last executing test programs: 20.882281749s ago: executing program 2 (id=171): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040110200000000050005000000cc580a"], 0x80}}, 0x24000000) r2 = syz_open_procfs$userns(r0, &(0x7f0000000000)) setns(r2, 0x20000) umount2(&(0x7f0000000040)='.\x00', 0x8) 20.880257099s ago: executing program 2 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) sendto$inet6(r1, &(0x7f0000000080)="65637e710040fb205283778fad47bbd7f87134fba013a8dc4549b7055f90dc3f0d356c9a5eb0d5b46af3eb9df53e9d94b8e740ef07d2eca98bd61ffdfb284ec564f9551a1d4e3f50efa896ff86755948fc1871ff0f2e502fcc780bac", 0x5c, 0x90, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa0000000}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 20.877700289s ago: executing program 2 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd7000ffdbde25200100000000000000000000000000000a0101010000000000000000000000004e2000074e2400000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d26c00000000000000000000000000ffffac1414150000000000000000e805000000000000faffffffffffffff06000000000000000800000000000000000100000000000001000000000000000008000000000000d931a06800000000810000000000000001800000000000007cf000000000000002000000ba0b00000100000029bd700000000000020003f20100000000000000f1cab43bfdd6d29b"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 20.875346109s ago: executing program 2 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e20, @local}}) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1060000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd701affdadf354a0800000c009900ed00000059000000"], 0x20}, 0x1, 0x0, 0x0, 0x6881}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x171) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0xe2c000, 0x2, 0x7fff}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 20.872407659s ago: executing program 2 (id=175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x84}}, 0x4048010) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8808, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) getdents64(r3, &(0x7f0000000380)=""/39, 0x27) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 20.72381741s ago: executing program 2 (id=179): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) syz_open_procfs$userns(0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0xc00, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000484f", @ANYRESHEX=r1, @ANYBLOB="af5d4763537c48d38f64c27258930cad4058ee2d4fbe97a09284911da9dc0514ec772a4000", @ANYRES64=r1, @ANYRESDEC=r1]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 20.67751074s ago: executing program 32 (id=179): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) syz_open_procfs$userns(0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0xc00, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000484f", @ANYRESHEX=r1, @ANYBLOB="af5d4763537c48d38f64c27258930cad4058ee2d4fbe97a09284911da9dc0514ec772a4000", @ANYRES64=r1, @ANYRESDEC=r1]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 9.082396238s ago: executing program 0 (id=211): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) sendfile(r0, r0, 0x0, 0x80000004) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000e40)={0x2, 0x0, @status={[0xffff, 0x2000143, 0xfcf9, 0x2, 0x7, 0x80000001]}, [0x5, 0x10000, 0xffffffffffffffff, 0x40, 0x0, 0x4bce800, 0x6, 0xc90, 0x80000006, 0x8000000000000001, 0x9, 0x4, 0x9, 0x2, 0x8, 0x100, 0x2, 0x4, 0x8, 0x32, 0xffffffffffffffff, 0x5, 0x10, 0x7, 0x6, 0x0, 0x4, 0x6, 0x48, 0x400000, 0x6, 0x1, 0x3ea1, 0x8, 0x69, 0xa5d8, 0x1, 0xcf04, 0x6, 0xfffffffffffffbe0, 0x4, 0x5, 0x9, 0x1, 0xd6e, 0x7fff, 0x8000000000000001, 0x1, 0x8, 0x8, 0x9, 0x1, 0x86, 0x2, 0x9, 0x8000000000000001, 0xf6, 0x8, 0x1, 0x5, 0x5, 0xd2, 0x1dcb]}) 9.081907688s ago: executing program 1 (id=212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x400000403) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, &(0x7f0000000240)={0xf, 0x0, 0x0, 0x0, 0x65}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 9.081445079s ago: executing program 3 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 7.43027398s ago: executing program 0 (id=214): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) read(r0, &(0x7f0000000140)=""/138, 0x8a) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x804c41, 0x0) sendfile(r0, r1, 0x0, 0x45e3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) read(r0, &(0x7f0000000140)=""/138, 0x8a) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x804c41, 0x0) (async) sendfile(r0, r1, 0x0, 0x45e3) (async) 7.42947677s ago: executing program 1 (id=215): stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0xc02, 0x0) pipe(&(0x7f0000000000)={0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={0x0, 0x20}}, 0x4040014) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffffd) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = fcntl$dupfd(r7, 0x406, r10) setsockopt$inet_mtu(r11, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) write$uinput_user_dev(r11, &(0x7f0000000440)={'syz1\x00', {0x1c, 0x4, 0x80, 0x6}, 0x27, [0x1, 0x1, 0x6, 0x1, 0xb, 0x5, 0x80, 0x1000, 0x1, 0x10001, 0x8, 0x10, 0xf2, 0x415, 0xdf, 0x2, 0x70, 0xa, 0x10, 0xe, 0x100, 0x3, 0x800, 0x3, 0x6bc7, 0x0, 0xf46f, 0x6, 0x5, 0x174, 0x3, 0x7, 0x1e7, 0x8, 0x6, 0x7f, 0x755, 0xc, 0x4, 0x1, 0xde, 0x5, 0xa13, 0x5, 0x5, 0xfffff145, 0x9, 0x2, 0x7fffffff, 0x4, 0x200, 0x7, 0xffffffff, 0x80000000, 0x64, 0x9, 0x800, 0x9, 0x4a07aaa9, 0x8, 0x3, 0x9, 0x8, 0x6], [0xb, 0xe98, 0x5, 0x2, 0x101, 0x81, 0x9, 0xf6, 0x4, 0x400, 0x0, 0x2, 0xce, 0x0, 0x5, 0x5, 0x3, 0xfffff7a1, 0xd, 0x1, 0x3, 0x7ff, 0x7497, 0xbdd4, 0xb, 0x0, 0x9, 0x7, 0x9, 0x7ff, 0x5, 0x5, 0xd, 0x4, 0x0, 0x3, 0x1, 0x8, 0x0, 0x2, 0x9, 0x1, 0x7, 0x40, 0x80000000, 0x3, 0x8, 0x0, 0x10001, 0x0, 0x40000, 0x2, 0x10001, 0xffffffff, 0x2, 0x6, 0x389, 0x1, 0x40, 0xee, 0x0, 0x9, 0xc, 0x1000], [0x2, 0x400, 0x7, 0x6, 0x8, 0x9, 0xe7, 0x8e9, 0x4, 0x7fff, 0x1, 0x4, 0x4, 0x3, 0x10001, 0x800, 0x998, 0x9c, 0x7fffffff, 0x3ff, 0x1ff, 0xe9a, 0x1, 0x2, 0xf, 0xc0, 0x1, 0x1b7e7f57, 0xfffffff7, 0x7f, 0x7ff, 0x0, 0x62b8, 0x2, 0xfd18, 0x3, 0x0, 0xcb, 0x0, 0x800, 0x0, 0x3ff, 0x7, 0xe, 0x10000, 0x400, 0xe, 0x0, 0x400082, 0x0, 0xdb, 0xfffffffd, 0xed, 0x1c6db88, 0x10, 0x7, 0x10, 0xfffffe01, 0xffff, 0x6, 0x3, 0x3, 0x9, 0xac9c000], [0x8, 0x7, 0xfff, 0x1000, 0xb, 0x8eb7, 0x2, 0x81, 0x80000001, 0x7, 0x7, 0x8, 0x4, 0x1, 0x7, 0x80000000, 0x5, 0x204, 0x6, 0x4, 0x3, 0x1, 0x0, 0x2, 0x80000000, 0xfffff800, 0x8, 0xfff, 0x7, 0x4, 0xda, 0x7, 0x7fff, 0x8, 0xbb, 0x58, 0x0, 0x6, 0x9, 0x4, 0x9e, 0x4, 0x0, 0xd, 0x7, 0x8, 0x6, 0x7, 0x3, 0x10000, 0x1000, 0x8, 0x5, 0x4, 0x40, 0x8, 0xc76, 0x4a97, 0x0, 0x3ff, 0x182, 0x9, 0x5, 0xf4]}, 0x45c) 7.42903948s ago: executing program 3 (id=216): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)="e5", 0x1}], 0x1}, 0x20008044) setresgid(0x0, 0x0, 0xee01) setfsgid(0xee01) (async) setfsgid(0xee01) socket(0x1e, 0x1, 0x0) (async) r2 = socket(0x1e, 0x1, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) (async) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = inotify_init1(0x400) r5 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x4, 0x33) (async) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x4, 0x33) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="3c04008a00000000ff010000000000000000000000000001200100000000000000f0780000000001"], 0x28) (async) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="3c04008a00000000ff010000000000000000000000000001200100000000000000f0780000000001"], 