last executing test programs: 10.202121582s ago: executing program 0 (id=1): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x62b9, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 10.116212896s ago: executing program 0 (id=5): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 10.094136082s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='./file0/../file0\x00') 10.03057509s ago: executing program 0 (id=7): openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) 9.92201434s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40306727, &(0x7f00000000c0)) 9.894017415s ago: executing program 32 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40306727, &(0x7f00000000c0)) 2.353987434s ago: executing program 4 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x4e24, @private=0xa010102}}}, 0x88) 2.342192432s ago: executing program 4 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xfec00000, 0x1000, 0xb, 0x9, 0x80, 0xb, 0x0, 0xff, 0x0, 0x86, 0x0, 0xb}, {0x6002, 0xd000, 0x9, 0x3, 0x83, 0x7, 0x6, 0x7f, 0x1, 0x4, 0x0, 0x11}, {0xf000, 0x60000, 0x4, 0x4, 0x10, 0xa1, 0x4, 0x13, 0x5, 0x4, 0x92, 0x7f}, {0x100000, 0x5000, 0xf, 0x7, 0x1, 0x3e, 0x1, 0x0, 0xfd, 0x29, 0x0, 0x9}, {0x80a0000, 0x0, 0xc, 0xd, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x59004, 0xdddd1000, 0xd, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x4}, {0x4000, 0x10000, 0xb, 0x0, 0xcd, 0x9, 0x5, 0x26, 0x8, 0xcd, 0xfc, 0x6}, {0x1000, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0xc}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1005a1, 0x5, 0xe801, 0x4, 0x0, [0x10000000000000d, 0x4, 0x3, 0x3]}) 2.284244371s ago: executing program 4 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x0, 0x0, &(0x7f0000000140)) 2.22606904s ago: executing program 4 (id=106): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.334127586s ago: executing program 2 (id=116): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000102505a1a440f1ffff00010902670001010000000904000012020600000b2406000002f332ac000005240000000d240f010000000087000600001524120600a317a88b045e4f01a607c0ffcb7e392a072414000001000324"], 0x0) 1.024436529s ago: executing program 3 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getresuid(0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [], {0x4, 0x3}, [{}], {}, {0x20, 0x6}}, 0x2c, 0x2) 714.412541ms ago: executing program 1 (id=120): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00R'], 0x20}}, 0x20000884) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10) close(r0) 702.15259ms ago: executing program 1 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x3, 0x0, [{0x80000008, 0x9, 0x7, 0xfff, 0x100, 0x43, 0xffffffff}, {0x40000000, 0xed66, 0x0, 0x0, 0x5, 0x9, 0x1}, {0xd, 0x5, 0x4, 0xa8, 0x2, 0xfffffff9, 0x9}]}) 574.199666ms ago: executing program 1 (id=122): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 574.030446ms ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x19) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 564.728414ms ago: executing program 1 (id=124): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 545.31824ms ago: executing program 1 (id=125): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 161.39148ms ago: executing program 4 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x3) 161.20329ms ago: executing program 4 (id=127): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 161.04473ms ago: executing program 3 (id=128): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@canfd={{0x2, 0x0, 0x1}, 0x2f, 0x3, 0x0, 0x0, "bc4358d85449f2c1470bcfcb58bce627137d8560edc8778801d5999eb6dd50f2f8b7132863f6d039e438e59a9c87ec806e01f2c8016ae800"}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x400, 0x6, 0x0, 0xf, 0xbfffffffffffff88}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8, 0xa}) 159.965009ms ago: executing program 2 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 106.08723ms ago: executing program 3 (id=130): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004"], 0x29) 105.92661ms ago: executing program 2 (id=131): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0x3) 105.833039ms ago: executing program 2 (id=132): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2104827, 0x0) 105.763859ms ago: executing program 3 (id=133): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) 86.729706ms ago: executing program 3 (id=134): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) 85.961366ms ago: executing program 2 (id=135): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 249.34µs ago: executing program 2 (id=136): userfaultfd(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) 0s ago: executing program 3 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r2, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 24.911340][ T36] audit: type=1400 audit(1773156038.570:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.915246][ T283] cgroup: Unknown subsys name 'net' [ 24.935495][ T36] audit: type=1400 audit(1773156038.580:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.962854][ T36] audit: type=1400 audit(1773156038.610:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.963395][ T283] cgroup: Unknown subsys name 'devices' [ 25.144439][ T283] cgroup: Unknown subsys name 'hugetlb' [ 25.150089][ T283] cgroup: Unknown subsys name 'rlimit' [ 25.306021][ T36] audit: type=1400 audit(1773156038.970:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.329309][ T36] audit: type=1400 audit(1773156038.970:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.354183][ T36] audit: type=1400 audit(1773156038.970:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.378574][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.387446][ T36] audit: type=1400 audit(1773156039.050:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.412972][ T36] audit: type=1400 audit(1773156039.050:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.452417][ T36] audit: type=1400 audit(1773156039.120:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.478638][ T36] audit: type=1400 audit(1773156039.120:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.479361][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.243302][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.271698][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.279252][ T290] bridge_slave_0: entered allmulticast mode [ 26.290915][ T290] bridge_slave_0: entered promiscuous mode [ 26.298385][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.306108][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.313833][ T290] bridge_slave_1: entered allmulticast mode [ 26.320682][ T290] bridge_slave_1: entered promiscuous mode [ 26.465247][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.472344][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.479430][ T295] bridge_slave_0: entered allmulticast mode [ 26.486761][ T295] bridge_slave_0: entered promiscuous mode [ 26.494646][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.501798][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.508983][ T295] bridge_slave_1: entered allmulticast mode [ 26.515464][ T295] bridge_slave_1: entered promiscuous mode [ 26.527461][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.534637][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.542226][ T296] bridge_slave_0: entered allmulticast mode [ 26.548558][ T296] bridge_slave_0: entered promiscuous mode [ 26.558312][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.565515][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.572765][ T296] bridge_slave_1: entered allmulticast mode [ 26.579072][ T296] bridge_slave_1: entered promiscuous mode [ 26.612093][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.619185][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.626629][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.633699][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.671441][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.678687][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.686597][ T294] bridge_slave_0: entered allmulticast mode [ 26.693046][ T294] bridge_slave_0: entered promiscuous mode [ 26.699837][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.707134][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.714349][ T294] bridge_slave_1: entered allmulticast mode [ 26.720629][ T294] bridge_slave_1: entered promiscuous mode [ 26.841131][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.848287][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.855869][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.863044][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.875989][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.883505][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.891416][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.899089][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.912188][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.919279][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.935904][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.943193][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.987596][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.994738][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.020541][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.027889][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.054464][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.061678][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.077241][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.084431][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.092844][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.099885][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.109785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.116883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.132665][ T290] veth0_vlan: entered promiscuous mode [ 27.158066][ T290] veth1_macvtap: entered promiscuous mode [ 27.196426][ T294] veth0_vlan: entered promiscuous mode [ 27.203349][ T295] veth0_vlan: entered promiscuous mode [ 27.226052][ T294] veth1_macvtap: entered promiscuous mode [ 27.240598][ T296] veth0_vlan: entered promiscuous mode [ 27.253344][ T295] veth1_macvtap: entered promiscuous mode [ 27.260982][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.288697][ T296] veth1_macvtap: entered promiscuous mode [ 27.478646][ T349] ======================================================= [ 27.478646][ T349] WARNING: The mand mount option has been deprecated and [ 27.478646][ T349] and is ignored by this kernel. Remove the mand [ 27.478646][ T349] option from the mount to silence this warning. [ 27.478646][ T349] ======================================================= [ 27.581945][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.592124][ T13] bridge_slave_1: left allmulticast mode [ 27.597919][ T13] bridge_slave_1: left promiscuous mode [ 27.603890][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.612264][ T13] bridge_slave_0: left allmulticast mode [ 27.618022][ T13] bridge_slave_0: left promiscuous mode [ 27.624118][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.651690][ T338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.741872][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 27.748467][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 27.756803][ T9] usb 2-1: config 0 has no interface number 0 [ 27.763647][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 27.774063][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 27.785361][ T13] veth1_macvtap: left promiscuous mode [ 27.786912][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 27.791539][ T13] veth0_vlan: left promiscuous mode [ 27.800824][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.813972][ T9] usb 2-1: Product: syz [ 27.818333][ T9] usb 2-1: Manufacturer: syz [ 27.823672][ T9] usb 2-1: SerialNumber: syz [ 27.828520][ T338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.838734][ T338] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.849000][ T9] usb 2-1: config 0 descriptor?? [ 27.854113][ T338] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.867137][ T333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 27.874917][ T333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 27.884761][ T338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 27.894191][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.905788][ T338] usb 3-1: Product: syz [ 27.910220][ T338] usb 3-1: Manufacturer: syz [ 27.915094][ T338] usb 3-1: SerialNumber: syz [ 27.924068][ T338] hub 3-1:1.0: bad descriptor, ignoring hub [ 27.930411][ T338] hub 3-1:1.0: probe with driver hub failed with error -5 [ 27.990295][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.997458][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.004839][ T351] bridge_slave_0: entered allmulticast mode [ 28.011200][ T351] bridge_slave_0: entered promiscuous mode [ 28.018153][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.025444][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.032578][ T351] bridge_slave_1: entered allmulticast mode [ 28.039029][ T351] bridge_slave_1: entered promiscuous mode [ 28.086991][ T333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.094715][ T333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.114902][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.122007][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.129345][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.135924][ T338] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 28.136476][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.181388][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.190504][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.205931][ T362] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.231434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.238589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.248637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.255767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.291172][ T351] veth0_vlan: entered promiscuous mode [ 28.307848][ T351] veth1_macvtap: entered promiscuous mode [ 28.393140][ T365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.401916][ T365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.441934][ T338] usb 3-1: USB disconnect, device number 2 [ 28.450578][ T338] usblp0: removed [ 28.488055][ T373] netlink: 'syz.4.13': attribute type 4 has an invalid length. [ 28.636697][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.709201][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 28.719415][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 28.730224][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 28.739397][ T9] usb 2-1: USB disconnect, device number 2 [ 29.191837][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.342774][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 29.351771][ T46] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.363193][ T46] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.373286][ T46] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 29.392687][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.399797][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 29.408981][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.417983][ T46] usb 3-1: config 0 descriptor?? [ 29.631770][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.783338][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.795124][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.807085][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 29.817162][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.831200][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.840691][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.849849][ T9] usb 2-1: config 0 descriptor?? [ 29.869242][ T46] hid (null): invalid report_count 1256759610 [ 29.914833][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 29.929070][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 29.929091][ T36] audit: type=1400 audit(1773156043.590:133): avc: denied { ioctl } for pid=413 comm="syz.4.30" path="socket:[3965]" dev="sockfs" ino=3965 