last executing test programs: 3.750480207s ago: executing program 1 (id=428): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r0, 0x408) (async) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xc0000000}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2000, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.731181167s ago: executing program 1 (id=429): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) 3.730233877s ago: executing program 1 (id=430): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000000c0)={0x1, 0x3, 0x1000, 0x4c, &(0x7f0000000000)="9a98cc3a8a4e3e429a49a1e71958726f05b3ce49e12e3b3f6848e2b866200b3879a60f557f42ef07b2344462db105fb2b87040f9729efef3c00bad28c8e887df57d022217e158ac4b1bf848c", 0x2e, 0x0, &(0x7f0000000080)="0ae42af8bf373688e7e9b3b6f19641ffa06e870a2c8a9ba22a0c6abe428343f4c8c96e2543f3c7114d8590ee9b5b"}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000140)=0x3e1435a0fa9dbd35) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x2, 0x701, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x56}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040001}, 0x48000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x400c1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0xf5, 0x0, [0x4000000, 0x7, 0x6, 0xd, 0x8000000000000001], [0x48000000000000, 0x80000001, 0x0, 0x2, 0x4, 0xd, 0x4, 0x9, 0x8000000, 0x7, 0x8, 0x10000, 0xae, 0x7, 0x811b, 0x8, 0x10, 0xffffffff7fffffff, 0x5, 0xa, 0x396, 0x8, 0x2, 0x5, 0x101, 0xd, 0x1, 0x100000, 0x4, 0x3, 0x8, 0x0, 0x9, 0x4, 0xff, 0x91b, 0x2, 0x3, 0x0, 0x6, 0x3, 0x3, 0x0, 0x2, 0x80000000, 0x6, 0x1, 0x200, 0x56, 0x7, 0x7, 0xa, 0x2, 0x10, 0x7, 0xfffffffffffffffd, 0x7, 0x100, 0x0, 0x10, 0x5683, 0x4, 0x9, 0x8001, 0x9, 0x8000000000000001, 0x80000001, 0xc00000000, 0x2, 0x2, 0x1, 0x40, 0x5, 0x0, 0x5, 0x5, 0xd, 0x7fff, 0x1f, 0x4, 0x3, 0x8, 0x5137, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0xffffffff, 0x6, 0x2, 0x2, 0x3, 0x5, 0x10000, 0x3, 0x7836, 0x5, 0x44, 0x1, 0x1, 0x4, 0x2, 0x8000000000000001, 0x5, 0x87, 0x8, 0x6, 0x3c, 0xf36, 0x3, 0x7, 0x6, 0x28e8, 0x4, 0x6, 0x7, 0x139a, 0xffffffff, 0x296e, 0x401, 0x9]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000740)={{r0}, {@val={r2}, @max}}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000780)={0x9, 0x6, 0x6, 0x1, 0x6, "9f0b9a889cbbeaeae24987ea1af34dafd509c0", 0x5, 0xb}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) getgroups(0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) statx(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x800, 0x200, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xee01, 0x0]) r8 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) setgroups(0x8, &(0x7f0000000b80)=[r3, r4, r5, r6, r7, r8, r9, 0xffffffffffffffff]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000c00)={0x2020}, 0x2020) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002c40)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002d00)={'erspan0\x00', &(0x7f0000002c80)={'syztnl0\x00', 0x0, 0x10, 0x0, 0xffffffff, 0x10, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x8, [{@multicast1, 0x9}]}, @generic={0x88, 0x10, "deb3a770c1948798c982f95caf13"}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0xd0, [@broadcast, @rand_addr=0x64010100, @broadcast, @empty]}, @generic={0x86, 0xd, "4d885504142671d2b5baf5"}, @timestamp={0x44, 0x8, 0xcf, 0x0, 0x1, [0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d40)={'syztnl0\x00', r12, 0x8, 0x1, 0x8, 0x2, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x66, [@multicast2, @broadcast]}, @lsrr={0x83, 0x1b, 0x15, [@local, @rand_addr=0x64010100, @remote, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x22}]}, @generic={0xb, 0xc, "cdd81b8257cff5d83062"}, @timestamp_addr={0x44, 0x3c, 0x3f, 0x1, 0x8, [{@broadcast, 0x3}, {@local, 0x10}, {@loopback}, {@remote, 0xe}, {@local, 0x4}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x89, 0xf, "1f9a5298e20d046dff130bf788"}]}}}}}) r13 = dup(r11) r14 = openat$cgroup_ro(r13, &(0x7f0000002e40)='memory.numa_stat\x00', 0x0, 0x0) recvmmsg(r11, &(0x7f0000004780)=[{{&(0x7f0000002e80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f00)=""/12, 0xc}, {&(0x7f0000002f40)=""/32, 0x20}, {&(0x7f0000002f80)=""/8, 0x8}, {&(0x7f0000002fc0)=""/35, 0x23}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/107, 0x6b}], 0x7, &(0x7f0000004180)=""/109, 0x6d}, 0x24000}, {{&(0x7f0000004200)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004280)=""/201, 0xc9}, {&(0x7f0000004380)=""/253, 0xfd}, {&(0x7f0000004480)=""/158, 0x9e}, {&(0x7f0000004540)=""/84, 0x54}, {&(0x7f00000045c0)=""/253, 0xfd}], 0x5, &(0x7f0000004740)=""/3, 0x3}, 0x3d}], 0x2, 0x40002102, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r13, 0x8004f50e, &(0x7f0000004800)) ioctl$HIDIOCGRAWPHYS(r14, 0x80404805, &(0x7f0000004840)) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000004880)=0x5) 3.26132607s ago: executing program 1 (id=431): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x40, 0x22, 0x5b, {0x5b, 0x9, "855f8d944bda56cfd42a86c78b02ba1916e2658448ccb79bb51070866afd829584aef89da0b12f2effccaf89b601533099f15d696846b8ae183e1defae1e7dc31bd6d10e66942c2b463053aa685fafcd8b4726a336343dc55a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000540)={0x34, &(0x7f0000000400)={0x40, 0x18, 0xa1, "e3ae61a518af2c41cafe0cb48706230dbc4dfb36c5c37dba3bfe1a7ab5bef7dab3757a02f5c01e1028824a32240571818ad3083e7fb31dbf60453b3cd8b577d2e1c02627de87d6f8f481b7186f149cf86c8f6e2b0564474702b1804a2d9b601cefc71b97eae7064d104a64f3360a542c2d4a39309c28d3132433b1035a705cd64d2736c580afda09864bc4c5650079469c2f68f16ff40b248d6a1c881458a9e8db"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xfffffff0}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x1ff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "9136dae5cba15ebf3c9b1e5bdd0e3f77cea763e00b94b1e42a8ed454de31308e053fcd46f54c0930cbc32f59c55faf"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="200701"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000180)={0x20, 0x7, 0x2, {0x2, 0x3}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.25947225s ago: executing program 0 (id=434): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000012000900000012f17218c865c1ea"], 0x24}], 0x1}, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) read(r0, &(0x7f00000001c0)=""/114, 0x72) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r2, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10382, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x49f0e93c3ffd7829, 0x2, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000100)=0x8000009, 0x4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000a80)=0x4) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x6, 0x8}}) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 3.19749701s ago: executing program 0 (id=436): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x20000, 0x2e) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, r5, {0x7, 0x21, 0x0, 0x1840048, 0x7d, 0x1005, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xffffffffffffffc5) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 3.039424561s ago: executing program 0 (id=437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) pipe(0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88ec00000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @link_local, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x21, 0x0, @loopback, @remote}}}}}}, 0x2a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x0, 0x0, 0x0}) 2.926988022s ago: executing program 2 (id=438): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="4005014aedf95669155a2b38f6ea170c51a1a13a5884d9531ff4ae55fe44e59290105054cf68fca3c055a2759cda596c67cf7c831104b7d0f6147f5b3ddbca73574447c4b7382741127dac0130df1c3bc01ff3c21b96b8d60fd9579febc38418a9a03268d75572915173391190255e46978cece1412acc815e7d703ed7422f0c043fdd83a2a25b525956d400"/154], 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) capset(0x0, 0x0) r2 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff0008"], 0x40}}, 0x20040810) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250100000004000180100002800c0001800800010003000000ce11b03949a477bd28acc331adbfbcc1a8386333063a96c2396230f0f2ae0157584e57c70a45d3a721c063e32228981db2bb4629aa61ef5760c696bc04fee2599b07ab9b8ffbcd050235246cfea38f95ef9f4dc03a6d0fe7749f7cdf6b7b6d166fc41c490ca94d48fc8d0c66d58dffaf47e567ef2c4c77d65b953395ca1fff6b7b85139af0f4be073fac5b5fc6fd493ba8cec54b6b3f963efd4980db842bca1e3c765667a06811e6465675b4ef23ec82830eafd6a752022a8fe39c7d29b9de3d62a216399853ee73"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000000)={@multicast1, @remote}) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f1"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="4005014aedf95669155a2b38f6ea170c51a1a13a5884d9531ff4ae55fe44e59290105054cf68fca3c055a2759cda596c67cf7c831104b7d0f6147f5b3ddbca73574447c4b7382741127dac0130df1c3bc01ff3c21b96b8d60fd9579febc38418a9a03268d75572915173391190255e46978cece1412acc815e7d703ed7422f0c043fdd83a2a25b525956d400"/154], 0x0, 0x0, 0x0, 0x0}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) (async) capset(0x0, 0x0) (async) fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff0008"], 0x40}}, 0x20040810) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250100000004000180100002800c0001800800010003000000ce11b03949a477bd28acc331adbfbcc1a8386333063a96c2396230f0f2ae0157584e57c70a45d3a721c063e32228981db2bb4629aa61ef5760c696bc04fee2599b07ab9b8ffbcd050235246cfea38f95ef9f4dc03a6d0fe7749f7cdf6b7b6d166fc41c490ca94d48fc8d0c66d58dffaf47e567ef2c4c77d65b953395ca1fff6b7b85139af0f4be073fac5b5fc6fd493ba8cec54b6b3f963efd4980db842bca1e3c765667a06811e6465675b4ef23ec82830eafd6a752022a8fe39c7d29b9de3d62a216399853ee73"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000000)={@multicast1, @remote}) (async) 1.65068686s ago: executing program 2 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4044081) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x224, 0x1, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3d}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @broadcast}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_TUPLE_MASTER={0xcc, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xfa9c491efbd091ea}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x221}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe28}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x242}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7b5ff5e5}, @CTA_ZONE={0x6}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc040) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000440)={0x3, 0x9}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "51b54d2825"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf1531c3fb"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000080) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000680)='pagemap\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x1d, r6}, 0x10, &(0x7f00000007c0)={&(0x7f0000000740)={0x1, 0x1, 0xab7d, {0x77359400}, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "0ef9630fb18ec9f2"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000840)={0x8, 0x0, {0xfffffffffffffff9, @usage=0x2, 0x0, 0x74d, 0xc, 0x5691, 0x10001, 0x4, 0x90, @usage=0x6, 0x0, 0xfff, [0x5, 0x5, 0x6, 0x8, 0xc00000000000]}, {0x401, @struct={0x0, 0x8}, 0x0, 0x4, 0xff, 0xa, 0x1ff, 0xc22, 0x452, @struct={0x10001, 0xfffffeff}, 0x2, 0x2, [0x6, 0xfffffffffffffce6, 0x1, 0x5, 0x200, 0x6]}, {0x4, @struct={0xbd6, 0xfffffff6}, 0x0, 0x6, 0x9, 0x0, 0xfffffff000000000, 0x5, 0x0, @struct={0xb8be, 0x4}, 0x8, 0x5, [0xcd8e, 0x1, 0x8, 0x5, 0xfffffffffffffffd, 0x8]}, {0xfffffffffffffff7, 0x6e22, 0xa7c}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c40)={r7, 0x26, 0xffffffffffff8f53}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000001040)='\xbc\x00') ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000001080)={0x1, 0x3, 0x8}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000010c0)={0x0, @aes256, 0x0, @desc2}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xf, 0x4, 0x4, 0x10, 0x3, 0x1]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x814) sendmsg$nl_route_sched_retired(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)=@deltclass={0x90, 0x29, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x6}}, [@c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x5}, 0x3, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xb}, 0xb39, 0x400}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0x9}, 0x3, 0x6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xaa}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xff}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8020}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000001380)='\x00') r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001400)=[@text64={0x40, &(0x7f00000013c0)="66ba6100eddbe165430f01cfb9820000c00f32460fd2be007800000f01c364f3ad260fc77e5067450f011ab9311001c00f32", 0x32}], 0x1, 0x66, &(0x7f0000001440), 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001480)={r8, 0x8, 0x4}) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000001880)={0x8deb, 0x8, 0x4, 0xc, 0x7, 0x0, [{0x10001, 0x8d, 0x6, '\x00', 0x2080}, {0x9, 0xffffffffffffffff, 0x4, '\x00', 0x102}, {0x2, 0xfc00000000000000, 0x2, '\x00', 0x198d}, {0x0, 0x91, 0x0, '\x00', 0x400}, {0x2, 0x80000001, 0x6, '\x00', 0x200}, {0x3, 0x7, 0x7fffffff, '\x00', 0x100}, {0x6, 0xffffffff7fffffff, 0x8001}]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x40, 0x0) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000001a80)={0x1, 0x3, [@random="6fc287f2d618", @broadcast, @random="ea0f4881636d"]}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r12, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x67}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x8810) 1.59991159s ago: executing program 2 (id=443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x34}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x2d}, 