0x28) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x5f}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x11) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 5.754376251s ago: executing program 0 (id=217): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001180)={'ip6gre0\x00', 0x0, 0x4, 0xf7, 0x2, 0x1, 0x10, @mcast1, @private1, 0xc9efce47e86d0e56, 0x8000, 0x9, 0x6c}}) newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)=@polexpire={0xc0, 0x1b, 0x10, 0x70bd2c, 0x25dfdbff, {{{@in=@broadcast, @in6=@loopback, 0x4e24, 0x7, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x33, r2, r3}, {0x7, 0x0, 0x8, 0xa, 0x8f1, 0x2b74, 0x4, 0x946}, {0x5, 0x5, 0x6, 0x1}, 0x0, 0x6e6bbb, 0x0, 0x0, 0x0, 0x3}, 0x3}}, 0xc0}, 0x1, 0x0, 0x0, 0x20042084}, 0x800) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000001040)=0x2, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) socket$tipc(0x1e, 0x5, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x7ffff000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb000d6d0000000fc011fffc010000000000"], 0xffa) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r8, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x30, 0x9, 0xf) 5.747858821s ago: executing program 1 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000900)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000000940)="74739b5832d9f06f8d760a", 0xb}], 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r5 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 5.735064341s ago: executing program 3 (id=219): socket(0xa, 0x2, 0x0) (async) syz_usb_connect$uac1(0x2, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x29, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x37f, 0x5}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0xad, "38f80edf7a40"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x84, 0x6, 0xff, {0x7, 0x25, 0x1, 0x82, 0xf, 0x560a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfb, 0xfa, 0x4, {0x7, 0x25, 0x1, 0x82, 0x4, 0x3}}}}}}}]}}, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.943179973s ago: executing program 0 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 3.942781943s ago: executing program 1 (id=221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003e00)={0x2000000, [{0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x672, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) timerfd_create(0x8, 0x80800) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x48, 0x0, &(0x7f0000000100)=[@enter_looper, @request_death, @dead_binder_done, @acquire_done, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3.941482813s ago: executing program 3 (id=222): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0xffffffffffffffbe, 0x0}, 0x10142) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 1.974188346s ago: executing program 0 (id=223): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x8001, 0x1, 0x1, 0x8000000000000000, 0x0}) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x14, 0x5}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000015c0)=ANY=[@ANYBLOB='trylock i'], 0xf) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x28) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000140)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xffffffff, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) sendfile(r0, r0, 0x0, 0x1000007fd) 1.973289357s ago: executing program 1 (id=224): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x2, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x5e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @timestamp], 0x3) getpeername(r1, &(0x7f0000000040)=@xdp, &(0x7f0000000200)=0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x64, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @auto=[0x37, 0x5c, 0x64, 0x62, 0x39, 0x30, 0x33, 0x32, 0x38, 0x30, 0x64, 0x38, 0x64, 0x39, 0x33, 0x35]}, &(0x7f00000001c0)={0x0, "c573911be280f7d0948f9694c4ea794f8e7facc11d2c654d4fa0d2d7b726374dcaeea992147fd5c8e2d447952547a3e32c9e8e2f491ce469a382227529a855db", 0x1e}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x9) mprotect(&(0x7f00002cc000/0x1000)=nil, 0x1000, 0x3000003) r7 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r7, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c) fchdir(r6) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r9, &(0x7f0000000340)=""/71, 0x49) rmdir(&(0x7f00000002c0)='./control\x00') 1.972719646s ago: executing program 3 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8000000}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000380)={0xf, 0x0, [{0x102, 0x0, 0x3}, {0x9, 0x0, 0x8001}, {0x5, 0x0, 0x68}, {0x936, 0x0, 0x7}, {0x0, 0x0, 0x5}, {0x80, 0x0, 0xc}, {0x2, 0x0, 0xffffffff}, {0x146, 0x0, 0x2}, {0x100, 0x0, 0x2}, {0x3, 0x0, 0x200}, {0x2, 0x0, 0x2}, {0xe, 0x0, 0x3}, {0x3, 0x0, 0x8}, {0x9, 0x0, 0x1}, {0xc, 0x0, 0x3}, {0x5, 0x0, 0x200}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r6 = dup(r5) write$cgroup_subtree(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001280)='4O\a\xd6\x8f\xf0Yo\xb9F\xf3SX\x94\x19\xa8\xdc\xe4\xbf\xf0\x8ec\x1a\xd6h\x1e\xd9\xfe=\x18*\x19C1\xa0\xe9h\xb0\xce^j+\x160\x00\xf7t\x02\xcd2s\xaa\x98/V}\x01\xa1\xe9\xa9\xddJ~Db\xb7+%\xe7\x9d\xd5\xdbj;\xba\x16\xc3\xb3=\x1df9\x87\xd9u\xf0\xa3m\xad\xf2\xd5\xe8m\xc2\x8en\xadt\x8aZh(\x91\xb6dY\xdf\xc4S9\x89\x84\x82\xb4eR\xc9j\x95\xea\xf2\x9d\xcbI\xffI\xdb\x86\xca\x8b3`l9d', 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) r9 = socket$inet(0x2, 0x800, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) sendto$inet(r9, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000001140)='posixacl\x00', 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000001180)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090277000201fde0050904000001020d00000b240600010a710bfa9dd3fe230007000d240f010f000000fbff00000206241a2300120524010610062407c70300052401030205241500000905810308000701070904011020000000000000800102020d0000090582020004087f10090503022000066807"], &(0x7f0000001380)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x369, 0x0, 0x6, 0x5, 0xff, 0x8f}, 0x54, &(0x7f00000013c0)=ANY=[@ANYBLOB="050f540006141004065e5034bdf35242cfcde384128541eee080ad0a4fbee90cfb75b914100a0282000e8c8324dc00000000419b000000003f00ff000a1003020c00000603000a1003020900180601000c100a0620af050000f0130007100208900d00"]}) io_setup(0x7, &(0x7f0000000080)) 4.83429ms ago: executing program 0 (id=226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = userfaultfd(0x801) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) r2 = dup(0xffffffffffffffff) (async) chmod(0x0, 0x1d0) (async) creat(0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x158, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6ddc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe72}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9670}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40001}, 0xc0) 2.43705ms ago: executing program 1 (id=227): clock_adjtime(0x0, &(0x7f00000009c0)={0xfffffffffffffffb, 0xcd6, 0x2, 0x0, 0x40, 0x5, 0x3, 0x10, 0x3ff80, 0x4, 0x7fffffff, 0x4, 0x9, 0x10000, 0xfffffffffffffff7, 0x8, 0x0, 0x5, 0x2, 0x8000000000000004, 0x1, 0xffffffffffff0000, 0x8, 0x7, 0x38, 0x10001}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0]) 0s ago: executing program 3 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x8, 0x4, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x8, 0x7b, 0x0, @local, @multicast1, {[@cipso={0x86, 0x17, 0x0, [{0x5, 0xb, "a4ff5bb1a63e88408d"}, {0x6, 