last executing test programs: 32.706771039s ago: executing program 3 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x300, 0x20000b}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) 32.588428595s ago: executing program 3 (id=610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = geteuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r3, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000100)={0x14, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.319730137s ago: executing program 0 (id=613): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x1008}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000006000000000008"], 0x40}, 0xee00) 32.223242602s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000600)="50000000100001040100000000000000000000000000000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028005000f0002000000", 0x50) 32.120893587s ago: executing program 0 (id=616): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000001000000000000111"], 0xffe) 32.062259279s ago: executing program 0 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="89e7ee0c7cd338e1897380c988ca", 0xe}], 0x1) (fail_nth: 4) 31.132964483s ago: executing program 0 (id=618): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) connect$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000001dc0)={0x8cc, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x4, 0xff, 0x1e}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbee}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdf2}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xfa, 0x39, 0x6}, {0x2b71, 0x0, 0x9, 0x7f}, {0x9, 0x0, 0x8, 0x80000001}, {0xfff7, 0x0, 0x3, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "e400a0ee061000", "19b766c932c05dc4ae5c56bc48624d0aaca57fb0042b97e6a427205b1df98609", "bf7e3d3a", "fc99e624f0f6de7d"}, 0x38) write$binfmt_elf64(r3, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x2, 0x70f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 30.248466064s ago: executing program 3 (id=623): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1, 0x0, 0x8}, 0x30, 0x2) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x180) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000500), 0x5, &(0x7f0000000140), &(0x7f0000000180)={[0x101]}, 0x39) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='hpfs\x00', 0x84000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r3, &(0x7f0000000000)='3', 0x4e) futex(0x0, 0x6, 0x80, 0x0, 0x0, 0xffffffec) write(r2, &(0x7f0000000000)='7', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x80002, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000280)='anon_inodefs\x00', 0x44019, &(0x7f00000002c0)='\\*,,![%\x00') 29.708936329s ago: executing program 2 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010000000140fb80060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000ff970000000001"], 0xffe) 29.591894895s ago: executing program 2 (id=626): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000040732b1700400001020301090269000301053009080b00010107208c090400000001012000092401014004090007090401000001022000090401010101022000090501090002030b0408250100004004000904020000010220000904020101010220000905820908004006030825018203f3060075f5452a29a9bd8fb3be34ab5261cf53"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x9e5, 0x0, 0x8}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000005, 0x4000010, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x79, 0xad}, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c859, 0x0, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000002c0)={{&(0x7f0000000100)=[{0x1, 0x6, 0x2, {0x80000000, 0x40}, 0x0, 0x4, 0x3}], 0x1, 0x40, 0x6, 0x983}, {&(0x7f0000000140)=[{0xb, 0x808}, {0x4, 0x5b}, {0x5, 0x4}, {0xffffffffffff57b1, 0x4}, {0xe, 0xfffffffffffffffd}, {0x5}, {0x5, 0xf71}], 0x7, 0x10, 0x9, 0x1}, {&(0x7f00000001c0)=[0x7], 0x1, 0x8, 0x4839, 0x2}, {&(0x7f0000000200)=[{0x8000000000000001, 0x0, 0x1104, 0x2, 0x8}, {0x2, 0xb56, 0x9, 0x5, 0x5}, {0x7c87, 0x1, 0x1, 0x8001, 0xe}], 0x3, 0x28, 0x1a20, 0x4}, {&(0x7f0000000280)=[0x80000000], 0x1, 0x8, 0xca1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'pimreg0\x00', 0x200}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[], 0x20}], 0x1, 0x0, 0x0, 0x400c080}, 0x84) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000003c0)=0x80000000, 0x4) 29.591289485s ago: executing program 3 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xa76b46610d92c08d}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x2, 0x7, 0x14, 0x868, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local, {[@rr={0x7, 0xb, 0x6, [@multicast2, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x54f0, 0x40}}}}}}, 0x42) 29.488283879s ago: executing program 3 (id=629): r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/gpiolib_acpi/parameters/ignore_wake\x00', 0x0, 0x0) read(r2, &(0x7f0000000100), 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/gpiolib_acpi/parameters/ignore_interrupt\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x100) r4 = socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000004600)='bdev\x00', 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000118a36fa5dc1cbc2000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab7a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x100000000, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r8 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x4, 0x1f00, 0x1, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r12, '\x00', {0xfff9, 0x74c, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)={0xa002803f}) 28.758112864s ago: executing program 1 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40006}, 0x808) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.610809241s ago: executing program 1 (id=634): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x401}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7f, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000040)) 28.549534054s ago: executing program 1 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x300, 0x20000b}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"}}) 28.479701317s ago: executing program 1 (id=636): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010000000140fb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000f5ff00000111"], 0xffe) 28.384194492s ago: executing program 1 (id=637): socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x7}) 28.258871147s ago: executing program 1 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="89e7ee0c7cd338e1897380c986dd", 0xe}], 0x1) 28.178563641s ago: executing program 2 (id=639): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x1008}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000001008000000000008"], 0x40}, 0xee00) 28.129436133s ago: executing program 2 (id=640): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000012e000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xd, 0x59}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x105840, 0x0) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) 28.072317606s ago: executing program 0 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) setxattr$security_evm(&(0x7f0000000040)='./lower/file1\x00', &(0x7f0000000440), &(0x7f0000000480)=@ng={0x4, 0x1, "737edd1cf9881bbe"}, 0xa, 0x2) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'devtmpfs\x00', 0x3a, '/dev/kvm\x00', 0x3a, './upper', 0x3a, [0x43, 0x43, 0x50, 0x46, 0x46, 0x46, 0x46, 0x4f, 0x43, 0x43]}, 0x43) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 24.929721113s ago: executing program 3 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40006}, 0x808) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23.989125207s ago: executing program 2 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000600)="50000000100001040100000000000000000000000000000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028005000f0002000000", 0x50) 15.576694261s ago: executing program 2 (id=644): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000001100000000000111"], 0xffe) 12.010653558s ago: executing program 32 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) setxattr$security_evm(&(0x7f0000000040)='./lower/file1\x00', &(0x7f0000000440), &(0x7f0000000480)=@ng={0x4, 0x1, "737edd1cf9881bbe"}, 0xa, 0x2) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'devtmpfs\x00', 0x3a, '/dev/kvm\x00', 0x3a, './upper', 0x3a, [0x43, 0x43, 0x50, 0x46, 0x46, 0x46, 0x46, 0x4f, 0x43, 0x43]}, 0x43) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 9.568586302s ago: executing program 33 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="89e7ee0c7cd338e1897380c986dd", 0xe}], 0x1) 8.10861243s ago: executing program 34 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40006}, 0x808) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 35 (id=644): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000001100000000000111"], 0xffe) kernel console output (not intermixed with test programs): 2-1: config 0 descriptor?? [ 49.629766][ T628] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 49.641325][ T366] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 49.651705][ T628] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 49.667881][ T628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.677035][ T628] usb 1-1: config 0 descriptor?? [ 49.682993][ T628] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 49.693491][ T9] usb 3-1: device descriptor read/64, error -71 [ 49.813510][ T9] usb usb3-port1: attempt power cycle [ 49.884387][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.893021][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.902962][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.912201][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.921408][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.930886][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.941503][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.950773][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.958969][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.969125][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.979611][ T366] usb 1-1: USB disconnect, device number 7 [ 50.163511][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 50.184525][ T9] usb 3-1: device descriptor read/8, error -71 [ 50.254904][ T31] samsung 0003:0419:0600.0002: unbalanced collection at end of report description [ 50.264416][ T31] samsung 0003:0419:0600.0002: parse failed [ 50.270366][ T31] samsung 0003:0419:0600.0002: probe with driver samsung failed with error -22 [ 50.314651][ T9] usb 3-1: device descriptor read/8, error -71 [ 50.551884][ T1535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.566990][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 50.582543][ T1535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.604685][ T9] usb 3-1: device descriptor read/8, error -71 [ 50.734557][ T9] usb 3-1: device descriptor read/8, error -71 [ 50.843507][ T31] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 50.853602][ T9] usb usb3-port1: unable to enumerate USB device [ 50.994556][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.005632][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.015408][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.024475][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.033345][ T31] usb 1-1: config 0 descriptor?? [ 51.440305][ T31] usb 1-1: string descriptor 0 read error: -71 [ 51.446805][ T31] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 51.456195][ T31] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 51.464597][ T31] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 51.472745][ T31] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 51.477315][ T1580] tipc: Enabled bearer , priority 0 [ 51.480318][ T31] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 51.499366][ T31] usb 1-1: USB disconnect, device number 8 [ 51.502456][ T1580] syzkaller0: entered promiscuous mode [ 51.511206][ T1580] syzkaller0: entered allmulticast mode [ 51.517120][ T1580] tipc: Resetting bearer [ 51.525817][ T1579] tipc: Resetting bearer [ 51.536795][ T1579] tipc: Disabling bearer [ 51.684611][ T1585] overlayfs: failed to resolve 'upper': -2 [ 51.926742][ T1601] tipc: Enabled bearer , priority 0 [ 51.945048][ T1601] syzkaller0: entered promiscuous mode [ 51.950545][ T1601] syzkaller0: entered allmulticast mode [ 51.956441][ T1601] tipc: Resetting bearer [ 51.962861][ T542] tipc: Resetting bearer [ 51.969041][ T1600] tipc: Resetting bearer [ 51.979283][ T1600] tipc: Disabling bearer [ 52.074488][ T1607] overlayfs: failed to resolve 'upper': -2 [ 52.137278][ T1609] syzkaller1: entered promiscuous mode [ 52.142822][ T1609] syzkaller1: entered allmulticast mode [ 52.183677][ T9] usb 4-1: USB disconnect, device number 9 [ 52.256547][ T31] usb 2-1: USB disconnect, device number 10 [ 52.299232][ T1626] tipc: Enabled bearer , priority 0 [ 52.375389][ T1626] syzkaller0: entered promiscuous mode [ 52.386250][ T1639] overlayfs: failed to resolve 'upper': -2 [ 52.405277][ T1626] syzkaller0: entered allmulticast mode [ 52.411134][ T1626] tipc: Resetting bearer [ 52.422964][ T1624] tipc: Resetting bearer [ 52.438986][ T1624] tipc: Disabling bearer [ 52.478676][ T1645] syzkaller1: entered promiscuous mode [ 52.490823][ T1645] syzkaller1: entered allmulticast mode [ 52.583650][ T36] audit: type=1400 audit(1789500589.038:283): avc: denied { execute } for pid=1675 comm="syz.0.381" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.607059][ T1678] process 'syz.0.381' launched './file0' with NULL argv: empty string added [ 52.616592][ T36] audit: type=1400 audit(1789500589.068:284): avc: denied { execute_no_trans } for pid=1675 comm="syz.0.381" path="/90/file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.764330][ T1702] tipc: Enabled bearer , priority 0 [ 52.791750][ T1702] syzkaller0: entered promiscuous