last executing test programs: 22.087328368s ago: executing program 2 (id=351): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x28}, {0xad, 0x0, 0x0, 0x1ff}, {0x6}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect$cdc_ecm(0x6, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x3, 0xd0, 0xc, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "dae1a8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xc0000000, 0xca3, 0x9, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x6f, 0x0, 0x8, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0xf2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc4, 0xb9, 0x10}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x51, 0x0, 0xba, 0x4, 0xff, 0x8}, 0xeb, &(0x7f0000000140)={0x5, 0xf, 0xeb, 0x1, [@generic={0xe6, 0x10, 0xa, "144084653091b1a5aad1bf9a85965f344f139d5de7a8e01375dd9cb5ad8277c522670303968d5b49fa36f62e9abad88165c192e42bec86ec4db7d95523310bdc730542f59666d5e4f20074fc6fd410e5343c05b683a7f9a35c43c376f2ec401166655332982177f6edf93a02e5df2e50652e73e44b485e774807f13107cdf9db098605407e68cfcfeba891fa718396fdbaf173dc4ff7bc09746f2ff0b953a31dbab049e4d38c02d0577a926b72cf0a5e357d8bdc788458f224e3bc44a88b31c2e8938b4dfd8ca39f63824833f957e1106697ca1cbf0760ba40da6cbf0ba026b74d4c49"}]}, 0x6, [{0xed, &(0x7f0000000240)=@string={0xed, 0x3, "771af978050efbc18319d24020c2555459f54c2b9b6c94fa67bdbd2a65f2ca8d97e4e343643f6fe5529c9f53fa7a5979e2a1ac1a5414f02c627c53318d00c43b7a7f63d78b3bb9113bff744f1a37702dcfab3b29807c2add12dc8432ca7a03acb72a90b115fd1fe0ba25482c965c5c7c5a8c02843aa44936e45556d2f6c200b8539d9a824ef9302550b5542a7f082be12e52a21cc89466f3d1a26e9ef6e57789a7a4843278e51b2f8acbba0744049778ccf08b9d1da2ed53ad73c56b73ab47087c730890ae26f75c1e1b7c9d71cdbe8f49ec557313b42081aaf7992713a18cebd04e6350f6382a4505a580"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xce, &(0x7f0000000380)=@string={0xce, 0x3, "bd4263aa678df890b20abac4c3d5bee901df6319573ad0f6039a255980d457c1ec4edbae639fdc2b9366cd933f35b8ea1782be2362f33249b2b9e485aa1984843e97b352c7c695a5124dcbde6b33de74b9b896953491bc6e08c780f46388b63a8d17f95ecccfab9e57c07423b02271427e760a2fb88fcb5b4ae29f1497d2f3e649936134203e8b79be4702074d1926881b9ad8984982b33e7ad7d67695f0524705c6be528d53b8ebb7da51261825813dd7a116ccb46487998b7dd1c54181faa76484c28f35cdc0516e19e989"}}, {0x72, &(0x7f0000000480)=@string={0x72, 0x3, "722d872190b32948136c4ea44b3fe9fa7cee375ec2714d15bee9c3ac8883ef3a52410485b01edce4707119d5f3c17f6a1ef01433cc0be6ff3144a56c338c9c38a5533f1e9bdb6a48876f142f33f3c6773ca5fd1dcaa01ea382066b7cd3123fc990f7ad112bee7b54b0ec59f277fc7960"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x0, 0x31, 0x9a, {0x9a, 0x8, "b9d7f3ea15df70e4e17d895fd92a18f70e5d00bc4889d87c789f0fcc60ac14cd18fd4e0cae137171ed75ba304d146f36f97a155826b979b4d0bf9286f317c1e4a8f9347b9c0bc63b159cb3403e3e1251f5f8c7dd83bfd8fa5201a3d322280720d1534f02b9027e29a9389651148e2989efd2320fa584647db57efa56adca9644157bc6269ebb646c77e685200b1424a241e5c238f3ad1488"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000700)={0x0, 0xf, 0xb9, {0x5, 0xf, 0xb9, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xc3, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x4d, 0xff12}, @generic={0xa0, 0x10, 0xb, "2885537db0785708c4158ef63dd72940db4c7098a08e4a4b38b6b50557e054ead0140ac03fca0fa7e121965f6838cce178c1f5c978f9c81eb1748dfafe8499cc651eed0b23373c1c55cba2332e405403d0e7658f6c37d3641fbf6ce9329a19507dff54efd90b407b6665a5d4bff62c18876eee3433a1faccd20abb08bf3376d9ac3255f47d1ea4cafea0fb93964bb8434395ce78c43137b87494e133b4"}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x6, 0x0, "53adee2a", "e28aba92"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x9, 0x10, 0x0, 0x9, 0x9}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0xf, 0xef, "e862b437a0baaa5a4a4174c3d08c360063d692c48c865cfc7934ee1e395862d89482362976e4a985ff1012caebc0466a60acd45a563137e7faabc314e18609ba5eff5d66ea1129a90573986bbfa7f0fd9bc796c3693d55f694667b57ab0c2fafe4b834622a97a97b8e8c20b8517c315eaed413eec2a54e95c1427aa30c9dfbdc7497f3f4d25fbb1319dccab0040b7184cea41782785632e4e621b642d3da687bdecdfa9644dacb01a7a86463b5915044e1e9351eac72a4e2f5a3ea9c3c713cdf351cbb89454ec7ebcf5f947add93b8a0ed87b1694aa16b633e093380b35a71b186d7ad52a2809f257baf90e1376782"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf00]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "8c42"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "40e4"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x3}}) getresgid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) 21.534961752s ago: executing program 2 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close(r0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 21.483347557s ago: executing program 2 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f00000001c0)=""/171, 0xab) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xa, 0xc1, &(0x7f0000000000)={0x0, 0x5, 0x8, 0x82}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x442fc1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x5f875000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x0, r1, 'id1\x00'}) ptrace$poke(0x4, 0x0, &(0x7f00000003c0), 0x4) connect$unix(r5, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c2402000000000000000000052405000008240800000000e40c240700000000a3e82f07070d240701010000fd8000000000092403000000000100090401000001020000090401010101020000090501090000000000072501000000000904020000ff"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x19) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0x4, 0x0, 0x81, 0x4, 0xa, 0x4a, 0x0, 0x7, 0x6, 0x10}, {0xd000, 0xffff1000, 0x3, 0x5, 0x7, 0x8, 0xd, 0x3, 0x0, 0x9, 0x7, 0x1}, {0x0, 0x0, 0x0, 0x7, 0x2, 0x1, 0x6, 0xf, 0x0, 0x6, 0x2, 0x6}, {0x4000, 0x0, 0xe, 0x2, 0xfe, 0x3, 0xc, 0x0, 0x2, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xc, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xa, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0xa}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0xffff1000, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x5, 0x8, 0x5, 0x4e}, {0x1004, 0x7}, {0x2, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x9, 0x1000, 0x5000, [0x5, 0x8001, 0x8]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x80045400, &(0x7f0000000140)) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.839436488s ago: executing program 2 (id=394): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4c095) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file7\x00', r3, &(0x7f0000000340)='./file7\x00', 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6f1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}}, {{0xa, 0x4e24, 0x21, @loopback, 0x3}}}, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) (async, rerun: 64) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) (rerun: 64) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000000)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) (async) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) unshare(0x26020400) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fdF', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (rerun: 32) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) write$uinput_user_dev(r9, &(0x7f0000000240)={'syz0\x00', {0x9, 0x6, 0x5, 0x81}, 0x37, [0x2067c000, 0x2, 0x1, 0xd5d, 0xe, 0x7, 0x9, 0x3, 0x7, 0x0, 0x4, 0x8, 0x8, 0xec9, 0x8, 0x9e, 0x2, 0x7, 0x2, 0x8, 0xffffffff, 0x7, 0x0, 0x2, 0x1, 0x8b5, 0x3, 0x2, 0x4, 0x7, 0x4, 0x0, 0x4, 0x4, 0x8, 0x9, 0x1c, 0xffc, 0x2, 0x540, 0x1, 0x3, 0x7, 0x7c, 0xa77, 0xfffffffb, 0x7, 0x7, 0xefcd, 0x64d, 0x200, 0x7ff, 0x2, 0x95, 0x6, 0x3, 0x8, 0x1, 0x5, 0x8, 0x7ff, 0xc, 0xf, 0x401], [0x2, 0x5, 0x8, 0xa, 0x80, 0x7fff, 0x400000, 0x1000, 0x0, 0xa458, 0xfffffff9, 0x2, 0x7, 0x8, 0x2, 0xfffffffd, 0x400, 0x9, 0x6, 0x18, 0x3, 0x4, 0x3, 0x4c9d, 0x3, 0x8, 0x101, 0x0, 0xd, 0x8, 0x5, 0x4, 0x5, 0xfff, 0x8813, 0x0, 0x0, 0x2, 0x6, 0x5, 0x6f, 0x4, 0xd426, 0x6, 0x0, 0x400, 0x4, 0x5, 0x9, 0x3, 0x0, 0xa0, 0x1, 0x6, 0x5, 0x9, 0x1, 0x9, 0x7, 0x1, 0x1, 0x2, 0x0, 0x5], [0x43, 0x81, 0x3, 0x1, 0x8, 0x60, 0x2, 0x200, 0x3, 0x1, 0x9, 0x7, 0x6, 0x4, 0xc5d2, 0x7, 0xd, 0x10000, 0xfffffff9, 0x8000, 0x7f, 0x7fffffff, 0x4, 0x675, 0x1, 0x6, 0x8b7, 0xfffffffe, 0xfd, 0x0, 0x9, 0x4, 0xffffffff, 0x81, 0xd8b7, 0x1447, 0x5, 0x6, 0xd1c, 0x9, 0x400, 0x7, 0x29243924, 0x8, 0x3, 0x9, 0x6, 0xe, 0x0, 0xfffffff7, 0x9, 0x78029545, 0x5, 0x1000, 0x8801, 0x8, 0x0, 0x100, 0x80000000, 0xb, 0x80000001, 0x7, 0xd, 0x3], [0x4, 0x8, 0x7f, 0x7ff, 0x3, 0x3, 0x3, 0x10000, 0x4, 0x2, 0x10, 0x9, 0x9, 0x4, 0x4, 0x200, 0xbb7, 0x6, 0x10, 0x3, 0x6, 0x0, 0x3, 0x9, 0xfffffff0, 0x200, 0xd10c, 0x5, 0xbe6f, 0xf62e, 0x9, 0x3, 0x1, 0x401, 0x5, 0x8000, 0xe2ee, 0x3f, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0xfd4, 0x0, 0x1, 0xffffffff, 0x31a, 0x4e, 0x5, 0x2549, 0x8, 0x1, 0x6, 0xc, 0x7fff, 0x5, 0x4a, 0x5, 0x8001, 0x3ff00000, 0xfff, 0x0, 0x81]}, 0x45c) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000) (rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="180000008f1075ae48081e2b02000000070000000400e380"], 0x18}}, 0x0) (async, rerun: 64) madvise(&(0x7f0000578000/0x2000)=nil, 0x2000, 0x16) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.838812658s ago: executing program 2 (id=395): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) fsync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000180)={'ip6erspan0\x00', 0x9e0e}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x82200, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0xf) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x240000c5) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000380)=@req3={0x0, 0x8, 0xfffffeff, 0xc, 0xc2e, 0x6, 0x4}, 0x1c) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, 0x15, 0x200, 0x70bd2d, 0x25dfdbfe, {0x29, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x77, 0x1, "1c17ebd2b946ef1e8e10e920a0e8fa07190e123ac554286da2f5af3b72e34d3f7a91a1d37b9ce7e13ace66f13dc4ae922d0061df9bc444a4d7005e794b82ee60f8cf3da9b3fd387692bb95d0bc5c7a0bedc5160098b1b967fcdef1ec09f09b8c50364e900fd307ea4b6bfcc3f062682540597d"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000540)={0x6, 0x1, 0x2, 0x2}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000b00)='./file0\x00', 0x800, 0x8, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000c80)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc, &(0x7f00000009c0)=[{&(0x7f00000005c0)={0x26c, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@generic="6987c2ac6b146c3ad18e83f6a33435248c965d6326da0fa350224e8b6167765333106e0e3b45052e274149d13ec710dd4fc6f6023c7401bca36e657bf7d405a267602d072f7014d6401d07279a8f939c664ba8e8d577ae", @generic="1d8ec7af11d486095556e0153567b3499fde0b67cd717e481c295c87c275fc81417c9abeabacec38b3f28f433494e17e77143537798ec2c3d79966c63606a52d3c0c6f13c325f7cad52af62bdc89fda22b5438f0dfa6166a6de7de053e017e57d9a7077eb2182886bccb669d2e4297f494043e8e6899d445b5193ff31bce5bad06861bc59954a358042d1ba8c01fb8f891e0b1d071446ce6a2", @nested={0x108, 0x1a, 0x0, 0x1, [@nested={0x4, 0x8c}, @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x1}, @generic="4c8a75599d17be43ac065ac957fc370d57a8377824702eb11a61a5d2c40ed38438ea60", @generic="4aff7232ba7f3d1a928c1b1558e2cad8daf4155ce3042fd950a40990342638e7f42b52810f47b835704584d84fffc4526d0ff33003575b136ef0a5dbff51287fb844378f0b47eb98ac969d693b84b4ccbee7b18ddc603138e4cf5362c454b0c81a613d60be7aa1949df7e3f1eb9f9d142404928f1acfcd2b3b0349251ab530c01d4fca68a55e71c1d3d23bb353b2f443c819c0387632627c202fa0e430908fc4b729e418bc048b5e18914b0f6fac5c1e172de066880c15ad2b841490cb8460c9f42af15209b73e311ffb07d067a30f67d5"]}, @generic="afd51e4e8faedfb1", @typed={0x8, 0x110, 0x0, 0x0, @u32=0x4}, @generic="b636293f01374efab737543c4bc930b747b2bfa5dc6631df5c2bd5c46b07235c59ec2387813b71160fc0fc91d0d3224161b7c2c7f87169abde27ff33695b5c748a89b5a8e9575c859394103ab7751785", @generic='lI']}, 0x26c}, {&(0x7f0000000840)={0x4c, 0x3c, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x37}, @generic="29085a371471b89bb0719a2e5ae96f300435de84a228318282a23e666cf3c52d20e7bd5513b74d125ea12f01cdb3c8ba67f65d9fa6b5"]}, 0x4c}, {&(0x7f00000008c0)={0xc8, 0x34, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@generic="c8bc6406df5f97d8300ff53fb076d5aed8e555278f5b2c5a3d910c4b46c9b252ce3d484b59e7f56a2099ab0b8346d2246ca1bcbb16a9ba6444e8c25607f34917050dbc0e9d9de9fd29fba376413129d4def1cb85d241e2a1ce0064e14ce80e9ff7ffc069c6d4378a14", @nested={0x49, 0x87, 0x0, 0x1, [@typed={0x4, 0xa7}, @nested={0x4, 0x104}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x13b}, @typed={0x8, 0x54, 0x0, 0x0, @uid=0xee01}, @generic="808e5f5e41ca4373258460a17a59023be675f5783bb0c5cc7d5bbf4e3b"]}]}, 0xc8}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x108c4}, 0x8094) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000cc0)=0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000d00)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000d80)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8000) lseek(r3, 0x1, 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000f00), 0x142, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) inotify_add_watch(r3, &(0x7f0000000f40)='./file0\x00', 0x8) 20.81159064s ago: executing program 2 (id=396): pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$inet6(0xa, 0xa, 0x10000) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0xe6683000) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 20.749870565s ago: executing