last executing test programs: 2m52.352651327s ago: executing program 1 (id=8): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)={0x420, 0x3f4, 0x800, 0x70bd29, 0x25dfdbff, {0x10, 0x0, 0x2c, [0x8, 0x86, 0x936f70f1, 0x8, 0xffffffff, 0x5, 0x8, 0x2, 0x7c5, 0x8, 0x2, 0x6, 0x2, 0xc, 0x8, 0x1, 0x3, 0x3, 0x4, 0xb37, 0x4, 0x5, 0x6, 0x8, 0x2, 0x5, 0xf, 0x3ff, 0x9, 0x0, 0x2, 0xd, 0x7, 0x401, 0xb, 0x7f, 0x2, 0x7f, 0x1ff, 0x9, 0x2, 0x1, 0x7, 0xe, 0x5, 0x7, 0x3, 0x10001, 0x7, 0x1ff, 0x9, 0xa, 0x1c4, 0x800007, 0xffff0000, 0x2, 0xa, 0xf0, 0x5, 0xfffffffe, 0x6, 0x9, 0x2, 0x3], [0x0, 0x2, 0x8001, 0xffff, 0x5, 0x7, 0xe, 0x7f, 0x10, 0x7f, 0x8, 0x8, 0x5, 0x935, 0x7, 0x9, 0x9, 0x3, 0x5, 0x2, 0x1ff, 0x6, 0x448, 0x68bc, 0xb, 0x2, 0x6, 0x10000, 0xd437, 0x7, 0x3, 0x2, 0x0, 0x6, 0x1000, 0x401, 0x101, 0x80000000, 0xfffffffa, 0x3ff, 0x4, 0x1000, 0x5, 0x6, 0x5ee4, 0x7, 0x1, 0x28a, 0x955, 0x3, 0xc6, 0x81, 0x6, 0x3, 0x10, 0x1, 0xfffffffc, 0x6, 0x4, 0x7, 0x878d, 0x6, 0x10, 0x7f], [0x9, 0x7, 0x3, 0x6, 0x1c2, 0x7, 0x80, 0xffff, 0x6, 0x800, 0x4, 0x10, 0x7fff, 0x9, 0x5, 0x8778, 0x349c, 0xf, 0x8, 0xbcb4, 0x10000, 0x200, 0x2, 0x9, 0x5, 0x4, 0x3, 0x5, 0x1, 0xfffffff7, 0x4, 0x6, 0x5, 0x4, 0x7f, 0x6, 0x2, 0x2, 0xf, 0x1, 0x1, 0x4, 0x8, 0xbf6, 0xffffff0b, 0x6, 0x6, 0x1, 0x2, 0x1, 0x6, 0x1, 0xe, 0x8, 0xd, 0x101, 0x4a, 0x3ff, 0xffff7fff, 0x9, 0x4, 0xfc, 0x3, 0xfffffffb], [0xa69, 0x3, 0x4, 0x3, 0x4, 0x8, 0x9, 0x2, 0x5a56, 0x2, 0x7, 0x10000, 0x6, 0x0, 0x6, 0x7, 0x800, 0xa7, 0x8, 0x0, 0x2, 0x0, 0x8, 0x4, 0x5, 0x4, 0x384f, 0x2, 0xfffffffa, 0x9, 0x2, 0x7, 0xc, 0x7fff, 0x9, 0x6, 0x1000, 0x9, 0x7f, 0x3dc, 0xfffffff0, 0x4, 0x7, 0x6, 0xa1, 0x8000, 0x0, 0x7fffffff, 0x1000, 0x94, 0x5, 0x30f, 0x10, 0x7f, 0x7, 0x9fe, 0x1, 0x0, 0xa, 0x4, 0x3ff, 0x1, 0x8000, 0xfffff721]}}, 0x420}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000000) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/13) 2m52.32973707s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x24, 0x7ffc0001}]}) mkdir(0x0, 0x63) r0 = syz_io_uring_setup(0x102a, &(0x7f0000000580)={0x0, 0xe341, 0x13500, 0x1, 0xffffffff}, &(0x7f0000000280), &(0x7f00000000c0), &(0x7f0000000000)) poll(&(0x7f0000000a80)=[{r0, 0x1000}], 0x1, 0x6) 2m52.288625037s ago: executing program 1 (id=12): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002000904000804ff0000000705"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000100)="0000000c0000000100070001") syz_usb_ep_read(r0, 0x3, 0x200, &(0x7f0000000600)=""/512) syz_usb_ep_write(r0, 0x84, 0x0, 0x0) 2m50.97169747s ago: executing program 3 (id=64): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, 0x0) 2m50.961378722s ago: executing program 3 (id=65): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x3) 2m50.941541475s ago: executing program 3 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x20, r1, 0x165426a2bc0b0ae5, 0x70bd2b, 0x25dfdbfb, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004891}, 0x20004814) 2m50.928750497s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 2m50.875788756s ago: executing program 3 (id=69): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 2m50.764345845s ago: executing program 3 (id=72): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x3, r2, 0x6}, 0x10) 2m50.750928867s ago: executing program 32 (id=72): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x3, r2, 0x6}, 0x10) 2m49.269289147s ago: executing program 1 (id=105): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 2m48.926837736s ago: executing program 0 (id=111): unshare(0x8040480) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 2m48.648750172s ago: executing program 4 (id=122): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x1, 0x7f}, {0x94a0a44077550ca2, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x5, 0x44}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x5, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x5, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0xffffffff, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 2m48.644385993s ago: executing program 2 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) rt_sigqueueinfo(0x0, 0x13, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2m48.628972635s ago: executing program 4 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) write(r0, &(0x7f00000001c0)="ce34", 0x2) 2m48.614487298s ago: executing program 4 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='8250_pericom\n', 0x24) 2m48.594481891s ago: executing program 4 (id=126): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r0, &(0x7f0000000140)='n', 0x1) 2m48.562966377s ago: executing program 2 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='\x00', 0x1, 0x44891, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0xc9110001, 0x0, 0x0) 2m48.549291569s ago: executing program 2 (id=128): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x3) 2m48.532748592s ago: executing program 2 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x2000, &(0x7f00004af000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 2m48.527037633s ago: executing program 4 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) io_setup(0x239f, &(0x7f0000000380)) 2m48.42634414s ago: executing program 1 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 2m48.257349448s ago: executing program 4 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb0203"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2m48.237236742s ago: executing program 1 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone3(&(0x7f0000000380)={0x80344080, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, {r0}}, 0x58) 2m48.19115058s ago: executing program 0 (id=134): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a"], 0x4c}}, 0x80) 2m48.172454223s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xee) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) 2m48.158420455s ago: executing program 0 (id=136): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="75a8ccf79c5bee843a7d88e298d1341bd209a21b6f50fe88cd6a6a000063ab59578db363f48925590534d43697c73e19417e39a06607de99de69db13fd737428808940bcd0840dc930c81a8bd8b665cd233c5831977dd63ce2c88d43b17700f4ff9400000000", 0x66}, {&(0x7f0000000380)="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", 0x236}, {&(0x7f00000005c0)="1b3b4cb82b2f1bc29fc0144b7cd8a483d6dbc75ded5829acefe763e19496e9ba57a70000704857247b7a2200000000c97b183e9500a52f3d4433127df4", 0x3d}], 0x3}, 0x40) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 2m47.24311108s ago: executing program 2 (id=137): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.217940704s ago: executing program 2 (id=138): unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0xba88, 0xa3c, 0x4}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2m47.079470437s ago: executing program 0 (id=139): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) 2m43.919869021s ago: executing program 0 (id=140): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003700)=@vmx={0x10b, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x7fffffff}, {"d07ee51100"}}) 2m32.011120722s ago: executing program 33 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone3(&(0x7f0000000380)={0x80344080, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, {r0}}, 0x58) 2m12.480372529s ago: executing program 34 (id=138): unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0xffff, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0xba88, 0xa3c, 0x4}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2m0.329555781s ago: executing program 35 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb0203"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 1m57.211580317s ago: executing program 36 (id=140): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003700)=@vmx={0x10b, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x7fffffff}, {"d07ee51100"}}) 6.435147743s ago: executing program 6 (id=142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x8, 0x5, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x38}}, &(0x7f0000000bc0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 6.266649031s ago: executing program 6 (id=145): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) write(r0, &(0x7f0000000100)='raw\n', 0x4) 6.253778334s ago: executing program 6 (id=146): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) write(r0, &(0x7f0000000080)='4', 0x1) 6.186898785s ago: executing program 5 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.144999962s ago: executing program 5 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.049994488s ago: executing program 5 (id=151): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='on', 0x2) 5.467313986s ago: executing program 5 (id=157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xb1, {0x0, 0x21, 0x3, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.051310576s ago: executing program 6 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x1}, [{0x2, 0x3}], {}, [], {}, {0x20, 0x5}}, 0x2c, 0x3) 3.987510227s ago: executing program 37 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x1}, [{0x2, 0x3}], {}, [], {}, {0x20, 0x5}}, 0x2c, 0x3) 3.326628748s ago: executing program 9 (id=164): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x542e, &(0x7f00000000c0)) 3.299092583s ago: executing program 9 (id=165): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.286943425s ago: executing program 9 (id=166): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0xfffffffd, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) 3.260745469s ago: executing program 9 (id=167): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 3.233700934s ago: executing program 9 (id=168): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x25}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 3.13577924s ago: executing program 8 (id=169): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x10100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) 3.131865221s ago: executing program 8 (id=170): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x2e, 0xfffc) 3.118061623s ago: executing program 8 (id=171): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40306727, &(0x7f00000000c0)) 3.106180485s ago: executing program 8 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0xbd, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xd, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x3, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0xe}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x92}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0x6, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x4, 0xd, '\x00', 0x8}, {0xff, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x7f, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x8}, {0x7, 0x3, 0x4}]}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x3}) 3.01837633s ago: executing program 8 (id=174): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000313"], 0x0, 0x0}, 0x0) 1.224950813s ago: executing program 9 (id=184): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x5a5}, 0x0, &(0x7f00000006c0)={0x40, 0xb, 0x2, "c345"}, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x8}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 991.747702ms ago: executing program 8 (id=185): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000070a01040000000000000000020000000073797a30000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 203.059315ms ago: executing program 7 (id=188): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 189.425668ms ago: executing program 7 (id=189): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) 178.17877ms ago: executing program 7 (id=190): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) ppoll(&(0x7f0000000240)=[{r0, 0x63}], 0x1, &(0x7f0000000280), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) syz_open_procfs(0x0, 0x0) 152.099284ms ago: executing program 7 (id=191): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 32.999854ms ago: executing program 7 (id=192): creat(&(0x7f0000000000)='./file0\x00', 0x40) mkdir(&(0x7f00000001c0)='./bus\x00', 0x57) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) 0s ago: executing program 7 (id=193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 28.315027][ T36] audit: type=1400 audit(1790912681.860:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.316129][ T286] cgroup: Unknown subsys name 'net' [ 28.337896][ T36] audit: type=1400 audit(1790912681.870:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.369749][ T36] audit: type=1400 audit(1790912681.900:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.369971][ T286] cgroup: Unknown subsys name 'devices' [ 28.497524][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.503400][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.595866][ T36] audit: type=1400 audit(1790912682.150:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.619357][ T36] audit: type=1400 audit(1790912682.150:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.644422][ T36] audit: type=1400 audit(1790912682.150:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.653751][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.677078][ T36] audit: type=1400 audit(1790912682.230:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.703215][ T36] audit: type=1400 audit(1790912682.230:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.736947][ T36] audit: type=1400 audit(1790912682.290:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.762921][ T36] audit: type=1400 audit(1790912682.290:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.763165][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.589543][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.596847][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.604087][ T293] bridge_slave_0: entered allmulticast mode [ 29.610551][ T293] bridge_slave_0: entered promiscuous mode [ 29.618999][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.626217][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.633309][ T293] bridge_slave_1: entered allmulticast mode [ 29.639709][ T293] bridge_slave_1: entered promiscuous mode [ 29.689208][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.696353][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.703442][ T295] bridge_slave_0: entered allmulticast mode [ 29.710002][ T295] bridge_slave_0: entered promiscuous mode [ 29.718685][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.725904][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.733180][ T295] bridge_slave_1: entered allmulticast mode [ 29.739688][ T295] bridge_slave_1: entered promiscuous mode [ 29.755775][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.762857][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.770010][ T294] bridge_slave_0: entered allmulticast mode [ 29.776396][ T294] bridge_slave_0: entered promiscuous mode [ 29.784028][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791155][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.798413][ T294] bridge_slave_1: entered allmulticast mode [ 29.804731][ T294] bridge_slave_1: entered promiscuous mode [ 29.866671][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.874009][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.881359][ T296] bridge_slave_0: entered allmulticast mode [ 29.887767][ T296] bridge_slave_0: entered promiscuous mode [ 29.897432][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.904678][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.911834][ T296] bridge_slave_1: entered allmulticast mode [ 29.918342][ T296] bridge_slave_1: entered promiscuous mode [ 30.022277][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.029382][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.072008][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.079194][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.086626][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.093699][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.107870][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.114923][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.122411][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129551][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.154245][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.161428][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.168763][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.175930][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.195950][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.203293][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.211250][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.218616][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.226501][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.233836][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.241325][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.259530][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.267092][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.279267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.286352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.306378][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.313651][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.332197][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339393][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.358268][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.365886][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.382018][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.389117][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.407363][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.414628][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.423947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.431064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.470846][ T295] veth0_vlan: entered promiscuous mode [ 30.479907][ T293] veth0_vlan: entered promiscuous mode [ 30.493820][ T296] veth0_vlan: entered promiscuous mode [ 30.510782][ T295] veth1_macvtap: entered promiscuous mode [ 30.526855][ T296] veth1_macvtap: entered promiscuous mode [ 30.540928][ T294] veth0_vlan: entered promiscuous mode [ 30.554875][ T293] veth1_macvtap: entered promiscuous mode [ 30.586721][ T294] veth1_macvtap: entered promiscuous mode [ 30.594444][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.867038][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.045944][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.093298][ T380] input: syz0 as /devices/virtual/input/input4 [ 31.197617][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.220154][ T45] usb 2-1: config 1 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 31.240822][ T45] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 31.264889][ T45] usb 2-1: config 1 interface 0 has no altsetting 1 [ 31.280076][ T45] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 31.294228][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.302630][ T45] usb 2-1: Product: syz [ 31.307182][ T45] usb 2-1: Manufacturer: syz [ 31.311817][ T45] usb 2-1: SerialNumber: syz [ 31.372057][ T406] batadv_slave_1: entered promiscuous mode [ 31.383084][ T406] batadv_slave_1: left promiscuous mode [ 31.831445][ T430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.048162][ T449] capability: warning: `syz.3.61' uses deprecated v2 capabilities in a way that may be insecure [ 32.101247][ T457] program syz.3.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.132148][ T461] ======================================================= [ 32.132148][ T461] WARNING: The mand mount option has been deprecated and [ 32.132148][ T461] and is ignored by this kernel. Remove the mand [ 32.132148][ T461] option from the mount to silence this warning. [ 32.132148][ T461] ======================================================= [ 32.249646][ T13] bridge_slave_1: left allmulticast mode [ 32.255426][ T13] bridge_slave_1: left promiscuous mode [ 32.261243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.270294][ T13] bridge_slave_0: left allmulticast mode [ 32.276320][ T13] bridge_slave_0: left promiscuous mode [ 32.282179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.419660][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.427004][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.438161][ T499] bridge_slave_0: entered allmulticast mode [ 32.444940][ T499] bridge_slave_0: entered promiscuous mode [ 32.456935][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.464169][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.471561][ T499] bridge_slave_1: entered allmulticast mode [ 32.478515][ T499] bridge_slave_1: entered promiscuous mode [ 32.496211][ T13] veth1_macvtap: left promiscuous mode [ 32.501917][ T13] veth0_vlan: left promiscuous mode [ 32.582005][ T512] bridge0: entered allmulticast mode [ 32.594112][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.601526][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.608857][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.615918][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.655008][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.663119][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.680131][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.687269][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.697185][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.704821][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.736815][ T499] veth0_vlan: entered promiscuous mode [ 32.750433][ T499] veth1_macvtap: entered promiscuous mode [ 32.848039][ T528] netlink: 68 bytes leftover after parsing attributes in process `syz.0.84'. [ 33.337907][ T36] kauditd_printk_skb: 158 callbacks suppressed [ 33.337927][ T36] audit: type=1400 audit(1790912686.890:232): avc: denied { mount } for pid=625 comm="syz.2.101" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.366929][ T626] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 33.415950][ T36] audit: type=1400 audit(1790912686.940:233): avc: denied { relabelto } for pid=625 comm="syz.2.101" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 33.780757][ T45] usb 2-1: USB disconnect, device number 2 [ 33.789727][ T36] audit: type=1326 audit(1790912687.340:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=635 comm="syz.1.105" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60e1f9e159 code=0x0 [ 33.856819][ T36] audit: type=1400 audit(1790912687.410:235): avc: denied { mounton } for pid=635 comm="syz.1.105" path="/proc/11/task/12/net" dev="proc" ino=5387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.946792][ T36] audit: type=1400 audit(1790912687.500:236): avc: denied { bind } for pid=640 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.986225][ T36] audit: type=1400 audit(1790912687.540:237): avc: denied { write } for pid=644 comm="syz.0.109" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.011440][ T36] audit: type=1400 audit(1790912687.560:238): avc: denied { ioctl } for pid=644 comm="syz.0.109" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.262790][ T36] audit: type=1400 audit(1790912687.810:239): avc: denied { create } for pid=656 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.284027][ T36] audit: type=1400 audit(1790912687.830:240): avc: denied { ioctl } for pid=656 comm="syz.4.115" path="socket:[6228]" dev="sockfs" ino=6228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.314783][ T36] audit: type=1400 audit(1790912687.830:241): avc: denied { bind } for pid=656 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.420382][ T674] bridge0: port 3(veth0_to_bridge) entered blocking state [ 34.428221][ T674] bridge0: port 3(veth0_to_bridge) entered disabled state [ 34.436001][ T674] veth0_to_bridge: entered allmulticast mode [ 34.442862][ T674] veth0_to_bridge: entered promiscuous mode [ 34.449538][ T674] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 34.464054][ T674] bridge0: port 3(veth0_to_bridge) entered blocking state [ 34.471330][ T674] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 34.539346][ T688] FAULT_INJECTION: forcing a failure. [ 34.539346][ T688] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.553638][ T688] CPU: 0 UID: 0 PID: 688 Comm: syz.4.130 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.553677][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.553690][ T688] Call Trace: [ 34.553697][ T688] [ 34.553705][ T688] __dump_stack+0x21/0x30 [ 34.553742][ T688] dump_stack_lvl+0x140/0x1c0 [ 34.553770][ T688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.553799][ T688] ? __mod_memcg_lruvec_state+0x186/0x460 [ 34.553827][ T688] dump_stack+0x19/0x20 [ 34.553854][ T688] should_fail_ex+0x3c2/0x510 [ 34.553878][ T688] should_fail_alloc_page+0xec/0x110 [ 34.553903][ T688] __alloc_pages_noprof+0x1c0/0x7e0 [ 34.553932][ T688] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.553960][ T688] ? filemap_get_entry+0x41b/0x490 [ 34.553986][ T688] __folio_alloc_noprof+0x14/0x80 [ 34.554013][ T688] __filemap_get_folio+0x798/0xe80 [ 34.554038][ T688] ? __kasan_check_write+0x18/0x20 [ 34.554058][ T688] ? __cfi___filemap_get_folio+0x10/0x10 [ 34.554082][ T688] ? __cfi_folio_end_read+0x10/0x10 [ 34.554115][ T688] ? aio_setup_ring+0x2f4/0xc60 [ 34.554144][ T688] aio_setup_ring+0x38e/0xc60 [ 34.554172][ T688] ? free_ioctx_reqs+0x170/0x170 [ 34.554199][ T688] ioctx_alloc+0x337/0x840 [ 34.554226][ T688] __se_sys_io_setup+0x6f/0x230 [ 34.554252][ T688] __x64_sys_io_setup+0x5f/0x80 [ 34.554277][ T688] x64_sys_call+0x26a4/0x2ee0 [ 34.554297][ T688] do_syscall_64+0x57/0xf0 [ 34.554318][ T688] ? clear_bhb_loop+0x50/0xa0 [ 34.554343][ T688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.554370][ T688] RIP: 0033:0x7f412ff9e159 [ 34.554389][ T688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.554406][ T688] RSP: 002b:00007f4130daa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 