last executing test programs: 2.754577231s ago: executing program 2 (id=82): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.591839445s ago: executing program 2 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d37000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.577501765s ago: executing program 1 (id=87): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x5) 2.500241457s ago: executing program 1 (id=88): sched_setscheduler(0x0, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 2.39951591s ago: executing program 2 (id=90): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) madvise(&(0x7f000001c000/0x3000)=nil, 0x3000, 0x9) 2.244667133s ago: executing program 2 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC=r1], 0xfdef) 2.150507836s ago: executing program 2 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b8050000000902005de1e10000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x55}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.083997857s ago: executing program 2 (id=95): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x3, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.557355121s ago: executing program 1 (id=99): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x8003, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)={0x5e}, 0x8) sendmmsg$inet(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="01", 0x1}], 0x1}}], 0x1, 0xc0) 1.535313942s ago: executing program 1 (id=100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 1.466445803s ago: executing program 1 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x0, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000031, 0x0, 0x1000, 0x20, 0x0, 0x0, 0x0, [0xe00f8e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000500)) 1.417533214s ago: executing program 1 (id=102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x4, 0xd, {0xd, 0x8, "a18661b4ea470454932a76"}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x200, 0x0, 0x8, 0x80000, 0x4}) 329.580452ms ago: executing program 0 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x22f0}, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x6}]}}}}}}, 0x42) 255.823194ms ago: executing program 3 (id=114): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xa49, 0x0, 0x0, 0x1000, 0x6}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x20002, 0x0, 0x1, 0x154}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000002700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010) 230.079655ms ago: executing program 0 (id=115): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 214.896625ms ago: executing program 0 (id=116): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 136.049486ms ago: executing program 3 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009b}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 134.091957ms ago: executing program 0 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000880)) 68.861239ms ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8008, 0x0) 54.302008ms ago: executing program 3 (id=119): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="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", 0x59b}, {&(0x7f0000000740)="08c4423a7e559a268faf", 0xa}], 0x2}}], 0x1, 0x40) 30.921269ms ago: executing program 0 (id=120): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 30.439ms ago: executing program 3 (id=121): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x88) 8.06583ms ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sigaltstack(0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000300)={0x10, 0xffffffffffffffda}, 0x10) 0s ago: executing program 3 (id=123): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x28482, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts. [ 22.900463][ T36] audit: type=1400 audit(1786085852.110:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.904293][ T287] cgroup: Unknown subsys name 'net' [ 22.923137][ T36] audit: type=1400 audit(1786085852.110:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.950724][ T36] audit: type=1400 audit(1786085852.150:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.951235][ T287] cgroup: Unknown subsys name 'devices' [ 23.075872][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.081524][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.197045][ T36] audit: type=1400 audit(1786085852.410:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.220283][ T36] audit: type=1400 audit(1786085852.410:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.245051][ T36] audit: type=1400 audit(1786085852.410:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.270671][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.279520][ T36] audit: type=1400 audit(1786085852.490:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.300654][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.305316][ T36] audit: type=1400 audit(1786085852.490:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.339313][ T36] audit: type=1400 audit(1786085852.490:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.364879][ T36] audit: type=1400 audit(1786085852.490:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.521288][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.528575][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.535873][ T294] bridge_slave_0: entered allmulticast mode [ 24.542278][ T294] bridge_slave_0: entered promiscuous mode [ 24.549185][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.556386][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.563472][ T294] bridge_slave_1: entered allmulticast mode [ 24.569897][ T294] bridge_slave_1: entered promiscuous mode [ 24.661886][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.669220][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.676573][ T299] bridge_slave_0: entered allmulticast mode [ 24.682815][ T299] bridge_slave_0: entered promiscuous mode [ 24.699483][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.706594][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.713670][ T299] bridge_slave_1: entered allmulticast mode [ 24.720194][ T299] bridge_slave_1: entered promiscuous mode [ 24.756845][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.764204][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.771270][ T300] bridge_slave_0: entered allmulticast mode [ 24.777651][ T300] bridge_slave_0: entered promiscuous mode [ 24.786994][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.794216][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.801298][ T300] bridge_slave_1: entered allmulticast mode [ 24.807765][ T300] bridge_slave_1: entered promiscuous mode [ 24.850478][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.857818][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.864940][ T297] bridge_slave_0: entered allmulticast mode [ 24.871295][ T297] bridge_slave_0: entered promiscuous mode [ 24.880195][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.887298][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.894558][ T297] bridge_slave_1: entered allmulticast mode [ 24.900823][ T297] bridge_slave_1: entered promiscuous mode [ 24.991626][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.998820][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.006152][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.013184][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.030320][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.037430][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.044735][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.051954][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.087550][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.094729][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.101986][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109058][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.129044][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.136657][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.145169][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.152466][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.160148][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.167487][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.185628][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.192699][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.211018][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.218150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.236597][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.243658][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.252304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.259369][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.267905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.275034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.295341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.302398][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.326971][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.334062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.343615][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.350765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.373061][ T294] veth0_vlan: entered promiscuous mode [ 25.405589][ T294] veth1_macvtap: entered promiscuous mode [ 25.423131][ T297] veth0_vlan: entered promiscuous mode [ 25.430526][ T300] veth0_vlan: entered promiscuous mode [ 25.443614][ T299] veth0_vlan: entered promiscuous mode [ 25.455958][ T297] veth1_macvtap: entered promiscuous mode [ 25.485089][ T299] veth1_macvtap: entered promiscuous mode [ 25.499224][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.524050][ T300] veth1_macvtap: entered promiscuous mode [ 25.561305][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.641878][ T324] capability: warning: `syz.1.6' uses 32-bit capabilities (legacy support in use) [ 25.796725][ T339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 25.850912][ T347] syzkaller1: entered promiscuous mode [ 25.856915][ T347] syzkaller1: entered allmulticast mode [ 25.963895][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.125113][ T31] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 26.136632][ T31] usb 2-1: config 0 has no interface number 0 [ 26.144437][ T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 26.153528][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.154031][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.163186][ T31] usb 2-1: Product: syz [ 26.173594][ T31] usb 2-1: Manufacturer: syz [ 26.180081][ T31] usb 2-1: SerialNumber: syz [ 26.184965][ T45] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 26.194006][ T31] usb 2-1: config 0 descriptor?? [ 