0x6, "452271f4"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') (async, rerun: 32) preadv(r0, &(0x7f0000000180), 0x0, 0x7, 0x6) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) unlink(&(0x7f0000000000)='./file1\x00') syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="f20f5c4a0d66b8010000000f01d90f0966b8007800000f23d00f21f86635300000090f23f867670fc79a00000000f08010cc2e0fda9c5ac5ba4100ecbaf80c66b8e24b3b8966efbafc0cec660f3a4198fa3f00", 0x53}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 22.171427][ T36] audit: type=1400 audit(1762257276.380:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.172543][ T282] cgroup: Unknown subsys name 'net' [ 22.194358][ T36] audit: type=1400 audit(1762257276.380:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.221803][ T36] audit: type=1400 audit(1762257276.410:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.221972][ T282] cgroup: Unknown subsys name 'devices' [ 22.426432][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.432149][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.523976][ T36] audit: type=1400 audit(1762257276.730:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.547588][ T36] audit: type=1400 audit(1762257276.730:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.572566][ T36] audit: type=1400 audit(1762257276.740:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.581076][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.604993][ T36] audit: type=1400 audit(1762257276.820:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.631359][ T36] audit: type=1400 audit(1762257276.820:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.666466][ T36] audit: type=1400 audit(1762257276.880:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.692162][ T36] audit: type=1400 audit(1762257276.880:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.692445][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.120356][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.127499][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.134610][ T289] bridge_slave_0: entered allmulticast mode [ 24.140802][ T289] bridge_slave_0: entered promiscuous mode [ 24.148377][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.155569][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.162654][ T289] bridge_slave_1: entered allmulticast mode [ 24.168929][ T289] bridge_slave_1: entered promiscuous mode [ 24.194032][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.201107][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.208306][ T292] bridge_slave_0: entered allmulticast mode [ 24.214736][ T292] bridge_slave_0: entered promiscuous mode [ 24.230437][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.237514][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.244759][ T292] bridge_slave_1: entered allmulticast mode [ 24.251010][ T292] bridge_slave_1: entered promiscuous mode [ 24.289629][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.296701][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.303745][ T290] bridge_slave_0: entered allmulticast mode [ 24.310140][ T290] bridge_slave_0: entered promiscuous mode [ 24.316562][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.323663][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330791][ T290] bridge_slave_1: entered allmulticast mode [ 24.337151][ T290] bridge_slave_1: entered promiscuous mode [ 24.361263][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.368334][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.375562][ T291] bridge_slave_0: entered allmulticast mode [ 24.381701][ T291] bridge_slave_0: entered promiscuous mode [ 24.395836][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.402969][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.410464][ T291] bridge_slave_1: entered allmulticast mode [ 24.416708][ T291] bridge_slave_1: entered promiscuous mode [ 24.524958][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.532009][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.539311][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546341][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.573089][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.580161][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.587526][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.594563][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.611556][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.618911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.627083][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.634437][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.656347][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.663472][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.671159][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.678215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.730717][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.737791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.745420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.752460][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.763814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.770977][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.782954][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.798087][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.805128][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.813836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.820886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.833477][ T289] veth0_vlan: entered promiscuous mode [ 24.859453][ T289] veth1_macvtap: entered promiscuous mode [ 24.872315][ T290] veth0_vlan: entered promiscuous mode [ 24.891532][ T290] veth1_macvtap: entered promiscuous mode [ 24.910110][ T291] veth0_vlan: entered promiscuous mode [ 24.926852][ T292] veth0_vlan: entered promiscuous mode [ 24.954887][ T291] veth1_macvtap: entered promiscuous mode [ 24.961955][ T292] veth1_macvtap: entered promiscuous mode [ 24.968640][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.027616][ T335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.061391][ T335] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 25.065503][ T343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.067166][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.106499][ T348] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.163193][ T357] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.8'. [ 25.173784][ T357] netlink: 980 bytes leftover after parsing attributes in process `syz.0.8'. [ 25.216335][ T364] usb usb7: usbfs: process 364 (syz.2.11) did not claim interface 0 before use [ 25.219250][ T366] ======================================================= [ 25.219250][ T366] WARNING: The mand mount option has been deprecated and [ 25.219250][ T366] and is ignored by this kernel. Remove the mand [ 25.219250][ T366] option from the mount to silence this warning. [ 25.219250][ T366] ======================================================= [ 25.227153][ T364] 9pnet_fd: Insufficient options for proto=fd [ 25.418715][ T373] Zero length message leads to an empty skb [ 25.460848][ T383] rust_binder: Read failure Err(EAGAIN) in pid:16 [ 25.524241][ T330] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 25.549215][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.574318][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.684242][ T330] usb 4-1: device descriptor read/64, error -71 [ 25.684242][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.744221][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 25.750569][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 25.764444][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 25.773924][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 25.783403][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.793388][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 25.803381][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.818355][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 25.824367][ T31] usb 2-1: device descriptor read/64, error -71 [ 25.827781][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.848795][ T9] usb 3-1: config 0 descriptor?? [ 25.954264][ T330] usb 4-1: device descriptor read/64, error -71 [ 26.062784][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 26.084437][ T31] usb 2-1: device descriptor read/64, error -71 [ 26.091194][ T9] usb 3-1: USB disconnect, device number 2 [ 26.100298][ T9] usblp0: removed [ 26.216401][ T330] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 26.324327][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.354277][ T330] usb 4-1: device descriptor read/64, error -71 [ 26.464226][ T31] usb 2-1: device descriptor read/64, error -71 [ 26.554281][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.594382][ T330] usb 4-1: device descriptor read/64, error -71 [ 26.704240][ T31] usb 2-1: device descriptor read/64, error -71 [ 26.704240][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 26.704468][ T330] usb usb4-port1: attempt power cycle [ 26.723232][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 26.732063][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 26.740992][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 26.750222][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.764750][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.777956][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.796411][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 26.805939][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.814592][ T31] usb usb2-port1: attempt power cycle [ 26.814755][ T9] usb 3-1: config 0 descriptor?? [ 27.033025][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 27.064429][ T330] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 27.085313][ T330] usb 4-1: device descriptor read/8, error -71 [ 27.164214][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 27.205724][ T31] usb 2-1: device descriptor read/8, error -71 [ 27.215378][ T330] usb 4-1: device descriptor read/8, error -71 [ 27.335555][ T31] usb 2-1: device descriptor read/8, error -71 [ 27.381352][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 27.381368][ T36] audit: type=1400 audit(1762257281.590:154): avc: denied { read write } for pid=372 comm="syz.2.15" name="lp0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.424561][ T9] usb 3-1: USB disconnect, device number 3 [ 27.433254][ T9] usblp0: removed [ 27.443003][ T36] audit: type=1400 audit(1762257281.590:155): avc: denied { open } for pid=372 comm="syz.2.15" path="/dev/usb/lp0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 27.475121][ T330] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 27.495261][ T330] usb 4-1: device descriptor read/8, error -71 [ 27.574225][ T388] Bluetooth: hci0: command 0x1003 tx timeout [ 27.574232][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.586476][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 27.615381][ T31] usb 2-1: device descriptor read/8, error -71 [ 27.625516][ T330] usb 4-1: device descriptor read/8, error -71 [ 27.734325][ T330] usb usb4-port1: unable to enumerate USB device [ 27.745322][ T31] usb 2-1: device descriptor read/8, error -71 [ 27.844238][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.854318][ T31] usb usb2-port1: unable to enumerate USB device [ 27.995283][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.009139][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.018240][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.026247][ T9] usb 1-1: SerialNumber: syz [ 28.133178][ T396] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 28.232930][ T36] audit: type=1400 audit(1762257282.440:156): avc: denied { getattr } for pid=393 comm="syz.0.20" name="KEY" dev="sockfs" ino=4137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.233431][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.271710][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.293689][ T36] audit: type=1400 audit(1762257282.500:157): avc: denied { read write } for pid=399 comm="syz.3.23" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.294721][ T400] __vm_enough_memory: pid: 400, comm: syz.3.23, bytes: 18014402804453376 not enough memory for the allocation [ 28.318979][ T36] audit: type=1400 audit(1762257282.500:158): avc: denied { open } for pid=399 comm="syz.3.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.354118][ T36] audit: type=1400 audit(1762257282.500:159): avc: denied { ioctl } for pid=399 comm="syz.3.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.387541][ T36] audit: type=1400 audit(1762257282.510:160): avc: denied { map } for pid=399 comm="syz.3.23" path="/newroot/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.444217][ T389] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.481512][ T394] __vm_enough_memory: pid: 394, comm: syz.0.20, bytes: 21200224157696 not enough memory for the allocation [ 28.494519][ T394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20'. [ 28.512379][ T394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.522828][ T394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.543280][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 28.558405][ T9] usb 1-1: USB disconnect, device number 2 [ 28.575723][ T36] audit: type=1400 audit(1762257282.790:161): avc: denied { create } for pid=411 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.588414][ T31] hid (null): global environment stack underflow [ 28.602588][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 28.608010][ T31] hid (null): unknown global tag 0xe [ 28.613648][ T31] hid (null): unknown global tag 0xc0 [ 28.619692][ T389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.620805][ T36] audit: type=1400 audit(1762257282.790:162): avc: denied { accept } for pid=411 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.630174][ T31] hid (null): invalid report_count 33630 [ 28.655014][ T391] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 28.664304][ T389] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.680905][ T389] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 28.684246][ T36] audit: type=1400 audit(1762257282.800:163): avc: denied { read write } for pid=415 comm="syz.0.27" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.690403][ T389] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 28.722519][ T31] hid-generic 0FFF:0007:0007.0001: unknown main item tag 0xe [ 28.730221][ T31] hid-generic 0FFF:0007:0007.0001: global environment stack underflow [ 28.739012][ T31] hid-generic 0FFF:0007:0007.0001: item 0 4 1 11 parsing failed [ 28.747586][ T31] hid-generic 0FFF:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 28.757266][ T389] usb 3-1: Product: syz [ 28.761461][ T389] usb 3-1: Manufacturer: syz [ 28.781713][ T389] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 28.806028][ T391] usb 4-1: device descriptor