program 32 (id=396): pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$inet6(0xa, 0xa, 0x10000) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0xe6683000) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 9.127469402s ago: executing program 0 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000300)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f00000004c0)=[@enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000540)="4108048c"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)="8b0b4c40"}) 9.126832992s ago: executing program 1 (id=426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r3 = dup(r2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (rerun: 32) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0xfffffff7, @mcast1, 0xbb}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000006c0)="04124c7f5b7e0e0b4a0c6c61c3007aa1e8c15cbcd15c2e7831a489ad1be1c18c86b15f01350659a771b5705b302c3cb3fc52ea586586a8e9e8a0c704483c96dcbf3799", 0x43}], 0x1}}], 0x2, 0x4000001) r5 = dup(r4) read$FUSE(r5, &(0x7f00000075c0)={0x2020}, 0x2020) (async, rerun: 32) shutdown(r5, 0x1) (rerun: 32) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (rerun: 32) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0xe4, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff, 0x0}) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB="010029bd7000fcdbdf251c00"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 7.51705736s ago: executing program 0 (id=428): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x786d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x0, r3, 0x0, 0x1000008, 0x0) timer_delete(r2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x2, @multicast1}, {0x306, @random="31bc15f6e24b"}, 0x2, {0x2, 0x4e26, @empty}, 'rose0\x00'}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz1\x00', {0x5, 0x2, 0x400, 0x8a5}, 0xa, [0xd, 0x8000, 0x3, 0x2, 0x5, 0x6, 0x287, 0x1, 0x0, 0x80000000, 0x3, 0x7, 0x7ff, 0x5, 0x1, 0x1, 0x5, 0x81, 0x8, 0x80000000, 0xa6ae, 0x8, 0x7, 0xffffff95, 0x1, 0x6, 0x16b1, 0x200, 0x0, 0x4, 0xfffffff9, 0x3, 0x8, 0xe, 0x0, 0x800000, 0x81, 0x66, 0x5, 0xdf, 0x9, 0xb, 0x5, 0x7, 0xfffffffe, 0x8, 0x7, 0x3, 0x5, 0x2, 0x4, 0x2, 0x6, 0x9, 0xffff, 0x1, 0xfffffff8, 0x27, 0x5, 0x6, 0x3, 0x8, 0x10000, 0x8], [0x1, 0x6, 0x40, 0x3, 0x2, 0x81, 0x9, 0x1, 0x8, 0x2a85, 0x1, 0x5, 0x0, 0x8, 0x8, 0x0, 0x9, 0xfffffffc, 0x80, 0x8, 0x1000, 0x7, 0x8, 0x3, 0x6, 0x8, 0x5, 0x3, 0x4, 0x1, 0x3, 0x1, 0x8000, 0x4, 0x7, 0x7, 0x8, 0x0, 0xd892, 0x6, 0x0, 0x2, 0x0, 0x7, 0x9, 0x4c79, 0x2e13f30, 0xe3, 0x0, 0x8, 0x80, 0x81, 0x18000, 0x7, 0x1c0, 0x0, 0x5, 0x40, 0x7, 0xe2, 0xffffffff, 0x0, 0x2, 0xff], [0x3, 0x3, 0x8, 0x0, 0x3, 0x7aa, 0x3, 0x81, 0x8, 0x10000, 0x8, 0x8, 0x3ff, 0x3, 0x5, 0x1, 0x5, 0x0, 0x7, 0x5, 0x1, 0x9, 0x5, 0x7, 0xfc9, 0x5, 0x9, 0x2, 0x5, 0x84, 0x2, 0x1ff, 0xb, 0x7ff, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x5, 0x5, 0x5, 0x8, 0x7, 0x10001, 0x1, 0xffff, 0x2, 0xd, 0x9, 0x1, 0x0, 0x80000000, 0xaf, 0xb04, 0x9, 0x8, 0xf607, 0xaa, 0x10000, 0x7, 0xa2, 0x1, 0x7], [0x7, 0x3, 0x1, 0xb, 0x0, 0xff, 0x6, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x2, 0xdcc00000, 0x0, 0x200, 0xfffffff8, 0xe, 0x8, 0xfffffffe, 0x5, 0x7fff, 0x4, 0x9, 0x3, 0x4, 0x6, 0x2, 0xfffffff9, 0xfffffff7, 0xfa4, 0x2, 0x1, 0x2, 0xd6, 0xff, 0x8, 0x4, 0x7c, 0x7, 0x1, 0x6, 0x9, 0x5, 0x40, 0x3, 0xffff, 0x7, 0x401, 0x7, 0x3ff, 0xfffffffc, 0x5239, 0x5, 0x3, 0x1, 0x2, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2f6, 0x1, 0x4]}, 0x45c) 7.51669609s ago: executing program 1 (id=429): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd00, &(0x7f0000000240)={0x2, 0x8c, 0x160000, {r0}}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 7.514075721s ago: executing program 3 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) fsopen(&(0x7f0000000000)='befs\x00', 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0) ptrace$cont(0x20, r3, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x18}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5.755532931s ago: executing program 0 (id=431): bind$netlink(0xffffffffffffffff, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfd, 0x1f}, {0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2}, {0x0, 0xfffd, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe}], 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_create(0x0, &(0x7f0000000140)={0x0, 0xff000000, 0x1, @thr={&(0x7f0000000040)="5c000e7cff01482b239fe6f097bbf4b94045e19cf55bd3e02f988b106d0cf72afe84fc39ecfec5f82f1af6361e9039c5ee8aeb9ab0e5e524bfb67937a0faba326a", &(0x7f0000001180)="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"}}, &(0x7f00000001c0)) timer_gettime(r5, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f0000000500)={0xcc, 0x0, 0x5}) sendfile(r3, r3, 0x0, 0x7ffff000) 5.754569341s ago: executing program 1 (id=432): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f000001f580)={0x1, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000180)={0x11, 0xc, r3, 0x1, 0x1, 0x6, @local}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 5.753876431s ago: executing program 3 (id=433): syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f000010110905", @ANYBLOB="4cae6c"], 0x0) rt_sigaction(0x19, &(0x7f0000000000)={&(0x7f0000000340)="dfd3bf2e36c07fff7066440f1ed20000d3a41039000000f344aa643e3ef08104dc19b4000041d8d041de7dd3c4e2f9db8179d90000f3410f5d4efe", 0x5c000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, 0x0) 3.959514514s ago: executing program 0 (id=434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe6683000) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x12, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c06, 0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x4, 0x2}]}]}, 0x13c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x25a5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x9286f9ce86a82d0b}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 3.958763074s ago: executing program 1 (id=435): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f0000000100)='./file0\x00', 0x3ca) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 3.953491825s ago: executing program 3 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/.