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x8}, {r1, 0x88}], 0x2, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x4, 0x2, 0xbb3c, 0x6, 0x9, "04d5c6cf2d961353b2779d4e833e700f58743b"}) 760.209099ms ago: executing program 4 (id=1322): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x3000001, 0x11, r0, 0x4580d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', '&]\\)\x00'}) syz_fuse_handle_req(r1, &(0x7f0000009140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000, 0xfffc, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e481a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dabfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3e, 0x3230135, 0x2, 0x65c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 350.977851ms ago: executing program 2 (id=1328): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r0, 0xae9a) 297.072696ms ago: executing program 2 (id=1329): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x48000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0xfffffffffffffeb7, 0x7ff, 0x0}, {0x2, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xffffff01, 0x0}, {0x1, 0x0, 0x23, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r6, 0xfffffbeb) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) 296.177786ms ago: executing program 3 (id=1330): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x80000f1, 0x37, 0xc698, 0x80000001, 0x6, 0x6, 0x1, 0x6b, 0xff, 0x2, 0x80000000, 0x2, 0x20000002, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x7fff, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0xc, 0x8, 0x3, 0x43, 0x7, 0x8, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x3, 0x7, 0x9, 0x8, 0x40000008, 0x4, 0x95, 0x7, 0x72, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0xa, 0x6, 0x4, 0xd, 0x8, 0x40, 0x6, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x5, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1ff, 0x6, 0xb, 0x8, 0x326, 0x4, 0xffff, 0x4, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x4, 0x0, 0x87, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0x3, 0xe2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) 295.998336ms ago: executing program 3 (id=1331): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 295.441266ms ago: executing program 3 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030311d303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r5, &(0x7f0000009300)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x6, {0x0, 0x39}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$EVIOCGPHYS(r7, 0x80404507, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="02000012fda19298f7b50040000000000600000000000000f11f004000"/40]) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0xa7, 0x4, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r8) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r9, 0x926fdb2c68a18847, 0x1000, 0x0, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x80, 0xa, 0x9, 0x9}, 0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000202"], 0x10}, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41900}) 173.410916ms ago: executing program 2 (id=1333): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000400000014003800ff010000000000000000000000000001150002"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba00", "2809e8dbe108598948224b084afbc11d87313c5240f45f819e01177d3d458dd4192c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe3071000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000100)={{r4, 0x800000000000a83b, 0x4, 0x3b3, 0x8000000002, 0x9, 0x2, 0x20000004, 0x10, 0x7, 0x7, 0xfffffffffffffff7, 0x6, 0x2, 0x10}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 166.940596ms ago: executing program 3 (id=1334): socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mlock(&(0x7f0000088000/0x3000)=nil, 0x3000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4095, 0xfff}, {0x0}], 0x2) 152.695927ms ago: executing program 3 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000095000040"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) close(r3) 9.519229ms ago: executing program 3 (id=1336): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0xf6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = userfaultfd(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.029389ms ago: executing program 2 (id=1337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/201, 0xc9, 0x1, 0x37}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7.473049ms ago: executing program 2 (id=1338): mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x808081, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x808081, 0x0) (async) 0s ago: executing program 2 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x2004, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) openat$cgroup_procs(r3, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 0" path="/sys/power/pm_trace" dev="sysfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 54.235654][ T1288] overlayfs: failed to resolve './bus': -2 [ 54.288463][ T36] audit: type=1400 audit(1756263311.140:885): avc: denied { ioctl } for pid=1296 comm="syz.0.293" path="socket:[10332]" dev="sockfs" ino=10332 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.366881][ T36] audit: type=1400 audit(1756263311.220:886): avc: denied { getopt } for pid=1296 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.541664][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 54.563031][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.591650][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 54.692673][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.743591][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.755453][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.767017][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.776224][ T31] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 54.784779][ T31] usb 4-1: Product: syz [ 54.789028][ T31] usb 4-1: Manufacturer: syz [ 54.795948][ T31] hub 4-1:4.0: USB hub found [ 54.931628][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.952846][ T45] usb 3-1: device descriptor read/8, error -71 [ 54.996199][ T31] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 55.022059][ T31] usb 4-1: USB disconnect, device number 7 [ 55.082889][ T45] usb 3-1: device descriptor read/8, error -71 [ 55.191763][ T45] usb usb3-port1: unable to enumerate USB device [ 55.333861][ T45] usb 2-1: USB disconnect, device number 7 [ 55.349403][ T36] audit: type=1326 audit(1756263312.200:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1310 comm="syz.1.296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f933d78ebe9 code=0x0 [ 55.366688][ T1318] overlayfs: failed to clone upperpath [ 55.408801][ T36] audit: type=1400 audit(1756263312.260:888): avc: denied { bind } for pid=1326 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.480094][ T36] audit: type=1400 audit(1756263312.330:889): avc: denied { bind } for pid=1333 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.507877][ T1337] rust_binder: 1330 RLIMIT_NICE not set [ 55.548352][ T1344] netlink: 328 bytes leftover after parsing attributes in process `syz.3.306'. [ 55.567627][ T9] rust_binder: 1329: removing orphan mapping 0:24 [ 55.781524][ T1361] input: syz1 as /devices/virtual/input/input9 [ 55.823129][ T1361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.823181][ T1361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 55.833677][ T36] audit: type=1400 audit(1756263312.700:890): avc: granted { setsecparam } for pid=1362 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 55.841965][ T1361] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.861936][ T1361] rust_binder: Read failure Err(EFAULT) in pid:249 [ 55.896224][ T36] audit: type=1400 audit(1756263312.750:891): avc: denied { read } for pid=1362 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.923292][ T1365] rust_binder: Write failure EFAULT in pid:309 [ 55.931760][ T1367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.938485][ T1367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 56.201628][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 56.386114][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.397234][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.408296][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 56.417508][ T31] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 56.426375][ T31] usb 2-1: Product: syz [ 56.430615][ T31] usb 2-1: Manufacturer: syz [ 56.437848][ T31] hub 2-1:4.0: USB hub found [ 56.638194][ T31] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 56.654782][ T1376] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.654782][ T1375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.657450][ T1376] netlink: 'syz.0.317': attribute type 16 has an invalid length. [ 56.667723][ T31] usb 2-1: USB disconnect, device number 8 [ 56.678367][ T1376] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.317'. [ 56.966656][ T1380] rust_binder: Error while translating object. [ 56.966707][ T1380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.973123][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 57.161396][ T1392] rust_binder: Error while translating object. [ 57.170756][ T1392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.177043][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 57.200416][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 57.241107][ T1402] rust_binder: 265: no such ref 4294967295 [ 57.266199][ T1402] rust_binder: 265: no such ref 3 [ 57.271639][ T1402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265 [ 57.551675][ T330] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.711670][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 57.718124][ T330] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.729497][ T330] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.739397][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.746174][ T330] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 57.755791][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.764623][ T330] usb 3-1: config 0 descriptor?? [ 57.816355][ T1417] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=1417 comm=syz.0.332 [ 57.852566][ T1420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.852596][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:195 [ 58.256022][ T1429] binder: Unknown parameter 'permit_directio' [ 58.301007][ T1437] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 58.315044][ T1440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.323899][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 58.323929][ T36] audit: type=1400 audit(1756263315.180:894): avc: denied { write } for pid=1438 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.324249][ T1439] rust_binder: Write failure EINVAL in pid:280 [ 58.367858][ T1442] rust_binder: Error while translating object. [ 58.374244][ T1442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 58.375653][ T1408] rust_binder: Error while translating object. [ 58.380887][ T1442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:283 [ 58.391338][ T1408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.409912][ T1408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 58.421355][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.430793][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.437316][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 58.437368][ T1445] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 58.443869][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 58.444797][ T330] usb 3-1: USB disconnect, device number 14 [ 58.452983][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.471796][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.478240][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.484853][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.491291][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.497884][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.504441][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.511274][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.517909][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.524505][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.531206][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.538013][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.544693][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.551317][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.558236][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.564873][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.571472][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.578106][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.585091][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.591731][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.598215][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.605177][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.611836][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.618997][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.625864][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.633491][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.640101][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.647200][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.654683][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.661848][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.701101][ T1454] GUP no longer grows the stack in syz.0.345 (1454): 