26.334105][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 26.340371][ T311] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 26.354960][ T45] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 26.363877][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.366416][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 26.372476][ T311] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 26.384102][ T45] usb 4-1: string descriptor 0 read error: -22 [ 26.394852][ T45] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 26.408014][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.414984][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.427954][ T357] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 26.435776][ T311] usb 1-1: config 0 descriptor?? [ 26.617413][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 26.633784][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 26.646009][ T31] asix 2-1:0.251: probe with driver asix failed with error -5 [ 26.658286][ T31] usb 2-1: USB disconnect, device number 2 [ 26.723433][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.755050][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 26.856065][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.863089][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.870303][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.877463][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.884537][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.891725][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 26.901032][ T311] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x6 [ 26.909553][ T311] lenovo 0003:17EF:60B5.0002: collection stack underflow [ 26.933865][ T311] lenovo 0003:17EF:60B5.0002: item 0 4 0 12 parsing failed [ 26.941324][ T311] lenovo 0003:17EF:60B5.0002: hid_parse failed [ 26.962107][ T311] lenovo 0003:17EF:60B5.0002: probe with driver lenovo failed with error -22 [ 27.093138][ T45] cypress 0003:04B4:ED81.0003: global environment stack underflow [ 27.101121][ T45] cypress 0003:04B4:ED81.0003: item 0 2 1 11 parsing failed [ 27.109066][ T45] cypress 0003:04B4:ED81.0003: parse failed [ 27.115352][ T45] cypress 0003:04B4:ED81.0003: probe with driver cypress failed with error -22 [ 27.273907][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.310511][ T45] usb 4-1: USB disconnect, device number 2 [ 27.343232][ T397] syzkaller1: entered promiscuous mode [ 27.348888][ T397] syzkaller1: entered allmulticast mode [ 27.443932][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 27.450206][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.461708][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.471542][ T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 27.480739][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.489629][ T311] usb 3-1: config 0 descriptor?? [ 27.842499][ T411] tipc: Started in network mode [ 27.851538][ T411] tipc: Node identity ac14140f, cluster identity 4711 [ 27.863917][ T411] tipc: New replicast peer: 255.255.255.255 [ 27.870215][ T411] tipc: Enabled bearer , priority 10 [ 27.901319][ T311] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 27.913869][ T311] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 27.925987][ T311] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 27.939857][ T311] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 27.954939][ T311] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 27.970742][ T311] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 28.176268][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 28.176286][ T36] audit: type=1400 audit(1786085857.390:143): avc: denied { write } for pid=420 comm="syz.3.44" name="tcp" dev="proc" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.206655][ T36] audit: type=1400 audit(1786085857.390:144): avc: denied { write } for pid=418 comm="syz.0.43" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.230512][ T36] audit: type=1400 audit(1786085857.390:145): avc: denied { open } for pid=418 comm="syz.0.43" path="/9/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.255439][ T36] audit: type=1400 audit(1786085857.390:146): avc: denied { ioctl } for pid=418 comm="syz.0.43" path="/9/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.288577][ T36] audit: type=1400 audit(1786085857.470:147): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.327166][ T36] audit: type=1400 audit(1786085857.530:148): avc: denied { map } for pid=422 comm="syz.0.45" path="socket:[4617]" dev="sockfs" ino=4617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 28.360736][ T311] usb 3-1: USB disconnect, device number 2 [ 28.369082][ T36] audit: type=1400 audit(1786085857.530:149): avc: denied { bind } for pid=425 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.417387][ T36] audit: type=1400 audit(1786085857.570:150): avc: denied { append } for pid=427 comm="syz.3.47" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.520387][ T36] audit: type=1400 audit(1786085857.730:151): avc: denied { read append } for pid=433 comm="syz.3.50" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.545519][ T36] audit: type=1400 audit(1786085857.730:152): avc: denied { open } for pid=433 comm="syz.3.50" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.562884][ T436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.581207][ T436] kvm: kvm [435]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 28.739066][ T444] syzkaller1: entered promiscuous mode [ 28.744659][ T444] syzkaller1: entered allmulticast mode [ 28.943828][ T458] ======================================================= [ 28.943828][ T458] WARNING: The mand mount option has been deprecated and [ 28.943828][ T458] and is ignored by this kernel. Remove the mand [ 28.943828][ T458] option from the mount to silence this warning. [ 28.943828][ T458] ======================================================= [ 28.993848][ T31] tipc: Node number set to 2886997007 [ 29.204840][ T479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 29.231446][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.243653][ T479] bridge_slave_0 (unregistering): left allmulticast mode [ 29.258957][ T479] bridge_slave_0 (unregistering): left promiscuous mode [ 29.266086][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.625981][ T519] tipc: Started in network mode [ 29.630952][ T519] tipc: Node identity 1, cluster identity 4711 [ 29.638237][ T519] tipc: Node number set to 1 [ 29.643922][ T519] tipc: New replicast peer: 127.0.0.2 [ 29.649722][ T519] tipc: Enabled bearer , priority 10 [ 29.657204][ T519] tipc: Disabling bearer [ 29.799120][ T13] tipc: Subscription rejected, illegal request [ 30.143395][ T545] kvm: kvm [544]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xbe702111 [ 30.213876][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.366401][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 30.375584][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.383574][ T10] usb 4-1: Product: syz [ 30.387851][ T10] usb 4-1: Manufacturer: syz [ 30.392474][ T10] usb 4-1: SerialNumber: syz [ 30.433856][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.583795][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 30.590222][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.601428][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.611465][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.623127][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.635565][ T45] usb 3-1: config 0 descriptor?? [ 30.641598][ T45] hub 3-1:0.0: USB hub found [ 30.692749][ T552] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 30.778223][ T561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.806425][ T556] kvm: kvm [554]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc1) = 0x60000000 [ 30.815956][ T556] kvm: kvm [554]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc2) = 0x60000000 [ 30.836864][ T556] kvm: kvm [554]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x11e) = 0x60000000 [ 30.847922][ T45] hub 3-1:0.0: 1 port detected [ 30.867398][ T556] kvm: kvm [554]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x186) = 0x60000000 [ 30.878448][ T556] kvm: kvm [554]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x187) = 0x60000000 [ 31.010013][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:92:a0:fc:a8:57 [ 31.023152][ T10] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 31.089784][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.099542][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.123793][ T368] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.275009][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.286068][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.296364][ T368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.309321][ T368] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.318470][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.327400][ T368] usb 2-1: config 0 descriptor?? [ 31.397300][ C1] usb 4-1: eth1: intr status -71 [ 31.398077][ T10] usb 4-1: USB disconnect, device number 3 [ 31.408821][ T150] usb 4-1: device reset failed [ 31.451708][ T45] hub 3-1:0.0: activate --> -90 [ 31.740943][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.750740][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.760187][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.767986][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.776569][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.784227][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.793444][ T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 31.801773][ T368] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 31.815782][ T368] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 31.851094][ T45] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 31.851389][ T311] usb 3-1: USB disconnect, device number 3 [ 32.004965][ T45] usb 2-1: USB disconnect, device number 3 [ 32.256819][ T638] incfs_lookup_dentry err:-40 [ 32.275109][ T297] ------------[ cut here ]------------ [ 32.280644][ T297] WARNING: CPU: 1 PID: 297 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 32.290074][ T297] Modules linked in: [ 32.294076][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 32.305765][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.315900][ T297] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 32.321569][ T297] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 32.341243][ T297] RSP: 0018:ffffc9000b6b7b88 EFLAGS: 00010293 [ 32.347423][ T297] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888127588000 [ 32.355494][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.363488][ T297] RBP: ffffc9000b6b7bb0 R08: ffff88811c3c3abf R09: 1ffff11023878757 [ 32.371534][ T297] R10: dffffc0000000000 R11: ffffed1023878758 R12: 0000000000000000 [ 32.379575][ T297] R13: dffffc0000000000 R14: ffff88811c3c3a20 R15: ffff888123013660 [ 32.387653][ T297] FS: 00005555631cd500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.396651][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.403267][ T297] CR2: 00005555631f8998 CR3: 00000001305c6000 CR4: 00000000003526b0 [ 32.411339][ T297] Call Trace: [ 32.414685][ T297] [ 32.417668][ T297] ovl_do_remove+0x824/0xd10 [ 32.422308][ T297] ? ovl_set_redirect+0x780/0x780 [ 32.427388][ T297] ? __cfi_down_write+0x10/0x10 [ 32.432263][ T297] ovl_rmdir+0x1e/0x30 [ 32.436383][ T297] vfs_rmdir+0x3de/0x560 [ 32.440679][ T297] incfs_kill_sb+0x102/0x220 [ 32.445356][ T297] deactivate_locked_super+0xd5/0x270 [ 32.450782][ T297] deactivate_super+0xb8/0xe0 [ 32.455537][ T297] cleanup_mnt+0x438/0x4d0 [ 32.460056][ T297] __cleanup_mnt+0x1d/0x40 [ 32.464554][ T297] task_work_run+0x1e8/0x260 [ 32.469177][ T297] ? __cfi_task_work_run+0x10/0x10 [ 32.474350][ T297] ? __x64_sys_umount+0x12e/0x180 [ 32.479433][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.484854][ T297] ? __kasan_check_read+0x15/0x20 [ 32.489915][ T297] resume_user_mode_work+0x35/0x50 [ 32.495081][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 32.500608][ T297] do_syscall_64+0x63/0xf0 [ 32.505111][ T297] ? clear_bhb_loop+0x50/0xa0 [ 32.509822][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.515787][ T297] RIP: 0033:0x7f6d0f39f317 [ 32.520248][ T297] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.539956][ T297] RSP: 002b:00007ffc7b4a30d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.548447][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d0f39f317 [ 32.556545][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7b4a3190 [ 32.564568][ T297] RBP: 00007ffc7b4a3190 R08: 00007ffc7b4a4190 R09: 00000000ffffffff [ 32.572550][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7b4a4220 [ 32.580596][ T297] R13: 00007f6d0f434474 R14: 0000000000007df4 R15: 00007ffc7b4a4260 [ 32.588640][ T297] [ 32.591675][ T297] ---[ end trace 0000000000000000 ]--- [ 32.597518][ T297] ------------[ cut here ]------------ [ 32.602988][ T297] WARNING: CPU: 0 PID: 297 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 32.612320][ T297] Modules linked in: [ 32.616280][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor Tainted: G W syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 32.629468][ T297] Tainted: [W]=WARN [ 32.633299][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.643437][ T297] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 32.649167][ T297] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 32.668879][ T297] RSP: 0018:ffffc9000b6b7b88 EFLAGS: 00010293 [ 32.675021][ T297] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888127588000 [ 32.683034][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.691034][ T297] RBP: ffffc9000b6b7bb0 R08: ffff88811c3c3abf R09: 1ffff11023878757 [ 32.699065][ T297] R10: dffffc0000000000 R11: ffffed1023878758 R12: 0000000000000000 [ 32.707136][ T297] R13: dffffc0000000000 R14: ffff88811c3c3a20 R15: ffff888123013660 [ 32.715163][ T297] FS: 00005555631cd500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.724152][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.724450][ T644] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 32.730762][ T297] CR2: 00007f582c1ef2f8 CR3: 00000001305c6000 CR4: 00000000003526b0 [ 32.730789][ T297] Call Trace: [ 32.730797][ T297] [ 32.752630][ T297] ovl_do_remove+0x824/0xd10 [ 32.757309][ T297] ? ovl_set_redirect+0x780/0x780 [ 32.762374][ T297] ? __cfi_down_write+0x10/0x10 [ 32.767338][ T297] ovl_rmdir+0x1e/0x30 [ 32.771456][ T297] vfs_rmdir+0x3de/0x560 [ 32.775763][ T297] incfs_kill_sb+0x197/0x220 [ 32.780388][ T297] deactivate_locked_super+0xd5/0x270 [ 32.785841][ T297] deactivate_super+0xb8/0xe0 [ 32.790546][ T297] cleanup_mnt+0x438/0x4d0 [ 32.795024][ T297] __cleanup_mnt+0x1d/0x40 [ 32.799464][ T297] task_work_run+0x1e8/0x260 [ 32.804107][ T297] ? __cfi_task_work_run+0x10/0x10 [ 32.809254][ T297] ? __x64_sys_umount+0x12e/0x180 [ 32.814345][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.819747][ T297] ? __kasan_check_read+0x15/0x20 [ 32.824822][ T297] resume_user_mode_work+0x35/0x50 [ 32.829954][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 32.835482][ T297] do_syscall_64+0x63/0xf0 [ 32.839946][ T297] ? clear_bhb_loop+0x50/0xa0 [ 32.844712][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.850647][ T297] RIP: 0033:0x7f6d0f39f317 [ 32.855126][ T297] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.874796][ T297] RSP: 002b:00007ffc7b4a30d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.883234][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d0f39f317 [ 32.891326][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7b4a3190 [ 32.899423][ T297] RBP: 00007ffc7b4a3190 R08: 00007ffc7b4a4190 R09: 00000000ffffffff [ 32.907503][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7b4a4220 [ 32.915563][ T297] R13: 00007f6d0f434474 R14: 0000000000007df4 R15: 00007ffc7b4a4260 [ 32.923561][ T297] [ 32.926655][ T297] ---[ end trace 0000000000000000 ]--- [ 32.950530][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.973838][ T648] Bluetooth: hci0: command 0x1003 tx timeout [ 34.974375][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110