last executing test programs: 40.019217477s ago: executing program 0 (id=1325): r0 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002) close(0x3) mkdir(&(0x7f0000000000)='proc\x00', 0x106) mount(0x0, &(0x7f0000000100)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) splice(r1, &(0x7f0000000040)=0xff, r1, &(0x7f0000000080)=0xfff, 0x7fffffffffffffff, 0x0) read$msr(r1, &(0x7f0000000240)=""/71, 0x47) read(r0, &(0x7f0000000400)=""/8, 0x8) 40.019032517s ago: executing program 0 (id=1326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000480)={0x7, 0x0, [{0x4, 0x7115, 0x5, 0x6, 0x1a70d01b, 0x1, 0x3}, {0xc0000000, 0x9, 0x2, 0x5, 0x7, 0xfffffffc, 0x5}, {0x80000007, 0x80, 0x5, 0x3, 0x2, 0x7, 0x200}, {0xb, 0x8, 0x74bf90bee972f55e, 0xfb, 0xfffffffe, 0x10, 0x173}, {0xc0000001, 0x1, 0x5, 0x3f, 0xfffffffe, 0x80, 0x3}, {0x80000007, 0x1, 0x1, 0x8, 0xc052, 0x8000}, {0xc0000000, 0x80000000, 0x6, 0x3, 0x6, 0x0, 0x10000}]}) 40.018862077s ago: executing program 0 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) rt_sigqueueinfo(0x0, 0x13, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xe02000, 0x120) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5406000a", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250200000014000c00fe800000000000000000000000000031080005006401010114000b00ff02000000000000000000000000000105000d0008000000080004007f000001"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x200040c0) 39.961281628s ago: executing program 0 (id=1329): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 39.730508474s ago: executing program 3 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ffffffe}]}]}, 0x20}}, 0x0) 39.657160456s ago: executing program 1 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000480)={0x8, 0x0, [{0x4, 0x7115, 0x5, 0x6, 0x1a70d01b, 0x1, 0x3}, {0xc0000000, 0x9, 0x2, 0x5, 0x7, 0xfffffffc, 0x5}, {0x80000007, 0x80, 0x5, 0x3, 0x2, 0x7, 0x200}, {0xc0000001, 0x1, 0x5, 0x3f, 0xfffffffe, 0x80, 0x3}, {0x80000007, 0x1, 0x1, 0x8, 0xc052, 0x8000}, {0xc0000000, 0x80000000, 0x6, 0x3, 0x6, 0x0, 0x10000}, {0x0, 0x4a, 0x1, 0x4, 0x44373634, 0x65b, 0x5}, {0x7, 0x2d8, 0x0, 0x8, 0x8, 0x5, 0x3}]}) 39.656777996s ago: executing program 3 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 39.642763885s ago: executing program 3 (id=1344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a0015012000"], 0x1c}], 0x1}, 0x4000080) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c09040000d6f300014120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201008f0e07011024010201000400000008b8000000030905820908004006030825018203f3068e"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x80000001, 0x1000) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = signalfd(r0, &(0x7f00000001c0)={[0x1]}, 0x8) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x0, 0x3, 0x100000001, 0x5c41, r3}) ptrace$peekuser(0x3, r3, 0x4) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x62, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x1, '\x00', 0x0, 0x1}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x4000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 39.612369006s ago: executing program 1 (id=1345): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x22, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 39.611921706s ago: executing program 1 (id=1346): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x9, 0xfffffffffffffff8}) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)="43e5", 0x2}], 0x1}}], 0x1, 0x20000081) (async) sendmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)="43e5", 0x2}], 0x1}}], 0x1, 0x20000081) 39.535268188s ago: executing program 1 (id=1347): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001d80)={{r6}, r7, 0x14, @inherit={0x98, &(0x7f00000005c0)={0x1, 0xa, 0xffffffffffffd4f9, 0x5, {0x4, 0x9, 0x5, 0x1, 0x7}, [0x3, 0x8, 0x470, 0x7, 0xc, 0x1, 0x6, 0x80, 0x77, 0x80000000]}}, @subvolid=0x4}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8481, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0xe5c, 0x80000) eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10, 0x7, 0x2, r10}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'veth1_to_team\x00', 0x200}) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB='S'], 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x12100) r13 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89fe, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$AUDIT_GET(r11, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x0, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r3}) 39.193945036s ago: executing program 1 (id=1348): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x22, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (fail_nth: 1) 39.169641137s ago: executing program 1 (id=1349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xc0010010, 0x0, 0x400000000000000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x2001cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x4, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000000)={0x1, 0x4a6, 0x4, 0xffff, 0x44, "8c00000000000000000000ffff00", 0x4020000, 0x84}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xbc) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x6) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001280)=0xff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 38.925489123s ago: executing program 3 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r2, r1, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0x4004c810) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 38.847202024s ago: executing program 2 (id=1354): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2241) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x5, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x19}, @flat=@binder={0x73622a85, 0x130a, 0x2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) read(r3, &(0x7f00000001c0)=""/16, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000080)=0x7) 38.787592856s ago: executing program 2 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f0000000240)=0x21) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f0000000640)=""/159, &(0x7f0000000700)=0x9f) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) r9 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r9, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r9, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000540)=""/245, 0xf5}], 0x1, 0x40000004, 0x5) lseek(r9, 0x0, 0x4) sendfile(r9, r9, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1000, 0x103) 38.767820046s ago: executing program 0 (id=1356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x46}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c82529297511e1}, 0x194) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) 38.62347401s ago: executing program 0 (id=1357): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001d80)={{r6}, r7, 0x14, @inherit={0x98, &(0x7f00000005c0)={0x1, 0xa, 0xffffffffffffd4f9, 0x5, {0x4, 0x9, 0x5, 0x1, 0x7}, [0x3, 0x8, 0x470, 0x7, 0xc, 0x1, 0x6, 0x80, 0x77, 0x80000000]}}, @subvolid=0x4}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8481, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0xe5c, 0x80000) eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10, 0x7, 0x2, r10}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'veth1_to_team\x00', 0x200}) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB='S'], 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x12100) r13 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89fe, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$AUDIT_GET(r11, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x0, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r3}) 38.515591472s ago: executing program 2 (id=1358): clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2503000000400001802c000400c9ff010002000000ac5ae12f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a8a00000000"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r3, 0x409, 0x7) (async) ftruncate(r3, 0x101) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001900410000000000fbdbdf251d01090050000b", @ANYRESDEC=r4], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) (async) r5 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@private=0xa010101, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}}) (async, rerun: 32) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4801}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'veth0_macvtap\x00', {}, 0x80}) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\b\x00)\x00', @ANYRES32=r5, @ANYRESOCT=r4], 0x28}], 0x1}, 0x0) 38.502563303s ago: executing program 2 (id=1359): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 37.415177598s ago: executing program 2 (id=1360): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f01c9f08364c025ba2000b009ee64f3f2260f2193660f1afb0fa7c0f30f2d972ff5660f5151c766b9890400000f326766c7442400435c00006766c7442402dafd79af6766c744240600000000670f011c24", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 33.355225095s ago: executing program 2 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 28.041894242s ago: executing program 3 (id=1362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000480)={0x8, 0x0, [{0x4, 0x7115, 0x5, 0x6, 0x1a70d01b, 0x1, 0x3}, {0xc0000000, 0x9, 0x2, 0x5, 0x7, 0xfffffffc, 0x5}, {0xb, 0x8, 0x74bf90bee972f55e, 0xfb, 0xfffffffe, 0x10, 0x173}, {0xc0000001, 0x1, 0x5, 0x3f, 0xfffffffe, 0x80, 0x3}, {0x80000007, 0x1, 0x1, 0x8, 0xc052, 0x8000}, {0xc0000000, 0x80000000, 0x6, 0x3, 0x6, 0x0, 0x10000}, {0x0, 0x4a, 0x1, 0x4, 0x44373634, 0x65b, 0x5}, {0x7, 0x2d8, 0x0, 0x8, 0x8, 0x5, 0x3}]}) 21.83461626s ago: executing program 32 (id=1357): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001d80)={{r6}, r7, 0x14, @inherit={0x98, &(0x7f00000005c0)={0x1, 0xa, 0xffffffffffffd4f9, 0x5, {0x4, 0x9, 0x5, 0x1, 0x7}, [0x3, 0x8, 0x470, 0x7, 0xc, 0x1, 0x6, 0x80, 0x77, 0x80000000]}}, @subvolid=0x4}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8481, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0xe5c, 0x80000) eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10, 0x7, 0x2, r10}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'veth1_to_team\x00', 0x200}) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB='S'], 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x12100) r13 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89fe, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$AUDIT_GET(r11, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x0, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r3}) 17.916406793s ago: executing program 33 (id=1349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0xc0010010, 0x0, 0x400000000000000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x2001cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x4, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000000)={0x1, 0x4a6, 0x4, 0xffff, 0x44, "8c00000000000000000000ffff00", 0x4020000, 0x84}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xbc) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x6) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001280)=0xff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 16.76735197s ago: executing program 34 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 16.402573839s ago: executing program 3 (id=1366): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x841) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x5, "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"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x2}, 0x8000}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r2, &(0x7f0000000300)="c62e", 0x2, 0x8040, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5}) 0s ago: executing program 35 (id=1366): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x841) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x5, "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"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x2}, 0x8000}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r2, &(0x7f0000000300)="c62e", 0x2, 0x8040, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5}) kernel console output (not intermixed with test programs): 369): avc: denied { create } for pid=2040 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 88.998685][ T412] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 89.055158][ T2049] FAULT_INJECTION: forcing a failure. [ 89.055158][ T2049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.073519][ T2049] CPU: 0 UID: 0 PID: 2049 Comm: syz.0.645 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 89.073555][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.073586][ T2049] Call Trace: [ 89.073594][ T2049] [ 89.073603][ T2049] __dump_stack+0x21/0x30 [ 89.073641][ T2049] dump_stack_lvl+0x140/0x1c0 [ 89.073674][ T2049] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.073707][ T2049] ? _parse_integer+0x2e/0x40 [ 89.073732][ T2049] ? kstrtoull+0x13b/0x1e0 [ 89.073755][ T2049] dump_stack+0x19/0x20 [ 89.073784][ T2049] should_fail_ex+0x3c2/0x510 [ 89.073811][ T2049] should_fail+0xf/0x20 [ 89.073835][ T2049] should_fail_usercopy+0x1e/0x30 [ 89.073864][ T2049] _copy_from_user+0x20/0xa0 [ 89.073897][ T2049] ___sys_sendmsg+0x1c7/0x370 [ 89.073929][ T2049] ? __sys_sendmsg+0x260/0x260 [ 89.073966][ T2049] ? proc_fail_nth_write+0x184/0x220 [ 89.073999][ T2049] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 89.074038][ T2049] ? __fget_files+0x2bc/0x330 [ 89.074068][ T2049] __x64_sys_sendmsg+0x1be/0x2a0 [ 89.074099][ T2049] ? fput+0x1a4/0x230 [ 89.074130][ T2049] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 89.074161][ T2049] ? ksys_write+0x1f3/0x260 [ 89.074188][ T2049] ? __kasan_check_read+0x15/0x20 [ 89.074214][ T2049] x64_sys_call+0x2a4c/0x2ee0 [ 89.074245][ T2049] do_syscall_64+0x57/0xf0 [ 89.074280][ T2049] ? clear_bhb_loop+0x50/0xa0 [ 89.074307][ T2049] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.074333][ T2049] RIP: 0033:0x7ff86a39e159 [ 89.074352][ T2049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.074373][ T2049] RSP: 002b:00007ff86b2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.074399][ T2049] RAX: ffffffffffffffda RBX: 00007ff86a625fa0 RCX: 00007ff86a39e159 [ 89.074416][ T2049] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 89.074431][ T2049] RBP: 00007ff86b2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 89.074446][ T2049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.074460][ T2049] R13: 00007ff86a626038 R14: 00007ff86a625fa0 R15: 00007ffef6746958 [ 89.074481][ T2049] [ 89.308766][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 89.318218][ T412] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.329207][ T412] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.337469][ T412] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 89.346605][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.355003][ T412] usb 4-1: Product: syz [ 89.359253][ T412] usb 4-1: Manufacturer: syz [ 89.363883][ T412] usb 4-1: SerialNumber: syz [ 89.369304][ T412] usb 4-1: config 0 descriptor?? [ 89.559857][ T2074] overlay: ./file0 is not a directory [ 89.581695][ T412] usb 4-1: USB disconnect, device number 26 [ 90.038677][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 90.189775][ T45] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.198973][ T45] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 90.216518][ T45] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.227839][ T45] usb 4-1: config 220 has no interface number 2 [ 90.252439][ T45] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.267384][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 90.275209][ T45] usb 4-1: config 220 interface 76 has no altsetting 0 [ 90.292426][ T45] usb 4-1: config 220 interface 1 has no altsetting 0 [ 90.304112][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.313788][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.330423][ T45] usb 4-1: Product: syz [ 90.334928][ T45] usb 4-1: Manufacturer: syz [ 90.339950][ T45] usb 4-1: SerialNumber: syz [ 90.395037][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.405797][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.548417][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.557087][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.565988][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.574612][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.585789][ T45] usb 4-1: selecting invalid altsetting 0 [ 90.591675][ T45] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 90.598063][ T45] usb 4-1: No valid video chain found. [ 90.606723][ T45] usb 4-1: USB disconnect, device number 27 [ 91.043353][ T36] audit: type=1400 audit(1700006691.195:370): avc: denied { compute_member } for pid=2115 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 91.046131][ T2116] devpts: called with bogus options [ 91.210475][ T2131] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 91.219845][ T2131] overlayfs: missing 'lowerdir' [ 91.464002][ T36] audit: type=1400 audit(1700006691.615:371): avc: denied { setattr } for pid=2144 comm="syz.2.686" name="" dev="pipefs" ino=2513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.518050][ T2152] netlink: 180 bytes leftover after parsing attributes in process `syz.2.689'. [ 91.527164][ T2152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 91.823299][ T2170] netlink: 104 bytes leftover after parsing attributes in process `syz.2.694'. [ 91.937679][ T2172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.946292][ T2172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.048692][ T317] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 92.088388][ T2178] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 92.198728][ T317] usb 2-1: Using ep0 maxpacket: 32 [ 92.206036][ T317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.223965][ T317] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 92.233975][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.242039][ T317] usb 2-1: Product: syz [ 92.246275][ T317] usb 2-1: Manufacturer: syz [ 92.253613][ T317] usb 2-1: SerialNumber: syz [ 92.401651][ T2190] overlayfs: failed to clone lowerpath [ 92.408796][ T2191] overlayfs: failed to clone lowerpath [ 92.828681][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 92.934359][ T2215] overlay: ./file0 is not a directory [ 92.959359][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.198675][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.438675][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 93.578667][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.818684][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.928771][ T9] usb usb4-port1: attempt power cycle [ 94.268709][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 94.289800][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.419753][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.652917][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.660356][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 94.666112][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.673832][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.681789][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.693202][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.834199][ T317] usb 2-1: USB disconnect, device number 29 [ 94.848830][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.893278][ T2235] netlink: 'syz.1.721': attribute type 11 has an invalid length. [ 94.901321][ T2235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 94.958782][ T9] usb usb4-port1: unable to enumerate USB device [ 95.053769][ T2238] overlay: filesystem on ./file0 not supported as upperdir [ 95.716790][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 95.716810][ T36] audit: type=1400 audit(1700006695.865:376): avc: denied { ioctl } for pid=2286 comm="syz.2.731" path="socket:[24964]" dev="sockfs" ino=24964 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.889069][ T45] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 96.018752][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.258676][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.284396][ T36] audit: type=1400 audit(1700006696.435:377): avc: denied { mounton } for pid=2292 comm="syz.2.734" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.310582][ T2293] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.311398][ T36] audit: type=1400 audit(1700006696.465:378): avc: denied { associate } for pid=2292 comm="syz.2.734" name="#f" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.318197][ T2293] overlayfs: failed to set xattr on upper [ 96.344404][ T2293] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.351374][ T2293] overlayfs: ...falling back to uuid=null. [ 96.498701][ T45] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 96.627392][ T36] audit: type=1400 audit(1700006696.775:379): avc: denied { append } for pid=2294 comm="syz.0.735" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.650318][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.737264][ T36] audit: type=1400 audit(1700006696.885:380): avc: denied { create } for pid=2297 comm="syz.0.736" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.759925][ T36] audit: type=1400 audit(1700006696.885:381): avc: denied { read } for pid=2297 comm="syz.0.736" name="file2" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.783309][ T36] audit: type=1400 audit(1700006696.885:382): avc: denied { open } for pid=2297 comm="syz.0.736" path="/209/file2" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.819184][ T36] audit: type=1400 audit(1700006696.895:383): avc: denied { ioctl } for pid=2297 comm="syz.0.736" path="/209/file2" dev="tmpfs" ino=1153 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.875267][ T2304] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.898686][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.908771][ T36] audit: type=1400 audit(1700006697.055:384): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.959573][ T2315] process 'syz.0.742' launched '/dev/fd/4' with NULL argv: empty string added [ 96.968518][ T36] audit: type=1400 audit(1700006697.115:385): avc: denied { execute } for pid=2312 comm="syz.0.742" dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.991288][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 97.000435][ T2314] loop1: detected capacity change from 0 to 8 [ 97.006605][ T2318] veth1: entered allmulticast mode [ 97.012316][ T2318] veth1: left allmulticast mode [ 97.038728][ T45] usb usb2-port1: attempt power cycle [ 97.058652][ T311] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 97.075706][ T2324] overlay: filesystem on ./file0 not supported as upperdir [ 97.107667][ T2326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.116190][ T2326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.229713][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.240704][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.250489][ T311] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 97.259593][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.268242][ T311] usb 4-1: config 0 descriptor?? [ 97.378716][ T45] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 97.399593][ T45] usb 2-1: device descriptor read/8, error -71 [ 97.529750][ T45] usb 2-1: device descriptor read/8, error -71 [ 97.655952][ T2255] tipc: Subscription rejected, illegal request [ 97.681046][ T311] usbhid 4-1:0.0: can't add hid device: -32 [ 97.691791][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 97.703245][ T311] usb 4-1: USB disconnect, device number 32 [ 97.768709][ T45] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 97.799852][ T45] usb 2-1: device descriptor read/8, error -71 [ 97.929806][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.048773][ T45] usb usb2-port1: unable to enumerate USB device [ 98.426575][ T2353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.436049][ T2353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.453388][ T2353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.463756][ T2353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.978704][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 99.129713][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.139920][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.150870][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.168659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.176689][ T9] usb 2-1: Product: syz [ 99.180951][ T9] usb 2-1: Manufacturer: syz [ 99.185653][ T9] usb 2-1: SerialNumber: syz [ 99.265504][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.274151][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.284516][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.293223][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.487447][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.776'. [ 99.527650][ T2438] overlay: filesystem on ./file0 not supported as upperdir [ 99.593838][ T9] usb 2-1: 0:2 : does not exist [ 99.599329][ T9] usb 2-1: unit 9 not found! [ 99.607358][ T9] usb 2-1: USB disconnect, device number 34 [ 99.615386][ T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.633143][ T412] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 99.789985][ T412] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 99.798178][ T412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.808370][ T412] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.822832][ T412] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 99.831979][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.840025][ T412] usb 4-1: Product: syz [ 99.844259][ T412] usb 4-1: Manufacturer: syz [ 99.848936][ T412] usb 4-1: SerialNumber: syz [ 99.928690][ T2444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.937431][ T2444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.057278][ T412] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 100.075410][ T412] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 100.085892][ T412] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.097704][ T412] usb 4-1: USB disconnect, device number 33 [ 100.142034][ T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.358698][ T311] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 100.509881][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.520896][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.530772][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.541650][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.550752][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.559452][ T311] usb 2-1: config 0 descriptor?? [ 100.657610][ T2462] ./dev/sda1: Can't lookup blockdev [ 100.680777][ T2467] overlay: filesystem on ./file0 not supported as upperdir [ 100.704561][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.713743][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.167937][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.179362][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.307926][ T2495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.316601][ T2495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.448675][ T407] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 101.589149][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 101.595171][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 101.604237][ T311] usb 2-1: USB disconnect, device number 35 [ 101.611063][ T407] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 101.622403][ T407] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 101.636009][ T407] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 101.645131][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.653870][ T407] usb 4-1: config 0 descriptor?? [ 101.841945][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.850609][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.859201][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 101.859219][ T36] audit: type=1400 audit(1700006702.015:396): avc: denied { map } for pid=2496 comm="syz.0.805" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 101.992689][ T2511] overlay: filesystem on ./file0 not supported as upperdir [ 102.089712][ T407] microsoft 0003:045E:00F9.0005: ignoring exceeding usage max [ 102.101666][ T407] microsoft 0003:045E:00F9.0005: unknown main item tag 0x0 [ 102.115373][ T407] microsoft 0003:045E:00F9.0005: unknown main item tag 0x0 [ 102.123485][ T407] microsoft 0003:045E:00F9.0005: hidraw0: USB HID v1.00 Device [HID 045e:00f9] on usb-dummy_hcd.3-1/input0 [ 102.135290][ T407] microsoft 0003:045E:00F9.0005: no inputs found [ 102.141887][ T407] microsoft 0003:045E:00F9.0005: could not initialize ff, continuing anyway [ 102.292593][ T407] usb 4-1: USB disconnect, device number 34 [ 102.348766][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 102.382258][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.390966][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.499767][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.510723][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.520647][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 102.532053][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.541695][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.550666][ T9] usb 2-1: config 0 descriptor?? [ 102.600879][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.611183][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.620767][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.630519][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.640239][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.649575][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.658346][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.666946][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.078682][ T407] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 103.158910][ T2513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.169106][ T2513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.221022][ T2541] overlay: ./file0 is not a directory [ 103.229851][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.240895][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.251473][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 103.262489][ T407] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.271761][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.281080][ T407] usb 4-1: config 0 descriptor?? [ 103.585674][ T2513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.594371][ T2513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.805160][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 103.811635][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.820831][ T9] usb 2-1: USB disconnect, device number 36 [ 103.857435][ T36] audit: type=1400 audit(1700006704.005:397): avc: denied { bind } for pid=2547 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.891637][ T2533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.901304][ T2533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.045678][ T2556] cgroup: fork rejected