last executing test programs: 5.669477361s ago: executing program 0 (id=565): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5f, &(0x7f0000000140)=@string={0x5f, 0x3, "534e188a05a79abb1688ff409ca16d9b99ae6f0301aea378e7b79396fc09641bc2b050e89ff85aece8bcb06b2296896aae0bff9d799b9d26f2cfb6f147c42a50e0b4198ee06b0f8331bd2cf98f55bd1c796daa26118b2d4b343029f229"}}]}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 5.155005603s ago: executing program 0 (id=568): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) fchdir(r1) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 5.142864704s ago: executing program 0 (id=569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="b96f0b00000f322e3e672e450f07660fdb9ce30d000000b9b20a0000b80700000066baf80cb808efd383ef66bafc0c66b834e066ef0f30b890a4f084ef66bafc0cb902000040b800100000ba000000000f3036660f388281e264000066ba410066b8710066ef48b800100000000000000f23d00f21f835100000080f23f808403e93000088000000442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0xaa}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.045828352s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 5.032026463s ago: executing program 0 (id=575): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[@ANYBLOB="06"], 0x2, 0x1) r2 = dup3(r1, r0, 0x0) finit_module(r2, 0x0, 0x1) 4.903205073s ago: executing program 0 (id=577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) 4.890291354s ago: executing program 32 (id=577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) 4.634557435s ago: executing program 3 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071", 0x4}, {0x0}], 0x2}}], 0x1, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000100)=0x40) 3.780068604s ago: executing program 3 (id=601): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, 0x0, 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3.546304793s ago: executing program 3 (id=605): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.495901297s ago: executing program 3 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 3.468670799s ago: executing program 3 (id=608): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000680)) 3.322490001s ago: executing program 3 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@txtime={{0x18, 0x11a, 0x3d, 0x4}}], 0x18}, 0x8000) 3.229224159s ago: executing program 33 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@txtime={{0x18, 0x11a, 0x3d, 0x4}}], 0x18}, 0x8000) 2.455170311s ago: executing program 5 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.34277637s ago: executing program 5 (id=621): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000680)) 2.34239076s ago: executing program 5 (id=622): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.307415003s ago: executing program 5 (id=623): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r0, &(0x7f0000000540)="b4", 0x1, 0x101, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 2.303544484s ago: executing program 2 (id=624): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) 2.276856276s ago: executing program 5 (id=625): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000080)={0x3, 0xffffffff, 0x100, 0x6, 0x6, 0xa2cd}) 2.246755108s ago: executing program 2 (id=626): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/15, 0xf}, 0x9}], 0x1, 0x1000400000de, 0x0) 2.231567919s ago: executing program 2 (id=628): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) clock_gettime(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) 2.088851831s ago: executing program 2 (id=629): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000680)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xfffffff1, 0x240080d0, 0x0, 0x0) 2.059817974s ago: executing program 2 (id=630): r0 = socket$inet6(0xa, 0x3, 0x38) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 2.038657425s ago: executing program 2 (id=631): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.124477199s ago: executing program 4 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x45c729c4ea3208ec, 0x4c) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)='./file1\x00', r1) 1.10973143s ago: executing program 4 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="0fa02e450f9f2ef30fc770003e64400f0726430fae17660f38811bf246a40f20e035000001000f22e00f09460f792e", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.038009806s ago: executing program 4 (id=641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2bc, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) 1.020225087s ago: executing program 4 (id=642): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0xd1a2, 0x0, 0x1, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x3}}, 0x50) 696.367814ms ago: executing program 1 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000280)="0f019b88a60ff2f63eeff20f01c966b80a00000066ba000000b80f300f79d80f01c966b9024d564b0f3266b86d5a00000f23d00f21f86635000000020f23f8660f38dfec", 0x44}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 683.812044ms ago: executing program 1 (id=645): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 668.257586ms ago: executing program 1 (id=646): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x8000) 601.700891ms ago: executing program 1 (id=647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000540)={0x20, 0x14, 0x24, "0b8267431f3c7fe176074072f06a6927379ffa6f5fa6cc3e3a735990eb823a3e441b1567"}, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) 65.762495ms ago: executing program 1 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x45c729c4ea3208ec, 0x4c) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)='./file1\x00', r1) 65.639935ms ago: executing program 4 (id=649): lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 65.263225ms ago: executing program 1 (id=650): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2bc, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) 0s ago: executing program 4 (id=651): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 22.455940][ T36] audit: type=1400 audit(1756507181.550:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.457364][ T282] cgroup: Unknown subsys name 'net' [ 22.478608][ T36] audit: type=1400 audit(1756507181.550:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.505989][ T36] audit: type=1400 audit(1756507181.590:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.506249][ T282] cgroup: Unknown subsys name 'devices' [ 22.713744][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.719384][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.814466][ T36] audit: type=1400 audit(1756507181.910:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.837670][ T36] audit: type=1400 audit(1756507181.910:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.862636][ T36] audit: type=1400 audit(1756507181.910:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.873808][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.894530][ T36] audit: type=1400 audit(1756507181.990:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.920216][ T36] audit: type=1400 audit(1756507181.990:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.949858][ T36] audit: type=1400 audit(1756507182.050:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.975535][ T36] audit: type=1400 audit(1756507182.050:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.975704][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.816574][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.823821][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.830905][ T290] bridge_slave_0: entered allmulticast mode [ 23.837308][ T290] bridge_slave_0: entered promiscuous mode [ 23.845510][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.852602][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.859687][ T290] bridge_slave_1: entered allmulticast mode [ 23.866049][ T290] bridge_slave_1: entered promiscuous mode [ 23.898853][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.905973][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.913168][ T289] bridge_slave_0: entered allmulticast mode [ 23.919426][ T289] bridge_slave_0: entered promiscuous mode [ 23.932867][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.939944][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.947079][ T289] bridge_slave_1: entered allmulticast mode [ 23.953484][ T289] bridge_slave_1: entered promiscuous mode [ 24.000303][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.007840][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.014986][ T292] bridge_slave_0: entered allmulticast mode [ 24.021328][ T292] bridge_slave_0: entered promiscuous mode [ 24.030326][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.037455][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.044582][ T292] bridge_slave_1: entered allmulticast mode [ 24.050827][ T292] bridge_slave_1: entered promiscuous mode [ 24.063186][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.070333][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.077587][ T291] bridge_slave_0: entered allmulticast mode [ 24.083904][ T291] bridge_slave_0: entered promiscuous mode [ 24.099871][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.106977][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.114385][ T291] bridge_slave_1: entered allmulticast mode [ 24.120694][ T291] bridge_slave_1: entered promiscuous mode [ 24.253953][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.261033][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.268384][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.275535][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.313978][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.321046][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.328364][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.335432][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.347916][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.355026][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.362330][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.369357][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.403813][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.410908][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.418260][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.425375][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.451962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.459474][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.467104][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.474925][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.482377][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.489760][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.497260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.504494][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.522772][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.529843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.537575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.544667][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.559028][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.566114][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.586032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.593145][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600906][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.608013][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.616175][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.623240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.648947][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.656028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.682593][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.689663][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.710295][ T289] veth0_vlan: entered promiscuous mode [ 24.720630][ T292] veth0_vlan: entered promiscuous mode [ 24.739151][ T289] veth1_macvtap: entered promiscuous mode [ 24.748916][ T291] veth0_vlan: entered promiscuous mode [ 24.758633][ T292] veth1_macvtap: entered promiscuous mode [ 24.788892][ T291] veth1_macvtap: entered promiscuous mode [ 24.813572][ T290] veth0_vlan: entered promiscuous mode [ 24.830483][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.861001][ T290] veth1_macvtap: entered promiscuous mode [ 24.968503][ T346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.052998][ T355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 25.080381][ T355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 25.249788][ T380] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure [ 25.341652][ T392] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.925055][ T441] process 'syz.3.50' launched './file0' with NULL argv: empty string added [ 25.948530][ T443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.51'. [ 26.334538][ T482] fuse: Bad value for 'user_id' [ 26.341326][ T482] fuse: Bad value for 'user_id' [ 26.393219][ T483] kvm_intel: kvm [481]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 26.403513][ T488] ======================================================= [ 26.403513][ T488] WARNING: The mand mount option has been deprecated and [ 26.403513][ T488] and is ignored by this kernel. Remove the mand [ 26.403513][ T488] option from the mount to silence this warning. [ 26.403513][ T488] ======================================================= [ 26.523409][ T498] netlink: 168 bytes leftover after parsing attributes