mode [ 52.797398][ T1702] syzkaller0: entered allmulticast mode [ 52.803217][ T1702] tipc: Resetting bearer [ 52.804325][ T1703] overlayfs: failed to resolve 'upper': -2 [ 52.820104][ T1698] tipc: Resetting bearer [ 52.837348][ T1698] tipc: Disabling bearer [ 52.932665][ T1715] syzkaller1: entered promiscuous mode [ 52.938317][ T1715] syzkaller1: entered allmulticast mode [ 53.105199][ T36] audit: type=1400 audit(1789500589.558:285): avc: denied { append } for pid=1724 comm="syz.1.398" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.128336][ T36] audit: type=1326 audit(1789500589.568:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.1.398" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8733b9e159 code=0x0 [ 53.128411][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 53.166883][ T36] audit: type=1400 audit(1789500589.618:287): avc: denied { name_bind } for pid=1724 comm="syz.1.398" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.223639][ T366] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 53.305164][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 53.314678][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 53.324436][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 53.334474][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 53.341107][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 53.350435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.360611][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 53.384493][ T366] usb 3-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 53.394906][ T366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.405466][ T366] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 53.414712][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.422956][ T366] usb 3-1: Product: syz [ 53.426562][ T1734] tipc: Enabled bearer , priority 0 [ 53.427323][ T366] usb 3-1: Manufacturer: syz [ 53.438598][ T366] usb 3-1: SerialNumber: syz [ 53.447071][ T1734] syzkaller0: entered promiscuous mode [ 53.452632][ T1734] syzkaller0: entered allmulticast mode [ 53.458573][ T1734] tipc: Resetting bearer [ 53.467298][ T1733] tipc: Resetting bearer [ 53.480993][ T1733] tipc: Disabling bearer [ 53.565978][ T1736] overlayfs: failed to resolve 'upper': -2 [ 53.594916][ T9] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 53.607025][ T9] usb 1-1: USB disconnect, device number 9 [ 53.636354][ T36] audit: type=1400 audit(1789500590.088:288): avc: denied { ioctl } for pid=1737 comm="syz.3.403" path="socket:[20116]" dev="sockfs" ino=20116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.660975][ T36] audit: type=1400 audit(1789500590.088:289): avc: denied { getopt } for pid=1737 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.669302][ T1719] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 53.684012][ T36] audit: type=1400 audit(1789500590.088:290): avc: denied { sqpoll } for pid=1737 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.700068][ T1719] netlink: 'syz.2.395': attribute type 21 has an invalid length. [ 53.716097][ T1719] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.395'. [ 53.727837][ T1741] syzkaller1: entered promiscuous mode [ 53.734702][ T366] usb 3-1: USB disconnect, device number 24 [ 53.735585][ T1741] syzkaller1: entered allmulticast mode [ 53.914365][ T1755] tipc: Enabled bearer , priority 0 [ 53.940804][ T1755] syzkaller0: entered promiscuous mode [ 53.948546][ T1755] syzkaller0: entered allmulticast mode [ 53.956901][ T1755] tipc: Resetting bearer [ 53.980895][ T1754] tipc: Resetting bearer [ 54.002406][ T1754] tipc: Disabling bearer [ 54.046255][ T1759] overlayfs: failed to resolve 'upper': -2 [ 54.091261][ T1761] syzkaller1: entered promiscuous mode [ 54.109733][ T1761] syzkaller1: entered allmulticast mode [ 54.221894][ T1771] input: syz1 as /devices/virtual/input/input5 [ 54.274977][ T1776] tipc: Enabled bearer , priority 0 [ 54.322386][ T1779] overlayfs: failed to resolve 'upper': -2 [ 54.329865][ T1776] syzkaller0: entered promiscuous mode [ 54.344714][ T36] audit: type=1400 audit(1789500590.798:291): avc: denied { bind } for pid=1780 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.365030][ T1776] syzkaller0: entered allmulticast mode [ 54.370957][ T1776] tipc: Resetting bearer [ 54.382881][ T36] audit: type=1400 audit(1789500590.798:292): avc: denied { name_bind } for pid=1780 comm="syz.0.423" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.403813][ T36] audit: type=1400 audit(1789500590.798:293): avc: denied { node_bind } for pid=1780 comm="syz.0.423" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.428248][ T36] audit: type=1400 audit(1789500590.818:294): avc: denied { write } for pid=1780 comm="syz.0.423" path="socket:[20519]" dev="sockfs" ino=20519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.456229][ T1786] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3345044383 (214082840512 ns) > initial count (60632714432 ns). Using initial count to start timer. [ 54.474049][ T1774] tipc: Resetting bearer [ 54.479684][ T36] audit: type=1400 audit(1789500590.818:295): avc: denied { read } for pid=1780 comm="syz.0.423" path="socket:[20519]" dev="sockfs" ino=20519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.503491][ T1786] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 54.520546][ T36] audit: type=1400 audit(1789500590.888:296): avc: denied { read } for pid=1782 comm="syz.2.424" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.553092][ T1774] tipc: Disabling bearer [ 54.558928][ T36] audit: type=1400 audit(1789500590.888:297): avc: denied { open } for pid=1782 comm="syz.2.424" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.637508][ T1791] syzkaller1: entered promiscuous mode [ 54.643060][ T1791] syzkaller1: entered allmulticast mode [ 54.686451][ T1795] SELinux: Context Ï is not valid (left unmapped). [ 54.826758][ T1814] overlayfs: failed to resolve 'upper': -2 [ 54.902573][ T1829] tipc: Enabled bearer , priority 0 [ 54.925295][ T1829] syzkaller0: entered promiscuous mode [ 54.930909][ T1829] syzkaller0: entered allmulticast mode [ 54.933601][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.937101][ T1829] tipc: Resetting bearer [ 54.956615][ T1828] tipc: Resetting bearer [ 54.976164][ T1828] tipc: Disabling bearer [ 55.103491][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 55.112627][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.124640][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.135855][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.146636][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 55.159519][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 55.168616][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.179449][ T9] usb 2-1: config 0 descriptor?? [ 55.253322][ T1860] syzkaller1: entered promiscuous mode [ 55.258874][ T1860] syzkaller1: entered allmulticast mode [ 55.586985][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 55.593013][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.601895][ T9] usb 2-1: USB disconnect, device number 11 [ 55.643544][ T628] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.794485][ T628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.804674][ T628] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 55.813561][ T628] usb 1-1: config 1 has no interface number 0 [ 55.819669][ T628] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.833960][ T628] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.843005][ T628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.851960][ T628] usb 1-1: Product: syz [ 55.856196][ T628] usb 1-1: Manufacturer: syz [ 55.860811][ T628] usb 1-1: SerialNumber: syz [ 55.867195][ T628] usb 1-1: selecting invalid altsetting 1 [ 55.995582][ T1868] overlayfs: failed to resolve 'upper': -2 [ 56.058552][ T1870] tipc: Enabled bearer , priority 0 [ 56.077284][ T1870] syzkaller0: entered promiscuous mode [ 56.082781][ T1870] syzkaller0: entered allmulticast mode [ 56.088870][ T1870] tipc: Resetting bearer [ 56.098600][ T542] tipc: Resetting bearer [ 56.110070][ T1869] tipc: Resetting bearer [ 56.127864][ T1869] tipc: Disabling bearer [ 56.271659][ T1887] syzkaller1: entered promiscuous mode [ 56.285357][ T1887] syzkaller1: entered allmulticast mode [ 56.417210][ T1907] bridge0: port 3(veth0_to_bridge) entered blocking state [ 56.431542][ T1907] bridge0: port 3(veth0_to_bridge) entered disabled state [ 56.440613][ T1906] overlayfs: failed to resolve 'upper': -2 [ 56.446869][ T1907] veth0_to_bridge: entered allmulticast mode [ 56.465446][ T1907] veth0_to_bridge: entered promiscuous mode [ 56.487257][ T1907] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 56.508882][ T1907] bridge0: port 3(veth0_to_bridge) entered blocking state [ 56.516108][ T1907] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 56.548731][ T1910] tipc: Enabled bearer , priority 0 [ 56.589997][ T1910] syzkaller0: entered promiscuous mode [ 56.602147][ T1910] syzkaller0: entered allmulticast mode [ 56.613841][ T1910] tipc: Resetting bearer [ 56.625785][ T1909] tipc: Resetting bearer [ 56.656434][ T1909] tipc: Disabling bearer [ 57.132211][ T1964] syzkaller1: entered promiscuous mode [ 57.137815][ T1964] syzkaller1: entered allmulticast mode [ 57.358982][ T1973] tipc: Enabled bearer , priority 0 [ 57.385672][ T1973] syzkaller0: entered promiscuous mode [ 57.391411][ T1973] syzkaller0: entered allmulticast mode [ 57.397520][ T1973] tipc: Resetting bearer [ 57.406674][ T1972] tipc: Resetting bearer [ 57.432840][ T1972] tipc: Disabling bearer [ 57.545098][ T1975] overlayfs: failed to resolve 'upper': -2 [ 57.763687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.775864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.787962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.800057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.812156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.824265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.836390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.848529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.860663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 57.872753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 58.151667][ T1983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.265393][ T1993] syzkaller1: entered promiscuous mode [ 58.276343][ T1993] syzkaller1: entered allmulticast mode [ 58.356523][ T1995] tipc: Enabled bearer , priority 0 [ 58.418471][ T1995] syzkaller0: entered promiscuous mode [ 58.431761][ T628] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 58.443117][ T1995] syzkaller0: entered allmulticast mode [ 58.448780][ T628] cdc_ncm 1-1:1.1: bind() failure [ 58.454957][ T1995] tipc: Resetting bearer [ 58.465657][ T628] usb 1-1: USB disconnect, device number 10 [ 58.499822][ T1994] tipc: Resetting bearer [ 58.536865][ T1994] tipc: Disabling bearer [ 58.575685][ T2004] overlayfs: failed to resolve 'upper': -2 [ 58.670976][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 58.670994][ T36] audit: type=1400 audit(1789500595.118:305): avc: denied { cmd } for pid=2011 comm="iou-wrk-2013" path="socket:[22514]" dev="sockfs" ino=22514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.488290][ T2056] syzkaller1: entered promiscuous mode [ 59.502355][ T2056] syzkaller1: entered allmulticast mode [ 59.694937][ T2076] tipc: Enabled bearer , priority 0 [ 59.769057][ T2076] syzkaller0: entered promiscuous mode [ 59.774639][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 59.801065][ T2076] syzkaller0: entered allmulticast mode [ 59.828964][ T2076] tipc: Resetting bearer [ 59.845698][ T45] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 59.873731][ T45] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.903907][ T2074] tipc: Resetting bearer [ 59.920416][ T2090] overlayfs: failed to resolve 'upper': -2 [ 59.966902][ T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 59.981276][ T2074] tipc: Disabling bearer [ 60.001593][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.034905][ T311] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 60.044065][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.052226][ T311] usb 2-1: Product: 《 [ 60.057133][ T311] usb 2-1: Manufacturer: â [ 60.061757][ T311] usb 2-1: SerialNumber: 緤劋넂î—î”Ȝ홈내êŠé¼œê•®ë¹Ží™‚鮥혞詜ᔎ箩栩䕜腢剛鹓ã皷톚둦엖⥘콘ጎ㣥౲á¬é¤¼â¨´ä™à¤…݌ֆ쉪䜢 [ 60.082496][ T2061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.120138][ T36] audit: type=1400 audit(1789500596.568:306): avc: denied { map } for pid=2084 comm="syz.0.485" path="pipe:[1566]" dev="pipefs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 60.314034][ T2061] FAULT_INJECTION: forcing a failure. [ 60.314034][ T2061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.363501][ T2061] CPU: 1 UID: 0 PID: 2061 Comm: syz.1.482 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 60.363538][ T2061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.363551][ T2061] Call Trace: [ 60.363558][ T2061] [ 60.363567][ T2061] __dump_stack+0x21/0x30 [ 60.363606][ T2061] dump_stack_lvl+0x140/0x1c0 [ 60.363636][ T2061] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.363667][ T2061] ? check_stack_object+0x81/0x150 [ 60.363689][ T2061] ? __virt_addr_valid+0x2a1/0x370 [ 60.363713][ T2061] dump_stack+0x19/0x20 [ 60.363740][ T2061] should_fail_ex+0x3c2/0x510 [ 60.363765][ T2061] should_fail+0xf/0x20 [ 60.363789][ T2061] should_fail_usercopy+0x1e/0x30 [ 60.363815][ T2061] _copy_from_user+0x20/0xa0 [ 60.363845][ T2061] memdup_user+0x81/0x170 [ 60.363864][ T2061] ? strndup_user+0x40/0xd0 [ 60.363883][ T2061] strndup_user+0x6c/0xd0 [ 60.363902][ T2061] __se_sys_request_key+0x18d/0x350 [ 60.363937][ T2061] ? __x64_sys_request_key+0xc0/0xc0 [ 60.363961][ T2061] ? __kasan_check_write+0x18/0x20 [ 60.363983][ T2061] ? fpregs_restore_userregs+0x11c/0x260 [ 60.364009][ T2061] __x64_sys_request_key+0x9f/0xc0 [ 60.364033][ T2061] x64_sys_call+0x2b60/0x2ee0 [ 60.364052][ T2061] do_syscall_64+0x57/0xf0 [ 60.364072][ T2061] ? clear_bhb_loop+0x50/0xa0 [ 60.364099][ T2061] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.364122][ T2061] RIP: 0033:0x7f8733b9e159 [ 60.364141][ T2061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.364159][ T2061] RSP: 002b:00007f87325e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 60.364184][ T2061] RAX: ffffffffffffffda RBX: 00007f8733e25fa0 RCX: 00007f8733b9e159 [ 60.364202][ T2061] RDX: 0000200000002340 RSI: 0000200000002300 RDI: 00002000000022c0 [ 60.364218][ T2061] RBP: 00007f8733c3506b R08: 0000000000000000 R09: 0000000000000000 [ 60.364233][ T2061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.364247][ T2061] R13: 00007f8733e26038 R14: 00007f8733e25fa0 R15: 00007ffd3b807838 [ 60.364267][ T2061] [ 60.371192][ T311] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 60.641247][ T311] usb 2-1: USB disconnect, device number 12 [ 60.649326][ T311] usblp0: removed [ 60.895626][ T628] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 60.916449][ T2125] syzkaller1: entered promiscuous mode [ 60.941697][ T2125] syzkaller1: entered allmulticast mode [ 61.053484][ T628] usb 3-1: device descriptor read/64, error -71 [ 61.065655][ T2135] tipc: Enabled bearer , priority 0 [ 61.113677][ T2135] syzkaller0: entered promiscuous mode [ 61.125784][ T2135] syzkaller0: entered allmulticast mode [ 61.152713][ T2135] tipc: Resetting bearer [ 61.189738][ T2134] tipc: Resetting bearer [ 61.237561][ T2134] tipc: Disabling bearer [ 61.303484][ T628] usb 3-1: device descriptor read/64, error -71 [ 61.453477][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 61.513950][ T2164] overlayfs: failed to resolve 'upper': -2 [ 61.541696][ T36] audit: type=1400 audit(1789500597.988:307): avc: denied { connect } for pid=2167 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.573541][ T628] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 61.625169][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 61.640589][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.661063][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.683062][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.703409][ T311] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.737203][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.763490][ T628] usb 3-1: device descriptor read/64, error -71 [ 61.782677][ T311] usb 4-1: config 0 descriptor?? [ 62.003602][ T628] usb 3-1: device descriptor read/64, error -71 [ 62.047935][ T36] audit: type=1400 audit(1789500598.498:308): avc: denied { bind } for pid=2188 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.126574][ T628] usb usb3-port1: attempt power cycle [ 62.137492][ T36] audit: type=1400 audit(1789500598.528:309): avc: denied { ioctl } for pid=2188 comm="syz.1.503" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.178351][ T36] audit: type=1400 audit(1789500598.528:310): avc: denied { map } for pid=2188 comm="syz.1.503" path="socket:[23581]" dev="sockfs" ino=23581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.204713][ T311] microsoft 0003:045E:07DA.0005: invalid report_count 33827 [ 62.239279][ T311] microsoft 0003:045E:07DA.0005: item 0 2 1 9 parsing failed [ 62.249706][ T311] microsoft 0003:045E:07DA.0005: parse failed [ 62.256071][ T36] audit: type=1400 audit(1789500598.528:311): avc: denied { read write } for pid=2188 comm="syz.1.503" path="socket:[23581]" dev="sockfs" ino=23581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.285852][ T311] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 62.407152][ T311] usb 4-1: USB disconnect, device number 10 [ 62.413652][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 62.503583][ T628] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 62.527863][ T628] usb 3-1: device descriptor read/8, error -71 [ 62.566415][ T36] audit: type=1400 audit(1789500599.018:312): avc: denied { getopt } for pid=2210 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.588157][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 62.604331][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 62.618997][ T45] usb 2-1: config 1 has no interface number 0 [ 62.625521][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 62.637251][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 62.663263][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 [ 62.671390][ T628] usb 3-1: device descriptor read/8, error -71 [ 62.678200][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 62.687553][ T45] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.695850][ T45] usb 2-1: Product: syz [ 62.700130][ T45] usb 2-1: Manufacturer: syz [ 62.704945][ T45] usb 2-1: SerialNumber: syz [ 62.715991][ T2196] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 62.723299][ T2196] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 62.773500][ C0] net_ratelimit: 97055 callbacks suppressed [ 62.773521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.791519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.792496][ T2217] overlayfs: failed to resolve 'upper': -2 [ 62.803635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.821511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.833575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.845727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.857813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.869878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.881943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.894115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 62.934359][ T628] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 62.964583][ T628] usb 3-1: device descriptor read/8, error -71 [ 63.000748][ T2219] syzkaller1: entered promiscuous mode [ 63.006526][ T2219] syzkaller1: entered allmulticast mode [ 63.013391][ T2219] FAULT_INJECTION: forcing a failure. [ 63.013391][ T2219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.026970][ T2219] CPU: 1 UID: 0 PID: 2219 Comm: syz.3.511 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 63.027000][ T2219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.027012][ T2219] Call Trace: [ 63.027019][ T2219] [ 63.027026][ T2219] __dump_stack+0x21/0x30 [ 63.027063][ T2219] dump_stack_lvl+0x140/0x1c0 [ 63.027090][ T2219] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.027119][ T2219] dump_stack+0x19/0x20 [ 63.027144][ T2219] should_fail_ex+0x3c2/0x510 [ 63.027170][ T2219] should_fail+0xf/0x20 [ 63.027192][ T2219] should_fail_usercopy+0x1e/0x30 [ 63.027218][ T2219] _copy_from_iter+0x1a6/0x1520 [ 63.027245][ T2219] ? security_file_open+0x99/0x100 [ 63.027268][ T2219] ? __cfi__copy_from_iter+0x10/0x10 [ 63.027297][ T2219] tun_get_user+0x231/0x3720 [ 63.027320][ T2219] ? arch_stack_walk+0x10a/0x170 [ 63.027342][ T2219] ? ptr_ring_consume+0x430/0x430 [ 63.027363][ T2219] ? _parse_integer+0x2e/0x40 [ 63.027383][ T2219] ? kstrtoull+0x13b/0x1e0 [ 63.027405][ T2219] ? __kasan_check_write+0x18/0x20 [ 63.027426][ T2219] ? ref_tracker_alloc+0x32b/0x5b0 [ 63.027452][ T2219] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 63.027488][ T2219] ? selinux_file_permission+0x318/0xb60 [ 63.027512][ T2219] ? __kasan_check_write+0x18/0x20 [ 63.027531][ T2219] ? proc_fail_nth_write+0x184/0x220 [ 63.027562][ T2219] tun_chr_write_iter+0x1fa/0x310 [ 63.027584][ T2219] vfs_write+0x762/0xfd0 [ 63.027607][ T2219] ? __cfi_vfs_write+0x10/0x10 [ 63.027631][ T2219] ksys_write+0x145/0x260 [ 63.027652][ T2219] ? xfd_validate_state+0x68/0x140 [ 63.027679][ T2219] ? __cfi_ksys_write+0x10/0x10 [ 63.027701][ T2219] ? __kasan_check_read+0x15/0x20 [ 63.027721][ T2219] __x64_sys_write+0x7f/0x90 [ 63.027743][ T2219] x64_sys_call+0x271c/0x2ee0 [ 63.027762][ T2219] do_syscall_64+0x57/0xf0 [ 63.027782][ T2219] ? clear_bhb_loop+0x50/0xa0 [ 63.027805][ T2219] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.027828][ T2219] RIP: 0033:0x7f77c1f9e159 [ 63.027847][ T2219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.027864][ T2219] RSP: 002b:00007f77c2e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.027887][ T2219] RAX: ffffffffffffffda RBX: 00007f77c2225fa0 RCX: 00007f77c1f9e159 [ 63.027903][ T2219] RDX: 0000000000000042 RSI: 0000200000000200 RDI: 0000000000000003 [ 63.027917][ T2219] RBP: 00007f77c2e17090 R08: 0000000000000000 R09: 0000000000000000 [ 63.027930][ T2219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.027943][ T2219] R13: 00007f77c2226038 R14: 00007f77c2225fa0 R15: 00007ffea9b22078 [ 63.027961][ T2219] [ 63.302728][ T2196] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 63.309990][ T2196] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 63.318359][ T628] usb 3-1: device descriptor read/8, error -71 [ 63.433626][ T628] usb usb3-port1: unable to enumerate USB device [ 63.467355][ T2221] syzkaller1: entered promiscuous mode [ 63.472954][ T2221] syzkaller1: entered allmulticast mode [ 63.590013][ T36] audit: type=1400 audit(1789500600.038:313): avc: denied { write } for pid=2225 comm="syz.0.514" name="file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.685797][ T36] audit: type=1400 audit(1789500600.138:314): avc: denied { bind } for pid=2230 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.706916][ T2232] 9pnet_fd: Insufficient options for proto=fd [ 63.732328][ T2232] MTRR 1 not used [ 63.751539][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 63.777700][ T36] audit: type=1400 audit(1789500600.178:315): avc: denied { read write } for pid=2230 comm="syz.3.516" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.820581][ T36] audit: type=1400 audit(1789500600.178:316): avc: denied { open } for pid=2230 comm="syz.3.516" path="/142/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.848149][ T2235] Mass Storage Function, version: 2009/09/11 [ 63.873509][ T2235] LUN: removable file: (no medium) [ 63.878769][ T36] audit: type=1400 audit(1789500600.178:317): avc: denied { ioctl } for pid=2230 comm="syz.3.516" path="/142/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 63.958346][ T36] audit: type=1400 audit(1789500600.188:318): avc: denied { bind } for pid=2229 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.980687][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 64.003876][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 64.033525][ T36] audit: type=1400 audit(1789500600.188:319): avc: denied { accept } for pid=2229 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.065288][ T45] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:8e:a5:44:50:96 [ 64.093606][ T45] usb 2-1: USB disconnect, device number 13 [ 64.099648][ T36] audit: type=1400 audit(1789500600.258:320): avc: denied { write } for pid=2229 comm="syz.0.515" path="socket:[23933]" dev="sockfs" ino=23933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.129039][ T45] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 64.150588][ T36] audit: type=1400 audit(1789500600.298:321): avc: denied { mount } for pid=2234 comm="syz.2.517" name="/" dev="configfs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.200481][ T36] audit: type=1400 audit(1789500600.298:322): avc: denied { search } for pid=2234 comm="syz.2.517" name="/" dev="configfs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.245968][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 64.258446][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 64.283111][ T36] audit: type=1400 audit(1789500600.298:323): avc: denied { write } for pid=2234 comm="syz.2.517" name="usb_gadget" dev="configfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.311313][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 64.435028][ T2259] overlayfs: failed to resolve 'upper': -2 [ 64.628217][ T2268] tipc: Enabled bearer , priority 0 [ 64.650877][ T2268] syzkaller0: entered promiscuous mode [ 64.656428][ T2268] syzkaller0: entered allmulticast mode [ 64.663389][ T2268] tipc: Resetting bearer [ 64.694925][ T2267] tipc: Resetting bearer [ 64.737163][ T2267] tipc: Disabling bearer [ 64.760088][ T2265] netlink: 'syz.1.521': attribute type 27 has an invalid length. [ 64.790184][ T2273] tipc: Enabled bearer , priority 0 [ 64.912684][ T2273] syzkaller0: entered promiscuous mode [ 64.952358][ T2273] syzkaller0: entered allmulticast mode [ 64.982900][ T2273] tipc: Resetting bearer [ 64.997786][ T2293] input: syz1 as /devices/virtual/input/input6 [ 65.024207][ T2292] tipc: Enabled bearer , priority 0 [ 65.100157][ T2289] FAULT_INJECTION: forcing a failure. [ 65.100157][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.153688][ T2289] CPU: 1 UID: 0 PID: 2289 Comm: syz.2.526 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 65.153726][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.153739][ T2289] Call Trace: [ 65.153746][ T2289] [ 65.153753][ T2289] __dump_stack+0x21/0x30 [ 65.153786][ T2289] dump_stack_lvl+0x140/0x1c0 [ 65.153811][ T2289] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.153837][ T2289] ? __x64_sys_writev+0x81/0x90 [ 65.153870][ T2289] ? do_syscall_64+0x57/0xf0 [ 65.153889][ T2289] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.153915][ T2289] dump_stack+0x19/0x20 [ 65.153940][ T2289] should_fail_ex+0x3c2/0x510 [ 65.153966][ T2289] should_fail+0xf/0x20 [ 65.153986][ T2289] should_fail_usercopy+0x1e/0x30 [ 65.154011][ T2289] _copy_from_iter+0x1a6/0x1520 [ 65.154040][ T2289] ? __cfi__copy_from_iter+0x10/0x10 [ 65.154066][ T2289] ? __check_object_size+0x54c/0x870 [ 65.154088][ T2289] ? __cfi___check_object_size+0x10/0x10 [ 65.154110][ T2289] ? __kasan_check_write+0x18/0x20 [ 65.154130][ T2289] ? __build_skb_around+0x2a4/0x590 [ 65.154153][ T2289] skb_copy_datagram_from_iter+0xf4/0x6f0 [ 65.154178][ T2289] ? napi_alloc_skb+0x212/0x560 [ 65.154201][ T2289] tun_get_user+0xd99/0x3720 [ 65.154225][ T2289] ? ptr_ring_consume+0x430/0x430 [ 65.154246][ T2289] ? is_bpf_text_address+0x17b/0x1a0 [ 65.154275][ T2289] ? kernel_text_address+0xa9/0xe0 [ 65.154302][ T2289] ? __kasan_check_write+0x18/0x20 [ 65.154322][ T2289] ? ref_tracker_alloc+0x32b/0x5b0 [ 65.154349][ T2289] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 65.154375][ T2289] ? _parse_integer+0x2e/0x40 [ 65.154396][ T2289] ? kstrtoull+0x13b/0x1e0 [ 65.154418][ T2289] tun_chr_write_iter+0x1fa/0x310 [ 65.154438][ T2289] do_iter_readv_writev+0x629/0x820 [ 65.154461][ T2289] ? vfs_iter_read+0x5e0/0x5e0 [ 65.154484][ T2289] ? bpf_lsm_file_permission+0xd/0x20 [ 65.154510][ T2289] vfs_writev+0x4a5/0xe90 [ 65.154536][ T2289] ? do_writev+0x2e0/0x2e0 [ 65.154560][ T2289] ? vfs_write+0xbcf/0xfd0 [ 65.154585][ T2289] do_writev+0x151/0x2e0 [ 65.154610][ T2289] ? vfs_readv+0xa00/0xa00 [ 65.154635][ T2289] ? __kasan_check_read+0x15/0x20 [ 65.154655][ T2289] __x64_sys_writev+0x81/0x90 [ 65.154677][ T2289] x64_sys_call+0x1fbb/0x2ee0 [ 65.154696][ T2289] do_syscall_64+0x57/0xf0 [ 65.154714][ T2289] ? clear_bhb_loop+0x50/0xa0 [ 65.154742][ T2289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.154765][ T2289] RIP: 0033:0x7f7f93f9e159 [ 65.154782][ T2289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.154798][ T2289] RSP: 002b:00007f7f94e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 65.154821][ T2289] RAX: ffffffffffffffda RBX: 00007f7f94226090 RCX: 00007f7f93f9e159 [ 65.154837][ T2289] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 65.154851][ T2289] RBP: 00007f7f94e66090 R08: 0000000000000000 R09: 0000000000000000 [ 65.154873][ T2289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.154885][ T2289] R13: 00007f7f94226128 R14: 00007f7f94226090 R15: 00007ffd25462d28 [ 65.154903][ T2289] [ 65.507832][ T2286] syzkaller0: entered promiscuous mode [ 65.513557][ T2286] syzkaller0: entered allmulticast mode [ 65.519546][ T2286] tipc: Resetting bearer [ 65.528711][ T2271] tipc: Resetting bearer [ 65.566726][ T2271] tipc: Disabling bearer [ 65.595300][ T574] tipc: Resetting bearer [ 65.603343][ T2283] tipc: Resetting bearer [ 65.684093][ T2283] tipc: Disabling bearer [ 65.733480][ T65] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 65.788674][ T2304] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 65.908284][ T2310] overlayfs: failed to resolve 'upper': -2 [ 65.914921][ T65] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 65132, setting to 64 [ 65.927634][ T65] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.955824][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.970853][ T65] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 66.013537][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.049104][ T65] usb 4-1: config 0 descriptor?? [ 66.081668][ T2297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.162251][ T2322] random: crng reseeded on system resumption [ 66.436990][ T2339] syzkaller1: entered promiscuous mode [ 66.444099][ T2339] syzkaller1: entered allmulticast mode [ 66.506471][ T65] hid (null): unknown global tag 0xd [ 66.519472][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 66.534162][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x1 [ 66.554607][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x4 [ 66.587253][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 66.609406][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x5 [ 66.624860][ T2352] syzkaller1: entered promiscuous mode [ 66.630790][ T2352] syzkaller1: entered allmulticast mode [ 66.638153][ T65] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x6 [ 66.648980][ T65] magicmouse 0003:05AC:0269.0006: unknown global tag 0xd [ 66.656565][ T65] magicmouse 0003:05AC:0269.0006: item 0 0 1 13 parsing failed [ 66.680377][ T65] magicmouse 0003:05AC:0269.0006: magicmouse hid parse failed [ 66.703289][ T65] magicmouse 0003:05AC:0269.0006: probe with driver magicmouse failed with error -22 [ 66.789231][ T65] usb 4-1: USB disconnect, device number 11 [ 66.876221][ T2366] No source specified [ 66.967059][ T2368] overlayfs: failed to resolve 'upper': -2 [ 67.305324][ T2377] syzkaller1: entered promiscuous mode [ 67.310956][ T2377] syzkaller1: entered allmulticast mode [ 67.435655][ T2382] can0: slcan on ttyS3. [ 67.473480][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 67.495155][ T2380] can0 (unregistered): slcan off ttyS3. [ 67.570875][ T2395] tipc: Enabled bearer , priority 0 [ 67.602189][ T2395] syzkaller0: entered promiscuous mode [ 67.612575][ T2395] syzkaller0: entered allmulticast mode [ 67.618758][ T2395] tipc: Resetting bearer [ 67.633471][ T65] usb 4-1: device descriptor read/64, error -71 [ 67.688439][ T542] tipc: Resetting bearer [ 67.701809][ T2394] tipc: Resetting bearer [ 67.735094][ T2394] tipc: Disabling bearer [ 67.783502][ C0] net_ratelimit: 99864 callbacks suppressed [ 67.783522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.801690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.813822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.825977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.838122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.850255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.862332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.874409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.886495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.890119][ T2408] overlayfs: failed to resolve 'upper': -2 [ 67.898778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 67.904574][ T65] usb 4-1: device descriptor read/64, error -71 [ 68.163533][ T65] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 68.317188][ T2432] tipc: Enabled bearer , priority 0 [ 68.323927][ T65] usb 4-1: device descriptor read/64, error -71 [ 68.372835][ T2432] syzkaller0: entered promiscuous mode [ 68.378457][ T2432] syzkaller0: entered allmulticast mode [ 68.384497][ T2432] tipc: Resetting bearer [ 68.403973][ T2443] FAULT_INJECTION: forcing a failure. [ 68.403973][ T2443] name failslab, interval 1, probability 0, space 0, times 0 [ 68.416652][ T2443] CPU: 1 UID: 0 PID: 2443 Comm: syz.2.559 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 68.416687][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.416699][ T2443] Call Trace: [ 68.416706][ T2443] [ 68.416715][ T2443] __dump_stack+0x21/0x30 [ 68.416748][ T2443] dump_stack_lvl+0x140/0x1c0 [ 68.416776][ T2443] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.416805][ T2443] dump_stack+0x19/0x20 [ 68.416831][ T2443] should_fail_ex+0x3c2/0x510 [ 68.416856][ T2443] should_failslab+0xac/0x100 [ 68.416881][ T2443] kmem_cache_alloc_noprof+0x42/0x410 [ 68.416912][ T2443] ? skb_clone+0x21d/0x470 [ 68.416937][ T2443] ? __asan_set_shadow_00+0x12/0x20 [ 68.416966][ T2443] skb_clone+0x21d/0x470 [ 68.416991][ T2443] packet_rcv+0x693/0x1430 [ 68.417020][ T2443] ? __cfi_packet_rcv+0x10/0x10 [ 68.417045][ T2443] __netif_receive_skb_core+0x31c5/0x3a70 [ 68.417072][ T2443] ? __cfi___skb_flow_dissect+0x10/0x10 [ 68.417095][ T2443] ? qdisc_run_end+0x120/0x120 [ 68.417118][ T2443] ? __cfi___skb_flow_dissect+0x10/0x10 [ 68.417139][ T2443] ? arch_stack_walk+0x10a/0x170 [ 68.417162][ T2443] ? stack_depot_save_flags+0x38/0x800 [ 68.417187][ T2443] ? stack_trace_save+0xaa/0x100 [ 68.417210][ T2443] __netif_receive_skb_list_core+0x24e/0x880 [ 68.417234][ T2443] ? kasan_save_track+0x3e/0x80 [ 68.417255][ T2443] ? kasan_save_alloc_info+0x3a/0x50 [ 68.417275][ T2443] ? tun_chr_write_iter+0x1fa/0x310 [ 68.417296][ T2443] ? do_syscall_64+0x57/0xf0 [ 68.417316][ T2443] ? set_rps_cpu+0x670/0x670 [ 68.417339][ T2443] netif_receive_skb_list_internal+0x847/0xb00 [ 68.417366][ T2443] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 68.417391][ T2443] ? eth_type_trans+0x333/0x6f0 [ 68.417416][ T2443] napi_complete_done+0x323/0x790 [ 68.417441][ T2443] ? __cfi_napi_complete_done+0x10/0x10 [ 68.417465][ T2443] ? napi_gro_frags+0x7f8/0xde0 [ 68.417490][ T2443] ? tun_get_user+0x2656/0x3720 [ 68.417510][ T2443] tun_get_user+0x2673/0x3720 [ 68.417533][ T2443] ? ptr_ring_consume+0x430/0x430 [ 68.417555][ T2443] ? is_bpf_text_address+0x17b/0x1a0 [ 68.417584][ T2443] ? kernel_text_address+0xa9/0xe0 [ 68.417611][ T2443] ? __kasan_check_write+0x18/0x20 [ 68.417631][ T2443] ? ref_tracker_alloc+0x32b/0x5b0 [ 68.417658][ T2443] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 68.417685][ T2443] ? _parse_integer+0x2e/0x40 [ 68.417707][ T2443] ? kstrtoull+0x13b/0x1e0 [ 68.417728][ T2443] tun_chr_write_iter+0x1fa/0x310 [ 68.417748][ T2443] do_iter_readv_writev+0x629/0x820 [ 68.417772][ T2443] ? vfs_iter_read+0x5e0/0x5e0 [ 68.417795][ T2443] ? bpf_lsm_file_permission+0xd/0x20 [ 68.417821][ T2443] vfs_writev+0x4a5/0xe90 [ 68.417847][ T2443] ? do_writev+0x2e0/0x2e0 [ 68.417871][ T2443] ? vfs_write+0xbcf/0xfd0 [ 68.417904][ T2443] do_writev+0x151/0x2e0 [ 68.417929][ T2443] ? vfs_readv+0xa00/0xa00 [ 68.417955][ T2443] ? __kasan_check_read+0x15/0x20 [ 68.417975][ T2443] __x64_sys_writev+0x81/0x90 [ 68.417998][ T2443] x64_sys_call+0x1fbb/0x2ee0 [ 68.418016][ T2443] do_syscall_64+0x57/0xf0 [ 68.418034][ T2443] ? clear_bhb_loop+0x50/0xa0 [ 68.418058][ T2443] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.418081][ T2443] RIP: 0033:0x7f7f93f9e159 [ 68.418099][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.418117][ T2443] RSP: 002b:00007f7f94e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 68.418141][ T2443] RAX: ffffffffffffffda RBX: 00007f7f94226090 RCX: 00007f7f93f9e159 [ 68.418157][ T2443] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 68.418171][ T2443] RBP: 00007f7f94e66090 R08: 0000000000000000 R09: 0000000000000000 [ 68.418184][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.418197][ T2443] R13: 00007f7f94226128 R14: 00007f7f94226090 R15: 00007ffd25462d28 [ 68.418214][ T2443] [ 69.218291][ T543] tipc: Resetting bearer [ 69.250401][ T2431] tipc: Resetting bearer [ 69.313618][ T65] usb 4-1: device descriptor read/64, error -71 [ 69.374306][ T2431] tipc: Disabling bearer [ 69.434045][ T65] usb usb4-port1: attempt power cycle [ 69.476026][ T2459] syzkaller1: entered promiscuous mode [ 69.503274][ T2459] syzkaller1: entered allmulticast mode [ 69.521948][ T2459] FAULT_INJECTION: forcing a failure. [ 69.521948][ T2459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.584319][ T2459] CPU: 1 UID: 0 PID: 2459 Comm: syz.2.565 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 69.584363][ T2459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.584376][ T2459] Call Trace: [ 69.584382][ T2459] [ 69.584390][ T2459] __dump_stack+0x21/0x30 [ 69.584423][ T2459] dump_stack_lvl+0x140/0x1c0 [ 69.584451][ T2459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.584477][ T2459] ? avc_has_perm+0x155/0x240 [ 69.584501][ T2459] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 69.584530][ T2459] dump_stack+0x19/0x20 [ 69.584556][ T2459] should_fail_ex+0x3c2/0x510 [ 69.584580][ T2459] should_fail+0xf/0x20 [ 69.584602][ T2459] should_fail_usercopy+0x1e/0x30 [ 69.584627][ T2459] _copy_from_iter+0x1a6/0x1520 [ 69.584653][ T2459] ? __alloc_pages_noprof+0x35a/0x7e0 [ 69.584681][ T2459] ? _copy_from_iter+0x215/0x1520 [ 69.584708][ T2459] ? __cfi__copy_from_iter+0x10/0x10 [ 69.584737][ T2459] copy_page_from_iter+0x1e5/0x2a0 [ 69.584765][ T2459] tun_get_user+0x82e/0x3720 [ 69.584789][ T2459] ? ptr_ring_consume+0x430/0x430 [ 69.584810][ T2459] ? _parse_integer+0x2e/0x40 [ 69.584833][ T2459] ? __kasan_check_write+0x18/0x20 [ 69.584852][ T2459] ? ref_tracker_alloc+0x32b/0x5b0 [ 69.584878][ T2459] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 69.584903][ T2459] ? selinux_file_permission+0x318/0xb60 [ 69.584926][ T2459] ? __kasan_check_write+0x18/0x20 [ 69.584946][ T2459] ? proc_fail_nth_write+0x184/0x220 [ 69.584975][ T2459] tun_chr_write_iter+0x1fa/0x310 [ 69.584997][ T2459] vfs_write+0x762/0xfd0 [ 69.585019][ T2459] ? __cfi_vfs_write+0x10/0x10 [ 69.585043][ T2459] ksys_write+0x145/0x260 [ 69.585064][ T2459] ? __cfi_ksys_write+0x10/0x10 [ 69.585086][ T2459] ? __kasan_check_read+0x15/0x20 [ 69.585106][ T2459] __x64_sys_write+0x7f/0x90 [ 69.585128][ T2459] x64_sys_call+0x271c/0x2ee0 [ 69.585146][ T2459] do_syscall_64+0x57/0xf0 [ 69.585165][ T2459] ? clear_bhb_loop+0x50/0xa0 [ 69.585188][ T2459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.585210][ T2459] RIP: 0033:0x7f7f93f9e159 [ 69.585227][ T2459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.585243][ T2459] RSP: 002b:00007f7f94e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.585266][ T2459] RAX: ffffffffffffffda RBX: 00007f7f94225fa0 RCX: 00007f7f93f9e159 [ 69.585281][ T2459] RDX: 0000000000000042 RSI: 0000200000000200 RDI: 0000000000000003 [ 69.585295][ T2459] RBP: 00007f7f94e87090 R08: 0000000000000000 R09: 0000000000000000 [ 69.585308][ T2459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.585321][ T2459] R13: 00007f7f94226038 R14: 00007f7f94225fa0 R15: 00007ffd25462d28 [ 69.585339][ T2459] [ 69.863624][ T2471] netlink: 'syz.0.568': attribute type 3 has an invalid length. [ 69.871298][ T2471] netlink: 'syz.0.568': attribute type 3 has an invalid length. [ 69.953483][ T65] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 69.974555][ T65] usb 4-1: device descriptor read/8, error -71 [ 70.104541][ T65] usb 4-1: device descriptor read/8, error -71 [ 70.180991][ T2496] overlayfs: failed to resolve 'upper': -2 [ 70.300849][ T2505] fuse: Bad value for 'group_id' [ 70.305904][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 70.305921][ T36] audit: type=1400 audit(1789500606.748:338): avc: denied { associate } for pid=2503 comm="syz.3.573" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.335125][ T2505] fuse: Bad value for 'group_id' [ 70.364190][ T2505] syzkaller1: entered promiscuous mode [ 70.378895][ T2505] syzkaller1: entered allmulticast mode [ 70.396506][ T36] audit: type=1400 audit(1789500606.748:339): avc: denied { mounton } for pid=2503 comm="syz.3.573" path="/148/file0" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 70.502007][ T2507] syzkaller1: entered promiscuous mode [ 70.507712][ T2507] syzkaller1: entered allmulticast mode [ 70.733590][ T2530] overlayfs: failed to resolve 'upper': -2 [ 70.883481][ T628] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 71.045225][ T65] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.054231][ T628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 71.065247][ T628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 71.076613][ T628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 71.089886][ T65] usb 4-1: device descriptor read/8, error -71 [ 71.096185][ T628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.107837][ T628] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 71.117179][ T628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.125361][ T628] usb 3-1: Product: syz [ 71.129658][ T628] usb 3-1: Manufacturer: syz [ 71.134485][ T628] usb 3-1: SerialNumber: syz [ 71.141694][ T2525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.149876][ T2525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.160289][ T628] pl2303 3-1:1.0: pl2303 converter detected [ 71.166341][ T628] pl2303 3-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 71.226142][ T65] usb 4-1: device descriptor read/8, error -71 [ 71.336955][ T65] usb usb4-port1: unable to enumerate USB device [ 71.366005][ T36] audit: type=1400 audit(1789500607.818:340): avc: denied { search } for pid=2524 comm="syz.2.575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.442825][ T36] audit: type=1400 audit(1789500607.888:341): avc: denied { setattr } for pid=2524 comm="syz.2.575" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.515763][ T628] usb 3-1: USB disconnect, device number 29 [ 72.047557][ T36] audit: type=1400 audit(1789500608.498:342): avc: denied { name_bind } for pid=2536 comm="syz.2.580" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.097628][ T2539] tipc: Enabled bearer , priority 0 [ 72.121149][ T2539] syzkaller0: entered promiscuous mode [ 72.126908][ T2539] syzkaller0: entered allmulticast mode [ 72.132737][ T2539] tipc: Resetting bearer [ 72.155175][ T2538] tipc: Resetting bearer [ 72.181437][ T2538] tipc: Disabling bearer [ 72.793471][ C0] net_ratelimit: 115143 callbacks suppressed [ 72.793488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.811591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.824052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.836299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.848349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.860405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.872484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.884722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.896859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 72.908918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 73.207431][ T2554] overlayfs: failed to resolve 'upper': -2 [ 73.313055][ T2561] tipc: Enabled bearer , priority 0 [ 73.405364][ T2561] syzkaller0: entered promiscuous mode [ 73.415796][ T2573] FAULT_INJECTION: forcing a failure. [ 73.415796][ T2573] name failslab, interval 1, probability 0, space 0, times 0 [ 73.428497][ T2573] CPU: 1 UID: 0 PID: 2573 Comm: syz.0.589 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 73.428528][ T2573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.428540][ T2573] Call Trace: [ 73.428547][ T2573] [ 73.428555][ T2573] __dump_stack+0x21/0x30 [ 73.428587][ T2573] dump_stack_lvl+0x140/0x1c0 [ 73.428614][ T2573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.428640][ T2573] ? stack_depot_save_flags+0x38/0x800 [ 73.428668][ T2573] dump_stack+0x19/0x20 [ 73.428692][ T2573] should_fail_ex+0x3c2/0x510 [ 73.428716][ T2573] should_failslab+0xac/0x100 [ 73.428741][ T2573] kmem_cache_alloc_noprof+0x42/0x410 [ 73.428763][ T2573] ? skb_clone+0x21d/0x470 [ 73.428790][ T2573] ? __asan_set_shadow_00+0x12/0x20 [ 73.428818][ T2573] skb_clone+0x21d/0x470 [ 73.428844][ T2573] packet_rcv+0x693/0x1430 [ 73.428871][ T2573] ? __cfi_packet_rcv+0x10/0x10 [ 73.428904][ T2573] __netif_receive_skb_core+0x31c5/0x3a70 [ 73.428931][ T2573] ? __cfi___skb_flow_dissect+0x10/0x10 [ 73.428956][ T2573] ? qdisc_run_end+0x120/0x120 [ 73.428977][ T2573] ? __cfi___skb_flow_dissect+0x10/0x10 [ 73.428999][ T2573] ? arch_stack_walk+0x10a/0x170 [ 73.429022][ T2573] ? stack_depot_save_flags+0x38/0x800 [ 73.429049][ T2573] __netif_receive_skb_list_core+0x24e/0x880 [ 73.429073][ T2573] ? kasan_save_track+0x3e/0x80 [ 73.429094][ T2573] ? kasan_save_alloc_info+0x3a/0x50 [ 73.429113][ T2573] ? tun_chr_write_iter+0x1fa/0x310 [ 73.429135][ T2573] ? do_syscall_64+0x57/0xf0 [ 73.429155][ T2573] ? set_rps_cpu+0x670/0x670 [ 73.429178][ T2573] netif_receive_skb_list_internal+0x847/0xb00 [ 73.429205][ T2573] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 73.429230][ T2573] ? eth_type_trans+0x333/0x6f0 [ 73.429256][ T2573] napi_complete_done+0x323/0x790 [ 73.429280][ T2573] ? __cfi_napi_complete_done+0x10/0x10 [ 73.429304][ T2573] ? napi_gro_frags+0x7f8/0xde0 [ 73.429329][ T2573] ? tun_get_user+0x2656/0x3720 [ 73.429350][ T2573] tun_get_user+0x2673/0x3720 [ 73.429372][ T2573] ? ptr_ring_consume+0x430/0x430 [ 73.429393][ T2573] ? is_bpf_text_address+0x17b/0x1a0 [ 73.429421][ T2573] ? kernel_text_address+0xa9/0xe0 [ 73.429449][ T2573] ? __kasan_check_write+0x18/0x20 [ 73.429469][ T2573] ? ref_tracker_alloc+0x32b/0x5b0 [ 73.429494][ T2573] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 73.429521][ T2573] ? _parse_integer+0x2e/0x40 [ 73.429542][ T2573] ? kstrtoull+0x13b/0x1e0 [ 73.429563][ T2573] tun_chr_write_iter+0x1fa/0x310 [ 73.429584][ T2573] do_iter_readv_writev+0x629/0x820 [ 73.429608][ T2573] ? vfs_iter_read+0x5e0/0x5e0 [ 73.429631][ T2573] ? bpf_lsm_file_permission+0xd/0x20 [ 73.429657][ T2573] vfs_writev+0x4a5/0xe90 [ 73.429682][ T2573] ? do_writev+0x2e0/0x2e0 [ 73.429706][ T2573] ? vfs_write+0xbcf/0xfd0 [ 73.429731][ T2573] do_writev+0x151/0x2e0 [ 73.429756][ T2573] ? vfs_readv+0xa00/0xa00 [ 73.429781][ T2573] ? __kasan_check_read+0x15/0x20 [ 73.429801][ T2573] __x64_sys_writev+0x81/0x90 [ 73.429823][ T2573] x64_sys_call+0x1fbb/0x2ee0 [ 73.429842][ T2573] do_syscall_64+0x57/0xf0 [ 73.429860][ T2573] ? clear_bhb_loop+0x50/0xa0 [ 73.429892][ T2573] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.429915][ T2573] RIP: 0033:0x7f9654b9e159 [ 73.429933][ T2573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.429950][ T2573] RSP: 002b:00007f9655a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 73.429973][ T2573] RAX: ffffffffffffffda RBX: 00007f9654e26090 RCX: 00007f9654b9e159 [ 73.429989][ T2573] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 73.430002][ T2573] RBP: 00007f9655a23090 R08: 0000000000000000 R09: 0000000000000000 [ 73.430016][ T2573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.430028][ T2573] R13: 00007f9654e26128 R14: 00007f9654e26090 R15: 00007fffd915ee38 [ 73.430046][ T2573] [ 73.828468][ T2561] syzkaller0: entered allmulticast mode [ 73.834425][ T2561] tipc: Resetting bearer [ 73.899880][ T2559] tipc: Resetting bearer [ 73.927145][ T2559] tipc: Disabling bearer [ 73.949282][ T2579] incfs: Can't find or create .index dir in ./cgroup [ 73.956068][ T2579] incfs: mount failed -22 [ 73.963073][ T36] audit: type=1400 audit(1789500610.398:343): avc: denied { mounton } for pid=2576 comm="syz.1.593" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.012855][ T2581] syzkaller1: entered promiscuous mode [ 74.018421][ T2581] syzkaller1: entered allmulticast mode [ 74.055882][ T2584] PM: Enabling pm_trace changes system date and time during resume. [ 74.055882][ T2584] PM: Correct system time has to be restored manually after resume. [ 74.072648][ T36] audit: type=1400 audit(1789500610.508:344): avc: denied { write } for pid=2583 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 74.376080][ T2607] overlayfs: failed to resolve 'upper': -2 [ 74.982085][ T2619] syzkaller1: entered promiscuous mode [ 74.994197][ T2619] syzkaller1: entered allmulticast mode [ 75.143584][ T36] audit: type=1400 audit(1789500611.598:345): avc: denied { read } for pid=2625 comm="syz.2.602" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.193464][ T36] audit: type=1400 audit(1789500611.618:346): avc: denied { open } for pid=2625 comm="syz.2.602" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.248535][ T36] audit: type=1400 audit(1789500611.618:347): avc: denied { ioctl } for pid=2625 comm="syz.2.602" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.349404][ T2629] tipc: Enabled bearer , priority 0 [ 75.414892][ T36] audit: type=1400 audit(1789500611.628:348): avc: denied { setattr } for pid=2625 comm="syz.2.602" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 75.496352][ T2633] syzkaller0: entered promiscuous mode [ 75.523535][ T2633] syzkaller0: entered allmulticast mode [ 75.541087][ T2633] tipc: Resetting bearer [ 75.572453][ T2627] tipc: Resetting bearer [ 75.645455][ T2627] tipc: Disabling bearer [ 75.744992][ T2655] overlayfs: failed to resolve 'upper': -2 [ 75.763763][ T628] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 75.945558][ T628] usb 3-1: Using ep0 maxpacket: 8 [ 75.964935][ T65] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.994154][ T628] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 76.002302][ T628] usb 3-1: config 0 has no interface number 0 [ 76.033701][ T628] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 76.042941][ T628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.067788][ T628] usb 3-1: Product: syz [ 76.072018][ T628] usb 3-1: Manufacturer: syz [ 76.081154][ T628] usb 3-1: SerialNumber: syz [ 76.095854][ T628] usb 3-1: config 0 descriptor?? [ 76.163511][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 76.174736][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.193530][ T65] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 76.214924][ T65] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 76.233467][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.243618][ T65] usb 4-1: Product: syz [ 76.247830][ T65] usb 4-1: Manufacturer: syz [ 76.262439][ T65] usb 4-1: SerialNumber: syz [ 76.267128][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 76.332030][ T628] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 76.358995][ T628] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 76.385539][ T628] usb 3-1: Failed to create links for entity 5 [ 76.392847][ T2693] tipc: Enabled bearer , priority 0 [ 76.406864][ T628] usb 3-1: Failed to register entities (-22). [ 76.429198][ T628] usb 3-1: USB disconnect, device number 30 [ 76.446115][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.466594][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.479997][ T2697] FAULT_INJECTION: forcing a failure. [ 76.479997][ T2697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.498513][ T65] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 76.507605][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.518799][ T2693] syzkaller0: entered promiscuous mode [ 76.524413][ T2693] syzkaller0: entered allmulticast mode [ 76.530728][ T311] usb 2-1: string descriptor 0 read error: -22 [ 76.537744][ T311] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 76.548270][ T2693] tipc: Resetting bearer [ 76.554291][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.562524][ T2697] CPU: 1 UID: 0 PID: 2697 Comm: syz.0.617 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 76.562555][ T2697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.562568][ T2697] Call Trace: [ 76.562575][ T2697] [ 76.562582][ T2697] __dump_stack+0x21/0x30 [ 76.562620][ T2697] dump_stack_lvl+0x140/0x1c0 [ 76.562648][ T2697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.562675][ T2697] ? vsnprintf+0x7b4/0x1ad0 [ 76.562702][ T2697] ? check_stack_object+0x10f/0x150 [ 76.562723][ T2697] dump_stack+0x19/0x20 [ 76.562749][ T2697] should_fail_ex+0x3c2/0x510 [ 76.562773][ T2697] should_fail+0xf/0x20 [ 76.562795][ T2697] should_fail_usercopy+0x1e/0x30 [ 76.562820][ T2697] _copy_from_user+0x20/0xa0 [ 76.562848][ T2697] kstrtouint_from_user+0xde/0x170 [ 76.562871][ T2697] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 76.562894][ T2697] ? selinux_file_permission+0x318/0xb60 [ 76.562917][ T2697] ? __cfi_selinux_file_permission+0x10/0x10 [ 76.562939][ T2697] proc_fail_nth_write+0x8f/0x220 [ 76.562976][ T2697] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 76.563004][ T2697] ? vfs_writev+0xaea/0xe90 [ 76.563029][ T2697] ? bpf_lsm_file_permission+0xd/0x20 [ 76.563056][ T2697] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 76.563084][ T2697] vfs_write+0x3c4/0xfd0 [ 76.563105][ T2697] ? __cfi_vfs_write+0x10/0x10 [ 76.563125][ T2697] ? __kasan_check_write+0x18/0x20 [ 76.563146][ T2697] ? mutex_lock+0x97/0x1d0 [ 76.563168][ T2697] ? __cfi_mutex_lock+0x10/0x10 [ 76.563193][ T2697] ksys_write+0x145/0x260 [ 76.563215][ T2697] ? __cfi_ksys_write+0x10/0x10 [ 76.563236][ T2697] ? __kasan_check_read+0x15/0x20 [ 76.563256][ T2697] __x64_sys_write+0x7f/0x90 [ 76.563278][ T2697] x64_sys_call+0x271c/0x2ee0 [ 76.563297][ T2697] do_syscall_64+0x57/0xf0 [ 76.563315][ T2697] ? clear_bhb_loop+0x50/0xa0 [ 76.563339][ T2697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.563362][ T2697] RIP: 0033:0x7f9654b5e98e [ 76.563379][ T2697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.563397][ T2697] RSP: 002b:00007f9655a22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.563419][ T2697] RAX: ffffffffffffffda RBX: 00007f9655a236c0 RCX: 00007f9654b5e98e [ 76.563435][ T2697] RDX: 0000000000000001 RSI: 00007f9655a230a0 RDI: 0000000000000006 [ 76.563449][ T2697] RBP: 00007f9655a23090 R08: 0000000000000000 R09: 0000000000000000 [ 76.563462][ T2697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.563475][ T2697] R13: 00007f9654e26128 R14: 00007f9654e26090 R15: 00007fffd915ee38 [ 76.563492][ T2697] [ 76.826990][ T65] usb 4-1: 2:1 : can't get High Capability descriptor [ 76.894589][ T2692] tipc: