last executing test programs: 3.087426133s ago: executing program 1 (id=284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f0000001140)="e65c3e463c31ec427e92b7c9a647c5774b6168faee02ade22caee6b0f2e71786b8adb12b97509ed0b003ebeaad97aa2184312f7f761f5210c39591e8b46bc9ae78f4aa585fa32cf2acab5a4885f23790a5b25a508f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x3, 0x0, &(0x7f00000009c0)="96b900"}) 2.661368097s ago: executing program 2 (id=295): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) syslog(0x2, &(0x7f00000000c0)=""/112, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) 2.196788221s ago: executing program 1 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f00000000c0)=0x80000048, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 1.159350203s ago: executing program 2 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, &(0x7f0000000080)=0xa518, 0x100000000) 885.515702ms ago: executing program 2 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x5, 0x8, 0x1, 0xbca, 0x40000000007, 0xfffffffffffffffc, 0x7c}, 0x0, &(0x7f0000000440)={0xd2, 0x2, 0x3, 0x6738, 0x8, 0x0, 0x6, 0x1}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 771.753255ms ago: executing program 0 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 771.546536ms ago: executing program 0 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16, 0x2}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x2, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0xe000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x83, 0x1, 0x70}, {0x100000, 0xd000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x4}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x5000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 771.422776ms ago: executing program 0 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000780)={0x2, 0x0, [{0x80000000, 0x3, 0x2, 0x9, 0x7}, {0x40000001, 0x9, 0x10, 0x2, 0x2}]}) 771.325956ms ago: executing program 0 (id=307): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x7, 0x3}, 0xe) 757.320556ms ago: executing program 0 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x890601920001, 0x140000000000000, 0x1, 0x3, 0x1, 0x20000000000010, 0x0, 0xfffffffffffff806, 0x7ff, 0x9, 0x1003, 0x10002, 0x1000000000007, 0x2, 0x1, 0xb], 0xdddd1000, 0x43a44}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 742.114537ms ago: executing program 0 (id=309): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) syz_clone3(&(0x7f0000000500)={0x200220000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 587.734881ms ago: executing program 1 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 296.44691ms ago: executing program 2 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 123.720016ms ago: executing program 1 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000004c0)={0x1, 0x0, [{0x1, 0x6, 0x200b, 0x1ff, 0xb4cc}]}) 120.318366ms ago: executing program 2 (id=320): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/253, 0xfd}], 0x1, &(0x7f0000000300)=""/244, 0xf4}, 0x1}], 0x1, 0x40010000, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140c5}, 0x0) 102.648187ms ago: executing program 3 (id=322): personality(0xfe47fef9f5ff7379) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x7]}, 0x8) 87.345777ms ago: executing program 1 (id=323): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x7, 0x2, r2}) 35.757129ms ago: executing program 3 (id=324): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000240)) 35.581409ms ago: executing program 3 (id=325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0xeb4179938bcbb0e1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 35.417679ms ago: executing program 2 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000580)=@x86={0xd4, 0x0, 0xc9, 0x0, 0x2, 0x80, 0x0, 0x8, 0x8, 0x80, 0x48, 0x4, 0x0, 0xb28, 0x6, 0x1, 0x3, 0x19, 0xa4, '\x00', 0x4, 0x5}) 35.184829ms ago: executing program 3 (id=327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 17.485089ms ago: executing program 3 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x339a9f568d41de71}, 0x14) 3.494609ms ago: executing program 1 (id=329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x20000008) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(0x3) 0s ago: executing program 3 (id=330): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="55062540bf75b8034f8491df6f18de90b0c000edafe5677339e324010a533cda02e208fa1e42802845b6133e6ce17d3029d5e9a6d152794e7ffa5db89c824e85a9fd2d415fe757b4605bdcdb", 0x4c}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2000c090) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xac) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.971567][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 15.971586][ T36] audit: type=1400 audit(1779099004.970:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.976198][ T36] audit: type=1400 audit(1779099004.970:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.980957][ T36] audit: type=1400 audit(1779099004.980:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2402]" dev="pipefs" ino=2402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.984471][ T36] audit: type=1400 audit(1779099004.980:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.987557][ T36] audit: type=1400 audit(1779099004.980:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 24.420507][ T36] audit: type=1400 audit(1779099013.420:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.424204][ T286] cgroup: Unknown subsys name 'net' [ 24.443204][ T36] audit: type=1400 audit(1779099013.420:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.470651][ T36] audit: type=1400 audit(1779099013.460:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.471188][ T286] cgroup: Unknown subsys name 'devices' [ 24.650534][ T286] cgroup: Unknown subsys name 'hugetlb' [ 24.656204][ T286] cgroup: Unknown subsys name 'rlimit' [ 24.833099][ T36] audit: type=1400 audit(1779099013.830:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.856409][ T36] audit: type=1400 audit(1779099013.830:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.881306][ T36] audit: type=1400 audit(1779099013.830:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.905821][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.914705][ T36] audit: type=1400 audit(1779099013.920:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.940294][ T36] audit: type=1400 audit(1779099013.920:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.975001][ T36] audit: type=1400 audit(1779099013.970:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.000650][ T36] audit: type=1400 audit(1779099013.970:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.001375][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.297052][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.304199][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.311460][ T293] bridge_slave_0: entered allmulticast mode [ 26.318847][ T293] bridge_slave_0: entered promiscuous mode [ 26.325627][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.332730][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.340326][ T293] bridge_slave_1: entered allmulticast mode [ 26.347235][ T293] bridge_slave_1: entered promiscuous mode [ 26.476472][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.483648][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.490833][ T298] bridge_slave_0: entered allmulticast mode [ 26.497137][ T298] bridge_slave_0: entered promiscuous mode [ 26.503824][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.510915][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.518019][ T298] bridge_slave_1: entered allmulticast mode [ 26.524688][ T298] bridge_slave_1: entered promiscuous mode [ 26.599286][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.606379][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.613547][ T297] bridge_slave_0: entered allmulticast mode [ 26.619938][ T297] bridge_slave_0: entered promiscuous mode [ 26.626613][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.633983][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.641179][ T297] bridge_slave_1: entered allmulticast mode [ 26.647470][ T297] bridge_slave_1: entered promiscuous mode [ 26.680283][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.687385][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.694794][ T299] bridge_slave_0: entered allmulticast mode [ 26.701172][ T299] bridge_slave_0: entered promiscuous mode [ 26.709295][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.716363][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.723726][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.730803][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.739024][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.746102][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.753439][ T299] bridge_slave_1: entered allmulticast mode [ 26.759819][ T299] bridge_slave_1: entered promiscuous mode [ 26.817126][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.824328][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.831701][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.838767][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.874002][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.881530][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.889833][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.897152][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.929415][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.936501][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.959406][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.966469][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.005206][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.012324][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.028011][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.035133][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.065476][ T293] veth0_vlan: entered promiscuous mode [ 27.084324][ T298] veth0_vlan: entered promiscuous mode [ 27.095414][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.102546][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.110407][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.117457][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.145853][ T298] veth1_macvtap: entered promiscuous mode [ 27.166810][ T293] veth1_macvtap: entered promiscuous mode [ 27.176441][ T297] veth0_vlan: entered promiscuous