last executing test programs: 4.201359456s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000006c0)={0x1, 0x1}) 4.174359246s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffff79, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafb", 0xf}, {&(0x7f0000000180)="2cd7a2fa89e635dd0000000000ff0000", 0x10}, {&(0x7f00000006c0)="1fd962ae50a86ef94b306e7805814e3368d69b8e", 0x14}], 0x3) 3.993802719s ago: executing program 0 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={'streebog512\x00'}, &(0x7f0000000640)="708803449262ddb5bda9ed57505e65839d3b0e8bf85ede21585373176b19609a10de452b2c85a693f4fffbfde0137aafd7d8e5ffc37e1b3aebbdae8dc970f20781", 0x41}) 3.060846484s ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 3.056752933s ago: executing program 0 (id=9): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file1\x00', 0x2, 0x40) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) 2.938923015s ago: executing program 1 (id=11): syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100009880a420d00622065a3f0102030109"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.512306927s ago: executing program 2 (id=22): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000940)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1100"], 0x50}}], 0x2, 0x0) 1.499534167s ago: executing program 2 (id=23): r0 = socket$unix(0x1, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) 580.702141ms ago: executing program 2 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a5c000000080a220300000000000000000a0000010c00064000000000000000020900020073797a31000000000800094000000002140005800800014000000021080001400000000814000580080002400000000108000100000000173c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003600000000c0a01020000000000000000010000000900020073797a32000000003400038030000080080006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0x120}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000105c650b00010000000000000000000000000a6c000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000000800054000000000080003400000005f08000240000000000900010073797a30000000000900020073797a320000000005000740e3000000140000001100010000000000000000"], 0x94}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 495.687682ms ago: executing program 2 (id=27): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) 482.959492ms ago: executing program 2 (id=28): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) close(0x3) 357.532484ms ago: executing program 2 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) 24.94998ms ago: executing program 3 (id=38): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/137, 0x89}], 0x1, 0x4, 0x0) 24.790969ms ago: executing program 3 (id=39): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xffffffffffffffff, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x4000, 0x1, 0x0) 24.73926ms ago: executing program 3 (id=40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x795beaa6, 0xb, 0x8}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 24.682869ms ago: executing program 3 (id=41): syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.12117ms ago: executing program 3 (id=42): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2040600) unshare(0x2000400) 0s ago: executing program 3 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 25.641663][ T36] audit: type=1400 audit(1750603373.130:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.643117][ T281] cgroup: Unknown subsys name 'net' [ 25.664374][ T36] audit: type=1400 audit(1750603373.130:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.692691][ T36] audit: type=1400 audit(1750603373.150:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.693153][ T281] cgroup: Unknown subsys name 'devices' [ 25.833017][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.838693][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.034475][ T36] audit: type=1400 audit(1750603373.520:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.057771][ T36] audit: type=1400 audit(1750603373.520:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.082574][ T36] audit: type=1400 audit(1750603373.520:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.160953][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.169897][ T36] audit: type=1400 audit(1750603373.650:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 26.195447][ T36] audit: type=1400 audit(1750603373.660:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.232011][ T36] audit: type=1400 audit(1750603373.720:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.257969][ T36] audit: type=1400 audit(1750603373.720:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.258032][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.128295][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.135460][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.142937][ T290] bridge_slave_0: entered allmulticast mode [ 27.149211][ T290] bridge_slave_0: entered promiscuous mode [ 27.163959][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.171048][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.178133][ T290] bridge_slave_1: entered allmulticast mode [ 27.184491][ T290] bridge_slave_1: entered promiscuous mode [ 27.195711][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.202809][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.209898][ T288] bridge_slave_0: entered allmulticast mode [ 27.216267][ T288] bridge_slave_0: entered promiscuous mode [ 27.223968][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.231047][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.238140][ T288] bridge_slave_1: entered allmulticast mode [ 27.244530][ T288] bridge_slave_1: entered promiscuous mode [ 27.272594][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.279750][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.287064][ T291] bridge_slave_0: entered allmulticast mode [ 27.293569][ T291] bridge_slave_0: entered promiscuous mode [ 27.308379][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.315523][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.322699][ T291] bridge_slave_1: entered allmulticast mode [ 27.329170][ T291] bridge_slave_1: entered promiscuous mode [ 27.388078][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.395175][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.402281][ T289] bridge_slave_0: entered allmulticast mode [ 27.408531][ T289] bridge_slave_0: entered promiscuous mode [ 27.425069][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.432161][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.439253][ T289] bridge_slave_1: entered allmulticast mode [ 27.445611][ T289] bridge_slave_1: entered promiscuous mode [ 27.555777][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.562965][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.570271][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.577298][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.596831][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.603913][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.611238][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.618364][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.661607][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.668937][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.676356][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.683609][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.702209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.709744][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.717498][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.724599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.747405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.754579][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.763168][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.770257][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.808563][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.815671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.825139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.832315][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.865069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.872166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.882428][ T290] veth0_vlan: entered promiscuous mode [ 27.892005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.899085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.923625][ T291] veth0_vlan: entered promiscuous mode [ 27.943567][ T290] veth1_macvtap: entered promiscuous mode [ 27.957721][ T291] veth1_macvtap: entered promiscuous mode [ 27.965236][ T288] veth0_vlan: entered promiscuous mode [ 27.987151][ T289] veth0_vlan: entered promiscuous mode [ 28.003871][ T288] veth1_macvtap: entered promiscuous mode [ 28.013927][ T289] veth1_macvtap: entered promiscuous mode [ 28.047558][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.142910][ T317] tipc: Started in network mode [ 28.147912][ T317] tipc: Node identity bed80218680a, cluster identity 4711 [ 28.159173][ T317] tipc: Enabled bearer , priority 0 [ 28.193103][ T317] syzkaller0: entered promiscuous mode [ 28.198727][ T317] syzkaller0: entered allmulticast mode [ 28.205078][ T317] tipc: Resetting bearer [ 28.217694][ T314] tipc: Resetting bearer [ 28.234707][ T314] tipc: Disabling bearer [ 29.371250][ T347] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 30.519326][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.843407][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 30.853664][ T307] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 30.861356][ T307] usb 2-1: can't read configurations, error -61 [ 31.040157][ T307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.199978][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 31.207741][ T307] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.215889][ T307] usb 2-1: can't read configurations, error -61 [ 31.223017][ T307] usb usb2-port1: attempt power cycle [ 31.570583][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.602406][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 31.626181][ T307] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.690045][ T307] usb 2-1: can't read configurations, error -61 [ 31.704695][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 31.704711][ T36] audit: type=1400 audit(1750603379.190:119): avc: denied { name_bind } for pid=380 comm="syz.3.26" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.732292][ T36] audit: type=1400 audit(1750603379.190:120): avc: denied { node_bind } for pid=380 comm="syz.3.26" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.819998][ T307] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.840392][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 31.849995][ T307] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.858129][ T307] usb 2-1: can't read configurations, error -61 [ 31.864847][ T307] usb usb2-port1: unable to enumerate USB device [ 31.882077][ T36] audit: type=1400 audit(1750603379.370:121): avc: denied { create } for pid=390 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.904260][ T36] audit: type=1400 audit(1750603379.390:122): avc: denied { write } for pid=390 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.925131][ T36] audit: type=1400 audit(1750603379.390:123): avc: denied { read } for pid=390 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.972235][ T397] ======================================================= [ 31.972235][ T397] WARNING: The mand mount option has been deprecated and [ 31.972235][ T397] and is ignored by this kernel. Remove the mand [ 31.972235][ T397] option from the mount to silence this warning. [ 31.972235][ T397] ======================================================= [ 32.021434][ T36] audit: type=1400 audit(1750603379.510:124): avc: denied { read } for pid=398 comm="syz.3.33" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.043940][ T36] audit: type=1400 audit(1750603379.510:125): avc: denied { open } for pid=398 comm="syz.3.33" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.068198][ T36] audit: type=1400 audit(1750603379.520:126): avc: denied { ioctl } for pid=398 comm="syz.3.33" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.093802][ T36] audit: type=1400 audit(1750603379.520:127): avc: denied { set_context_mgr } for pid=398 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.122927][ T36] audit: type=1400 audit(1750603379.520:128): avc: denied { write } for pid=398 comm="syz.3.33" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.368040][ T334] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 32.380681][ T334] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 32.389127][ T334] CPU: 1 UID: 0 PID: 334 Comm: syz.0.9 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 32.402246][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.412315][ T334] RIP: 0010:fuse_file_release+0x29e/0x400 [ 32.418078][ T334] Code: 00 74 12 48 89 df e8 41 1e a1 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 f4 1c a1 ff 48 ba 00 00 00 00 00 fc [ 32.437779][ T334] RSP: 0018:ffffc9000b73fae0 EFLAGS: 00010202 [ 32.443871][ T334] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881103e1300 [ 32.451851][ T334] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888112e14878 [ 32.459835][ T334] RBP: ffffc9000b73fb28 R08: 0000000000000003 R09: 0000000000000004 [ 32.467825][ T334] R10: dffffc0000000000 R11: fffff520016e7f2c R12: 0000000000008002 [ 32.475901][ T334] R13: ffff8881133ddf80 R14: ffff888112e14800 R15: 00000000000000c8 [ 32.483877][ T334] FS: 000055555adc7500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.492899][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.499506][ T334] CR2: 000055555adc74a8 CR3: 000000010a792000 CR4: 00000000003526b0 [ 32.507495][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.515473][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.523451][ T334] Call Trace: [ 32.526736][ T334] [ 32.529717][ T334] fuse_release+0x13e/0x1b0 [ 32.534237][ T334] ? __cfi_fuse_release+0x10/0x10 [ 32.539270][ T334] __fput+0x1fb/0xa00 [ 32.543261][ T334] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.548855][ T334] ____fput+0x20/0x30 [ 32.552864][ T334] task_work_run+0x1e0/0x250 [ 32.557476][ T334] ? __cfi_task_work_run+0x10/0x10 [ 32.562599][ T334] ? __kasan_check_write+0x18/0x20 [ 32.567732][ T334] ? task_work_add+0x258/0x3f0 [ 32.572501][ T334] get_signal+0x1307/0x14f0 [ 32.577007][ T334] ? __kasan_check_write+0x18/0x20 [ 32.582297][ T334] ? _raw_spin_lock+0x8c/0x120 [ 32.587084][ T334] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.592293][ T334] ? fput+0x1ac/0x240 [ 32.596290][ T334] arch_do_signal_or_restart+0x96/0x720 [ 32.601845][ T334] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 32.608009][ T334] ? __kasan_check_write+0x18/0x20 [ 32.613124][ T334] syscall_exit_to_user_mode+0x58/0xb0 [ 32.618605][ T334] do_syscall_64+0x64/0xf0 [ 32.623035][ T334] ? clear_bhb_loop+0x35/0x90 [ 32.627726][ T334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.633652][ T334] RIP: 0033:0x7fcbeb58e929 [ 32.638705][ T334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.658332][ T334] RSP: 002b:00007ffdddfc74d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.666763][ T334] RAX: 0000000000000000 RBX: 000000000000721a RCX: 00007fcbeb58e929 [ 32.674756][ T334] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.682732][ T334] RBP: 00007fcbeb7b7ba0 R08: 0000000000000001 R09: 00000009ddfc77cf [ 32.690704][ T334] R10: 00007fcbeb400000 R11: 0000000000000246 R12: 00007fcbeb7b5fac [ 32.698687][ T334] R13: 00007fcbeb7b5fa0 R14: ffffffffffffffff R15: 00007ffdddfc75f0 [ 32.706667][ T334] [ 32.709720][ T334] Modules linked in: [ 32.714036][ T334] ---[ end trace 0000000000000000 ]--- [ 32.724934][ T334] RIP: 0010:fuse_file_release+0x29e/0x400 [ 32.730922][ T334] Code: 00 74 12 48 89 df e8 41 1e a1 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 f4 1c a1 ff 48 ba 00 00 00 00 00 fc [ 32.807535][ T334] RSP: 0018:ffffc9000b73fae0 EFLAGS: 00010202 [ 32.814030][ T334] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881103e1300 [ 32.822175][ T334] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888112e14878 [ 32.830555][ T334] RBP: ffffc9000b73fb28 R08: 0000000000000003 R09: 0000000000000004 [ 32.838759][ T334] R10: dffffc0000000000 R11: fffff520016e7f2c R12: 0000000000008002 [ 32.846903][ T334] R13: ffff8881133ddf80 R14: ffff888112e14800 R15: 00000000000000c8 [ 32.855041][ T334] FS: 000055555adc7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.864876][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.871738][ T334] CR2: 00007f61a8380ab8 CR3: 000000010a792000 CR4: 00000000003526b0 [ 32.880055][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.888580][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.897081][ T334] Kernel panic - not syncing: Fatal exception [ 32.903547][ T334] Kernel Offset: disabled [ 32.907882][ T334] Rebooting in 86400 seconds..