last executing test programs: 3.052209275s ago: executing program 3 (id=4): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x7fffffff, 0x4092200c, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0xefff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 3.030630405s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x0, 0x18, 0x2, "c421"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.172025348s ago: executing program 0 (id=12): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) 2.097991268s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000019, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x1, 0x0, 0x4dcc, 0x1ff, 0xfd0d, 0x0, 0x0, 0x40, 0x5}}, 0x50) 1.513374067s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002280)='net/udplite6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 1.181409343s ago: executing program 1 (id=17): r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.181246112s ago: executing program 1 (id=18): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x402, 0xffffffff, @private2, 0xffffffff}, 0x1c) 1.181084532s ago: executing program 1 (id=19): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @random="be189782b5ba"}, 0x10) 1.181002212s ago: executing program 1 (id=20): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={r1}) 611.832561ms ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 341.804455ms ago: executing program 1 (id=22): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sched_setscheduler(0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) 339.021925ms ago: executing program 0 (id=23): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000240)) 275.817316ms ago: executing program 0 (id=24): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 266.746096ms ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000019, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x1, 0x0, 0x4dcc, 0x1ff, 0xfd0d, 0x0, 0x0, 0x40, 0x5}}, 0x50) 0s ago: executing program 2 (id=26): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072445100053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b2402017f0200018b7e8e0724010000000009058209ff0300640007250181000000"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r6 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad000905030200023dec3d1f7da5e2ec14ee471c280842b5d643d5ea5ba2e4b02b837a8b2be1d37285c9b5821a09632c8fb68ddd656550646350cef1d8"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r5, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x2000c090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 24.317742][ T36] audit: type=1400 audit(1750694065.790:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.318899][ T281] cgroup: Unknown subsys name 'net' [ 24.340540][ T36] audit: type=1400 audit(1750694065.790:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.367743][ T36] audit: type=1400 audit(1750694065.820:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.368028][ T281] cgroup: Unknown subsys name 'devices' [ 24.551144][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.556754][ T281] cgroup: Unknown subsys name 'rlimit' [ 24.648993][ T36] audit: type=1400 audit(1750694066.120:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.672180][ T36] audit: type=1400 audit(1750694066.130:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.696968][ T36] audit: type=1400 audit(1750694066.130:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.705357][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.728805][ T36] audit: type=1400 audit(1750694066.200:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.754371][ T36] audit: type=1400 audit(1750694066.200:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.784025][ T36] audit: type=1400 audit(1750694066.260:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.809573][ T36] audit: type=1400 audit(1750694066.260:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.809721][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.557455][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.564551][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.571813][ T288] bridge_slave_0: entered allmulticast mode [ 25.578030][ T288] bridge_slave_0: entered promiscuous mode [ 25.585466][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.592600][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.599661][ T288] bridge_slave_1: entered allmulticast mode [ 25.605920][ T288] bridge_slave_1: entered promiscuous mode [ 25.659466][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.666498][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.673723][ T295] bridge_slave_0: entered allmulticast mode [ 25.680216][ T295] bridge_slave_0: entered promiscuous mode [ 25.692090][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.699240][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.706273][ T295] bridge_slave_1: entered allmulticast mode [ 25.712545][ T295] bridge_slave_1: entered promiscuous mode [ 25.763602][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.770690][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.777742][ T294] bridge_slave_0: entered allmulticast mode [ 25.784131][ T294] bridge_slave_0: entered promiscuous mode [ 25.791872][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.798902][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.805975][ T294] bridge_slave_1: entered allmulticast mode [ 25.812343][ T294] bridge_slave_1: entered promiscuous mode [ 25.852343][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.859403][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.866448][ T293] bridge_slave_0: entered allmulticast mode [ 25.872722][ T293] bridge_slave_0: entered promiscuous mode [ 25.879020][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.886084][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.893156][ T293] bridge_slave_1: entered allmulticast mode [ 25.899443][ T293] bridge_slave_1: entered promiscuous mode [ 25.958864][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.965927][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.973286][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.980313][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.038368][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.045535][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.052821][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.059860][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.077349][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.084410][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.091677][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.098685][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.111171][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.118434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.125703][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.133121][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.140944][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.148116][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.164018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.171088][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.182021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.189050][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.215817][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.222926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.230662][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.237693][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.265376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.272447][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.280773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.287809][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.312915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.319966][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.327877][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.334942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.347736][ T288] veth0_vlan: entered promiscuous mode [ 26.363036][ T288] veth1_macvtap: entered promiscuous mode [ 26.393946][ T293] veth0_vlan: entered promiscuous mode [ 26.408530][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.412469][ T295] veth0_vlan: entered promiscuous mode [ 26.434173][ T294] veth0_vlan: entered promiscuous mode [ 26.454954][ T293] veth1_macvtap: entered promiscuous mode [ 26.475947][ T294] veth1_macvtap: entered promiscuous mode [ 26.486935][ T295] veth1_macvtap: entered promiscuous mode [ 26.879478][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.029194][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 27.035404][ T314] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 27.043642][ T314] usb 3-1: config 0 has no interface number 0 [ 27.050153][ T314] usb 3-1: config 0 interface 12 has no altsetting 0 [ 27.058231][ T314] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 27.067412][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.075614][ T314] usb 3-1: Product: syz [ 27.079946][ T314] usb 3-1: Manufacturer: syz [ 27.084538][ T314] usb 3-1: SerialNumber: syz [ 27.090144][ T314] usb 3-1: config 0 descriptor?? [ 27.358541][ T330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 29.320435][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 29.320475][ T36] audit: type=1400 audit(1750694070.800:138): avc: denied { accept } for pid=369 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.576509][ T380] usb 3-1: USB disconnect, device number 2 [ 29.654783][ T315] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 29.667403][ T315] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 29.675803][ T315] CPU: 0 UID: 0 PID: 315 Comm: syz.3.4 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 29.688887][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.698927][ T315] RIP: 0010:fuse_file_release+0x29e/0x400 [ 29.704646][ T315] Code: 00 74 12 48 89 df e8 c1 14 a1 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 13 a1 ff 48 ba 00 00 00 00 00 fc [ 29.724238][ T315] RSP: 0018:ffffc9000b777ae0 EFLAGS: 00010202 [ 29.730346][ T315] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88810bf43900 [ 29.738302][ T315] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88810e721178 [ 29.746290][ T315] RBP: ffffc9000b777b28 R08: 0000000000000003 R09: 0000000000000004 [ 29.754342][ T315] R10: dffffc0000000000 R11: fffff520016eef2c R12: 0000000000008003 [ 29.762302][ T315] R13: ffff8881177aa880 R14: ffff88810e721100 R15: 00000000000000c8 [ 29.770259][ T315] FS: 0000555590d24500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.779178][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.785764][ T315] CR2: 00005585d6702220 CR3: 000000010dfa2000 CR4: 00000000003526b0 [ 29.793724][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.801765][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.809722][ T315] Call Trace: [ 29.812985][ T315] [ 29.815907][ T315] fuse_release+0x13e/0x1b0 [ 29.820394][ T315] ? __cfi_fuse_release+0x10/0x10 [ 29.825412][ T315] __fput+0x1fb/0xa00 [ 29.829395][ T315] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.834929][ T315] ____fput+0x20/0x30 [ 29.838900][ T315] task_work_run+0x1e0/0x250 [ 29.843474][ T315] ? __cfi_task_work_run+0x10/0x10 [ 29.848567][ T315] ? __kasan_check_write+0x18/0x20 [ 29.853664][ T315] ? task_work_add+0x258/0x3f0 [ 29.858417][ T315] get_signal+0x1307/0x14f0 [ 29.862931][ T315] ? __kasan_check_write+0x18/0x20 [ 29.868027][ T315] ? _raw_spin_lock+0x8c/0x120 [ 29.872777][ T315] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.877960][ T315] ? fput+0x1ac/0x240 [ 29.881924][ T315] arch_do_signal_or_restart+0x96/0x720 [ 29.887474][ T315] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 29.893615][ T315] syscall_exit_to_user_mode+0x58/0xb0 [ 29.899061][ T315] do_syscall_64+0x64/0xf0 [ 29.903466][ T315] ? clear_bhb_loop+0x50/0xa0 [ 29.908128][ T315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.909173][ T380] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.914001][ T315] RIP: 0033:0x7f92fd38e929 [ 29.914035][ T315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.930502][ T36] audit: type=1400 audit(1750694071.410:139): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.945452][ T315] RSP: 002b:00007ffe8849b498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.945476][ T315] RAX: 0000000000000000 RBX: 00007f92fd5b7ba0 RCX: 00007f92fd38e929 [ 29.945488][ T315] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.945500][ T315] RBP: 00007f92fd5b7ba0 R08: 00000000000000a4 R09: 000000098849b78f [ 29.945512][ T315] R10: 00000000003ffd38 R11: 0000000000000246 R12: 0000000000006ad6 [ 29.945523][ T315] R13: 00007f92fd5b6080 R14: ffffffffffffffff R15: 00007ffe8849b5b0 [ 29.945540][ T315] [ 29.969355][ T36] audit: type=1400 audit(1750694071.410:140): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.975593][ T315] Modules linked in: [ 29.975729][ T315] ---[ end trace 0000000000000000 ]--- [ 29.983867][ T36] audit: type=1400 audit(1750694071.410:141): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.991932][ T315] RIP: 0010:fuse_file_release+0x29e/0x400 [ 30.000006][ T36] audit: type=1400 audit(1750694071.410:142): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.007808][ T315] Code: 00 74 12 48 89 df e8 c1 14 a1 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 13 a1 ff 48 ba 00 00 00 00 00 fc [ 30.015923][ T36] audit: type=1400 audit(1750694071.410:143): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.020615][ T315] RSP: 0018:ffffc9000b777ae0 EFLAGS: 00010202 [ 30.040259][ T36] audit: type=1400 audit(1750694071.410:144): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.044067][ T315] [ 30.049612][ T36] audit: type=1400 audit(1750694071.410:145): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.070768][ T315] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88810bf43900 [ 30.089281][ T380] usb 3-1: Using ep0 maxpacket: 16 [ 30.099371][ T315] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88810e721178 [ 30.120185][ T380] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 30.140988][ T315] RBP: ffffc9000b777b28 R08: 0000000000000003 R09: 0000000000000004 [ 30.143263][ T380] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.166111][ T315] R10: dffffc0000000000 R11: fffff520016eef2c R12: 0000000000008003 [ 30.175364][ T380] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 30.191140][ T315] R13: ffff8881177aa880 R14: ffff88810e721100 R15: 00000000000000c8 [ 30.206690][ T380] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.212033][ T315] FS: 0000555590d24500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.222847][ T380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.231470][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.240538][ T380] usb 3-1: Product: syz [ 30.251367][ T315] CR2: 00007f6aa1580ab8 CR3: 000000010dfa2000 CR4: 00000000003526b0 [ 30.264520][ T380] usb 3-1: Manufacturer: syz [ 30.267558][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.276595][ T380] usb 3-1: SerialNumber: syz [ 30.286030][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.337255][ T315] Kernel panic - not syncing: Fatal exception [ 30.343573][ T315] Kernel Offset: disabled [ 30.347889][ T315] Rebooting in 86400 seconds..