mode [ 27.198001][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.205120][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.221158][ T297] veth1_macvtap: entered promiscuous mode [ 27.229449][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.236497][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.271942][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.304886][ T299] veth0_vlan: entered promiscuous mode [ 27.340207][ T299] veth1_macvtap: entered promiscuous mode [ 27.420005][ T322] raw_sendmsg: syz.0.6 forgot to set AF_INET. Fix it! [ 27.487614][ T336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9'. [ 28.053131][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 28.062189][ T439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 28.109070][ T446] ======================================================= [ 28.109070][ T446] WARNING: The mand mount option has been deprecated and [ 28.109070][ T446] and is ignored by this kernel. Remove the mand [ 28.109070][ T446] option from the mount to silence this warning. [ 28.109070][ T446] ======================================================= [ 28.379332][ T488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.82'. [ 28.587607][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 28.597219][ T521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'. [ 28.695798][ T538] tmpfs: Unknown parameter '' [ 28.737403][ T544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 28.790523][ T548] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.000917][ T569] kvm: pic: non byte read [ 29.005628][ T569] kvm: pic: level sensitive irq not supported [ 29.005690][ T569] kvm: pic: non byte read [ 29.016937][ T569] kvm: pic: level sensitive irq not supported [ 29.016999][ T569] kvm: pic: non byte read [ 29.030413][ T569] kvm: pic: level sensitive irq not supported [ 29.030475][ T569] kvm: pic: non byte read [ 29.043866][ T569] kvm: pic: level sensitive irq not supported [ 29.043928][ T569] kvm: pic: non byte read [ 29.061866][ T569] kvm: pic: level sensitive irq not supported [ 29.061929][ T569] kvm: pic: non byte read [ 29.082175][ T569] kvm: pic: level sensitive irq not supported [ 29.082297][ T569] kvm: pic: non byte read [ 29.099465][ T569] kvm: pic: level sensitive irq not supported [ 29.099531][ T569] kvm: pic: non byte read [ 29.121676][ T569] kvm: pic: level sensitive irq not supported [ 29.121745][ T569] kvm: pic: non byte read [ 29.134036][ T569] kvm: pic: level sensitive irq not supported [ 29.134103][ T569] kvm: pic: non byte read [ 29.146091][ T569] kvm: pic: level sensitive irq not supported [ 29.219272][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 29.332090][ T589] tipc: Started in network mode [ 29.339473][ T589] tipc: Node identity e29a74426718, cluster identity 4711 [ 29.346745][ T589] tipc: Enabled bearer , priority 0 [ 29.393124][ T589] syzkaller0: entered promiscuous mode [ 29.404314][ T589] syzkaller0: entered allmulticast mode [ 29.411132][ T589] tipc: Resetting bearer [ 29.420377][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.428357][ T588] tipc: Resetting bearer [ 29.428853][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 29.443891][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.454101][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.468440][ T588] tipc: Disabling bearer [ 29.482413][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 29.483018][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 29.483061][ T36] audit: type=1400 audit(1779099018.480:134): avc: denied { bind } for pid=595 comm="syz.1.131" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.492345][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.509039][ T36] audit: type=1400 audit(1779099018.500:135): avc: denied { name_bind } for pid=595 comm="syz.1.131" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 29.519019][ T31] usb 1-1: Product: syz [ 29.546745][ T36] audit: type=1400 audit(1779099018.520:136): avc: denied { node_bind } for pid=595 comm="syz.1.131" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 29.550655][ T31] usb 1-1: Manufacturer: syz [ 29.591370][ T36] audit: type=1400 audit(1779099018.590:137): avc: denied { ioctl } for pid=599 comm="syz.1.133" path="socket:[4710]" dev="sockfs" ino=4710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.617807][ T31] usb 1-1: SerialNumber: syz [ 29.619191][ T36] audit: type=1400 audit(1779099018.610:138): avc: denied { bind } for pid=599 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.661007][ T36] audit: type=1400 audit(1779099018.610:139): avc: denied { write } for pid=599 comm="syz.1.133" name="ptype" dev="proc" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.718626][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 29.773025][ T36] audit: type=1400 audit(1779099018.770:140): avc: denied { ioctl } for pid=604 comm="syz.1.135" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.819528][ T36] audit: type=1400 audit(1779099018.820:141): avc: denied { bind } for pid=606 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.838918][ T36] audit: type=1400 audit(1779099018.820:142): avc: denied { setopt } for pid=606 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.863489][ T36] audit: type=1400 audit(1779099018.820:143): avc: denied { write } for pid=606 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.884769][ T31] usb 1-1: Unsupported UAC3 BADD profile [ 29.891486][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 29.895038][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.907885][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.924254][ T31] usb 1-1: USB disconnect, device number 2 [ 29.932873][ T10] usb 4-1: Product: syz [ 29.937334][ T10] usb 4-1: Manufacturer: syz [ 29.942425][ T10] usb 4-1: SerialNumber: syz [ 29.973961][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.213775][ T618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.140'. [ 30.351214][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 30.906266][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.058117][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 31.066278][ T10] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 31.075465][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.083692][ T10] usb 3-1: Product: syz [ 31.087950][ T10] usb 3-1: Manufacturer: syz [ 31.092815][ T10] usb 3-1: SerialNumber: syz [ 31.558470][ T671] tmpfs: Bad value for 'size' [ 31.909686][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 31.929895][ T10] usb 3-1: USB disconnect, device number 2 [ 31.947455][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.018140][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.169341][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.180369][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.190214][ T31] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 32.199348][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.208543][ T31] usb 2-1: config 0 descriptor?? [ 32.399814][ T10] usb 4-1: USB disconnect, device number 2 [ 32.407315][ T10] usblp0: removed [ 32.444229][ T690] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 32.998157][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.028698][ T31] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 33.039293][ T31] usb 2-1: USB disconnect, device number 2 [ 33.148144][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 33.155076][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.163519][ T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 33.175941][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f8, bcdDevice= 0.40 [ 33.185125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.193271][ T10] usb 4-1: Product: syz [ 33.197535][ T10] usb 4-1: Manufacturer: syz [ 33.202202][ T10] usb 4-1: SerialNumber: syz [ 33.346077][ T703] netlink: 'syz.2.175': attribute type 32 has an invalid length. [ 33.367849][ T705] capability: warning: `syz.2.176' uses deprecated v2 capabilities in a way that may be insecure [ 33.414515][ T10] usb 4-1: USB disconnect, device number 3 [ 33.598627][ T721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 33.738207][ T701] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.889844][ T701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.899929][ T701] usb 3-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 33.909307][ T701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.919200][ T701] usb 3-1: Product: syz [ 33.923483][ T701] usb 3-1: Manufacturer: syz [ 33.929038][ T701] usb 3-1: SerialNumber: syz [ 34.148376][ T701] usb 3-1: 1:1 : sample bitwidth 59 in over sample bytes 4 [ 34.156086][ T701] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 34.167055][ T701] usb 3-1: failed to enable PITCH for EP 0x1 [ 34.173991][ T701] usb 3-1: unit 2 not found! [ 34.179070][ T701] usb 3-1: unit 0 not found! [ 34.191608][ T701] usb 3-1: USB disconnect, device number 3 [ 34.214391][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.680339][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 34.680364][ T36] audit: type=1400 audit(1779099023.680:170): avc: denied { read } for pid=742 comm="syz.2.193" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.728241][ T36] audit: type=1400 audit(1779099023.710:171): avc: denied { open } for pid=742 comm="syz.2.193" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.848602][ T36] audit: type=1400 audit(1779099023.830:172): avc: denied { read } for pid=751 comm="syz.3.197" dev="nsfs" ino=4026532579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.869792][ T36] audit: type=1400 audit(1779099023.830:173): avc: denied { open } for pid=751 comm="syz.3.197" path="net:[4026532579]" dev="nsfs" ino=4026532579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.895153][ T36] audit: type=1400 audit(1779099023.830:174): avc: denied { getopt } for pid=751 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.017593][ T565] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.158521][ T621] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.169893][ T565] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.184382][ T565] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 35.193524][ T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 35.201813][ T565] usb 2-1: Product: syz [ 35.206198][ T565] usb 2-1: Manufacturer: syz [ 35.211382][ T565] usb 2-1: SerialNumber: syz [ 35.311418][ T621] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 35.319158][ T621] usb 3-1: can't read configurations, error -71 [ 35.408134][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.419511][ T565] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 35.559419][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 35.570751][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.583729][ T31] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 35.592903][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.603021][ T31] usb 4-1: config 0 descriptor?? [ 35.637948][ T36] audit: type=1400 audit(1779099024.630:175): avc: denied { listen } for pid=766 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.657503][ T36] audit: type=1400 audit(1779099024.640:176): avc: denied { mounton } for pid=766 comm="syz.0.203" path="/51/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.012297][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.019307][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.026226][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.033188][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.040144][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.047057][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.054003][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.060936][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.067857][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.074891][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.081845][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.088796][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.095720][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.102658][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.109594][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.116540][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.123478][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.130451][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.137374][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.144392][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.151361][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.158306][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.165226][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.172164][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.179145][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.186060][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.193003][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.199959][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.206884][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.213837][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.220782][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.227708][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.234663][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.241655][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.248619][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.255533][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.262496][ T31] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 36.270449][ T31] betop 0003:20BC:5500.0002: hidraw0: USB HID v0.04 Device [HID 20bc:5500] on usb-dummy_hcd.3-1/input0 [ 36.281736][ T31] betop 0003:20BC:5500.0002: no inputs found [ 36.289615][ T31] usb 4-1: USB disconnect, device number 4 [ 36.327599][ T777] fido_id[777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 36.368123][ T621] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.518112][ T621] usb 3-1: Using ep0 maxpacket: 16 [ 36.524350][ T621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.535507][ T621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.545419][ T621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.558300][ T621] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.567531][ T621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.576680][ T621] usb 3-1: config 0 descriptor?? [ 36.760746][ T36] audit: type=1400 audit(1779099025.760:177): avc: denied { append } for pid=783 comm="syz.3.209" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.990515][ T621] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 37.000250][ T621] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 37.010376][ T621] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 37.019652][ T621] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 37.028177][ T621] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 37.039657][ T621] microsoft 0003:045E:07DA.0003: no inputs found [ 37.046053][ T621] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 37.128162][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.168674][ C0] usblp0: nonzero write bulk status received: -71 [ 37.175812][ T621] usb 2-1: USB disconnect, device number 3 [ 37.182855][ T621] usblp0: removed [ 37.193468][ T565] usb 3-1: USB disconnect, device number 5 [ 37.278158][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 37.284943][ T31] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 37.293383][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.303597][ T31] usb 4-1: config 0 has no interface number 0 [ 37.309816][ T31] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 