0x48, 0xfffffffffffffffd) close_range(r0, 0xffffffffffffffff, 0x0) 1.539056751s ago: executing program 2 (id=444): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x4000800) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xffffffffffffffda, r11, {0x4, 0x3, 0x0, {0x3, 0x4, 0x2917, 0x8000000000000000, 0x100000000, 0x4, 0x1, 0x80000000, 0xd2, 0x1000, 0x100, r7, r8, 0x9, 0x21}}}, 0x78) sendmmsg$unix(r5, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYBLOB="cb80a685ba4ff7bc8ad958bcda8da21c5903a2ffa827042f5b4085dff226ab5e8627a35a6721e5f6aa7213f5d89da22896f4c0ffd04dd9d209f7c040e3b5d1b962da0885dc4c51ade3be473258d803757b0b971b7ea872618033b3457ed34ff99cf758b23d8cf40cf7f228d3f05abb9ed75dc015953b381d77984460746acae91d8d3e5d360a9a420bcb65fe", @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001"], 0xb0, 0x821787593bd6bd59}}], 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1008005, &(0x7f0000000400)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uid>', @ANYRESDEC=r7, @ANYBLOB="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"]) 1.53732484s ago: executing program 2 (id=445): mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x3, 0x34}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x3, 0x34}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) 1.5296121s ago: executing program 2 (id=447): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) 1.088577813s ago: executing program 0 (id=452): r0 = timerfd_create(0x9, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@private2, 0x60, r2}) timerfd_settime(r0, 0x3, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/147, 0x93}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000100)=""/28, 0x1c}], 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f000000af40)={0xa000000a}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x10, 0x70bd27, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000910) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000140)={@none, 0x6}) io_setup(0x401, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc40, 0x0) unshare(0x20000400) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r6, 0x7) 671.313096ms ago: executing program 1 (id=456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(r1) write$P9_RVERSION(r2, 0x0, 0xfffffffffffffe35) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000180)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 662.658016ms ago: executing program 1 (id=457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB=' \x00o'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x20, 0x5, 0x8, "3e55e90402a9ad01"}, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0xb1, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc143ef630b62d95fb3e1b01b472ec8da1d1df52bc010000000000000000008858b529723dbc221c5d5aa6163e9ca56df030b68a562d5675e2891444eac2ebe6571da4cfff21c106a943c9c0aaf4c7707691fa458b2a3e04f9a8a62c1d84459c94785c2cfa6576a06538509306348994651fea39682162f292d349005be1"}) 245.525968ms ago: executing program 0 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) (async) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) close(r3) 185.498689ms ago: executing program 0 (id=465): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x40, 0x22, 0x5b, {0x5b, 0x9, "855f8d944bda56cfd42a86c78b02ba1916e2658448ccb79bb51070866afd829584aef89da0b12f2effccaf89b601533099f15d696846b8ae183e1defae1e7dc31bd6d10e66942c2b463053aa685fafcd8b4726a336343dc55a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000540)={0x34, &(0x7f0000000400)={0x40, 0x18, 0xa1, "e3ae61a518af2c41cafe0cb48706230dbc4dfb36c5c37dba3bfe1a7ab5bef7dab3757a02f5c01e1028824a32240571818ad3083e7fb31dbf60453b3cd8b577d2e1c02627de87d6f8f481b7186f149cf86c8f6e2b0564474702b1804a2d9b601cefc71b97eae7064d104a64f3360a542c2d4a39309c28d3132433b1035a705cd64d2736c580afda09864bc4c5650079469c2f68f16ff40b248d6a1c881458a9e8db"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xfffffff0}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x1ff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "9136dae5cba15ebf3c9b1e5bdd0e3f77cea763e00b94b1e42a8ed454de31308e053fcd46f54c0930cbc32f59c55faf"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="200701"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000180)={0x20, 0x7, 0x2, {0x2, 0x3}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 107.779359ms ago: executing program 3 (id=468): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) getuid() sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) epoll_create(0x3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 91.984369ms ago: executing program 3 (id=469): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001780)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 32) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000380)) (async, rerun: 32) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0xfff, {0x4, 0x2, 0x9, 0x2, 0x6e8, 0xffffffff}}) (rerun: 32) 85.9672ms ago: executing program 3 (id=470): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x29, 0x400, 0x70bd25, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xfd, 0x0, 0x1, [@nested={0x4, 0xe0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x68, r6, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x1, 0x5}, @value=@ver_80211n={0x0, 0xa00, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x38, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8917}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x2000}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6002}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000010) keyctl$clear(0x7, r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0x3, 0x10001) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r3, 0x66053000) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d80300003d00200026bd00000000df2500000000b200b78008003000", @ANYRES32, @ANYBLOB="0800c8005e5e6c00f51517c79c80a369b328c183786a400d922d16dd4bde464b8e5fbcac6c0df777ab6e9b5f0c00fc000c0e000000000000090035007266646e6f0000008d75fe109b1694a0fb248b336e1e1fdafd0a26f43c5910b1abb733b00c85f179cb4b5d822b03b48f7cc78b9278f68e644b8b660e5e44d7243f19d41ce6168ff369b05b0876c38b24b20621f19ed83c1efd95c4729014eb08a421b20b7011e5f09cde00007c835faa305ff8747fc1f83b85c04b1241ace7e926cf42d90a44975b99eb60f82f6f5396763c9cec0bb966e8b248529a1b9c97dec68f7f37a300bbc940d5b0b8735a2aaeb442d447fca771d3706f748438efd214cba2b88165c05491b5b0d5b020f56bc577c3f5791fe48ef694186884e61ab3dd4b46b2bd1fa42a55b0c461a6b5003ae0cd776129f4af49a80ce48de28ddfe9c56c70f6769aacb9873cede57621c06c75be5bb5180e7d0a2736f30c90f767a6088d7c56113b4ddf44f08c62bd51253aa04902b2800400008014001e00fc000000000000000000000000000000040049802376401ede535418107c4da0b340abcf15f578dd412e76540c06c445eb3017121f705667dc54b2e43da4a8ce9465dd575766733243f4b7b708959734d0e5ea7ac781bf0a49d1fd845309a839cca14e9ed7126864ddaa9d145a77c8c1df50e0f489b441331d870e625abf49d1d9c89079c20dfa803d0ab1765dc5c8dea579f0d70f73ce27d75ebb181cc1d669a1f62e15c340d61e135256016e03ec4e322ff960010d83b80f9e3f6dc7b92b49dd7c5205ad13a164d628e71d399078bd17b9640aeadcd6aef196ed39027d494556ef5e28c150eafb5c23f29d0711ddf5d32e9dd773849266345926b8fb83d5d0870d8587525b5c19f9cd4bb514b53e93cfa0c48ce159d24b7519940ad3dab561cbf43428ebd61203609e01f619ec11c3d6d3c984f4a4ccc0ee4b9b6b10d1523f7657f6949581b17198facd98117ff06e541ae38b263964e6558f44b394ca94587b8eb289632bfbdd6d9638fa4417bc5559e049d6e5e73d55ce7352eb4782d78c66b4d4c682df057135329c99531671242a6423062a27b3fab1d3980b62a320620eeac36e3d81a89bf879695cc06feb74f849793e010b44424ae81e47babea2a47d98f0df9783b157c0d2880dbcfe8d510225a27e66dc991d603c1d1f6f523022e8f0058fb3f93849ab58a7a79ef51b5105ddc28acac8d4851c91b75a8602b8bc7f65536d58d2a44f9d52a83d5c0d74f2fba813c7d1d7558364c392bf65cac3ac558349ffdbd9f26fa64621baf9515757f1791110b30400208004005680000000"], 0x3d8}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 2.54237ms ago: executing program 3 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0xfffffffffffffffd, 0x40000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x204, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20000840) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2f8, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x131}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x45e0}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0de5537eb128d71c48bd8664ba506d311212471b4448ce03f716024becc0d3667d73"}}, @TIPC_NLA_NODE_ID={0x48, 0x3, "775aac0abeb55920c66316624f4101fa0257f7a2051a762bac07d71cf22d48e6b9065e126895faa4b577cafd5e785837c09e31083ff357ef97006000f24b112cebf0e2ff"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x852ed5bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x8841}, 0x800) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000780)={[0x9, 0x4, 0x1, 0x810, 0x3, 0x4, 0x6, 0x8, 0x8, 0x0, 0x0, 0x6, 0x5, 0x9, 0x8, 0x5], 0x4000, 0x101}) (async) sendmsg$nl_generic(r0, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x2c0, 0x2f, 0x4, 0x70bd27, 0x25dfdbfb, {0xa}, [@generic="6837f918f10941fe2652f8304d48fcd49d4e17eab74c330a2cb0743aaaddcc36fa27db14526a669d44b83ad8dfa4b9cdef9cb469196ec39645e25654419b07eae141116d4d039768cd4e3f4b3976adf4587af7bcfc8799dd5925a38bfb7029310258da06ceae0ecdea8cbeded2899f968366bcfefe8782dcdd4ecbfb59eefea23f206deb82eed994b4ae208e1bc24b2a091f507451d414628b8b06ac4a7ca43a7db685d230e8c45affe0bdb1e403667ac4c14e2e0843f0ad327dcf32938269364ca3", @generic="edf651db693df09acda069064f86af2afc19e08caf34c2d0762f8444b3caf6a9358593140fcf91cea33a7afc7a54648baf4309a9f3f0ddced9e11f409ace02c5931a036b91000b3a25aca0ae362e6358097c8cbcd743255c0876ea4123c08e3015b999b53b5f76abaa", @generic="485feebc161ffdfa2581f945df9365b45640c2dea840f9a4ba6c966ab0e34ed5a0c80f1441f3db4a300013ab45905f591cecce69f8cdf6d2e2a7a83be9accaa75c5ad73b59df80ec7d239495a96238fe00bf575b185a405ef36ccbbdcc7593a9eeb8166223581171b1a695410cc2cf7fc00061e2822662e9245a2eefc1789e021bef393c485b871b803aed18b9e89b2d83cd7ec04d1fde793a8bac034ad1a7a3d2d07a50ac339ba2e5d14004ebbcab3aae6c49bc554317", @generic="a0fecf0e159ae114051d3ff8b4dcf2ca750142c3dd9cc3900c1e248b9b37a06917f025293363a0ff620939b391e006c60e46159a151ca1da690b1d77296b0a70ef179b1377ca2568d2e7bb86e6966b587240b139d08fcbe4f30f2293ed0da656a30afe91ed7a4804e4f454b33ae2f793b2d2dd724b85cfb8ba1855401a2d43604e5ca71a2dad7106a41a9c02faa7461d51850820a7f28270ad41a2f72438275603394e7752d4b369d9c51eae9f22b548ae66c5b657d5ba5c0519fa8c255fb0fddf0bee011a49777d"]}, 0x2c0}}, 0x20048011) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000c00), &(0x7f0000000c40)=0x14) (async, rerun: 32) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r5) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}}, 0x40000) getsockopt$MRT6(r5, 0x29, 0xd0, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd8}, @NL80211_ATTR_VENDOR_DATA={0xbb, 0xc5, "d9f04e6cc040dde4608389f09a10f4b11195960080271f76c23bb299f058b5f9c41f9586cbec05414434a2f3fd452ad495410da7bb5af08d4868b578cf87bc686003ea0b6c69b2e66fed4cf8a5b4d6476b01ff48a72b6215839a2d75cc5efb4c9892b94fd1ed0d5aa93c0e92a140cb10735cbb393f9a395200212b8cc1dafe69d959c8f9dbf04e952eef64dd4a15754aa720817286ab54032ba0372592f149e472939ac25c1e3d2e3cbf4e07626080586a495c81b940e6"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x45}, 0x4010) splice(r5, &(0x7f0000001080)=0x10, r0, &(0x7f00000010c0)=0x317, 0x7f, 0x4) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, r9, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x39}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r10, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f2acc21, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x880) (async, rerun: 32) tee(r0, r5, 0x6, 0x7) (async, rerun: 32) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000001880)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001400)={0x43c, 0x3f3, 0x4, 0x70bd26, 0x25dfdbfe, {0x4, 0x3, 0x6, [0x8, 0x9, 0x3, 0x7, 0x4, 0x9, 0x8, 0xe2c, 0x0, 0xfffffffa, 0x9, 0x6, 0x3, 0x8000000, 0x5, 0x40, 0x5, 0x7, 0x8000, 0x4, 0x4, 0x3, 0x10, 0xfffff2b3, 0x5, 0x3139, 0x6, 0x1, 0x3, 0x8, 0xfffffffa, 0xfffffff2, 0xad, 0x31ea16ac, 0x3, 0xc, 0x7, 0x100, 0x4, 0x7fe, 0x6, 0x2, 0x3, 0x10001, 0x5, 0x4, 0x3, 0x45ef, 0x7, 0x5, 0xcc, 0x7, 0x7, 0xc, 0x1e, 0x61c, 0xe0a, 0x7, 0x940, 0x7fffffff, 0x4, 0x6, 0xfffffff9, 0x2], [0xd3e, 0x9, 0x7f, 0xcb10, 0x1ff, 0x0, 0x40, 0x69d2, 0xa, 0xfffff992, 0x10, 0x1, 0x4, 0x7, 0x7127, 0xa7, 0xffffffff, 0x7, 0xf, 0x8000, 0x9beb, 0x0, 0x3, 0xfffff801, 0x8, 0x5, 0xd, 0xf, 0xdf, 0x7, 0x906c, 0x7fff, 0x2, 0xa, 0x7, 0x7, 0xfffffff8, 0xff, 0x800100, 0x3, 0x3, 0x6, 0x8, 0x3, 0xc5d4, 0x6, 0x0, 0x1ff, 0x0, 0x2, 0x401, 0xad, 0x0, 0x1, 0x2, 0x5509eb3e, 0x0, 0x8, 0x6, 0x491, 0x3, 0x6, 0x1], [0x2, 0xe, 0xf8a7, 0x295, 0xe515, 0x6, 0x3, 0x1cfa, 0x77ab, 0xfffffff6, 0x7fff, 0x1, 0x3, 0x8, 0x9, 0x2, 0x0, 0x1, 0x9, 0x7, 0x2, 0x4c37fef9, 0x4, 0x1, 0x1, 0x4, 0xe8d, 0x5, 0x401, 0x7, 0xc10, 0xa02, 0xbe1, 0xa0000000, 0x824, 0x8, 0x9, 0x3, 0x6, 0x10000000, 0xfffffff9, 0x0, 0x47, 0x3e9, 0x2, 0x709861d5, 0x7f, 0x6, 0x9, 0x28, 0x1, 0x22700, 0x6, 0x1, 0xfffffffa, 0x7fff, 0x7, 0xa, 0x9, 0xffffffff, 0x7f2, 0x2, 0x7, 0xc0000000], [0x3, 0x80000000, 0xfffffffe, 0x8, 0x4, 0x50, 0xc8b0, 0x9, 0x4, 0xffffffff, 0x1e0, 0x3708, 0xa, 0xfffffff7, 0x9, 0x1, 0x745, 0x7, 0xe78, 0x3ff, 0x5, 0x46, 0x3, 0x3, 0x8000, 0x0, 0xfffffc01, 0x8, 0x4, 0x6, 0xbbe3, 0x0, 0x7ff, 0xbb, 0x7, 0x5, 0x3, 0xdaf, 0x8, 0x4, 0x0, 0xd4, 0x9, 0x3, 0x4, 0x93, 0x4, 0x7, 0x10, 0x3c00, 0x8, 0x6, 0x28000, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x10001, 0x4, 0xfffff4a8, 0x7, 0x101, 0x7ff], 0x1b, ['\x00', '802.15.4 MAC\x00', 'sip\x00', 'macvlan1\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x44810}, 0x20000040) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000018c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xc0, r10, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4abb12d8c3fe05a87a8024b26535716b4d2d7b4a7b3b41e1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0b63cbcd219f6546c5081ac2db1336bbed397b4b834c0539"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20000884) 