200000005000-200000008000 (200000004000) [ 58.718503][ T1454] CPU: 1 UID: 0 PID: 1454 Comm: syz.0.345 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 58.718536][ T1454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.718548][ T1454] Call Trace: [ 58.718555][ T1454] [ 58.718563][ T1454] __dump_stack+0x21/0x30 [ 58.718595][ T1454] dump_stack_lvl+0x10c/0x190 [ 58.718622][ T1454] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.718647][ T1454] ? find_vma+0xcd/0x110 [ 58.718675][ T1454] dump_stack+0x19/0x20 [ 58.718696][ T1454] __get_user_pages+0x1e34/0x22d0 [ 58.718716][ T1454] ? update_cfs_group+0x127/0x260 [ 58.718735][ T1454] ? __kasan_check_write+0x18/0x20 [ 58.718763][ T1454] ? down_read_killable+0x79/0xf0 [ 58.718784][ T1454] ? populate_vma_page_range+0x230/0x230 [ 58.718808][ T1454] ? __switch_to+0xc7b/0x1310 [ 58.718837][ T1454] __gup_longterm_locked+0xcb1/0x1580 [ 58.718861][ T1454] ? __cfi___switch_to+0x10/0x10 [ 58.718883][ T1454] ? __pte_offset_map+0x1b0/0x230 [ 58.718905][ T1454] gup_fast_fallback+0x12ae/0x14a0 [ 58.718930][ T1454] ? get_user_pages_fast_only+0xc0/0xc0 [ 58.718950][ T1454] ? futex_wait_setup+0x1bc/0x260 [ 58.718970][ T1454] get_user_pages_fast+0x73/0xb0 [ 58.718989][ T1454] get_futex_key+0x24d/0x930 [ 58.719004][ T1454] ? __cfi_get_futex_key+0x10/0x10 [ 58.719019][ T1454] ? __cfi_futex_wake_mark+0x10/0x10 [ 58.719038][ T1454] futex_wake+0x120/0x900 [ 58.719059][ T1454] ? futex_wait+0x29a/0x7a0 [ 58.719082][ T1454] ? __cfi_futex_wake+0x10/0x10 [ 58.719105][ T1454] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 58.719123][ T1454] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 58.719140][ T1454] ? mas_find+0x358/0x5f0 [ 58.719155][ T1454] ? __kasan_check_write+0x18/0x20 [ 58.719177][ T1454] do_futex+0x356/0x500 [ 58.719202][ T1454] ? __cfi_do_futex+0x10/0x10 [ 58.719217][ T1454] ? __vm_munmap+0x2c7/0x370 [ 58.719233][ T1454] __se_sys_futex+0x28f/0x300 [ 58.719249][ T1454] ? __x64_sys_futex+0x110/0x110 [ 58.719266][ T1454] ? __kasan_check_write+0x18/0x20 [ 58.719288][ T1454] __x64_sys_futex+0xe9/0x110 [ 58.719304][ T1454] x64_sys_call+0x227f/0x2ee0 [ 58.719326][ T1454] do_syscall_64+0x58/0xf0 [ 58.719345][ T1454] ? clear_bhb_loop+0x50/0xa0 [ 58.719362][ T1454] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.719391][ T1454] RIP: 0033:0x7f3d2ab8ebe9 [ 58.719410][ T1454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.719426][ T1454] RSP: 002b:00007f3d2ba70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 58.719450][ T1454] RAX: ffffffffffffffda RBX: 00007f3d2adb5fa0 RCX: 00007f3d2ab8ebe9 [ 58.719466][ T1454] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000040c0 [ 58.719480][ T1454] RBP: 00007f3d2ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 58.719492][ T1454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.719508][ T1454] R13: 00007f3d2adb6038 R14: 00007f3d2adb5fa0 R15: 00007ffe63e95a58 [ 58.719522][ T1454] [ 59.058789][ T1470] x_tables: duplicate entry at hook 2 [ 59.082208][ T36] audit: type=1400 audit(1756263315.930:895): avc: denied { write } for pid=1477 comm="syz.2.353" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.104074][ T36] audit: type=1400 audit(1756263315.930:896): avc: denied { remove_name } for pid=1477 comm="syz.2.353" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.127454][ T36] audit: type=1400 audit(1756263315.930:897): avc: denied { unlink } for pid=1477 comm="syz.2.353" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.128439][ T1482] rust_binder: Write failure EFAULT in pid:290 [ 59.177247][ T36] audit: type=1400 audit(1756263316.020:898): avc: denied { add_name } for pid=1483 comm="syz.2.354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.204327][ T36] audit: type=1400 audit(1756263316.020:899): avc: denied { create } for pid=1483 comm="syz.2.354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.213315][ T1484] netlink: 'syz.2.354': attribute type 28 has an invalid length. [ 59.225139][ T36] audit: type=1400 audit(1756263316.020:900): avc: denied { associate } for pid=1483 comm="syz.2.354" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.255068][ T36] audit: type=1400 audit(1756263316.020:901): avc: denied { create } for pid=1483 comm="syz.2.354" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.295205][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.295244][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:208 [ 59.378608][ T1500] binder: Bad value for 'stats' [ 59.411041][ T36] audit: type=1400 audit(1756263316.260:902): avc: denied { mounton } for pid=1502 comm="syz.2.361" path="/106/file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 59.556691][ T1517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.556730][ T1517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 59.619499][ T36] audit: type=1400 audit(1756263316.470:903): avc: denied { write } for pid=1520 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.652052][ T1525] netlink: 'syz.0.369': attribute type 12 has an invalid length. [ 59.720336][ T1531] rust_binder: 1530 RLIMIT_NICE not set [ 59.728978][ T10] rust_binder: 0: removing orphan mapping 0:24 [ 59.940121][ T1551] netlink: 104 bytes leftover after parsing attributes in process `syz.1.378'. [ 60.261647][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.375055][ T1565] rust_binder: Failed copying remainder into alloc: EFAULT [ 60.375075][ T1565] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 60.382424][ T1565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.390818][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:345 [ 60.422832][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.429457][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 60.432190][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.451659][ T1569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 60.458068][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.470372][ T1569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.384'. [ 60.476941][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.504017][ T9] usb 2-1: config 0 descriptor?? [ 60.574236][ T1575] 9pnet_fd: Insufficient options for proto=fd [ 60.921727][ T390] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 61.081660][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 61.088142][ T390] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 61.099497][ T390] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.111378][ T390] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.121919][ T390] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.134880][ T390] usb 3-1: config 7 interface 0 has no altsetting 0 [ 61.141538][ T390] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 61.150662][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.361422][ T1579] SELinux: policydb string length -471271928 does not match expected length 8 [ 61.370474][ T1579] SELinux: failed to load policy [ 61.375682][ T1580] SELinux: policydb string length -471271928 does not match expected length 8 [ 61.384761][ T1580] SELinux: failed to load policy [ 61.592267][ T390] hid (null): global environment stack underflow [ 61.599090][ T390] hid (null): nested delimiters [ 61.604326][ T9] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 61.616162][ T390] hid (null): invalid report_count 22626 [ 61.622034][ T390] hid (null): bogus close delimiter [ 61.627399][ T390] hid (null): global environment stack underflow [ 61.634527][ T390] hid (null): unknown global tag 0xd [ 61.642950][ T390] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0004/input/input10 [ 61.661651][ T390] kye 0003:0458:5010.0004: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 61.682132][ T390] usb 2-1: USB disconnect, device number 9 [ 61.791108][ T1579] __vm_enough_memory: pid: 1579, comm: syz.2.387, bytes: 18014402804453376 not enough memory for the allocation [ 61.804350][ T330] usb 3-1: USB disconnect, device number 15 [ 62.326275][ T1618] overlayfs: statfs failed on './file0' [ 62.332689][ T1624] rust_binder: 307: no such ref 0 [ 62.388945][ T1618] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 62.396326][ T1618] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 62.797634][ T1648] overlayfs: failed to clone lowerpath [ 75.968485][ T1672] rust_binder: Write failure EINVAL in pid:375 [ 75.969318][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 75.969339][ T36] audit: type=1400 audit(1756263332.820:914): avc: denied { read } for pid=1668 comm="syz.0.415" name="file0" dev="tmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.007498][ T36] audit: type=1400 audit(1756263332.840:915): avc: denied { ioctl } for pid=1668 comm="syz.0.415" path="/111/file0" dev="tmpfs" ino=629 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.026185][ T1681] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 76.036274][ T1683] fuse: Unknown parameter 'x' [ 76.039534][ T1681] rust_binder: Write failure EINVAL in pid:312 [ 76.082656][ T36] audit: type=1400 audit(1756263332.940:916): avc: denied { bind } for pid=1689 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.145026][ T1703] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.427'. [ 76.241664][ T390] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 76.281629][ T45] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 76.378937][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 76.393070][ T390] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.401208][ T390] usb 4-1: config 0 has no interface number 0 [ 76.407601][ T390] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.418578][ T390] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.428577][ T390] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.441512][ T390] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 76.450602][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.452751][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.461864][ T390] usb 4-1: config 0 descriptor?? [ 76.469406][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.488319][ T45] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 76.497542][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.505626][ T45] usb 3-1: Product: syz [ 76.509917][ T45] usb 3-1: Manufacturer: syz [ 76.514570][ T45] usb 3-1: SerialNumber: syz [ 76.520112][ T45] usb 3-1: config 0 descriptor?? [ 76.543073][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.551150][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 76.559963][ T31] usb 2-1: config 14 has an invalid interface number: 16 but max is 0 [ 76.568228][ T31] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 76.578548][ T31] usb 2-1: config 14 has no interface number 0 [ 76.584794][ T31] usb 2-1: config 14 interface 16 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.598078][ T31] usb 2-1: config 14 interface 16 has no altsetting 0 [ 76.606485][ T31] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=51.5b [ 76.615617][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.623956][ T31] usb 2-1: Product: syz [ 76.628155][ T31] usb 2-1: Manufacturer: syz [ 76.632812][ T31] usb 2-1: SerialNumber: syz [ 76.726633][ T36] audit: type=1326 audit(1756263333.580:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1680 comm="syz.2.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f665c78ebe9 code=0x0 [ 76.798571][ T1728] fuse: Unknown parameter 'dl' [ 76.804351][ T36] audit: type=1400 audit(1756263333.660:918): avc: denied { remount } for pid=1727 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.843426][ T31] usb 2-1: unknown interface protocol 0x18, assuming v1 [ 76.851243][ T31] usb 2-1: 16:2 : does not exist [ 76.861145][ T31] usb 2-1: USB disconnect, device number 10 [ 76.875684][ T1737] udevd[1737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.16/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.093987][ T390] uclogic 0003:28BD:0042.0005: failed retrieving string descriptor #100: -71 [ 77.103031][ T390] uclogic 0003:28BD:0042.0005: failed retrieving pen parameters: -71 [ 77.111221][ T390] uclogic 0003:28BD:0042.0005: pen probing failed: -71 [ 77.118589][ T390] uclogic 0003:28BD:0042.0005: failed probing parameters: -71 [ 77.126413][ T390] uclogic 0003:28BD:0042.0005: probe with driver uclogic failed with error -71 [ 77.137520][ T390] usb 4-1: USB disconnect, device number 8 [ 77.359498][ T36] audit: type=1400 audit(1756263334.210:919): avc: denied { name_bind } for pid=1739 comm="syz.1.438" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 77.388009][ T1745] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 77.398147][ T36] audit: type=1400 audit(1756263334.250:920): avc: denied { relabelto } for pid=1744 comm="syz.0.439" name="file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mqueue_spool_t:s0" [ 77.414589][ T1745] fuse: Bad value for 'fd' [ 77.425413][ T36] audit: type=1400 audit(1756263334.250:921): avc: denied { associate } for pid=1744 comm="syz.0.439" name="file0" dev="tmpfs" ino=717 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mqueue_spool_t:s0" [ 77.457195][ T36] audit: type=1400 audit(1756263334.250:922): avc: denied { setattr } for pid=1746 comm="syz.1.440" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.701678][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 77.852953][ T31] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 77.860226][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.870202][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 77.882499][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.891785][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.899788][ T31] usb 2-1: Product: syz [ 77.904028][ T31] usb 2-1: Manufacturer: syz [ 77.908657][ T31] usb 2-1: SerialNumber: syz [ 77.914198][ T31] usb 2-1: config 0 descriptor?? [ 77.920324][ T31] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 77.961707][ T65] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 78.112873][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.123304][ T65] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.133138][ T65] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 78.142341][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.151742][ T65] usb 4-1: config 0 descriptor?? [ 78.184303][ T36] audit: type=1400 audit(1756263335.040:923): avc: denied { map } for pid=1748 comm="syz.1.441" path="socket:[12644]" dev="sockfs" ino=12644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 78.225713][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 78.747902][ T1761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 78.760440][ T1761] 9pnet_fd: Insufficient options for proto=fd [ 78.824099][ T1768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.833888][ T1768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.045856][ T45] usb 3-1: USB disconnect, device number 16 [ 79.069503][ T65] usb 4-1: USB disconnect, device number 9 [ 79.267545][ T1781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.452'. [ 79.292265][ T1781] cgroup2: Unknown parameter 'memory__`calev`k¦P' [ 79.341097][ T1783] process 'syz.0.449' launched './file1' with NULL argv: empty string added [ 79.473435][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.482354][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.526196][ T1794] loop4: detected capacity change from 0 to 8388608 [ 79.684187][ T1804] rust_binder: Write failure EFAULT in pid:270 [ 79.732784][ T1814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.739035][ T1814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398 [ 80.060219][ T1842] rust_binder: Error while translating object. [ 80.070192][ T1842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.076776][ T1842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 80.103689][ T1844] /dev/rnullb0: Can't open blockdev [ 80.371693][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 80.523060][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.532942][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.542822][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.557528][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 80.573179][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 80.581670][ T65] usb 3-1: Product: syz [ 80.586210][ T65] usb 3-1: Manufacturer: syz [ 80.590969][ T65] usb 3-1: SerialNumber: syz [ 80.801298][ T65] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 80.842544][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 80.992887][ T45] usb 4-1: config index 0 descriptor too short (expected 126, got 72) [ 81.003897][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.004351][ T1850] netlink: 140 bytes leftover after parsing attributes in process `syz.2.478'. [ 81.013115][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.026297][ T9] usb 3-1: USB disconnect, device number 17 [ 81.030220][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 81.030236][ T36] audit: type=1400 audit(1756263337.880:933): avc: denied { read write } for pid=1849 comm="syz.2.478" name="lp0" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 81.040510][ T9] usblp0: removed [ 81.042356][ T45] usb 4-1: Product: syz [ 81.071312][ T36] audit: type=1400 audit(1756263337.880:934): avc: denied { open } for pid=1849 comm="syz.2.478" path="/dev/usb/lp0" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 81.074242][ T45] usb 4-1: Manufacturer: syz [ 81.102775][ T45] usb 4-1: SerialNumber: syz [ 81.332388][ T36] audit: type=1400 audit(1756263338.190:935): avc: denied { accept } for pid=1888 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.385744][ T1896] overlayfs: failed to clone upperpath [ 81.851676][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 82.002944][ T9] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.013044][ T9] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 82.023238][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 82.031911][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 82.041028][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.049153][ T9] usb 3-1: Product: syz [ 82.053374][ T9] usb 3-1: Manufacturer: syz [ 82.058008][ T9] usb 3-1: SerialNumber: syz [ 82.063739][ T1911] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.071042][ T1911] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.681157][ T36] audit: type=1400 audit(1756263339.530:936): avc: denied { map } for pid=1910 comm="syz.2.498" path="socket:[13702]" dev="sockfs" ino=13702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.721021][ T36] audit: type=1400 audit(1756263339.570:937): avc: denied { accept } for pid=1914 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.723793][ T1915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.750453][ T1915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.794098][ T1917] incfs: Options parsing error. -22 [ 82.799394][ T1917] incfs: mount failed -22 [ 82.822020][ T1920] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 82.929755][ T9] rtl8150 3-1:1.0: couldn't reset the device [ 82.936175][ T9] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 82.945588][ T9] usb 3-1: USB disconnect, device number 18 [ 83.277330][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.286554][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.353751][ T36] audit: type=1400 audit(1756263340.210:938): avc: denied { lock } for pid=1925 comm="syz.0.505" path="socket:[13727]" dev="sockfs" ino=13727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 83.604976][ T9] usb 4-1: USB disconnect, device number 10 [ 83.664347][ T1946] incfs: Error accessing: ./file0/file0. [ 83.670427][ T1946] incfs: mount failed -2 [ 83.818163][ T1951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.818592][ T1952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.835576][ T1952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.843950][ T1951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:361 [ 83.991612][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 84.182744][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.194183][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.204450][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.213710][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.221985][ T9] usb 4-1: SerialNumber: syz [ 84.380056][ T1966] 9pnet_fd: Insufficient options for proto=fd [ 84.433741][ T36] audit: type=1400 audit(1756263341.290:939): avc: denied { accept } for pid=1945 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.453476][ T36] audit: type=1400 audit(1756263341.290:940): avc: denied { read } for pid=1945 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.540876][ T1976] binder: Unknown parameter 'contextÀ' [ 84.679876][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.689265][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.697839][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.707138][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.712505][ T36] audit: type=1400 audit(1756263341.570:941): avc: denied { nlmsg_tty_audit } for pid=1986 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 84.941645][ T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 85.092822][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.104697][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.113842][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.121888][ T65] usb 3-1: Product: syz [ 85.126066][ T65] usb 3-1: Manufacturer: syz [ 85.130756][ T65] usb 3-1: SerialNumber: syz [ 85.137251][ T65] hub 3-1:1.0: bad descriptor, ignoring hub [ 85.143367][ T65] hub 3-1:1.0: probe with driver hub failed with error -5 [ 85.288677][ T2001] usb usb6: usbfs: process 2001 (syz.1.529) did not claim interface 0 before use [ 85.363915][ T2004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.365315][ T36] audit: type=1400 audit(1756263342.220:942): avc: denied { bind } for pid=2005 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.372962][ T2004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.611650][ T45] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 85.977554][ T1987] binder: Bad value for 'defcontext' [ 86.092156][ T390] usb 3-1: USB disconnect, device number 19 [ 86.680232][ T9] usb 4-1: 0:2 : does not exist [ 86.697536][ T9] usb 4-1: USB disconnect, device number 11 [ 86.710213][ T2034] tipc: Started in network mode [ 86.721624][ T2034] tipc: Node identity ac14140f, cluster identity 4711 [ 86.728873][ T2034] tipc: New replicast peer: 255.255.255.255 [ 86.735161][ T2034] tipc: Enabled bearer , priority 10 [ 86.759727][ T2041] binder: Bad value for 'stats' [ 86.850562][ T2052] rust_binder: Error while translating object. [ 86.850592][ T2052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.856902][ T2052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 86.895906][ T2054] tap0: tun_chr_ioctl cmd 1074025677 [ 86.910589][ T2054] tap0: linktype set to 802 [ 86.975877][ T2058] rust_binder: Error while translating object. [ 86.975910][ T2058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 86.982248][ T2058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 87.061673][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 87.221613][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 87.228053][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.236587][ T9] usb 4-1: config 179 has no interface number 0 [ 87.243106][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.254207][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.265845][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.277039][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.288930][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.302683][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.311844][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.320904][ T2034] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.693644][ T2070] rust_binder: 464: no such ref 0 [ 87.731599][ T2034] tipc: Enabling of bearer rejected, already enabled [ 87.746165][ T1753] usb 4-1: USB disconnect, device number 12 [ 87.746292][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 87.761808][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 87.769782][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 87.769800][ T36] audit: type=1400 audit(1756263344.620:945): avc: denied { read } for pid=2075 comm="syz.3.557" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.782369][ T2079] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 87.799060][ T36] audit: type=1400 audit(1756263344.620:946): avc: denied { open } for pid=2075 comm="syz.3.557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.814929][ T2068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 87.832853][ T36] audit: type=1400 audit(1756263344.690:947): avc: denied { ioctl } for pid=2075 comm="syz.3.557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.865336][ T9] tipc: Node number set to 2886997007 [ 87.979847][ T2086] netlink: 104 bytes leftover after parsing attributes in process `syz.2.561'. [ 88.021605][ T36] audit: type=1400 audit(1756263344.870:948): avc: denied { sqpoll } for pid=2096 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.245017][ T390] rust_binder: 2106: removing orphan mapping 0:24 [ 88.264564][ T390] rust_binder: 0: removing orphan mapping 24:1024 [ 88.273650][ T36] audit: type=1400 audit(1756263345.130:949): avc: denied { listen } for pid=2115 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.294600][ T2119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.294637][ T2119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:403 [ 88.392677][ T36] audit: type=1400 audit(1756263345.250:950): avc: denied { map } for pid=2130 comm="syz.2.577" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 88.425543][ T36] audit: type=1400 audit(1756263345.250:951): avc: denied { execute } for pid=2130 comm="syz.2.577" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 88.464209][ T2133] loop8: detected capacity change from 0 to 7 [ 88.493365][ T36] audit: type=1326 audit(1756263345.350:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.2.