//\\&\x02\'**\x00', 0x3) fsetxattr$security_selinux(r1, &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setreuid(0xee00, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000240)={0x9, 0xf8, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95d, 0xfffffff3, 0x9, 0x7d, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe671, 0x8002, 0xb, 0x3, 0x7fff, 0x9, 0x80000000, 0x1, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x1, 0x3, 0x80092a3, 0x79, 0x1, 0x20000000, 0x82, 0x0, 0x4, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x6, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x3, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x0, 0x20009, 0x4, 0x9, 0xffff4241, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x6], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0x8c52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x7, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x0, 0x1001, 0x101, 0x33, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x5, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a31, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x24, 0x2, 0x8c, '\x00', 0x80000001}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000080000002001a000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000180)={[{0xc6, 0x9, 0x3, 0x8, 0x4d, 0x1, 0x4, 0x8, 0x1, 0x6, 0xa, 0x0, 0x3}, {0xfffe, 0xa, 0x9c, 0x4, 0x4, 0xfa, 0x0, 0x7, 0xa6, 0x1, 0x53, 0xff, 0x25f4ec2f}, {0x8, 0x7, 0xa5, 0x2, 0x2b, 0x6, 0x5, 0x9, 0x6, 0x7, 0x4, 0x1, 0xac81}], 0x9}) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000100)={[{0x5, 0x7, 0x3, 0x9, 0x4, 0x4, 0x3, 0x0, 0xf8, 0x1, 0x42, 0xf8, 0xfffffffffffffff7}, {0x7, 0x4, 0x8, 0xdb, 0x9, 0x9, 0x1, 0x9, 0x9, 0x1, 0x9, 0xf2, 0xc27e}, {0x401, 0x9, 0x40, 0x9, 0x7, 0x2, 0xc0, 0x6, 0x4, 0x36, 0x1, 0xd, 0x6b}], 0x5f}) 2.047292707s ago: executing program 0 (id=437): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c505", 0x1b}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04", 0xb}], 0x2) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xff, 0x7, 0xe5, 0x7fffffff}, {0x8, 0x40, 0x4, 0x4}, {0x80, 0x7, 0x6, 0x6}, {0x9, 0x7d, 0x5f, 0x7}, {0x7, 0x7, 0xf7, 0x3}]}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r6 = socket$inet(0x2, 0x4, 0x1) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r7) r8 = getpid() userfaultfd(0x801) r9 = syz_pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="ff0000000000000002004e22ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbe80112000000000000000300000000000000000000000000000000000000000002004e200a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/400], 0x190) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x100010, r3, 0xcfbbf000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f00005e5000/0x1000)=nil, 0x1000, 0x19) 2.045643886s ago: executing program 1 (id=438): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) (async) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d77b5e", 0x3}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000002000000088e5aabddb1ad9d000000000000006c000000000000000000000007000000891f3fac1e0001640101010a010100ac1e0001ac14142a640101000a010101890757ac1414aa830b8a64010102ffffffff831f8700000000ffffffffac1414aaac1414aaac1414bbac1e00010a010102620c"], 0x88}, 0x4040001) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async, rerun: 32) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)) (async, rerun: 32) socket(0x22, 0x5, 0x3ff) (async) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2.045106987s ago: executing program 3 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1cd080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 2.712759ms ago: executing program 0 (id=440): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) getpid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x7ffff000) 1.75047ms ago: executing program 1 (id=441): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) execveat$binfmt(r1, 0x0, 0x0, &(0x7f0000000400), 0x1000) (async) execveat$binfmt(r1, 0x0, 0x0, &(0x7f0000000400), 0x1000) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@privport}]}}) socket$igmp6(0xa, 0x3, 0x2) 1.09389ms ago: executing program 3 (id=442): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dvmrp1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x7}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x2080c0, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000080)=0x8) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x458403, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 0s ago: executing program 3 (id=443): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x24, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x3f}]}]}, 0x24}}, 0x0) mmap(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r0, 0x82fe000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 26.028939][ T36] audit: type=1400 audit(1756451902.940:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.030404][ T281] cgroup: Unknown subsys name 'net' [ 26.051631][ T36] audit: type=1400 audit(1756451902.940:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.079206][ T281] cgroup: Unknown subsys name 'devices' [ 26.079231][ T36] audit: type=1400 audit(1756451902.970:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.263072][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.268716][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.425069][ T36] audit: type=1400 audit(1756451903.340:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.448366][ T36] audit: type=1400 audit(1756451903.340:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.473273][ T36] audit: type=1400 audit(1756451903.340:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.482419][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.505275][ T36] audit: type=1400 audit(1756451903.420:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.530722][ T36] audit: type=1400 audit(1756451903.420:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.548809][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.556483][ T36] audit: type=1400 audit(1756451903.460:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.590522][ T36] audit: type=1400 audit(1756451903.460:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.468877][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.476078][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.483381][ T288] bridge_slave_0: entered allmulticast mode [ 27.489745][ T288] bridge_slave_0: entered promiscuous mode [ 27.496346][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.503458][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.510562][ T288] bridge_slave_1: entered allmulticast mode [ 27.516939][ T288] bridge_slave_1: entered promiscuous mode [ 27.579403][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.586525][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.593631][ T290] bridge_slave_0: entered allmulticast mode [ 27.599874][ T290] bridge_slave_0: entered promiscuous mode [ 27.611173][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.618330][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.625452][ T290] bridge_slave_1: entered allmulticast mode [ 