451.44µs ago: executing program 3 (id=472): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) (async, rerun: 64) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) (async, rerun: 64) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRESHEX=0x0, @ANYRES32], 0x0) syz_usb_disconnect(r4) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x7e, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x2, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "08199f3b"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x5, 0x7, 0x4}, {0x6, 0x24, 0x1a, 0x40dd}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x7f, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x268, 0x8, 0x8, 0x6, 0x0, 0x4}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x3, 0xf, 0x6, [0xffff07, 0xff00c0, 0x3f0f]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x425}}]}) (rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=473): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500ffff0000ff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x10160d0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000000000007000000070400"], 0x18}}], 0x1, 0xf00) close(0x3) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) close(r6) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="0306ea02131f912470d0b3f7ddb8a63a37ec1323134641b7ead8c6ca8ddae9275c135ea05788bd47cb9a4192e8355ebcf919fb5c8b5e246d7a76da180a646b41992824ad701ff48a4c0cee32", 0x4c}], 0x1) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) r10 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) r11 = getpgrp(0x0) wait4(r11, 0x0, 0x20000000, 0x0) (async) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r12, &(0x7f00000003c0)=""/18, 0x12) (async) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(r9, 0xc008ae09, &(0x7f0000000400)={0x4, 0x0, [{0x2, 0xf, 0x4, 0x9, 0x6ce1, 0x2, 0x4}, {0xc0000000, 0x6, 0x2, 0x5, 0x0, 0x1, 0x32}, {0x2, 0xfffffffb, 0x2, 0x7, 0xfa5a, 0x1, 0x5}, {0x6, 0x0, 0x4, 0x5, 0x0, 0x0, 0x10001}]}) (async) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) (async) fcntl$dupfd(r4, 0x0, r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 19.104823][ T36] audit: type=1400 audit(1762497621.640:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.106029][ T274] cgroup: Unknown subsys name 'net' [ 19.107929][ T36] audit: type=1400 audit(1762497621.640:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.111517][ T36] audit: type=1400 audit(1762497621.640:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.111644][ T274] cgroup: Unknown subsys name 'devices' [ 19.251221][ T274] cgroup: Unknown subsys name 'hugetlb' [ 19.256813][ T274] cgroup: Unknown subsys name 'rlimit' [ 19.408911][ T36] audit: type=1400 audit(1762497621.940:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.432223][ T36] audit: type=1400 audit(1762497621.940:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.440473][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.457316][ T36] audit: type=1400 audit(1762497621.940:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.488811][ T36] audit: type=1400 audit(1762497622.010:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.514281][ T36] audit: type=1400 audit(1762497622.010:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.542983][ T36] audit: type=1400 audit(1762497622.080:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.568557][ T36] audit: type=1400 audit(1762497622.080:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.569395][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.891642][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.898688][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.905887][ T289] bridge_slave_0: entered allmulticast mode [ 20.912311][ T289] bridge_slave_0: entered promiscuous mode [ 20.922830][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.929940][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.936983][ T290] bridge_slave_0: entered allmulticast mode [ 20.943211][ T290] bridge_slave_0: entered promiscuous mode [ 20.949219][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.956277][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.963381][ T289] bridge_slave_1: entered allmulticast mode [ 20.969530][ T289] bridge_slave_1: entered promiscuous mode [ 20.979934][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.986959][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.994184][ T290] bridge_slave_1: entered allmulticast mode [ 21.000437][ T290] bridge_slave_1: entered promiscuous mode [ 21.045609][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.052745][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.059914][ T292] bridge_slave_0: entered allmulticast mode [ 21.066067][ T292] bridge_slave_0: entered promiscuous mode [ 21.079062][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.086159][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.093642][ T292] bridge_slave_1: entered allmulticast mode [ 21.099919][ T292] bridge_slave_1: entered promiscuous mode [ 21.128476][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.135568][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.142691][ T291] bridge_slave_0: entered allmulticast mode [ 21.148838][ T291] bridge_slave_0: entered promiscuous mode [ 21.163786][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.170837][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.177883][ T291] bridge_slave_1: entered allmulticast mode [ 21.184185][ T291] bridge_slave_1: entered promiscuous mode [ 21.291611][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.298642][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.305935][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.312970][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.321421][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.328431][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.335711][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.342739][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.358525][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.365572][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.372854][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.379878][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.418310][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.425854][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.433152][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.441631][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.448797][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.455979][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.470538][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.477570][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.485267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.492311][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.514790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.521852][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.529272][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.536316][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.555076][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.562134][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.572462][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.579521][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.601828][ T290] veth0_vlan: entered promiscuous mode [ 21.619158][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.626214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.634145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.641190][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.665042][ T289] veth0_vlan: entered promiscuous mode [ 21.678709][ T292] veth0_vlan: entered promiscuous mode [ 21.692461][ T290] veth1_macvtap: entered promiscuous mode [ 21.703841][ T291] veth0_vlan: entered promiscuous mode [ 21.712481][ T292] veth1_macvtap: entered promiscuous mode [ 21.723465][ T289] veth1_macvtap: entered promiscuous mode [ 21.764895][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.768109][ T291] veth1_macvtap: entered promiscuous mode [ 21.821396][ T337] ======================================================= [ 21.821396][ T337] WARNING: The mand mount option has been deprecated and [ 21.821396][ T337] and is ignored by this kernel. Remove the mand [ 21.821396][ T337] option from the mount to silence this warning. [ 21.821396][ T337] ======================================================= [ 21.844080][ T342] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 21.867607][ T342] rust_binder: Write failure EINVAL in pid:6 [ 21.914698][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.071047][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 22.079570][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.099965][ T377] rust_binder: Error while translating object. [ 22.100016][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.106268][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 22.119651][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.183390][ T384] __vm_enough_memory: pid: 384, comm: syz.0.17, bytes: 18014402804453376 not enough memory for the allocation [ 22.239558][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 22.245757][ T10] usb 2-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.258019][ T10] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 22.271423][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 22.278073][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 22.287160][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.296124][ T10] usb 2-1: config 0 descriptor?? [ 22.300983][ T31] usb 4-1: config 5 has an invalid interface number: 58 but max is 1 [ 22.309250][ T31] usb 4-1: config 5 has an invalid interface descriptor of length 2, skipping [ 22.318329][ T31] usb 4-1: config 5 has an invalid interface number: 216 but max is 1 [ 22.327267][ T31] usb 4-1: config 5 has an invalid interface number: 190 but max is 1 [ 22.336250][ T31] usb 4-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 22.349151][ T31] usb 4-1: config 5 has no interface number 0 [ 22.359517][ T31] usb 4-1: config 5 has no interface number 1 [ 22.365605][ T31] usb 4-1: config 5 has no interface number 2 [ 22.371930][ T31] usb 4-1: config 5 interface 58 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 22.384932][ T31] usb 4-1: too many endpoints for config 5 interface 216 altsetting 148: 179, using maximum allowed: 30 [ 22.396413][ T31] usb 4-1: config 5 interface 216 altsetting 148 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 22.407654][ T31] usb 4-1: config 5 interface 216 altsetting 148 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 22.421523][ T31] usb 4-1: config 5 interface 216 altsetting 148 has a duplicate endpoint with address 0xB, skipping [ 22.433158][ T31] usb 4-1: config 5 interface 216 altsetting 148 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 22.444339][ T31] usb 4-1: config 5 interface 216 altsetting 148 endpoint 0x9 has invalid wMaxPacketSize 0 [ 22.454500][ T31] usb 4-1: config 5 interface 216 altsetting 148 bulk endpoint 0x4 has invalid maxpacket 8 [ 22.464547][ T31] usb 4-1: config 5 interface 216 altsetting 148 has 8 endpoint descriptors, different from the interface descriptor's value: 179 [ 22.478267][ T392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.478338][ T31] usb 4-1: config 5 interface 190 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 22.496294][ T391] rust_binder: Error in use_page_slow: ESRCH [ 22.496314][ T391] rust_binder: use_range failure ESRCH [ 22.496824][ T31] usb 4-1: config 5 interface 190 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 22.503404][ T391] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 22.508002][ T31] usb 4-1: config 5 interface 190 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 22.518853][ T391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 22.526559][ T31] usb 4-1: config 5 interface 190 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 22.537315][ T391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:24 [ 22.546786][ T31] usb 4-1: config 5 interface 58 has no altsetting 0 [ 22.574936][ T31] usb 4-1: config 5 interface 216 has no altsetting 0 [ 22.582108][ T31] usb 4-1: config 5 interface 190 has no altsetting 0 [ 22.590350][ T31] usb 4-1: New USB device found, idVendor=0586, idProduct=3413, bcdDevice=68.2f [ 22.599743][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.607933][ T31] usb 4-1: Product: syz [ 22.612749][ T31] usb 4-1: Manufacturer: syz [ 22.617789][ T31] usb 4-1: SerialNumber: syz [ 22.651580][ T398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.655475][ T398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.674176][ T400] /dev/rnullb0: Can't open blockdev [ 22.711187][ T10] logitech-djreceiver 0003:046D:C513.0001: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.1-1/input0 [ 22.942654][ T412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 22.969679][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.010343][ T415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 23.010371][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33 [ 23.034338][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.045142][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.050601][ T31] usb 4-1: USB disconnect, device number 2 [ 23.052641][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.065490][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.070804][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.077357][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.083798][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.096857][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.096894][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.103717][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.115316][ T334] syz.1.2 (334): attempted to