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f665c78ebe9 code=0x0 [ 88.517992][ T2133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2133 comm=syz.1.578 [ 88.521630][ T1753] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.531005][ T2133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2133 comm=syz.1.578 [ 88.551412][ T2133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=2133 comm=syz.1.578 [ 88.565444][ T2133] binder: Bad value for 'defcontext' [ 88.598605][ T36] audit: type=1400 audit(1756263345.450:953): avc: denied { setopt } for pid=2134 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.643471][ T36] audit: type=1400 audit(1756263345.500:954): avc: denied { setopt } for pid=2138 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.667977][ T65] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.681657][ T1753] usb 4-1: device descriptor read/64, error -71 [ 88.691735][ T65] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.769411][ T2146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 88.779397][ T2146] rust_binder: Error while translating object. [ 88.779438][ T2146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 88.785886][ T2146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:416 [ 88.875813][ T2154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 88.938535][ T2158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.941746][ T1753] usb 4-1: device descriptor read/64, error -71 [ 88.948920][ T2158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.201718][ T1753] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 89.331689][ T1753] usb 4-1: device descriptor read/64, error -71 [ 89.456247][ T2168] rust_binder: 493: no such ref 2 [ 89.555922][ T2174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 89.573662][ T1753] usb 4-1: device descriptor read/64, error -71 [ 89.578726][ T2179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 89.610095][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 89.613987][ T2182] binder: Unknown parameter 'stat' [ 89.682324][ T1753] usb usb4-port1: attempt power cycle [ 90.021715][ T1753] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 90.042853][ T1753] usb 4-1: device descriptor read/8, error -71 [ 90.173056][ T1753] usb 4-1: device descriptor read/8, error -71 [ 90.248795][ T2202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2202 comm=syz.0.601 [ 90.262086][ T2202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2202 comm=syz.0.601 [ 90.286952][ T2205] 9pnet_fd: Insufficient options for proto=fd [ 90.413891][ T1753] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 90.418380][ T2221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'. [ 90.446966][ T2224] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 90.456046][ T1753] usb 4-1: device descriptor read/8, error -71 [ 90.476033][ T2227] netlink: 'syz.1.608': attribute type 4 has an invalid length. [ 90.524196][ T2235] overlay: Unknown parameter '/dev/kvm' [ 90.595504][ T1753] usb 4-1: device descriptor read/8, error -71 [ 90.618040][ T2243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.627529][ T2243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.721651][ T1753] usb usb4-port1: unable to enumerate USB device [ 91.232114][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.242357][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.671674][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 91.821618][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 91.829842][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 91.839424][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.847719][ T9] usb 4-1: Product: syz [ 91.852193][ T9] usb 4-1: Manufacturer: syz [ 91.856807][ T9] usb 4-1: SerialNumber: syz [ 91.860883][ T2277] rust_binder: Write failure EFAULT in pid:484 [ 91.863056][ T9] usb 4-1: config 0 descriptor?? [ 91.880303][ T2279] sit0: entered promiscuous mode [ 91.886317][ T2279] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 91.894136][ T2279] netlink: 1 bytes leftover after parsing attributes in process `syz.1.625'. [ 91.914894][ T2284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.915421][ T2285] rust_binder: Write failure EFAULT in pid:491 [ 91.924040][ T2284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.925502][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.947197][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.279157][ T2275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.288046][ T2275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.425865][ T65] usb 4-1: USB disconnect, device number 17 [ 92.535391][ T2300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 92.561223][ T2305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.570361][ T2305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.592333][ T2305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 92.602112][ T2305] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 92.609302][ T2305] rust_binder: 505: no such ref 74 [ 92.614772][ T2305] rust_binder: 505: no such ref 2 [ 92.619994][ T2305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:505 [ 92.721661][ T2318] fuse: Bad value for 'group_id' [ 92.735928][ T2318] fuse: Bad value for 'group_id' [ 93.071611][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 93.133023][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.141971][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.161182][ T2327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 93.170889][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.188628][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.196436][ T1753] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 93.199469][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.213151][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.221601][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 93.228213][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.238858][ T45] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 93.247161][ T45] usb 3-1: config 13 has no interface number 0 [ 93.253397][ T45] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 93.264537][ T45] usb 3-1: config 13 interface 50 has no altsetting 0 [ 93.272861][ T45] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 93.282046][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.290172][ T45] usb 3-1: Product: syz [ 93.294483][ T45] usb 3-1: Manufacturer: syz [ 93.299308][ T45] usb 3-1: SerialNumber: syz [ 93.309057][ T2321] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.326484][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 93.326503][ T36] audit: type=1400 audit(2000000004.590:1004): avc: denied { accept } for pid=2335 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.365922][ T1753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.368462][ T2338] /dev/rnullb0: Can't open blockdev [ 93.376144][ T1753] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.392291][ T1753] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.401664][ T1753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.410164][ T1753] usb 4-1: SerialNumber: syz [ 93.453052][ T2341] devpts: called with bogus options [ 93.458949][ T2341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.467724][ T2341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.476730][ T2341] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 93.517058][ T2342] rust_binder: Write failure EFAULT in pid:517 [ 93.520716][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 93.537124][ T45] usb 3-1: USB disconnect, device number 20 [ 93.549379][ T1677] udevd[1677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 93.619999][ T1753] usb 4-1: 0:2 : does not exist [ 93.626975][ T1753] usb 4-1: USB disconnect, device number 18 [ 93.634591][ T1737] udevd[1737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 94.006131][ T2349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.057198][ T2349] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 94.072838][ T2349] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 94.072865][ T2349] rust_binder: Error while translating object. [ 94.083835][ T2356] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 94.095565][ T2349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.097276][ T2349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 94.097777][ T2356] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 94.112005][ T2358] rust_binder: Write failure EINVAL in pid:526 [ 94.116229][ T2356] rust_binder: Error while translating object. [ 94.128472][ T2358] rust_binder: 526: no such ref 0 [ 94.133313][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.139183][ T2358] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 94.144259][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 94.167994][ T2360] rust_binder: Write failure EFAULT in pid:528 [ 94.461625][ T1753] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 94.621613][ T1753] usb 4-1: Using ep0 maxpacket: 32 [ 94.627911][ T1753] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.640799][ T1753] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 94.650043][ T1753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.658729][ T1753] usb 4-1: config 0 descriptor?? [ 94.951931][ T2391] __vm_enough_memory: pid: 2391, comm: syz.1.663, bytes: 18014402804453376 not enough memory for the allocation [ 95.004052][ T2397] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 95.004079][ T2397] rust_binder: Error while translating object. [ 95.013244][ T2397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.019503][ T2397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 95.067888][ T1753] waltop 0003:172F:0038.0007: hidraw0: USB HID v10.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 95.269860][ T2366] input: syz1 as /devices/virtual/input/input11 [ 95.314211][ T9] usb 4-1: USB disconnect, device number 19 [ 95.807100][ T2402] netlink: 7 bytes leftover after parsing attributes in process `syz.0.667'. [ 95.817335][ T2402] overlayfs: failed to clone upperpath [ 95.857136][ T2412] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.857164][ T2412] rust_binder: Read failure Err(EFAULT) in pid:547 [ 96.065212][ T36] audit: type=1400 audit(2000000007.330:1005): avc: denied { remount } for pid=2421 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.092312][ T2422] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 96.092338][ T2422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 96.102968][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:552 [ 96.104724][ T2438] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 96.145496][ T36] audit: type=1400 audit(2000000007.410:1006): avc: denied { read } for pid=2439 comm="syz.1.681" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.172945][ T2440] rust_binder: Write failure EFAULT in pid:556 [ 96.177024][ T36] audit: type=1400 audit(2000000007.410:1007): avc: denied { open } for pid=2439 comm="syz.1.681" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.208474][ T36] audit: type=1400 audit(2000000007.420:1008): avc: denied { write } for pid=2439 comm="syz.1.681" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.402454][ T36] audit: type=1400 audit(2000000007.670:1009): avc: denied { getopt } for pid=2464 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.422005][ T2467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 96.690149][ T2475] overlayfs: failed to clone upperpath [ 96.728093][ T36] audit: type=1400 audit(2000000007.990:1010): avc: denied { execute } for pid=2476 comm="syz.0.693" path="/dev/rnullb0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.800248][ T36] audit: type=1400 audit(2000000008.060:1011): avc: denied { getopt } for pid=2491 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.807439][ T2492] can: request_module (can-proto-4) failed. [ 96.839248][ T36] audit: type=1400 audit(2000000008.100:1012): avc: denied { connect } for pid=2493 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.902103][ T2494] 9pnet_fd: Insufficient options for proto=fd [ 97.038087][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.046757][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.056041][ T2497] rust_binder: Write failure EFAULT in pid:573 [ 97.264306][ T2502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.270689][ T2502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351 [ 97.299097][ T2514] __vm_enough_memory: pid: 2514, comm: syz.3.708, bytes: 18014402804453376 not enough memory for the allocation [ 97.321669][ T2514] __vm_enough_memory: pid: 2514, comm: syz.3.708, bytes: 18014402804453376 not enough memory for the allocation [ 97.592323][ T2544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 97.794079][ T36] audit: type=1400 audit(2000000009.061:1013): avc: denied { create } for pid=2546 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 97.865014][ T2553] rust_binder: Error while translating object. [ 97.865054][ T2553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.871683][ T2553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 98.037970][ T2569] /dev/loop0: Can't lookup blockdev [ 98.078184][ T2581] veth1_macvtap: left promiscuous mode [ 98.084283][ T2582] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 376, limit: 4256, size: 4096) [ 98.084307][ T2582] rust_binder: Error while translating object. [ 98.096372][ T2582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.102625][ T2582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 98.114742][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.133258][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.188994][ T2594] /dev/sg0: Can't lookup blockdev [ 98.272326][ T2598] tipc: Started in network mode [ 98.277251][ T2598] tipc: Node identity ac141413, cluster identity 4711 [ 98.325996][ T2598] tipc: New replicast peer: 10.1.1.2 [ 98.331773][ T2598] tipc: Enabled bearer , priority 10 [ 98.878001][ T2629] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 98.879744][ T2629] binder: Bad value for 'max' [ 98.950521][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.962961][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.976877][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.984264][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 98.984281][ T36] audit: type=1400 audit(2000000010.241:1018): avc: denied { setopt } for pid=2643 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.991755][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.183841][ T2660] SELinux: policydb string length 1836477231 does not match expected length 8 [ 99.193055][ T2660] SELinux: failed to