in process `syz.2.78'. [ 26.841546][ T45] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 26.946071][ T532] overlayfs: failed to clone upperpath [ 27.014075][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.022862][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.038088][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.059112][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.076746][ T45] usb 3-1: string descriptor 0 read error: -22 [ 27.085954][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.103686][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.120172][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 27.127627][ T45] cdc_ncm 3-1:1.0: bind() failure [ 27.331883][ T45] usb 3-1: USB disconnect, device number 2 [ 27.482090][ T36] kauditd_printk_skb: 125 callbacks suppressed [ 27.482111][ T36] audit: type=1400 audit(1756507186.580:199): avc: denied { ioctl } for pid=596 comm="syz.0.124" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.483867][ T597] rust_binder: Error while translating object. [ 27.488445][ T36] audit: type=1400 audit(1756507186.580:200): avc: denied { set_context_mgr } for pid=596 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.513945][ T597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.531537][ T36] audit: type=1400 audit(1756507186.580:201): avc: denied { call } for pid=596 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.541711][ T597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 27.861159][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.877905][ T36] audit: type=1400 audit(1756507186.960:202): avc: denied { mount } for pid=603 comm="syz.2.127" name="/" dev="ramfs" ino=4704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.920516][ T36] audit: type=1400 audit(1756507186.960:203): avc: denied { mounton } for pid=603 comm="syz.2.127" path="/" dev="ramfs" ino=4704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 27.941818][ T36] audit: type=1400 audit(1756507186.980:204): avc: denied { create } for pid=605 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 27.961776][ T36] audit: type=1400 audit(1756507186.980:205): avc: denied { setopt } for pid=605 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 27.981872][ T36] audit: type=1400 audit(1756507186.980:206): avc: denied { connect } for pid=605 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 28.001892][ T36] audit: type=1400 audit(1756507186.980:207): avc: denied { name_connect } for pid=605 comm="syz.2.128" dest=20000 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.024297][ T36] audit: type=1400 audit(1756507187.010:208): avc: denied { read write } for pid=609 comm="syz.2.130" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.061144][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 28.067471][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.078660][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.091548][ T63] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.100628][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.109452][ T63] usb 1-1: config 0 descriptor?? [ 28.176717][ T624] 9pnet: p9_errstr2errno: server reported unknown error [ 28.233254][ T632] x_tables: duplicate underflow at hook 4 [ 28.334777][ T636] kvm: MWAIT instruction emulated as NOP! [ 28.544607][ T63] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 28.577268][ T63] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 28.643372][ T682] netlink: 'syz.3.164': attribute type 4 has an invalid length. [ 28.656205][ T682] netlink: 'syz.3.164': attribute type 17 has an invalid length. [ 28.731184][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.790026][ T540] usb 1-1: USB disconnect, device number 2 [ 28.858641][ T711] overlayfs: failed to clone lowerpath [ 28.892202][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.903234][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 28.914434][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 28.926157][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 28.938744][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.948115][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.953370][ T717] input: syz1 as /devices/virtual/input/input6 [ 28.960718][ T45] usb 3-1: Product: syz [ 28.967560][ T45] usb 3-1: Manufacturer: syz [ 28.972623][ T45] usb 3-1: SerialNumber: syz [ 28.979638][ T662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 28.988587][ T45] cdc_mbim 3-1:1.0: skipping garbage [ 29.189960][ T662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.197236][ T662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.541144][ T687] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.561556][ T540] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.692231][ T687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.703205][ T687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.713384][ T687] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 29.722370][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.722665][ T687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.734052][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.744844][ T687] usb 1-1: config 0 descriptor?? [ 29.751847][ T540] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 29.765368][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.774691][ T540] usb 4-1: config 0 descriptor?? [ 29.806760][ T662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.814209][ T662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 29.821538][ T45] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 30.022774][ T45] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 30.029507][ T45] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 30.037913][ T45] wwan wwan0: port wwan0mbim0 attached [ 30.046218][ T45] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 4a:1c:3e:4d:0a:ad [ 30.059319][ T45] usb 3-1: USB disconnect, device number 3 [ 30.073915][ T45] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 30.122239][ T45] wwan wwan0: port wwan0mbim0 disconnected [ 30.160820][ T687] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 5/7 [ 30.168898][ T687] cp2112 0003:10C4:EA90.0002: parse failed [ 30.174805][ T687] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -22 [ 30.186523][ T540] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 30.193976][ T540] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 30.201034][ T540] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 30.208925][ T540] hid-led 0003:04D8:F372.0003: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 30.228178][ T540] hid-led 0003:04D8:F372.0003: Greynut Luxafor initialized [ 30.378074][ T45] usb 1-1: USB disconnect, device number 3 [ 30.398963][ T10] usb 4-1: USB disconnect, device number 2 [ 30.407101][ T687] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 30.419775][ T687] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 30.428416][ T687] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 30.436979][ T687] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 30.446014][ T687] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 30.454492][ T687] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 30.462796][ T687] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 30.471102][ T687] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 30.479486][ T687] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 30.488374][ T687] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 30.496691][ T687] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 30.505525][ T687] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 30.514468][ T687] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 30.522947][ T687] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 30.531416][ T687] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 30.539667][ T687] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 30.548420][ T687] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 30.563112][ T687] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 31.067906][ T811] mmap: syz.2.218 (811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.521111][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.578536][ T875] overlayfs: failed to clone lowerpath [ 31.671233][ T540] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.679772][ T45] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 31.688020][ T45] usb 1-1: config 0 has no interface number 1 [ 31.694184][ T45] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 31.704175][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 31.715645][ T45] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 31.724785][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.733172][ T45] usb 1-1: SerialNumber: syz [ 31.738425][ T45] usb 1-1: config 0 descriptor?? [ 31.801120][ T94] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.822196][ T540] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.833795][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 31.844710][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 31.854495][ T540] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.867550][ T540] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.876714][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.885676][ T540] usb 4-1: config 0 descriptor?? [ 31.945756][ T45] usb 1-1: Found UVC 0.00 device (0002:0000) [ 31.952775][ T45] usb 1-1: No valid video chain found. [ 31.959924][ T45] usb 1-1: USB disconnect, device number 4 [ 31.967932][ T94] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.978654][ T94] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.988357][ T94] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.997469][ T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.005560][ T94] usb 3-1: SerialNumber: syz [ 32.116972][ T879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 32.126033][ T879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 32.216345][ T94] usb 3-1: 0:2 : does not exist [ 32.224864][ T893] overlayfs: failed to clone upperpath [ 32.225949][ T94] usb 3-1: USB disconnect, device number 4 [ 32.255554][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.281138][ T899] netlink: 104 bytes leftover after parsing attributes in process `syz.1.260'. [ 32.296205][ T540] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 32.307505][ T540] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 32.321998][ T540] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.539160][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 32.539180][ T36] audit: type=1400 audit(1756507191.630:270): avc: denied { setopt } for pid=915 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.922535][ T961] @: renamed from vlan0 (while UP) [ 32.935603][ T963] input: syz0 as /devices/virtual/input/input7 [ 33.024081][ T36] audit: type=1400 audit(1756507192.120:271): avc: denied { write } for pid=968 comm="syz.2.291" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.065733][ T36] audit: type=1400 audit(1756507192.120:272): avc: denied { write } for pid=968 comm="syz.2.291" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.114354][ T978] kvm: user requested TSC rate below hardware speed [ 33.135135][ T36] audit: type=1400 audit(1756507192.230:273): avc: denied { bind } for pid=979 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.176767][ T36] audit: type=1400 audit(1756507192.250:274): avc: denied { setopt } for pid=979 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.294133][ T36] audit: type=1400 audit(1756507192.390:275): avc: denied { append } for pid=998 comm="syz.0.305" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.827060][ T1029] input: syz1 as /devices/virtual/input/input8 [ 33.837460][ T336] udevd[336]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 33.847833][ T336] udevd[336]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 33.924619][ T36] audit: type=1400 audit(1756507193.020:276): avc: denied { bind } for pid=1038 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.046059][ T1058] fuse: Invalid gid '00000000000037777777777' [ 34.077587][ T1061] overlayfs: failed to clone upperpath [ 34.170595][ T1078] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.261452][ T36] audit: type=1326 audit(1756507193.360:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a6db8ebe9 code=0x0 [ 34.291558][ T94] usb 4-1: USB disconnect, device number 3 [ 34.342079][ T36] audit: type=1400 audit(1756507193.440:278): avc: denied { read } for pid=1099 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.378168][ T36] audit: type=1400 audit(1756507193.460:279): avc: denied { unlink } for pid=291 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.254218][ T1156] overlayfs: workdir and upperdir must reside under the same mount [ 35.521167][ T687] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.639975][ T1205] pim6reg1: entered promiscuous mode [ 35.645445][ T1205] pim6reg1: entered allmulticast mode [ 35.673620][ T687] usb 4-1: Using ep0 maxpacket: 32 [ 35.693260][ T687] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.707058][ T687] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.721114][ T687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.741520][ T687] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.750628][ T687] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.767533][ T1207] batadv_slave_1: entered promiscuous mode [ 35.773505][ T687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.775105][ T1206] batadv_slave_1: left promiscuous mode [ 35.791879][ T687] usb 4-1: config 0 descriptor?? [ 36.003034][ T63] usb 4-1: USB disconnect, device number 4 [ 36.662234][ T1240] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 36.760836][ T1254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 37.071145][ T687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.191378][ T1299] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 37.248090][ T687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.262250][ T687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.281940][ T687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.295303][ T687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.316060][ T687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.327896][ T687] usb 4-1: config 0 descriptor?? [ 37.683734][ T1344] capability: warning: `syz.0.463' uses 32-bit capabilities (legacy support in use) [ 37.725513][ T1346] rust_binder: Error while translating object. [ 37.725596][ T1346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.732034][ T1346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 37.745788][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.776022][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.791174][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.811115][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.821131][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.828615][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.851128][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.858611][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.871118][ T687] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.878813][ T687] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 37.891867][ T687] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 38.044875][ T540] usb 4-1: USB disconnect, device number 5 [ 38.280212][ T1385] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 38.801119][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.952230][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 38.961404][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.970066][ T10] usb 4-1: config 0 descriptor?? [ 39.378875][ T10] usb 4-1: Cannot set MAC address [ 39.391147][ T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 39.403777][ T10] usb 4-1: USB disconnect, device number 6 [ 39.542087][ T540] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.691135][ T540] usb 1-1: Using ep0 maxpacket: 16 [ 39.697577][ T540] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 39.706067][ T540] usb 1-1: config 0 has no interface number 0 [ 39.712374][ T540] usb 1-1: config 0 interface 21 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.726372][ T540] usb 1-1: config 0 interface 21 has no altsetting 0 [ 39.733557][ T540] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 39.743203][ T540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.756204][ T540] usb 1-1: config 0 descriptor?? [ 39.902727][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 39.902746][ T36] audit: type=1400 audit(1756507454.999:299): avc: denied { map } for pid=1451 comm="syz.3.512" path="socket:[9598]" dev="sockfs" ino=9598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.985528][ T1456] kvm: kvm [1455]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 39.994251][ T1456] kvm: kvm [1455]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 40.169188][ T540] logitech-djreceiver 0003:046D:C52B.0006: hidraw0: USB HID v4.06 Device [HID 046d:c52b] on usb-dummy_hcd.0-1/input21 [ 40.214172][ T1465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.239252][ T1467] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 40.376034][ T540] usb 1-1: USB disconnect, device number 5 [ 40.622642][ T1490] batadv_slave_0: entered promiscuous mode [ 40.632352][ T1490] batadv_slave_0: left promiscuous mode [ 40.653597][ T1494] overlayfs: failed to clone upperpath [ 40.913884][ T1516] batadv_slave_0: entered promiscuous mode [ 40.921045][ T1516] batadv_slave_0: left promiscuous mode [ 40.998377][ T36] audit: type=1400 audit(1756507456.089:300): avc: denied { create } for pid=1525 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.261123][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.411139][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 41.417555][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.428695][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.438510][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 41.447765][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.456573][ T45] usb 1-1: config 0 descriptor?? [ 41.811107][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.867219][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.874632][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.882097][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.889424][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.896756][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.904115][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.911519][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.918844][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.926243][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.933817][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.940957][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.948458][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.956184][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.963275][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.970255][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.977338][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.981147][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 41.984327][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 41.996723][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.003868][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.011001][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.011008][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.011035][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.018305][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.042102][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.049068][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.051117][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.056455][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.076138][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.081105][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.083477][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.099301][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.101108][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.106513][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.122585][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.129615][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.136853][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.141099][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.144174][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.159255][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.166017][ T10] usb 3-1: config 0 descriptor?? [ 42.166510][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.178638][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.192322][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.199357][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.206648][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.213732][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.220789][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.227967][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.235163][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.242269][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.249325][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.256495][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.263718][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.270661][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.277905][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.285137][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.292371][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.299334][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.306601][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.313705][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.320758][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.340868][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.347838][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.354809][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.361739][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.368678][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.375605][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.382557][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.389539][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.396516][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.403456][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.410422][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.426128][ T94] usb 3-1: USB disconnect, device number 5 [ 42.436152][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.443179][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.450116][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.457173][ T45] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 42.465080][ T45] apple 0003:05AC:024B.0007: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 42.489213][ T45] usb 1-1: USB disconnect, device number 6 [ 42.629837][ T36] audit: type=1400 audit(1756507457.719:301): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.723708][ T36] audit: type=1400 audit(1756507457.819:302): avc: denied { getopt } for pid=1568 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.440181][ T36] audit: type=1326 audit(1756507458.529:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.1.573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6f558ebe9 code=0x0 [ 43.484335][ T46] bridge_slave_1: left allmulticast mode [ 43.490492][ T46] bridge_slave_1: left promiscuous mode [ 43.496554][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.504502][ T46] bridge_slave_0: left allmulticast mode [ 43.510297][ T46] bridge_slave_0: left promiscuous mode [ 43.516281][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.634031][ T36] audit: type=1400 audit(1756507458.729:304): avc: denied { mounton } for pid=1603 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.660492][ T46] veth1_macvtap: left promiscuous mode [ 43.666376][ T46] veth0_vlan: left promiscuous mode [ 43.763740][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.770862][ T1603] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.778493][ T1603] bridge_slave_0: entered allmulticast mode [ 43.785371][ T1603] bridge_slave_0: entered promiscuous mode [ 43.792987][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.800408][ T1603] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.807582][ T1603] bridge_slave_1: entered allmulticast mode [ 43.814807][ T1603] bridge_slave_1: entered promiscuous mode [ 43.896362][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.903481][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.910801][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.917922][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.960850][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.969107][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.980853][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.987952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.999985][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.007094][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.046808][ T1603] veth0_vlan: entered promiscuous mode [ 44.061626][ T1603] veth1_macvtap: entered promiscuous mode [ 44.089858][ T36] audit: type=1400 audit(1756507459.179:305): avc: denied { mounton } for pid=1603 comm="syz-executor" path="/root/syzkaller.Vc52JC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.278075][ T36] audit: type=1400 audit(1756507459.369:306): avc: denied { setopt } for pid=1638 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.581165][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.669093][ T36] audit: type=1400 audit(1756507459.759:307): avc: denied { mount } for pid=1667 comm="syz.1.602" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.741151][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 44.752494][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.771542][ T10] usb 5-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 44.781572][ T10] usb 5-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.794739][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 44.803660][ T10] usb 5-1: string descriptor 0 read error: -22 [ 44.809959][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 44.819111][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.841497][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 44.848847][ T1643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 45.061211][ T13] bridge_slave_1: left allmulticast mode [ 45.074982][ T1643] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 45.091100][ T13] bridge_slave_1: left promiscuous mode [ 45.097673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.120129][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 