last executing test programs: 42.243578889s ago: executing program 3 (id=42): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="beb5541c69720f8b8688623255fe71896c4b22738c734b2f", 0x18}], 0x1) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 42.211031832s ago: executing program 3 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40106308}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x380481, 0x0) 42.178496805s ago: executing program 3 (id=44): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x954b, 0x0, 0x5}}) getgroups(0x1, &(0x7f0000005e00)=[0x0]) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x954b, 0x0, 0x5}}) (async) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 41.940715214s ago: executing program 3 (id=50): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000dc0)=""/112, 0x70}], 0x6, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000d00)=""/136, 0x88}, {&(0x7f0000000740)=""/21, 0x15}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/123, 0x7b}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000880)=""/122, 0x7a}], 0x7, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000ac0)=""/26, 0x1a}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x20123, &(0x7f0000000cc0)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000005200", 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:hald_mac_exec_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0&c1023 \b0000000000000000004\x00'], 0x68) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x0, 0x5, 0x3, 0x1006, 0xa1, 0x7, 0x0}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x800) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000480)='./file0/file0\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) dup2(r5, r4) ioctl$EVIOCGSW(r5, 0x8040451b, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 41.934689285s ago: executing program 3 (id=51): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 41.716017972s ago: executing program 3 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r9, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r11) keyctl$restrict_keyring(0xa, r11, &(0x7f0000000300)='syzkaller\x00', &(0x7f0000000000)='ie0x0}) sendto$packet(r3, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000000000008100000088a8", 0x20, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r12, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES16=r9], 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 41.712716872s ago: executing program 32 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r9, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r11) keyctl$restrict_keyring(0xa, r11, &(0x7f0000000300)='syzkaller\x00', &(0x7f0000000000)='ie0x0}) sendto$packet(r3, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000000000008100000088a8", 0x20, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r12, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES16=r9], 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 6.938446797s ago: executing program 2 (id=585): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x6) mount$fuse(0x0, 0x0, 0x0, 0x8002, 0x0) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/../file0\x00', 0x9000) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000e570000005701a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4d6a3fd7c59ccdb631e97b3ac580c5b7417fd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a2889824daf03bd400d66293b0a2b103dd93f00000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) ioctl$KVM_RUN(r8, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) 4.8073352s ago: executing program 4 (id=618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$igmp(0x2, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.80609259s ago: executing program 4 (id=619): syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 4.790236141s ago: executing program 4 (id=621): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010400b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_getres(0xfffffffffffffffd, 0x0) unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') r2 = socket$inet(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) faccessat2(r1, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x10a, 0x100) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 4.352023287s ago: executing program 2 (id=627): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000c00)={0x20080522, r2}, &(0x7f0000000140)={0x0, 0x1, 0x8000000, 0x2}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x11, 0x2e, 0x0}) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x5defe000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000330600f704a836eacf6f38020000fcdbdf252001000000000000000000000000000000000000000000003300000000000000000000000000000000be1de9fda5491a74347b7bab3af982b0a0c8f426cde2ca6a881afb00f50180d6c57c38827dec3be52ba4fa15ffe58b59aa7852cc2ed89bc4676d5b64a4a094", @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4008805}, 0x4884) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffe) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0xfffffffe}}) close_range(r5, 0xffffffffffffffff, 0x0) 3.865778897s ago: executing program 2 (id=639): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 3.812068061s ago: executing program 2 (id=641): fstat(0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88282, 0x37c) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88282, 0x37c) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x20010, r0, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="1800000011000100006af2ffffffffffff0000000400e380"], 0x18}}, 0x0) r2 = socket(0x3, 0x3, 0x0) write(r2, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) socket$inet6(0xa, 0x3, 0x5) (async) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r3, &(0x7f00000039c0)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x1, @local}, 0x80, 0x0, 0x0, &(0x7f0000001540)}}, {{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 'ip6tnl0\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000003940)=[{0x30, 0x1, 0x15bc, "362761a7b929ff96075eb63666833f762c3c540cae4e5d1dda4c"}], 0x30}}], 0x2, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.729653728s ago: executing program 2 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20208000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000840) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) (rerun: 64) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000180)=""/56, 0x38}, {0x0}, {0x0}], 0x3) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x1, 0xe4, 0x41, 0x20, 0x4b8, 0x202, 0x33b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc, 0x61, 0x10, 0x7, [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xa7, 0xaf, 0xde, 0xd}}, {{0x9, 0x4, 0xad, 0x6, 0x0, 0xe, 0xfa, 0xf0, 0xff}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0x147a5000) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r4, 0xa, 0x400, 0x5) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000380)={0x71, {0x8001, 0x10, 0x8, 0x10, 0x1, 0x7f}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.195841961s ago: executing program 0 (id=648): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x1ffcc35c6ab96c2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r5, 0xc33, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x8000000000000000]}}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.133334086s ago: executing program 0 (id=649): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x3, 0x2f, "8d0b5a820b28123dab639c99aea04f9611838d0e4f896a7b2129e8ee5aa698f05974b0bc7777c2e33ad9a7500b1345"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="0f01706b0f21542e83a80050ee0f20d86635080000000f22d8660f38372d660f383d3f0ff81ab821008ed0c30f1918", 0x2f}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f00007a5000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r2, 0x6b029000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x315980, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200680, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x23) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0x0, 0x4}]}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[]) inotify_init1(0x80000) r9 = socket$inet(0x2, 0x80000, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="166e8f2168132d8d72f127411f4342aa9921de9c53289424d1f6909cee70e2fa2d420ba057661e8d56bd5f3954232ff4bbb23355d22506e2dfc294e38f4fe33969f9cf8b76e8a79255685d7fae6ae6f2deb936970a1b8c4eca6412d18af1e73d"], 0x40}, 0x20000810) syz_clone(0x82048411, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r2, 0x0, 0x800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 3.08481925s ago: executing program 0 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc814}, 0x40804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000006}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x200}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xa) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x74}}, 0x8800) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11f12adb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1470}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x625e490f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x131d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d491aa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a74}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35d3211c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb14d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20c1bbc7}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044880}, 0x4015) r8 = creat(&(0x7f0000000a00)='./file0\x00', 0x8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x15b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1601}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xa0}}, 0x40000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c045) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e80)={0xffffffffffffffff, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x60, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bde}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186d82a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d48f039}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49e93138}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bfa}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x825f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc65b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58aabd65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e69566}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x146e20eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fb1487d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f72dfa0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7124fe35}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f00)={'wg2\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008881}, 0x20000001) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x70, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, 0x0, 0xf9f304bbb703c323, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x50}}, 0x4) 3.08441915s ago: executing program 0 (id=651): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = gettid() r6 = gettid() kcmp(r5, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r7, &(0x7f0000000400)="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", 0x1f000) 3.08341966s ago: executing program 0 (id=652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) lstat(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfe59) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x0, 0x10, 0xf8, {0xf8, 0x5, "f8c467875e0d2a4379f44fef8ab4f94d066020af799f7e9308ecc660517553fd77ce13ea1a222ad52a1b774f0aef6d553ab6fff11552bd515a539b5dec34e582821e2a78a01a0feccc13b6e6b5f4f5da696da64665f5f1deaf26be10f29e3c5989fe1807e53f70694cfe0224f0d063935bfbfd59b4e6cccf2aa4ecb45e4e96e9f0002efa49407a97c0568becd7b257b6abc60f883addaf023b1b11abfe00295c3c01cd13dfae4da585cd4e53378bf76d37d88f80e5c80cbb70e2be0718a85d56bf90fd9649c77deedf3481f841ec04b2135537201acaa2e93900951175eba84ddb446ad91d457e7f6638e966684e85480a59a584644f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000280)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x9, '\r8n_'}, @local=@item_4={0x3, 0x2, 0x7, "34aa7083"}, @local=@item_012={0x1, 0x2, 0x4, 'I'}, @main=@item_4={0x3, 0x0, 0x8, "e346d721"}, @main=@item_012={0x1, 0x0, 0xa, 'L'}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x4, 0x1, {0x22, 0xdcc}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x20, 