Resetting bearer [ 76.947987][ T2692] tipc: Disabling bearer [ 77.048336][ T45] usb 4-1: USB disconnect, device number 16 [ 77.141415][ T2711] syzkaller1: entered promiscuous mode [ 77.146967][ T2711] syzkaller1: entered allmulticast mode [ 77.164871][ T2711] FAULT_INJECTION: forcing a failure. [ 77.164871][ T2711] name failslab, interval 1, probability 0, space 0, times 0 [ 77.177542][ T2711] CPU: 1 UID: 0 PID: 2711 Comm: syz.2.619 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 77.177572][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.177585][ T2711] Call Trace: [ 77.177591][ T2711] [ 77.177599][ T2711] __dump_stack+0x21/0x30 [ 77.177631][ T2711] dump_stack_lvl+0x140/0x1c0 [ 77.177658][ T2711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.177686][ T2711] ? __cfi_fib_validate_source+0x10/0x10 [ 77.177715][ T2711] dump_stack+0x19/0x20 [ 77.177740][ T2711] should_fail_ex+0x3c2/0x510 [ 77.177765][ T2711] should_failslab+0xac/0x100 [ 77.177790][ T2711] kmem_cache_alloc_noprof+0x42/0x410 [ 77.177811][ T2711] ? dst_alloc+0x13c/0x240 [ 77.177849][ T2711] dst_alloc+0x13c/0x240 [ 77.177877][ T2711] ip_route_input_rcu+0x18d4/0x26b0 [ 77.177907][ T2711] ? ip_route_input_noref+0x150/0x150 [ 77.177939][ T2711] ip_route_input_noref+0xd4/0x150 [ 77.177967][ T2711] ? __cfi_ip_route_input_noref+0x10/0x10 [ 77.177997][ T2711] ? sock_wfree+0x294/0x580 [ 77.178023][ T2711] ip_rcv_finish_core+0x4ae/0x1460 [ 77.178047][ T2711] ip_rcv+0xe8/0x2e0 [ 77.178068][ T2711] ? __cfi_ip_rcv+0x10/0x10 [ 77.178089][ T2711] ? __cfi_ip_rcv_finish+0x10/0x10 [ 77.178112][ T2711] ? __cfi_ip_rcv+0x10/0x10 [ 77.178133][ T2711] netif_receive_skb+0x1f5/0x7b0 [ 77.178159][ T2711] ? __cfi_netif_receive_skb+0x10/0x10 [ 77.178182][ T2711] ? __alloc_pages_noprof+0x35a/0x7e0 [ 77.178210][ T2711] ? kasan_save_alloc_info+0x3a/0x50 [ 77.178228][ T2711] ? virtio_net_hdr_to_skb+0xa08/0x1460 [ 77.178270][ T2711] ? tun_rx_batched+0x171/0x7d0 [ 77.178290][ T2711] tun_rx_batched+0x1d0/0x7d0 [ 77.178312][ T2711] ? pskb_may_pull+0x120/0x120 [ 77.178334][ T2711] tun_get_user+0x2845/0x3720 [ 77.178357][ T2711] ? ptr_ring_consume+0x430/0x430 [ 77.178378][ T2711] ? _parse_integer+0x2e/0x40 [ 77.178401][ T2711] ? __kasan_check_write+0x18/0x20 [ 77.178421][ T2711] ? ref_tracker_alloc+0x32b/0x5b0 [ 77.178447][ T2711] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 77.178472][ T2711] ? selinux_file_permission+0x318/0xb60 [ 77.178495][ T2711] ? __kasan_check_write+0x18/0x20 [ 77.178514][ T2711] ? proc_fail_nth_write+0x184/0x220 [ 77.178544][ T2711] tun_chr_write_iter+0x1fa/0x310 [ 77.178566][ T2711] vfs_write+0x762/0xfd0 [ 77.178588][ T2711] ? __cfi_vfs_write+0x10/0x10 [ 77.178611][ T2711] ksys_write+0x145/0x260 [ 77.178632][ T2711] ? xfd_validate_state+0x68/0x140 [ 77.178659][ T2711] ? __cfi_ksys_write+0x10/0x10 [ 77.178681][ T2711] ? __kasan_check_read+0x15/0x20 [ 77.178700][ T2711] __x64_sys_write+0x7f/0x90 [ 77.178722][ T2711] x64_sys_call+0x271c/0x2ee0 [ 77.178741][ T2711] do_syscall_64+0x57/0xf0 [ 77.178759][ T2711] ? clear_bhb_loop+0x50/0xa0 [ 77.178783][ T2711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.178806][ T2711] RIP: 0033:0x7f7f93f9e159 [ 77.178823][ T2711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.178848][ T2711] RSP: 002b:00007f7f94e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.178871][ T2711] RAX: ffffffffffffffda RBX: 00007f7f94225fa0 RCX: 00007f7f93f9e159 [ 77.178887][ T2711] RDX: 0000000000000042 RSI: 0000200000000200 RDI: 0000000000000003 [ 77.178900][ T2711] RBP: 00007f7f94e87090 R08: 0000000000000000 R09: 0000000000000000 [ 77.178913][ T2711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.178926][ T2711] R13: 00007f7f94226038 R14: 00007f7f94225fa0 R15: 00007ffd25462d28 [ 77.178944][ T2711] [ 77.538867][ T2674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.547512][ T2674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.644740][ T2714] syzkaller1: entered promiscuous mode [ 77.650329][ T2714] syzkaller1: entered allmulticast mode [ 77.730385][ T2716] input: syz1 as /devices/virtual/input/input7 [ 77.767671][ T311] usb 2-1: failed to read current rate; disabling the check [ 77.803450][ C0] net_ratelimit: 96157 callbacks suppressed [ 77.803469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.821577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.833692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.845773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.857860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.869982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.882074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.894148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.906238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.918391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 77.973244][ T2720] FAULT_INJECTION: forcing a failure. [ 77.973244][ T2720] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.986386][ T2720] CPU: 1 UID: 0 PID: 2720 Comm: syz.3.623 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 77.986448][ T2720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.986463][ T2720] Call Trace: [ 77.986478][ T2720] [ 77.986486][ T2720] __dump_stack+0x21/0x30 [ 77.986548][ T2720] dump_stack_lvl+0x140/0x1c0 [ 77.986579][ T2720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.986619][ T2720] dump_stack+0x19/0x20 [ 77.986648][ T2720] should_fail_ex+0x3c2/0x510 [ 77.986675][ T2720] should_fail+0xf/0x20 [ 77.986700][ T2720] get_futex_key+0x178/0x940 [ 77.986737][ T2720] ? __cfi_futex_setup_timer+0x10/0x10 [ 77.986765][ T2720] ? __cfi_get_futex_key+0x10/0x10 [ 77.986803][ T2720] ? futex_lock_pi+0x843/0xa70 [ 77.986842][ T2720] futex_lock_pi+0x241/0xa70 [ 77.986872][ T2720] ? plist_check_list+0x2a8/0x2c0 [ 77.986903][ T2720] ? __cfi_futex_lock_pi+0x10/0x10 [ 77.986941][ T2720] ? plist_del+0x3f0/0x410 [ 77.986961][ T2720] ? __kasan_check_write+0x18/0x20 [ 77.986983][ T2720] ? wake_up_q+0x10a/0x1c0 [ 77.987006][ T2720] ? __cfi_futex_wake_mark+0x10/0x10 [ 77.987026][ T2720] ? bpf_lsm_file_permission+0xd/0x20 [ 77.987054][ T2720] ? vfs_write+0xbcf/0xfd0 [ 77.987077][ T2720] do_futex+0x270/0x510 [ 77.987106][ T2720] ? __cfi_do_futex+0x10/0x10 [ 77.987143][ T2720] ? mutex_unlock+0x90/0x240 [ 77.987169][ T2720] __se_sys_futex+0x13c/0x320 [ 77.987197][ T2720] ? fput+0x1a4/0x230 [ 77.987224][ T2720] ? __x64_sys_futex+0x110/0x110 [ 77.987252][ T2720] ? __kasan_check_write+0x18/0x20 [ 77.987274][ T2720] __x64_sys_futex+0xe9/0x110 [ 77.987302][ T2720] x64_sys_call+0x227f/0x2ee0 [ 77.987321][ T2720] do_syscall_64+0x57/0xf0 [ 77.987340][ T2720] ? clear_bhb_loop+0x50/0xa0 [ 77.987371][ T2720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.987396][ T2720] RIP: 0033:0x7f77c1f9e159 [ 77.987413][ T2720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.987432][ T2720] RSP: 002b:00007f77c2e17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.987457][ T2720] RAX: ffffffffffffffda RBX: 00007f77c2225fa0 RCX: 00007f77c1f9e159 [ 77.987472][ T2720] RDX: 0000000000000080 RSI: 0000000000000006 RDI: 0000000000000000 [ 77.987486][ T2720] RBP: 00007f77c203506b R08: 0000000000000000 R09: 00000000ffffffec [ 77.987511][ T2720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.987524][ T2720] R13: 00007f77c2226038 R14: 00007f77c2225fa0 R15: 00007ffea9b22078 [ 77.987543][ T2720] [ 78.082128][ T312] usb 2-1: USB disconnect, device number 14 [ 78.086114][ T2721] overlayfs: failed to resolve 'upper': -2 [ 78.629753][ T2730] syzkaller1: entered promiscuous mode [ 78.641003][ T2730] syzkaller1: entered allmulticast mode [ 78.668317][ T36] audit: type=1400 audit(1789500615.118:349): avc: denied { write } for pid=2731 comm="syz.1.628" path="socket:[27443]" dev="sockfs" ino=27443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.692745][ T2732] erofs: dax options not supported [ 78.698860][ T2732] tipc: Enabled bearer , priority 0 [ 78.732722][ T2732] syzkaller0: entered promiscuous mode [ 78.753966][ T2732] syzkaller0: entered allmulticast mode [ 78.760312][ T2732] tipc: Resetting bearer [ 78.779999][ T2731] tipc: Resetting bearer [ 78.805108][ T2731] tipc: Disabling bearer [ 78.884846][ T311] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 78.957469][ T36] audit: type=1400 audit(1789500615.408:350): avc: denied { cmd } for pid=2733 comm="iou-wrk-2736" path="socket:[27534]" dev="sockfs" ino=27534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.006703][ T36] audit: type=1400 audit(1789500615.458:351): avc: denied { block_suspend } for pid=2733 comm="syz.3.629" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.074817][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.083345][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 79.099593][ T311] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 79.108993][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.136743][ T311] usb 3-1: Product: syz [ 79.147915][ T311] usb 3-1: Manufacturer: syz [ 79.170294][ T311] usb 3-1: SerialNumber: syz [ 79.391996][ T36] audit: type=1400 audit(1789500615.838:352): avc: denied { ioctl } for pid=2727 comm="syz.2.626" path="socket:[27622]" dev="sockfs" ino=27622 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.431384][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 79.448997][ T311] usb 3-1: USB disconnect, device number 31 [ 79.469753][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.885601][ T36] audit: type=1400 audit(1789500616.338:353): avc: denied { create } for pid=2761 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.931729][ T2770] tipc: Enabled bearer , priority 0 [ 79.958560][ T2770] syzkaller0: entered promiscuous mode [ 79.964349][ T2770] syzkaller0: entered allmulticast mode [ 79.970241][ T2770] tipc: Resetting bearer [ 79.986575][ T2769] tipc: Resetting bearer [ 80.018587][ T2769] tipc: Disabling bearer [ 80.134646][ T36] audit: type=1400 audit(1789500616.578:354): avc: denied { mounton } for pid=2777 comm="syz.2.640" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.646586][ T628] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 81.317164][ T628] usb 3-1: config index 0 descriptor too short (expected 64575, got 68) [ 81.434646][ T628] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 82.813492][ C1] net_ratelimit: 145743 callbacks suppressed [ 82.813517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.813582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 82.819598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.831672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 82.843520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.856375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 82.868360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.880393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 82.892674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.905067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 83.156479][ T628] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 84.088120][ T628] usb 3-1: unable to read config index 1 descriptor/start: -71 [ 87.133953][ T628] usb 3-1: can't read configurations, error -71 [ 87.823456][ C1] net_ratelimit: 114978 callbacks suppressed [ 87.823478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.823555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.829692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.843870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.856492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.869872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 87.882170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.894121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.906227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.918604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.227755][ C1] sched: DL replenish lagged too much [ 92.833469][ C1] net_ratelimit: 132618 callbacks suppressed [ 92.833493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.833533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 92.839849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.851825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.864567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.876456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.888351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.900247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 92.912214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.924270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 97.843460][ C0] net_ratelimit: 141416 callbacks suppressed [ 97.843484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 97.843517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.850372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.863571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.877379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.889568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.905292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 97.917357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.929655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 97.941716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.853446][ C1] net_ratelimit: 134010 callbacks suppressed [ 102.853469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.853563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 102.859969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.872216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.884327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.896460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.909340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.922433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 102.935158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.948926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 107.863451][ C1] net_ratelimit: 135996 callbacks suppressed [ 