37.319036][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.327998][ T31] usb 4-1: config 0 descriptor?? [ 37.334761][ T31] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 37.342024][ T31] usb 4-1: No valid video chain found. [ 37.356197][ T791] tipc: Enabling of bearer rejected, failed to enable media [ 37.388472][ T36] audit: type=1400 audit(1779099026.390:178): avc: denied { bind } for pid=794 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.407664][ T36] audit: type=1400 audit(1779099026.390:179): avc: denied { name_bind } for pid=794 comm="syz.0.214" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 37.536145][ T621] usb 4-1: USB disconnect, device number 5 [ 37.723571][ T830] input: syz0 as /devices/virtual/input/input4 [ 37.753037][ T833] input: syz1 as /devices/virtual/input/input5 [ 37.903576][ T840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.235'. [ 37.938149][ T621] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.108127][ T621] usb 2-1: Using ep0 maxpacket: 32 [ 39.089958][ T621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.102305][ T621] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 39.115004][ T621] usb 2-1: config 1 has no interface number 0 [ 39.124225][ T621] usb 2-1: config 1 interface 228 has no altsetting 0 [ 39.142520][ T621] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=96.6c [ 39.197170][ T867] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 39.218697][ T621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.226755][ T621] usb 2-1: Product: syz [ 39.231002][ T621] usb 2-1: Manufacturer: syz [ 39.237137][ T621] usb 2-1: SerialNumber: syz [ 39.448711][ T621] rndis_host 2-1:1.228: More than one union descriptor, skipping ... [ 39.456905][ T621] usb 2-1: bad CDC descriptors [ 39.461980][ T621] cdc_acm 2-1:1.228: More than one union descriptor, skipping ... [ 39.478168][ T621] usb 2-1: USB disconnect, device number 4 [ 39.858130][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.010598][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 40.019217][ T31] usb 3-1: config 5 has an invalid interface number: 16 but max is 0 [ 40.027411][ T31] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 40.037942][ T31] usb 3-1: config 5 has no interface number 0 [ 40.044128][ T31] usb 3-1: config 5 interface 16 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 40.057353][ T31] usb 3-1: config 5 interface 16 has no altsetting 0 [ 40.065641][ T31] usb 3-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=bc.96 [ 40.074881][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.083221][ T31] usb 3-1: Product: syz [ 40.087428][ T31] usb 3-1: Manufacturer: syz [ 40.092112][ T31] usb 3-1: SerialNumber: syz [ 40.098601][ T31] usb 3-1: bad CDC descriptors [ 40.208147][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.270308][ T915] input: syz1 as /devices/virtual/input/input6 [ 40.295114][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 40.295133][ T36] audit: type=1400 audit(2000000002.110:199): avc: denied { unlink } for pid=916 comm="syz.3.266" name="#1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.324343][ T10] usb 3-1: USB disconnect, device number 6 [ 40.325643][ T36] audit: type=1400 audit(2000000002.110:200): avc: denied { mount } for pid=916 comm="syz.3.266" name="/" dev="overlay" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.353253][ T36] audit: type=1400 audit(2000000002.150:201): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.388120][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 40.394558][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.405540][ T46] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.418484][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.425102][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 40.434312][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.443202][ T46] usb 2-1: config 0 descriptor?? [ 40.867117][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x3 [ 40.876334][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 40.884994][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 40.893653][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 40.901907][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 40.910528][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 40.917900][ T46] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x6 [ 40.926827][ T46] lg-g15 0003:046D:0A07.0004: unbalanced collection at end of report description [ 40.939187][ T46] lg-g15 0003:046D:0A07.0004: probe with driver lg-g15 failed with error -22 [ 41.091095][ T46] usb 2-1: USB disconnect, device number 5 [ 41.123997][ T36] audit: type=1400 audit(2000000002.940:202): avc: denied { read write } for pid=930 comm="syz.2.271" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.132237][ T621] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 41.159882][ T621] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.162161][ T36] audit: type=1400 audit(2000000002.940:203): avc: denied { open } for pid=930 comm="syz.2.271" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.357453][ T36] audit: type=1400 audit(2000000003.170:204): avc: denied { block_suspend } for pid=939 comm="syz.2.274" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.396042][ T36] audit: type=1400 audit(2000000003.210:205): avc: denied { getopt } for pid=941 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.429201][ T36] audit: type=1326 audit(2000000003.250:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.2.276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad9ce59 code=0x7ffc0000 [ 41.454411][ T36] audit: type=1326 audit(2000000003.250:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.2.276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad9ce59 code=0x7ffc0000 [ 41.485397][ T36] audit: type=1326 audit(2000000003.250:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.2.276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad9ce59 code=0x7ffc0000 [ 41.632048][ T953] input: syz0 as /devices/virtual/input/input7 [ 41.966923][ T964] rust_binder: 962:964 transaction to 0 failed: ENOENT [ 41.966998][ T964] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.974030][ T964] rust_binder: Read failure Err(EFAULT) in pid:167 [ 42.100071][ T966] Zero length message leads to an empty skb [ 42.214502][ T974] netlink: 'syz.0.289': attribute type 298 has an invalid length. [ 44.110448][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.111576][ T999] rust_binder: 998:999 transaction to 0 failed: ENOENT [ 44.121627][ T1001] veth1_to_bond: entered allmulticast mode [ 44.139119][ T1001] veth1_to_bond: left allmulticast mode [ 44.746763][ T1024] syzkaller0: entered promiscuous mode [ 44.755984][ T1024] syzkaller0: entered allmulticast mode [ 44.815459][ T1034] tipc: Enabling of bearer rejected, failed to enable media [ 44.895060][ T1043] rust_binder: 1041:1043 transaction to 0 failed: ENOENT [ 45.020059][ T1063] ------------[ cut here ]------------ [ 45.032717][ T1063] WARNING: CPU: 0 PID: 1063 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 45.042317][ T1063] Modules linked in: [ 45.046285][ T1063] CPU: 0 UID: 0 PID: 1063 Comm: syz.3.330 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 45.057861][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 45.068007][ T1063] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 45.074115][ T1063] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 52 2c 0c 06 00 0f 85 c2 00 00 00 c6 05 45 2c 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 45.093826][ T1063] RSP: 0018:ffffc9000f28f980 EFLAGS: 00010246 [ 45.099984][ T1063] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 45.108006][ T1063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f28fa38 [ 45.116083][ T1063] RBP: ffffc9000f28faa8 R08: ffffc9000f28fa37 R09: 0000000000000000 [ 45.124150][ T1063] R10: ffffc9000f28fa20 R11: fffff52001e51f47 R12: ffffc9000f28f9c0 [ 45.132205][ T1063] R13: dffffc0000000000 R14: 1ffff92001e51f34 R15: 0000000000000000 [ 45.140277][ T1063] FS: 00007fead1a256c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.149281][ T1063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.155917][ T1063] CR2: 000000110c2d8656 CR3: 0000000108334000 CR4: 00000000003526b0 [ 45.164015][ T1063] Call Trace: [ 45.167348][ T1063] [ 45.170444][ T1063] ? preempt_schedule_thunk+0x1a/0x40 [ 45.175872][ T1063] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.181726][ T1063] ? try_to_wake_up+0x11f0/0x1fa0 [ 45.186814][ T1063] ? stack_trace_save+0xaa/0x100 [ 45.191889][ T1063] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 45.198137][ T1063] ___kmalloc_large_node+0x81/0x210 [ 45.203396][ T1063] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 45.209663][ T1063] __kmalloc_large_node_noprof+0x1e/0xd0 [ 45.215354][ T1063] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 45.221640][ T1063] __kmalloc_noprof+0x326/0x500 [ 45.226534][ T1063] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 45.232711][ T1063] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 45.239235][ T1063] ? selinux_file_ioctl+0x732/0x1480 [ 45.244567][ T1063] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.250211][ T1063] ? do_futex+0x37d/0x510 [ 45.254592][ T1063] ? __cfi_do_futex+0x10/0x10 [ 45.259353][ T1063] ? __fget_files+0x2c5/0x340 [ 45.264083][ T1063] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.269121][ T1063] ? security_file_ioctl+0x3e/0x110 [ 45.274474][ T1063] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 45.281002][ T1063] __se_sys_ioctl+0x132/0x1b0 [ 45.285773][ T1063] __x64_sys_ioctl+0x7f/0xa0 [ 45.290495][ T1063] x64_sys_call+0x1878/0x2ee0 [ 45.295221][ T1063] do_syscall_64+0x57/0xf0 [ 45.299714][ T1063] ? clear_bhb_loop+0x50/0xa0 [ 45.304461][ T1063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.310457][ T1063] RIP: 0033:0x7fead0b9ce59 [ 45.314937][ T1063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.334647][ T1063] RSP: 002b:00007fead1a25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.343168][ T1063] RAX: ffffffffffffffda RBX: 00007fead0e15fa0 RCX: 00007fead0b9ce59 [ 45.351232][ T1063] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 45.359298][ T1063] RBP: 00007fead0c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 45.367330][ T1063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.375435][ T1063] R13: 00007fead0e16038 R14: 00007fead0e15fa0 R15: 00007ffe3f79aa38 [ 45.383504][ T1063] [ 45.386588][ T1063] ---[ end trace 0000000000000000 ]---