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.056883][ T46] usb 3-1: USB disconnect, device number 3 [ 30.260484][ T9] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 30.271233][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 30.280621][ T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 30.701770][ T415] Bluetooth: hci0: command 0x1003 tx timeout [ 30.702636][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.729278][ T36] audit: type=1400 audit(1773156044.390:134): avc: denied { create } for pid=419 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.748532][ T36] audit: type=1400 audit(1773156044.390:135): avc: denied { write } for pid=419 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.775772][ T36] audit: type=1400 audit(1773156044.440:136): avc: denied { wake_alarm } for pid=421 comm="syz.3.33" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.821735][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.973050][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.984355][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.996141][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.006490][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.021484][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 31.031474][ T46] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 31.040350][ T46] usb 3-1: Manufacturer: syz [ 31.051267][ T46] usb 3-1: config 0 descriptor?? [ 31.465232][ T46] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 31.473688][ T46] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 31.523103][ T46] appleir 0003:05AC:8243.0003: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 31.741552][ T36] audit: type=1400 audit(1773156045.400:137): avc: denied { create } for pid=425 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.762981][ T31] usb 3-1: USB disconnect, device number 4 [ 31.772774][ T36] audit: type=1400 audit(1773156045.410:138): avc: denied { bind } for pid=425 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.795996][ T36] audit: type=1400 audit(1773156045.410:139): avc: denied { setopt } for pid=425 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.817128][ T36] audit: type=1400 audit(1773156045.410:140): avc: denied { write } for pid=425 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.982034][ T388] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.982346][ T55] Bluetooth: hci1: command 0x1003 tx timeout [ 32.130050][ T36] audit: type=1400 audit(1773156045.790:141): avc: denied { write } for pid=439 comm="syz.4.40" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.310059][ T36] audit: type=1400 audit(1773156045.970:142): avc: denied { ioctl } for pid=460 comm="syz.3.48" path="socket:[4085]" dev="sockfs" ino=4085 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.521793][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.641753][ T46] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 32.650089][ T46] usb 2-1: device reset changed ep0 maxpacket size! [ 32.657203][ T398] usb 2-1: USB disconnect, device number 3 [ 32.673007][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.684012][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.694401][ T31] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 32.704192][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.713252][ T31] usb 3-1: config 0 descriptor?? [ 32.791833][ T398] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.942101][ T398] usb 2-1: Using ep0 maxpacket: 16 [ 32.948796][ T398] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 32.957239][ T398] usb 2-1: config 0 has no interface number 0 [ 32.963572][ T398] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 32.973747][ T398] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 32.985704][ T398] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 32.994867][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.003118][ T398] usb 2-1: Product: syz [ 33.007410][ T398] usb 2-1: Manufacturer: syz [ 33.012084][ T398] usb 2-1: SerialNumber: syz [ 33.017830][ T398] usb 2-1: config 0 descriptor?? [ 33.023874][ T459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.031233][ T459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.125279][ T31] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 33.133122][ T31] hid-steam 0003:28DE:1102.0004: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 33.203923][ T31] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.213480][ T31] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 33.222046][ T31] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.231543][ T31] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.255110][ T459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.262758][ T31] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0004/input/input4 [ 33.276743][ T459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.287191][ T482] process 'syz.3.57' launched './file0' with NULL argv: empty string added [ 33.296732][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.297905][ T482] Invalid argument reading file caps for ./file0 [ 33.315780][ T31] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 33.319997][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.351341][ T31] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 33.372548][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.383719][ T31] usb 3-1: USB disconnect, device number 5 [ 33.391036][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.419193][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.444622][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.455025][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.466126][ T95] hid-steam 0003:28DE:1102.