27.631868][ T290] bridge_slave_1: entered promiscuous mode [ 27.665702][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.672793][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.679883][ T291] bridge_slave_0: entered allmulticast mode [ 27.686299][ T291] bridge_slave_0: entered promiscuous mode [ 27.704107][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.711199][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.718314][ T291] bridge_slave_1: entered allmulticast mode [ 27.724807][ T291] bridge_slave_1: entered promiscuous mode [ 27.740472][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.747790][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.754900][ T289] bridge_slave_0: entered allmulticast mode [ 27.761239][ T289] bridge_slave_0: entered promiscuous mode [ 27.775792][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.782911][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.789985][ T289] bridge_slave_1: entered allmulticast mode [ 27.796455][ T289] bridge_slave_1: entered promiscuous mode [ 27.906819][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.913936][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.921284][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.928405][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.965398][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.972501][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.979800][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.986868][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.016746][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.023851][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.031172][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.038213][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.051351][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.058436][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.065770][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.072834][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.114285][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.121853][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.129178][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.136533][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.143962][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.151435][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.184540][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.191647][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.204544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211785][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.220572][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.227677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.235416][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.242478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.254503][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.261598][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.269484][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.276550][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.332715][ T288] veth0_vlan: entered promiscuous mode [ 28.344173][ T291] veth0_vlan: entered promiscuous mode [ 28.359567][ T290] veth0_vlan: entered promiscuous mode [ 28.374388][ T289] veth0_vlan: entered promiscuous mode [ 28.383156][ T288] veth1_macvtap: entered promiscuous mode [ 28.391332][ T291] veth1_macvtap: entered promiscuous mode [ 28.408971][ T290] veth1_macvtap: entered promiscuous mode [ 28.432524][ T289] veth1_macvtap: entered promiscuous mode [ 28.449145][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.547319][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.560116][ T338] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 28.571963][ T338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 28.881805][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.064125][ T360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.064167][ T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 29.083312][ T46] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 29.111541][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.129974][ T46] usb 2-1: Product: syz [ 29.136550][ T46] usb 2-1: Manufacturer: syz [ 29.146246][ T46] usb 2-1: SerialNumber: syz [ 29.300695][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.460663][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 29.471363][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.479986][ T31] usb 4-1: config 11 has an invalid interface number: 63 but max is 0 [ 29.489023][ T31] usb 4-1: config 11 has no interface number 0 [ 29.499748][ T31] usb 4-1: config 11 interface 63 has no altsetting 0 [ 29.530886][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=cff8, bcdDevice=f8.76 [ 29.544417][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.562006][ T31] usb 4-1: Product: syz [ 29.570583][ T31] usb 4-1: Manufacturer: syz [ 29.576852][ T31] usb 4-1: SerialNumber: syz [ 29.602423][ T46] rtl8150 2-1:1.0: couldn't reset the device [ 29.608674][ T46] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 29.620014][ T46] usb 2-1: USB disconnect, device number 2 [ 29.680739][ T364] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 29.793132][ T363] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 29.800470][ T363] rust_binder: 13: no such ref 2 [ 29.805557][ T363] rust_binder: 13: no such ref 3 [ 29.811322][ T363] rust_binder: 13: no such ref 1 [ 29.816602][ T363] rust_binder: 13: no such ref 3 [ 29.824280][ T31] ftdi_sio 4-1:11.63: FTDI USB Serial Device converter detected [ 29.833325][ T31] ftdi_sio ttyUSB0: unknown device type: 0xf876 [ 29.841406][ T31] usb 4-1: USB disconnect, device number 2 [ 29.848581][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.860017][ T31] ftdi_sio 4-1:11.63: device disconnected [ 29.866578][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 29.880124][ T364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.893014][ T364] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 29.902417][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.911501][ T364] usb 3-1: config 0 descriptor?? [ 29.916878][ T368] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.190098][ T391] rust_binder: 9: no such ref 1 [ 30.195254][ T391] rust_binder: inc_ref_done called when no active inc_refs [ 30.195296][ T391] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 30.206630][ T364] usbhid 3-1:0.0: can't add hid device: -71 [ 30.209742][ T391] rust_binder: Read failure Err(EAGAIN) in pid:9 [ 30.251493][ T364] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 