duplicate a private mapping with mremap. This is not supported. [ 23.127879][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.127913][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.135105][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.141762][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.148385][ T9] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 23.149622][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.155008][ T9] usb 1-1: config 0 has no interface number 0 [ 23.163712][ T417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.175892][ T9] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 23.193718][ T9] usb 1-1: config 0 interface 214 has no altsetting 0 [ 23.202311][ T9] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 23.214238][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.217858][ T423] /dev/rnullb0: Can't open blockdev [ 23.222438][ T9] usb 1-1: Product: syz [ 23.232507][ T9] usb 1-1: Manufacturer: syz [ 23.237110][ T9] usb 1-1: SerialNumber: syz [ 23.242458][ T9] usb 1-1: config 0 descriptor?? [ 23.247681][ T402] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 23.268307][ T10] usb 2-1: USB disconnect, device number 2 [ 23.455263][ T402] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 23.592369][ T440] rust_binder: Write failure EINVAL in pid:13 [ 23.603311][ T442] cgroup: Name too long [ 23.615110][ T442] rust_binder: Error while translating object. [ 23.615142][ T442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 23.621585][ T442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 23.649561][ T431] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.665772][ T447] rust_binder: 5: no such ref 3 [ 23.674935][ T445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 23.686726][ T445] netlink: 228 bytes leftover after parsing attributes in process `syz.3.37'. [ 23.700079][ T445] /dev/rnullb0: Can't open blockdev [ 23.761314][ T457] netlink: 316 bytes leftover after parsing attributes in process `syz.3.41'. [ 23.771902][ T457] netlink: 316 bytes leftover after parsing attributes in process `syz.3.41'. [ 23.781144][ T457] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 23.801736][ T460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 23.812636][ T431] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 23.821907][ T431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.829996][ T431] usb 3-1: Product: syz [ 23.834160][ T431] usb 3-1: Manufacturer: syz [ 23.838736][ T431] usb 3-1: SerialNumber: syz [ 23.843952][ T431] usb 3-1: config 0 descriptor?? [ 23.999560][ T380] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.150511][ T380] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 24.157799][ T380] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 24.168174][ T380] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 24.177317][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.185503][ T380] usb 2-1: Product: syz [ 24.189709][ T380] usb 2-1: Manufacturer: syz [ 24.194305][ T380] usb 2-1: SerialNumber: syz [ 24.400812][ T458] rust_binder: Error while translating object. [ 24.400836][ T458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.407035][ T458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 24.451002][ T431] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 24.470110][ T431] asix 3-1:0.0: probe with driver asix failed with error -71 [ 24.478377][ T431] usb 3-1: USB disconnect, device number 2 [ 24.589945][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 24.601229][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 24.612030][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 24.645660][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 24.645677][ T36] audit: type=1400 audit(1762497627.180:174): avc: denied { read } for pid=463 comm="syz.3.43" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.655467][ T464] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 24.674724][ T36] audit: type=1400 audit(1762497627.180:175): avc: denied { open } for pid=463 comm="syz.3.43" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.766896][ T467] /dev/md0: Can't lookup blockdev [ 25.032938][ T36] audit: type=1400 audit(1762497627.570:176): avc: denied { create } for pid=471 comm="syz.2.46" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.054300][ T36] audit: type=1400 audit(1762497627.570:177): avc: denied { bind } for pid=471 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.073925][ T36] audit: type=1400 audit(1762497627.570:178): avc: denied { write } for pid=471 comm="syz.2.46" name="secretmem" dev="secretmem" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.093620][ T479] binder: Bad value for 'stats' [ 25.096669][ T36] audit: type=1400 audit(1762497627.630:179): avc: denied { mounton } for pid=478 comm="syz.2.48" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.124126][ T36] audit: type=1400 audit(1762497627.640:180): avc: denied { setopt } for pid=478 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 25.567573][ T36] audit: type=1400 audit(1762497628.100:181): avc: denied { create } for pid=482 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 25.607365][ T486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.619382][ T36] audit: type=1400 audit(1762497628.120:182): avc: denied { create } for pid=482 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 25.654486][ T36] audit: type=1400 audit(1762497628.120:183): avc: denied { ioctl } for pid=482 comm="syz.3.50" path="socket:[3925]" dev="sockfs" ino=3925 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 25.705017][ T485] rust_binder: Error in use_page_slow: ESRCH [ 25.705039][ T485] rust_binder: use_range failure ESRCH [ 25.711386][ T485] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 25.716941][ T485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.724909][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 25.977794][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 25.997942][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 26.006549][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.010813][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 26.019796][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 26.021503][ T491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.031813][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 26.067931][ T495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.068066][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 26.085694][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 26.117765][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 26.130517][ T503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 26.140089][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 26.155261][ T511] rust_binder: Write failure EFAULT in pid:51 [ 26.166454][ T514] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 26.172164][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 26.198174][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 26.209303][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 26.220481][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 26.231603][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 26.244781][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 26.255842][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 26.266905][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 26.278023][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 26.289153][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 26.300335][ T9] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 26.312709][ T9] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, ea:6a:4c:f6:2c:f3 [ 26.330717][ T9] usb 1-1: USB disconnect, device number 2 [ 26.337009][ T9] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 26.371064][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.519538][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 26.530642][ T331] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 26.542406][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 26.553446][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 26.564633][ T331] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 26.574213][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.582247][ T331] usb 4-1: Product: syz [ 26.586406][ T331] usb 4-1: Manufacturer: syz [ 26.591026][ T331] usb 4-1: SerialNumber: syz [ 26.596506][ T331] usb 4-1: config 0 descriptor?? [ 26.669646][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.713342][ T380] rndis_host 2-1:7.0: skipping garbage [ 26.720475][ T380] usb 2-1: bad CDC descriptors [ 26.726100][ T380] usb 2-1: USB disconnect, device number 3 [ 26.819543][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 26.825643][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 26.833760][ T9] usb 1-1: config 0 has no interface number 0 [ 26.841174][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 26.850339][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.858337][ T9] usb 1-1: Product: syz [ 26.862532][ T9] usb 1-1: Manufacturer: syz [ 26.867109][ T9] usb 1-1: SerialNumber: syz [ 26.872249][ T9] usb 1-1: config 0 descriptor?? [ 27.081654][ T9] usb 1-1: USB disconnect, device number 3 [ 27.357163][ T547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 29.131043][ T31] usb 4-1: USB disconnect, device number 3 [ 43.469746][ T554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.470647][ T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 43.481561][ T556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 43.505382][ T556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 43.519428][ T556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 43.538437][ T556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 43.579532][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 43.579547][ T36] audit: type=1400 audit(1762497646.110:222): avc: denied { ioctl } for pid=575 comm="syz.3.71" path="socket:[4782]" dev="sockfs" ino=4782 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.611880][ T581] Zero length message leads to an empty skb [ 43.621292][ T36] audit: type=1400 audit(1762497646.160:223): avc: denied { getopt } for pid=568 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.685874][ T583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.685922][ T583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 43.692604][ T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:63 [ 43.767723][ T591] capability: warning: `syz.0.75' uses deprecated v2 capabilities in a way that may be insecure [ 43.788090][ T592] 9pnet_fd: p9_fd_create_tcp (592): problem connecting socket to 127.0.0.1 [ 43.796771][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.841639][ T602] rust_binder: Error in use_page_slow: ESRCH [ 43.841652][ T602] rust_binder: use_range failure ESRCH [ 43.847638][ T602] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 43.853146][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.861216][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 43.869532][ T331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.911289][ T36] audit: type=1400 audit(1762497646.450:224): avc: denied { getopt } for pid=614 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.911493][ T615] rust_binder: 94: no such ref 0 [ 43.938610][ T615] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.939545][ T31] usb 2-1: device descriptor read/64, error -71 [ 43.945850][ T615] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 43.970891][ T36] audit: type=1400 audit(1762497646.510:225): avc: denied { execute } for pid=616 comm="syz.0.83" path="/32/cpuacct.usage_percpu" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.039521][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 44.045791][ T331] usb 4-1: config 8 has an invalid interface number: 138 but max is 0 [ 44.053978][ T331] usb 4-1: config 8 has no interface number 0 [ 44.060098][ T331] usb 4-1: config 8 interface 138 has no altsetting 0 [ 44.068175][ T331] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 44.077231][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.085219][ T331] usb 4-1: Product: syz [ 44.089361][ T331] usb 4-1: Manufacturer: syz [ 44.093950][ T331] usb 4-1: SerialNumber: syz [ 44.189535][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.300925][ T576] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.308881][ T36] audit: type=1400 audit(1762497646.840:226): avc: denied { ioctl } for pid=575 comm="syz.3.71" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5240 ioctlcmd=0x6619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.340036][ T331] snd-usb-audio 4-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 44.350146][ T331] usb 4-1: USB disconnect, device number 4 [ 44.392492][ T36] audit: type=1400 audit(1762497646.930:227): avc: denied { read } for pid=622 comm="syz.2.84" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.415841][ T36] audit: type=1400 audit(1762497646.930:228): avc: denied { open } for pid=622 comm="syz.2.84" path="/26/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.440029][ T36] audit: type=1400 audit(1762497646.930:229): avc: denied { ioctl } for pid=622 comm="syz.2.84" path="/26/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.443531][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.479522][ T36] audit: type=1400 audit(1762497646.960:230): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.629583][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.812908][ T36] audit: type=1400 audit(1762497647.350:231): avc: denied { write } for pid=631 comm="syz.0.87" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.841195][ T632] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.869564][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.889523][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.980062][ T31] usb usb2-port1: attempt