34.554431][ T688] RAX: ffffffffffffffda RBX: 00007f4130225fa0 RCX: 00007f412ff9e159 [ 34.554448][ T688] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 34.554462][ T688] RBP: 00007f413003506b R08: 0000000000000000 R09: 0000000000000000 [ 34.554475][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.554488][ T688] R13: 00007f4130226038 R14: 00007f4130225fa0 R15: 00007ffdf5417d38 [ 34.554507][ T688] [ 34.825192][ T695] FAULT_INJECTION: forcing a failure. [ 34.825192][ T695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.838931][ T695] CPU: 0 UID: 0 PID: 695 Comm: syz.1.133 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.838968][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.838981][ T695] Call Trace: [ 34.838988][ T695] [ 34.838997][ T695] __dump_stack+0x21/0x30 [ 34.839031][ T695] dump_stack_lvl+0x140/0x1c0 [ 34.839057][ T695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.839085][ T695] ? is_bpf_text_address+0x17b/0x1a0 [ 34.839118][ T695] dump_stack+0x19/0x20 [ 34.839144][ T695] should_fail_ex+0x3c2/0x510 [ 34.839171][ T695] should_fail_alloc_page+0xec/0x110 [ 34.839197][ T695] __alloc_pages_noprof+0x1c0/0x7e0 [ 34.839227][ T695] ? kernel_text_address+0xa9/0xe0 [ 34.839254][ T695] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.839283][ T695] ? unwind_get_return_address+0x51/0x90 [ 34.839312][ T695] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.839340][ T695] get_free_pages_noprof+0x14/0x40 [ 34.839369][ T695] kasan_populate_vmalloc_pte+0x4c/0x170 [ 34.839392][ T695] __apply_to_page_range+0x7c2/0xd00 [ 34.839419][ T695] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 34.839442][ T695] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.839469][ T695] ? apply_to_page_range+0x60/0x60 [ 34.839494][ T695] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 34.839529][ T695] apply_to_page_range+0x3f/0x60 [ 34.839554][ T695] kasan_populate_vmalloc+0x64/0x80 [ 34.839577][ T695] alloc_vmap_area+0x1e8e/0x26f0 [ 34.839611][ T695] ? kasan_save_alloc_info+0x3a/0x50 [ 34.839633][ T695] ? vm_map_ram+0xdd0/0xdd0 [ 34.839664][ T695] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 34.839689][ T695] ? __get_vm_area_node+0x150/0x390 [ 34.839719][ T695] __get_vm_area_node+0x1f8/0x390 [ 34.839750][ T695] __vmalloc_node_range_noprof+0x340/0x1300 [ 34.839769][ T695] ? copy_process+0x57c/0x3350 [ 34.839797][ T695] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 34.839818][ T695] ? kasan_save_alloc_info+0x3a/0x50 [ 34.839839][ T695] ? __kasan_slab_alloc+0x73/0x90 [ 34.839866][ T695] ? arch_dup_task_struct+0x5b/0xe0 [ 34.839899][ T695] ? __asan_memcpy+0x5a/0x80 [ 34.839922][ T695] dup_task_struct+0x5d6/0xd80 [ 34.839949][ T695] ? copy_process+0x57c/0x3350 [ 34.839975][ T695] ? _raw_spin_lock_irq+0x93/0x120 [ 34.839997][ T695] ? copy_process+0x3350/0x3350 [ 34.840022][ T695] ? __kasan_check_write+0x18/0x20 [ 34.840044][ T695] copy_process+0x57c/0x3350 [ 34.840070][ T695] ? check_stack_object+0x138/0x150 [ 34.840093][ T695] ? __check_object_size+0xdc/0x870 [ 34.840116][ T695] ? __cfi_copy_process+0x10/0x10 [ 34.840142][ T695] ? copy_clone_args_from_user+0x643/0x740 [ 34.840175][ T695] kernel_clone+0x233/0x810 [ 34.840203][ T695] ? __delayed_free_task+0x40/0x40 [ 34.840234][ T695] ? __cfi_kernel_clone+0x10/0x10 [ 34.840264][ T695] __se_sys_clone3+0x33e/0x360 [ 34.840293][ T695] ? __x64_sys_clone3+0x80/0x80 [ 34.840325][ T695] ? __se_sys_futex+0x13c/0x320 [ 34.840353][ T695] ? fput+0x1a4/0x230 [ 34.840384][ T695] ? __kasan_check_write+0x18/0x20 [ 34.840407][ T695] __x64_sys_clone3+0x5f/0x80 [ 34.840436][ T695] x64_sys_call+0x28fc/0x2ee0 [ 34.840456][ T695] do_syscall_64+0x57/0xf0 [ 34.840478][ T695] ? clear_bhb_loop+0x50/0xa0 [ 34.840517][ T695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.840545][ T695] RIP: 0033:0x7f60e1f9e159 [ 34.840564][ T695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.840582][ T695] RSP: 002b:00007f60e2f25ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 34.840609][ T695] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f60e1f9e159 [ 34.840627][ T695] RDX: 00007f60e2f25f10 RSI: 0000000000000058 RDI: 00007f60e2f25f10 [ 34.840643][ T695] RBP: 00007f60e203506b R08: 0000000000000000 R09: 0000000000000058 [ 34.840658][ T695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.840673][ T695] R13: 00007f60e2226038 R14: 00007f60e2225fa0 R15: 00007fff863561a8 [ 34.840691][ T695] [ 34.840717][ T695] syz.1.133: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 35.235416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.239457][ T695] ,cpuset= [ 35.241474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.256028][ T695] syz1 [ 35.266448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.269460][ T695] ,mems_allowed=0 [ 35.281824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.284575][ T695] [ 35.296688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.300330][ T695] CPU: 0 UID: 0 PID: 695 Comm: syz.1.133 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 35.300359][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.300370][ T695] Call Trace: [ 35.300377][ T695] [ 35.300385][ T695] __dump_stack+0x21/0x30 [ 35.300417][ T695] dump_stack_lvl+0x140/0x1c0 [ 35.300444][ T695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.300472][ T695] dump_stack+0x19/0x20 [ 35.300496][ T695] warn_alloc+0x1e7/0x2c0 [ 35.300524][ T695] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.300550][ T695] ? __cfi_warn_alloc+0x10/0x10 [ 35.300576][ T695] ? __get_vm_area_node+0x211/0x390 [ 35.300605][ T695] ? __get_vm_area_node+0x211/0x390 [ 35.300633][ T695] __vmalloc_node_range_noprof+0x365/0x1300 [ 35.300665][ T695] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 35.300684][ T695] ? kasan_save_alloc_info+0x3a/0x50 [ 35.300703][ T695] ? __kasan_slab_alloc+0x73/0x90 [ 35.300726][ T695] ? arch_dup_task_struct+0x5b/0xe0 [ 35.300755][ T695] ? __asan_memcpy+0x5a/0x80 [ 35.300775][ T695] dup_task_struct+0x5d6/0xd80 [ 35.300800][ T695] ? copy_process+0x57c/0x3350 [ 35.300824][ T695] ? _raw_spin_lock_irq+0x93/0x120 [ 35.300845][ T695] ? copy_process+0x3350/0x3350 [ 35.300869][ T695] ? __kasan_check_write+0x18/0x20 [ 35.300911][ T695] copy_process+0x57c/0x3350 [ 35.300935][ T695] ? check_stack_object+0x138/0x150 [ 35.300957][ T695] ? __check_object_size+0xdc/0x870 [ 35.300979][ T695] ? __cfi_copy_process+0x10/0x10 [ 35.301004][ T695] ? copy_clone_args_from_user+0x643/0x740 [ 35.301033][ T695] kernel_clone+0x233/0x810 [ 35.301056][ T695] ? __delayed_free_task+0x40/0x40 [ 35.301091][ T695] ? __cfi_kernel_clone+0x10/0x10 [ 35.301117][ T695] __se_sys_clone3+0x33e/0x360 [ 35.301142][ T695] ? __x64_sys_clone3+0x80/0x80 [ 35.301169][ T695] ? __se_sys_futex+0x13c/0x320 [ 35.301195][ T695] ? fput+0x1a4/0x230 [ 35.301221][ T695] ? __kasan_check_write+0x18/0x20 [ 35.301242][ T695] __x64_sys_clone3+0x5f/0x80 [ 35.301267][ T695] x64_sys_call+0x28fc/0x2ee0 [ 35.301286][ T695] do_syscall_64+0x57/0xf0 [ 35.301305][ T695] ? clear_bhb_loop+0x50/0xa0 [ 35.301330][ T695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.301354][ T695] RIP: 0033:0x7f60e1f9e159 [ 35.301376][ T695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.301393][ T695] RSP: 002b:00007f60e2f25ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 35.301414][ T695] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f60e1f9e159 [ 35.301429][ T695] RDX: 00007f60e2f25f10 RSI: 0000000000000058 RDI: 00007f60e2f25f10 [ 35.301443][ T695] RBP: 00007f60e203506b R08: 0000000000000000 R09: 0000000000000058 [ 35.301456][ T695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.301468][ T695] R13: 00007f60e2226038 R14: 00007f60e2225fa0 R15: 00007fff863561a8 [ 35.301485][ T695] [ 35.301527][ T695] Mem-Info: [ 35.312356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.314843][ T695] active_anon:5359 inactive_anon:123 isolated_anon:0 [ 35.314843][ T695] active_file:5838 inactive_file:2020 isolated_file:0 [ 35.314843][ T695] unevictable:0 dirty:1505 writeback:0 [ 35.314843][ T695] slab_reclaimable:4514 slab_unreclaimable:70280 [ 35.314843][ T695] mapped:24124 shmem:163 pagetables:977 [ 35.314843][ T695] sec_pagetables:0 bounce:0 [ 35.314843][ T695] kernel_misc_reclaimable:0 [ 35.314843][ T695] free:1549831 free_pcp:2200 free_cma:0 [ 35.326617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.326703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.338239][ T695] Node 0 active_anon:21436kB inactive_anon:492kB active_file:23352kB inactive_file:8080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96496kB dirty:6020kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6244kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no [ 35.348449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.351704][ T695] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:68kB free_cma:0kB [ 35.354669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.359008][ T695] lowmem_reserve[]: [ 35.796124][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.019478][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 36.069129][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.397309][ T9] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 36.637524][ T9] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 36.997610][ T9] usb 5-1: config 4 has no interface number 0 [ 37.154229][ T9] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 37.177833][ T695] 0 3921 3921 [ 37.181290][ T695] Normal free:3240560kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21436kB inactive_anon:456kB active_file:23352kB inactive_file:8080kB unevictable:0kB writepending:6020kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:732kB local_pcp:384kB free_cma:0kB [ 37.215502][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.667071][ T9] usb 5-1: Product: syz [ 37.671309][ T9] usb 5-1: Manufacturer: syz [ 38.068811][ T9] usb 5-1: SerialNumber: syz [ 38.487268][ T695] lowmem_reserve[]: 0 0 0 [ 38.493846][ T695] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 38.755435][ T695] Normal: 160*4kB (ME) 89*8kB (UME) 51*16kB (ME) 49*32kB (ME) 90*64kB (UME) 62*128kB (UME) 38*256kB (UME) 25*512kB (UME) 14*1024kB (UME) 13*2048kB (UME) 769*4096kB (M) = 3230744kB [ 39.288355][ T695] 8017 total pagecache pages [ 40.245273][ C1] net_ratelimit: 109037 callbacks suppressed [ 40.245296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.245389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 40.251467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.263973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 40.277108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 40.288190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 40.299995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.312103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 40.324023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.336362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 40.686013][ T695] 0 pages in swap cache [ 41.376948][ T695] Free swap = 124728kB [ 42.176659][ T9] usb 5-1: can't set config #4, error -71 [ 42.935521][ T9] usb 5-1: USB disconnect, device number 2 [ 43.489931][ T695] Total swap = 124996kB [ 43.494163][ T695] 2097051 pages RAM [ 43.569358][ T695] 0 pages HighMem/MovableOnly [ 43.615624][ T695] 352242 pages reserved [ 43.797510][ T695] 0 pages cma reserved [ 44.167737][ T695] Memory allocations: [ 44.875841][ T695] 0 B 0 init/main.c:1477 func:do_initcalls [ 45.255275][ C1] net_ratelimit: 110837 callbacks suppressed [ 45.255299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.255485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 45.261558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.273995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 45.285942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.298037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 45.309780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.321869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 45.334203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.346471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 46.667215][ T695] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 46.977849][ T695] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 48.669525][ T695] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 49.317182][ T695] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 50.168465][ T695] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 50.260526][ T695] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 50.268527][ C1] net_ratelimit: 114022 callbacks suppressed [ 50.268548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.268602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 50.268629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.268673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 