30.267001][ T395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 30.271032][ T364] usb 3-1: USB disconnect, device number 2 [ 30.360210][ T403] Zero length message leads to an empty skb [ 30.398298][ T408] input: syz0 as /devices/virtual/input/input5 [ 30.434040][ T410] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 30.700722][ T364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.793681][ T414] netlink: 'syz.0.25': attribute type 4 has an invalid length. [ 30.803254][ T414] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.25'. [ 30.813002][ T414] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 30.820360][ T414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 30.843579][ T417] rust_binder: 25: no such ref 4294967291 [ 30.858789][ T417] rust_binder: 25: no such ref 1 [ 30.871791][ T364] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 30.879495][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 30.896037][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 30.909607][ T364] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 30.919025][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.927543][ T364] usb 4-1: Product: syz [ 30.932302][ T364] usb 4-1: Manufacturer: syz [ 30.938800][ T364] usb 4-1: SerialNumber: syz [ 30.944679][ T364] usb 4-1: config 0 descriptor?? [ 30.951434][ T364] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 30.961321][ T422] netlink: 'syz.1.28': attribute type 11 has an invalid length. [ 31.099480][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 31.099501][ T36] audit: type=1400 audit(1756451908.010:162): avc: denied { mounton } for pid=427 comm="syz.2.30" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.137707][ T36] audit: type=1400 audit(1756451908.050:163): avc: denied { map } for pid=429 comm="syz.2.31" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.161058][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.161718][ T36] audit: type=1400 audit(1756451908.080:164): avc: denied { read write } for pid=411 comm="syz.3.24" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.192660][ T36] audit: type=1400 audit(1756451908.080:165): avc: denied { open } for pid=411 comm="syz.3.24" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.217486][ T364] usb 4-1: USB disconnect, device number 3 [ 31.253228][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.321805][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.332048][ T64] usb 1-1: config 0 has no interfaces? [ 31.339068][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 31.348158][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 31.356383][ T64] usb 1-1: Product: syz [ 31.360802][ T64] usb 1-1: Manufacturer: syz [ 31.365437][ T64] usb 1-1: SerialNumber: syz [ 31.370786][ T64] usb 1-1: config 0 descriptor?? [ 31.542878][ T36] audit: type=1400 audit(1756451908.460:166): avc: denied { create } for pid=433 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.562098][ T36] audit: type=1400 audit(1756451908.470:167): avc: denied { ioctl } for pid=433 comm="syz.1.32" path="socket:[3759]" dev="sockfs" ino=3759 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.589772][ T36] audit: type=1400 audit(1756451908.500:168): avc: denied { create } for pid=419 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.591377][ T420] fuse: Unknown parameter 'b|Ǣv0xhwS#ÛK?0ř/gV/o7sߚ (/>BoD3_aeyW' [ 31.618095][ T36] audit: type=1400 audit(1756451908.500:169): avc: denied { name_bind } for pid=419 comm="syz.0.27" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.624320][ T46] usb 1-1: USB disconnect, device number 2 [ 31.655352][ T36] audit: type=1400 audit(1756451908.500:170): avc: denied { node_bind } for pid=419 comm="syz.0.27" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.678214][ T36] audit: type=1400 audit(1756451908.560:171): avc: denied { write } for pid=433 comm="syz.1.32" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.714331][ T438] capability: warning: `syz.3.33' uses deprecated v2 capabilities in a way that may be insecure [ 31.740554][ T440] netlink: 'syz.3.34': attribute type 3 has an invalid length. [ 31.748398][ T440] netlink: 944 bytes leftover after parsing attributes in process `syz.3.34'. [ 31.853683][ T451] binder: Bad value for 'max' [ 31.874481][ T453] ======================================================= [ 31.874481][ T453] WARNING: The mand mount option has been deprecated and [ 31.874481][ T453] and is ignored by this kernel. Remove the mand [ 31.874481][ T453] option from the mount to silence this warning. [ 31.874481][ T453] ======================================================= [ 31.909716][ T453] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 32.005269][ T457] netlink: 104 bytes leftover after parsing attributes in process `syz.2.41'. [ 33.733582][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.740723][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.740848][ T566] Bluetooth: hci0: command 0x1003 tx timeout [ 35.762027][ T618] x_tables: duplicate entry at hook 2 [ 35.762043][ T617] x_tables: duplicate entry at hook 2 [ 35.938416][ T626] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 35.947625][ T625] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 35.988027][ T632] capability: warning: `syz.1.100' uses 32-bit capabilities (legacy support in use) [ 36.101553][ T36] kauditd_printk_skb: 439 callbacks suppressed [ 36.101572][ T36] audit: type=1400 audit(36.074:611): avc: denied { read } for pid=653 comm="syz.1.109" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 36.129647][ T36] audit: type=1400 audit(36.074:612): avc: denied { read write } for pid=655 comm="syz.3.110" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 36.152499][ T36] audit: type=1400 audit(36.074:613): avc: denied { create } for pid=655 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 36.171381][ T36] audit: type=1400 audit(36.074:614): avc: denied { read } for pid=655 comm="syz.3.110" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 36.184013][ T670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.193680][ T36] audit: type=1400 audit(36.074:615): avc: denied { read } for pid=655 comm="syz.3.110" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 36.200793][ T670] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 36.222018][ T36] audit: type=1400 audit(36.074:616): avc: denied { read write } for pid=655 comm="syz.3.110" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 36.229937][ T670] audit: backlog limit exceeded [ 36.252075][ T36] audit: type=1400 audit(36.084:617): avc: denied { read } for pid=653 comm="syz.1.109" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 