by pids controller in /syz2 [ 104.317762][ T407] usbhid 4-1:0.0: can't add hid device: -71 [ 104.328981][ T407] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.353288][ T2687] overlay: filesystem on ./file0 not supported as upperdir [ 104.361703][ T407] usb 4-1: USB disconnect, device number 35 [ 104.829259][ T36] audit: type=1400 audit(1700006704.985:398): avc: denied { relabelfrom } for pid=2699 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.850928][ T36] audit: type=1400 audit(1700006704.985:399): avc: denied { relabelto } for pid=2699 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.888183][ T36] audit: type=1400 audit(1700006705.035:400): avc: denied { ioctl } for pid=2703 comm="syz.0.842" path="socket:[27858]" dev="sockfs" ino=27858 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.035027][ T2714] netlink: 196 bytes leftover after parsing attributes in process `syz.0.847'. [ 105.053882][ T2716] netlink: 'syz.2.848': attribute type 27 has an invalid length. [ 105.085182][ T2716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=2716 comm=syz.2.848 [ 105.108706][ T407] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 105.188704][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 105.258681][ T407] usb 4-1: Using ep0 maxpacket: 8 [ 105.266304][ T407] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 105.275489][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.283618][ T407] usb 4-1: Product: syz [ 105.287810][ T407] usb 4-1: Manufacturer: syz [ 105.292722][ T407] usb 4-1: SerialNumber: syz [ 105.339841][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.351016][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.360990][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 105.372074][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.381321][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.390163][ T9] usb 2-1: config 0 descriptor?? [ 105.949534][ T2730] overlay: ./file0 is not a directory [ 105.999571][ T2706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.008932][ T2706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.055626][ T2734] netlink: 9 bytes leftover after parsing attributes in process `syz.2.855'. [ 106.065541][ T2734] gretap0: entered promiscuous mode [ 106.074493][ T2735] netlink: 5 bytes leftover after parsing attributes in process `syz.2.855'. [ 106.083654][ T2735] 0ªî{X¹¦: renamed from gretap0 [ 106.090677][ T2735] 0ªî{X¹¦: left promiscuous mode [ 106.095873][ T2735] 0ªî{X¹¦: entered allmulticast mode [ 106.102293][ T2735] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 106.118815][ T2736] netlink: 5 bytes leftover after parsing attributes in process `syz.2.855'. [ 106.127841][ T2736] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 106.135704][ T2736] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 106.418166][ T2706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.426795][ T2706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.510724][ T36] audit: type=1400 audit(1700006400.380:401): avc: denied { mounton } for pid=2746 comm="syz.0.859" path="/251/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 106.575127][ T36] audit: type=1326 audit(1700006400.440:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2748 comm="syz.0.860" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff86a39e159 code=0x0 [ 106.637263][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 106.645954][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 106.654970][ T9] usb 2-1: USB disconnect, device number 37 [ 106.708219][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.717440][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.728478][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.740196][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.769065][ T2756] netlink: 284 bytes leftover after parsing attributes in process `syz.2.863'. [ 107.323693][ T2766] overlay: filesystem on ./file0 not supported as upperdir [ 108.138754][ T315] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 108.267345][ T36] audit: type=1400 audit(1700006402.130:403): avc: denied { write } for pid=2788 comm="syz.3.877" path="socket:[28103]" dev="sockfs" ino=28103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.291217][ T36] audit: type=1400 audit(1700006402.140:404): avc: denied { shutdown } for pid=2788 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.330150][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.341197][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.350994][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.361873][ T315] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.371367][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.380339][ T315] usb 2-1: config 0 descriptor?? [ 108.988352][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.997006][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.087312][ T2799] ./dev/sda1: Can't lookup blockdev [ 109.148358][ T2803] overlay: filesystem on ./file0 not supported as upperdir [ 109.406273][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.415725][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.630127][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 109.636677][ T315] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.647430][ T315] usb 2-1: USB disconnect, device number 38 [ 109.734836][ T2810] kvm: pic: level sensitive irq not supported [ 109.735083][ T2810] kvm: pic: non byte write [ 109.847887][ T2821] fuse: Unknown parameter '000000000000000000012360x000000000000029e' [ 109.876380][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.885521][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.895309][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.905476][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.371234][ T407] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 110.383101][ T407] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.409336][ T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.852957][ T2840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 110.923287][ T2844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 110.948665][ T2844] netlink: 1 bytes leftover after parsing attributes in process `syz.0.893'. [ 111.029255][ T2851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.038163][ T2851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.074436][ T2857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2857 comm=syz.0.898 [ 111.086965][ T36] audit: type=1400 audit(1700006404.940:405): avc: denied { write } for pid=2855 comm="syz.1.899" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 111.403124][ T2871] input: syz1 as /devices/virtual/input/input17 [ 111.419184][ T2871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.428433][ T2871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.652762][ T2875] futex_wake_op: syz.3.905 tries to shift op by 144; fix this program [ 111.708704][ T412] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 111.737676][ T2877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.747167][ T2878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.748597][ T2877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.757218][ T2878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.858685][ T412] usb 2-1: Using ep0 maxpacket: 32 [ 111.864959][ T412] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 111.873418][ T412] usb 2-1: config 0 has no interface number 0 [ 111.879705][ T412] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 111.889819][ T412] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.899760][ T412] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 111.909713][ T412] usb 2-1: config 0 interface 196 has no altsetting 0 [ 111.917995][ T412] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 111.927141][ T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.935169][ T412] usb 2-1: Product: syz [ 111.939373][ T412] usb 2-1: Manufacturer: syz [ 111.943984][ T412] usb 2-1: SerialNumber: syz [ 111.953362][ T412] usb 2-1: config 0 descriptor?? [ 111.958704][ T2873] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.106002][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.115049][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.125686][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.135133][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.143808][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.153939][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.309015][ T2890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.317636][ T2890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.369562][ T412] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 112.378713][ T412] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 112.580118][ T412] usb 2-1: USB disconnect, device number 39 [ 112.835830][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2904 comm=syz.2.917 [ 112.848403][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2904 comm=syz.2.917 [ 112.863185][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2904 comm=syz.2.917 [ 112.876534][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2904 comm=syz.2.917 [ 112.889438][ T2904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2904 comm=syz.2.917 [ 112.964017][ T2388] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.533518][ T36] audit: type=1400 audit(1700006407.400:406): avc: denied { mounton } for pid=2917 comm="syz.0.923" path="/proc/705/task" dev="proc" ino=29007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.562349][ T2918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.571615][ T2918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.702947][ T2925] netlink: 96 bytes leftover after parsing attributes in process `syz.1.926'. [ 113.720302][ T36] audit: type=1400 audit(1700006407.590:407): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.163804][ T36] audit: type=1326 audit(1700006408.030:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.934" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff86a39e159 code=0x0 [ 114.266239][ T36] audit: type=1326 audit(1700006408.130:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.934" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff86a39e159 code=0x0 [ 115.008642][ T405] Bluetooth: hci0: command 0x1003 tx timeout [ 115.008675][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.058380][ T2961] FAULT_INJECTION: forcing a failure. [ 115.058380][ T2961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.071621][ T2961] CPU: 1 UID: 0 PID: 2961 Comm: syz.3.939 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 115.071655][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.071669][ T2961] Call Trace: [ 115.071676][ T2961] [ 115.071684][ T2961] __dump_stack+0x21/0x30 [ 115.071722][ T2961] dump_stack_lvl+0x140/0x1c0 [ 115.071755][ T2961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.071786][ T2961] ? _parse_integer+0x2e/0x40 [ 115.071809][ T2961] ? kstrtoull+0x13b/0x1e0 [ 115.071844][ T2961] dump_stack+0x19/0x20 [ 115.071875][ T2961] should_fail_ex+0x3c2/0x510 [ 115.071902][ T2961] should_fail+0xf/0x20 [ 115.071927][ T2961] should_fail_usercopy+0x1e/0x30 [ 115.071955][ T2961] _copy_from_user+0x20/0xa0 [ 115.071987][ T2961] ___sys_sendmsg+0x1c7/0x370 [ 115.072020][ T2961] ? __sys_sendmsg+0x260/0x260 [ 115.072052][ T2961] ? proc_fail_nth_write+0x184/0x220 [ 115.072088][ T2961] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 115.072128][ T2961] ? __fget_files+0x2bc/0x330 [ 115.072159][ T2961] __x64_sys_sendmsg+0x1be/0x2a0 [ 115.072190][ T2961] ? fput+0x1a4/0x230 [ 115.072219][ T2961] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 115.072250][ T2961] ? ksys_write+0x1f3/0x260 [ 115.072277][ T2961] ? __kasan_check_read+0x15/0x20 [ 115.072303][ T2961] x64_sys_call+0x2a4c/0x2ee0 [ 115.072323][ T2961] do_syscall_64+0x57/0xf0 [ 115.072357][ T2961] ? clear_bhb_loop+0x50/0xa0 [ 115.072383][ T2961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.072407][ T2961] RIP: 0033:0x7f719839e159 [ 115.072428][ T2961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.072448][ T2961] RSP: 002b:00007f7199247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.072471][ T2961] RAX: ffffffffffffffda RBX: 00007f7198625fa0 RCX: 00007f719839e159 [ 115.072489][ T2961] RDX: 0000000000000000 RSI: 00002000000020c0 RDI: 0000000000000003 [ 115.072505][ T2961] RBP: 00007f7199247090 R08: 0000000000000000 R09: 0000000000000000 [ 115.072520][ T2961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.072534][ T2961] R13: 00007f7198626038 R14: 00007f7198625fa0 R15: 00007ffccc1295d8 [ 115.072553][ T2961] [ 115.326248][ T2969] overlay: filesystem on ./file0 not supported as upperdir [ 115.972547][ T36] audit: type=1400 audit(1700006409.840:410): avc: denied { remount } for pid=2999 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.008252][ T36] audit: type=1326 audit(1700006409.840:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2999 comm="syz.3.957" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719839e159 code=0x0 [ 116.227641][ T3024] overlay: filesystem on ./file0 not supported as upperdir [ 116.718340][ T36] audit: type=1326 audit(1700006410.580:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2999 comm="syz.3.957" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f719839e159 code=0x7fc00000 [ 116.897531][ T3037] 9pnet_fd: Insufficient options for proto=fd [ 116.960209][ T3042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.994085][ T3042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.217496][ T3059] overlay: filesystem on ./file0 not supported as upperdir [ 117.718662][ T3077] FAULT_INJECTION: forcing a failure. [ 117.718662][ T3077] name failslab, interval 1, probability 100, space 0, times 0 [ 117.737804][ T3077] CPU: 1 UID: 0 PID: 3077 Comm: syz.3.984 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 117.737848][ T3077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.737863][ T3077] Call Trace: [ 117.737871][ T3077] [ 117.737880][ T3077] __dump_stack+0x21/0x30 [ 117.737920][ T3077] dump_stack_lvl+0x140/0x1c0 [ 117.737954][ T3077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.737989][ T3077] dump_stack+0x19/0x20 [ 117.738021][ T3077] should_fail_ex+0x3c2/0x510 [ 117.738050][ T3077] should_failslab+0xac/0x100 [ 117.738081][ T3077] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 117.738108][ T3077] ? get_random_u32+0x2ef/0x4e0 [ 117.738143][ T3077] ? __d_alloc+0x42/0x8c0 [ 117.738167][ T3077] __d_alloc+0x42/0x8c0 [ 117.738197][ T3077] d_alloc_pseudo+0x23/0xc0 [ 117.738221][ T3077] alloc_file_pseudo+0xde/0x1f0 [ 117.738255][ T3077] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 117.738289][ T3077] ? shmem_get_inode+0x81c/0xc10 [ 117.738320][ T3077] ? __kasan_check_write+0x18/0x20 [ 117.738344][ T3077] ? clear_nlink+0x8e/0xf0 [ 117.738373][ T3077] __shmem_file_setup+0x242/0x2c0 [ 117.738401][ T3077] shmem_file_setup+0x33/0x40 [ 117.738429][ T3077] __se_sys_memfd_create+0x3bb/0x8f0 [ 117.738455][ T3077] ? __x64_sys_memfd_create+0x80/0x80 [ 117.738482][ T3077] ? __kasan_check_write+0x18/0x20 [ 117.738507][ T3077] __x64_sys_memfd_create+0x5f/0x80 [ 117.738534][ T3077] x64_sys_call+0x29f8/0x2ee0 [ 117.738556][ T3077] do_syscall_64+0x57/0xf0 [ 117.738597][ T3077] ? clear_bhb_loop+0x50/0xa0 [ 117.738626][ T3077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.738653][ T3077] RIP: 0033:0x7f719839e159 [ 117.738674][ T3077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.738695][ T3077] RSP: 