50.268709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.268793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.268870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.268963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.268988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 50.269039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 51.891027][ C0] sched: DL replenish lagged too much [ 55.275262][ C1] net_ratelimit: 120499 callbacks suppressed [ 55.275286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.275447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 55.281475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.293646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 55.305712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.317916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 55.329675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.341747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 55.353761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.365943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 57.038365][ T695] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 57.401350][ T695] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 58.039216][ T695] 0 B 0 init/initramfs.c:101 func:find_link [ 60.285227][ C0] net_ratelimit: 117054 callbacks suppressed [ 60.285251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 60.285273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.291744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 60.303680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 60.315742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 60.327835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.340264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 60.352117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.364198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 60.376176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.295248][ C1] net_ratelimit: 113747 callbacks suppressed [ 65.295270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.295310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 65.301352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.313389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 65.325635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.337959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 65.349817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 65.362252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 65.374010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.385928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 70.305261][ C1] net_ratelimit: 115150 callbacks suppressed [ 70.305285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.305357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 70.311470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.323876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 70.335617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.347954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 70.360069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.372157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 70.384361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.396669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 75.315245][ C1] net_ratelimit: 117891 callbacks suppressed [ 75.315267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.315326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 75.321633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.333664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 75.345634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.358341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 75.370346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.382676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 75.394552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.406607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 80.325245][ C1] net_ratelimit: 114899 callbacks suppressed [ 80.325268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.325340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 80.331511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.343727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 80.355805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.367997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 80.379960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.392337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 80.404208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.416459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.335229][ C0] net_ratelimit: 112506 callbacks suppressed [ 85.335250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.335303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.341600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.354146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.366502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.378303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.390949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.402942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.414900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 85.427392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.345265][ C0] net_ratelimit: 113181 callbacks suppressed [ 90.345291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 90.345310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.351767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 90.363723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.375640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 90.387618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.399784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 90.411642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.424339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 90.436455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.355258][ C0] net_ratelimit: 111572 callbacks suppressed [ 95.355283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 95.355302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.361750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 95.373465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.385371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 95.397786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.409909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 95.421896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.434450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 95.446369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.365263][ C1] net_ratelimit: 110589 callbacks suppressed [ 100.365287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.365391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 100.371361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.383561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 100.395680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.407649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 100.419813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.432005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 100.444031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.456520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 105.375202][ C1] net_ratelimit: 113992 callbacks suppressed [ 105.375225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.375303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 105.381413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.393314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 105.405467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.417617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 105.429799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.441967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 105.454287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.466504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 109.420256][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 109.420275][ T36] audit: type=1400 audit(1790912762.970:256): avc: denied { mounton } for pid=725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.385285][ C0] net_ratelimit: 111739 callbacks suppressed [ 110.385308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 110.385337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.391470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 110.403568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.415758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 110.428094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.440699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 110.453263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.465617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 110.477786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.395255][ C1] net_ratelimit: 114243 callbacks suppressed [ 115.395279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.395484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 115.401440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.413633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 115.425806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.437691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 115.449866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.462023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 115.473910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.486098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 120.405234][ C1] net_ratelimit: 113923 callbacks suppressed [ 120.405264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.405528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 120.411365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.423361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 120.435606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.447965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 120.460255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.472569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 120.485021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.497783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 125.415244][ C1] net_ratelimit: 113966 callbacks suppressed [ 125.415268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.415468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 125.421453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.434410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 125.446725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.459103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 125.471252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.483648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 125.495866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.508329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 130.425215][ C1] net_ratelimit: 114756 callbacks suppressed [ 130.425239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.425315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 130.431317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.443355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 130.455437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.467330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 130.479337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.491323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 130.503387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.515674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 135.435208][ C1] net_ratelimit: 116579 callbacks suppressed [ 135.435240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.435293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 135.441340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.453350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 135.465532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.477771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 135.489836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.502036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 135.514240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.526585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 140.445228][ C1] net_ratelimit: 111421 callbacks suppressed [ 140.445251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.445301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 140.451343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.463587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 140.475593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.487790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 140.500172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.512360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 140.524363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.536886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 145.455217][ C1] net_ratelimit: 113815 callbacks suppressed [ 