load policy [ 99.276980][ T2673] rust_binder: Error while translating object. [ 99.277022][ T2673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.281736][ T2675] fuse: Unknown parameter '017777777777777777777770x0000000000000006' [ 99.283701][ T2673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 99.451663][ T383] tipc: Node number set to 2886997011 [ 99.845107][ T36] audit: type=1400 audit(2000000011.111:1019): avc: denied { audit_write } for pid=2690 comm="syz.1.760" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.866686][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 99.875554][ T36] audit: type=1400 audit(2000000011.111:1020): avc: denied { map } for pid=2690 comm="syz.1.760" path="socket:[17767]" dev="sockfs" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.900916][ T36] audit: type=1400 audit(2000000011.111:1021): avc: denied { accept } for pid=2690 comm="syz.1.760" path="socket:[17767]" dev="sockfs" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.934282][ T36] audit: type=1400 audit(2000000011.111:1022): avc: denied { append } for pid=2690 comm="syz.1.760" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.958004][ T36] audit: type=1400 audit(2000000011.131:1023): avc: denied { ioctl } for pid=2690 comm="syz.1.760" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.988532][ T36] audit: type=1400 audit(2000000011.171:1024): avc: denied { checkpoint_restore } for pid=2687 comm="syz.0.759" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.032768][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 100.043519][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 100.054165][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 100.066070][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 100.079340][ T9] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 100.088518][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.101640][ T9] usb 3-1: Product: syz [ 100.105890][ T9] usb 3-1: Manufacturer: syz [ 100.110536][ T9] usb 3-1: SerialNumber: syz [ 100.117080][ T9] usb 3-1: config 0 descriptor?? [ 100.125136][ T9] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 100.216652][ T36] audit: type=1400 audit(2000000011.481:1025): avc: denied { append } for pid=2703 comm="syz.3.763" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.331979][ T2679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.340641][ T2679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.355831][ T9] scsi host1: usb-storage 3-1:0.0 [ 100.362824][ T9] usb 3-1: USB disconnect, device number 21 [ 100.581671][ T390] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 100.678406][ T2723] rust_binder: 2722 RLIMIT_NICE not set [ 100.681954][ T374] rust_binder: 2721: removing orphan mapping 0:4248 [ 100.696254][ T2727] rust_binder: Read failure Err(EFAULT) in pid:612 [ 100.731638][ T390] usb 4-1: Using ep0 maxpacket: 32 [ 100.745423][ T390] usb 4-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.755435][ T390] usb 4-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.762192][ T2730] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 100.765744][ T390] usb 4-1: config 1 interface 0 has no altsetting 0 [ 100.781878][ T390] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 100.790926][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.798958][ T390] usb 4-1: Product: ê¾¼Ø榻앑ὑ㛮칣兤豔ì•á¿•ï¦Žâ»«ä›„﯆ [ 100.807500][ T390] usb 4-1: Manufacturer: Ñ [ 100.812041][ T390] usb 4-1: SerialNumber: syz [ 100.817763][ T2714] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 100.825043][ T2714] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 101.074307][ T2735] cgroup: Unknown subsys name 'net' [ 101.086796][ T36] audit: type=1326 audit(2000000012.351:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665c78ebe9 code=0x7fc00000 [ 101.235242][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.245411][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.255968][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.265664][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.277087][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.286531][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.299782][ T390] usblp0: Disabling reads from problematic bidirectional printer [ 101.310724][ T390] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 254 proto 2 vid 0x03F0 pid 0x0004 [ 101.324386][ T390] usb 4-1: USB disconnect, device number 20 [ 101.331796][ T390] usblp0: removed [ 101.491735][ T374] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 101.651753][ T374] usb 3-1: Using ep0 maxpacket: 16 [ 101.658054][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.674327][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.684509][ T374] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 101.694231][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.703385][ T374] usb 3-1: config 0 descriptor?? [ 101.719308][ T2763] overlayfs: failed to resolve './file1': -2 [ 101.728114][ T2763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 101.841095][ T2771] rust_binder: Write failure EFAULT in pid:393 [ 101.923192][ T36] audit: type=1326 audit(101.898:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2786 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 101.929370][ T2787] tipc: Can't bind to reserved service type 2 [ 102.119653][ T374] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 102.311723][ T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 102.441641][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.550395][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 163: -71 [ 102.560005][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 firmware info: -71 [ 102.569717][ T374] playstation 0003:054C:05C4.0008: Failed to get firmware info from DualShock4 [ 102.578838][ T374] playstation 0003:054C:05C4.0008: HW/FW version data in sysfs will be invalid. [ 102.588410][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 2: -71 [ 102.598623][ T374] playstation 0003:054C:05C4.0008: Retrying DualShock 4 get calibration report (0x02) request [ 102.610100][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 2: -71 [ 102.619559][ T374] playstation 0003:054C:05C4.0008: Retrying DualShock 4 get calibration report (0x02) request [ 102.632635][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 2: -71 [ 102.642007][ T374] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 calibration info: -71 [ 102.651741][ T374] playstation 0003:054C:05C4.0008: Invalid gyro calibration data for axis (3), disabling calibration. [ 102.663060][ T374] playstation 0003:054C:05C4.0008: Invalid gyro calibration data for axis (4), disabling calibration. [ 102.674111][ T374] playstation 0003:054C:05C4.0008: Invalid gyro calibration data for axis (5), disabling calibration. [ 102.685409][ T374] playstation 0003:054C:05C4.0008: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 102.697279][ T374] playstation 0003:054C:05C4.0008: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 102.709096][ T374] playstation 0003:054C:05C4.0008: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 102.720901][ T374] playstation 0003:054C:05C4.0008: Failed to get calibration data from DualShock4 [ 102.730703][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.737020][ T374] playstation 0003:054C:05C4.0008: Gyroscope and accelerometer will be inaccurate. [ 102.748149][ T374] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0008/input/input15 [ 102.761911][ T374] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0008/input/input16 [ 102.777177][ T374] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0008/input/input17 [ 102.797842][ T374] playstation 0003:054C:05C4.0008: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 102.820045][ T374] usb 3-1: USB disconnect, device number 22 [ 102.971624][ T9] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 103.015660][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.024297][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.033712][ T2859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.033739][ T2859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 103.044642][ T2859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 103.080421][ T2861] binder: Unknown parameter 'Dÿÿh¥›' [ 103.097057][ T2863] loop2: detected capacity change from 0 to 7 [ 103.111794][ T9] usb 4-1: device descriptor read/64, error -71 [ 103.199419][ T2868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.817'. [ 103.209433][ T2868] tipc: Enabling of bearer rejected, failed to enable media [ 103.351640][ T9] usb 4-1: device descriptor read/64, error -71 [ 103.461756][ T9] usb usb4-port1: attempt power cycle [ 103.579857][ T2900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.589102][ T2900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.801625][ T9] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 103.822819][ T9] usb 4-1: device descriptor read/8, error -71 [ 103.848861][ T2915] overlayfs: failed to clone upperpath [ 103.952689][ T9] usb 4-1: device descriptor read/8, error -71 [ 104.201751][ T9] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 104.222661][ T9] usb 4-1: device descriptor read/8, error -71 [ 104.253469][ T2965] rust_binder: Error while translating object. [ 104.253531][ T2965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 104.261808][ T2965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:664 [ 104.285704][ T2969] netlink: 7 bytes leftover after parsing attributes in process `syz.2.851'. [ 104.362676][ T9] usb 4-1: device descriptor read/8, error -71 [ 104.363753][ T2969] rust_binder: Error while translating object. [ 104.369600][ T2969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.375921][ T2969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:666 [ 104.471987][ T9] usb usb4-port1: unable to enumerate USB device [ 104.524953][ T2995] rust_binder: 663: no such ref 1 [ 104.671683][ T383] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 104.708441][ T3001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.708891][ T3001] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 104.708919][ T3002] rust_binder: Error while translating object. [ 104.715624][ T3001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 104.723611][ T3002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.729826][ T3001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:669 [ 104.739279][ T3002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 104.823216][ T383] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.840685][ T383] usb 3-1: not running at top speed; connect to a high speed hub [ 104.849820][ T383] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.863046][ T383] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.873116][ T383] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.882282][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.890317][ T383] usb 3-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨ñ¦…¡ [ 104.897559][ T383] usb 3-1: SerialNumber: syz [ 104.899237][ T3009] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 104.909678][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 104.909697][ T36] audit: type=1400 audit(104.878:1103): avc: denied { nlmsg_write } for pid=3015 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 104.914085][ T3009] rust_binder: Write failure EINVAL in pid:675 [ 105.115205][ T383] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 105.132017][ T3030] /dev/rnullb0: Can't open blockdev [ 105.135026][ T383] usb 3-1: USB disconnect, device number 23 [ 105.155689][ T383] usblp0: removed [ 105.158155][ T329] tipc: Subscription rejected, illegal request [ 105.285112][ T3041] rust_binder: got new transaction with bad transaction stack [ 105.285136][ T3041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 105.641293][ T3056] /dev/rnullb0: Can't open blockdev [ 105.665052][ T3054] tipc: Started in network mode [ 105.670380][ T3054] tipc: Node identity d257c1ceb0da, cluster identity 4711 [ 105.677832][ T3054] tipc: Enabled bearer , priority 0 [ 105.693062][ T3054] syzkaller0: entered promiscuous mode [ 105.698557][ T3054] syzkaller0: entered allmulticast mode [ 105.704479][ T3054] tipc: Resetting bearer [ 105.736167][ T3053] tipc: Resetting bearer [ 105.750413][ T3053] tipc: Disabling bearer [ 105.821517][ T3064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.832117][ T3064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.843101][ T3064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.852400][ T3064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.861270][ T3064] binder: Binderfs stats mode cannot be changed during a remount [ 105.869203][ T36] audit: type=1400 audit(105.828:1104): avc: denied { create } for pid=3080 comm="syz.0.889" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.883128][ T3083] futex_wake_op: syz.0.890 tries to shift op by 32; fix this program [ 105.889867][ T36] audit: type=1400 audit(105.828:1105): avc: denied { mounton } for pid=3080 comm="syz.0.889" path="/293/file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.930477][ T36] audit: type=1400 audit(105.828:1106): avc: denied { read write } for pid=3080 comm="syz.0.889" name="file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.957845][ T36] audit: type=1400 audit(105.828:1107): avc: denied { open } for pid=3080 comm="syz.0.889" path="/293/file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.314004][ T3099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.322771][ T3099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.520895][ T3112] overlayfs: failed to clone upperpath [ 106.551627][ T383] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 106.693271][ T3120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.701887][ T3120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.711904][ T3122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.720958][ T3122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.411656][ T383] usb 4-1: device descriptor read/64, error -71 [ 107.429879][ T3141] rust_binder: Error in use_page_slow: ESRCH [ 107.429902][ T3141] rust_binder: use_range failure ESRCH [ 107.434270][ T3143] rust_binder: Error in use_page_slow: ESRCH [ 107.436307][ T3141] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 107.442457][ T3143] rust_binder: use_range failure ESRCH [ 107.452563][ T3141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.460500][ T3143] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 107.462962][ T3141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:697 [ 107.471740][ T3143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.488983][ T3143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:697 [ 107.549404][ T3156] x_tables: unsorted underflow at hook 4 [ 107.571812][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 107.661711][ T383] usb 4-1: device descriptor read/64, error -71 [ 107.721703][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 107.728189][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.736622][ T45] usb 3-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 107.748091][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 107.759037][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 107.768289][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.776687][ T45] usb 3-1: Product: syz [ 107.781175][ T45] usb 3-1: SerialNumber: syz [ 107.800649][ T3162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:706 [ 107.879387][ T3167] rust_binder: 3166 RLIMIT_NICE not set [ 107.900554][ T3169] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 107.901613][ T383] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 107.928325][ T3171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.937208][ T3171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.052702][ T383] usb 4-1: device descriptor read/64, error -71 [ 108.301614][ T383] usb 4-1: device descriptor read/64, error -71 [ 108.411755][ T383] usb usb4-port1: attempt power cycle [ 108.425003][ T3181] 8021q: VLANs not supported on vcan0 [ 108.542644][ T3186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.542682][ T3186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:717 [ 108.690114][ T3199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:728 [ 108.761657][ T383] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 108.771399][ T3210] mmap: syz.0.932 (3210): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 108.793254][ T383] usb 4-1: device descriptor read/8, error -71 [ 108.923140][ T383] usb 4-1: device descriptor read/8, error -71 [ 109.171612][ T383] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 109.192649][ T383] usb 4-1: device descriptor read/8, error -71 [ 109.322748][ T383] usb 4-1: device descriptor read/8, error -71 [ 109.431956][ T383] usb usb4-port1: unable to enumerate USB device [ 110.077629][ T3239] rust_binder: Error while translating object. [ 110.077686][ T3239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.109009][ T3239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:760 [ 110.248885][ T3252] rust_binder: Error while translating object. [ 110.268747][ T3252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.283071][ T3252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 110.356920][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 110.392408][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 110.416445][ T45] usb 3-1: USB disconnect, device number 24 [ 111.117016][ T3284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.127303][ T3284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.319057][ T3288] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 111.402221][ T3293] rust_binder: 712: no such ref 1 [ 111.407431][ T3293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:712 [ 111.652378][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 111.702251][ T3298] netlink: 'syz.1.957': attribute type 16 has an invalid length. [ 111.710160][ T3298] netlink: 'syz.1.957': attribute type 25 has an invalid length. [ 111.718497][ T3298] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.957'. [ 111.842676][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.857214][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 111.872631][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.891604][ T9] usb 3-1: Product: syz [ 111.895798][ T9] usb 3-1: Manufacturer: syz [ 111.900403][ T9] usb 3-1: SerialNumber: syz [ 111.922472][ T9] usb 3-1: config 0 descriptor?? [ 112.151862][ T3307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786 [ 112.153757][ T36] audit: type=1400 audit(112.128:1108): avc: denied { read } for pid=3306 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.514011][ T3311] binder: Bad value for 'max' [ 112.867640][ T3318] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 112.876137][ T3318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 113.092298][ T3333] rust_binder: Write failure EFAULT in pid:793 [ 113.114739][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 113.130988][ T3337] 9pnet_fd: Insufficient options for proto=fd [ 113.174254][ T3341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.186262][ T3341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.204986][ T3342] rust_binder: Error while translating object. [ 113.205022][ T3342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 113.211594][ T3342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:479 [ 113.910981][ T374] rust_binder: 3355: removing orphan mapping 0:24 [ 114.002935][ T3369] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 114.011399][ T3369] rust_binder: Write failure EINVAL in pid:816 [ 114.156526][ T36] audit: type=1400 audit(114.128:1109): avc: denied { connect } for pid=3371 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.191838][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 114.319910][ T36] audit: type=1400 audit(114.288:1110): avc: denied { getopt } for pid=3379 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.320713][ T3380] rust_binder: Error while translating object. [ 114.340246][ T3380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 114.346650][ T3380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:823 [ 114.361627][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 114.387721][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.392905][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 114.402838][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.420255][ T9] usb 3-1: USB disconnect, device number 25 [ 114.426835][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 114.432297][ T1737] udevd[1737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 114.443788][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.465083][ T45] usb 4-1: config 0 descriptor?? [ 114.482539][ T36] audit: type=1326 audit(114.458:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933d78ebe9 code=0x0 [ 114.679706][ T3404] overlayfs: failed to clone upperpath [ 114.696231][ T36] audit: type=1400 audit(114.668:1112): avc: denied { setopt } for pid=3405 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.700264][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 114.716778][ T36] audit: type=1326 audit(114.668:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 114.748748][ T36] audit: type=1326 audit(114.668:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 114.771837][ T36] audit: type=1326 audit(114.668:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 114.795047][ T36] audit: type=1326 audit(114.668:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 114.817970][ T36] audit: type=1326 audit(114.668:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x7ffc0000 [ 114.932956][ T45] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 114.991604][ T383] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 115.141629][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 115.147984][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.159034][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.169038][ T383] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 115.178135][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.187001][ T383] usb 3-1: config 0 descriptor?? [ 115.272299][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 163: -32 [ 115.272325][ T3362] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 115.282071][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 firmware info: -32 [ 115.299609][ T45] playstation 0003:054C:05C4.0009: Failed to get firmware info from DualShock4 [ 115.308689][ T45] playstation 0003:054C:05C4.0009: HW/FW version data in sysfs will be invalid. [ 115.318314][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 115.327937][ T45] playstation 0003:054C:05C4.0009: Retrying DualShock 4 get calibration report (0x02) request [ 115.340754][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 115.354442][ T45] playstation 0003:054C:05C4.0009: Retrying DualShock 4 get calibration report (0x02) request [ 115.368339][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 115.382029][ T45] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 calibration info: -71 [ 115.400203][ T45] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (3), disabling calibration. [ 115.415115][ T45] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (4), disabling calibration. [ 115.426550][ T383] usbhid 3-1:0.0: can't add hid device: -71 [ 115.433262][ T45] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (5), disabling calibration. [ 115.448306][ T383] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.458516][ T383] usb 3-1: USB disconnect, device number 26 [ 115.466708][ T45] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 115.480023][ T45] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 115.493401][ T45] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 115.505591][ T45] playstation 0003:054C:05C4.0009: Failed to get calibration data from DualShock4 [ 115.515184][ T45] playstation 0003:054C:05C4.0009: Gyroscope and accelerometer will be inaccurate. [ 115.525439][ T3423] rust_binder: 3422 RLIMIT_NICE not set [ 115.527663][ T45] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input18 [ 115.546753][ T45] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input19 [ 115.570790][ T45] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0009/input/input20 [ 115.610560][ T45] playstation 0003:054C:05C4.0009: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 115.635853][ T45] usb 4-1: USB disconnect, device number 29 [ 115.826931][ T3438] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 115.826960][ T3438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 115.845987][ T3438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:485 [ 115.953134][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.975648][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.984602][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.093859][ T3475] 9pnet_fd: p9_fd_create_tcp (3475): problem connecting socket to 127.0.0.1 [ 116.216957][ T3487] binder: Unknown parameter '01777777777777777777777' [ 116.269921][ T3494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 116.288262][ T45] rust_binder: 3421: removing orphan mapping 0:4248 [ 116.309673][ T3494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 116.422150][ T3512] 9pnet_fd: Insufficient options for proto=fd [ 116.691594][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 116.861584][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 116.874540][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.894636][ T3539] overlayfs: workdir and upperdir must reside under the same mount [ 116.906009][ T45] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 116.930882][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.943060][ T3539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.972007][ T45] usb 4-1: config 0 descriptor?? [ 117.117863][ T3551] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1035'. [ 117.185883][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 117.185903][ T36] audit: type=1400 audit(117.158:1172): avc: denied { read } for pid=3564 comm="syz.0.1039" path="socket:[22792]" dev="sockfs" ino=22792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.218336][ T3568] overlayfs: conflicting options: metacopy=off,verity=require [ 117.386860][ T45] steelseries 0003:1038:1410.000A: missing HID_OUTPUT_REPORT 0 [ 117.460430][ T36] audit: type=1400 audit(117.428:1173): avc: denied { read append } for pid=3606 comm="syz.1.1047" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.483726][ T36] audit: type=1400 audit(117.428:1174): avc: denied { open } for pid=3606 comm="syz.1.1047" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.498314][ T3615] pim6reg1: entered promiscuous mode [ 117.508247][ T36] audit: type=1400 audit(117.428:1175): avc: denied { map } for pid=3606 comm="syz.1.1047" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.516374][ T3615] pim6reg1: entered allmulticast mode [ 118.122968][ T3650] rust_binder: Write failure EFAULT in pid:876 [ 