107.863475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.863488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.863569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.869738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.881735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 107.893724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.905892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 107.918020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.930604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.943125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.873466][ C1] net_ratelimit: 132731 callbacks suppressed [ 112.873489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.873491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.873575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.879762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.892193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 112.905116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.917637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 112.930742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.943487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.955599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.883450][ C1] net_ratelimit: 137872 callbacks suppressed [ 117.883473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.883574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 117.889692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.901699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.913966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.926081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.939818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.951814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 117.964096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.976075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 122.893445][ C0] net_ratelimit: 140823 callbacks suppressed [ 122.893468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.893498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.899557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 122.911655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.923627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 122.935540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.947521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.959445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.971787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.983868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.903434][ C0] net_ratelimit: 144626 callbacks suppressed [ 127.903459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 127.903490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.909586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.921632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.933538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.945435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.957315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 127.969281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.981350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 127.993760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.913415][ C1] net_ratelimit: 142624 callbacks suppressed [ 132.913439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.913461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.919529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.931429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 132.943435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.955386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 132.967304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.979335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.991242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.003200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.923416][ C1] net_ratelimit: 147839 callbacks suppressed [ 137.923439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.923452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.923514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 137.929522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.941699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 137.953682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.965716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.977547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.989552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.001419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.933460][ C1] net_ratelimit: 145111 callbacks suppressed [ 142.933483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.933535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 142.939682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.951636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.963672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.975571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.987449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.999515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 143.011677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.023640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 147.943430][ C1] net_ratelimit: 143807 callbacks suppressed [ 147.943453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.943578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.949532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.961458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.973352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.985280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 147.997252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.009312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 148.021210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.033405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.953408][ C0] net_ratelimit: 127054 callbacks suppressed [ 152.953432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 152.953433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.953499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.959685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.971531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.983608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.995623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.007919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 153.019828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.031965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 157.963424][ C1] net_ratelimit: 128764 callbacks suppressed [ 157.963445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.963446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 157.963573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 157.969717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.982086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.993862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.005847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.017772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.029975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.042307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.973417][ C1] net_ratelimit: 137789 callbacks suppressed [ 162.973439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.973522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.979688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.991776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.004131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.016128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.028228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.040342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.052393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.064876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 167.983406][ C1] net_ratelimit: 137737 callbacks suppressed [ 167.983429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.983452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 167.989654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.001719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 168.014435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.026394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 168.039856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.053016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.065893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.077768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.993430][ C1] net_ratelimit: 141827 callbacks suppressed [ 172.993453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.993492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.999532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.011462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.023509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.035417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 173.047383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.059346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 173.071252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.083237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 178.003445][ C1] net_ratelimit: 137574 callbacks suppressed [ 178.003467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.003570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.009549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.021555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.033438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.045417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.057400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.069311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.081177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.093196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 183.013434][ C1] net_ratelimit: 144346 callbacks suppressed [ 183.013457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.013501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 183.019721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.031916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.043700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.055610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.067652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.079532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.091693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.104294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.023431][ C1] net_ratelimit: 141021 callbacks suppressed [ 188.023455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.023512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.029536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.041450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.053340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.065232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.077223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.089118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.101021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.112927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 193.033406][ C0] net_ratelimit: 140807 callbacks suppressed [ 193.033429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 193.033466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.039698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.051526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.063452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.075336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.087213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.099230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.111138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.123009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.043409][ C0] net_ratelimit: 138466 callbacks suppressed [ 198.043432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 198.043476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.049802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.061512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.073447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.085583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.097466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.109632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.121558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.133428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.053413][ C0] net_ratelimit: 144372 callbacks suppressed [ 203.053436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 203.053463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.059597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 203.071526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.083456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 203.095427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.107521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.119308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.131335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.143395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.063449][ C1] net_ratelimit: 139848 callbacks suppressed [ 208.063470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.063487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.063560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.069600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.081778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 208.093693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.105813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 208.117626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.129589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 