read/64, error -71 [ 28.959929][ T423] rust_binder: Error while translating object. [ 28.959977][ T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 28.966276][ T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16 [ 28.990352][ T330] usb 3-1: USB disconnect, device number 4 [ 29.044288][ T391] usb 4-1: device descriptor read/64, error -71 [ 29.064246][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.214214][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 29.220515][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.228545][ T9] usb 1-1: config 0 has no interface number 0 [ 29.234662][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.245620][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.255394][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 29.264488][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.273165][ T9] usb 1-1: config 0 descriptor?? [ 29.284296][ T391] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 29.324272][ T389] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 29.414217][ T391] usb 4-1: device descriptor read/64, error -71 [ 29.475356][ T389] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 29.483740][ T389] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 29.494311][ T389] usb 2-1: config 8 has no interface number 0 [ 29.500482][ T389] usb 2-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 29.517650][ T389] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 29.526860][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.537227][ T389] usb 2-1: Product: syz [ 29.541851][ T389] usb 2-1: Manufacturer: syz [ 29.555155][ T389] usb 2-1: SerialNumber: syz [ 29.561886][ T9] usbhid 1-1:0.1: can't add hid device: -71 [ 29.568125][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 29.576881][ T438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35'. [ 29.586832][ T9] usb 1-1: USB disconnect, device number 3 [ 29.684259][ T391] usb 4-1: device descriptor read/64, error -71 [ 29.692614][ T452] usb usb8: usbfs: process 452 (syz.0.39) did not claim interface 0 before use [ 29.769201][ T9] usb 2-1: USB disconnect, device number 6 [ 29.794366][ T391] usb usb4-port1: attempt power cycle [ 29.924285][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.075417][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.086722][ T330] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 30.095833][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.104384][ T330] usb 3-1: config 0 descriptor?? [ 30.134830][ T391] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 30.155444][ T391] usb 4-1: device descriptor read/8, error -71 [ 30.280277][ T455] rust_binder: Write failure EINVAL in pid:30 [ 30.287585][ T391] usb 4-1: device descriptor read/8, error -71 [ 30.376647][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.512024][ T330] zeroplus 0003:0C12:0005.0002: item fetching failed at offset 0/3 [ 30.520239][ T330] zeroplus 0003:0C12:0005.0002: parse failed [ 30.526519][ T330] zeroplus 0003:0C12:0005.0002: probe with driver zeroplus failed with error -22 [ 30.544500][ T391] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 30.565371][ T391] usb 4-1: device descriptor read/8, error -71 [ 30.651498][ T462] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 30.659799][ T462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.659826][ T462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 30.670513][ T462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 30.705226][ T391] usb 4-1: device descriptor read/8, error -71 [ 30.712694][ T450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.38'. [ 30.722953][ T466] rust_binder: 52: no such ref 0 [ 30.746994][ T468] input input4: cannot allocate more than FF_MAX_EFFECTS effects [ 30.777409][ T330] usb 3-1: USB disconnect, device number 5 [ 30.814856][ T391] usb usb4-port1: unable to enumerate USB device [ 30.974203][ T474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.49'. [ 30.983695][ T474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 30.996339][ T476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64118 sclass=netlink_route_socket pid=476 comm=syz.0.50 [ 31.043518][ T480] rust_binder: Write failure EFAULT in pid:66 [ 31.185879][ T487] rust_binder: 72: no such ref 3 [ 31.197009][ T487] rust_binder: inc_ref_done called when no active inc_refs [ 31.197030][ T487] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 31.211363][ T487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 31.214218][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.232577][ T492] mmap: syz.0.56 (492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.375957][ T505] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 31.412951][ T511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.421538][ T511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 31.453646][ T518] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 31.471066][ T518] rust_binder: Write failure EINVAL in pid:38 [ 31.559454][ T527] process 'syz.2.68' launched './file0' with NULL argv: empty string added [ 31.574419][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.725499][ T9] usb 1-1: config 0 has no interfaces? [ 31.731077][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 31.740453][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.749036][ T9] usb 1-1: config 0 descriptor?? [ 31.814253][ T330] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 31.956718][ T9] usb 1-1: USB disconnect, device number 4 [ 31.964235][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 31.971059][ T330] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 31.979514][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.989630][ T330] usb 4-1: config 0 has no interface number 0 [ 31.995895][ T330] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.008972][ T330] usb 4-1: config 0 interface 200 has no altsetting 0 [ 32.017548][ T330] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 32.026656][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.034747][ T330] usb 4-1: Product: syz [ 32.038908][ T330] usb 4-1: Manufacturer: syz [ 32.043574][ T330] usb 4-1: SerialNumber: syz [ 32.049306][ T330] usb 4-1: config 0 descriptor?? [ 32.255797][ T522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.255830][ T522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 32.267462][ T330] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 32.285145][ T330] usb 4-1: USB disconnect, device number 10 [ 32.336446][ T532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 32.454226][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.454920][ T388] Bluetooth: hci0: command 0x1003 tx timeout [ 32.597797][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.648932][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 32.659408][ T554] rust_binder: Error while translating object. [ 32.659439][ T554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.665998][ T554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 32.676112][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 32.676128][ T554] SELinux: Context system_u:object_r:auditd_log_t:s0 is not valid (left unmapped). [ 32.676128][ T36] audit: type=1400 audit(1762257286.890:250): avc: denied { relabelfrom } for pid=553 comm="syz.0.75" name="NETLINK" dev="sockfs" ino=4810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 32.724895][ T36] audit: type=1400 audit(1762257286.940:251): avc: denied { relabelto } for pid=553 