002b:00007f7199247028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 117.738721][ T3077] RAX: ffffffffffffffda RBX: 00007f7198625fa0 RCX: 00007f719839e159 [ 117.738740][ T3077] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000200000002180 [ 117.738756][ T3077] RBP: 00007f719843503b R08: 0000000000000000 R09: 0000000000000000 [ 117.738771][ T3077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.738787][ T3077] R13: 00007f7198626038 R14: 00007f7198625fa0 R15: 00007ffccc1295d8 [ 117.738806][ T3077] [ 118.015023][ T3085] fuse: Unknown parameter '00000000000000000003' [ 118.030218][ T412] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 118.062580][ T3091] bridge0: entered allmulticast mode [ 118.068159][ T3091] bridge0: left allmulticast mode [ 118.075181][ T3091] ./dev/sda1: Can't lookup blockdev [ 118.189736][ T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.200753][ T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.211334][ T412] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.220479][ T412] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.228485][ T412] usb 2-1: Manufacturer: syz [ 118.233954][ T412] usb 2-1: config 0 descriptor?? [ 118.440380][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.449097][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.457271][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.466026][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.474368][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.482928][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.491070][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.499606][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.507762][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.516579][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.597660][ T3102] overlay: filesystem on ./file0 not supported as upperdir [ 118.681236][ T412] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 118.892651][ T36] audit: type=1400 audit(1700006412.760:413): avc: denied { create } for pid=3103 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 119.158456][ T2389] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.920935][ T3136] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1006'. [ 119.946295][ T36] audit: type=1326 audit(1700006413.810:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3138 comm="syz.2.1007" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca0cd9e159 code=0x0 [ 120.159400][ T36] audit: type=1400 audit(1700006414.030:415): avc: denied { read write } for pid=3161 comm="syz.3.1015" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.161295][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.192123][ T36] audit: type=1400 audit(1700006414.030:416): avc: denied { open } for pid=3161 comm="syz.3.1015" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.202028][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.223135][ T36] audit: type=1400 audit(1700006414.030:417): avc: denied { ioctl } for pid=3161 comm="syz.3.1015" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.449151][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.457875][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.466391][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.475179][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.483988][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.492650][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.819674][ T9] usb 2-1: USB disconnect, device number 40 [ 121.080201][ T3168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1016'. [ 121.162764][ T36] audit: type=1400 audit(1700006415.030:418): avc: denied { ioctl } for pid=3184 comm="syz.3.1022" path="socket:[30852]" dev="sockfs" ino=30852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.168813][ T405] Bluetooth: hci0: command 0x1003 tx timeout [ 121.191887][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.221896][ T36] audit: type=1400 audit(1700006415.060:419): avc: denied { setcheckreqprot } for pid=3184 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.248662][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 121.285932][ T3197] FAULT_INJECTION: forcing a failure. [ 121.285932][ T3197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.308652][ T3197] CPU: 1 UID: 0 PID: 3197 Comm: syz.0.1026 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 121.308687][ T3197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.308702][ T3197] Call Trace: [ 121.308710][ T3197] [ 121.308718][ T3197] __dump_stack+0x21/0x30 [ 121.308755][ T3197] dump_stack_lvl+0x140/0x1c0 [ 121.308787][ T3197] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.308817][ T3197] ? is_bpf_text_address+0x17b/0x1a0 [ 121.308849][ T3197] ? kernel_text_address+0xa9/0xe0 [ 121.308877][ T3197] dump_stack+0x19/0x20 [ 121.308904][ T3197] should_fail_ex+0x3c2/0x510 [ 121.308929][ T3197] should_fail+0xf/0x20 [ 121.308952][ T3197] should_fail_usercopy+0x1e/0x30 [ 121.308978][ T3197] _copy_from_user+0x20/0xa0 [ 121.309006][ T3197] ___sys_sendmsg+0x1c7/0x370 [ 121.309035][ T3197] ? __sys_sendmsg+0x260/0x260 [ 121.309061][ T3197] ? kstrtouint+0x78/0xf0 [ 121.309094][ T3197] ? __fget_files+0x2bc/0x330 [ 121.309121][ T3197] __sys_sendmmsg+0x292/0x490 [ 121.309152][ T3197] ? __cfi___sys_sendmmsg+0x10/0x10 [ 121.309184][ T3197] ? __cfi_ksys_write+0x10/0x10 [ 121.309208][ T3197] __x64_sys_sendmmsg+0xa4/0xc0 [ 121.309235][ T3197] x64_sys_call+0xfec/0x2ee0 [ 121.309253][ T3197] do_syscall_64+0x57/0xf0 [ 121.309282][ T3197] ? clear_bhb_loop+0x50/0xa0 [ 121.309306][ T3197] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.309328][ T3197] RIP: 0033:0x7ff86a39e159 [ 121.309345][ T3197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.309363][ T3197] RSP: 002b:00007ff86b2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.309386][ T3197] RAX: ffffffffffffffda RBX: 00007ff86a625fa0 RCX: 00007ff86a39e159 [ 121.309401][ T3197] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 121.309415][ T3197] RBP: 00007ff86b2fb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.309428][ T3197] R10: 0000000000046000 R11: 0000000000000246 R12: 0000000000000001 [ 121.309440][ T3197] R13: 00007ff86a626038 R14: 00007ff86a625fa0 R15: 00007ffef6746958 [ 121.309458][ T3197] [ 121.718631][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 121.724898][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.735841][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.745547][ T45] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 121.754660][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.762946][ T45] usb 2-1: Product: syz [ 121.767158][ T45] usb 2-1: Manufacturer: syz [ 121.772099][ T45] usb 2-1: SerialNumber: syz [ 121.779005][ T45] usb 2-1: config 0 descriptor?? [ 121.823730][ T3208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1029'. [ 121.991884][ T45] usb 2-1: USB disconnect, device number 41 [ 122.018489][ T3223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.027085][ T3223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.428676][ T317] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 122.564251][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.573006][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.581930][ T317] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.590749][ T317] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 122.594892][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.601227][ T317] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.609204][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.619313][ T317] usb 2-1: config 220 has no interface number 2 [ 122.633361][ T317] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.646771][ T317] usb 2-1: config 220 interface 0 has no altsetting 0 [ 122.653729][ T317] usb 2-1: config 220 interface 76 has no altsetting 0 [ 122.660737][ T317] usb 2-1: config 220 interface 1 has no altsetting 0 [ 122.669219][ T317] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.678289][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.686368][ T317] usb 2-1: Product: syz [ 122.690609][ T317] usb 2-1: Manufacturer: syz [ 122.695217][ T317] usb 2-1: SerialNumber: syz [ 122.902877][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.911581][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.927196][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.936031][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.950613][ T317] usb 2-1: selecting invalid altsetting 0 [ 122.956475][ T317] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 122.963000][ T317] usb 2-1: No valid video chain found. [ 122.969899][ T3235] Unsupported ieee802154 address type: 0 [ 122.971440][ T36] audit: type=1400 audit(1700006416.840:420): avc: denied { bind } for pid=3234 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.995823][ T2389] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.999328][ T317] usb 2-1: USB disconnect, device number 42 [ 123.011535][ T36] audit: type=1400 audit(1700006416.840:421): avc: denied { write } for pid=3234 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.510286][ T36] audit: type=1400 audit(1700006417.380:422): avc: denied { create } for pid=3249 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.018250][ T3258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.026946][ T3258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.338681][ T315] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 124.488765][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 124.495049][ T315] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.506005][ T315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.514176][ T315] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 124.523302][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.531320][ T315] usb 2-1: Product: syz [ 124.535478][ T315] usb 2-1: Manufacturer: syz [ 124.540106][ T315] usb 2-1: SerialNumber: syz [ 124.545570][ T315] usb 2-1: config 0 descriptor?? [ 124.758531][ T315] usb 2-1: USB disconnect, device number 43 [ 125.008668][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.008735][ T405] Bluetooth: hci0: command 0x1003 tx timeout [ 125.076287][ T36] audit: type=1400 audit(1700006418.940:423): avc: denied { write } for pid=3278 comm="syz.3.1062" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.076705][ T3279] device-mapper: ioctl: Unable to rename non-existent device, to [ 125.163855][ T3287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.172516][ T3287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.182077][ T3287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.190772][ T3287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.198644][ T315] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 125.349880][ T315] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.358285][ T315] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 125.367237][ T315] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.377598][ T315] usb 2-1: config 220 has no interface number 2 [ 125.383961][ T315] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.397197][ T315] usb 2-1: config 220 interface 0 has no altsetting 0 [ 125.404045][ T315] usb 2-1: config 220 interface 76 has no altsetting 0 [ 125.411070][ T315] usb 2-1: config 220 interface 1 has no altsetting 0 [ 125.419542][ T315] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.428733][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.441995][ T315] usb 2-1: Product: syz [ 125.446209][ T315] usb 2-1: Manufacturer: syz [ 125.451062][ T315] usb 2-1: SerialNumber: syz [ 125.604573][ T3287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.614906][ T3287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.659828][ T3260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.675439][ T3260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.685961][ T3260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.695527][ T3260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.706901][ T315] usb 2-1: selecting invalid altsetting 0 [ 125.713337][ T315] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 125.720625][ T315] usb 2-1: No valid video chain found. [ 125.733295][ T315] usb 2-1: USB disconnect, device number 44 [ 125.781609][ T3296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1070'. [ 125.790805][ T3296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 125.800196][ T3296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 125.810102][ T3296] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 125.934226][ T36] audit: type=1400 audit(1700006419.800:424): avc: denied { lock } for pid=3308 comm="syz.2.1082" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.978675][ T36] audit: type=1400 audit(1700006419.800:425): avc: denied { search } for pid=3308 comm="syz.2.1082" name="/" dev="configfs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.264696][ T3315] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1079'. [ 126.308635][ T36] audit: type=1400 audit(1700006420.170:426): avc: denied { audit_read } for pid=3321 comm="syz.2.1081" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.390592][ T36] audit: type=1326 audit(1700006420.260:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.3.1086" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719839e159 code=0x0 [ 126.501191][ T36] audit: type=1400 audit(1700006420.370:428): avc: denied { set_context_mgr } for pid=3340 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 126.502420][ T3341] rust_binder: 3340:3341 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 126.537901][ T9] rust_binder: 3340: undelivered TRANSACTION_ERROR: 29201 [ 126.557923][ T36] audit: type=1400 audit(1700006420.420:429): avc: denied { bind } for pid=3343 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.577483][ T36] audit: type=1400 audit(1700006420.420:430): avc: denied { name_bind } for pid=3343 comm="syz.0.1091" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 126.578107][ T3344] netlink: 'syz.0.1091': attribute type 27 has an invalid length. [ 126.598998][ T36] audit: type=1400 audit(1700006420.420:431): avc: denied { node_bind } for pid=3343 comm="syz.0.1091" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 127.088837][ T3349] usb usb8: usbfs: process 3349 (syz.0.1100) did not claim interface 0 before use [ 127.143613][ T3355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.153112][ T3355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.164740][ T3355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.174192][ T3355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.275279][ T3361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1098'. [ 127.284511][ T3365] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 127.295213][ T3362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.308718][ T36] audit: type=1400 audit(1700006421.170:432): avc: denied { create } for pid=3360 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.315322][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.342098][ T3362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.350248][ T3367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.360738][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.369581][ T3367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.379392][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.389245][ T3367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.398078][ T3367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.402838][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.407055][ T3367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.423891][ T3367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.448682][ T317] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 127.587940][ T3355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.596689][ T3355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.604850][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 127.610418][ T317] usb 2-1: no configurations [ 127.615058][ T317] usb 2-1: can't read configurations, error -22 [ 127.748726][ T317] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 127.908646][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 127.914203][ T317] usb 2-1: no configurations [ 127.919081][ T317] usb 2-1: can't read configurations, error -22 [ 127.925534][ T317] usb usb2-port1: attempt power cycle [ 127.995619][ T3381] SELinux: avtab: truncated entry [ 128.019428][ T3381] SELinux: failed to load policy [ 128.171427][ T3394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.180880][ T3394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.288737][ T317] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 128.309112][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 128.314651][ T317] usb 2-1: no configurations [ 128.319526][ T317] usb 2-1: can't read configurations, error -22 [ 128.448703][ T317] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 128.469058][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 128.474628][ T317] usb 2-1: no configurations [ 128.479468][ T317] usb 2-1: can't read configurations, error -22 [ 128.485858][ T317] usb usb2-port1: unable to enumerate USB device [ 128.749609][ T3403] usb usb8: usbfs: process 3403 (syz.3.1114) did not claim interface 0 before use [ 128.763094][ T3406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.781774][ T3406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.924821][ T3414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.933301][ T3416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.948739][ T3414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.957074][ T3416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.135661][ T3455] overlay: Unknown parameter 'pcr' [ 130.599306][ T315] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 130.606383][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.615580][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.625080][ T3484] overlay: ./file1 is not a directory [ 130.734239][ T3486] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1151'. [ 130.771501][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.779764][ T315] usb 2-1: not running at top speed; connect to a high speed hub [ 130.789625][ T315] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 130.798716][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.806772][ T315] usb 2-1: Product: syz [ 130.811026][ T315] usb 2-1: Manufacturer: syz [ 130.815652][ T315] usb 2-1: SerialNumber: syz [ 131.033193][ T315] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 131.044129][ T315] usb 2-1: USB disconnect, device number 49 [ 131.310591][ T3505] netlink: 'syz.2.1158': attribute type 27 has an invalid length. [ 131.319196][ T3505] 1ªî{X¹¦: left allmulticast mode [ 131.351099][ T3509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1160'. [ 131.433005][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 131.433024][ T36] audit: type=1400 audit(1700006425.300:439): avc: denied { write } for pid=3520 comm="syz.2.1166" path="socket:[34097]" dev="sockfs" ino=34097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.472984][ T36] audit: type=1400 audit(1700006425.340:440): avc: denied { getopt } for pid=3522 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.702235][ T36] audit: type=1400 audit(1700006425.570:441): avc: denied { call } for pid=3538 comm="syz.1.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.702266][ T3539] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 131.722575][ T3539] netlink: 'syz.1.1174': attribute type 9 has an invalid length. [ 131.978676][ T317] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 132.133439][ T317] usb 2-1: not running at top speed; connect to a high speed hub [ 132.142022][ T317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.152721][ T317] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.166674][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.182394][ T317] usb 2-1: Found UVC 1.00 device (046d:0825) [ 132.579370][ T317] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.589295][ T317] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 132.597594][ T317] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 132.801137][ T317] rust_binder: 3538: undelivered TRANSACTION_ERROR: 29189 [ 132.812122][ T317] usb 2-1: USB disconnect, device number 50 [ 132.821756][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.834258][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.843538][ T36] audit: type=1400 audit(1700006426.710:442): avc: denied { connect } for pid=3581 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.864265][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.872878][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.915292][ T3584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.923860][ T3584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.619867][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.628448][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.288484][ T3649] usb usb8: usbfs: process 3649 (syz.0.1222) did not claim interface 0 before use [ 134.518056][ T3669] usb usb8: usbfs: process 3669 (syz.3.1231) did not claim interface 0 before use [ 134.542164][ T3671] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25371 sclass=netlink_xfrm_socket pid=3671 comm=syz.3.1232 [ 134.613747][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.622341][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.630897][ T3679] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1236'. [ 134.640395][ T3679] rust_binder: Write failure EFAULT in pid:675 [ 134.658685][ T407] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 134.818649][ T407] usb 2-1: Using ep0 maxpacket: 8 [ 134.824914][ T407] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 134.836301][ T407] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.849380][ T407] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.856700][ T407] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 134.866248][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.875602][ T407] usb 2-1: config 0 descriptor?? [ 135.111819][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.121166][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.131189][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.140317][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.285894][ T407] elo 0003:04E7:0030.0007: hidraw0: USB HID v10.01 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 135.485951][ T317] usb 2-1: USB disconnect, device number 51 [ 135.709511][ T3718] netlink: 'syz.2.1253': attribute type 28 has an invalid length. [ 135.876492][ T3733] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 135.884396][ T3733] netlink: 'syz.3.1260': attribute type 6 has an invalid length. [ 135.892234][ T3733] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1260'. [ 136.243848][ T3758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.265101][ T3758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.983925][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.996398][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.207196][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.215902][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.224284][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.232930][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.241454][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.250885][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.358692][ T317] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 137.508627][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 137.514795][ T317] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 137.536236][ T317] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.560285][ T317] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.566974][ T317] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 137.598677][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.607497][ T317] usb 2-1: config 0 descriptor?? [ 137.628839][ T36] audit: type=1326 audit(1700006431.500:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.1287" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca0cd9e159 code=0x0 [ 137.805112][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.815432][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.828089][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.836737][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.017283][ T317] elo 0003:04E7:0030.0008: hidraw0: USB HID v10.01 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 138.218537][ T317] usb 2-1: USB disconnect, device number 52 [ 138.421669][ T3823] netlink: 'syz.2.1297': attribute type 4 has an invalid length. [ 138.425867][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.430950][ T3823] netlink: 'syz.2.1297': attribute type 6 has an invalid length. [ 138.443503][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.446678][ T3823] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1297'. [ 138.659777][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.669479][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.679199][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.688838][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.698421][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.707762][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.748511][ T3828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=3828 comm=syz.1.1299 [ 138.761912][ T36] audit: type=1400 audit(1700006432.630:444): avc: denied { mounton } for pid=3827 comm="syz.1.1299" path="/230/proc/kallsyms" dev="proc" ino=4026532079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:system_map_t tclass=file permissive=1 [ 138.912811][ T3836] usb usb8: usbfs: process 3836 (syz.0.1301) did not claim interface 0 before use [ 139.136900][ T3844] kvm: MONITOR instruction emulated as NOP! [ 139.300414][ T3850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 139.492797][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.509097][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.678672][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 139.856887][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.878624][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.888422][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.918658][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.927769][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.949637][ T10] usb 2-1: config 0 descriptor?? [ 140.231362][ T36] audit: type=1400 audit(1700006434.100:445): avc: denied { map } for pid=3860 comm="syz.0.1311" path="socket:[36956]" dev="sockfs" ino=36956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.288670][ T36] audit: type=1400 audit(1700006434.100:446): avc: denied { read } for pid=3860 comm="syz.0.1311" path="socket:[36956]" dev="sockfs" ino=36956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.561505][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.572313][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.985779][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 140.998785][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 141.007193][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.016386][ T10] usb 2-1: USB disconnect, device number 53 [ 141.022547][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.068807][ T3894] FAULT_INJECTION: forcing a failure. [ 141.068807][ T3894] name failslab, interval 1, probability 100, space 0, times 0 [ 141.081829][ T3894] CPU: 0 UID: 0 PID: 3894 Comm: syz.0.1322 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 141.081862][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.081875][ T3894] Call Trace: [ 141.081883][ T3894] [ 141.081890][ T3894] __dump_stack+0x21/0x30 [ 141.081927][ T3894] dump_stack_lvl+0x140/0x1c0 [ 141.081956][ T3894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.081984][ T3894] ? futex_wake+0x666/0x950 [ 141.082004][ T3894] ? kasan_save_track+0x4f/0x80 [ 141.082027][ T3894] ? kasan_save_alloc_info+0x3a/0x50 [ 141.082047][ T3894] ? __kasan_kmalloc+0x96/0xb0 [ 141.082071][ T3894] dump_stack+0x19/0x20 [ 141.082100][ T3894] should_fail_ex+0x3c2/0x510 [ 141.082132][ T3894] should_failslab+0xac/0x100 [ 141.082159][ T3894] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 141.082183][ T3894] ? __d_alloc+0x42/0x8c0 [ 141.082203][ T3894] ? expand_files+0xda/0x6f0 [ 141.082229][ T3894] __d_alloc+0x42/0x8c0 [ 141.082249][ T3894] d_alloc_pseudo+0x23/0xc0 [ 141.082269][ T3894] alloc_file_pseudo+0xde/0x1f0 [ 141.082298][ T3894] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 141.082327][ T3894] ? _raw_spin_unlock+0x45/0x60 [ 141.082358][ T3894] anon_inode_getfile+0xaa/0x190 [ 141.082387][ T3894] do_epoll_create+0x277/0x3f0 [ 141.082415][ T3894] __x64_sys_epoll_create1+0x3b/0x50 [ 141.082441][ T3894] x64_sys_call+0x1761/0x2ee0 [ 141.082459][ T3894] do_syscall_64+0x57/0xf0 [ 141.082488][ T3894] ? clear_bhb_loop+0x50/0xa0 [ 141.082512][ T3894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.082534][ T3894] RIP: 0033:0x7ff86a39e159 [ 141.082551][ T3894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.082569][ T3894] RSP: 002b:00007ff86b2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 141.082593][ T3894] RAX: ffffffffffffffda RBX: 00007ff86a625fa0 RCX: 00007ff86a39e159 [ 141.082610][ T3894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 141.082624][ T3894] RBP: 00007ff86a43503b R08: 0000000000000000 R09: 0000000000000000 [ 141.082638][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.082651][ T3894] R13: 00007ff86a626038 R14: 00007ff86a625fa0 R15: 00007ffef6746958 [ 141.082670][ T3894] [ 141.389891][ T36] audit: type=1400 audit(1700006435.260:447): avc: denied { setopt } for pid=3897 comm="syz.0.