power cycle [ 45.039526][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 45.045703][ T331] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.055650][ T331] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.065745][ T331] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.078709][ T331] usb 3-1: config 1 interface 0 has no altsetting 0 [ 45.086686][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 45.095857][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.103866][ T331] usb 3-1: Product: syz [ 45.108016][ T331] usb 3-1: Manufacturer: syz [ 45.112617][ T331] usb 3-1: SerialNumber: syz [ 45.173946][ T654] SELinux: failed to load policy [ 45.202865][ T661] binder: Unknown parameter 'context[7' [ 45.218717][ T664] rust_binder: Write failure EFAULT in pid:61 [ 45.219543][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 45.272115][ T664] capability: warning: `syz.3.97' uses 32-bit capabilities (legacy support in use) [ 45.319940][ T331] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 45.330909][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.363732][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.371734][ T671] __vm_enough_memory: pid: 671, comm: syz.3.98, bytes: 18014402804453376 not enough memory for the allocation [ 45.384491][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 45.395432][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 45.404466][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.412929][ T9] usb 1-1: config 0 descriptor?? [ 45.418131][ T648] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 45.460464][ T10] usb 3-1: USB disconnect, device number 3 [ 45.474168][ T10] usblp0: removed [ 45.500533][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.629652][ T433] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.739542][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.760576][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.790470][ T433] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 45.798616][ T433] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.808661][ T433] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.809265][ T681] /dev/rnullb0: Can't open blockdev [ 45.816896][ T433] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 45.829716][ T433] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 45.838872][ T9] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 45.846280][ T433] usb 4-1: Product: syz [ 45.850468][ T433] usb 4-1: Manufacturer: syz [ 45.855042][ T433] usb 4-1: SerialNumber: syz [ 45.859679][ T9] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 45.867058][ T9] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 45.874740][ T9] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 45.882342][ T433] usb 4-1: config 0 descriptor?? [ 45.887382][ T9] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 45.895245][ T433] hub 4-1:0.0: bad descriptor, ignoring hub [ 45.900581][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.901180][ T433] hub 4-1:0.0: probe with driver hub failed with error -5 [ 45.915050][ T9] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 45.927112][ T433] usb 4-1: selecting invalid altsetting 0 [ 46.009639][ T31] usb usb2-port1: unable to enumerate USB device [ 46.039612][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.048134][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.057557][ T433] usb 1-1: USB disconnect, device number 4 [ 46.199576][ T9] usb 4-1: USB disconnect, device number 5 [ 46.593186][ T692] rust_binder: Got transaction with invalid offset. [ 46.593212][ T692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.599897][ T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 46.649707][ T702] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.819528][ T433] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 46.969926][ T433] usb 1-1: no configurations [ 46.974537][ T433] usb 1-1: can't read configurations, error -22 [ 46.989521][ T584] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.109545][ T433] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 47.139520][ T584] usb 2-1: Using ep0 maxpacket: 16 [ 47.145628][ T584] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.155739][ T584] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 47.165849][ T584] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 47.174892][ T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.182894][ T584] usb 2-1: Product: syz [ 47.187036][ T584] usb 2-1: Manufacturer: syz [ 47.191624][ T584] usb 2-1: SerialNumber: syz [ 47.196724][ T584] usb 2-1: config 0 descriptor?? [ 47.259914][ T433] usb 1-1: no configurations [ 47.264554][ T433] usb 1-1: can't read configurations, error -22 [ 47.271101][ T433] usb usb1-port1: attempt power cycle [ 47.308748][ T718] /dev/rnullb0: Can't open blockdev [ 47.609548][ T433] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 47.630241][ T433] usb 1-1: no configurations [ 47.634869][ T433] usb 1-1: can't read configurations, error -22 [ 47.669537][ T331] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 47.769616][ T433] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 47.790221][ T433] usb 1-1: no configurations [ 47.794833][ T433] usb 1-1: can't read configurations, error -22 [ 47.801250][ T433] usb usb1-port1: unable to enumerate USB device [ 47.820526][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 47.831445][ T331] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 47.840487][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.849077][ T331] usb 3-1: config 0 descriptor?? [ 47.854981][ T721] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 48.265451][ T331] hid-generic 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 48.359531][ T433] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 48.465865][ T331] usb 3-1: USB disconnect, device number 4 [ 48.509552][ T433] usb 4-1: Using ep0 maxpacket: 32 [ 48.515721][ T433] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 48.523973][ T433] usb 4-1: config 1 has no interface number 0 [ 48.530114][ T433] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 48.540157][ T433] usb 4-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.550067][ T433] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 48.560025][ T433] usb 4-1: config 1 interface 137 has no altsetting 0 [ 48.568317][ T433] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 48.577388][ T433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.585376][ T433] usb 4-1: Product: syz [ 48.589536][ T433] usb 4-1: Manufacturer: syz [ 48.594121][ T433] usb 4-1: SerialNumber: syz [ 48.600920][ T728] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 48.967645][ T433] pl2303 4-1:1.137: required interrupt-in endpoint missing [ 48.976034][ T433] usb 4-1: USB disconnect, device number 6 [ 49.045057][ T734] rust_binder: 110: no such ref 2 [ 49.102718][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 49.102734][ T36] audit: type=1400 audit(1762497651.640:252): avc: denied { write } for pid=742 comm="syz.2.121" path="socket:[6275]" dev="sockfs" ino=6275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.133259][ T36] audit: type=1400 audit(1762497651.640:253): avc: denied { transfer } for pid=742 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.355486][ T752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.364306][ T753] __vm_enough_memory: pid: 753, comm: syz.2.124, bytes: 18014402804453376 not enough memory for the allocation [ 49.376172][ T752] __vm_enough_memory: pid: 752, comm: syz.2.124, bytes: 18014402804453376 not enough memory for the allocation [ 49.512333][ T36] audit: type=1400 audit(1762497652.050:254): avc: denied { read } for pid=758 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.516354][ T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 49.617064][ T36] audit: type=1400 audit(1762497652.150:255): avc: denied { map } for pid=768 comm="syz.0.129" path="socket:[5919]" dev="sockfs" ino=5919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.649558][ T36] audit: type=1400 audit(1762497652.150:256): avc: denied { read accept } for pid=768 comm="syz.0.129" path="socket:[5919]" dev="sockfs" ino=5919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.651003][ T771] rust_binder: inc_ref_done called when no active inc_refs [ 49.679556][ T36] audit: type=1400 audit(1762497652.160:257): avc: denied { write } for pid=768 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.712128][ T36] audit: type=1400 audit(1762497652.190:258): avc: granted { setsecparam } for pid=770 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 49.730412][ T762] rust_binder: Write failure EFAULT in pid:95 [ 49.731257][ T584] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 49.753101][ T584] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 49.764311][ T584] asix 2-1:0.0: probe with driver asix failed with error -71 [ 49.772547][ T36] audit: type=1400 audit(1762497652.310:259): avc: denied { create } for pid=777 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.805320][ T787] netlink: 'syz.3.136': attribute type 4 has an invalid length. [ 49.813986][ T584] usb 2-1: USB disconnect, device number 8 [ 49.820579][ T787] netlink: 'syz.3.136': attribute type 4 has an invalid length. [ 49.927274][ T796] rust_binder: Error while translating object. [ 49.927292][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.933553][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:50 [ 49.999745][ T331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.129585][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 50.129585][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.160621][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.171500][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.181912][ T331] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.190966][ T331] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 50.198927][ T331] usb 1-1: Manufacturer: syz [ 50.204223][ T331] usb 1-1: config 0 descriptor?? [ 50.289523][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 50.289934][ T9] usb 4-1: no configurations [ 50.299363][ T9] usb 4-1: can't read configurations, error -22 [ 50.329849][ T584] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.347969][ T36] audit: type=1400 audit(1762497652.880:260): avc: denied { write } for pid=780 comm="syz.2.133" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.350273][ T800] rust_binder: 141: no such ref 3 [ 50.373077][ T800] rust_binder: inc_ref_done called when no active inc_refs [ 50.373095][ T800] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 50.387342][ T800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 50.415531][ T331] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 50.429538][ T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 50.437335][ T331] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 50.455067][ T331] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 50.459654][ T811] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 50.465839][ T331] usb 1-1: USB disconnect, device number 9 [ 50.482197][ T811] binder: Bad value for 'defcontext' [ 50.482347][ T584] usb 2-1: Using ep0 maxpacket: 16 [ 50.494354][ T584] usb 2-1: unable to get BOS descriptor set [ 50.504110][ T584] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 50.514064][ T584] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 50.523852][ T584] usb 2-1: config 1 interface 0 has no altsetting 0 [ 50.533955][ T584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.543118][ T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.551489][ T584] usb 2-1: Product: syz [ 50.555660][ T584] usb 2-1: Manufacturer: syz [ 50.560259][ T584] usb 2-1: SerialNumber: syz [ 50.566620][ T798] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 50.574179][ T798] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 50.589925][ T9] usb 4-1: no configurations [ 50.596366][ T9] usb 4-1: can't read configurations, error -22 [ 50.602838][ T9] usb usb4-port1: attempt power cycle [ 50.609620][ T817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.610022][ T817] rust_binder: Error in use_page_slow: ESRCH [ 50.616499][ T817] rust_binder: use_range failure ESRCH [ 50.622518][ T817] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 50.627972][ T817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.635879][ T817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:135 [ 50.692674][ T36] audit: type=1400 audit(1762497653.230:261): avc: denied { read } for pid=818 comm="syz.0.146" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.697921][ T819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.722785][ T819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.729410][ T819] rust_binder: Error in use_page_slow: ESRCH [ 50.736758][ T819] rust_binder: use_range failure ESRCH [ 50.742769][ T819] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 50.748230][ T819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.756228][ T819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:137 [ 50.792099][ T821] rust_binder: 139: no such ref 2 [ 50.850591][ T823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.850833][ T823] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 50.857302][ T823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.865403][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:141 [ 50.875279][ T823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.884498][ T824] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 50.890851][ T824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.899012][ T824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:141 [ 50.938364][ T834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.949576][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 51.022391][ T9] usb 4-1: no configurations [ 51.027018][ T9] usb 4-1: can't read configurations, error -22 [ 