last executing test programs: 1.11934885s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xe0, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ptrace(0x10, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.1046017s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0xa, 0x6, 0x40000000080009, 0x0, 0x7ffd, 0x1, 0xb3, 0x8, 0x6, 0x400000000000000a, 0xfff, 0x2081, 0x7, 0x1fc, 0xe6, 0xb286], 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 908.196201ms ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/netfilter/nf_conntrack_acct\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/netfilter/nf_conntrack_checksum\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) 887.23347ms ago: executing program 3 (id=8): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0xbf}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 363.70571ms ago: executing program 1 (id=18): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x2, 0x4008c44) 337.23697ms ago: executing program 1 (id=19): socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 316.34159ms ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 250.88515ms ago: executing program 2 (id=21): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) 229.29429ms ago: executing program 2 (id=22): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 209.02047ms ago: executing program 2 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x53}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 90.6391ms ago: executing program 1 (id=24): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140), 0x0, 0x0, 0x2) 71.21344ms ago: executing program 1 (id=25): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2, 0x2}) 56.41548ms ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ip_forward\x00', 0x103281, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) 43.35095ms ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x0, 0x3, 0x2e, 0x4, '\x00', 0x2, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) 36.54794ms ago: executing program 2 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 2 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 22.147538][ T36] audit: type=1400 audit(1786015712.350:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.151341][ T287] cgroup: Unknown subsys name 'net' [ 22.170316][ T36] audit: type=1400 audit(1786015712.350:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.198835][ T36] audit: type=1400 audit(1786015712.380:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.199353][ T287] cgroup: Unknown subsys name 'devices' [ 22.319801][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.325465][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.421448][ T36] audit: type=1400 audit(1786015712.620:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.444717][ T36] audit: type=1400 audit(1786015712.620:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.469491][ T36] audit: type=1400 audit(1786015712.620:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.528651][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.537639][ T36] audit: type=1400 audit(1786015712.740:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 22.563094][ T36] audit: type=1400 audit(1786015712.740:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.593229][ T36] audit: type=1400 audit(1786015712.790:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.594630][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.618867][ T36] audit: type=1400 audit(1786015712.790:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.982855][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.990268][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.997490][ T294] bridge_slave_0: entered allmulticast mode [ 24.003857][ T294] bridge_slave_0: entered promiscuous mode [ 24.010596][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.017714][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.024823][ T294] bridge_slave_1: entered allmulticast mode [ 24.031235][ T294] bridge_slave_1: entered promiscuous mode [ 24.149335][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.156444][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.163571][ T295] bridge_slave_0: entered allmulticast mode [ 24.169858][ T295] bridge_slave_0: entered promiscuous mode [ 24.182498][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.189607][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.196691][ T295] bridge_slave_1: entered allmulticast mode [ 24.203130][ T295] bridge_slave_1: entered promiscuous mode [ 24.241509][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.248778][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.255877][ T296] bridge_slave_0: entered allmulticast mode [ 24.262401][ T296] bridge_slave_0: entered promiscuous mode [ 24.269303][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.276372][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.283529][ T296] bridge_slave_1: entered allmulticast mode [ 24.290145][ T296] bridge_slave_1: entered promiscuous mode [ 24.333635][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.340792][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.348249][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.355304][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.403640][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.410791][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.418027][ T297] bridge_slave_0: entered allmulticast mode [ 24.424400][ T297] bridge_slave_0: entered promiscuous mode [ 24.431041][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.438257][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.445375][ T297] bridge_slave_1: entered allmulticast mode [ 24.451803][ T297] bridge_slave_1: entered promiscuous mode [ 24.531597][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.538747][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.546051][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.553134][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.563572][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.570682][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.577989][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.585033][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600879][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.608002][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.615299][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.622377][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.654871][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.662500][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.670778][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.678099][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.685418][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.693072][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.701255][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.708740][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.723803][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.730925][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.738693][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.745746][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.769941][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.777036][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.788737][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.795830][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.804310][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.811395][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.830591][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.837672][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.854389][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.861514][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.869246][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.876293][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.928014][ T294] veth0_vlan: entered promiscuous mode [ 24.939789][ T295] veth0_vlan: entered promiscuous mode [ 24.953857][ T296] veth0_vlan: entered promiscuous mode [ 24.962178][ T297] veth0_vlan: entered promiscuous mode [ 24.981379][ T296] veth1_macvtap: entered promiscuous mode [ 24.992553][ T294] veth1_macvtap: entered promiscuous mode [ 25.000150][ T295] veth1_macvtap: entered promiscuous mode [ 25.025457][ T297] veth1_macvtap: entered promiscuous mode [ 25.072079][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.120594][ T315] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 25.143686][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.387469][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.547406][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 25.557665][ T9] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.558057][ T353] input: syz1 as /devices/virtual/input/input4 [ 25.579349][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.586405][ T9] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 25.595905][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.607881][ T67] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.615561][ T9] usb 1-1: config 0 descriptor?? [ 25.768443][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.779597][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.789604][ T67] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 25.802313][ T67] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.812672][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.830948][ T67] usb 4-1: Product: syz [ 25.835307][ T67] usb 4-1: Manufacturer: syz [ 25.840138][ T67] usb 4-1: SerialNumber: syz [ 25.913275][ T369] dummy_hcd dummy_hcd.0: remove, state 1 [ 25.919195][ T369] usb usb1: USB disconnect, device number 1 [ 26.026444][ T9] ortek 0003:1223:3F07.0001: unknown main item tag 0x4 [ 26.033518][ T9] ortek 0003:1223:3F07.0001: unknown main item tag 0x5 [ 26.040490][ T9] ortek 0003:1223:3F07.0001: unknown main item tag 0x2 [ 26.048556][ T9] ortek 0003:1223:3F07.0001: unexpected long global item [ 26.057217][ T345] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 26.064703][ T9] ortek 0003:1223:3F07.0001: probe with driver ortek failed with error -22 [ 26.075837][ T369] usb 1-1: USB disconnect, device number 2 [ 26.092768][ T369] dummy_hcd dummy_hcd.0: stopped [ 26.099195][ T369] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 26.232945][ T313] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 26.245699][ T313] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 26.254152][ T313] CPU: 0 UID: 0 PID: 313 Comm: syz.0.1 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 26.265377][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.275479][ T313] RIP: 0010:set_link_state+0x2a/0x1240 [ 26.281017][ T313] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 26.300660][ T313] RSP: 0018:ffffc9000b6f7ad8 EFLAGS: 00010046 [ 26.306783][ T313] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881093a9300 [ 26.314787][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.322776][ T313] RBP: ffffc9000b6f7b60 R08: 0000000000000003 R09: 0000000000000004 [ 26.330782][ T313] R10: dffffc0000000000 R11: fffff520016def58 R12: 0000000000000000 [ 26.338797][ T313] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888103bf8000 [ 26.346810][ T313] FS: 00005555745c2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.355781][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.362398][ T313] CR2: 0000001b2f416ff8 CR3: 000000010df70000 CR4: 00000000003526b0 [ 26.370412][ T313] Call Trace: [ 26.373721][ T313] [ 26.376699][ T313] ? __kasan_check_write+0x18/0x20 [ 26.381857][ T313] dummy_pullup+0xd1/0x130 [ 26.386310][ T313] ? __cfi_dummy_pullup+0x10/0x10 [ 26.391390][ T313] usb_gadget_disconnect_locked+0x151/0x400 [ 26.397341][ T313] gadget_unbind_driver+0xaf/0x3f0 [ 26.402497][ T313] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 26.408259][ T313] device_release_driver_internal+0x4ad/0x830 [ 26.414398][ T313] driver_detach+0x1f5/0x2d0 [ 26.419031][ T313] bus_remove_driver+0x254/0x2b0 [ 26.424022][ T313] driver_unregister+0x79/0xb0 [ 26.428820][ T313] usb_gadget_unregister_driver+0x52/0x80 [ 26.434577][ T313] raw_release+0xdb/0x280 [ 26.438954][ T313] ? __cfi_raw_release+0x10/0x10 [ 26.443957][ T313] __fput+0x208/0xa30 [ 26.447988][ T313] ____fput+0x20/0x30 [ 26.452021][ T313] task_work_run+0x1e8/0x260 [ 26.456675][ T313] ? __cfi_task_work_run+0x10/0x10 [ 26.461839][ T313] ? __kasan_check_read+0x15/0x20 [ 26.466897][ T313] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.473021][ T313] resume_user_mode_work+0x35/0x50 [ 26.478182][ T313] syscall_exit_to_user_mode+0x63/0xb0 [ 26.483658][ T313] do_syscall_64+0x63/0xf0 [ 26.488118][ T313] ? clear_bhb_loop+0x50/0xa0 [ 26.492832][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.498791][ T313] RIP: 0033:0x7f9835d9e0d9 [ 26.503248][ T313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.522890][ T313] RSP: 002b:00007ffe718429c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 26.531386][ T313] RAX: 0000000000000000 RBX: 00007ffe71842ab0 RCX: 00007f9835d9e0d9 [ 26.539397][ T313] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 26.547419][ T313] RBP: 00000000000061ff R08: 0000000000000001 R09: 0000000000000000 [ 26.555417][ T313] R10: 0000001b2e220000 R11: 0000000000000246 R12: 00007ffe71842af0 [ 26.563458][ T313] R13: 00007f9836025fac R14: 00000000000066eb R15: 00007f9836025fa0 [ 26.571476][ T313] [ 26.574520][ T313] Modules linked in: [ 26.578449][ T313] ---[ end trace 0000000000000000 ]--- [ 26.583951][ T313] RIP: 0010:set_link_state+0x2a/0x1240 [ 26.589547][ T313] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 26.609240][ T313] RSP: 0018:ffffc9000b6f7ad8 EFLAGS: 00010046 [ 26.615363][ T313] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881093a9300 [ 26.623357][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.631362][ T313] RBP: ffffc9000b6f7b60 R08: 0000000000000003 R09: 0000000000000004 [ 26.639376][ T313] R10: dffffc0000000000 R11: fffff520016def58 R12: 0000000000000000 [ 26.647379][ T313] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888103bf8000 [ 26.655409][ T313] FS: 00005555745c2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.664429][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.671055][ T313] CR2: 0000001b2f416ff8 CR3: 000000010df70000 CR4: 00000000003526b0 [ 26.671732][ T345] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 26.679088][ T313] Kernel panic - not syncing: Fatal exception [ 26.692871][ T313] Kernel Offset: disabled [ 26.697222][ T313] Rebooting in 86400 seconds..