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.638505][ T3905] bridge0: port 3(veth0_to_bridge) entered blocking state [ 141.645891][ T3905] bridge0: port 3(veth0_to_bridge) entered disabled state [ 141.653554][ T3905] veth0_to_bridge: entered allmulticast mode [ 141.660114][ T3905] veth0_to_bridge: entered promiscuous mode [ 141.666152][ T3905] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.678500][ T3905] bridge0: port 3(veth0_to_bridge) entered blocking state [ 141.685713][ T3905] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 141.710196][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.720009][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.737299][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.746228][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.042766][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 142.053619][ T3947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.063148][ T3947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.101002][ T3958] netlink: 'syz.1.1347': attribute type 27 has an invalid length. [ 142.124321][ T3958] veth0_vlan: left promiscuous mode [ 142.130018][ T3958] veth0_vlan: entered promiscuous mode [ 142.136912][ T3958] veth1_macvtap: left promiscuous mode [ 142.143585][ T3958] veth1_macvtap: entered promiscuous mode [ 142.156096][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.165832][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.176357][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.183468][ T2256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.191321][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.198366][ T2256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.212699][ T36] audit: type=1400 audit(1700006436.080:448): avc: denied { attach_queue } for pid=3957 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.274650][ T3958] SELinux: failed to load policy [ 142.283716][ T3958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=3958 comm=syz.1.1347 [ 142.475907][ T3961] FAULT_INJECTION: forcing a failure. [ 142.475907][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.489134][ T3961] CPU: 0 UID: 0 PID: 3961 Comm: syz.1.1348 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 142.489182][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.489195][ T3961] Call Trace: [ 142.489202][ T3961] [ 142.489210][ T3961] __dump_stack+0x21/0x30 [ 142.489243][ T3961] dump_stack_lvl+0x140/0x1c0 [ 142.489271][ T3961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.489303][ T3961] ? selinux_file_ioctl+0x732/0x1480 [ 142.489326][ T3961] dump_stack+0x19/0x20 [ 142.489358][ T3961] should_fail_ex+0x3c2/0x510 [ 142.489377][ T3961] should_fail+0xf/0x20 [ 142.489393][ T3961] should_fail_usercopy+0x1e/0x30 [ 142.489413][ T3961] _copy_from_user+0x20/0xa0 [ 142.489441][ T3961] get_user_ifreq+0x70/0x180 [ 142.489465][ T3961] sock_ioctl+0x6f3/0x7e0 [ 142.489479][ T3961] ? __cfi_sock_ioctl+0x10/0x10 [ 142.489503][ T3961] ? __fget_files+0x2bc/0x330 [ 142.489522][ T3961] ? bpf_lsm_file_ioctl+0xd/0x20 [ 142.489543][ T3961] ? security_file_ioctl+0x3e/0x110 [ 142.489557][ T3961] ? __cfi_sock_ioctl+0x10/0x10 [ 142.489580][ T3961] __se_sys_ioctl+0x126/0x1b0 [ 142.489600][ T3961] __x64_sys_ioctl+0x7f/0xa0 [ 142.489620][ T3961] x64_sys_call+0x1878/0x2ee0 [ 142.489634][ T3961] do_syscall_64+0x57/0xf0 [ 142.489657][ T3961] ? clear_bhb_loop+0x50/0xa0 [ 142.489677][ T3961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.489694][ T3961] RIP: 0033:0x7fa48219e159 [ 142.489708][ T3961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.489722][ T3961] RSP: 002b:00007fa482fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.489740][ T3961] RAX: ffffffffffffffda RBX: 00007fa482425fa0 RCX: 00007fa48219e159 [ 142.489752][ T3961] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000004 [ 142.489763][ T3961] RBP: 00007fa482fef090 R08: 0000000000000000 R09: 0000000000000000 [ 142.489774][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.489784][ T3961] R13: 00007fa482426038 R14: 00007fa482425fa0 R15: 00007ffef7ef47b8 [ 142.489797][ T3961] [ 142.796979][ T3968] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1350'. [ 142.840047][ T3968] gretap0: entered promiscuous mode [ 142.863851][ T3977] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1350'. [ 142.922840][ T3977] 0ªî{X¹¦: renamed from gretap0 [ 142.959417][ T3977] 0ªî{X¹¦: left promiscuous mode [ 142.980873][ T3977] 0ªî{X¹¦: entered allmulticast mode [ 143.003419][ T3977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.090242][ T3975] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1350'. [ 143.102679][ T3975] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 143.110712][ T3975] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.169968][ T3988] netlink: 'syz.0.1357': attribute type 27 has an invalid length. [ 143.208980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.221258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.233419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.245544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.257678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.269858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.282007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.294151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 143.917457][ T3997] SELinux: policydb magic number 0xc does not match expected magic number 0xf97cff8c [ 147.408800][ T3997] SELinux: failed to load policy [ 148.008618][ C0] net_ratelimit: 71082 callbacks suppressed [ 148.008640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.026728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 148.038813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.050841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 148.062933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.074948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.086986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.099092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 148.111231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.123273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 148.912834][ C1] sched: DL replenish lagged too much [ 153.018632][ C0] net_ratelimit: 75360 callbacks suppressed [ 153.018656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.036776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 153.048876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.060926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 153.073035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.085096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.097195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.109229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.121279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.133395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.028669][ C0] net_ratelimit: 69646 callbacks suppressed [ 158.028693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.029458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.034980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.048281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.059003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.072221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.082960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.096178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.106849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 158.120047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 163.038608][ C0] net_ratelimit: 80016 callbacks suppressed [ 163.038631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.038945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 163.044841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.058026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 163.068739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.081947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 163.092722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.105834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 163.117060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.129763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 168.048631][ C0] net_ratelimit: 82731 callbacks suppressed [ 168.048654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.049723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 168.055009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.068074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 168.078888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.092299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 168.102900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.116048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 168.126893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.140101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 173.058591][ C0] net_ratelimit: 82574 callbacks suppressed [ 173.058616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.059851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 173.064847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.078009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 173.088749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.102008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 173.112728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.125885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 173.136665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.149762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.068662][ C0] net_ratelimit: 83434 callbacks suppressed [ 178.068685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.069255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.074786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.088055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.098853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.111954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.122872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.135968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.146709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 178.159958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 183.078595][ C0] net_ratelimit: 82708 callbacks suppressed [ 183.078620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.079710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 183.084875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.098048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 183.108725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.121919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 183.132748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.146092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 183.156791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.170089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 185.685142][ T45] usb 4-1: USB disconnect, device number 36 [ 188.088617][ C0] net_ratelimit: 85161 callbacks suppressed [ 188.088641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.089481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 188.094816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.108065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 188.118873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.132110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 188.142649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 188.156041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 188.166601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.186593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.098598][ C0] net_ratelimit: 82068 callbacks suppressed [ 193.098623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.099821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.104849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.117953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.128933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.142193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.152825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.170426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 193.176683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.190406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.108666][ C0] net_ratelimit: 83689 callbacks suppressed [ 198.108688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.109495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.114796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.128065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.138960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.151999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.162728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.176145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 198.186859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.199988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.118651][ C0] net_ratelimit: 84204 callbacks suppressed [ 203.118674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.119017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.124908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.138361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.148874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.162218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.172926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.186489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.196752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 203.210288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.128591][ C0] net_ratelimit: 86255 callbacks suppressed [ 208.128613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.129586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.134746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.147963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.158977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.172406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.182788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.196110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 208.206864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.220042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.138597][ C0] net_ratelimit: 83173 callbacks suppressed [ 213.138620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.140212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.144729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.158324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.168876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.182176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.192689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.206318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 213.216796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.230197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.148590][ C0] net_ratelimit: 82885 callbacks suppressed [ 218.148614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.149616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.154876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.168025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.178776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.191960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.202743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.216362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.227105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 218.240178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 223.158616][ C0] net_ratelimit: 83749 callbacks suppressed [ 223.158642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.159032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 223.164852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.177972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 223.188736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.202005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 223.212783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.225936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 223.236884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.250082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.168621][ C0] net_ratelimit: 87182 callbacks suppressed [ 228.168646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.169215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.174865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.188236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.198891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.212048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.222789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.236014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.246738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 