0xb, 0x9b, "99729f12e50024360212d74ae2f9f8e32595c5b5560c102ff28642bfef66b29169cbcc3c911c1f1385944ea9548842532a9771fd0c96a30196790dfab05f41cbd880dba31ccdf9ac97c18510da7a8896f0e330339817ed3208b4d53936dd2483d95ccc31ac752b692613e96590bd4001d7d58b6e7aa301c04c2bad623f2d5023c58d7b66ef4c5c4048ed10ce5a1d13b026e4fd8bb1e876784aa715"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x1, 0xe0, "46ac6d675020baa8e0fc128709d951295cc7423ca16920ad4c2f1e365fd45f8d1b17fb741bf968e0d260ba74813d6f7f378c0d750165aa1846b274237f1c6453f8b62b6837f44ec5cf9b87ca610e1d823097118588911494dbbefa6be41b18dcd77c3c7308a67bf4b5e9ef1dd56d7971b912c96034b64a3d793122a28bf193b111b0bb5f09769e5e7d82b2f18511fa7df23b950e4a792102515681efaad3fc8a949115e0efd0aa18d683ff94ec318c0793bedec4c14758c195cfe592e7aed72308e2d0837658bb4330e8b8095ecde115ed22729f6d6d423df2e6366c7bcc5efc"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x3}}) 1.776043236s ago: executing program 4 (id=659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x2, 0x3b9}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000006340), 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendto$inet(r4, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r5 = eventfd(0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000480)={{r5}, "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x3, 0x8080000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x80000001}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x1, 0x7, 0x1, 0x2}, 0xca, 0x70d6, 0x7}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000440)=[@acquire_done={0x40106309, 0x2, 0xfc}], 0x0, 0x0, 0x0}) 1.753305158s ago: executing program 4 (id=660): stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x208c1, 0x1b1) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) statx(r1, &(0x7f0000000140)='./cgroup\x00', 0x2000, 0x8, &(0x7f0000000280)) (async) sendfile(r1, r2, &(0x7f0000000100)=0x8001, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000001010103"], 0x14}}, 0x40) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$selinux_load(0xffffffffffffffff, 0x0, 0x21) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) clock_gettime(0x0, 0x0) (async) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x2, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xfffff807, 0x0, 0x5, 0x48, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7fff, 0xa, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092aa, 0x4, 0x1, 0x30000000, 0x80, 0xdee9, 0x7, 0x6, 0x8, 0x800004, 0x1, 0x40], [0x4, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x4f6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x40, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8cd, 0x5f31, 0x4, 0x900000, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x5, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400005], [0x6, 0x3, 0x80000400, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x10001, 0x7fff, 0x400, 0x800001, 0xb, 0x5, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x6, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x440, 0x80, 0x3, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0x3f, 0x10002, 0x40e, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x6, 0x1d, 0x7, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x81, 0xbb31, 0x203, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x71, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x9, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc6, 0xee1, 0x0, 0xffff, 0x3, 0x40000004, 0x100, 0x20009602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]}) (async) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) (async) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.312062744s ago: executing program 1 (id=672): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000080), 0x10) bind$can_raw(r2, &(0x7f0000000280), 0x10) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="a4f9c75ce5faec13c7683334664a337a96cb0e15869ff47948e2d3594a99b77ada08c33e25dee70fd4aa06e7663286e33ee5544f8287f4577dab231ca2f9635713b099aed18da796c0c2d2f5c2a13fb24f72ce76f6c3d888d0ff8a67b8355ab3af729ef04c4837ea8dc9d9cf13281d299dc99c28460f7667e6dfcd93f00c43eff02fdb05f72385a74755e3307d03b5e31b52a1ccb5d2bbb9d2f0b0aa7550cadcc26627156f87bb44bf5ff1667183fd654da1e2b35196d1d0651d831e5530e2f0386bc8c63ff1cd71c65d7583eb0228a0b0f4996b15716f0c862617133a64d22606296e7f73b17c319bdb0280bc1f28f00a48d5838acc30182c95d0083c1b1dccd5320c847051fa3d57c75b1b5628248e9834f5283ccb2eb6d013b7e97225a01f82e4c384d33c69d77755b1c340f8da44e87f13a1cb7ef779f68aee5034b7207b675fc76839475d3dc2661bd54cbf57b1535c7e4b7062a315beb469c505882c23adb120810ecc6f895720e498c98adadde8993edba182e68b62498afdee239e22207c3cc5e208a1d519793638d565fcf8f1fdc560909802ee3c8a479dd1c64ca94e36d74ad83ecd32eec2f93fd70d2c789e8aa8a58afcff177434956089fdcf88024edc97158c8d91b313a88e2973b32b65158a2f832b4515c2ba79f5242a3bcc63757e4d86fda87b9fa6179a9b2bed13f6a96d7d9ce87dcf53a08dd646f50d9dedce522de5217af2ae9d3a5c324e1c94ac1863177b824d15705c72a1d31568d8d9f7ea9bf06a8e0c8e0371d35becc2896be68d95d574534be552a5923fde8fac67e42b116b0d6801f7081263f0f9002ade20075eb4aa62386f253609655c4dfcab1bb963465d766a7ef1e9d00f3902c2eebbc6a6210246b76b2b7a2f318104b5e6acd863b98891bb366931f0307406dd0875cbbf4dd6601e813d96d83238bd0fa88aab97ed382ec2b00e7f093f10799c1b1cacce0eb1c69d32782ab27532c0dbea3d7bf5edc2e68ce14d04a889a6276d529f7722a68bf4747181a7999a6d62a35a411a815209d28c6aa5ebf6f8d90d561f0541341f42b67b6c50508dea6608b07a1dbedd04572d3c2e4506ff59445b5a3ecf82a4c4b6f1df0f31bc8f8c153f54ff74dfa20849f31473e5e05da4fbb619cd7262000d60771432a516ac372e12c8b2d966014752a6ef27e8d261b168cf9af53d68b5de9b269496c8114e7e0ec5d65deba477afafe7ba00ca418c3289eae530a144f52e7413477e35db5cf6b05884a7b1409ae38adabe0d1deebb280bc5ec35f94ea4e1b102874625ba65a850f06d3cd0dd0506aa1322859c12e2988aea106b27d61bfa914eed771ad485916b33274d3b9ebb9b7d3a1ebe1710f33c4f0fa97528181c78d34e49d66b4af2cc27c948e98e65592b48600deea7b97cfe976653a020a1aa1955f70f16b243bcbd45825c8cf6501972ec74a43d6690289a16dea63a23c248d9036fa171c3a690fd29cc5da91a6797315148a5f3b8c0e6023f40a46989a363ce4e5eb6ceecda0488dfc81a8e4cc0e8fdb5dc17ba4a3fb1d725420871205602e9c421fa8fb5be1957be05bc68486b4ed7588ed532d024439c9ba271efc1031ff9fdc55716726c15a19a62c4dd1b3d3460bd81a24aef083748b839c36b3447160f36d6c010b2af2e9ab7b82dd1600ab9b249b3fa905888aa5fa87bcf8d432e92af69e38347bba6773ee586962c248a1c7871fbccdf61ebe3be942e21e314e2bfbee135a649394641744105f5564d8cd2a5098f84b2075c7b67d205d1bdb54eb2308b66e24a8480ecb5bba60fde4bb78fe34817a81e96bb83cc37e19e7839c55fca388aa61d6718055a5bf2c9e4b619af0ac09050ef766c2f3624961efc203d0e2225c6b9269a515b5465e39ae5830bf66ca1dac95bb9e3d3de9636e720cf80df2ab43149670bd72917dfd5bc252ffe5b5a17014f3f95b4185db219448bebed2f05c8389d06ee60b058dbefa1e6ce630c68ed11383df6d0101158b330373f1b4a95d7d1b448609c40655a80ec9cd1368f68b525fea8e21461976952ae6a3916e855d8de49c2a1a607b8247fd8ba32bbdd429623e34d8947d80129cbb737711ab9908cb87902babde1941619d6d323aec54a99a042c438f46e4d3a2d3aeea4f26d83a791d5a96d6c04cb584042a19bba545c44adec7f5d6718769fcc1236b467b12031358ec3f21b4def005e2fda16f560dc055648bd2e5b5555690467f2fcd29183580966bb3a683856006c80ad617a68568332b461e01650f2bab983bb872e254b64b0f07b9f76a11861f2c3de70e9f3cc9f596eaff8347140f68610e0e778d75fc9b87313e525b2412a0fc35ef3821e814d6e2c56c7d462f09880582a8931325ac7a3e02417fb58f0d972427cf728190071ee8cfe88117365a862f20cf3d4205489afb4b366fb6b1f9c25bbf7d587ed41e3ae101ae7e543a25a966e99bd51b4da07ee3a56b99ee97364eea8d275a67a76112f02690bf10599cdda840b1b39befc2159b0f574678e260667ff9bf85ea4b736a1212e3217cbad4627ce85d02e69bd40c7f5a725d4a5fefc36f837c0d1e0221cfe14f0aed6d9e21d224144bdd6b44211aba0820470d0965a5f5ab57ecf779a12ddbc6e17b5d00b5cd22a35fb13abf3bd667d38e1cccc0b98c997cf7216126d620dcf86372243d8fa006afda3cfb42c564676d6c8fd8ecc32bf6ac6f9978297ef1aa7e97f145cd6d8490be49c01a543470795c6a82228c7d33366dc36809ed33490fe9a08ebd9ee27c09211fdd752cd32ba5697d5b229533b6588210a4e2e3755d9ee4a687e591d39e1b0a6e4058db67981b5ff7a983d1f92fc7d3cfdc9baa1ec3f2b3026caaf41279425e8edbf3b5248c67763054b57601ab9775641aaa273221f019309d5fef778b5d239b1e1b47d958064c3d53ad0f02c1fe20040ad7000e123157eeffdd6cfc9b36e6a517a626cdb9600cfad8f6af0fbf4f565f282204de2546fd97673bd0ac4954dffa7eb531e2ce88729da1c80294b9e74c5ef5070efa1a9e5daa0fa436cd7abff4c36243744a3f1d0c1a2851143362ada81f303acb9839f04a4311e52f8d199b167988a1adba156d6e152b76b5d4359f66d5e04582976fb6875ddf814e28157eeed0b5bcb0384250c9d10a9043be1ea9e02faf0a3f226a16a4ecb47f21fda4b456f99e2aef8f0c9ecd4701ac0832cfc40a4290286da25a5d87cd3dd88d6a0ea27076e2f248144cd64432c7fba88b469111d1007c0ac41d4c4ff7579b100c30cc66a2a61ff2b23d7d2678e74f59b1d34aca8c19f22972ba69b4ba819dc2b879ab8a052f58877ef1b7acf1dd9703abd7286e310ccf0749cdeff0bc1b32938ca80ff109fb17f41a6924ae340059ac472c430465d4ba38ac04d16b941a6c9c7501a2444f3590db0b696510aaf46f840a2d0e2c01d16475342b8e27e977c672f65786e9757a746be652321091402b4ac572c4e2f3610252db85dc4ee9622c2c72f6d8ef28109f8158ff3344a42aa04adac192761041dc92e1053ab44c05481fe3b4ce842d2ae1dfa389d77324c5a1425de45123f061c7a9d1398b26be8cdf199cc38e0dca5cf45cde1ba6c819efca55c0a06c75d870d02581243676c2f056ee149467a0ef463d4f267986c9ab29eccec654b2ed1b95998540512213ae6e8912e7ccdda90ad4e559c19e0a516e3e6386e2704d7b66a0c9675b71a4ca099cd1b97cee35a73a34b1f383a14410557191443f242d640bb4125a160a72553b93ffd137945fde22811c8390a2411ecf31197f6e6331b65f1635aefd4cb1540078515c2f3103a343a7f8323e94387900e026c62235bdd611a78f52812d4fc987dd20d7941a52bf61b8a2e51163f869f0a174c0e65a3337e42f2f99abe74ced5448516dc58ab655d863c616c20e1144ec9d197b82815cddb467f68a0993d41a9519e53e6be90acaac921f71bf4e9790423542a35f2c3a63fe1fdf8bbc94a2f4a7ab3df26b4f9f4d2b95210867d1fe1781633404fcce84975ff9855fb94d2e737e1a4bda737abbbc8b46752881ef1e69255a66bbe2abc72049234297a41f15c79f36cbdd8594e0b45e58e8ddb421b5e78205355cf00df006a7b63f8600cfe14b67f0819d750b9ad01a1ba6d4878330fb4c8aeda1a4725eebe814aa9f3dfa670ba05d03c1e909ed36d5a7adb490a4e9a321a78bfd3347af44a012af42001e94f4844373b37e2226c7c129ab99bba5cb83d9d17967f3d72ec8841bf14ef9f2df9c746d4de9c298ae726d850a3af310f7e7e1b3dc5b8ac3a6b8374ce8fa3240260acca3000fd3097ad25838c3dcdc4ba4656ab054bab120dc0e3baee4fb078b9d71027e61b59a281b52749da1287affe9472f47e608b3fdb5af9ef828021da2963a1cc97317c9cb42b1b241d928e980b043392f6c99cec49eac2e42e056520d05dcf5f464038f60b9917d3d7020b35ae72fa7699c9c7df21ac9353e8e6a01faa888e7e8e359f157beef4cd50565ff97998c6544cf57f227e8a665a3a0f725a9a6df59c59dc57e822b69c0cd7e6c3d385bc53a03d3f642367553e79f1f0926456ef34ff35108eb68fee979520632e3443efa662587a2d79b96228be373b1a43e0b0717c9b2b10c53b55149a09f81f13b019edd9ddcac4d044efd989323f787b465086033000b9c9e76fa503f8f179e7ac926eaf379323590df8c89d79b450a2c153c328b87f8d503d03dc6de93f65efff59e12873f581fcd500f7194274d1fb7ed3d9f70a5ab837a539e13551eea003ee772c73644f5a916990719b8cbd2bcbdab556d2e5dc882c99f4b3e3dc4afa4e9ad48023897b32fb9c4a7a15cb93cc5565f8ecae56bf7dc1d3f365e5646f64bf00229fc1bfde01885ef1ee8c234bea31e0b07a6a12f32d2ade473eceadc22d64412cc39c081707135a2648d0355228b430ffb0c05e1699b32fad3acc07cc32aec3cf10885505116eb6f969fb8e816f2c48f96eaf7b30cbe626ba04e22b7fb44d5395781f56b67236b3f9d75f44fdd8c5836a1ebd16fc5a63a4b24953647b4ac616796bffc3043533bd3270d0f718f36336f5d6a5ea6e7546c58a0a6257146fad5afef1dbbf38bd003dc6459b82d8de92e9c79fb606101e0be3fcd948bdf1a5e17afcee17bdc307f3a229adafc5f513a3639b425d746280f23f8f14fdd85a81e61231615c1d90ee96ec7cafa2328cc3b326abfb663ee21eb4b0c49354275343caead7ed6b0ee1ff591bcce3e76685498d22a2ef36f33b7ab6b37a150b1fb1e4f63614437134aedf7614a02c6dd412e3fec1108b09dd400e12ac72fa20d24187d7272b75498926f5ba5fc20023b2a7ecdc37514d9ebdf51b8c5cabc7b952ed7ae9c50e4ebba4fa5349718d153ef29eda4ebb4932d2fcad9e94ec4f06ae4607d15d82d70b5cfd7a20c2b8e22c3b43f7e0a0b64a79a00f51bac42155c89033254c3652dc572f2018e82ea9ed48429d7158505dcc7b8c06d0fef85552604f93a1ec8fabd6a07c80cbe063fabc860b88356dec3101ff1f18768cef63482da5a13fdcc035d14a79f098bb8eea072d8db228fc4339d65919dbabe12b9ac8ea99e2987cc20c08d46e5cc0def4b5a8ded5c8f94fc19ec4cff7c6c718a592fd0234d6068938054f1554864ecde4462415a2c94b7dbfab8ce6294dbcdb786bc88308b7ce617dd2423414850f3cab5d2687c5b49e96ecd014d9cb0907e7c8adc4a864931767ecffd6120c7cbf7d797d4b38ea053c1f5a99407961aed1243190b05bc20120021c7a7ee63aea03c1f9bb35", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r1, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.263193998s ago: executing program 1 (id=673): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) socket(0x400000000010, 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0), 0x15) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='ag'], 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) 909.994257ms ago: executing program 4 (id=674): futex(&(0x7f0000000000)=0x2, 