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 33.475901][ T488] fido_id[488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 33.493143][ T31] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 33.538225][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.703470][ T398] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 33.714179][ T398] asix 2-1:0.251: probe with driver asix failed with error -524 [ 33.865800][ T513] mmap: syz.4.70 (513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.906468][ T398] usb 2-1: USB disconnect, device number 4 [ 33.958089][ T520] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 88) [ 33.958137][ T520] rust_binder: Error while translating object. [ 33.969849][ T520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.976265][ T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 34.651932][ T552] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 34.776317][ T558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.790117][ T558] tmpfs: Invalid gid '0x00000000ffffffff' [ 35.174377][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 35.174397][ T36] audit: type=1400 audit(1773156048.840:203): avc: denied { ioctl } for pid=579 comm="syz.4.102" path="socket:[5039]" dev="sockfs" ino=5039 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.306112][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 35.581811][ T589] Bluetooth: hci0: command 0x1003 tx timeout [ 35.581811][ T388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.608290][ T36] audit: type=1400 audit(1773156049.270:204): avc: denied { append } for pid=590 comm="syz.3.107" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.699887][ T36] audit: type=1400 audit(1773156049.360:205): avc: denied { create } for pid=594 comm="syz.3.109" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.721271][ T36] audit: type=1400 audit(1773156049.370:206): avc: denied { ioctl } for pid=594 comm="syz.3.109" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6150 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.753197][ T36] audit: type=1400 audit(1773156049.420:207): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.801311][ T36] audit: type=1400 audit(1773156049.460:208): avc: denied { mounton } for pid=599 comm="syz.1.111" path="/26/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.061727][ T388] Bluetooth: hci1: command 0x1003 tx timeout [ 36.061727][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.119210][ T36] audit: type=1400 audit(1773156049.780:209): avc: denied { unlink } for pid=609 comm="syz.2.115" name="#1" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.119244][ T610] overlayfs: upper fs does not support file handles, falling back to index=off. [ 36.150612][ T610] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 36.159919][ T36] audit: type=1400 audit(1773156049.820:210): avc: denied { mount } for pid=609 comm="syz.2.115" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.187451][ T36] audit: type=1400 audit(1773156049.850:211): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.461723][ T338] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.611690][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 36.618530][ T338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.629673][ T338] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.644258][ T338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 36.653998][ T338] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 36.662628][ T338] usb 3-1: Product: syz [ 36.667147][ T338] usb 3-1: Manufacturer: syz [ 36.674906][ T338] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 36.883457][ T31] usb 3-1: USB disconnect, device number 6 [ 36.958065][ T36] audit: type=1400 audit(1773156050.620:212): avc: denied { mounton } for pid=625 comm="syz.1.123" path="/33/file0" dev="incremental-fs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.958894][ T626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.341751][ T415] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 37.341783][ T55] Bluetooth: hci2: command 0x1003 tx timeout [ 37.508573][ T650] incfs: mount failed -22 [ 37.531128][ T295] ------------[ cut here ]------------ [ 37.537157][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 37.546782][ T295] Modules linked in: [ 37.550810][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 f2a918a97e0635b0325422d942c43e354266f381 [ 37.563043][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.573826][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 37.579755][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 7d 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 66 99 3f ff <0f> 0b e9 3e ff ff ff e8 5a 99 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 37.599884][ T295] RSP: 0018:ffffc9000b687b48 EFLAGS: 00010293 [ 37.606598][ T295] RAX: ffffffff8248073a RBX: 0000000000000000 RCX: ffff888121980000 [ 37.614821][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.623088][ T295] RBP: ffffc9000b687b70 R08: ffff88813118967f R09: 1ffff110262312cf [ 37.631303][ T295] R10: dffffc0000000000 R11: ffffed10262312d0 R12: 0000000000000000 [ 