228.260032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 233.178639][ C0] net_ratelimit: 86581 callbacks suppressed [ 233.178681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.179582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 233.184861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.198114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 233.209045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.222363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 233.233027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.246071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 233.256763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.270138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 238.188583][ C0] net_ratelimit: 88676 callbacks suppressed [ 238.188606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.189542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 238.194772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.208059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 238.218812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.231921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 238.242766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.255870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 238.266614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.279883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.198582][ C0] net_ratelimit: 85671 callbacks suppressed [ 243.198609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.199062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.204766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.218015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.228778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.241946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.252758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.265938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.276605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 243.289804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.208865][ C0] net_ratelimit: 86406 callbacks suppressed [ 248.208890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.209752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.215007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.228267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.239142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.252296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.262965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.276223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 248.287047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.300270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 253.218604][ C0] net_ratelimit: 88730 callbacks suppressed [ 253.218629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.219265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 253.224814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.237957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 253.248816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.262056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 253.272670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.285990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 253.296723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.310053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.228620][ C0] net_ratelimit: 88693 callbacks suppressed [ 258.228649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.229365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.234771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.248095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.258814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.271935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.282812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.295965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.306649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 258.319932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.238577][ C0] net_ratelimit: 84849 callbacks suppressed [ 263.238602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.239411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.244735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.258180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.268899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.282035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.292686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.305917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 263.316842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.329892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.248549][ C0] net_ratelimit: 82809 callbacks suppressed [ 268.248572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.249041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.254711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.267953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.278768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.291794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.302595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.316012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 268.326613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.339828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.258572][ C1] net_ratelimit: 80602 callbacks suppressed [ 273.258605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.258652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.266107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.276704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.289925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.300871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.313873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.324625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.337869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 273.348708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.268583][ C0] net_ratelimit: 83613 callbacks suppressed [ 278.268607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.269557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.274893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.288204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.298799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.312285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.322800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.336488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.346827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 278.360258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.278583][ C0] net_ratelimit: 84466 callbacks suppressed [ 283.278607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.278613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.280375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.284812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.298337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.308688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.322287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.332783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.346256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 283.356670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.288676][ C0] net_ratelimit: 87013 callbacks suppressed [ 288.288701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.289008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.294889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.307150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.318931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.332347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.343029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.355039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 288.366821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.380056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 290.231215][ T37] INFO: task syz.1.192:888 blocked for more than 123 seconds. [ 293.298565][ C1] net_ratelimit: 90108 callbacks suppressed [ 293.298589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.298613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.306149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.316856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.328915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.340677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.358574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.364906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.376865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 293.388741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.533775][ T37] Not tainted syzkaller #0 [ 293.538802][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.547526][ T37] task:syz.1.192 state:D stack:0 pid:888 tgid:888 ppid:299 flags:0x00004006 [ 293.557766][ T37] Call Trace: [ 293.561113][ T37] [ 293.564080][ T37] __schedule+0x1496/0x20b0 [ 293.568663][ T37] ? __sched_text_start+0x10/0x10 [ 293.573725][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 293.579327][ T37] ? kvm_tdp_mmu_put_root+0x1fa/0x300 [ 293.584745][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x5a8/0x730 [ 293.591313][ T37] ? kvm_mmu_uninit_tdp_mmu+0x185/0x210 [ 293.596901][ T37] ? kvm_mmu_uninit_vm+0x27/0x60 [ 293.601903][ T37] ? __kasan_check_write+0x18/0x20 [ 293.607058][ T37] ? _raw_spin_lock+0x92/0x120 [ 293.611888][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 293.617168][ T37] schedule+0xc5/0x240 [ 293.621300][ T37] schedule_preempt_disabled+0x14/0x30 [ 293.626790][ T37] __mutex_lock+0x902/0x1b90 [ 293.631462][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 293.638262][ T37] ? __call_rcu_common+0x53c/0x710 [ 293.643444][ T37] __mutex_lock_slowpath+0xe/0x20 [ 293.648560][ T37] mutex_lock+0x113/0x1d0 [ 293.652930][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 293.657816][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 293.664390][ T37] rcu_barrier+0x4d/0x580 [ 293.668782][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 293.674198][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 293.679021][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 293.684198][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 293.689914][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 293.695591][ T37] kvm_put_kvm+0xadf/0x12d0 [ 293.700166][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 293.705402][ T37] kvm_vm_release+0x47/0x70 [ 293.709970][ T37] __fput+0x208/0xa30 [ 293.713997][ T37] ____fput+0x20/0x30 [ 293.718019][ T37] task_work_run+0x1e5/0x260 [ 293.722679][ T37] ? __cfi_task_work_run+0x10/0x10 [ 293.727829][ T37] ? __kasan_check_write+0x18/0x20 [ 293.732999][ T37] do_exit+0xa46/0x2850 [ 293.737215][ T37] ? __cfi_do_exit+0x10/0x10 [ 293.741871][ T37] ? __kasan_check_write+0x18/0x20 [ 293.747018][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 293.752247][ T37] ? __kasan_check_read+0x15/0x20 [ 293.757336][ T37] do_group_exit+0x21f/0x2f0 [ 293.762008][ T37] ? cgroup_leave_frozen+0x16a/0x2a0 [ 293.767349][ T37] get_signal+0x134c/0x1490 [ 293.771912][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 293.777514][ T37] ? common_nsleep+0x93/0xb0 [ 293.782187][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 293.788379][ T37] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 293.794178][ T37] ? __kasan_check_read+0x15/0x20 [ 293.799255][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 293.805369][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 293.810913][ T37] do_syscall_64+0x63/0xf0 [ 293.815403][ T37] ? clear_bhb_loop+0x50/0xa0 [ 293.820137][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 293.826069][ T37] RIP: 00fb:0x294e66b3c7c44cb4 [ 293.830887][ T37] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 293.839370][ T37] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 293.847379][ T37] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 293.855421][ T37] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 293.863461][ T37] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 293.871516][ T37] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 293.879558][ T37] [ 293.882725][ T37] INFO: task syz.1.1349:3962 blocked for more than 127 seconds. [ 293.926746][ T4021] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 293.949564][ T37] Not tainted syzkaller #0 [ 293.954567][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.963305][ T37] task:syz.1.1349 state:D stack:0 pid:3962 tgid:3962 ppid:299 flags:0x00004004 [ 293.973558][ T37] Call Trace: [ 293.976867][ T37] [ 293.979859][ T37] __schedule+0x1496/0x20b0 [ 293.984410][ T37] ? __sched_text_start+0x10/0x10 [ 293.989481][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 293.994582][ T37] ? __kasan_check_write+0x18/0x20 [ 293.999805][ T37] ? rcu_segcblist_entrain+0x69/0x2f0 [ 294.005216][ T37] ? _raw_spin_unlock+0x45/0x60 [ 294.010178][ T37] ? rcu_barrier_entrain+0x375/0x530 [ 294.015506][ T37] schedule+0xc5/0x240 [ 294.019624][ T37] schedule_timeout+0xc7/0x3b0 [ 294.024432][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 294.029897][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 294.035496][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 294.040664][ T37] ? generic_exec_single+0x206/0x500 [ 294.045995][ T37] wait_for_common+0x368/0x650 [ 294.050868][ T37] ? wait_for_completion+0x40/0x40 [ 294.056018][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 294.061550][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 294.068144][ T37] wait_for_completion+0x1c/0x40 [ 294.073141][ T37] rcu_barrier+0x45a/0x580 [ 294.077602][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 294.083028][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 294.087841][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 294.093016][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 294.098714][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 294.104389][ T37] kvm_put_kvm+0xadf/0x12d0 [ 294.108955][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 294.114101][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 294.119367][ T37] kvm_vm_release+0x47/0x70 [ 294.123912][ T37] __fput+0x208/0xa30 [ 294.127955][ T37] ____fput+0x20/0x30 [ 294.132056][ T37] task_work_run+0x1e5/0x260 [ 294.136698][ T37] ? __cfi_task_work_run+0x10/0x10 [ 294.141869][ T37] ? __kasan_check_write+0x18/0x20 [ 294.147021][ T37] resume_user_mode_work+0x35/0x50 [ 294.152181][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 294.157685][ T37] do_syscall_64+0x63/0xf0 [ 294.162167][ T37] ? clear_bhb_loop+0x50/0xa0 [ 294.166882][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 294.172824][ T37] RIP: 0033:0x7fa48219e159 [ 294.177272][ T37] RSP: 002b:00007ffef7ef4918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.185764][ T37] RAX: 0000000000000000 RBX: 00007fa482427da0 RCX: 00007fa48219e159 [ 294.193839][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 294.201860][ T37] RBP: 00007fa482427da0 R08: 0000000000000006 R09: 0000000000000000 [ 294.209877][ T37] R10: 00007fa482427cb0 R11: 0000000000000246 R12: 00000000000230a5 [ 294.217885][ T37] R13: 00007fa48242609c R14: 0000000000022e05 R15: 00007fa482426090 [ 294.225921][ T37] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.631153][ T36] audit: type=1400 audit(1700006584.380:449): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2508]" dev="pipefs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 