51.072719][ T844] process 'syz.0.153' launched './file2' with NULL argv: empty string added [ 51.159559][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 51.180248][ T9] usb 4-1: no configurations [ 51.184874][ T9] usb 4-1: can't read configurations, error -22 [ 51.191262][ T9] usb usb4-port1: unable to enumerate USB device [ 51.943707][ T851] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.015645][ T853] __vm_enough_memory: pid: 853, comm: syz.0.156, bytes: 18014402804453376 not enough memory for the allocation [ 52.040869][ T855] overlayfs: failed to resolve './file1/file0': -2 [ 52.780041][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.788956][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 52.796558][ T45] usb 3-1: can't read configurations, error -71 [ 52.853581][ T865] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.862450][ T866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.917351][ T876] loop4: detected capacity change from 0 to 8388607 [ 52.970749][ T584] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 52.988660][ T584] usb 2-1: USB disconnect, device number 9 [ 53.009365][ T882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.010584][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.016596][ T882] IPv6: NLM_F_CREATE should be set when creating new route [ 53.030119][ T882] IPv6: NLM_F_CREATE should be set when creating new route [ 53.052246][ T887] __vm_enough_memory: pid: 887, comm: syz.2.166, bytes: 18014402804453376 not enough memory for the allocation [ 53.129156][ T900] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.149583][ T331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.311111][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.319566][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 53.322105][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.339343][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.352171][ T331] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 53.361424][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.370072][ T331] usb 1-1: config 0 descriptor?? [ 53.479564][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 53.485849][ T9] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.495723][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.505544][ T9] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.518538][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 53.526476][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 53.535535][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.543528][ T9] usb 4-1: Product: syz [ 53.547671][ T9] usb 4-1: Manufacturer: syz [ 53.552391][ T9] usb 4-1: SerialNumber: syz [ 53.629598][ T45] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 53.759368][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 53.777374][ T331] usbhid 1-1:0.0: can't add hid device: -71 [ 53.783459][ T331] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 53.792679][ T331] usb 1-1: USB disconnect, device number 10 [ 53.798771][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.809896][ T45] usb 3-1: config 0 has no interfaces? [ 53.815366][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 53.824389][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.832815][ T45] usb 3-1: config 0 descriptor?? [ 54.113162][ T45] usb 4-1: USB disconnect, device number 11 [ 54.124416][ T45] usblp0: removed [ 54.141066][ T909] input: syz0 as /devices/virtual/input/input4 [ 54.147994][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 54.148038][ T36] audit: type=1400 audit(1762497656.680:278): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=493 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.176304][ T36] audit: type=1400 audit(1762497656.680:279): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.199458][ T36] audit: type=1400 audit(1762497656.680:280): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.230689][ T912] rust_binder: Write failure EFAULT in pid:117 [ 54.242028][ T914] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 54.314635][ T919] random: crng reseeded on system resumption [ 54.315391][ T36] audit: type=1400 audit(1762497656.850:281): avc: denied { ioctl } for pid=918 comm="syz.3.177" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.354481][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185 [ 54.354894][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185 [ 54.386081][ T924] rust_binder: Write failure EFAULT in pid:187 [ 54.410712][ T930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.417247][ T930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 54.437256][ T934] tipc: Started in network mode [ 54.451344][ T934] tipc: Node identity ac14140f, cluster identity 4711 [ 54.458153][ T934] tipc: Enabling of bearer rejected, failed to enable media [ 54.508643][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.508670][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.516108][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.521588][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.534463][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.534484][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.547892][ T944] /dev/rnullb0: Can't open blockdev [ 54.553187][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.553206][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.554079][ T943] rust_binder: Error in use_page_slow: ESRCH [ 54.573041][ T943] rust_binder: use_range failure ESRCH [ 54.573065][ T943] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 54.577878][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.593305][ T943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.593336][ T943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192 [ 54.612925][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.612944][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.619424][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.626998][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.633643][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.640277][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.646750][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.653432][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.660010][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.666532][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.673156][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.679784][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.686246][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.692938][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.699401][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.706093][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.712667][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.719187][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.725810][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.732423][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.738882][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.745557][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.752377][ T941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.019552][ T45] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 55.049561][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.055719][ T883] Bluetooth: hci0: command 0x1003 tx timeout [ 55.180626][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 55.191669][ T45] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 55.200947][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.210321][ T45] usb 1-1: config 0 descriptor?? [ 55.218119][ T949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.426797][ T952] __vm_enough_memory: pid: 952, comm: syz.3.188, bytes: 18014402804453376 not enough memory for the allocation [ 55.449410][ T36] audit: type=1400 audit(1762497657.980:282): avc: denied { ioctl } for pid=953 comm="syz.3.189" path="socket:[7145]" dev="sockfs" ino=7145 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.473724][ T36] audit: type=1400 audit(1762497657.990:283): avc: denied { ioctl } for pid=953 comm="syz.3.189" path="socket:[7418]" dev="sockfs" ino=7418 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.498624][ T36] audit: type=1400 audit(1762497657.990:284): avc: denied { connect } for pid=953 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.517917][ T36] audit: type=1400 audit(1762497657.990:285): avc: denied { read } for pid=953 comm="syz.3.189" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.537670][ T36] audit: type=1400 audit(1762497658.040:286): avc: denied { read } for pid=953 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.584711][ T36] audit: type=1400 audit(1762497658.120:287): avc: denied { name_bind } for pid=959 comm="syz.1.191" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.631783][ T45] hid-generic 0003:0C70:F00E.0005: hidraw0: USB HID v0.04 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 55.728883][ T967] loop7: detected capacity change from 0 to 7 [ 55.735518][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.743392][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.751320][ T574] loop7: unable to read partition table [ 55.757590][ T967] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.765529][ T967] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.773427][ T967] loop7: unable to read partition table [ 55.779095][ T967] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 55.779548][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.800578][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.808529][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.816487][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.824437][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.832390][ T574] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.864780][ T972] rust_binder: Error while translating object. [ 55.864815][ T972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.871075][ T972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 55.902643][ T975] __vm_enough_memory: pid: 975, comm: syz.1.196, bytes: 18014402804453376 not enough memory for the allocation [ 55.971118][ T45] usb 1-1: USB disconnect, device number 11 [ 55.997400][ T984] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 55.997411][ T985] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 56.163377][ T45] usb 3-1: USB disconnect, device number 6 [ 56.356955][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 56.357312][ T1001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.367691][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:191 [ 56.393619][ T1004] netlink: 'syz.2.207': attribute type 3 has an invalid length. [ 56.410860][ T1004] netlink: 944 bytes leftover after parsing attributes in process `syz.2.207'. [ 56.481793][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 56.491537][ T1006] rust_binder: Error while translating object. [ 56.491582][ T1006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.498099][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:150 [ 56.729524][ T45] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 56.890468][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.900617][ T45] usb 1-1: config 0 has no interfaces? [ 56.906072][ T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 56.915125][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.923652][ T45] usb 1-1: config 0 descriptor?? [ 57.279541][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.393965][ T1033] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 57.414300][ T1038] rust_binder: Error while translating object. [ 57.422302][ T1038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.428530][ T1038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 57.437931][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 57.458162][ T45] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.469159][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 57.476054][ T45] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 57.492575][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.501747][ T1042] rust_binder: Write failure EFAULT in pid:90 [ 57.514942][ T45] usb 4-1: config 0 descriptor?? [ 57.549547][ T1047] netlink: 'syz.1.224': attribute type 27 has an invalid length. [ 57.574132][ T1049] binder: Unknown parameter '0x0000000000000000' [ 57.700980][ T1053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 57.729616][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 57.735589][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 57.745358][ T45] usb 4-1: USB disconnect, device number 12 [ 57.819554][ T1056] binder: Bad value for 'max' [ 57.839534][ T380] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 58.259370][ T1068] netlink: 336 bytes leftover after parsing attributes in process `syz.3.231'. [ 58.282226][ T380] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 58.291593][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.301779][ T380] usb 2-1: config 0 descriptor?? [ 58.374346][ T1077] netlink: 680 bytes leftover after parsing attributes in process `syz.3.233'. [ 58.621126][ T1095] overlay: ./file0 is not a directory [ 58.879067][ T1099] mmap: syz.2.240 (1099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.909219][ T380] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 58.919213][ T380] asix 2-1:0.0: probe with driver asix failed with error -61 [ 58.968463][ T1108] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 58.968479][ T1108] rust_binder: Error while translating object. [ 58.977168][ T1108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.983349][ T1108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 59.002166][ T1110] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 59.114566][ T1051] veth0_to_team: mtu greater than device maximum [ 59.209024][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 