37.639554][ T295] R13: dffffc0000000000 R14: ffff8881311895e0 R15: ffff8881107c1cc0 [ 37.647827][ T295] FS: 000055555fbed500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.656977][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.663783][ T295] CR2: 000055555fc18988 CR3: 000000012e92a000 CR4: 00000000003526b0 [ 37.671920][ T295] Call Trace: [ 37.675254][ T295] [ 37.678386][ T295] ovl_do_remove+0x81b/0xda0 [ 37.683200][ T295] ? ovl_set_redirect+0x780/0x780 [ 37.688316][ T295] ? down_write+0xee/0x2b0 [ 37.692850][ T295] ? __cfi_down_write+0x10/0x10 [ 37.697754][ T295] ovl_rmdir+0x1e/0x30 [ 37.701910][ T295] vfs_rmdir+0x3e3/0x560 [ 37.706550][ T295] incfs_kill_sb+0x109/0x230 [ 37.711298][ T295] deactivate_locked_super+0xd5/0x2a0 [ 37.717055][ T295] deactivate_super+0xb8/0xe0 [ 37.721933][ T295] cleanup_mnt+0x406/0x4a0 [ 37.726508][ T295] __cleanup_mnt+0x1d/0x40 [ 37.731365][ T295] task_work_run+0x1e5/0x260 [ 37.736221][ T295] ? __cfi_task_work_run+0x10/0x10 [ 37.742012][ T295] ? __x64_sys_umount+0x12e/0x180 [ 37.747403][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.752916][ T295] ? __kasan_check_read+0x15/0x20 [ 37.758167][ T295] resume_user_mode_work+0x35/0x50 [ 37.763469][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 37.768996][ T295] do_syscall_64+0x63/0xf0 [ 37.773575][ T295] ? clear_bhb_loop+0x50/0xa0 [ 37.778566][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.784606][ T295] RIP: 0033:0x7fe4a039d9d7 [ 37.789183][ T295] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.809122][ T295] RSP: 002b:00007ffedeaf2b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.817913][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe4a039d9d7 [ 37.826506][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedeaf2c10 [ 37.834845][ T295] RBP: 00007ffedeaf2c10 R08: 00007ffedeaf3c10 R09: 00000000ffffffff [ 37.843594][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedeaf3ca0 [ 37.852038][ T295] R13: 00007fe4a0432050 R14: 000000000000926e R15: 00007ffedeaf3ce0 [ 37.860405][ T295] [ 37.863599][ T295] ---[ end trace 0000000000000000 ]--- [ 37.869778][ T295] ------------[ cut here ]------------ [ 37.875893][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 37.885506][ T295] Modules linked in: [ 37.889897][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 f2a918a97e0635b0325422d942c43e354266f381 [ 37.903312][ T295] Tainted: [W]=WARN [ 37.907284][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.917437][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 37.923468][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 7d 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 66 99 3f ff <0f> 0b e9 3e ff ff ff e8 5a 99 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 37.944250][ T295] RSP: 0018:ffffc9000b687b48 EFLAGS: 00010293 [ 37.950359][ T295] RAX: ffffffff8248073a RBX: 0000000000000000 RCX: ffff888121980000 [ 37.958580][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.967244][ T295] RBP: ffffc9000b687b70 R08: ffff88813118967f R09: 1ffff110262312cf [ 37.975444][ T295] R10: dffffc0000000000 R11: ffffed10262312d0 R12: 0000000000000000 [ 37.983680][ T295] R13: dffffc0000000000 R14: ffff8881311895e0 R15: ffff8881107c1cc0 [ 37.992187][ T295] FS: 000055555fbed500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.001156][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.007813][ T295] CR2: 000000110c33629f CR3: 000000012e92a000 CR4: 00000000003526b0 [ 38.016074][ T295] Call Trace: [ 38.019383][ T295] [ 38.022573][ T295] ovl_do_remove+0x81b/0xda0 [ 38.027290][ T295] ? ovl_set_redirect+0x780/0x780 [ 38.032536][ T295] ? down_write+0xee/0x2b0 [ 38.037074][ T295] ? __cfi_down_write+0x10/0x10 [ 38.042011][ T295] ovl_rmdir+0x1e/0x30 [ 38.046130][ T295] vfs_rmdir+0x3e3/0x560 [ 38.050598][ T295] incfs_kill_sb+0x1a0/0x230 [ 38.055817][ T295] deactivate_locked_super+0xd5/0x2a0 [ 38.061243][ T295] deactivate_super+0xb8/0xe0 [ 38.066196][ T295] cleanup_mnt+0x406/0x4a0 [ 38.071102][ T295] __cleanup_mnt+0x1d/0x40 [ 38.075969][ T295] task_work_run+0x1e5/0x260 [ 38.080703][ T295] ? __cfi_task_work_run+0x10/0x10 [ 38.085945][ T295] ? __x64_sys_umount+0x12e/0x180 [ 38.091267][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 38.096930][ T295] ? __kasan_check_read+0x15/0x20 [ 38.102903][ T295] resume_user_mode_work+0x35/0x50 [ 38.109580][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 38.115288][ T295] do_syscall_64+0x63/0xf0 [ 38.119765][ T295] ? clear_bhb_loop+0x50/0xa0 [ 38.124684][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.130655][ T295] RIP: 0033:0x7fe4a039d9d7 [ 38.135242][ T295] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 38.155620][ T295] RSP: 002b:00007ffedeaf2b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.164743][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe4a039d9d7 [ 38.173044][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedeaf2c10 [ 38.181413][ T295] RBP: 00007ffedeaf2c10 R08: 00007ffedeaf3c10 R09: 00000000ffffffff [ 38.189567][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedeaf3ca0 [ 38.197654][ T295] R13: 00007fe4a0432050 R14: 000000000000926e R15: 00007ffedeaf3ce0 [ 38.206750][ T295] [ 38.210064][ T295] ---[ end trace 0000000000000000 ]--- [ 38.237982][ T654] tipc: Started in network mode [ 38.243074][ T654] tipc: Node identity 7f000001, cluster identity 4711 [ 38.250418][ T654] tipc: Enabling of bearer rejected, failed to enable media