295.410787][ T37] INFO: task syz.0.1357:3988 blocked for more than 128 seconds. [ 295.418493][ T37] Not tainted syzkaller #0 [ 295.440669][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.449405][ T37] task:syz.0.1357 state:D stack:0 pid:3988 tgid:3987 ppid:294 flags:0x00004006 [ 295.459623][ T37] Call Trace: [ 295.462939][ T37] [ 295.465899][ T37] __schedule+0x1496/0x20b0 [ 295.470456][ T37] ? __sched_text_start+0x10/0x10 [ 295.475512][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 295.480864][ T37] ? __kasan_check_write+0x18/0x20 [ 295.486016][ T37] ? _raw_spin_lock+0x92/0x120 [ 295.490840][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 295.496173][ T37] schedule+0xc5/0x240 [ 295.500307][ T37] schedule_preempt_disabled+0x14/0x30 [ 295.505800][ T37] __mutex_lock+0x902/0x1b90 [ 295.510459][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 295.517348][ T37] ? kasan_save_track+0x4f/0x80 [ 295.522253][ T37] ? kasan_save_track+0x3e/0x80 [ 295.527173][ T37] ? kasan_save_free_info+0x44/0x50 [ 295.532425][ T37] ? kfree+0x158/0x440 [ 295.536526][ T37] ? kvm_ioapic_destroy+0xa7/0xc0 [ 295.541601][ T37] ? kvm_arch_destroy_vm+0x341/0x410 [ 295.546942][ T37] ? kvm_vm_release+0x47/0x70 [ 295.551704][ T37] ? __fput+0x208/0xa30 [ 295.555900][ T37] ? ____fput+0x20/0x30 [ 295.560113][ T37] ? task_work_run+0x1e5/0x260 [ 295.564920][ T37] ? do_exit+0xa46/0x2850 [ 295.569327][ T37] ? do_group_exit+0x21f/0x2f0 [ 295.574136][ T37] ? get_signal+0x134c/0x1490 [ 295.578877][ T37] ? syscall_exit_to_user_mode+0x57/0xb0 [ 295.584584][ T37] ? do_syscall_64+0x63/0xf0 [ 295.589234][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.595353][ T37] __mutex_lock_slowpath+0xe/0x20 [ 295.600511][ T37] mutex_lock+0x113/0x1d0 [ 295.604870][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 295.609772][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 295.616318][ T37] rcu_barrier+0x4d/0x580 [ 295.620701][ T37] ? __kasan_slab_free+0x6a/0x80 [ 295.625679][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 295.631125][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 295.635930][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 295.641110][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 295.646800][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 295.652588][ T37] kvm_put_kvm+0xadf/0x12d0 [ 295.657143][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 295.662405][ T37] kvm_vm_release+0x47/0x70 [ 295.666956][ T37] __fput+0x208/0xa30 [ 295.671013][ T37] ____fput+0x20/0x30 [ 295.675038][ T37] task_work_run+0x1e5/0x260 [ 295.679693][ T37] ? __cfi_task_work_run+0x10/0x10 [ 295.684849][ T37] ? __kasan_check_write+0x18/0x20 [ 295.690023][ T37] do_exit+0xa46/0x2850 [ 295.694218][ T37] ? ___sys_sendmsg+0x2b6/0x370 [ 295.699126][ T37] ? __sys_sendmsg+0x260/0x260 [ 295.703931][ T37] ? __cfi_do_exit+0x10/0x10 [ 295.708592][ T37] ? __kasan_check_write+0x18/0x20 [ 295.713738][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 295.718917][ T37] do_group_exit+0x21f/0x2f0 [ 295.723558][ T37] ? __kasan_check_write+0x18/0x20 [ 295.728718][ T37] ? recalc_sigpending+0x184/0x1d0 [ 295.733858][ T37] get_signal+0x134c/0x1490 [ 295.738401][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 295.744002][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 295.750218][ T37] ? __kasan_check_write+0x18/0x20 [ 295.755366][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 295.760884][ T37] do_syscall_64+0x63/0xf0 [ 295.765360][ T37] ? clear_bhb_loop+0x50/0xa0 [ 295.770150][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.776086][ T37] RIP: 0033:0x7ff86a39e159 [ 295.780564][ T37] RSP: 002b:00007ff86b2fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.789037][ T37] RAX: 000000000000002c RBX: 00007ff86a625fa0 RCX: 00007ff86a39e159 [ 295.797043][ T37] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000e [ 295.805063][ T37] RBP: 00007ff86a43503b R08: 0000000000000000 R09: 0000000000000000 [ 295.813111][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.821135][ T37] R13: 00007ff86a626038 R14: 00007ff86a625fa0 R15: 00007ffef6746958 [ 295.829161][ T37] [ 295.849421][ T37] NMI backtrace for cpu 1 [ 295.849439][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 295.849470][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.849485][ T37] Call Trace: [ 295.849493][ T37] [ 295.849508][ T37] __dump_stack+0x21/0x30 [ 295.849546][ T37] dump_stack_lvl+0x140/0x1c0 [ 295.849577][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 295.849610][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 295.849648][ T37] dump_stack+0x19/0x20 [ 295.849678][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 295.849713][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 295.849746][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 295.849779][ T37] ? sched_show_task+0x371/0x530 [ 295.849812][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 295.849843][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.849876][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.849909][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 295.849945][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 295.849977][ T37] watchdog+0xe45/0xf90 [ 295.850001][ T37] ? __kasan_check_write+0x18/0x20 [ 295.850029][ T37] ? __cfi_watchdog+0x10/0x10 [ 295.850054][ T37] ? __kasan_check_read+0x15/0x20 [ 295.850078][ T37] ? __kthread_parkme+0x12f/0x180 [ 295.850102][ T37] ? schedule+0xc5/0x240 [ 295.850125][ T37] kthread+0x2c4/0x360 [ 295.850151][ T37] ? __cfi_watchdog+0x10/0x10 [ 295.850176][ T37] ? __cfi_kthread+0x10/0x10 [ 295.850203][ T37] ret_from_fork+0x64/0xa0 [ 295.850237][ T37] ? __cfi_kthread+0x10/0x10 [ 295.850264][ T37] ret_from_fork_asm+0x1a/0x30 [ 295.850289][ T37] [ 295.850298][ T37] Sending NMI from CPU 1 to CPUs 0: [ 296.074848][ C0] NMI backtrace for cpu 0 [ 296.074863][ C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 296.074887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.074899][ C0] RIP: 0010:stack_trace_consume_entry+0xea/0x2a0 [ 296.074929][ C0] Code: 6a 00 4c 8b 55 d0 4d 89 f1 4c 8b 45 c8 4c 89 e2 4c 89 ff 48 8b 75 c0 4c 8b 37 45 8d 7a 01 0f b6 04 13 84 c0 0f 85 4a 01 00 00 <45> 89 38 4f 8d 3c d6 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1e 4c 89 [ 296.074946][ C0] RSP: 0018:ffffc90000006f70 EFLAGS: 00000246 [ 296.074963][ C0] RAX: 0000000000000000 RBX: 1ffff92000000e12 RCX: 0000000000000e00 [ 296.074977][ C0] RDX: dffffc0000000000 RSI: ffffffff8482c4d6 RDI: ffffc90000007080 [ 296.074997][ C0] RBP: ffffc90000006fb8 R08: ffffc90000007090 R09: ffffc90000007088 [ 296.075010][ C0] R10: 0000000000000009 R11: ffffffff8175a5e0 R12: ffffc9000000708c [ 296.075023][ C0] R13: 1ffff92000000e11 R14: ffffc90000007100 R15: 000000000000000a [ 296.075037][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 296.075052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.075065][ C0] CR2: 00007f30e65f84c0 CR3: 000000010c3de000 CR4: 00000000003526b0 [ 296.075082][ C0] Call Trace: [ 296.075088][ C0] [ 296.075095][ C0] ? netif_receive_skb+0x146/0x7b0 [ 296.075117][ C0] ? __kernel_text_address+0x11/0x40 [ 296.075141][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 296.075163][ C0] arch_stack_walk+0x129/0x170 [ 296.075182][ C0] ? netif_receive_skb+0x146/0x7b0 [ 296.075203][ C0] stack_trace_save+0xaa/0x100 [ 296.075222][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 296.075243][ C0] ? __dev_forward_skb2+0x4aa/0x770 [ 296.075269][ C0] kasan_save_track+0x3e/0x80 [ 296.075289][ C0] ? kasan_save_track+0x3e/0x80 [ 296.075308][ C0] ? kasan_save_free_info+0x44/0x50 [ 296.075324][ C0] ? __kasan_slab_free+0x5f/0x80 [ 296.075345][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 296.075364][ C0] ? __kfree_skb+0x18f/0x210 [ 296.075384][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 296.075404][ C0] ? ip6_mc_input+0x433/0x680 [ 296.075424][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 296.075443][ C0] ? ipv6_rcv+0xf1/0x240 [ 296.075468][ C0] kasan_save_free_info+0x44/0x50 [ 296.075484][ C0] __kasan_slab_free+0x5f/0x80 [ 296.075506][ C0] kmem_cache_free+0x1bd/0x4f0 [ 296.075524][ C0] ? __kfree_skb+0x18f/0x210 [ 296.075545][ C0] __kfree_skb+0x18f/0x210 [ 296.075564][ C0] ? ip6_mc_input+0x433/0x680 [ 296.075583][ C0] sk_skb_reason_drop+0xd8/0x310 [ 296.075604][ C0] ip6_mc_input+0x433/0x680 [ 296.075623][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.075643][ C0] ? __asan_memset+0x39/0x50 [ 296.075660][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 296.075686][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.075705][ C0] ip6_rcv_finish+0x341/0x3c0 [ 296.075725][ C0] ipv6_rcv+0xf1/0x240 [ 296.075743][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 296.075762][ C0] ? br_dev_queue_push_xmit+0x571/0x710 [ 296.075787][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 296.075807][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 296.075831][ C0] ? __kasan_check_write+0x18/0x20 [ 296.075849][ C0] ? __skb_clone+0x453/0x6d0 [ 296.075870][ C0] netif_receive_skb+0x146/0x7b0 [ 296.075891][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 296.075912][ C0] ? br_flood+0x66d/0x720 [ 296.075936][ C0] br_pass_frame_up+0x126/0x1b0 [ 296.075962][ C0] br_handle_frame_finish+0x1178/0x1620 [ 296.075995][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 296.076013][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 296.076043][ C0] br_handle_frame+0x5a5/0xba0 [ 296.076069][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 296.076095][ C0] __netif_receive_skb_core+0xfc4/0x3a70 [ 296.076116][ C0] ? __kfree_skb+0x18f/0x210 [ 296.076135][ C0] ? ip6_mc_input+0x433/0x680 [ 296.076155][ C0] ? ip6_mc_input+0x433/0x680 [ 296.076175][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.076195][ C0] ? qdisc_run_end+0x120/0x120 [ 296.076214][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 296.076233][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 296.076253][ C0] ? ipv6_rcv+0xf1/0x240 [ 296.076271][ C0] ? __kasan_check_read+0x15/0x20 [ 296.076289][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 296.076307][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 296.076326][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 296.076352][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 296.076377][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 296.076404][ C0] process_backlog+0x40b/0xaf0 [ 296.076426][ C0] ? __mod_timer+0x881/0xd20 [ 296.076447][ C0] __napi_poll+0xd0/0x600 [ 296.076465][ C0] net_rx_action+0x5dc/0xd70 [ 296.076488][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 296.076514][ C0] ? sched_clock+0x44/0x60 [ 296.076538][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 296.076564][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 296.076589][ C0] handle_softirqs+0x1aa/0x620 [ 296.076608][ C0] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 296.076632][ C0] __do_softirq+0xf/0x16 [ 296.076649][ C0] do_softirq+0xb8/0x110 [ 296.076665][ C0] [ 296.076671][ C0] [ 296.076677][ C0] ? __cfi_do_softirq+0x10/0x10 [ 296.076694][ C0] ? __kasan_slab_free+0x6a/0x80 [ 296.076715][ C0] __local_bh_enable_ip+0x74/0x80 [ 296.076732][ C0] rcu_do_batch+0x590/0xcb0 [ 296.076751][ C0] ? rcu_core+0xcc0/0xcc0 [ 296.076766][ C0] ? __kasan_check_write+0x18/0x20 [ 296.076783][ C0] ? _raw_spin_lock+0x92/0x120 [ 296.076809][ C0] ? __kasan_check_read+0x15/0x20 [ 296.076826][ C0] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 296.076845][ C0] rcu_nocb_cb_kthread+0x533/0xb60 [ 296.076864][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 296.076882][ C0] ? __kasan_check_write+0x18/0x20 [ 296.076900][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 296.076926][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 296.076951][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 296.076978][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 296.077002][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 296.077021][ C0] ? __kasan_check_read+0x15/0x20 [ 296.077039][ C0] ? __kthread_parkme+0x12f/0x180 [ 296.077056][ C0] ? schedule+0xc5/0x240 [ 296.077073][ C0] kthread+0x2c4/0x360 [ 296.077092][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 296.077110][ C0] ? __cfi_kthread+0x10/0x10 [ 296.077130][ C0] ret_from_fork+0x64/0xa0 [ 296.077155][ C0] ? __cfi_kthread+0x10/0x10 [ 296.077175][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.077193][ C0] [ 296.955903][ T4021] CPU: 0 UID: 0 PID: 4021 Comm: syz-executor Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc [ 296.955944][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.955968][ T4021] Call Trace: [ 296.955975][ T4021] [ 296.955985][ T4021] __dump_stack+0x21/0x30 [ 296.956022][ T4021] dump_stack_lvl+0x140/0x1c0 [ 296.956054][ T4021] ? __cfi_dump_stack_lvl+0x10/0x10 [ 296.956087][ T4021] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 296.956125][ T4021] dump_stack+0x19/0x20 [ 296.956156][ T4021] warn_alloc+0x1e7/0x2c0 [ 296.956189][ T4021] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 296.956217][ T4021] ? __cfi_warn_alloc+0x10/0x10 [ 296.956249][ T4021] ? __get_vm_area_node+0x150/0x390 [ 296.956284][ T4021] ? __get_vm_area_node+0x1f8/0x390 [ 296.956317][ T4021] ? __get_vm_area_node+0x276/0x390 [ 296.956351][ T4021] ? kcov_ioctl+0x5d/0x5a0 [ 296.956376][ T4021] __vmalloc_node_range_noprof+0x65f/0x1300 [ 296.956417][ T4021] ? locks_remove_posix+0x358/0x570 [ 296.956446][ T4021] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 296.956484][ T4021] ? expand_files+0xda/0x6f0 [ 296.956516][ T4021] vmalloc_user_noprof+0x77/0x90 [ 296.956538][ T4021] ? kcov_ioctl+0x5d/0x5a0 [ 296.956561][ T4021] kcov_ioctl+0x5d/0x5a0 [ 296.956584][ T4021] ? bpf_lsm_file_ioctl+0xd/0x20 [ 296.956614][ T4021] ? security_file_ioctl+0x3e/0x110 [ 296.956637][ T4021] ? __cfi_kcov_ioctl+0x10/0x10 [ 296.956660][ T4021] __se_sys_ioctl+0x126/0x1b0 [ 296.956690][ T4021] __x64_sys_ioctl+0x7f/0xa0 [ 296.956719][ T4021] x64_sys_call+0x1878/0x2ee0 [ 296.956741][ T4021] do_syscall_64+0x57/0xf0 [ 296.956775][ T4021] ? clear_bhb_loop+0x50/0xa0 [ 296.956801][ T4021] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 296.956827][ T4021] RIP: 0033:0x7fb62159ddeb [ 296.956847][ T4021] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 296.956868][ T4021] RSP: 002b:00007ffcc0fca1e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.956893][ T4021] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fb62159ddeb [ 296.956911][ T4021] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 296.956928][ T4021] RBP: 00007fb6218264e8 R08: 0000000000000000 R09: 0000000000000000 [ 296.956944][ T4021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.956965][ T4021] R13: 0000000000000003 R14: 00007ffcc0fca498 R15: 0000000000000000 [ 296.956984][ T4021] [ 296.957032][ T4021] Mem-Info: [ 298.308584][ C0] net_ratelimit: 60352 callbacks suppressed [ 298.308608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.308879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.314781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.328242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.338868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.350855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.362644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.375916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0) [ 298.386705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.398848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:27:25:b2:88:7b, vlan:0)