59.209041][ T36] audit: type=1400 audit(1762497661.740:303): avc: denied { bind } for pid=1115 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.260783][ T10] usb 2-1: USB disconnect, device number 10 [ 59.340583][ T1134] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 59.347796][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 59.378002][ T36] audit: type=1400 audit(1762497661.910:304): avc: denied { bind } for pid=1143 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.383181][ T1146] /dev/rnullb0: Can't open blockdev [ 59.387341][ T36] audit: type=1400 audit(1762497661.910:305): avc: denied { read write } for pid=1143 comm="syz.2.255" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.434757][ T36] audit: type=1400 audit(1762497661.910:306): avc: denied { open } for pid=1143 comm="syz.2.255" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.460076][ T36] audit: type=1400 audit(1762497661.920:307): avc: denied { ioctl } for pid=1143 comm="syz.2.255" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.484443][ T36] audit: type=1400 audit(1762497661.920:308): avc: denied { mounton } for pid=1143 comm="syz.2.255" path="/syzcgroup/unified/syz2" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 59.507825][ T45] usb 1-1: USB disconnect, device number 12 [ 59.508346][ T36] audit: type=1400 audit(1762497661.980:309): avc: denied { create } for pid=1147 comm="syz.2.256" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.535336][ T36] audit: type=1400 audit(1762497661.980:310): avc: denied { link } for pid=1147 comm="syz.2.256" name="file1" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.557838][ T36] audit: type=1400 audit(1762497661.980:311): avc: denied { rename } for pid=1147 comm="syz.2.256" name="#8" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.796209][ T1160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.798162][ T36] audit: type=1326 audit(1762497662.330:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1159 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae978f6c9 code=0x7ffc0000 [ 59.824076][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.828282][ T1160] rust_binder: Error in use_page_slow: ESRCH [ 59.834299][ T1160] rust_binder: use_range failure ESRCH [ 59.840408][ T1160] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 59.845899][ T1160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.853883][ T1160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:210 [ 59.877036][ T1168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.886214][ T1169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.894264][ T1167] fuse: Unknown parameter 'fd0x0000000000000003' [ 59.923485][ T1171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.975084][ T1172] rust_binder: Error in use_page_slow: ESRCH [ 59.981545][ T1172] rust_binder: use_range failure ESRCH [ 59.987515][ T1172] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 59.992977][ T1172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.000801][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:216 [ 60.010441][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 60.049790][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.049815][ T1176] netlink: 'syz.3.265': attribute type 3 has an invalid length. [ 60.077322][ T1180] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 60.084497][ T1185] netlink: 'syz.3.267': attribute type 3 has an invalid length. [ 60.094954][ T1185] overlayfs: failed to clone upperpath [ 60.199525][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 60.206114][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.216214][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 60.223782][ T45] usb 3-1: can't read configurations, error -71 [ 60.359529][ T584] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 60.510536][ T584] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.520639][ T584] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.530836][ T584] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.539899][ T584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.547869][ T584] usb 1-1: Product: syz [ 60.552036][ T584] usb 1-1: Manufacturer: syz [ 60.556617][ T584] usb 1-1: SerialNumber: syz [ 60.793110][ T1204] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 60.793130][ T1204] rust_binder: Error while translating object. [ 60.801920][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.808182][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 60.965219][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.985475][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.035576][ T584] usb 1-1: cannot find UAC_HEADER [ 61.043913][ T584] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 61.056167][ T584] usb 1-1: USB disconnect, device number 13 [ 61.070402][ T574] udevd[574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.176145][ T1249] rust_binder: 294: no such ref 1 [ 61.315752][ T1264] 9pnet_fd: Insufficient options for proto=fd [ 61.323101][ T1263] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 61.330604][ T1263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 61.659543][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 61.820525][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.830220][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 61.842449][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.851535][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.859552][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 61.859565][ T10] usb 3-1: Product: syz [ 61.865738][ T883] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.869990][ T10] usb 3-1: Manufacturer: syz [ 61.880691][ T10] usb 3-1: SerialNumber: syz [ 61.889872][ T10] usb 3-1: config 0 descriptor?? [ 61.932358][ T1298] netlink: 128 bytes leftover after parsing attributes in process `syz.0.306'. [ 61.941790][ T1298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 61.985466][ T1302] /dev/rnullb0: Can't open blockdev [ 61.996809][ T1302] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 62.035059][ T1304] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 62.076358][ T1308] netlink: 312 bytes leftover after parsing attributes in process `syz.1.310'. [ 62.124844][ T1313] rust_binder: 116: no such ref 0 [ 62.130227][ T1313] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 62.137481][ T1313] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 62.390650][ T1320] binder: Unknown parameter 'secl' [ 62.929519][ T1322] cgroup: fork rejected by pids controller in /syz1 [ 63.025929][ T1357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.029578][ T1357] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 63.041420][ T1357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.059150][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:254 [ 63.121513][ T1363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.150287][ T1363] rust_binder: 257: no such ref 2 [ 63.368970][ T1377] overlayfs: failed to clone upperpath [ 63.869547][ T584] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 64.020546][ T584] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.030678][ T584] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.039659][ T584] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 64.048679][ T584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.057467][ T584] usb 2-1: config 0 descriptor?? [ 64.385043][ T10] usb 3-1: USB disconnect, device number 9 [ 64.392038][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 64.392062][ T36] audit: type=1400 audit(1762497666.920:376): avc: denied { ioctl } for pid=1414 comm="syz.2.333" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.489122][ T36] audit: type=1400 audit(1762497667.020:377): avc: denied { read } for pid=1430 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.561309][ T36] audit: type=1400 audit(1762497667.100:378): avc: denied { getopt } for pid=1438 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.029529][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 65.179524][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 65.185621][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 65.193793][ T45] usb 1-1: config 0 has no interface number 0 [ 65.199886][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 65.207931][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 65.216978][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.224960][ T45] usb 1-1: Product: syz [ 65.229093][ T45] usb 1-1: Manufacturer: syz [ 65.233678][ T45] usb 1-1: SerialNumber: syz [ 65.238830][ T45] usb 1-1: config 0 descriptor?? [ 65.244461][ T45] smsc75xx v1.0.0 [ 65.565545][ T36] audit: type=1400 audit(1762497668.100:379): avc: denied { remove_name } for pid=1477 comm="syz.2.353" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.588442][ T36] audit: type=1400 audit(1762497668.100:380): avc: denied { unlink } for pid=1477 comm="syz.2.353" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.845234][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.856105][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.648126][ T10] usb 2-1: USB disconnect, device number 11 [ 66.771066][ T36] audit: type=1400 audit(1762497669.310:381): avc: denied { setopt } for pid=1499 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.787030][ T1500] rust_binder: Error while translating object. [ 66.791342][ T1500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 66.797521][ T1500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:187 [ 67.109555][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 67.175893][ T36] audit: type=1326 audit(1762497669.710:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1517 comm="syz.3.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe4d8f6c9 code=0x0 [ 67.269544][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 67.276555][ T10] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.289537][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 67.289911][ T36] audit: type=1400 audit(1762497669.830:383): avc: denied { bind } for pid=1461 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.297534][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 67.316802][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 67.324275][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.335142][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 67.345298][ T10] usb 2-1: Product: syz [ 67.353143][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 67.357092][ T10] usb 2-1: Manufacturer: syz [ 67.366384][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 67.372059][ T10] usb 2-1: SerialNumber: syz [ 67.381470][ T45] usb 1-1: USB disconnect, device number 14 [ 67.839376][ T1522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.845502][ T36] audit: type=1400 audit(1762497670.380:384): avc: denied { load_policy } for pid=1521 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.845568][ T1522] SELinux: failed to load policy [ 68.017937][ T36] audit: type=1400 audit(1762497670.550:385): avc: denied { setopt } for pid=1527 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.411839][ T1531] rust_binder: Error while translating object. [ 68.411884][ T1531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 68.418077][ T1531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299 [ 68.447934][ T1536] bridge0: entered allmulticast mode [ 68.596898][ T1545] can: request_module (can-proto-4) failed. [ 68.759537][ T584] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 68.839533][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 68.910594][ T584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 68.921545][ T584] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 68.930594][ T584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.939213][ T584] usb 1-1: config 0 descriptor?? [ 68.944427][ T1539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.990591][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 69.001615][ T45] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 69.010695][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.019381][ T45] usb 3-1: config 0 descriptor?? [ 69.024846][ T1545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 69.355181][ T584] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 69.634010][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 69.634041][ T36] audit: type=1400 audit(1762497672.170:389): avc: denied { create } for pid=1544 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.858908][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 69.869660][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 69.896449][ T10] usb 2-1: USB disconnect, device number 12 [ 70.239549][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 70.389530][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 70.397157][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.406376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.414497][ T10] usb 2-1: Product: syz [ 70.418664][ T10] usb 2-1: Manufacturer: syz [ 70.423272][ T10] usb 2-1: SerialNumber: syz [ 70.430555][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 70.436806][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 70.579537][ T331] usb 1-1: reset full-speed USB device number 15 using dummy_hcd [ 70.845356][ T10] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 71.109625][ T1558] 9pnet_fd: Insufficient options for proto=fd [ 71.150450][ T1562] raw_sendmsg: syz.3.383 forgot to set AF_INET. Fix it! [ 71.192521][ T1570] tmpfs: Bad value for 'nr_inodes' [ 71.296738][ T36] audit: type=1400 audit(1762497673.830:390): avc: denied { read } for pid=1598 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.486048][ T36] audit: type=1400 audit(1762497674.020:391): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.517518][ T1608] sit0: entered promiscuous mode [ 71.524278][ T1608] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 