comm="syz.0.75" name="NETLINK" dev="sockfs" ino=4810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 32.726175][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 32.754429][ T555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.774201][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 32.792819][ T560] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 32.805618][ T560] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 32.814821][ T560] rust_binder: Write failure EINVAL in pid:21 [ 32.815408][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.849823][ T9] usb 3-1: config 0 has no interface number 0 [ 32.856287][ T36] audit: type=1400 audit(1762257287.080:252): avc: denied { append } for pid=565 comm="syz.0.78" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.880432][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 32.892769][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.908745][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.919838][ T9] usb 3-1: Product: syz [ 32.922558][ T570] rust_binder: Write failure EFAULT in pid:28 [ 32.924119][ T9] usb 3-1: Manufacturer: syz [ 32.924139][ T9] usb 3-1: SerialNumber: syz [ 32.935053][ T566] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 32.944014][ T9] usb 3-1: config 0 descriptor?? [ 32.954610][ T9] smsc75xx v1.0.0 [ 32.961977][ T566] rust_binder: 566 RLIMIT_NICE not set [ 32.983394][ T575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.988984][ T575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 33.018478][ T36] audit: type=1400 audit(1762257287.230:253): avc: denied { connect } for pid=576 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.128795][ T36] audit: type=1400 audit(1762257287.340:254): avc: denied { remount } for pid=584 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.156700][ T587] rust_binder: Error while translating object. [ 33.156770][ T587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.162991][ T587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 33.186491][ T590] netlink: 'syz.0.87': attribute type 16 has an invalid length. [ 33.205685][ T590] netlink: 'syz.0.87': attribute type 3 has an invalid length. [ 33.213585][ T590] netlink: 64054 bytes leftover after parsing attributes in process `syz.0.87'. [ 33.229016][ T36] audit: type=1400 audit(1762257287.440:255): avc: denied { ioctl } for pid=591 comm="syz.3.88" path="socket:[4995]" dev="sockfs" ino=4995 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.255506][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.255539][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 33.271228][ T36] audit: type=1400 audit(1762257287.470:256): avc: denied { mounton } for pid=591 comm="syz.3.88" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.314526][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 33.316667][ T598] rust_binder: Write failure EINVAL in pid:105 [ 33.334206][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 33.360551][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 33.372859][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 33.401818][ T9] usb 3-1: USB disconnect, device number 6 [ 33.401920][ T36] audit: type=1400 audit(1762257287.610:257): avc: denied { setopt } for pid=595 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.438900][ T36] audit: type=1400 audit(1762257287.650:258): avc: denied { bind } for pid=595 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.459530][ T603] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 33.459552][ T603] rust_binder: Error while translating object. [ 33.468717][ T603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.475057][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 33.485595][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.509798][ T608] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 33.524810][ T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 33.528210][ T608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.537905][ T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 33.562200][ T36] audit: type=1400 audit(1762257287.770:259): avc: denied { listen } for pid=611 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 33.612143][ T622] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 33.619576][ T622] rust_binder: Write failure EINVAL in pid:52 [ 33.631556][ T615] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 33.736459][ T633] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.736996][ T635] binder: Unknown parameter 'ÌF‡èoôñ5!ÙŽBA±S¹è·ÃD› ' [ 33.750975][ T633] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 33.764382][ T633] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.773366][ T633] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 33.909952][ T657] rust_binder: Write failure EINVAL in pid:65 [ 33.922497][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.929082][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.941330][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.948247][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.975374][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.983378][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.993984][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.001332][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.041583][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.085834][ T673] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 34.135533][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.135563][ T661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.187587][ T687] futex_wake_op: syz.1.118 tries to shift op by 144; fix this program [ 34.198524][ T687] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.205763][ T687] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.217001][ T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 34.294252][ T389] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.294799][ T707] rust_binder: Write failure EFAULT in pid:87 [ 34.329238][ T711] rust_binder: Write failure EINVAL in pid:89 [ 34.345854][ T714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.352338][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 34.455406][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.475478][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.485942][ T389] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.495015][ T389] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 34.503021][ T389] usb 3-1: Manufacturer: syz [ 34.508323][ T389] usb 3-1: config 0 descriptor?? [ 34.544757][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.604252][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 34.689488][ T721] binder: Binderfs stats mode cannot be changed during a remount [ 34.707260][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.719735][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 34.720933][ T723] rust_binder: inc_ref_done called when no active inc_refs [ 34.729180][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.746657][ T31] usb 2-1: config 0 descriptor?? [ 34.766454][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.777694][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.787841][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 34.797016][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.805717][ T10] usb 4-1: config 0 descriptor?? [ 34.885189][ T730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.885215][ T730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.016906][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 35.029925][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.042833][ T10] usb 4-1: USB disconnect, device number 11 [ 35.158206][ T31] logitech 0003:046D:C50C.0004: hidraw0: USB HID v1.