36.304181][ T676] netlink: 5 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.313129][ T676] 0M: renamed from gretap0 (while UP) [ 36.319772][ T676] 0M: entered allmulticast mode [ 36.325449][ T676] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 36.341924][ T678] veth1_macvtap: left promiscuous mode [ 36.450737][ T292] Bluetooth: hci0: Frame reassembly failed (-90) [ 36.517165][ T687] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.653843][ T691] sit0: entered promiscuous mode [ 36.660004][ T691] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 36.667711][ T691] netlink: 1 bytes leftover after parsing attributes in process `syz.3.121'. [ 37.563935][ T45] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.460719][ T566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.460737][ T777] Bluetooth: hci0: command 0x1003 tx timeout [ 39.206385][ T819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1375 sclass=netlink_route_socket pid=819 comm=syz.3.165 [ 39.580650][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 39.586880][ T566] Bluetooth: hci1: command 0x1003 tx timeout [ 39.714787][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.252454][ T899] pim6reg1: entered promiscuous mode [ 40.257864][ T899] pim6reg1: entered allmulticast mode [ 40.558796][ T906] netlink: 'syz.3.196': attribute type 8 has an invalid length. [ 41.105060][ T930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 41.114280][ T36] kauditd_printk_skb: 707 callbacks suppressed [ 41.114310][ T36] audit: type=1400 audit(41.084:1295): avc: denied { watch watch_reads } for pid=929 comm="syz.2.204" path="/32" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 41.167297][ T36] audit: type=1400 audit(41.134:1296): avc: denied { read } for pid=929 comm="syz.2.204" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 41.187729][ T36] audit: type=1400 audit(41.134:1297): avc: denied { create } for pid=929 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 41.419538][ T36] audit: type=1400 audit(41.384:1298): avc: denied { read write } for pid=291 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.443002][ T36] audit: type=1400 audit(41.394:1299): avc: denied { read } for pid=932 comm="syz.0.205" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 41.464878][ T36] audit: type=1400 audit(41.394:1300): avc: denied { read } for pid=932 comm="syz.0.205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 41.487080][ T36] audit: type=1400 audit(41.394:1301): avc: denied { create } for pid=932 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 41.506218][ T36] audit: type=1400 audit(41.394:1302): avc: denied { read write } for pid=932 comm="syz.0.205" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 41.528610][ T36] audit: type=1400 audit(41.394:1303): avc: denied { create } for pid=932 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 41.547267][ T36] audit: type=1400 audit(41.394:1304): avc: denied { read write } for pid=932 comm="syz.0.205" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 41.561123][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 41.578516][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 41.740690][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 41.740690][ T566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.819622][ T1161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1161 comm=syz.2.288 [ 44.965670][ T1178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 45.194871][ T1193] : renamed from bond_slave_0 [ 45.324356][ T1196] netlink: 'syz.1.298': attribute type 29 has an invalid length. [ 45.332221][ T1196] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.298'. [ 46.242944][ T36] kauditd_printk_skb: 608 callbacks suppressed [ 46.242961][ T36] audit: type=1400 audit(46.214:1913): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.272736][ T36] audit: type=1400 audit(46.214:1914): avc: denied { read } for pid=1285 comm="syz.3.332" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 46.294695][ T36] audit: type=1400 audit(46.214:1915): avc: denied { read } for pid=1285 comm="syz.3.332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 46.316561][ T36] audit: type=1400 audit(46.224:1916): avc: denied { read } for pid=1285 comm="syz.3.332" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 46.338563][ T36] audit: type=1400 audit(46.224:1917): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.361898][ T36] audit: type=1400 audit(46.234:1918): avc: denied { mounton } for pid=1287 comm="syz.3.333" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 46.384288][ T36] audit: type=1400 audit(46.244:1919): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.408000][ T36] audit: type=1400 audit(46.254:1920): avc: denied { read write } for pid=1289 comm="syz.3.334" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 46.430584][ T36] audit: type=1400 audit(46.254:1921): avc: denied { read write } for pid=1289 comm="syz.3.334" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 46.468231][ T36] audit: type=1400 audit(46.254:1922): avc: denied { read write } for pid=1289 comm="syz.3.334" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 47.420647][ T566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.552407][ T1397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1397 comm=syz.3.372 [ 48.347394][ T12] bridge_slave_1: left allmulticast mode [ 48.353234][ T12] bridge_slave_1: left promiscuous mode [ 48.358979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.367262][ T12] bridge_slave_0: left allmulticast mode [ 48.373138][ T12] bridge_slave_0: left promiscuous mode [ 48.378872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.503177][ T12] veth1_macvtap: left promiscuous mode [ 48.508775][ T12] veth0_vlan: left promiscuous mode [ 51.498216][ T36] kauditd_printk_skb: 547 callbacks suppressed [ 51.498235][ T36] audit: type=1400 audit(51.464:2470): avc: denied { read write } for pid=1487 comm="syz.0.405" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 51.531291][ T36] audit: type=1400 audit(51.464:2471): avc: denied { read } for pid=1488 comm="syz.3.407" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 51.554308][ T36] audit: type=1400 audit(51.464:2472): avc: denied { create } for pid=1489 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 51.574022][ T36] audit: type=1400 audit(51.464:2473): avc: denied { create } for pid=1489 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 51.575378][ T1491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 51.594042][ T36] audit: type=1400 audit(51.474:2474): avc: denied { read write } for pid=1489 comm="syz.1.406" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 