71.532552][ T1608] netlink: 1 bytes leftover after parsing attributes in process `syz.0.398'. [ 71.544219][ T1608] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 71.555553][ T1608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.555759][ T1608] >: renamed from veth0_vlan (while UP) [ 71.611285][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 71.617302][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.627698][ T45] usb 3-1: USB disconnect, device number 10 [ 71.686117][ T36] audit: type=1400 audit(1762497674.220:392): avc: denied { bind } for pid=1609 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.709555][ T548] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 71.728854][ T1612] /dev/rnullb0: Can't open blockdev [ 71.753483][ T1621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 71.762694][ T1621] binder: Bad value for 'defcontext' [ 71.827823][ T1624] binder: Unknown parameter 'defcontext01777777777777777777777' [ 71.860822][ T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 71.872706][ T548] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 71.881775][ T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.889987][ T584] usb 1-1: USB disconnect, device number 15 [ 71.896743][ T548] usb 2-1: config 0 descriptor?? [ 71.903084][ T1602] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.039530][ T584] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 72.109540][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 72.190712][ T584] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.199025][ T584] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.207757][ T584] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.217861][ T584] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 72.232030][ T584] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.241101][ T584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.249082][ T584] usb 1-1: Product: syz [ 72.253248][ T584] usb 1-1: Manufacturer: syz [ 72.257837][ T584] usb 1-1: SerialNumber: syz [ 72.269523][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 72.275572][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.283995][ T9] usb 3-1: config 179 has no interface number 0 [ 72.290266][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 72.301484][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 72.312877][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.316419][ T548] hid-generic 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 72.325154][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 72.346282][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.359608][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 72.366470][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 72.375572][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.389092][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 72.464009][ T1608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.464035][ T1608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 72.476626][ T584] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 72.493613][ T584] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 72.501009][ T584] usb 1-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 72.508252][ T584] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 72.522697][ T584] usb 1-1: USB disconnect, device number 16 [ 72.624892][ T548] usb 3-1: USB disconnect, device number 11 [ 72.631191][ T548] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 72.987782][ T36] audit: type=1400 audit(1762497675.520:393): avc: denied { write } for pid=1646 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.034361][ T1651] incfs: Backing dir is not set, filesystem can't be mounted. [ 73.034421][ T1650] /dev/rnullb0: Can't open blockdev [ 73.041965][ T1651] incfs: mount failed -2 [ 73.063954][ T36] audit: type=1400 audit(1762497675.600:394): avc: denied { map } for pid=1652 comm="syz.0.412" path="socket:[11289]" dev="sockfs" ino=11289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 73.143685][ T1658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=1658 comm=syz.2.414 [ 73.169037][ T36] audit: type=1400 audit(1762497675.700:395): avc: denied { mounton } for pid=1661 comm="syz.2.415" path="/file0" dev="ramfs" ino=10995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 73.176404][ T1662] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 73.255342][ T1671] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 73.262719][ T1671] rust_binder: Write failure EINVAL in pid:322 [ 73.391700][ T36] audit: type=1400 audit(1762497675.930:396): avc: denied { create } for pid=1674 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 73.509635][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 73.569544][ T10] usb 2-1: reset full-speed USB device number 14 using dummy_hcd [ 73.670574][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 73.681575][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 73.690884][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.701391][ T9] usb 1-1: config 0 descriptor?? [ 73.708599][ T1673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.120068][ T9] hid-generic 0003:04F3:0755.0008: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 74.319766][ T9] usb 1-1: USB disconnect, device number 17 [ 74.398223][ T1692] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 74.546451][ T1700] 9pnet_fd: Insufficient options for proto=fd [ 74.571700][ T36] audit: type=1400 audit(1762497677.110:397): avc: denied { getopt } for pid=1701 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.861335][ T1708] x_tables: unsorted underflow at hook 2 [ 74.999774][ T380] usb 2-1: USB disconnect, device number 14 [ 75.040550][ T1713] loop7: detected capacity change from 0 to 7 [ 75.047000][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.056154][ C1] buffer_io_error: 4 callbacks suppressed [ 75.056166][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.070362][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.079528][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.087384][ T1713] loop7: unable to read partition table [ 75.095750][ T1713] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 75.097373][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.118361][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.126523][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.135704][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.143752][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.149531][ T380] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 75.160060][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.169420][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.177796][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.186942][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.195376][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.204525][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.257052][ T1719] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.310622][ T380] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.327780][ T380] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.336955][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.345375][ T380] usb 2-1: config 0 descriptor?? [ 75.489535][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 75.559541][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 75.640540][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.651465][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.660496][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.668946][ T10] usb 1-1: config 0 descriptor?? [ 75.710500][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.719607][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.728019][ T9] usb 3-1: config 0 descriptor?? [ 75.875407][ T36] audit: type=1400 audit(1762497678.410:398): avc: denied { mounton } for pid=1718 comm="syz.0.437" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 75.875456][ T1719] incfs: mount failed -22 [ 76.106969][ T10] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 76.116537][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input8 [ 76.183012][ T10] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 76.334487][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 76.344864][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 76.382929][ T36] audit: type=1400 audit(1762497678.920:399): avc: denied { read } for pid=1725 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.494805][ T1729] virtiofs: Unknown parameter 'always' [ 76.500353][ T36] audit: type=1400 audit(1762497679.030:400): avc: denied { mounton } for pid=1728 comm="syz.3.440" path="/140/bus" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.535837][ T36] audit: type=1400 audit(1762497679.070:401): avc: denied { create } for pid=1720 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.536111][ T1721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 76.560687][ T36] audit: type=1400 audit(1762497679.070:402): avc: denied { write } for pid=1720 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.576819][ T1721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.595082][ T1721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.605238][ T36] audit: type=1400 audit(1762497679.070:403): avc: denied { nlmsg_read } for pid=1720 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.610944][ T9] usb 3-1: USB disconnect, device number 12 [ 76.659520][ T36] audit: type=1400 audit(1762497679.190:404): avc: denied { ioctl } for pid=1738 comm="syz.2.442" path="socket:[12938]" dev="sockfs" ino=12938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.697268][ T331] usb 1-1: USB disconnect, device number 18 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 76.835461][ T1773] binder: Binderfs stats mode cannot be changed during a remount Stopping network: [ 76.900893][ T36] audit: type=1400 audit(1762497679.440:405): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 76.934869][ T36] audit: type=1400 audit(1762497679.470:406): avc: denied { read write } for pid=1780 comm="ip" path="/dev/console" dev="rootfs" ino=84 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 76.959462][ T36] audit: type=1400 audit(1762497679.490:407): avc: denied { ioctl } for pid=1703 comm="syz.1.431" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 77.324156][ T1805] fuse: Bad value for 'group_id' [ 77.329169][ T1805] fuse: Bad value for 'group_id' [ 77.611738][ T9] usb 2-1: USB disconnect, device number 15 [ 77.624302][ T1811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 77.875904][ T1820] netlink: 'syz.3.460': attribute type 16 has an invalid length. [ 77.892822][ T1820] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.460'. [ 77.903009][ T1820] overlayfs: failed to clone lowerpath [ 77.949560][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 78.102057][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 78.111251][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.119257][ T9] usb 2-1: Product: syz [ 78.123512][ T9] usb 2-1: Manufacturer: syz [ 78.128098][ T9] usb 2-1: SerialNumber: syz [ 78.133136][ T9] usb 2-1: config 0 descriptor?? OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 78.329549][ T380] usb 1-1: new low-speed USB device number 19 using dummy_hcd umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.106 closed by remote host. Sent SIGTERM to all processes [ 78.578809][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 78.588821][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 78.605711][ T13] bridge_slave_1: left allmulticast mode [ 78.611773][ T13] bridge_slave_1: left promiscuous mode [ 78.614838][ T9] usb 2-1: USB disconnect, device number 16 [ 78.617380][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.630821][ T13] bridge_slave_0: left allmulticast mode [ 78.636464][ T13] bridge_slave_0: left promiscuous mode [ 78.642221][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.811442][ T13] veth1_macvtap: left promiscuous mode [ 78.816941][ T13] veth0_vlan: left promiscuous mode [ 78.909610][ T380] usb 1-1: device not accepting address 19, error -71 [ 79.072210][ T13] bridge_slave_1: left allmulticast mode [ 79.077853][ T13] bridge_slave_1: left promiscuous mode [ 79.083461][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.090910][ T13] bridge_slave_0: left allmulticast mode [ 79.096530][ T13] bridge_slave_0: left promiscuous mode [ 79.102151][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.109772][ T13] bridge_slave_1: left allmulticast mode [ 79.115390][ T13] bridge_slave_1: left promiscuous mode [ 79.120982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.128307][ T13] bridge_slave_0: left allmulticast mode [ 79.133973][ T13] bridge_slave_0: left promiscuous mode [ 79.139610][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.147070][ T13] bridge_slave_1: left allmulticast mode [ 79.152721][ T13] bridge_slave_1: left promiscuous mode [ 79.158297][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.165653][ T13] bridge_slave_0: left allmulticast mode [ 79.171331][ T13] bridge_slave_0: left promiscuous mode [ 79.176891][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.212736][ T13] bridge0 (unregistering): left allmulticast mode [ 79.421889][ T13] tipc: Left network mode [ 79.427606][ T13] veth1_macvtap: left promiscuous mode [ 79.433125][ T13] >: left promiscuous mode [ 79.437697][ T13] veth1_macvtap: left promiscuous mode [ 79.443225][ T13] veth0_vlan: left promiscuous mode [ 79.448560][ T13] veth1_macvtap: left promiscuous mode [ 79.454488][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 80.546347][ T1865] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 80.552978][ T1865] ACPI: PM: Preparing to enter system sleep state S5 [ 80.559913][ T1865] kvm: exiting hardware virtualization [ 80.565392][ T1865] reboot: Power down serialport: VM disconnected.