45.136488][ T13] bridge_slave_0: left allmulticast mode [ 45.151179][ T13] bridge_slave_0: left promiscuous mode [ 45.152882][ T10] usb 5-1: USB disconnect, device number 2 [ 45.160477][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.200000][ T10] usblp0: removed [ 45.332876][ T13] veth1_macvtap: left promiscuous mode [ 45.338455][ T13] veth0_vlan: left promiscuous mode [ 45.490629][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.509922][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.520001][ T1690] bridge_slave_0: entered allmulticast mode [ 45.526947][ T1690] bridge_slave_0: entered promiscuous mode [ 45.541382][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.548642][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.555943][ T1690] bridge_slave_1: entered allmulticast mode [ 45.562674][ T1690] bridge_slave_1: entered promiscuous mode [ 45.683261][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.690384][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.697790][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.704894][ T1690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.768786][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.781673][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.802078][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.809152][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.873037][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.880141][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.909707][ T1690] veth0_vlan: entered promiscuous mode [ 45.935458][ T1690] veth1_macvtap: entered promiscuous mode [ 46.020954][ T1715] overlayfs: maximum fs stacking depth exceeded [ 46.347412][ T36] audit: type=1400 audit(1756507461.439:308): avc: denied { write } for pid=1734 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.403620][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.562246][ T45] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.574067][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.586033][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 46.596958][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.610544][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.620008][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.647293][ T45] usb 6-1: config 0 descriptor?? [ 46.651121][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.831343][ T10] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.851120][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.871101][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 46.891116][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 46.900216][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.922539][ T1739] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.085685][ T45] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 47.097326][ T45] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 47.107092][ T45] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 47.156267][ T36] audit: type=1400 audit(1756507462.249:309): avc: denied { getopt } for pid=1748 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.767931][ T36] audit: type=1400 audit(1756507462.859:310): avc: denied { mount } for pid=1775 comm="syz.1.646" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.792977][ T36] audit: type=1400 audit(1756507462.889:311): avc: denied { read } for pid=1775 comm="syz.1.646" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.815934][ T36] audit: type=1400 audit(1756507462.889:312): avc: denied { open } for pid=1775 comm="syz.1.646" path="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.838019][ T36] audit: type=1400 audit(1756507462.899:313): avc: denied { setattr } for pid=1775 comm="syz.1.646" path="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.952853][ T10] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 47.961129][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 47.974295][ T10] usb 3-1: USB disconnect, device number 6 [ 47.980205][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 48.348953][ T1780] overlayfs: failed to clone upperpath [ 48.367302][ T1783] SELinux: Context 줨 is not valid (left unmapped). [ 48.375883][ T36] audit: type=1400 audit(1756507463.469:314): avc: denied { create } for pid=1781 comm="syz.4.649" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.398128][ T1603] ------------[ cut here ]------------ [ 48.401200][ T36] audit: type=1400 audit(1756507463.469:315): avc: denied { associate } for pid=1781 comm="syz.4.649" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 48.403699][ T1603] WARNING: CPU: 1 PID: 1603 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 48.426671][ T36] audit: type=1400 audit(1756507463.469:316): avc: denied { mounton } for pid=1781 comm="syz.4.649" path="/17/bus" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.426704][ T36] audit: type=1400 audit(1756507463.469:317): avc: denied { write } for pid=1781 comm="syz.4.649" name="bus" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 48.436313][ T1603] Modules linked in: [ 48.487704][ T1603] CPU: 1 UID: 0 PID: 1603 Comm: syz-executor Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 48.499565][ T1603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.509872][ T1603] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.515620][ T1603] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 55 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 92 4b 03 cc e8 a6 2b 43 ff <0f> 0b e9 3e ff ff ff e8 9a 2b 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.535501][ T1603] RSP: 0018:ffffc9000fd27b68 EFLAGS: 00010293 [ 48.541639][ T1603] RAX: ffffffff8242b89a RBX: 0000000000000000 RCX: ffff888117355f00 [ 48.549657][ T1603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.557691][ T1603] RBP: ffffc9000fd27b90 R08: ffff88813581e89f R09: 1ffff11026b03d13 [ 48.565750][ T1603] R10: dffffc0000000000 R11: ffffed1026b03d14 R12: 0000000000000000 [ 48.573797][ T1603] R13: dffffc0000000000 R14: ffff88813581e800 R15: ffff88811e36acc0 [ 48.581863][ T1603] FS: 000055558fb9b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.590845][ T1603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.597521][ T1603] CR2: 000055558fbb64a8 CR3: 0000000107ec0000 CR4: 00000000003526b0 [ 48.605598][ T1603] Call Trace: [ 48.608902][ T1603] [ 48.611879][ T1603] ovl_do_remove+0x7b8/0xcf0 [ 48.616531][ T1603] ? ovl_set_redirect+0x780/0x780 [ 48.621678][ T1603] ? down_write+0xe9/0x2a0 [ 48.626137][ T1603] ? __cfi_down_write+0x10/0x10 [ 48.631006][ T1603] ovl_rmdir+0x1e/0x30 [ 48.635125][ T1603] vfs_rmdir+0x3dd/0x560 [ 48.639423][ T1603] incfs_kill_sb+0x109/0x230 [ 48.644065][ T1603] deactivate_locked_super+0xd8/0x2a0 [ 48.649494][ T1603] deactivate_super+0xb8/0xe0 [ 48.654218][ T1603] cleanup_mnt+0x3f1/0x480 [ 48.658662][ T1603] __cleanup_mnt+0x1d/0x40 [ 48.663343][ T1603] task_work_run+0x1e3/0x250 [ 48.667986][ T1603] ? __cfi_task_work_run+0x10/0x10 [ 48.673183][ T1603] ? __x64_sys_umount+0x126/0x170 [ 48.678254][ T1603] ? __cfi___x64_sys_umount+0x10/0x10 [ 48.683698][ T1603] ? __kasan_check_read+0x15/0x20 [ 48.688763][ T1603] resume_user_mode_work+0x36/0x50 [ 48.693925][ T1603] syscall_exit_to_user_mode+0x64/0xb0 [ 48.699417][ T1603] do_syscall_64+0x64/0xf0 [ 48.703876][ T1603] ? clear_bhb_loop+0x50/0xa0 [ 48.708587][ T1603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.714528][ T1603] RIP: 0033:0x7f675ff8ff17 [ 48.719081][ T1603] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 48.738758][ T1603] RSP: 002b:00007ffd552aea78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 48.747249][ T1603] RAX: 0000000000000000 RBX: 00007f6760011c05 RCX: 00007f675ff8ff17 [ 48.755293][ T1603] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd552aeb30 [ 48.763327][ T1603] RBP: 00007ffd552aeb30 R08: 0000000000000000 R09: 0000000000000000 [ 48.771352][ T1603] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd552afbc0 [ 48.779358][ T1603] R13: 00007f6760011c05 R14: 000000000000bce4 R15: 00007ffd552afc00 [ 48.787379][ T1603] [ 48.790421][ T1603] ---[ end trace 0000000000000000 ]--- [ 48.801505][ T1603] ------------[ cut here ]------------ [ 48.807021][ T1603] WARNING: CPU: 1 PID: 1603 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 48.816595][ T1603] Modules linked in: [ 48.820509][ T1603] CPU: 1 UID: 0 PID: 1603 Comm: syz-executor Tainted: G W syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 48.833810][ T1603] Tainted: [W]=WARN [ 48.837629][ T1603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.847841][ T1603] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 48.853570][ T1603] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 55 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 92 4b 03 cc e8 a6 2b 43 ff <0f> 0b e9 3e ff ff ff e8 9a 2b 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 48.873292][ T1603] RSP: 0018:ffffc9000fd27b68 EFLAGS: 00010293 [ 48.879392][ T1603] RAX: ffffffff8242b89a RBX: 0000000000000000 RCX: ffff888117355f00 [ 48.887412][ T1603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.895453][ T1603] RBP: ffffc9000fd27b90 R08: ffff88813581e89f R09: 1ffff11026b03d13 [ 48.903493][ T1603] R10: dffffc0000000000 R11: ffffed1026b03d14 R12: 0000000000000000 [ 48.911507][ T1603] R13: dffffc0000000000 R14: ffff88813581e800 R15: ffff88811e36acc0 [ 48.919508][ T1603] FS: 000055558fb9b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.928534][ T1603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.935168][ T1603] CR2: 0000000000000000 CR3: 0000000107ec0000 CR4: 00000000003526b0 [ 48.943196][ T1603] Call Trace: [ 48.946594][ T1603] [ 48.949532][ T1603] ovl_do_remove+0x7b8/0xcf0 [ 48.954210][ T1603] ? ovl_set_redirect+0x780/0x780 [ 48.959263][ T1603] ? down_write+0xe9/0x2a0 [ 48.963725][ T1603] ? __cfi_down_write+0x10/0x10 [ 48.968623][ T1603] ovl_rmdir+0x1e/0x30 [ 48.972743][ T1603] vfs_rmdir+0x3dd/0x560 [ 48.977017][ T1603] incfs_kill_sb+0x1a0/0x230 [ 48.981656][ T1603] deactivate_locked_super+0xd8/0x2a0 [ 48.987057][ T1603] deactivate_super+0xb8/0xe0 [ 48.991827][ T1603] cleanup_mnt+0x3f1/0x480 [ 48.996349][ T1603] __cleanup_mnt+0x1d/0x40 [ 49.000868][ T1603] task_work_run+0x1e3/0x250 [ 49.005501][ T1603] ? __cfi_task_work_run+0x10/0x10 [ 49.010637][ T1603] ? __x64_sys_umount+0x126/0x170 [ 49.015713][ T1603] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.021143][ T1603] ? __kasan_check_read+0x15/0x20 [ 49.026190][ T1603] resume_user_mode_work+0x36/0x50 [ 49.031330][ T1603] syscall_exit_to_user_mode+0x64/0xb0 [ 49.036810][ T1603] do_syscall_64+0x64/0xf0 [ 49.041265][ T1603] ? clear_bhb_loop+0x50/0xa0 [ 49.046052][ T1603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.052096][ T1603] RIP: 0033:0x7f675ff8ff17 [ 49.056527][ T1603] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 49.076297][ T1603] RSP: 002b:00007ffd552aea78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.084837][ T1603] RAX: 0000000000000000 RBX: 00007f6760011c05 RCX: 00007f675ff8ff17 [ 49.092851][ T1603] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd552aeb30 [ 49.100844][ T1603] RBP: 00007ffd552aeb30 R08: 0000000000000000 R09: 0000000000000000 [ 49.108894][ T1603] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd552afbc0 [ 49.116931][ T1603] R13: 00007f6760011c05 R14: 000000000000bce4 R15: 00007ffd552afc00 [ 49.124961][ T1603] [ 49.127994][ T1603] ---[ end trace 0000000000000000 ]--- [ 49.191104][ T31] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 49.241449][ T13] bridge_slave_1: left allmulticast mode [ 49.247125][ T13] bridge_slave_1: left promiscuous mode [ 49.253065][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.260672][ T13] bridge_slave_0: left allmulticast mode [ 49.266557][ T13] bridge_slave_0: left promiscuous mode [ 49.272243][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.321399][ T31] usb 6-1: device descriptor read/64, error -32 [ 49.403926][ T13] veth1_macvtap: left promiscuous mode [ 49.409499][ T13] veth0_vlan: left promiscuous mode [ 49.774305][ T13] bridge_slave_1: left allmulticast mode [ 49.779970][ T13] bridge_slave_1: left promiscuous mode [ 49.785801][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.793631][ T13] bridge_slave_0: left allmulticast mode [ 49.799275][ T13] bridge_slave_0: left promiscuous mode [ 49.805006][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.812882][ T13] bridge_slave_1: left allmulticast mode [ 49.818530][ T13] bridge_slave_1: left promiscuous mode [ 49.824218][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.831773][ T13] bridge_slave_0: left allmulticast mode [ 49.837418][ T13] bridge_slave_0: left promiscuous mode [ 49.843146][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.850857][ T13] bridge_slave_1: left allmulticast mode [ 49.856609][ T13] bridge_slave_1: left promiscuous mode [ 49.862239][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.869757][ T13] bridge_slave_0: left allmulticast mode [ 49.875900][ T13] bridge_slave_0: left promiscuous mode [ 49.881562][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.156897][ T13] veth1_macvtap: left promiscuous mode [ 50.162474][ T13] veth0_vlan: left promiscuous mode [ 50.168010][ T13] veth1_macvtap: left promiscuous mode [ 50.173551][ T13] veth0_vlan: left promiscuous mode [ 50.179082][ T13] veth1_macvtap: left promiscuous mode [ 50.184639][ T13] veth0_vlan: left promiscuous mode [ 50.202442][ T540] usb 6-1: USB disconnect, device number 2