118.140460][ T36] audit: type=1400 audit(118.108:1176): avc: denied { write } for pid=3653 comm="syz.1.1060" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.737009][ T3665] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.737032][ T3665] rust_binder: Read failure Err(EFAULT) in pid:884 [ 118.745567][ T3665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:884 [ 118.761020][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 119.295515][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.304928][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.358041][ T3715] overlayfs: failed to resolve './file1': -2 [ 119.390959][ T36] audit: type=1326 audit(119.358:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 119.413786][ T36] audit: type=1326 audit(119.358:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 119.436702][ T36] audit: type=1326 audit(119.358:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 119.459351][ T36] audit: type=1326 audit(119.358:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 119.482489][ T36] audit: type=1326 audit(119.358:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 119.550386][ T45] usb 4-1: USB disconnect, device number 30 [ 120.427779][ T3742] rust_binder: 3743 RLIMIT_NICE not set [ 120.961591][ T374] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 121.140182][ T374] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.155915][ T374] usb 3-1: can't read configurations, error -71 [ 121.266255][ T3773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.267350][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 121.291111][ T3773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1100'. [ 121.301229][ T3773] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 121.301258][ T3773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 121.330397][ T3773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:764 [ 121.451045][ T3783] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 121.451098][ T3787] rust_binder: Write failure EINVAL in pid:914 [ 121.491030][ T3791] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 121.821718][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 121.992691][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.003928][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.015632][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.031629][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 122.040008][ T9] usb 4-1: Product: syz [ 122.051573][ T9] usb 4-1: Manufacturer: syz [ 122.058293][ T9] hub 4-1:4.0: USB hub found [ 122.191660][ T36] kauditd_printk_skb: 45868 callbacks suppressed [ 122.191679][ T36] audit: type=1326 audit(122.158:47050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.220942][ T36] audit: type=1326 audit(122.168:47052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.243673][ T36] audit: type=1326 audit(122.168:47053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.244757][ T374] rust_binder: 3782: removing orphan mapping 0:112 [ 122.266532][ T36] audit: type=1326 audit(122.168:47054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.280586][ T9] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 122.303050][ T36] audit: type=1326 audit(122.168:47055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.326436][ T36] audit: type=1326 audit(122.168:47056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.341621][ T9] usb 4-1: USB disconnect, device number 32 [ 122.349466][ T36] audit: type=1326 audit(122.168:47057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.377833][ T36] audit: type=1326 audit(122.168:47058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.400714][ T36] audit: type=1326 audit(122.168:47059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.423954][ T36] audit: type=1326 audit(122.168:47060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3720 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab8ebe9 code=0x50000 [ 122.436629][ T3806] /dev/rnullb0: Can't open blockdev [ 122.474289][ T3810] capability: warning: `syz.1.1113' uses 32-bit capabilities (legacy support in use) [ 122.491084][ T3814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.498516][ T3814] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 122.505420][ T3814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 122.513709][ T3814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:780 [ 122.735073][ T3825] 9pnet_fd: Insufficient options for proto=fd [ 122.736757][ T3826] binder: Bad value for 'stats' [ 122.773243][ T3830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.828655][ T3843] /dev/rnullb0: Can't open blockdev [ 122.847691][ T3843] proc: Unknown parameter 'verity' [ 122.907212][ T3851] netlink: 'syz.2.1129': attribute type 4 has an invalid length. [ 123.040225][ T3861] rust_binder: Error in use_page_slow: ESRCH [ 123.040255][ T3861] rust_binder: use_range failure ESRCH [ 123.051105][ T3861] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 123.051645][ T3868] rust_binder: Error in use_page_slow: ESRCH [ 123.056835][ T3861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.065729][ T3868] rust_binder: use_range failure ESRCH [ 123.073538][ T3861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:572 [ 123.087470][ T3868] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 123.097483][ T3868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.105614][ T3868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:572 [ 123.333448][ T3888] overlay: Unknown parameter 'dont_appraise' [ 123.641522][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.650351][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.659187][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.667850][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.677874][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.686430][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.997385][ T3923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1151'. [ 124.011995][ T3925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 124.039740][ T3927] rust_binder: Failed copying remainder into alloc: EFAULT [ 124.039760][ T3927] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 124.047436][ T3927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 124.055995][ T3927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:821 [ 124.075788][ T3930] usb usb6: usbfs: process 3930 (syz.2.1154) did not claim interface 0 before use [ 124.121724][ T383] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 124.271593][ T383] usb 4-1: Using ep0 maxpacket: 32 [ 124.278356][ T383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.290974][ T383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.301146][ T383] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.310227][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.320747][ T383] usb 4-1: config 0 descriptor?? [ 124.328968][ T383] hub 4-1:0.0: USB hub found [ 124.342098][ T3958] Invalid ELF header type: 2 != 1 [ 124.347500][ T3958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1161'. [ 124.358392][ T3958] 9pnet_fd: Insufficient options for proto=fd [ 124.364945][ T3960] Invalid ELF header type: 2 != 1 [ 124.490223][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.498934][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.526741][ T383] hub 4-1:0.0: 1 port detected [ 124.687516][ T46] tipc: Subscription rejected, illegal request [ 125.113842][ T3983] tmpfs: Bad value for 'huge' [ 125.127740][ T383] hub 4-1:0.0: activate --> -90 [ 125.142139][ T3986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3986 comm=syz.2.1171 [ 125.329065][ T4003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.337617][ T4003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.346223][ T4003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.355000][ T4003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.363389][ T4003] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 125.411604][ T45] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 125.531910][ T3901] rust_binder: 580: no such ref 3 [ 125.538815][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.548259][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.566217][ T4024] rust_binder: Failed copying remainder into alloc: EFAULT [ 125.566292][ T4024] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 125.573747][ T4024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 125.582091][ T4024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:586 [ 125.592446][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.612945][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.624083][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.633255][ T45] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.641734][ T45] usb 3-1: Product: syz [ 125.645918][ T45] usb 3-1: Manufacturer: syz [ 125.652263][ T45] hub 3-1:4.0: USB hub found [ 125.655533][ T4027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.665398][ T4028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.665775][ T4027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.674386][ T4028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.686629][ T374] usb 4-1: USB disconnect, device number 33 [ 125.854158][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.863681][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.874020][ T45] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 125.902106][ T45] usb 3-1: USB disconnect, device number 29 [ 126.631633][ T374] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 126.640596][ T4085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.653906][ T4089] rust_binder: Error while translating object. [ 126.660534][ T4089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.666797][ T4089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 126.782776][ T374] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.802379][ T374] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.811345][ T374] usb 3-1: config 1 has no interface number 1 [ 126.817592][ T374] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 126.830608][ T374] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 126.843158][ T374] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.852315][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.860638][ T374] usb 3-1: Product: syz [ 126.865299][ T374] usb 3-1: Manufacturer: syz [ 126.869983][ T374] usb 3-1: SerialNumber: syz [ 126.876926][ T4073] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.087068][ T4073] binder: Bad value for 'stats' [ 127.095947][ T374] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 127.103966][ T374] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 127.117631][ T374] usb 3-1: USB disconnect, device number 30 [ 127.127754][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 127.241602][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 127.249792][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 127.249811][ T36] audit: type=1326 audit(128.214:47137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.278857][ T36] audit: type=1326 audit(128.214:47138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.302420][ T36] audit: type=1326 audit(128.254:47139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.341910][ T36] audit: type=1326 audit(128.314:47140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.421722][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 127.427261][ T36] audit: type=1326 audit(128.394:47141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.450482][ T36] audit: type=1326 audit(128.414:47142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.474098][ T36] audit: type=1326 audit(128.414:47143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.497380][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.497480][ T36] audit: type=1326 audit(128.414:47144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.528348][ T36] audit: type=1326 audit(128.444:47145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.533434][ T4113] 9pnet_fd: Insufficient options for proto=fd [ 127.551737][ T36] audit: type=1326 audit(128.444:47146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd08fd8e7eb code=0x7ffc0000 [ 127.558011][ T9] usb 4-1: config 42 has an invalid interface number: 238 but max is 0 [ 127.589368][ T9] usb 4-1: config 42 has no interface number 0 [ 127.595752][ T9] usb 4-1: config 42 interface 238 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 127.606889][ T9] usb 4-1: config 42 interface 238 has no altsetting 0 [ 127.625429][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=12.b3 [ 127.634693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.643317][ T9] usb 4-1: Product: syz [ 127.647648][ T9] usb 4-1: Manufacturer: syz [ 127.652325][ T9] usb 4-1: SerialNumber: syz [ 127.732158][ T4133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43294 sclass=netlink_route_socket pid=4133 comm=syz.0.1220 [ 127.734049][ T4134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1221'. [ 127.758676][ T4134] 9pnet_fd: Insufficient options for proto=fd [ 128.388404][ T4157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=4157 comm=syz.3.1227 [ 128.423600][ T4161] /dev/rnullb0: Can't open blockdev [ 128.467284][ T4170] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 128.482433][ T4175] binder: Bad value for 'defcontext' [ 128.499608][ T4177] rust_binder: Write failure EFAULT in pid:885 [ 128.586835][ T4194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1239'. [ 128.651959][ T4213] fuseblk: Bad value