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 35.346740][ T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.355938][ T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.366153][ T31] usb 2-1: USB disconnect, device number 7 [ 35.419250][ T671] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 35.499071][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.517779][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.575815][ T754] syz.0.139 (754): attempted to duplicate a private mapping with mremap. This is not supported. [ 36.584210][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.684224][ T31] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 36.744193][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 36.846456][ T31] usb 2-1: No LPM exit latency info found, disabling LPM. [ 36.860620][ T31] usb 2-1: config 0 has an invalid interface number: 233 but max is 3 [ 36.879134][ T31] usb 2-1: config 0 has an invalid interface number: 228 but max is 3 [ 36.897681][ T31] usb 2-1: config 0 has an invalid interface number: 6 but max is 3 [ 36.922634][ T31] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 36.934838][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.953461][ T31] usb 2-1: config 0 has an invalid interface number: 198 but max is 3 [ 36.955741][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 36.969312][ T31] usb 2-1: config 0 has no interface number 0 [ 36.989638][ T10] usb 4-1: can't read configurations, error -71 [ 36.996040][ T31] usb 2-1: config 0 has no interface number 1 [ 37.002141][ T31] usb 2-1: config 0 has no interface number 2 [ 37.024646][ T31] usb 2-1: config 0 has no interface number 3 [ 37.046727][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x9 has invalid maxpacket 1040, setting to 8 [ 37.064207][ T389] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 37.083342][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0xD has invalid maxpacket 64, setting to 0 [ 37.094141][ T389] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 37.102252][ T389] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 37.114191][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 37.134194][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 37.145157][ T389] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 37.152657][ T389] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 37.164193][ T31] usb 2-1: config 0 interface 233 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 37.176461][ T389] usb 3-1: USB disconnect, device number 7 [ 37.183375][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 37.194274][ T31] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 37.207288][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 37.218237][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 37.229081][ T31] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 37.239834][ T31] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 37.250755][ T31] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 37.261618][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 37.272390][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 37.283675][ T31] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 37.294626][ T31] usb 2-1: too many endpoints for config 0 interface 6 altsetting 121: 212, using maximum allowed: 30 [ 37.305658][ T31] usb 2-1: config 0 interface 6 altsetting 121 has a duplicate endpoint with address 0xB, skipping [ 37.316495][ T31] usb 2-1: config 0 interface 6 altsetting 121 has 1 endpoint descriptor, different from the interface descriptor's value: 212 [ 37.329907][ T31] usb 2-1: config 0 interface 198 altsetting 6 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 37.341737][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 37.358462][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 37.369668][ T31] usb 2-1: config 0 interface 198 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 37.381026][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 37.392147][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 37.403078][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 37.413996][ T31] usb 2-1: config 0 interface 198 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 37.425420][ T31] usb 2-1: config 0 interface 198 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 37.436573][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 37.447604][ T31] usb 2-1: config 0 interface 198 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 37.459892][ T31] usb 2-1: config 0 interface 198 altsetting 6 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 37.470812][ T31] usb 2-1: config 0 interface 198 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 37.481925][ T31] usb 2-1: config 0 interface 198 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 37.493229][ T31] usb 2-1: config 0 interface 228 has no altsetting 0 [ 37.507242][ T31] usb 2-1: config 0 interface 6 has no altsetting 0 [ 37.515655][ T31] usb 2-1: config 0 interface 198 has no altsetting 0 [ 37.524745][ T31] usb 2-1: string descriptor 0 read error: -71 [ 37.531022][ T31] usb 2-1: Dual-Role OTG device on HNP port [ 37.537496][ T31] usb 2-1: can't set HNP mode: -71 [ 37.598411][ T830] sock: sock_set_timeout: `syz.0.162' (pid 830) tries to set negative timeout [ 37.895853][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 37.895869][ T36] audit: type=1400 audit(1762257292.110:366): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 37.926384][ T36] audit: type=1400 audit(1762257292.110:367): avc: denied { mounton } for pid=843 comm="syz.3.167" path="/43/bus" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 37.948560][ T36] audit: type=1400 audit(1762257292.110:368): avc: denied { read write } for pid=843 comm="syz.3.167" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 37.971789][ T36] audit: type=1400 audit(1762257292.110:369): avc: denied { read } for pid=843 comm="syz.3.167" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 37.993687][ T36] audit: type=1400 audit(1762257292.110:370): avc: denied { create } for pid=843 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 38.013889][ T36] audit: type=1400 audit(1762257292.110:371): avc: denied { read } for pid=843 comm="syz.3.167" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 38.036650][ T36] audit: type=1400 audit(1762257292.110:372): avc: denied { create } for pid=843 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 38.056345][ T36] audit: type=1400 audit(1762257292.110:373): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.080432][ T36] audit: type=1326 audit(1762257292.110:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=845 comm="syz.3.