0x8, 0x1, 0x0, 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0), 0x700, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.current\x00', 0x300, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)={{0x48, 0x4, 0x2, 0x384, 0x2bb, 0x80000000, 0x7f}, "1b55cd6b31", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x825) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="df6b", 0x2}], 0x1}}], 0x1, 0x4000851) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x9, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0xfff, 0x3, 0xfffff200, 0x0, 0x1, 0xca, 0xffffa0ba, 0x5f4}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 712.136863ms ago: executing program 1 (id=675): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) inotify_init1(0x80000) (async) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) fcntl$dupfd(r2, 0x0, r2) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000000)) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 695.702124ms ago: executing program 2 (id=676): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', @multicast}) r3 = dup3(r0, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000c00)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a2988206d2d17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e2838ffff5722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0xf, 0x4e, 0x0, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x700, 0xbc8, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1000d92bd90ae221f4c53a1554bbd6ccc166dac981f8d6b685a28296acd16eb32bbe1533ba890c2f1bf5608c53402f342e2673cfb8879189748e9623852b672a34349b7bbbd01c721efc6b35be8d38215d4c2ad94097b3c5744ee5e673d6cbf8f5303cfde317297d0e4ad0b62aad6829548ee970ef5cde7c73c6adf6c79063938c4fa2990873f12a938bdfa36207cebb9578e1d353b476c45a31961cc2b91fec548427f4c9e66039de022a1ed5bccef19cea8032fb595f2e77792c44517b89b61a2bdec160033c901105208cb3c168e0cde3abcfbed95fc2f8ef04c1c7203232f2980091f1d1821424d70c2e", @ANYRES16=r4, @ANYBLOB="000325bd7000fcdbdf251200000008000700090000000800080001000100940001801400020077673200000000000000000000000000140002007663616e300000000000000000000000140002007465616d30000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000000000014000200636169663000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020062617461647630000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x81) 238.722581ms ago: executing program 1 (id=677): r0 = memfd_secret(0x0) write$UHID_INPUT(r0, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) mount(&(0x7f0000001040)=@rnullb, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='esdfs\x00', 0x2000040, &(0x7f0000001100)='\x00') (async) mount(&(0x7f0000001040)=@rnullb, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='esdfs\x00', 0x2000040, &(0x7f0000001100)='\x00') mkdir(&(0x7f0000001140)='./file0\x00', 0x1b2) (async) mkdir(&(0x7f0000001140)='./file0\x00', 0x1b2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001180)={'gretap0\x00', {0x2, 0x4e22, @remote}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000011c0)='gretap0\x00', &(0x7f0000001200)='\x00', 0x0) write$P9_RATTACH(r0, &(0x7f0000001240)={0x14, 0x69, 0x2, {0x1, 0x1, 0x7}}, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000001280), 0x3, 0x183000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x11, r2, 0xd7fde000) bind$802154_raw(r0, &(0x7f00000012c0)={0x24, @none={0x0, 0xffff}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xe0, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000010) syz_create_resource$binfmt(&(0x7f0000001500)='\x00') write$P9_RXATTRWALK(r0, &(0x7f0000001540)={0xf, 0x1f, 0x2, 0x86c2}, 0xf) (async) write$P9_RXATTRWALK(r0, &(0x7f0000001540)={0xf, 0x1f, 0x2, 0x86c2}, 0xf) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001600)={{r4, r5/1000+10000}, {0x0, 0xea60}}) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000001640)={0x2, 0x200, 0x81}) (async) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000001640)={0x2, 0x200, 0x81}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r6, &(0x7f0000001680)=@in={0x2, 0x0, @empty}, &(0x7f0000001700)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x1, &(0x7f0000001780)="3ee7c73550297ad4015ae9865d500cf99c9e5220b803ca1fc856249bdad3d3013210014e7be5fe09e39511a914b2760e8e143d234fa2f87af3e166de86013b61919066da59339149c0b9310579") (async) ptrace$setregs(0xd, 0xffffffffffffffff, 0x1, &(0x7f0000001780)="3ee7c73550297ad4015ae9865d500cf99c9e5220b803ca1fc856249bdad3d3013210014e7be5fe09e39511a914b2760e8e143d234fa2f87af3e166de86013b61919066da59339149c0b9310579") ioctl$KVM_RUN(r0, 0xae80, 0x0) r7 = open(&(0x7f0000001800)='./file0\x00', 0x202, 0x155) futex(&(0x7f0000001840)=0x1, 0x5, 0x2, &(0x7f0000001880), &(0x7f00000018c0)=0x2, 0x0) fspick(r7, &(0x7f0000001900)='./file0\x00', 0x1) (async) r8 = fspick(r7, &(0x7f0000001900)='./file0\x00', 0x1) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000019c0)='./file0\x00', 0x32684, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001940)='*\x00', &(0x7f0000001980)='./file0\x00', r9) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000001a00)={0x7, 0x40, 0xe2ff, 0x9, 0x43, 0x2}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000002a40)={0x0, 0x5}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000002a40)={0x0, 0x5}) 187.961855ms ago: executing program 1 (id=678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/138, 0x8a, 0x2, 0x40}, @fda={0x66646185, 0x1, 0x0, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/86, 0x56, 0x1, 0x33}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/138, 0x8a, 0x2, 0x40}, @fda={0x66646185, 0x1, 0x0, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/86, 0x56, 0x1, 0x33}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 187.626545ms ago: executing program 1 (id=679): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) setsockopt$sock_linger(r0, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48200, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x4, "0629c038"}, @main=@item_012={0x1, 0x0, 0xb, "b7"}]}}, 0x0}, 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) capset(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000140)={0xe, 0x4, 0x6, 0x6, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000e0000002000000400000000000000000ac01aa000000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0xa09ab000) 0s ago: executing program 0 (id=680): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x22b14d74e617228, 0x12, r0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) capset(&(0x7f0000000f40)={0x19980330}, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x10, 0x70bd2a, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = dup2(r5, r5) ioctl$BLKSECDISCARD(r6, 0x127d, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000002900)=0x659c, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0xfd, 0x3}]}, 0x10) sendmmsg(r8, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="491bad1f", 0x4}], 0x1}}], 0x1, 0x44888) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 20.516830][ T36] audit: type=1400 audit(1754600005.940:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.517948][ T281] cgroup: Unknown subsys name 'net' [ 20.539493][ T36] audit: type=1400 audit(1754600005.940:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.566795][ T36] audit: type=1400 audit(1754600005.970:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.566989][ T281] cgroup: Unknown subsys name 'devices' [ 20.793198][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.798840][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.971714][ T36] audit: type=1400 audit(1754600006.400:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.994951][ T36] audit: type=1400 audit(1754600006.400:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.003005][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.019700][ T36] audit: type=1400 audit(1754600006.400:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.051404][ T36] audit: type=1400 audit(1754600006.450:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.076967][ T36] audit: type=1400 audit(1754600006.450:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.081759][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.102693][ T36] audit: type=1400 audit(1754600006.510:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.136801][ T36] audit: type=1400 audit(1754600006.510:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.908628][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.915728][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.922827][ T289] bridge_slave_0: entered allmulticast mode [ 21.929019][ T289] bridge_slave_0: entered promiscuous mode [ 21.937788][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.944874][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.952088][ T289] bridge_slave_1: entered allmulticast mode [ 21.958217][ T289] bridge_slave_1: entered promiscuous mode [ 21.984824][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.991888][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.998936][ T290] bridge_slave_0: entered allmulticast mode [ 22.005271][ T290] bridge_slave_0: entered promiscuous mode [ 22.011588][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.018601][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.025727][ T290] bridge_slave_1: entered allmulticast mode [ 22.031884][ T290] bridge_slave_1: entered promiscuous mode [ 22.068488][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.075548][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.082711][ T291] bridge_slave_0: entered allmulticast mode [ 22.088814][ T291] bridge_slave_0: entered promiscuous mode [ 22.102661][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.109701][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.116811][ T291] bridge_slave_1: entered allmulticast mode [ 22.122981][ T291] bridge_slave_1: entered promiscuous mode [ 22.150146][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.157203][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.164381][ T288] bridge_slave_0: entered allmulticast mode [ 22.170523][ T288] bridge_slave_0: entered promiscuous mode [ 22.186344][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.193413][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.200553][ T288] bridge_slave_1: entered allmulticast mode [ 22.206818][ T288] bridge_slave_1: entered promiscuous mode [ 22.327527][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.334589][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.341894][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.348915][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.358092][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.365156][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.372481][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.379495][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.401630][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.408667][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.415946][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.422975][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.432438][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.439461][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.446877][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.453916][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.499511][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.507375][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.514837][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.523015][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.530170][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.537570][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.544802][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.559525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.566610][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.574212][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.581277][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.589310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.596374][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.609130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.616195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.632112][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.639176][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.650164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.657234][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.671601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.678649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.713598][ T290] veth0_vlan: entered promiscuous mode [ 22.722367][ T289] veth0_vlan: entered promiscuous mode [ 22.740835][ T290] veth1_macvtap: entered promiscuous mode [ 22.757694][ T291] veth0_vlan: entered promiscuous mode [ 22.766529][ T289] veth1_macvtap: entered promiscuous mode [ 22.774087][ T288] veth0_vlan: entered promiscuous mode [ 22.793044][ T291] veth1_macvtap: entered promiscuous mode [ 22.809238][ T288] veth1_macvtap: entered promiscuous mode [ 22.817310][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.889275][ T337] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 22.913793][ T340] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 22.979783][ T61] rust_binder: 329: removing orphan mapping 0:112 [ 22.990709][ T61] rust_binder: 0: removing orphan mapping 112:1048 [ 23.008242][ T345] can0: slcan on ptm1. [ 23.183497][ T333] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.213812][ T383] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.255824][ T385] fuse: Bad value for 'fd' [ 23.271202][ T61] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.323394][ T395] overlayfs: failed to clone upperpath [ 23.351809][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 23.358598][ T333] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 23.363299][ T402] @: renamed from vlan0 (while UP) [ 23.371229][ T333] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 23.383071][ T333] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 23.386947][ T402] overlayfs: failed to resolve './file0': -2 [ 23.398309][ T333] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.411594][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.419606][ T333] usb 4-1: Product: syz [ 23.423807][ T333] usb 4-1: Manufacturer: syz [ 23.428427][ T333] usb 4-1: SerialNumber: syz [ 23.436710][ T333] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 23.441216][ T61] usb 3-1: Using ep0 maxpacket: 8 [ 23.443743][ T333] cdc_ncm 4-1:1.0: bind() failure [ 23.450170][ T61] usb 3-1: unable to get BOS descriptor or descriptor too short [ 23.464631][ T61] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 23.472518][ T61] usb 3-1: can't read configurations, error -71 [ 23.543592][ T346] can0 (unregistered): slcan off ptm1. [ 23.640194][ T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.648803][ T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.661073][ T337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.666289][ T333] usb 4-1: USB disconnect, device number 2 [ 23.786985][ T431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.924012][ T441] mmap: syz.1.24 (441): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 23.955190][ T443] 9pnet_fd: Insufficient options for proto=fd [ 24.365192][ T482] rust_binder: Failed copying into alloc: EFAULT [ 24.365227][ T482] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 24.376664][ T482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 24.385848][ T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 24.406888][ T484] 9pnet_fd: Insufficient options for proto=fd [ 24.434018][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 24.483233][ T491] ======================================================= [ 24.483233][ T491] WARNING: The mand mount option has been deprecated and [ 24.483233][ T491] and is ignored by this kernel. Remove the mand [ 24.483233][ T491] option from the mount to silence this warning. [ 24.483233][ T491] ======================================================= [ 24.567039][ T497] rust_binder: Write failure EFAULT in pid:13 [ 24.674122][ T511] tipc: Enabling not permitted [ 24.685916][ T511] tipc: Enabling of bearer rejected, failed to enable media [ 24.733381][ T515] Zero length message leads to an empty skb [ 24.783128][ T518] incfs: Can't find or create .index dir in ./file0 [ 24.789823][ T518] incfs: mount failed -22 [ 24.797185][ T519] rust_binder: 42: no such ref 3 [ 24.804372][ T519] rust_binder: Write failure EFAULT in pid:42 [ 24.873582][ T328] bridge_slave_1: left allmulticast mode [ 24.894805][ T328] bridge_slave_1: left promiscuous mode [ 24.900455][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.918520][ T328] bridge_slave_0: left allmulticast mode [ 24.927885][ T328] bridge_slave_0: left promiscuous mode [ 24.938765][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.081362][ T328] veth1_macvtap: left promiscuous mode [ 25.103426][ T328] veth0_vlan: left promiscuous mode [ 25.207954][ T543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.232021][ T547] overlayfs: overlapping lowerdir path [ 25.257312][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.264467][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.272435][ T538] bridge_slave_0: entered allmulticast mode [ 25.279016][ T538] bridge_slave_0: entered promiscuous mode [ 25.285787][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.293345][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.300444][ T538] bridge_slave_1: entered allmulticast mode [ 25.306925][ T538] bridge_slave_1: entered promiscuous mode [ 25.376829][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.383943][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.391249][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.398283][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.424836][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.432286][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.453923][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.460981][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.469090][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.476160][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.496898][ T538] veth0_vlan: entered promiscuous mode [ 25.509571][ T538] veth1_macvtap: entered promiscuous mode [ 25.534117][ T36] kauditd_printk_skb: 146 callbacks suppressed [ 25.534133][ T36] audit: type=1400 audit(1754600010.960:220): avc: denied { unmount } for pid=538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.580743][ T571] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 25.586062][ T36] audit: type=1400 audit(1754600011.000:221): avc: denied { load_policy } for pid=570 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 25.590510][ T571] SELinux: failed to load policy [ 26.036055][ T36] audit: type=1400 audit(1754600011.460:222): avc: denied { ioctl } for pid=576 comm="syz.1.65" path="socket:[4881]" dev="sockfs" ino=4881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.060631][ T36] audit: type=1400 audit(1754600011.460:223): avc: denied { accept } for pid=576 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 26.095759][ T585] netlink: 'syz.1.67': attribute type 13 has an invalid length. [ 26.116744][ T36] audit: type=1400 audit(1754600011.540:224): avc: denied { mount } for pid=586 comm="syz.1.68" name="/" dev="ramfs" ino=5199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 26.160110][ T36] audit: type=1400 audit(1754600011.580:225): avc: denied { sqpoll } for pid=591 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 26.179184][ T36] audit: type=1400 audit(1754600011.580:226): avc: denied { sqpoll } for pid=591 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 26.198545][ T36] audit: type=1400 audit(1754600011.590:227): avc: denied { map } for pid=591 comm="syz.1.69" path="socket:[4892]" dev="sockfs" ino=4892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.221491][ T36] audit: type=1400 audit(1754600011.590:228): avc: denied { read accept } for pid=591 comm="syz.1.69" path="socket:[4892]" dev="sockfs" ino=4892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.245121][ T36] audit: type=1400 audit(1754600011.620:229): avc: denied { connect } for pid=596 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.266026][ T602] fuse: Unknown parameter ' g' [ 27.137002][ T618] netlink: 120 bytes leftover after parsing attributes in process `syz.1.78'. [ 27.146677][ T618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=618 comm=syz.1.78 [ 27.185237][ T626] netlink: 165 bytes leftover after parsing attributes in process `syz.1.81'. [ 27.432998][ T640] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 28.460918][ T662] rust_binder: 661 RLIMIT_NICE not set [ 28.573739][ T672] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 28.588183][ T672] rust_binder: Write failure EINVAL in pid:29 [ 28.595362][ T675] fuse: Unknown parameter 'fsname' [ 28.612888][ T679] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 28.620997][ T679] rust_binder: Write failure EINVAL in pid:9 [ 28.626875][ T675] fuse: Unknown parameter 'fsname' [ 28.832069][ T700] netlink: 100 bytes leftover after parsing attributes in process `syz.0.102'. [ 28.898412][ T707] rust_binder: Read failure Err(EAGAIN) in pid:41 [ 28.915816][ T712] binder: Bad value for 'stats' [ 28.931067][ T712] binder: Bad value for 'stats' [ 28.986093][ T719] @: renamed from vlan0 (while UP) [ 29.450974][ T739] capability: warning: `syz.4.117' uses deprecated v2 capabilities in a way that may be insecure [ 29.484760][ T439] rust_binder: 732: removing orphan mapping 0:24 [ 29.505820][ T744] binder: Unknown parameter 'context' [ 29.561939][ T758] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 29.561966][ T758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.569884][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:25 [ 29.899972][ T799] 9pnet_fd: Insufficient options for proto=fd [ 29.921210][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.071232][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 30.077559][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.087734][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.097994][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.107110][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.115221][ T31] usb 1-1: Product: ᐄ [ 30.119387][ T31] usb 1-1: Manufacturer: ƿ銍ᇁ泻붇鄆좌뽣ꪴ븈⛎ԥ鈱媦餈挍碒浍챢玲屉䥷滹ꨬ閩䡜✨垺᪚擷偄仠握白돀埆 [ 30.133740][ T31] usb 1-1: SerialNumber: [ 30.346503][ T31] usb 1-1: 0:2 : does not exist [ 30.353113][ T31] usb 1-1: USB disconnect, device number 2 [ 30.362199][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.393088][ T818] binder: Unknown parameter 'fscontext?}' [ 30.493203][ T822] ./cgroup: Can't lookup blockdev [ 30.512768][ T825] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.535211][ T829] netlink: 'syz.4.142': attribute type 16 has an invalid length. [ 30.543198][ T829] netlink: 'syz.4.142': attribute type 3 has an invalid length. [ 30.550877][ T829] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 30.558541][ T829] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 30.566235][ T829] netlink: 'syz.4.142': attribute type 2 has an invalid length. [ 30.573979][ T829] netlink: 64006 bytes leftover after parsing attributes in process `syz.4.142'. [ 30.584514][ T829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=829 comm=syz.4.142 [ 30.641206][ T333] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.765712][ T836] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 30.765733][ T836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.773803][ T836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:49 [ 30.792656][ T333] usb 3-1: not running at top speed; connect to a high speed hub [ 30.811291][ T333] usb 3-1: config 222 has an invalid interface number: 152 but max is 0 [ 30.819799][ T333] usb 3-1: config 222 has no interface number 0 [ 30.826512][ T333] usb 3-1: config 222 interface 152 altsetting 193 has an invalid descriptor for endpoint zero, skipping [ 30.837819][ T333] usb 3-1: config 222 interface 152 altsetting 193 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 30.849053][ T333] usb 3-1: config 222 interface 152 altsetting 193 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 30.860358][ T333] usb 3-1: config 222 interface 152 altsetting 193 has an invalid descriptor for endpoint zero, skipping [ 30.871579][ T333] usb 3-1: config 222 interface 152 altsetting 193 has an invalid descriptor for endpoint zero, skipping [ 30.883206][ T333] usb 3-1: config 222 interface 152 altsetting 193 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 30.894598][ T333] usb 3-1: config 222 interface 152 altsetting 193 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 30.905957][ T333] usb 3-1: config 222 interface 152 has no altsetting 0 [ 30.916683][ T333] usb 3-1: New USB device found, idVendor=1a8d, idProduct=1003, bcdDevice=e6.d4 [ 30.977706][ T848] netlink: 144 bytes leftover after parsing attributes in process `syz.1.150'. [ 30.988417][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 30.988433][ T36] audit: type=1400 audit(1754600016.410:252): avc: denied { name_bind } for pid=847 comm="syz.1.150" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 31.064990][ T853] /dev/nbd1: Can't lookup blockdev [ 31.075127][ T36] audit: type=1400 audit(1754600016.500:253): avc: denied { mount } for pid=854 comm="syz.0.153" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 31.150200][ T36] audit: type=1400 audit(1754600016.520:254): avc: denied { mounton } for pid=854 comm="syz.0.153" path="/27/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 31.216297][ T36] audit: type=1400 audit(1754600016.540:255): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 31.264774][ T36] audit: type=1400 audit(1754600016.550:256): avc: denied { mounton } for pid=858 comm="syz.1.154" path="/" dev="ramfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 31.399119][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.409452][ T333] usb 3-1: Product: syz [ 31.410879][ T36] audit: type=1400 audit(1754600016.830:257): avc: denied { create } for pid=863 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 31.413830][ T333] usb 3-1: Manufacturer: ཾ틗ㆻ醂찪픺ᷓ [ 31.441191][ T333] usb 3-1: SerialNumber: syz [ 31.574445][ T873] rust_binder: 52: no such ref 3 [ 31.579934][ T36] audit: type=1400 audit(1754600017.000:258): avc: denied { setopt } for pid=872 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.593731][ T873] process 'syz.4.159' launched './file1' with NULL argv: empty string added [ 31.631722][ T36] audit: type=1400 audit(1754600017.050:259): avc: denied { map } for pid=874 comm="syz.0.160" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.656462][ T36] audit: type=1400 audit(1754600017.080:260): avc: denied { listen } for pid=876 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.663724][ T333] usb 3-1: USB disconnect, device number 4 [ 31.678878][ T36] audit: type=1400 audit(1754600017.100:261): avc: denied { mount } for pid=876 comm="syz.0.162" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 31.685599][ T879] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 31.714469][ T879] overlayfs: failed to set xattr on upper [ 31.720338][ T879] overlayfs: ...falling back to redirect_dir=nofollow. [ 31.727341][ T879] overlayfs: ...falling back to uuid=null. [ 31.733316][ T879] overlayfs: ...falling back to xino=off. [ 31.736918][ T882] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.739029][ T882] rust_binder: Read failure Err(EFAULT) in pid:54 [ 31.812551][ T881] overlay: ./file1 is not a directory [ 31.841525][ T881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 31.850387][ T881] overlayfs: missing 'lowerdir' [ 32.043874][ T916] netlink: 'syz.1.176': attribute type 6 has an invalid length. [ 32.421235][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.581234][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 32.587578][ T10] usb 1-1: too many configurations: 10, using maximum allowed: 8 [ 32.596704][ T10] usb 1-1: config 0 has no interfaces? [ 32.602890][ T10] usb 1-1: config 0 has no interfaces? [ 32.609166][ T10] usb 1-1: config 0 has no interfaces? [ 32.615356][ T10] usb 1-1: config 0 has no interfaces? [ 32.621736][ T10] usb 1-1: config 0 has no interfaces? [ 32.631294][ T10] usb 1-1: config 0 has no interfaces? [ 32.642753][ T10] usb 1-1: config 0 has no interfaces? [ 32.649039][ T10] usb 1-1: config 0 has no interfaces? [ 32.654655][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 32.663714][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.672369][ T10] usb 1-1: config 0 descriptor?? [ 32.706833][ T955] rust_binder: Fixups oob 164 170 366 196 [ 32.706856][ T955] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 32.712757][ T955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.721099][ T955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 32.796482][ T972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.847720][ T974] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 32.878708][ T975] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.878780][ T934] rust_binder: Fixups oob 164 170 366 196 [ 32.886541][ T975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 32.894728][ T934] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 32.900340][ T975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:113 [ 32.909794][ T934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.927247][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 32.937667][ T333] usb 1-1: USB disconnect, device number 3 [ 33.030317][ T977] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 33.038134][ T977] rust_binder: Error while translating object. [ 33.038156][ T977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.044424][ T977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 33.221139][ T981] rust_binder: Write failure EINVAL in pid:125 [ 33.221741][ T982] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 33.309469][ T986] rust_binder: Write failure EFAULT in pid:130 [ 33.809021][ T1014] bridge0: entered allmulticast mode [ 34.154513][ T1031] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 34.161902][ T1031] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 34.739140][ T1048] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 34.822903][ T1055] /dev/rnullb0: Can't open blockdev [ 35.691139][ T1064] rust_binder: Write failure EFAULT in pid:151 [ 36.121204][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.292886][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.311181][ T31] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.321325][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.332408][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.341602][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.349583][ T31] usb 1-1: Product: syz [ 36.353798][ T31] usb 1-1: Manufacturer: ᐄ [ 36.358386][ T31] usb 1-1: SerialNumber: syz [ 36.671005][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 36.671021][ T36] audit: type=1400 audit(1754600022.090:317): avc: denied { listen } for pid=1085 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.712563][ T36] audit: type=1400 audit(1754600022.140:318): avc: denied { ioctl } for pid=1085 comm="syz.1.231" path="socket:[7301]" dev="sockfs" ino=7301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.768408][ T1079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.781336][ T1079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.801631][ T1079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.810139][ T1079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.818591][ T36] audit: type=1400 audit(1754600022.240:319): avc: denied { getopt } for pid=1077 comm="syz.0.228" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.839327][ T1079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.861369][ T1079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.870783][ T36] audit: type=1400 audit(1754600022.290:320): avc: denied { create } for pid=1077 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 37.569482][ T1104] /dev/rnullb0: Can't open blockdev [ 37.587511][ T1108] overlayfs: failed to resolve './file1': -2 [ 37.618098][ T36] audit: type=1400 audit(1754600023.040:321): avc: denied { getopt } for pid=1114 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.921213][ T333] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.072190][ T333] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 38.080466][ T333] usb 3-1: config 0 has no interface number 0 [ 38.086647][ T333] usb 3-1: config 0 interface 121 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 38.099187][ T333] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=8a.3d [ 38.108278][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.116318][ T333] usb 3-1: Product: syz [ 38.120490][ T333] usb 3-1: Manufacturer: syz [ 38.125284][ T333] usb 3-1: SerialNumber: syz [ 38.130495][ T333] usb 3-1: config 0 descriptor?? [ 38.338505][ T333] usb 3-1: USB disconnect, device number 5 [ 38.400994][ T1153] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 38.410395][ T1153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 38.764596][ T1167] tipc: Can't bind to reserved service type 1 [ 38.768984][ T36] audit: type=1400 audit(1754600024.190:322): avc: denied { getopt } for pid=1166 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.771524][ T1167] fuse: Bad value for 'group_id' [ 38.795389][ T1167] fuse: Bad value for 'group_id' [ 38.851991][ T31] usb 1-1: 0:2 : does not exist [ 38.872466][ T36] audit: type=1400 audit(1754600024.290:323): avc: denied { append } for pid=1171 comm="syz.0.250" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.873174][ T1172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.911312][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 38.920819][ T31] usb 1-1: USB disconnect, device number 4 [ 38.938607][ T36] audit: type=1326 audit(1754600024.350:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1174 comm="syz.2.251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f710af8ebe9 code=0x0 [ 39.020825][ T1179] netlink: 165 bytes leftover after parsing attributes in process `syz.0.252'. [ 39.034231][ T36] audit: type=1400 audit(1754600024.460:325): avc: denied { sqpoll } for pid=1176 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.348981][ T1183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.349089][ T1183] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 39.360815][ T1183] rust_binder: Read failure Err(EFAULT) in pid:116 [ 39.402926][ T1185] netlink: 'syz.4.254': attribute type 13 has an invalid length. [ 39.403828][ T1186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=1186 comm=syz.4.254 [ 39.450014][ T36] audit: type=1400 audit(1754600024.870:326): avc: denied { bind } for pid=1188 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.460364][ T1189] SELinux: failed to load policy [ 39.872993][ T1205] tmpfs: Unknown parameter '' [ 39.878104][ T1209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1209 comm=syz.2.262 [ 39.895227][ T1209] rust_binder: Error while translating object. [ 39.895274][ T1209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.901638][ T1209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:194 [ 39.904217][ T1214] netlink: 72 bytes leftover after parsing attributes in process `syz.0.264'. [ 39.929506][ T1213] rust_binder: Write failure EFAULT in pid:182 [ 40.065478][ T1229] netlink: 72 bytes leftover after parsing attributes in process `syz.2.269'. [ 40.145181][ T1236] overlayfs: failed to resolve './file1': -2 [ 40.145329][ T1235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 40.181214][ T439] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.220577][ T1242] overlayfs: failed to clone upperpath [ 40.321257][ T439] usb 1-1: device descriptor read/64, error -71 [ 40.561245][ T439] usb 1-1: device descriptor read/64, error -71 [ 40.766289][ T1253] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 40.776969][ T1252] overlayfs: failed to clone upperpath [ 40.801232][ T439] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.931218][ T439] usb 1-1: device descriptor read/64, error -71 [ 41.089910][ T1273] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 41.097184][ T1273] rust_binder: Write failure EINVAL in pid:218 [ 41.110582][ T1275] input: syz1 as /devices/virtual/input/input6 [ 41.171285][ T439] usb 1-1: device descriptor read/64, error -71 [ 41.281301][ T439] usb usb1-port1: attempt power cycle [ 41.356646][ T1290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 41.374494][ T1290] kvm: Disabled LAPIC found during irq injection [ 41.540753][ T1288] rust_binder: Read failure Err(EFAULT) in pid:232 [ 41.602890][ T1326] netlink: 'syz.2.302': attribute type 46 has an invalid length. [ 41.621210][ T439] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.645303][ T439] usb 1-1: device descriptor read/8, error -71 [ 41.661733][ T1339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 41.696026][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 41.696042][ T36] audit: type=1400 audit(1754600027.120:354): avc: denied { map } for pid=1346 comm="syz.2.311" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.729069][ T1347] /dev/rnullb0: Can't open blockdev [ 41.765507][ T1364] 9pnet_fd: Insufficient options for proto=fd [ 41.782178][ T439] usb 1-1: device descriptor read/8, error -71 [ 41.998916][ T1385] binder: Bad value for 'stats' [ 42.021251][ T439] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.042355][ T439] usb 1-1: device descriptor read/8, error -71 [ 42.066816][ T1389] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 42.073980][ T1389] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 97) [ 42.073997][ T1389] rust_binder: Error while translating object. [ 42.084495][ T1389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.090778][ T1389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 42.104865][ T31] rust_binder: 1387: removing orphan mapping 0:1048 [ 42.172417][ T439] usb 1-1: device descriptor read/8, error -71 [ 42.281314][ T439] usb usb1-port1: unable to enumerate USB device [ 42.739158][ T1403] 9pnet_fd: Insufficient options for proto=fd [ 42.770880][ T36] audit: type=1400 audit(1754600028.190:355): avc: denied { create } for pid=1410 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.828981][ T36] audit: type=1400 audit(1754600028.250:356): avc: denied { read } for pid=1419 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.271201][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.325820][ T36] audit: type=1326 audit(1754600028.750:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.349613][ T36] audit: type=1326 audit(1754600028.750:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.373102][ T36] audit: type=1326 audit(1754600028.750:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.396721][ T36] audit: type=1326 audit(1754600028.750:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.425906][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.432650][ T36] audit: type=1326 audit(1754600028.750:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.456771][ T36] audit: type=1326 audit(1754600028.750:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.487179][ T36] audit: type=1326 audit(1754600028.750:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1396 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7398ebe9 code=0x7fc00000 [ 43.671200][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.851680][ T1455] incfs_lookup_dentry err:-5 [ 43.851680][ T1456] incfs_lookup_dentry err:-5 [ 43.851699][ T1456] incfs: Can't find or create .index dir in ./file0 [ 43.851730][ T1456] incfs: mount failed -5 [ 43.856343][ T1455] incfs: Can't find or create .index dir in ./file0 [ 43.878904][ T1455] incfs: mount failed -5 [ 43.911238][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.041241][ T10] usb 3-1: device descriptor read/64, error -71 [ 44.281229][ T10] usb 3-1: device descriptor read/64, error -71 [ 44.391314][ T10] usb usb3-port1: attempt power cycle [ 44.429984][ T1459] input: syz0 as /devices/virtual/input/input7 [ 44.489635][ T1472] fuse: blksize only supported for fuseblk [ 44.563500][ T1479] loop7: detected capacity change from 0 to 7 [ 44.606941][ T1479] netlink: 'syz.4.356': attribute type 13 has an invalid length. [ 44.658892][ T1484] /dev/rnullb0: Can't open blockdev [ 44.710269][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.733159][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.761793][ T1492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 44.762515][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.841305][ T1501] tipc: Started in network mode [ 44.841659][ T1502] rust_binder: Error while translating object. [ 44.846203][ T1501] tipc: Node identity 3ebcf1f54785, cluster identity 4711 [ 44.846305][ T1501] tipc: Enabled bearer , priority 0 [ 44.852537][ T1502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.866157][ T1502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 44.876542][ T1500] tipc: Disabling bearer [ 44.912589][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.925773][ T1505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 44.925800][ T1505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:220 [ 45.151264][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.182299][ T10] usb 3-1: device descriptor read/8, error -71 [ 45.312369][ T10] usb 3-1: device descriptor read/8, error -71 [ 45.421340][ T10] usb usb3-port1: unable to enumerate USB device [ 45.979331][ T1564] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 45.986974][ T1564] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 46.103789][ T1567] rust_binder: 244: no such ref 3 [ 46.135099][ T1569] Invalid ELF header magic: != ELF [ 46.140456][ T1569] Invalid ELF header magic: != ELF [ 46.145905][ T1569] Invalid ELF header magic: != ELF [ 46.151532][ T1571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.152198][ T1569] Invalid ELF header magic: != ELF [ 46.167288][ T1571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.170588][ T1569] Invalid ELF header magic: != ELF [ 46.177450][ T1573] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.180770][ T1573] rust_binder: Read failure Err(EFAULT) in pid:275 [ 46.180885][ T1569] Invalid ELF header magic: != ELF [ 46.189153][ T1571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.195485][ T1569] Invalid ELF header magic: != ELF [ 46.202104][ T1573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 46.514643][ T1593] overlayfs: failed to clone upperpath [ 46.529419][ T1595] netlink: 'syz.1.392': attribute type 3 has an invalid length. [ 46.537230][ T1595] netlink: 944 bytes leftover after parsing attributes in process `syz.1.392'. [ 46.554917][ T1597] overlayfs: failed to clone upperpath [ 46.571250][ T780] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.732373][ T780] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 46.740531][ T780] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 25971, setting to 64 [ 46.751617][ T780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.759613][ T780] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 46.768699][ T780] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 46.776877][ T780] usb 3-1: Product: syz [ 46.781022][ T780] usb 3-1: Manufacturer: syz [ 46.785626][ T780] usb 3-1: SerialNumber: syz [ 46.790706][ T780] usb 3-1: config 0 descriptor?? [ 46.796308][ T780] hub 3-1:0.0: bad descriptor, ignoring hub [ 46.802240][ T780] hub 3-1:0.0: probe with driver hub failed with error -5 [ 46.809773][ T780] usb 3-1: selecting invalid altsetting 0 [ 47.101364][ T780] usb 3-1: USB disconnect, device number 10 [ 47.659197][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 47.659213][ T36] audit: type=1400 audit(1754600033.080:438): avc: denied { bind } for pid=1613 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.685666][ T36] audit: type=1400 audit(1754600033.080:439): avc: denied { map } for pid=1613 comm="syz.2.400" path="socket:[10609]" dev="sockfs" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.708854][ T36] audit: type=1400 audit(1754600033.090:440): avc: denied { read } for pid=1613 comm="syz.2.400" path="socket:[10609]" dev="sockfs" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.872596][ T36] audit: type=1400 audit(1754600033.300:441): avc: denied { create } for pid=1643 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.947361][ T36] audit: type=1400 audit(1754600033.370:442): avc: denied { write } for pid=1654 comm="syz.2.414" path="socket:[10808]" dev="sockfs" ino=10808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.988639][ T36] audit: type=1400 audit(1754600033.370:443): avc: denied { create } for pid=1654 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.999729][ T1662] 9pnet_fd: Insufficient options for proto=fd [ 48.044548][ T1669] netlink: 64 bytes leftover after parsing attributes in process `syz.1.419'. [ 48.098063][ T36] audit: type=1400 audit(1754600033.520:444): avc: denied { getopt } for pid=1681 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.134457][ T36] audit: type=1400 audit(1754600033.560:445): avc: denied { read } for pid=94 comm="acpid" name="event#" dev="devtmpfs" ino=472 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 48.136178][ T1691] fuse: Unknown parameter 'f ' [ 48.156532][ T36] audit: type=1400 audit(1754600033.560:446): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=472 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 48.173265][ T1695] overlayfs: failed to clone lowerpath [ 48.183913][ T36] audit: type=1400 audit(1754600033.560:447): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=472 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 48.213527][ T780] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 48.371207][ T780] usb 3-1: Invalid ep0 maxpacket: 64 [ 48.387425][ T1714] 9pnet_fd: Insufficient options for proto=fd [ 48.501219][ T780] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 48.651230][ T780] usb 3-1: Invalid ep0 maxpacket: 64 [ 48.656677][ T780] usb usb3-port1: attempt power cycle [ 49.001253][ T780] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 49.021546][ T780] usb 3-1: Invalid ep0 maxpacket: 64 [ 49.151249][ T780] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 49.171547][ T780] usb 3-1: Invalid ep0 maxpacket: 64 [ 49.176968][ T780] usb usb3-port1: unable to enumerate USB device [ 50.441352][ T1740] futex_wake_op: syz.0.441 tries to shift op by 144; fix this program [ 50.484853][ T1755] netlink: 124 bytes leftover after parsing attributes in process `syz.1.447'. [ 50.821233][ T781] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 50.972579][ T781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.980581][ T781] usb 1-1: not running at top speed; connect to a high speed hub [ 50.989023][ T781] usb 1-1: config 129 has an invalid interface number: 51 but max is 0 [ 50.997576][ T781] usb 1-1: config 129 has no interface number 0 [ 51.003888][ T781] usb 1-1: config 129 interface 51 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 51.015052][ T781] usb 1-1: config 129 interface 51 has no altsetting 0 [ 51.023340][ T781] usb 1-1: New USB device found, idVendor=c6fc, idProduct=c78f, bcdDevice=5d.62 [ 51.032416][ T781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.040421][ T781] usb 1-1: Product: syz [ 51.044585][ T781] usb 1-1: Manufacturer: syz [ 51.049169][ T781] usb 1-1: SerialNumber: syz [ 51.053772][ T1764] rust_binder: 302: no such ref 3 [ 51.058895][ T1764] rust_binder: 302: no such ref 1 [ 51.064031][ T1764] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 51.071370][ T1764] rust_binder: inc_ref_done called when no active inc_refs [ 51.123858][ T1765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1765 comm=syz.2.450 [ 51.240206][ T332] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.266908][ T1762] rust_binder: Write failure EFAULT in pid:265 [ 51.270469][ T781] usb 1-1: USB disconnect, device number 9 [ 51.788324][ T781] rust_binder: 1763: removing orphan mapping 0:24 [ 51.797368][ T781] rust_binder: 0: removing orphan mapping 24:96 [ 51.822746][ T332] Bluetooth: hci1: Frame reassembly failed (-84) [ 51.984830][ T1771] rust_binder: Read failure Err(EFAULT) in pid:267 [ 52.859275][ T1790] input: syz0 as /devices/virtual/input/input8 [ 52.925898][ T1791] rust_binder: 1790 RLIMIT_NICE not set [ 52.926126][ T1790] rust_binder: 276: no such ref 3 [ 52.936857][ T1790] rust_binder: inc_ref_done called when no active inc_refs [ 52.946084][ T1793] /dev/rnullb0: Can't open blockdev [ 53.001172][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 53.001188][ T36] audit: type=1400 audit(1754600038.420:454): avc: denied { setopt } for pid=1800 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.072946][ T1803] sock: sock_set_timeout: `syz.0.463' (pid 1803) tries to set negative timeout [ 53.082549][ T1803] /dev/rnullb0: Can't open blockdev [ 53.301728][ T1769] Bluetooth: hci0: command 0x1003 tx timeout [ 53.302087][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.590357][ T1815] 9pnet_fd: Insufficient options for proto=fd [ 53.828912][ T1821] netlink: 'syz.4.469': attribute type 5 has an invalid length. [ 53.836752][ T1821] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.469'. [ 53.855195][ T1823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.470'. [ 53.864151][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 53.864178][ T1823] netlink: 43 bytes leftover after parsing attributes in process `syz.4.470'. [ 53.870266][ T1768] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 53.879150][ T1823] netlink: 'syz.4.470': attribute type 6 has an invalid length. [ 53.894817][ T1823] netlink: 'syz.4.470': attribute type 5 has an invalid length. [ 53.902698][ T1823] netlink: 43 bytes leftover after parsing