51.624675][ T36] audit: type=1400 audit(51.474:2475): avc: denied { read write } for pid=1489 comm="syz.1.406" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 51.647874][ T36] audit: type=1400 audit(51.474:2476): avc: denied { read } for pid=1489 comm="syz.1.406" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 51.669997][ T36] audit: type=1400 audit(51.474:2477): avc: denied { mounton } for pid=1489 comm="syz.1.406" path="/proc/291/task" dev="proc" ino=7065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 51.691810][ T36] audit: type=1400 audit(51.474:2478): avc: denied { mounton } for pid=1489 comm="syz.1.406" path="/proc/291/task" dev="proc" ino=7065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 51.713586][ T36] audit: type=1400 audit(51.474:2479): avc: denied { unmount } for pid=1489 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 54.572828][ T1522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.414'. [ 57.106215][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 57.106235][ T36] audit: type=1400 audit(57.074:2579): avc: denied { execmem } for pid=1530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 57.132949][ T1540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.135024][ T36] audit: type=1400 audit(57.074:2580): avc: denied { read } for pid=1532 comm="syz.1.420" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 57.140408][ T1540] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 57.163250][ T36] audit: type=1400 audit(57.074:2581): avc: denied { read } for pid=1532 comm="syz.1.420" dev="nsfs" ino=4026532394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 57.170203][ T1540] audit: backlog limit exceeded [ 57.189626][ T1534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.194600][ T1540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.201573][ T1534] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 57.207819][ T1540] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 63.367158][ T36] kauditd_printk_skb: 171 callbacks suppressed [ 63.367178][ T36] audit: type=1400 audit(63.334:2751): avc: denied { create } for pid=1574 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 63.414009][ T36] audit: type=1400 audit(63.334:2752): avc: denied { read write } for pid=1573 comm="syz.3.433" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 63.437782][ T36] audit: type=1400 audit(63.364:2753): avc: denied { execmem } for pid=1572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 63.456744][ T36] audit: type=1400 audit(63.364:2754): avc: denied { read write } for pid=1576 comm="syz.0.431" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 63.479359][ T36] audit: type=1400 audit(63.364:2755): avc: denied { read write } for pid=1576 comm="syz.0.431" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 63.501775][ T36] audit: type=1400 audit(63.364:2756): avc: denied { read write } for pid=1574 comm="syz.1.432" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 63.525109][ T36] audit: type=1400 audit(63.404:2757): avc: denied { mounton } for pid=1574 comm="syz.1.432" path="/112/file0" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 63.546916][ T36] audit: type=1400 audit(63.404:2758): avc: denied { create } for pid=1573 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 63.565690][ T36] audit: type=1400 audit(63.404:2759): avc: denied { create } for pid=1573 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 63.584464][ T36] audit: type=1400 audit(63.404:2760): avc: denied { read } for pid=1573 comm="syz.3.433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 67.144015][ T1595] pim6reg1: entered promiscuous mode [ 67.149414][ T1595] pim6reg1: entered allmulticast mode [ 69.132233][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 69.132251][ T36] audit: type=1400 audit(69.104:2801): avc: denied { execmem } for pid=1598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 69.160469][ T36] audit: type=1400 audit(69.104:2802): avc: denied { create } for pid=1601 comm="syz.3.442" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 69.200458][ T36] audit: type=1400 audit(69.104:2803): avc: denied { create } for pid=1601 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 69.231710][ T36] audit: type=1400 audit(69.104:2804): avc: denied { read } for pid=1601 comm="syz.3.442" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 69.253812][ T36] audit: type=1400 audit(69.104:2805): avc: denied { create } for pid=1601 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 69.273877][ T36] audit: type=1400 audit(69.104:2806): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.320642][ T36] audit: type=1400 audit(69.134:2807): avc: denied { read write } for pid=1605 comm="syz.3.443" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 69.353054][ T36] audit: type=1400 audit(69.134:2808): avc: denied { read write } for pid=1600 comm="syz.1.441" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 69.380655][ T36] audit: type=1400 audit(69.134:2809): avc: denied { read write } for pid=1599 comm="syz.0.440" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 69.416749][ T292] bridge_slave_1: left allmulticast mode [ 69.430710][ T36] audit: type=1400 audit(69.134:2810): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2363]" dev="pipefs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 69.453086][ T292] bridge_slave_1: left promiscuous mode [ 69.453200][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.496683][ T292] bridge_slave_0: left allmulticast mode [ 69.509315][ T292] bridge_slave_0: left promiscuous mode [ 69.520718][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.652887][ T292] veth1_macvtap: left promiscuous mode [ 69.658440][ T292] veth0_vlan: left promiscuous mode [ 69.953319][ T292] bridge_slave_1: left allmulticast mode [ 69.959024][ T292] bridge_slave_1: left promiscuous mode [ 69.964740][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.972366][ T292] bridge_slave_0: left allmulticast mode [ 69.978033][ T292] bridge_slave_0: left promiscuous mode [ 69.983823][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.991593][ T292] bridge_slave_1: left allmulticast mode [ 69.997234][ T292] bridge_slave_1: left promiscuous mode [ 70.002957][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.010704][ T292] bridge_slave_0: left allmulticast mode [ 70.016382][ T292] bridge_slave_0: left promiscuous mode [ 70.022085][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.184607][ T292] veth1_macvtap: left promiscuous mode [ 70.190176][ T292] veth0_vlan: left promiscuous mode [ 70.195811][ T292] veth0_vlan: left promiscuous mode