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61ebd8f6c9 code=0x0 [ 38.103231][ T36] audit: type=1400 audit(1762257292.110:375): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.146090][ T12] bridge_slave_1: left allmulticast mode [ 38.152033][ T12] bridge_slave_1: left promiscuous mode [ 38.158133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.171977][ T12] bridge_slave_0: left allmulticast mode [ 38.177716][ T12] bridge_slave_0: left promiscuous mode [ 38.183374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.296300][ T12] veth1_macvtap: left promiscuous mode [ 38.301841][ T12] veth0_vlan: left promiscuous mode [ 43.211633][ T36] kauditd_printk_skb: 123 callbacks suppressed [ 43.211649][ T36] audit: type=1400 audit(1762257297.420:499): avc: denied { execmem } for pid=920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 43.248046][ T36] audit: type=1400 audit(1762257297.430:500): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 43.268160][ T36] audit: type=1400 audit(1762257297.430:501): avc: denied { create } for pid=922 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 43.287594][ T36] audit: type=1400 audit(1762257297.430:502): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 43.307639][ T36] audit: type=1400 audit(1762257297.430:503): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 43.327861][ T36] audit: type=1400 audit(1762257297.430:504): avc: denied { read write } for pid=922 comm="syz.1.195" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 43.350723][ T36] audit: type=1400 audit(1762257297.430:505): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 43.370950][ T36] audit: type=1400 audit(1762257297.430:506): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 43.391237][ T36] audit: type=1400 audit(1762257297.430:507): avc: denied { create } for pid=921 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 43.411495][ T36] audit: type=1400 audit(1762257297.430:508): avc: denied { read } for pid=922 comm="syz.1.195" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 44.363652][ T939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 44.372898][ T940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=940 comm=syz.1.200 [ 48.289735][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 48.289751][ T36] audit: type=1400 audit(1762257302.500:605): avc: denied { execmem } for pid=964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 48.315224][ T36] audit: type=1400 audit(1762257302.500:606): avc: denied { read } for pid=968 comm="syz.1.209" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 48.337859][ T36] audit: type=1400 audit(1762257302.500:607): avc: denied { read } for pid=968 comm="syz.1.209" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 48.360366][ T36] audit: type=1400 audit(1762257302.500:608): avc: denied { read } for pid=968 comm="syz.1.209" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 48.382730][ T36] audit: type=1400 audit(1762257302.500:609): avc: denied { read write } for pid=968 comm="syz.1.209" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 48.405947][ T36] audit: type=1400 audit(1762257302.520:610): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.429849][ T36] audit: type=1400 audit(1762257302.520:611): avc: denied { create } for pid=965 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 48.449158][ T36] audit: type=1400 audit(1762257302.520:612): avc: denied { mounton } for pid=965 comm="syz.0.208" path="/75/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 48.471335][ T36] audit: type=1400 audit(1762257302.520:613): avc: denied { relabelfrom } for pid=966 comm="syz.3.210" name="NETLINK" dev="sockfs" ino=6037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0 [ 48.495121][ T36] audit: type=1400 audit(1762257302.520:614): avc: denied { read } for pid=966 comm="syz.3.210" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 53.633798][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 53.633814][ T36] audit: type=1400 audit(1762257307.840:660): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.935886][ T36] audit: type=1400 audit(1762257309.150:661): avc: denied { execmem } for pid=1005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 54.955265][ T388] Bluetooth: hci0: sending frame failed (-49) [ 54.957066][ T36] audit: type=1400 audit(1762257309.150:662): avc: denied { read } for pid=1007 comm="syz.1.221" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 54.968097][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 54.984785][ T36] audit: type=1400 audit(1762257309.150:663): avc: denied { read } for pid=1007 comm="syz.1.221" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 55.012827][ T36] audit: type=1400 audit(1762257309.150:664): avc: denied { read } for pid=1007 comm="syz.1.221" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 55.034372][ T36] audit: type=1400 audit(1762257309.150:665): avc: denied { wake_alarm } for pid=1007 comm="syz.1.221" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 55.055421][ T36] audit: type=1400 audit(1762257309.170:666): avc: denied { read } for pid=1006 comm="syz.0.220" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 55.077955][ T36] audit: type=1400 audit(1762257309.200:667): avc: denied { read write } for pid=1008 comm="syz.3.222" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 55.101124][ T36] audit: type=1400 audit(1762257309.230:668): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 55.125187][ T36] audit: type=1400 audit(1762257309.230:669): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.863478][ T1015] netlink: 96 bytes leftover after parsing attributes in process `syz.0.223'. [ 58.882238][ T1025] audit_log_start: 18 callbacks suppressed [ 58.882254][ T1025] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.886751][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.888475][ T1026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.895826][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.901441][ T36] audit: type=1400 audit(1762257313.090:688): avc: denied { read write } for pid=1023 comm="syz.3.228" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.907982][ T282] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 58.914465][ T1025] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 58.938329][ T290] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 58.945288][ T36] audit: type=1400 audit(1762257313.090:689): avc: denied { read write } for pid=1023 comm="syz.3.228" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.953278][ T290] audit: backlog limit exceeded [ 59.098939][ T12] bridge_slave_1: left allmulticast mode [ 59.105001][ T12] bridge_slave_1: left promiscuous mode [ 59.110610][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.118122][ T12] bridge_slave_0: left allmulticast mode [ 59.123870][ T12] bridge_slave_0: left promiscuous mode [ 59.129773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.246216][ T12] veth1_macvtap: left promiscuous mode [ 59.251736][ T12] veth0_vlan: left promiscuous mode [ 59.527842][ T12] bridge_slave_1: left allmulticast mode [ 59.533495][ T12] bridge_slave_1: left promiscuous mode [ 59.539234][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.546710][ T12] bridge_slave_0: left allmulticast mode [ 59.552344][ T12] bridge_slave_0: left promiscuous mode [ 59.557970][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.565680][ T12] bridge_slave_1: left allmulticast mode [ 59.571347][ T12] bridge_slave_1: left promiscuous mode [ 59.577031][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.584553][ T12] bridge_slave_0: left allmulticast mode [ 59.590258][ T12] bridge_slave_0: left promiscuous mode [ 59.595952][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.777697][ T12] veth1_macvtap: left promiscuous mode [ 59.783376][ T12] veth0_vlan: left promiscuous mode [ 59.789080][ T12] veth1_macvtap: left promiscuous mode [ 59.794618][ T12] veth0_vlan: left promiscuous mode