attributes in process `syz.4.470'. [ 53.911264][ T781] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.916288][ T1823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 53.984319][ T36] audit: type=1400 audit(1754600039.410:455): avc: denied { mounton } for pid=1833 comm="syz.2.475" path="/92/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 54.071276][ T781] usb 1-1: Using ep0 maxpacket: 8 [ 54.078442][ T1838] can0: slcan on ptm0. [ 54.083080][ T781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.090757][ T36] audit: type=1400 audit(1754600039.500:456): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.123004][ T781] usb 1-1: config 5 has an invalid interface number: 192 but max is 0 [ 54.131569][ T781] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 54.151204][ T36] audit: type=1400 audit(1754600039.570:457): avc: denied { map } for pid=1841 comm="syz.4.477" path="socket:[10080]" dev="sockfs" ino=10080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.153964][ T781] usb 1-1: config 5 has no interface number 0 [ 54.182816][ T781] usb 1-1: config 5 interface 192 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.196240][ T781] usb 1-1: config 5 interface 192 has no altsetting 0 [ 54.208658][ T36] audit: type=1400 audit(1754600039.570:458): avc: denied { read } for pid=1846 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.215617][ T781] usb 1-1: New USB device found, idVendor=6eaf, idProduct=137d, bcdDevice=16.33 [ 54.242932][ T36] audit: type=1400 audit(1754600039.570:459): avc: denied { open } for pid=1846 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.251893][ T781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.268374][ T36] audit: type=1400 audit(1754600039.570:460): avc: denied { getattr } for pid=1846 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.280366][ T781] usb 1-1: Product: syz [ 54.303963][ T36] audit: type=1400 audit(1754600039.600:461): avc: denied { read } for pid=1843 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.308625][ T781] usb 1-1: Manufacturer: syz [ 54.347829][ T36] audit: type=1400 audit(1754600039.640:462): avc: denied { mount } for pid=1852 comm="syz.1.479" name="/" dev="configfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.361213][ T781] usb 1-1: SerialNumber: syz [ 54.374910][ T1864] TCP: TCP_TX_DELAY enabled [ 54.380917][ T1864] rust_binder: Error while translating object. [ 54.380951][ T1864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.384392][ T36] audit: type=1400 audit(1754600039.640:463): avc: denied { search } for pid=1852 comm="syz.1.479" name="/" dev="configfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.396568][ T1864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 54.418685][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 54.581930][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 54.589582][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.601418][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 54.609013][ T31] usb 3-1: can't read configurations, error -71 [ 54.637827][ T1819] /dev/rnullb0: Can't open blockdev [ 54.645932][ T781] usb 1-1: MIDIStreaming interface descriptor not found [ 54.653047][ T1838] can0 (unregistered): slcan off ptm0. [ 54.668870][ T781] usb 1-1: USB disconnect, device number 10 [ 54.936972][ T1919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1919 comm=syz.1.491 [ 55.145836][ T1927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 55.292037][ T1938] tap0: tun_chr_ioctl cmd 1074025678 [ 55.297377][ T1938] tap0: group set to 0 [ 55.468438][ T2007] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 55.480613][ T2008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.480728][ T1999] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 56.079652][ T2020] netlink: 1136 bytes leftover after parsing attributes in process `syz.0.516'. [ 56.280725][ T2024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 56.541222][ T780] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 56.680427][ T2052] /dev/rnullb0: Can't lookup blockdev [ 56.702553][ T780] usb 1-1: not running at top speed; connect to a high speed hub [ 56.711416][ T780] usb 1-1: config 6 has an invalid interface number: 65 but max is 2 [ 56.719563][ T780] usb 1-1: config 6 has an invalid interface number: 249 but max is 2 [ 56.727886][ T780] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 56.736716][ T780] usb 1-1: config 6 has an invalid interface number: 239 but max is 2 [ 56.738898][ T2065] /dev/rnullb0: Can't lookup blockdev [ 56.745011][ T780] usb 1-1: config 6 has no interface number 0 [ 56.756697][ T780] usb 1-1: config 6 has no interface number 1 [ 56.763951][ T780] usb 1-1: config 6 has no interface number 2 [ 56.770067][ T780] usb 1-1: config 6 interface 65 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 56.777511][ T2069] fuse: Unknown parameter 'f\D [ 56.777511][ T2069] d' [ 56.781225][ T780] usb 1-1: config 6 interface 65 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 56.799765][ T780] usb 1-1: config 6 interface 65 altsetting 11 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.809801][ T780] usb 1-1: config 6 interface 249 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 56.820812][ T780] usb 1-1: config 6 interface 249 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 56.831905][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 56.842682][ T780] usb 1-1: config 6 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 56.853803][ T780] usb 1-1: config 6 interface 249 altsetting 9 endpoint 0x8 has invalid maxpacket 959, setting to 64 [ 56.864722][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 56.875431][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 56.886150][ T780] usb 1-1: config 6 interface 249 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 56.897084][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 56.907893][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 56.918625][ T780] usb 1-1: config 6 interface 249 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.928480][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 56.939209][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 56.949932][ T780] usb 1-1: config 6 interface 249 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 56.960672][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 56.971387][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 56.982148][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 56.992875][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 57.003612][ T780] usb 1-1: config 6 interface 239 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 57.014534][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 57.025266][ T780] usb 1-1: config 6 interface 239 altsetting 7 has an endpoint descriptor with address 0x59, changing to 0x9 [ 57.042167][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 57.058519][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 57.076450][ T780] usb 1-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 57.087289][ T780] usb 1-1: config 6 interface 239 altsetting 7 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 57.101746][ T780] usb 1-1: config 6 interface 65 has no altsetting 0 [ 57.108459][ T780] usb 1-1: config 6 interface 249 has no altsetting 0 [ 57.115381][ T780] usb 1-1: config 6 interface 239 has no altsetting 0 [ 57.124239][ T2114] raw_sendmsg: syz.2.546 forgot to set AF_INET. Fix it! [ 57.133738][ T780] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice= f.a0 [ 57.144665][ T780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.153432][ T780] usb 1-1: Product: Ў [ 57.157598][ T780] usb 1-1: Manufacturer: ╻땓❾ﳭᵒᔔ몎쭵ᤆ異仳㥨坶㆓ኰ智殓䧸鯃纍ㅜ鮊ׂ֔ㆰ䕕Ṧᶨ㯐䌆㰾襘犖뛤ࡩꍞ潂褥쯧請䉰᭩쨇쇈쪪퍣ꋩോ솙鑐큱Ậ䗀ﶋ癇౑췡侙㹇呛䄯瞹ᨼ怱කᚺ⩈ڂ灙⌋ꎤ೬쪳蛢艑၉኿褤ᠣ쫼軥홌ޱ뼓伶㵶 [ 57.185955][ T780] usb 1-1: SerialNumber: ࡃ [ 57.211566][ T2120] mmap: syz.1.551 (2120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.237201][ T2123] binder: Unknown parameter 'stat' [ 57.256346][ T2125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 57.256369][ T2125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:332 [ 57.395495][ T2028] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 57.411932][ T2028] rust_binder: 310: no such ref 3 [ 57.416968][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 57.426368][ T2028] syzkaller0: entered promiscuous mode [ 57.441009][ T2028] syzkaller0: entered allmulticast mode [ 57.460222][ T780] usb 1-1: USB disconnect, device number 11 [ 58.058572][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 58.058589][ T36] audit: type=1400 audit(1754600043.480:476): avc: denied { read write } for pid=2141 comm="syz.0.558" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.059950][ T2142] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 58.064898][ T36] audit: type=1400 audit(1754600043.480:477): avc: denied { open } for pid=2141 comm="syz.0.558" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.095036][ T2142] netlink: 'syz.0.558': attribute type 27 has an invalid length. [ 58.097454][ T36] audit: type=1400 audit(1754600043.480:478): avc: denied { ioctl } for pid=2141 comm="syz.0.558" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.257329][ T2149] SELinux: failed to load policy [ 58.262678][ T2149] /dev/rnullb0: Can't open blockdev [ 58.284207][ T36] audit: type=1400 audit(1754600043.710:479): avc: denied { write } for pid=2146 comm="syz.0.560" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.364028][ T36] audit: type=1400 audit(1754600043.790:480): avc: denied { ioctl } for pid=2158 comm="syz.2.564" path="socket:[12674]" dev="sockfs" ino=12674 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.642307][ T36] audit: type=1400 audit(1754600044.070:481): avc: denied { read } for pid=2172 comm="syz.4.568" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.665491][ T36] audit: type=1400 audit(1754600044.070:482): avc: denied { open } for pid=2172 comm="syz.4.568" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.694247][ T36] audit: type=1400 audit(1754600044.120:483): avc: denied { map } for pid=2172 comm="syz.4.568" path="socket:[12686]" dev="sockfs" ino=12686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 58.695651][ T2174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 58.717189][ T781] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 58.721975][ T36] audit: type=1400 audit(1754600044.140:484): avc: denied { ioctl } for pid=2172 comm="syz.4.568" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.881242][ T781] usb 3-1: Using ep0 maxpacket: 32 [ 58.887474][ T781] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.895856][ T781] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.904474][ T781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.914559][ T781] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.923535][ T781] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.936499][ T781] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.945544][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.954067][ T781] usb 3-1: config 0 descriptor?? [ 59.111138][ T2181] input: syz1 as /devices/virtual/input/input9 [ 59.119285][ T2181] devpts: called with bogus options [ 59.136308][ T2183] fuse: Bad value for 'fd' [ 59.162103][ T2189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.168087][ T2162] rust_binder: 355: no such ref 0 [ 59.176674][ T2162] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 59.184264][ T781] usb 3-1: USB disconnect, device number 17 [ 59.289229][ T36] audit: type=1400 audit(1754600044.710:485): avc: denied { setattr } for pid=2198 comm="syz.0.578" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.290187][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.316511][ T2199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:341 [ 59.340764][ T2201] rust_binder: Failed to vm_insert_page(35184388845568): vma_addr:35184388841472 i:1 err:EFAULT [ 59.340789][ T2201] rust_binder: Error in use_page_slow: EFAULT [ 59.351436][ T2201] rust_binder: use_range failure EFAULT [ 59.357520][ T2201] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 59.363090][ T2201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 59.371214][ T2201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:343 [ 59.676938][ T2212] x_tables: unsorted underflow at hook 3 [ 59.727164][ T2214] rust_binder: 357: no such ref 3 [ 59.732345][ T2214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 59.732804][ T2214] rust_binder: 357: no such ref 0 [ 59.747787][ T2214] rust_binder: Write failure EINVAL in pid:357 [ 59.748143][ T2214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.754838][ T2214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 59.958314][ T2229] netlink: 'syz.0.589': attribute type 11 has an invalid length. [ 60.041226][ T780] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 60.192356][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 60.203436][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 60.221405][ T780] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 60.236588][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.248302][ T780] usb 3-1: config 0 descriptor?? [ 60.253881][ T2218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.281201][ T819] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 60.410555][ T2243] lo: entered allmulticast mode [ 60.442927][ T819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.461237][ T819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.472305][ T2218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.472556][ T819] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.490637][ T2218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.499917][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.502993][ T780] usbhid 3-1:0.0: can't add hid device: -71 [ 60.507953][ T819] usb 1-1: Product: Ћ [ 60.521190][ T819] usb 1-1: Manufacturer: ခ [ 60.521247][ T780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 60.525793][ T819] usb 1-1: SerialNumber: 䐐 [ 60.549998][ T780] usb 3-1: USB disconnect, device number 18 [ 60.686159][ T2243] lo: left allmulticast mode [ 60.719544][ T2251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 60.879613][ T2285] /dev/rnullb0: Can't lookup blockdev [ 60.945185][ T819] usb 1-1: 0:2 : does not exist [ 60.952549][ T819] usb 1-1: USB disconnect, device number 12 [ 61.011255][ T780] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 61.161224][ T780] usb 3-1: Using ep0 maxpacket: 32 [ 61.167437][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 61.178651][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 61.191665][ T780] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 61.200792][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.209337][ T780] usb 3-1: config 0 descriptor?? [ 61.215259][ T780] hub 3-1:0.0: bad descriptor, ignoring hub [ 61.221223][ T780] hub 3-1:0.0: probe with driver hub failed with error -5 [ 61.542110][ T2298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.542666][ T2298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.549445][ T2298] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 61.563244][ T2298] rust_binder: Write failure EINVAL in pid:371 [ 61.618285][ T780] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 61.932902][ T2315] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 61.947980][ T780] usb 3-1: USB disconnect, device number 19 [ 61.976646][ T2321] overlay: ./file0 is not a directory [ 62.019430][ T2336] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 62.406828][ T2354] input: syz1 as /devices/virtual/input/input10 [ 62.620878][ T2366] batadv_slave_0: entered promiscuous mode [ 62.627724][ T2366] batadv_slave_0: left promiscuous mode [ 62.668730][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.674936][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.681101][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.687277][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.689897][ T2380] /dev/rnullb0: Can't open blockdev [ 62.693663][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.704881][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.711086][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.717270][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.723432][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.729566][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.735768][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.742055][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.748267][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.754529][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.760717][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.766942][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.773217][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.779417][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.785777][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.792232][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.798385][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.804624][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.810853][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.817088][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.823653][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.829848][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.836073][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.842276][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.848419][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.854630][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.860869][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.867070][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.873242][ T2379] 9pnet_fd: Insufficient options for proto=fd [ 62.921140][ T2394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 63.271256][ T31] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 63.401256][ T31] usb 3-1: device descriptor read/64, error -71 [ 63.476461][ T2405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397 [ 63.497700][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 63.497718][ T36] audit: type=1400 audit(1754600048.920:494): avc: denied { bind } for pid=2406 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.533597][ T36] audit: type=1400 audit(1754600048.920:495): avc: denied { setopt } for pid=2406 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.656357][ T2421] binder: Bad value for 'max' [ 63.671196][ T31] usb 3-1: device descriptor read/64, error -71 [ 63.692623][ T2423] SELinux: ebitmap: truncated map [ 63.708081][ T2423] SELinux: failed to load policy [ 63.911203][ T31] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 63.951209][ T780] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 64.041225][ T31] usb 3-1: device descriptor read/64, error -71 [ 64.102292][ T780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29811, setting to 64 [ 64.113340][ T780] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 64.122394][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.130892][ T780] usb 1-1: config 0 descriptor?? [ 64.136155][ T2423] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.281223][ T31] usb 3-1: device descriptor read/64, error -71 [ 64.391333][ T31] usb usb3-port1: attempt power cycle [ 64.548381][ T780] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 64.731228][ T31] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 64.753048][ T31] usb 3-1: device descriptor read/8, error -71 [ 64.882244][ T31] usb 3-1: device descriptor read/8, error -71 [ 64.983021][ T2448] capability: warning: `syz.4.659' uses 32-bit capabilities (legacy support in use) [ 65.131223][ T31] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 65.152282][ T31] usb 3-1: device descriptor read/8, error -71 [ 65.195621][ T36] audit: type=1400 audit(1754600050.620:496): avc: denied { shutdown } for pid=2456 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.282269][ T31] usb 3-1: device descriptor read/8, error -71 [ 65.391319][ T31] usb usb3-port1: unable to enumerate USB device [ 65.850088][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.063252][ T2500] vcan0: entered promiscuous mode [ 66.068356][ T2500] vcan0: entered allmulticast mode [ 66.092633][ T2500] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 66.536283][ T2512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 66.705579][ T439] usb 1-1: USB disconnect, device number 13 [ 66.762814][ T2514] ------------[ cut here ]------------ [ 66.768329][ T2514] WARNING: CPU: 1 PID: 2514 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 66.777760][ T2514] Modules linked in: [ 66.781711][ T2514] CPU: 1 UID: 0 PID: 2514 Comm: syz.0.680 Not tainted 6.12.38-syzkaller-ge5a17398e40d #0 cff9d6c8e1f79ff946f02ca62e3ab2973be10fb4 [ 66.795106][ T2514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.805190][ T2514] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 66.811082][ T2514] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 66.830783][ T2514] RSP: 0018:ffffc9000fcef5a0 EFLAGS: 00010246 [ 66.836993][ T2514] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 66.845117][ T2514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fcef658 [ 66.853167][ T2514] RBP: ffffc9000fcef6c8 R08: ffffc9000fcef657 R09: 0000000000000000 [ 66.861209][ T2514] R10: ffffc9000fcef640 R11: fffff52001f9decb R12: ffffc9000fcef5e0 [ 66.869189][ T2514] R13: dffffc0000000000 R14: 1ffff92001f9deb8 R15: 0000000000000000 [ 66.877199][ T2514] FS: 00007f2cd401f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.886248][ T2514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.892908][ T2514] CR2: 0000200000004000 CR3: 00000001261e8000 CR4: 00000000003526b0 [ 66.900915][ T2514] Call Trace: [ 66.904281][ T2514] [ 66.907253][ T2514] ? do_syscall_64+0x58/0xf0 [ 66.911876][ T2514] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.917963][ T2514] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.923709][ T2514] ? hashtab_init+0xdb/0x1f0 [ 66.928313][ T2514] ___kmalloc_large_node+0x9c/0x1d0 [ 66.933556][ T2514] ? hashtab_init+0xdb/0x1f0 [ 66.938165][ T2514] __kmalloc_large_node_noprof+0x1e/0xe0 [ 66.943842][ T2514] ? hashtab_init+0xdb/0x1f0 [ 66.948447][ T2514] __kmalloc_noprof+0x26d/0x450 [ 66.953368][ T2514] hashtab_init+0xdb/0x1f0 [ 66.957797][ T2514] ? common_read+0x16d/0x480 [ 66.962597][ T2514] symtab_init+0x44/0x70 [ 66.966858][ T2514] common_read+0x1de/0x480 [ 66.971573][ T2514] ? __cfi_common_read+0x10/0x10 [ 66.977009][ T2514] ? hashtab_init+0x105/0x1f0 [ 66.982147][ T2514] policydb_read+0xaab/0x28c0 [ 66.987284][ T2514] ? kasan_save_alloc_info+0x40/0x50 [ 66.992815][ T2514] ? __cfi_policydb_read+0x10/0x10 [ 66.998068][ T2514] ? security_load_policy+0x128/0x12f0 [ 67.003574][ T2514] security_load_policy+0x162/0x12f0 [ 67.008892][ T2514] ? irqentry_exit+0x4a/0x60 [ 67.013542][ T2514] ? exc_page_fault+0x66/0xc0 [ 67.018266][ T2514] ? asm_exc_page_fault+0x2b/0x30 [ 67.023370][ T2514] ? __cfi_security_load_policy+0x10/0x10 [ 67.029213][ T2514] ? rep_movs_alternative+0x4a/0xa0 [ 67.034487][ T2514] sel_write_load+0x298/0x5e0 [ 67.039191][ T2514] ? futex_wait+0x29a/0x7a0 [ 67.043744][ T2514] ? __cfi_sel_write_load+0x10/0x10 [ 67.048997][ T2514] ? __cfi_futex_wait+0x10/0x10 [ 67.053897][ T2514] ? bpf_lsm_file_permission+0xd/0x20 [ 67.059299][ T2514] ? __cfi_sel_write_load+0x10/0x10 [ 67.064630][ T2514] vfs_write+0x3c0/0xe80 [ 67.068897][ T2514] ? __cfi_vfs_write+0x10/0x10 [ 67.073740][ T2514] ? __kasan_check_write+0x18/0x20 [ 67.078867][ T2514] ? mutex_lock+0x92/0x1c0 [ 67.083305][ T2514] ? __cfi_mutex_lock+0x10/0x10 [ 67.088166][ T2514] ? __fget_files+0x2c5/0x340 [ 67.092866][ T2514] ksys_write+0x141/0x250 [ 67.097211][ T2514] ? __cfi_ksys_write+0x10/0x10 [ 67.102093][ T2514] ? __kasan_check_write+0x18/0x20 [ 67.107217][ T2514] ? fpregs_restore_userregs+0x11d/0x260 [ 67.112916][ T2514] __x64_sys_write+0x7f/0x90 [ 67.117524][ T2514] x64_sys_call+0x271c/0x2ee0 [ 67.122243][ T2514] do_syscall_64+0x58/0xf0 [ 67.126677][ T2514] ? clear_bhb_loop+0x50/0xa0 [ 67.131381][ T2514] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.137284][ T2514] RIP: 0033:0x7f2cd318ebe9 [ 67.141813][ T2514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.161464][ T2514] RSP: 002b:00007f2cd401f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.169914][ T2514] RAX: ffffffffffffffda RBX: 00007f2cd33b5fa0 RCX: 00007f2cd318ebe9 [ 67.178005][ T2514] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000004 [ 67.186050][ T2514] RBP: 00007f2cd3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.194242][ T2514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.202262][ T2514] R13: 00007f2cd33b6038 R14: 00007f2cd33b5fa0 R15: 00007ffe315d2b78 [ 67.210717][ T2514] [ 67.213758][ T2514] ---[ end trace 0000000000000000 ]--- [ 67.219803][ T2514] SELinux: failed to load policy [ 67.861272][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 67.861286][ T1768] Bluetooth: hci0: Opcode 0x1003 failed: -110