145.455248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.455518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 145.461344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.473286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 145.485565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.497697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 145.509857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.521997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 145.533821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.546358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 150.465253][ C1] net_ratelimit: 113239 callbacks suppressed [ 150.465276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.465338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 150.471363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.483561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 150.495595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.507766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 150.519849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.531853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 150.544206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.556765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 155.475197][ C1] net_ratelimit: 111102 callbacks suppressed [ 155.475220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.475254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 155.481499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.494015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 155.506233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.518524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 155.530456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.543384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 155.555382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.567477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 160.485225][ C1] net_ratelimit: 113893 callbacks suppressed [ 160.485249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.485547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 160.491647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.504346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 160.517135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.529628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 160.541640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.553855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 160.566079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.578931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 165.495195][ C1] net_ratelimit: 110140 callbacks suppressed [ 165.495220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.495634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 165.501648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.514955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 165.527303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.541076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 165.553357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.566116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 165.578399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.591878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 170.505223][ C1] net_ratelimit: 110250 callbacks suppressed [ 170.505247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.505359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 170.511448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.523863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 170.535943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.548353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 170.561839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.574448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 170.587508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.601677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 175.515190][ C1] net_ratelimit: 113263 callbacks suppressed [ 175.515214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.515238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 175.521550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.533981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 175.546043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.558219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 175.570875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.583727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 175.596036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.608935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 180.525206][ C1] net_ratelimit: 116608 callbacks suppressed [ 180.525229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.525719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 180.531336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.543420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 180.555548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.568351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 180.585253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.592417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 180.604531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.616667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 185.535179][ C1] net_ratelimit: 119635 callbacks suppressed [ 185.535203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.535626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 185.541498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.553575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 185.565748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.577903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 185.590139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.602297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 185.615183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.626670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.545193][ C0] net_ratelimit: 127067 callbacks suppressed [ 190.545217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.545243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.551389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.563421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.575524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.587800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.600294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.612415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.624479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c1:2f:14:e7:87, vlan:0) [ 190.636596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.926434][ T572] bridge_slave_1: left allmulticast mode [ 193.946923][ T572] bridge_slave_1: left promiscuous mode [ 194.195768][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.346485][ T572] bridge_slave_0: left allmulticast mode [ 194.535524][ T572] bridge_slave_0: left promiscuous mode [ 194.686802][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.795912][ T572] veth0_to_bridge: left allmulticast mode [ 194.825892][ T572] veth0_to_bridge: left promiscuous mode [ 194.845713][ T572] bridge0: port 3(veth0_to_bridge) entered disabled state [ 194.853687][ T572] bridge_slave_1: left allmulticast mode [ 194.859595][ T572] bridge_slave_1: left promiscuous mode [ 194.865279][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.872746][ T572] bridge_slave_0: left allmulticast mode [ 194.878557][ T572] bridge_slave_0: left promiscuous mode [ 194.884537][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.892602][ T572] bridge_slave_1: left allmulticast mode [ 194.898689][ T572] bridge_slave_1: left promiscuous mode [ 194.904476][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.912755][ T572] bridge_slave_0: left allmulticast mode [ 194.918645][ T572] bridge_slave_0: left promiscuous mode [ 194.924371][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.932343][ T572] bridge_slave_1: left allmulticast mode [ 194.938351][ T572] bridge_slave_1: left promiscuous mode [ 194.944095][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.951588][ T572] bridge_slave_0: left allmulticast mode [ 194.957591][ T572] bridge_slave_0: left promiscuous mode [ 194.963401][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.127185][ T572] bridge0 (unregistering): left allmulticast mode [ 195.281106][ T572] veth1_macvtap: left promiscuous mode [ 195.286667][ T572] veth0_vlan: left promiscuous mode [ 195.292474][ T572] veth1_macvtap: left promiscuous mode [ 195.298806][ T572] veth0_vlan: left promiscuous mode [ 195.312628][ T572] veth1_macvtap: left promiscuous mode [ 195.332585][ T572] veth0_vlan: left promiscuous mode [ 195.355974][ T572] veth1_macvtap: left promiscuous mode [ 195.361604][ T572] veth0_vlan: left promiscuous mode [ 195.570561][ T734] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.577903][ T734] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.587390][ T734] bridge_slave_0: entered allmulticast mode [ 195.594317][ T734] bridge_slave_0: entered promiscuous mode [ 195.602271][ T734] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.609689][ T734] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.617040][ T734] bridge_slave_1: entered allmulticast mode [ 195.623478][ T734] bridge_slave_1: entered promiscuous mode [ 195.655020][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.662565][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.669854][ T736] bridge_slave_0: entered allmulticast mode [ 195.676474][ T736] bridge_slave_0: entered promiscuous mode [ 195.684305][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.691865][ T736] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.699106][ T736] bridge_slave_1: entered allmulticast mode [ 195.705857][ T736] bridge_slave_1: entered promiscuous mode [ 195.735213][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.742335][ T739] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.749763][ T739] bridge_slave_0: entered allmulticast mode [ 195.756023][ T739] bridge_slave_0: entered promiscuous mode [ 195.762511][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.769842][ T739] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.777336][ T739] bridge_slave_1: entered allmulticast mode [ 195.783913][ T739] bridge_slave_1: entered promiscuous mode [ 195.919788][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.927047][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.934418][ T733] bridge_slave_0: entered allmulticast mode [ 195.940959][ T733] bridge_slave_0: entered promiscuous mode [ 195.949622][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.957077][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.964333][ T733] bridge_slave_1: entered allmulticast mode [ 195.971534][ T733] bridge_slave_1: entered promiscuous mode [ 196.020825][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.028560][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.036036][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.043335][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.075078][ T734] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.082570][ T734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.089988][ T734] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.097225][ T734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.106894][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.114394][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.121909][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.129092][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.164673][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.171882][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.179573][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.186820][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.216798][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.224211][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.232249][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.239783][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.249283][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.258258][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.266733][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.274401][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.290714][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.298189][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.316580][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.323732][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.331878][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.339321][ T622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.358679][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.365871][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.373917][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.381451][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.390282][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.397392][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.405700][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.412763][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.420625][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.427783][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.488997][ T733] veth0_vlan: entered promiscuous mode [ 196.495980][ T734] veth0_vlan: entered promiscuous mode [ 196.521114][ T739] veth0_vlan: entered promiscuous mode [ 196.527267][ T733] veth1_macvtap: entered promiscuous mode [ 196.539770][ T734] veth1_macvtap: entered promiscuous mode [ 196.556019][ T736] veth0_vlan: entered promiscuous mode [ 196.571791][ T739] veth1_macvtap: entered promiscuous mode [ 196.611885][ T736] veth1_macvtap: entered promiscuous mode [ 196.632626][ T36] audit: type=1400 audit(1790912850.180:257): avc: denied { read } for pid=752 comm="syz.6.142" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.638684][ T753] rust_binder: 752:753 error while translating object: EINVAL [ 196.656568][ T36] audit: type=1400 audit(1790912850.180:258): avc: denied { open } for pid=752 comm="syz.6.142" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.668551][ T753] rust_binder: Failure in copy_transaction_data: EINVAL [ 196.689014][ T36] audit: type=1400 audit(1790912850.180:259): avc: denied { write } for pid=752 comm="syz.6.142" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.691872][ T753] rust_binder: 752:753 transaction async to 752:0 failed EINVAL, code 0 size 96-24 [ 196.696519][ T36] audit: type=1400 audit(1790912850.180:260): avc: denied { map } for pid=752 comm="syz.6.142" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.743141][ T737] rust_binder: 752: undelivered TRANSACTION_ERROR: 29201 [ 196.757451][ T36] audit: type=1400 audit(1790912850.180:261): avc: denied { ioctl } for pid=752 comm="syz.6.142" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.790189][ T36] audit: type=1400 audit(1790912850.180:262): avc: denied { set_context_mgr } for pid=752 comm="syz.6.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.831233][ T36] audit: type=1400 audit(1790912850.180:263): avc: denied { call } for pid=752 comm="syz.6.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.850140][ T36] audit: type=1400 audit(1790912850.180:264): avc: denied { transfer } for pid=752 comm="syz.6.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.879186][ T36] audit: type=1400 audit(1790912850.350:265): avc: denied { write } for pid=754 comm="syz.6.145" name="trace_options" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 196.924249][ T36] audit: type=1400 audit(1790912850.430:266): avc: denied { read write } for pid=762 comm="syz.7.143" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 196.945334][ T774] FAULT_INJECTION: forcing a failure. [ 196.945334][ T774] name failslab, interval 1, probability 0, space 0, times 1 [ 196.960954][ T733] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 196.962021][ T774] CPU: 0 UID: 0 PID: 774 Comm: syz.5.149 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 196.962053][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.962066][ T774] Call Trace: [ 196.962073][ T774] [ 196.962081][ T774] __dump_stack+0x21/0x30 [ 196.962116][ T774] dump_stack_lvl+0x140/0x1c0 [ 196.962145][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.962174][ T774] dump_stack+0x19/0x20 [ 196.962202][ T774] should_fail_ex+0x3c2/0x510 [ 196.962227][ T774] ? sk_prot_alloc+0x104/0x3a0 [ 196.962251][ T774] should_failslab+0xac/0x100 [ 196.962276][ T774] __kmalloc_noprof+0x69/0x510 [ 196.962297][ T774] ? sk_prot_alloc+0x104/0x3a0 [ 196.962322][ T774] ? avc_has_perm_noaudit+0x289/0x360 [ 196.962348][ T774] sk_prot_alloc+0x104/0x3a0 [ 196.962373][ T774] sk_alloc+0x40/0x590 [ 196.962398][ T774] tun_chr_open+0x80/0x7f0 [ 196.962418][ T774] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 196.962441][ T774] ? __cfi_tun_chr_open+0x10/0x10 [ 196.962460][ T774] misc_open+0x2ec/0x370 [ 196.962481][ T774] chrdev_open+0x4e8/0x610 [ 196.962504][ T774] ? __cfi_chrdev_open+0x10/0x10 [ 196.962527][ T774] ? bpf_lsm_file_open+0xd/0x20 [ 196.962552][ T774] ? __cfi_chrdev_open+0x10/0x10 [ 196.962575][ T774] do_dentry_open+0x97c/0x1510 [ 196.962603][ T774] vfs_open+0x86/0x240 [ 196.962629][ T774] ? __cfi_vfs_open+0x10/0x10 [ 196.962656][ T774] ? may_open+0x352/0x430 [ 196.962682][ T774] path_openat+0x2c49/0x35a0 [ 196.962708][ T774] ? schedule+0xc5/0x240 [ 196.962731][ T774] ? kasan_save_alloc_info+0x3a/0x50 [ 196.962749][ T774] ? getname+0x1b/0x30 [ 196.962769][ T774] ? x64_sys_call+0xe69/0x2ee0 [ 196.962789][ T774] ? do_syscall_64+0x57/0xf0 [ 196.962811][ T774] ? do_filp_open+0x440/0x440 [ 196.962847][ T774] do_filp_open+0x1f2/0x440 [ 196.962873][ T774] ? __cfi_do_filp_open+0x10/0x10 [ 196.962901][ T774] ? alloc_fd+0x4c1/0x570 [ 196.962926][ T774] do_sys_openat2+0x134/0x1d0 [ 196.962953][ T774] ? fput+0x1a4/0x230 [ 196.962978][ T774] ? do_sys_open+0x100/0x100 [ 196.963006][ T774] __x64_sys_openat+0x13a/0x170 [ 196.963035][ T774] x64_sys_call+0xe69/0x2ee0 [ 196.963053][ T774] do_syscall_64+0x57/0xf0 [ 196.963072][ T774] ? clear_bhb_loop+0x50/0xa0 [ 196.963099][ T774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.963124][ T774] RIP: 0033:0x7f5e4ff9e159 [ 196.963142][ T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.963160][ T774] RSP: 002b:00007f5e50f3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.963183][ T774] RAX: ffffffffffffffda RBX: 00007f5e50225fa0 RCX: 00007f5e4ff9e159 [ 196.963200][ T774] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 196.963214][ T774] RBP: 00007f5e5003506b R08: 0000000000000000 R09: 0000000000000000 [ 196.963228][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.963240][ T774] R13: 00007f5e50226038 R14: 00007f5e50225fa0 R15: 00007fffdab9a068 [ 196.963257][ T774] [ 197.287689][ T733] CPU: 0 UID: 0 PID: 733 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 197.287728][ T733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.287740][ T733] Call Trace: [ 197.287746][ T733] [ 197.287755][ T733] __dump_stack+0x21/0x30 [ 197.287789][ T733] dump_stack_lvl+0x140/0x1c0 [ 197.287816][ T733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.287842][ T733] ? ___ratelimit+0x41c/0x5c0 [ 197.287866][ T733] ? __kasan_check_write+0x18/0x20 [ 197.287889][ T733] dump_stack+0x19/0x20 [ 197.287915][ T733] dump_header+0xd9/0x460 [ 197.287942][ T733] oom_kill_process+0x35d/0x640 [ 197.287968][ T733] out_of_memory+0x5d1/0xa20 [ 197.287991][ T733] ? __cfi_out_of_memory+0x10/0x10 [ 197.288015][ T733] ? mutex_lock_killable+0x97/0x1d0 [ 197.288042][ T733] ? __cfi_mutex_lock_killable+0x10/0x10 [ 197.288070][ T733] mem_cgroup_out_of_memory+0x2c5/0x390 [ 197.288092][ T733] ? css_next_descendant_pre+0x1ec/0x210 [ 197.288118][ T733] ? __kasan_check_write+0x18/0x20 [ 197.288139][ T733] ? drain_obj_stock+0xec0/0xec0 [ 197.288163][ T733] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 197.288185][ T733] try_charge_memcg+0x925/0xe10 [ 197.288215][ T733] ? __cfi_try_charge_memcg+0x10/0x10 [ 197.288246][ T733] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 197.288268][ T733] __read_swap_cache_async+0x496/0x860 [ 197.288295][ T733] ? __cfi___read_swap_cache_async+0x10/0x10 [ 197.288320][ T733] ? __asan_memset+0x39/0x50 [ 197.288351][ T733] ? blk_start_plug+0x71/0x1c0 [ 197.288376][ T733] swap_cluster_readahead+0x321/0x570 [ 197.288402][ T733] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 197.288426][ T733] ? dequeue_task_fair+0x248/0x640 [ 197.288447][ T733] ? sched_clock_noinstr+0xd/0x30 [ 197.288474][ T733] swapin_readahead+0x102/0x840 [ 197.288499][ T733] ? __cfi___filemap_get_folio+0x10/0x10 [ 197.288524][ T733] ? __cfi_swapin_readahead+0x10/0x10 [ 197.288548][ T733] ? _raw_spin_unlock+0x45/0x60 [ 197.288568][ T733] ? finish_task_switch+0x139/0x770 [ 197.288593][ T733] ? get_swap_device+0x10f/0x290 [ 197.288618][ T733] do_swap_page+0x4bc/0x4b30 [ 197.288642][ T733] ? __sched_text_start+0x10/0x10 [ 197.288664][ T733] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 197.288685][ T733] ? __cfi_do_swap_page+0x10/0x10 [ 197.288707][ T733] ? __cfi_default_wake_function+0x10/0x10 [ 197.288734][ T733] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 197.288763][ T733] handle_mm_fault+0x1238/0x1ba0 [ 197.288789][ T733] ? __cfi_handle_mm_fault+0x10/0x10 [ 197.288811][ T733] ? lock_vma_under_rcu+0x4cf/0x590 [ 197.288839][ T733] do_user_addr_fault+0x951/0x1230 [ 197.288858][ T733] ? fpregs_restore_userregs+0x11c/0x260 [ 197.288883][ T733] exc_page_fault+0x58/0xc0 [ 197.288908][ T733] asm_exc_page_fault+0x2b/0x30 [ 197.288933][ T733] RIP: 0033:0x7fe4c71592d7 [ 197.288951][ T733] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 197.288969][ T733] RSP: 002b:00007ffe746e53a0 EFLAGS: 00010202 [ 197.288989][ T733] RAX: 0000000000000000 RBX: 0000555574854500 RCX: 00007fe4c71592d7 [ 197.289004][ T733] RDX: 00007ffe746e53e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.289017][ T733] RBP: 00007ffe746e544c R08: 0000000000000000 R09: 0000000000000000 [ 197.289030][ T733] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 197.289044][ T733] R13: 00000000000927c0 R14: 00000000000300dc R15: 00007ffe746e54a0 [ 197.289060][ T733] [ 197.289086][ T733] memory: usage 0kB, limit 0kB, failcnt 57 [ 197.519171][ T785] FAULT_INJECTION: forcing a failure. [ 197.519171][ T785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.525982][ T733] memory+swap: usage 188kB, limit 9007199254740988kB, failcnt 0 [ 197.538170][ T785] CPU: 1 UID: 0 PID: 785 Comm: syz.7.155 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 197.538203][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.538217][ T785] Call Trace: [ 197.538223][ T785] [ 197.538231][ T785] __dump_stack+0x21/0x30 [ 197.538264][ T785] dump_stack_lvl+0x140/0x1c0 [ 197.538291][ T785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.538333][ T785] ? next_uptodate_folio+0xaca/0xb70 [ 197.538360][ T785] ? __cfi_folio_unlock+0x10/0x10 [ 197.538383][ T785] ? set_pte_range+0x42a/0x640 [ 197.538408][ T785] dump_stack+0x19/0x20 [ 197.538435][ T785] should_fail_ex+0x3c2/0x510 [ 197.538462][ T785] should_fail_alloc_page+0xec/0x110 [ 197.538489][ T785] __alloc_pages_noprof+0x1c0/0x7e0 [ 197.538520][ T785] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 197.538550][ T785] ? __cfi_filemap_map_pages+0x10/0x10 [ 197.538576][ T785] __folio_alloc_noprof+0x14/0x80 [ 197.538604][ T785] folio_prealloc+0x46/0x220 [ 197.538629][ T785] do_pte_missing+0x16af/0x4440 [ 197.538653][ T785] ? schedule+0xc5/0x240 [ 197.538677][ T785] ? __futex_wait+0x330/0x3d0 [ 197.538698][ T785] ? pte_marker_clear+0x1b0/0x1b0 [ 197.538722][ T785] ? cgroup_rstat_updated+0x144/0x800 [ 197.538746][ T785] ? __kasan_check_read+0x15/0x20 [ 197.538765][ T785] ? futex_wake+0x627/0x950 [ 197.538791][ T785] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 197.538813][ T785] handle_mm_fault+0x1189/0x1ba0 [ 197.538840][ T785] ? __cfi_handle_mm_fault+0x10/0x10 [ 197.538862][ T785] ? lock_vma_under_rcu+0x4cf/0x590 [ 197.538888][ T785] ? __se_sys_futex+0x13c/0x320 [ 197.538916][ T785] do_user_addr_fault+0x951/0x1230 [ 197.538936][ T785] ? __kasan_check_read+0x15/0x20 [ 197.538958][ T785] exc_page_fault+0x58/0xc0 [ 197.538991][ T785] asm_exc_page_fault+0x2b/0x30 [ 197.539016][ T785] RIP: 0033:0x7fa86c25f6cb [ 197.539034][ T785] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 197.539051][ T785] RSP: 002b:00007fa86d28dfa0 EFLAGS: 00010206 [ 197.539071][ T785] RAX: 0000000000000000 RBX: 00007fa86c625fa0 RCX: 0000000000000000 [ 197.539086][ T785] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000180 [ 197.539100][ T785] RBP: 00007fa86c43506b R08: 0000000000000000 R09: 0000000000000000 [ 197.539113][ T785] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 197.539126][ T785] R13: 00007fa86c626038 R14: 00007fa86c625fa0 R15: 00007ffddecc59b8 [ 197.539144][ T785] [ 197.539197][ T785] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 197.542672][ T733] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 197.940956][ T733] Memory cgroup stats for /syz6: [ 197.941108][ T733] cache 0 [ 197.949120][ T733] rss 0 [ 197.951936][ T733] rss_huge 0 [ 197.955316][ T733] shmem 0 [ 197.958433][ T733] mapped_file 0 [ 197.961949][ T733] dirty 0 [ 197.965033][ T733] writeback 0 [ 197.969329][ T733] workingset_refault_anon 0 [ 197.973949][ T733] workingset_refault_file 0 [ 197.979395][ T733] swap 192512 [ 197.982753][ T733] swapcached 0 [ 197.986395][ T733] pgpgin 121 [ 197.989733][ T733] pgpgout 121 [ 197.993124][ T733] pgfault 308 [ 197.996986][ T733] pgmajfault 0 [ 198.000518][ T733] inactive_anon 0 [ 198.004157][ T733] active_anon 0 [ 198.007967][ T733] inactive_file 0 [ 198.011638][ T733] active_file 0 [ 198.015332][ T733] unevictable 0 [ 198.019078][ T733] hierarchical_memory_limit 0 [ 198.024000][ T733] hierarchical_memsw_limit 9223372036854771712 [ 198.030478][ T719] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 198.030704][ T733] total_cache 0 [ 198.041661][ T733] total_rss 0 [ 198.045114][ T733] total_rss_huge 0 [ 198.049086][ T733] total_shmem 0 [ 198.052580][ T733] total_mapped_file 0 [ 198.056657][ T733] total_dirty 0 [ 198.060241][ T733] total_writeback 0 [ 198.064225][ T733] total_workingset_refault_anon 0 [ 198.069471][ T733] total_workingset_refault_file 0 [ 198.074718][ T733] total_swap 192512 [ 198.078886][ T733] total_swapcached 0 [ 198.083290][ T733] total_pgpgin 121 [ 198.087831][ T733] total_pgpgout 121 [ 198.091749][ T733] total_pgfault 308 [ 198.096156][ T733] total_pgmajfault 0 [ 198.100165][ T733] total_inactive_anon 0 [ 198.104462][ T733] total_active_anon 0 [ 198.109074][ T733] total_inactive_file 0 [ 198.113458][ T733] total_active_file 0 [ 198.117708][ T733] total_unevictable 0 [ 198.121759][ T733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.146,pid=756,uid=0 [ 198.136706][ T733] Memory cgroup out of memory: Killed process 756 (syz.6.146) total-vm:96284kB, anon-rss:1364kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 198.189553][ T719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.201638][ T733] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 198.213672][ T733] CPU: 0 UID: 0 PID: 733 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 198.213709][ T733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.213722][ T733] Call Trace: [ 198.213729][ T733] [ 198.213737][ T733] __dump_stack+0x21/0x30 [ 198.213770][ T733] dump_stack_lvl+0x140/0x1c0 [ 198.213799][ T733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 198.213825][ T733] ? ___ratelimit+0x41c/0x5c0 [ 198.213849][ T733] ? __kasan_check_write+0x18/0x20 [ 198.213880][ T733] dump_stack+0x19/0x20 [ 198.213906][ T733] dump_header+0xd9/0x460 [ 198.213933][ T733] oom_kill_process+0x35d/0x640 [ 198.213956][ T733] out_of_memory+0x5d1/0xa20 [ 198.213980][ T733] ? __cfi_out_of_memory+0x10/0x10 [ 198.214001][ T733] ? mutex_lock_killable+0x97/0x1d0 [ 198.214028][ T733] ? __cfi_mutex_lock_killable+0x10/0x10 [ 198.214054][ T733] mem_cgroup_out_of_memory+0x2c5/0x390 [ 198.214076][ T733] ? css_next_descendant_pre+0x1ec/0x210 [ 198.214102][ T733] ? __kasan_check_write+0x18/0x20 [ 198.214121][ T733] ? drain_obj_stock+0xec0/0xec0 [ 198.214145][ T733] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 198.214166][ T733] try_charge_memcg+0x925/0xe10 [ 198.214194][ T733] ? __cfi_try_charge_memcg+0x10/0x10 [ 198.214222][ T733] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 198.214241][ T733] __read_swap_cache_async+0x496/0x860 [ 198.214264][ T733] ? __cfi___read_swap_cache_async+0x10/0x10 [ 198.214287][ T733] ? __asan_memset+0x39/0x50 [ 198.214305][ T733] ? blk_start_plug+0x71/0x1c0 [ 198.214330][ T733] swap_cluster_readahead+0x321/0x570 [ 198.214355][ T733] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 198.214376][ T733] ? dequeue_task_fair+0x248/0x640 [ 198.214394][ T733] ? sched_clock_noinstr+0xd/0x30 [ 198.214419][ T733] swapin_readahead+0x102/0x840 [ 198.214445][ T733] ? __cfi___filemap_get_folio+0x10/0x10 [ 198.214469][ T733] ? __cfi_swapin_readahead+0x10/0x10 [ 198.214492][ T733] ? _raw_spin_unlock+0x45/0x60 [ 198.214511][ T733] ? finish_task_switch+0x139/0x770 [ 198.214537][ T733] ? get_swap_device+0x10f/0x290 [ 198.214559][ T733] do_swap_page+0x4bc/0x4b30 [ 198.214583][ T733] ? __sched_text_start+0x10/0x10 [ 198.214605][ T733] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 198.214625][ T733] ? __cfi_do_swap_page+0x10/0x10 [ 198.214650][ T733] ? __cfi_default_wake_function+0x10/0x10 [ 198.214678][ T733] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 198.214698][ T733] handle_mm_fault+0x1238/0x1ba0 [ 198.214725][ T733] ? __cfi_handle_mm_fault+0x10/0x10 [ 198.214748][ T733] ? lock_vma_under_rcu+0x4cf/0x590 [ 198.214776][ T733] do_user_addr_fault+0x951/0x1230 [ 198.214797][ T733] ? fpregs_restore_userregs+0x11c/0x260 [ 198.214823][ T733] exc_page_fault+0x58/0xc0 [ 198.214849][ T733] asm_exc_page_fault+0x2b/0x30 [ 198.214882][ T733] RIP: 0033:0x7fe4c71592d7 [ 198.214899][ T733] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 198.214916][ T733] RSP: 002b:00007ffe746e53a0 EFLAGS: 00010202 [ 198.214935][ T733] RAX: 0000000000000000 RBX: 0000555574854500 RCX: 00007fe4c71592d7 [ 198.214951][ T733] RDX: 00007ffe746e53e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.214965][ T733] RBP: 00007ffe746e544c R08: 0000000000000000 R09: 0000000000000000 [ 198.214977][ T733] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 198.214991][ T733] R13: 00000000000927c0 R14: 00000000000300dc R15: 00007ffe746e54a0 [ 198.215010][ T733] [ 198.215018][ T733] memory: usage 0kB, limit 0kB, failcnt 699 [ 198.215766][ T719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.226987][ T737] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 198.240485][ T733] memory+swap: usage 152kB, limit 9007199254740988kB, failcnt 0 [ 198.245289][ T714] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 198.248093][ T733] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 198.396598][ T737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.399953][ T719] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.405851][ T714] usb 8-1: Using ep0 maxpacket: 8 [ 198.413748][ T719] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 198.415833][ T737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.421040][ T719] usb 9-1: Manufacturer: syz [ 198.425490][ T733] Memory cgroup stats for [ 198.432119][ T719] usb 9-1: config 0 descriptor?? [ 198.436795][ T737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.442444][ T733] /syz6 [ 198.449538][ T737] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.453886][ T733] : [ 198.458775][ T737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.465290][ T733] cache 0 [ 198.471299][ T714] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 198.474805][ T733] rss 0 [ 198.483148][ T714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.485477][ T733] rss_huge 0 [ 198.490230][ T714] usb 8-1: Product: syz [ 198.494533][ T733] shmem 0 [ 198.515508][ T737] usb 6-1: config 0 descriptor?? [ 198.532330][ T733] mapped_file 0 [ 198.539072][ T714] usb 8-1: Manufacturer: syz [ 198.547080][ T733] dirty 0 [ 198.556658][ T714] usb 8-1: SerialNumber: syz [ 198.564715][ T733] writeback 0 [ 198.769766][ T733] workingset_refault_anon 0 [ 198.774460][ T733] workingset_refault_file 0 [ 198.779209][ T733] swap 192512 [ 198.782709][ T733] swapcached 0 [ 198.786153][ T733] pgpgin 121 [ 198.789559][ T733] pgpgout 121 [ 198.792852][ T733] pgfault 308 [ 198.796259][ T733] pgmajfault 0 [ 198.799840][ T733] inactive_anon 0 [ 198.803592][ T733] active_anon 0 [ 198.807199][ T733] inactive_file 0 [ 198.810866][ T733] active_file 0 [ 198.814350][ T733] unevictable 0 [ 198.818312][ T733] hierarchical_memory_limit 0 [ 198.823566][ T733] hierarchical_memsw_limit 9223372036854771712 [ 198.830493][ T733] total_cache 0 [ 198.834493][ T733] total_rss 0 [ 198.838399][ T733] total_rss_huge 0 [ 198.842165][ T733] total_shmem 0 [ 198.846175][ T733] total_mapped_file 0 [ 198.850466][ T733] total_dirty 0 [ 198.854063][ T733] total_writeback 0 [ 198.857974][ T733] total_workingset_refault_anon 0 [ 198.863022][ T733] total_workingset_refault_file 0 [ 198.868163][ T733] total_swap 192512 [ 198.871998][ T733] total_swapcached 0 [ 198.875952][ T733] total_pgpgin 121 [ 198.879744][ T733] total_pgpgout 121 [ 198.883611][ T733] total_pgfault 308 [ 198.887886][ T733] total_pgmajfault 0 [ 198.891964][ T733] total_inactive_anon 0 [ 198.896380][ T733] total_active_anon 0 [ 198.900485][ T733] total_inactive_file 0 [ 198.904780][ T733] total_active_file 0 [ 198.908941][ T733] total_unevictable 0 [ 198.912966][ T733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor,pid=733,uid=0 [ 198.929291][ T733] Memory cgroup out of memory: Killed process 733 (syz-executor) total-vm:90132kB, anon-rss:1228kB, file-rss:21652kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 198.958602][ T793] random: crng reseeded on system resumption [ 198.999193][ T612] bridge_slave_1: left allmulticast mode [ 199.015300][ T612] bridge_slave_1: left promiscuous mode [ 199.022830][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.031201][ T612] bridge_slave_0: left allmulticast mode [ 199.037489][ T612] bridge_slave_0: left promiscuous mode [ 199.043422][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.077529][ T737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 199.098439][ T737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x2 [ 199.106583][ T737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 199.114542][ T737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 199.125201][ T737] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 199.134163][ T737] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 7/41 [ 199.146119][ T737] plantronics 0003:047F:FFFF.0002: parse failed [ 199.152467][ T737] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 199.170552][ T612] veth1_macvtap: left promiscuous mode [ 199.176262][ T612] veth0_vlan: left promiscuous mode [ 199.278803][ T719] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 199.279863][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.292657][ T719] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 199.304254][ T719] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 199.312535][ T719] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 199.322152][ T719] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 199.334699][ T719] usb 9-1: USB disconnect, device number 2 [ 199.343374][ T799] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.345251][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.162'. [ 199.351674][ T799] bridge_slave_0: entered allmulticast mode [ 199.368588][ T799] bridge_slave_0: entered promiscuous mode [ 199.385915][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.387087][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.162'. [ 199.405316][ T799] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.412701][ T799] bridge_slave_1: entered allmulticast mode [ 199.420551][ T799] bridge_slave_1: entered promiscuous mode [ 199.462848][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.477218][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.506707][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.514373][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.522201][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.529835][ T799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.553790][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.561363][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.571299][ T572] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.578399][ T572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.588687][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.595965][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.626218][ T799] veth0_vlan: entered promiscuous mode [ 199.638028][ T799] veth1_macvtap: entered promiscuous mode [ 199.737741][ T811] mmap: syz.9.164 (811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.775039][ T815] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.014938][ T829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.023785][ T829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.065359][ T737] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 200.216243][ T737] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.230566][ T737] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.239869][ T737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.248043][ T737] usb 10-1: SerialNumber: syz [ 200.275609][ T719] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 200.426407][ T719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.438899][ T719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.450368][ T719] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.459536][ T719] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 200.467589][ T719] usb 9-1: Manufacturer: syz [ 200.473029][ T719] usb 9-1: config 0 descriptor?? [ 200.864977][ T737] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 200.977747][ T851] netlink: 108 bytes leftover after parsing attributes in process `syz.7.181'. [ 201.273614][ T521] usb 10-1: USB disconnect, device number 2 [ 201.289824][ T521] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 201.311550][ T719] input: syz Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0003/input/input6 [ 201.312400][ C0] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 201.324935][ T719] input: syz Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0003/input/input7 [ 201.347982][ T719] input: syz Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0003/input/input8 [ 201.361528][ T719] input: syz Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0003/input/input9 [ 201.381431][ T719] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.8-1/input0 [ 201.556540][ T66] usb 9-1: USB disconnect, device number 3 [ 201.558691][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.578892][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.085260][ T737] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 202.236688][ T737] usb 10-1: unable to get BOS descriptor or descriptor too short [ 202.246150][ T737] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.256933][ T737] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.266586][ T737] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 202.280256][ T737] usb 10-1: string descriptor 0 read error: -22 [ 202.286704][ T737] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 202.296416][ T737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.305259][ T66] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 202.316753][ T901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.325482][ T901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.455248][ T66] usb 9-1: Using ep0 maxpacket: 16 [ 202.461554][ T66] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.471914][ T66] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.482866][ T66] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.492669][ T66] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 202.505762][ T66] usb 9-1: config 0 interface 0 has no altsetting 0 [ 202.512519][ T66] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 202.522470][ T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.531981][ T66] usb 9-1: config 0 descriptor?? [ 202.884334][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 202.884353][ T36] audit: type=1400 audit(1790912856.430:296): avc: denied { ioctl } for pid=909 comm="syz.7.190" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.916157][ T36] audit: type=1400 audit(1790912856.450:297): avc: denied { append } for pid=911 comm="syz.7.191" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.976417][ T66] logitech-djreceiver 0003:046D:C53A.0004: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.8-1/input0 [ 203.031582][ T36] audit: type=1400 audit(1790912856.580:298): avc: denied { setattr } for pid=914 comm="syz.7.192" name="file0" dev="incremental-fs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.056581][ T734] ------------[ cut here ]------------ [ 203.062116][ T734] WARNING: CPU: 0 PID: 734 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 203.070176][ T734] Modules linked in: [ 203.077297][ T734] CPU: 0 UID: 0 PID: 734 Comm: syz-executor Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 203.089925][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.090502][ T36] audit: type=1400 audit(1790912856.630:299): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2625]" dev="pipefs" ino=2625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 203.100221][ T734] RIP: 0010:drop_nlink+0xce/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.128452][ T734] Code: 04 00 00 be 08 00 00 00 e8 ff 0b ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 7a b5 03 cc e8 12 21 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 203.148680][ T734] RSP: 0018:ffffc9000d137c88 EFLAGS: 00010293 [ 203.155463][ T734] RAX: ffffffff81f2578e RBX: ffff888141ffd308 RCX: ffff888118deb900 [ 203.163612][ T734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.171939][ T734] RBP: ffffc9000d137cb0 R08: 0000000000000003 R09: 0000000000000004 [ 203.180264][ T734] R10: dffffc0000000000 R11: fffff52001a26f80 R12: dffffc0000000000 [ 203.188430][ T734] R13: 1ffff110283ffa6a R14: ffff888141ffd350 R15: 0000000000000000 [ 203.196559][ T734] FS: 0000555569af3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.205923][ T734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.212655][ T734] CR2: 00007ffc30b1eb70 CR3: 000000012b5d6000 CR4: 00000000003526b0 [ 203.221181][ T734] Call Trace: [ 203.224634][ T734] [ 203.227622][ T734] shmem_rmdir+0x5f/0x90 [ 203.232138][ T734] vfs_rmdir+0x3de/0x560 [ 203.236786][ T734] incfs_kill_sb+0x102/0x220 [ 203.241559][ T734] deactivate_locked_super+0xd5/0x270 [ 203.247028][ T734] deactivate_super+0xb8/0xe0 [ 203.251848][ T734] cleanup_mnt+0x438/0x4d0 [ 203.256585][ T734] __cleanup_mnt+0x1d/0x40 [ 203.261124][ T734] task_work_run+0x1e5/0x260 [ 203.265802][ T734] ? __cfi_task_work_run+0x10/0x10 [ 203.270977][ T734] ? __x64_sys_umount+0x12e/0x180 [ 203.276231][ T734] ? __cfi___x64_sys_umount+0x10/0x10 [ 203.281683][ T734] ? __kasan_check_read+0x15/0x20 [ 203.287160][ T734] resume_user_mode_work+0x35/0x50 [ 203.292402][ T734] syscall_exit_to_user_mode+0x63/0xb0 [ 203.297959][ T734] do_syscall_64+0x63/0xf0 [ 203.302548][ T734] ? clear_bhb_loop+0x50/0xa0 [ 203.307306][ T734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.313354][ T734] RIP: 0033:0x7fa86c39f397 [ 203.318016][ T734] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 203.339267][ T734] RSP: 002b:00007ffddecc4c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 203.347747][ T734] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa86c39f397 [ 203.355974][ T734] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddecc4ce0 [ 203.364297][ T734] RBP: 00007ffddecc4ce0 R08: 00007ffddecc5ce0 R09: 00000000ffffffff [ 203.372425][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddecc5d70 [ 203.380668][ T734] R13: 00007fa86c4344bb R14: 0000000000031903 R15: 00007ffddecc5db0 [ 203.388742][ T734] [ 203.391799][ T734] ---[ end trace 0000000000000000 ]--- [ 203.397787][ T734] ================================================================== [ 203.405879][ T734] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 203.412346][ T734] Write of size 4 at addr 0000000000000168 by task syz-executor/734 [ 203.420455][ T734] [ 203.422807][ T734] CPU: 0 UID: 0 PID: 734 Comm: syz-executor Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 203.422846][ T734] Tainted: [W]=WARN [ 203.422854][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.422867][ T734] Call Trace: [ 203.422874][ T734] [ 203.422882][ T734] __dump_stack+0x21/0x30 [ 203.422916][ T734] dump_stack_lvl+0x140/0x1c0 [ 203.422945][ T734] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.422975][ T734] print_report+0x3d/0x70 [ 203.423002][ T734] kasan_report+0x162/0x1a0 [ 203.423030][ T734] ? ihold+0x24/0x70 [ 203.423056][ T734] ? ihold+0x24/0x70 [ 203.423080][ T734] kasan_check_range+0x25a/0x2b0 [ 203.423107][ T734] __kasan_check_write+0x18/0x20 [ 203.423129][ T734] ihold+0x24/0x70 [ 203.423153][ T734] vfs_rmdir+0x25c/0x560 [ 203.423182][ T734] incfs_kill_sb+0x102/0x220 [ 203.423206][ T734] deactivate_locked_super+0xd5/0x270 [ 203.423236][ T734] deactivate_super+0xb8/0xe0 [ 203.423265][ T734] cleanup_mnt+0x438/0x4d0 [ 203.423291][ T734] __cleanup_mnt+0x1d/0x40 [ 203.423316][ T734] task_work_run+0x1e5/0x260 [ 203.423343][ T734] ? __cfi_task_work_run+0x10/0x10 [ 203.423377][ T734] ? __x64_sys_umount+0x12e/0x180 [ 203.423397][ T734] ? __cfi___x64_sys_umount+0x10/0x10 [ 203.423418][ T734] ? __kasan_check_read+0x15/0x20 [ 203.423440][ T734] resume_user_mode_work+0x35/0x50 [ 203.423460][ T734] syscall_exit_to_user_mode+0x63/0xb0 [ 203.423490][ T734] do_syscall_64+0x63/0xf0 [ 203.423510][ T734] ? clear_bhb_loop+0x50/0xa0 [ 203.423538][ T734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.423564][ T734] RIP: 0033:0x7fa86c39f397 [ 203.423584][ T734] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 203.423602][ T734] RSP: 002b:00007ffddecc4c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 203.423626][ T734] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa86c39f397 [ 203.423642][ T734] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddecc4ce0 [ 203.423656][ T734] RBP: 00007ffddecc4ce0 R08: 00007ffddecc5ce0 R09: 00000000ffffffff [ 203.423672][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddecc5d70 [ 203.423687][ T734] R13: 00007fa86c4344bb R14: 0000000000031903 R15: 00007ffddecc5db0 [ 203.423705][ T734] [ 203.423713][ T734] ================================================================== [ 203.675806][ T734] Disabling lock debugging due to kernel taint [ 203.685878][ T734] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 203.688813][ T36] audit: type=1400 audit(1790912857.240:300): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 203.693817][ T734] #PF: supervisor write access in kernel mode [ 203.722450][ T734] #PF: error_code(0x0002) - not-present page [ 203.728640][ T734] PGD 800000013eeec067 P4D 800000013eeec067 PUD 0 [ 203.735287][ T734] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 203.741575][ T734] CPU: 0 UID: 0 PID: 734 Comm: syz-executor Tainted: G B W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 203.754566][ T36] audit: type=1400 audit(1790912857.240:301): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.754784][ T734] Tainted: [B]=BAD_PAGE, [W]=WARN [ 203.782142][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.792292][ T734] RIP: 0010:ihold+0x2a/0x70 [ 203.797186][ T734] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 fd 17 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 0d [ 203.805285][ T36] audit: type=1400 audit(1790912857.240:302): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.819243][ T734] RSP: 0018:ffffc9000d137cc8 EFLAGS: 00010246 [ 203.819277][ T734] RAX: ffff888118deb900 RBX: 0000000000000000 RCX: ffff888118deb900 [ 203.819295][ T734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.819309][ T734] RBP: ffffc9000d137cd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 203.874533][ T734] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 203.875184][ T36] audit: type=1400 audit(1790912857.240:303): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.883314][ T734] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 203.914218][ T734] FS: 0000555569af3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.923810][ T734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.931294][ T734] CR2: 0000000000000168 CR3: 000000012b5d6000 CR4: 00000000003526b0 [ 203.935214][ T36] audit: type=1400 audit(1790912857.240:304): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.939813][ T734] Call Trace: [ 203.965111][ T734] [ 203.968680][ T734] vfs_rmdir+0x25c/0x560 [ 203.973124][ T734] incfs_kill_sb+0x102/0x220 [ 203.978174][ T734] deactivate_locked_super+0xd5/0x270 [ 203.984318][ T734] deactivate_super+0xb8/0xe0 [ 203.989983][ T734] cleanup_mnt+0x438/0x4d0 [ 203.994730][ T734] __cleanup_mnt+0x1d/0x40 [ 203.995179][ T36] audit: type=1400 audit(1790912857.240:305): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.999430][ T734] task_work_run+0x1e5/0x260 [ 204.028628][ T734] ? __cfi_task_work_run+0x10/0x10 [ 204.033997][ T734] ? __x64_sys_umount+0x12e/0x180 [ 204.039174][ T734] ? __cfi___x64_sys_umount+0x10/0x10 [ 204.044667][ T734] ? __kasan_check_read+0x15/0x20 [ 204.049970][ T734] resume_user_mode_work+0x35/0x50 [ 204.055445][ T734] syscall_exit_to_user_mode+0x63/0xb0 [ 204.061019][ T734] do_syscall_64+0x63/0xf0 [ 204.065727][ T734] ? clear_bhb_loop+0x50/0xa0 [ 204.070865][ T734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.077323][ T734] RIP: 0033:0x7fa86c39f397 [ 204.082826][ T734] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 204.103023][ T734] RSP: 002b:00007ffddecc4c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 204.111662][ T734] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa86c39f397 [ 204.120512][ T734] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddecc4ce0 [ 204.129034][ T734] RBP: 00007ffddecc4ce0 R08: 00007ffddecc5ce0 R09: 00000000ffffffff [ 204.137208][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddecc5d70 [ 204.145541][ T734] R13: 00007fa86c4344bb R14: 0000000000031903 R15: 00007ffddecc5db0 [ 204.153525][ T734] [ 204.156727][ T734] Modules linked in: [ 204.160715][ T734] CR2: 0000000000000168 [ 204.164885][ T734] ---[ end trace 0000000000000000 ]--- [ 204.170549][ T734] RIP: 0010:ihold+0x2a/0x70 [ 204.175542][ T734] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 fd 17 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 0d [ 204.195517][ T734] RSP: 0018:ffffc9000d137cc8 EFLAGS: 00010246 [ 204.202622][ T734] RAX: ffff888118deb900 RBX: 0000000000000000 RCX: ffff888118deb900 [ 204.211402][ T734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.220103][ T734] RBP: ffffc9000d137cd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 204.228970][ T734] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 204.237147][ T734] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 204.245854][ T734] FS: 0000555569af3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 204.254820][ T734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.261584][ T734] CR2: 0000000000000168 CR3: 000000012b5d6000 CR4: 00000000003526b0 [ 204.269927][ T734] Kernel panic - not syncing: Fatal exception [ 204.276790][ T734] Kernel Offset: disabled [ 204.281117][ T734] Rebooting in 86400 seconds..