for 'fd' [ 128.680833][ T4217] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 128.703624][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 128.751601][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 128.881606][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.124709][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.133467][ T4228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.142176][ T4228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.164780][ T4230] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 129.164809][ T4230] rust_binder: Read failure Err(EFAULT) in pid:968 [ 129.173653][ T4230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:968 [ 129.330278][ T4244] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 129.361601][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 129.486022][ T4253] vcan0: entered allmulticast mode [ 129.501645][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.518686][ T374] hid-generic 0610:7F000000:0007.000B: unexpected long global item [ 129.527051][ T374] hid-generic 0610:7F000000:0007.000B: probe with driver hid-generic failed with error -22 [ 129.604501][ T4259] rust_binder: Write failure EFAULT in pid:993 [ 129.644106][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.659167][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.668486][ T4269] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 129.695753][ T4272] rust_binder: Error in use_page_slow: ESRCH [ 129.695771][ T4272] rust_binder: use_range failure ESRCH [ 129.710181][ T4272] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 129.710228][ T4272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.718247][ T4272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:650 [ 129.728908][ T4271] rust_binder: Error in use_page_slow: ESRCH [ 129.738249][ T4271] rust_binder: use_range failure ESRCH [ 129.744354][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.754315][ T4271] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 129.756154][ T4271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.763813][ T4277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 129.764307][ T4271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:650 [ 129.774640][ T4277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1006 [ 129.862017][ T10] usb usb3-port1: attempt power cycle [ 129.871695][ T4285] PM: Enabling pm_trace changes system date and time during resume. [ 129.871695][ T4285] PM: Correct system time has to be restored manually after resume. [ 129.880662][ T4281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1008 [ 129.969265][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.987263][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.220907][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 130.252643][ T10] usb 3-1: device descriptor read/8, error -71 [ 130.287172][ T4305] rust_binder: 4304 RLIMIT_NICE not set [ 130.287387][ T4305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1017 [ 130.302854][ T374] rust_binder: 4303: removing orphan mapping 0:24 [ 130.367983][ T4315] futex_wake_op: syz.1.1282 tries to shift op by 32; fix this program [ 130.402663][ T10] usb 3-1: device descriptor read/8, error -71 [ 130.491410][ T383] usb 2-1: USB disconnect, device number 11 [ 130.641707][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 130.672685][ T10] usb 3-1: device descriptor read/8, error -71 [ 130.705286][ T4334] fuse: Bad value for 'group_id' [ 130.710373][ T4334] fuse: Bad value for 'group_id' [ 130.802767][ T10] usb 3-1: device descriptor read/8, error -71 [ 130.834724][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.842011][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.849244][ T4335] bridge_slave_0: entered allmulticast mode [ 130.857144][ T4335] bridge_slave_0: entered promiscuous mode [ 130.863924][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.871081][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.878654][ T4335] bridge_slave_1: entered allmulticast mode [ 130.885723][ T4335] bridge_slave_1: entered promiscuous mode [ 130.922107][ T10] usb usb3-port1: unable to enumerate USB device [ 130.976359][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.983462][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.990799][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.997883][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.027809][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.036234][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.046797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.053962][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.064790][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.071900][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.132081][ T4335] veth0_vlan: entered promiscuous mode [ 131.141031][ T4346] cgroup: noprefix used incorrectly [ 131.156414][ T4335] veth1_macvtap: entered promiscuous mode [ 131.260258][ T4362] rust_binder: 7: no such ref 0 [ 131.271952][ T4362] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 131.467873][ T4382] 9pnet_fd: Insufficient options for proto=fd [ 131.476053][ T4382] binder: Unknown parameter 'maxl' [ 131.660025][ T4396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.660057][ T4396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:686 [ 131.661641][ T374] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.697716][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.705334][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.713085][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.720609][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.728399][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.736384][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.744102][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.751518][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.759811][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.768159][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.775879][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.783445][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.790886][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.798524][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.806021][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.813548][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.821202][ T10] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 131.829396][ T10] hid-generic 0006:0004:0009.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 131.841621][ T374] usb 5-1: Using ep0 maxpacket: 16 [ 131.848336][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.848363][ T374] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.858716][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.871585][ T4402] fido_id[4402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.888225][ T374] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.892330][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.901585][ T374] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.907659][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.919953][ T374] usb 5-1: config 1 interface 0 has no altsetting 0 [ 131.942593][ T374] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 131.952479][ T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.960911][ T374] usb 5-1: Product: syz [ 131.966945][ T374] usb 5-1: Manufacturer: syz [ 131.971814][ T374] usb 5-1: SerialNumber: syz [ 131.972428][ T4415] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1312'. [ 131.985565][ T4415] netlink: 'syz.0.1312': attribute type 6 has an invalid length. [ 131.993596][ T4415] netlink: 'syz.0.1312': attribute type 5 has an invalid length. [ 132.001390][ T4415] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 132.074239][ T4427] fuse: Bad value for 'fd' [ 132.136946][ T4434] overlayfs: failed to clone upperpath [ 132.181909][ T374] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 132.201389][ T374] usb 5-1: USB disconnect, device number 2 [ 132.214717][ T374] usblp0: removed [ 132.565762][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 132.565783][ T36] audit: type=1400 audit(133.534:47249): avc: denied { getopt } for pid=4450 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.565873][ T4452] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 132.667979][ T4465] fuse: Bad value for 'rootmode' [ 132.675723][ T36] audit: type=1400 audit(133.644:47250): avc: denied { ioctl } for pid=4464 comm="syz.3.1332" path="/230/file0" dev="tmpfs" ino=1264 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.708522][ T9] usb 4-1: unknown interface protocol 0x16, assuming v1 [ 132.716437][ T9] usb 4-1: cannot find UAC_HEADER [ 132.724352][ T9] snd-usb-audio 4-1:42.238: probe with driver snd-usb-audio failed with error -22 [ 132.743250][ T1737] udevd[1737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:42.238/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.918072][ T4474] ------------[ cut here ]------------ [ 132.923623][ T4474] WARNING: CPU: 1 PID: 4474 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 132.933075][ T4474] Modules linked in: [ 132.936997][ T4474] CPU: 1 UID: 0 PID: 4474 Comm: syz.3.1336 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 132.948592][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.958737][ T4474] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 132.964713][ T4474] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b1 25 ee 05 00 0f 85 be 00 00 00 c6 05 a4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 132.984392][ T4474] RSP: 0018:ffffc900113d75a0 EFLAGS: 00010246 [ 132.990481][ T4474] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 132.998533][ T4474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900113d7658 [ 133.006632][ T4474] RBP: ffffc900113d76c8 R08: ffffc900113d7657 R09: 0000000000000000 [ 133.014724][ T4474] R10: ffffc900113d7640 R11: fffff5200227aecb R12: ffffc900113d75e0 [ 133.022859][ T4474] R13: dffffc0000000000 R14: 1ffff9200227aeb8 R15: 0000000000000000 [ 133.030882][ T4474] FS: 00007fd090c4b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 133.039977][ T4474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.046645][ T4474] CR2: 000020000000f000 CR3: 0000000134932000 CR4: 00000000003526b0 [ 133.054697][ T4474] Call Trace: [ 133.058001][ T4474] [ 133.061121][ T4474] ? do_syscall_64+0x58/0xf0 [ 133.065759][ T4474] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.071915][ T4474] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 133.077753][ T4474] ? hashtab_init+0xdb/0x1f0 [ 133.082423][ T4474] ___kmalloc_large_node+0x9c/0x1d0 [ 133.087663][ T4474] ? hashtab_init+0xdb/0x1f0 [ 133.092343][ T4474] __kmalloc_large_node_noprof+0x1e/0xe0 [ 133.098023][ T4474] ? hashtab_init+0xdb/0x1f0 [ 133.102683][ T4474] __kmalloc_noprof+0x26d/0x450 [ 133.107565][ T4474] hashtab_init+0xdb/0x1f0 [ 133.112018][ T4474] ? common_read+0x16d/0x480 [ 133.116637][ T4474] symtab_init+0x44/0x70 [ 133.120877][ T4474] common_read+0x1de/0x480 [ 133.125443][ T4474] ? __cfi_common_read+0x10/0x10 [ 133.130399][ T4474] ? hashtab_init+0x105/0x1f0 [ 133.135114][ T4474] policydb_read+0xaab/0x28c0 [ 133.139812][ T4474] ? kasan_save_alloc_info+0x40/0x50 [ 133.145143][ T4474] ? __cfi_policydb_read+0x10/0x10 [ 133.150272][ T4474] ? security_load_policy+0x128/0x12f0 [ 133.155765][ T4474] security_load_policy+0x162/0x12f0 [ 133.161061][ T4474] ? irqentry_exit+0x4a/0x60 [ 133.165707][ T4474] ? exc_page_fault+0x66/0xc0 [ 133.170397][ T4474] ? asm_exc_page_fault+0x2b/0x30 [ 133.175550][ T4474] ? __cfi_security_load_policy+0x10/0x10 [ 133.181461][ T4474] ? rep_movs_alternative+0x4a/0xa0 [ 133.186699][ T4474] sel_write_load+0x298/0x5e0 [ 133.191403][ T4474] ? futex_wait+0x29a/0x7a0 [ 133.195943][ T4474] ? __cfi_sel_write_load+0x10/0x10 [ 133.201186][ T4474] ? __cfi_futex_wait+0x10/0x10 [ 133.206085][ T4474] ? bpf_lsm_file_permission+0xd/0x20 [ 133.211479][ T4474] ? __cfi_sel_write_load+0x10/0x10 [ 133.216705][ T4474] vfs_write+0x3c0/0xe80 [ 133.221115][ T4474] ? __cfi_vfs_write+0x10/0x10 [ 133.225960][ T4474] ? __kasan_check_write+0x18/0x20 [ 133.231093][ T4474] ? mutex_lock+0x92/0x1c0 [ 133.235673][ T4474] ? __cfi_mutex_lock+0x10/0x10 [ 133.240567][ T4474] ? __fget_files+0x2c5/0x340 [ 133.245361][ T4474] ksys_write+0x141/0x250 [ 133.249791][ T4474] ? xfd_validate_state+0x68/0x150 [ 133.254954][ T4474] ? __cfi_ksys_write+0x10/0x10 [ 133.259824][ T4474] ? __kasan_check_write+0x18/0x20 [ 133.264983][ T4474] ? fpregs_restore_userregs+0x11d/0x260 [ 133.270673][ T4474] __x64_sys_write+0x7f/0x90 [ 133.275322][ T4474] x64_sys_call+0x271c/0x2ee0 [ 133.280027][ T4474] do_syscall_64+0x58/0xf0 [ 133.284547][ T4474] ? clear_bhb_loop+0x50/0xa0 [ 133.289269][ T4474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.295227][ T4474] RIP: 0033:0x7fd08fd8ebe9 [ 133.300360][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.320060][ T4474] RSP: 002b:00007fd090c4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.328624][ T4474] RAX: ffffffffffffffda RBX: 00007fd08ffb5fa0 RCX: 00007fd08fd8ebe9 [ 133.336685][ T4474] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000004 [ 133.344846][ T4474] RBP: 00007fd08fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.352857][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.360859][ T4474] R13: 00007fd08ffb6038 R14: 00007fd08ffb5fa0 R15: 00007ffc40d121c8 [ 133.369030][ T4474] [ 133.372104][ T4474] ---[ end trace 0000000000000000 ]--- [ 133.378199][ T4474] SELinux: failed to load policy