208.141666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.073414][ C1] net_ratelimit: 136086 callbacks suppressed [ 213.073438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.073579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.079543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.091484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.103349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.115243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.127233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.139237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.151190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.163084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 218.083389][ C1] net_ratelimit: 137097 callbacks suppressed [ 218.083412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.083430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.089488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.101424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.113315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.125199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 218.137177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.149164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 218.161069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.172954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 223.093383][ C1] net_ratelimit: 141877 callbacks suppressed [ 223.093408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.093432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.099499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.111429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.123312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.135226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 223.147190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.159135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 223.171055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.183031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 226.726025][ T37] INFO: task syz.1.561:2441 blocked for more than 122 seconds. [ 227.204694][ T37] Not tainted syzkaller #0 [ 227.210222][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 227.717210][ T37] task:syz.1.561 state:D stack:0 pid:2441 tgid:2441 ppid:294 flags:0x00004006 [ 227.727502][ T37] Call Trace: [ 227.730797][ T37] [ 227.733748][ T37] __schedule+0x1496/0x20b0 [ 227.738271][ T37] ? __sched_text_start+0x10/0x10 [ 227.743299][ T37] ? __kasan_check_write+0x18/0x20 [ 227.748426][ T37] ? _raw_spin_lock+0x92/0x120 [ 227.753193][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 227.758431][ T37] schedule+0xc5/0x240 [ 227.762506][ T37] schedule_preempt_disabled+0x14/0x30 [ 227.767976][ T37] __mutex_lock+0x902/0x1b90 [ 227.772589][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 227.779373][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 227.784598][ T37] ? wait_for_common+0x56d/0x650 [ 227.789544][ T37] ? xas_start+0x31e/0x3e0 [ 227.794040][ T37] __mutex_lock_slowpath+0xe/0x20 [ 227.799066][ T37] mutex_lock+0x113/0x1d0 [ 227.803412][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 227.808267][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 227.814786][ T37] ? xa_find+0x145/0x170 [ 227.819048][ T37] rcu_barrier+0x4d/0x580 [ 227.823423][ T37] ? __kasan_check_write+0x18/0x20 [ 227.828543][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 227.833692][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 227.839096][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 227.843897][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 227.849028][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 227.854682][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 227.860320][ T37] kvm_put_kvm+0xadf/0x12d0 [ 227.864929][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 227.870055][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 227.875274][ T37] kvm_vm_release+0x47/0x70 [ 227.879792][ T37] __fput+0x208/0xa30 [ 227.883795][ T37] ____fput+0x20/0x30 [ 227.887803][ T37] task_work_run+0x1e5/0x260 [ 227.892743][ T37] ? __cfi_task_work_run+0x10/0x10 [ 227.897991][ T37] ? __kasan_check_write+0x18/0x20 [ 227.903106][ T37] do_exit+0xa46/0x2850 [ 227.907291][ T37] ? __cfi_do_exit+0x10/0x10 [ 227.911885][ T37] ? __kasan_check_write+0x18/0x20 [ 227.917013][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 227.922126][ T37] ? __kasan_check_read+0x15/0x20 [ 227.927163][ T37] do_group_exit+0x21f/0x2f0 [ 227.931757][ T37] ? cgroup_leave_frozen+0x16a/0x2a0 [ 227.937055][ T37] get_signal+0x134c/0x1490 [ 227.941571][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 227.947133][ T37] ? common_nsleep+0x93/0xb0 [ 227.951727][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 227.957888][ T37] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 227.963629][ T37] ? __kasan_check_read+0x15/0x20 [ 227.968652][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 227.974733][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 227.980198][ T37] do_syscall_64+0x63/0xf0 [ 227.984621][ T37] ? clear_bhb_loop+0x50/0xa0 [ 227.989304][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.995207][ T37] RIP: 00fb:0x294e66b3c7c44cb4 [ 227.999967][ T37] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 228.008398][ T37] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 228.016383][ T37] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 228.024369][ T37] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 228.032346][ T37] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 228.040350][ T37] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 228.048341][ T37] [ 228.075058][ T37] INFO: task syz.3.642:2796 blocked for more than 124 seconds. [ 228.082657][ T37] Not tainted syzkaller #0 [ 228.103403][ C0] net_ratelimit: 132810 callbacks suppressed [ 228.103426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.103466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.109513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.121396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.133285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.145266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.157177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.169130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.181022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0) [ 228.192986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.592329][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.601196][ T37] task:syz.3.642 state:D stack:0 pid:2796 tgid:2796 ppid:296 flags:0x00004004 [ 228.611447][ T37] Call Trace: [ 228.614765][ T37] [ 228.617717][ T37] __schedule+0x1496/0x20b0 [ 228.622246][ T37] ? __sched_text_start+0x10/0x10 [ 228.627400][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 228.632989][ T37] ? kvm_tdp_mmu_put_root+0x1fa/0x300 [ 228.638403][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x5a8/0x730 [ 228.645045][ T37] ? kvm_mmu_uninit_tdp_mmu+0x185/0x210 [ 228.650616][ T37] ? kvm_mmu_uninit_vm+0x27/0x60 [ 228.655638][ T37] ? __kasan_check_write+0x18/0x20 [ 228.660776][ T37] ? _raw_spin_lock+0x92/0x120 [ 228.665588][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 228.670811][ T37] schedule+0xc5/0x240 [ 228.674931][ T37] schedule_preempt_disabled+0x14/0x30 [ 228.680421][ T37] __mutex_lock+0x902/0x1b90 [ 228.685050][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 228.691847][ T37] ? __call_rcu_common+0x53c/0x710 [ 228.697054][ T37] __mutex_lock_slowpath+0xe/0x20 [ 228.702161][ T37] mutex_lock+0x113/0x1d0 [ 228.706555][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 228.711446][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 228.718012][ T37] rcu_barrier+0x4d/0x580 [ 228.722366][ T37] ? __kasan_check_write+0x18/0x20 [ 228.727531][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 228.732758][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 228.738288][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 228.743169][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 228.748416][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 228.754110][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 228.759781][ T37] kvm_put_kvm+0xadf/0x12d0 [ 228.764340][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 228.769570][ T37] kvm_vm_release+0x47/0x70 [ 228.774124][ T37] __fput+0x208/0xa30 [ 228.778136][ T37] ____fput+0x20/0x30 [ 228.782141][ T37] task_work_run+0x1e5/0x260 [ 228.786779][ T37] ? __cfi_task_work_run+0x10/0x10 [ 228.791922][ T37] ? __kasan_check_write+0x18/0x20 [ 228.797124][ T37] resume_user_mode_work+0x35/0x50 [ 228.802257][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 228.807770][ T37] do_syscall_64+0x63/0xf0 [ 228.812207][ T37] ? clear_bhb_loop+0x50/0xa0 [ 228.816935][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 228.822866][ T37] RIP: 0033:0x7f77c1f9e159 [ 228.827405][ T37] RSP: 002b:00007ffea9b221d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 228.835859][ T37] RAX: 0000000000000000 RBX: 00007f77c2227da0 RCX: 00007f77c1f9e159 [ 228.843972][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 228.852007][ T37] RBP: 00007f77c2227da0 R08: 00007f77c2226038 R09: 0000000000000000 [ 228.860056][ T37] R10: 00000000003fd6c0 R11: 0000000000000246 R12: 00000000000163a8 [ 228.868086][ T37] R13: 00007f77c222609c R14: 000000000001613f R15: 00007ffea9b222e0 [ 228.876108][ T37] [ 228.879218][ T37] INFO: task syz.2.644:2808 blocked for more than 125 seconds. [ 228.940535][ T37] Not tainted syzkaller #0 [ 228.958387][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.987965][ T37] task:syz.2.644 state:D stack:0 pid:2808 tgid:2808 ppid:295 flags:0x00004004 [ 228.998213][ T37] Call Trace: [ 229.001530][ T37] [ 229.004514][ T37] __schedule+0x1496/0x20b0 [ 229.009053][ T37] ? __sched_text_start+0x10/0x10 [ 229.014114][ T37] ? __kasan_check_write+0x18/0x20 [ 229.019247][ T37] ? _raw_spin_lock+0x92/0x120 [ 229.024074][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 229.029291][ T37] schedule+0xc5/0x240 [ 229.033416][ T37] schedule_preempt_disabled+0x14/0x30 [ 229.038985][ T37] __mutex_lock+0x902/0x1b90 [ 229.043634][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 229.050422][ T37] ? __kasan_check_write+0x18/0x20 [ 229.055575][ T37] ? _raw_spin_lock+0x92/0x120 [ 229.060359][ T37] ? __kasan_check_write+0x18/0x20 [ 229.065511][ T37] ? wake_up_q+0x10a/0x1c0 [ 229.069952][ T37] ? __mutex_unlock_slowpath+0x48f/0x780 [ 229.075618][ T37] ? mutex_unlock+0x240/0x240 [ 229.080320][ T37] __mutex_lock_slowpath+0xe/0x20 [ 229.085393][ T37] mutex_lock+0x113/0x1d0 [ 229.089831][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 229.094737][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 229.099870][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 229.105060][ T37] rcu_barrier+0x4d/0x580 [ 229.109425][ T37] ? __kasan_slab_free+0x6a/0x80 [ 229.114528][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 229.119671][ T37] netdev_run_todo+0x118/0xce0 [ 229.124501][ T37] ? kvfree+0x39/0x50 [ 229.128534][ T37] ? netdev_state_change+0xaa/0x240 [ 229.133768][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 229.139079][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 229.144225][ T37] rtnl_unlock+0x12/0x20 [ 229.148497][ T37] tun_chr_close+0xc5/0x150 [ 229.153021][ T37] __fput+0x208/0xa30 [ 229.157058][ T37] ____fput+0x20/0x30 [ 229.161070][ T37] task_work_run+0x1e5/0x260 [ 229.165699][ T37] ? __cfi_task_work_run+0x10/0x10 [ 229.170840][ T37] ? __kasan_check_read+0x15/0x20 [ 229.175895][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 229.181987][ T37] resume_user_mode_work+0x35/0x50 [ 229.187129][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 229.192620][ T37] do_syscall_64+0x63/0xf0 [ 229.197069][ T37] ? clear_bhb_loop+0x50/0xa0 [ 229.201782][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.207715][ T37] RIP: 0033:0x7f7f93f9e159 [ 229.212149][ T37] RSP: 002b:00007ffd25462e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 229.220607][ T37] RAX: 0000000000000000 RBX: 00007f7f94227da0 RCX: 00007f7f93f9e159 [ 229.228623][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 229.236639][ T37] RBP: 00007f7f94227da0 R08: 00007f7f94226038 R09: 0000000000000000 [ 229.244640][ T37] R10: 00000000003ffd58 R11: 0000000000000246 R12: 00000000000186d2 [ 229.252629][ T37] R13: 00007f7f9422609c R14: 0000000000018420 R15: 00007f7f94226090 [ 229.260907][ T37] [ 229.404364][ T37] NMI backtrace for cpu 1 [ 229.404384][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 229.404413][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.404425][ T37] Call Trace: [ 229.404431][ T37] [ 229.404439][ T37] __dump_stack+0x21/0x30 [ 229.404471][ T37] dump_stack_lvl+0x140/0x1c0 [ 229.404496][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.404524][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 229.404555][ T37] dump_stack+0x19/0x20 [ 229.404581][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 229.404609][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 229.404637][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 229.404665][ T37] ? sched_show_task+0x371/0x530 [ 229.404692][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 229.404719][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.404746][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.404772][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 229.404802][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 229.404829][ T37] watchdog+0xe45/0xf90 [ 229.404849][ T37] ? __kasan_check_write+0x18/0x20 [ 229.404873][ T37] ? __cfi_watchdog+0x10/0x10 [ 229.404894][ T37] ? __kasan_check_read+0x15/0x20 [ 229.404914][ T37] ? __kthread_parkme+0x12f/0x180 [ 229.404934][ T37] ? schedule+0xc5/0x240 [ 229.404954][ T37] kthread+0x2c4/0x360 [ 229.404975][ T37] ? __cfi_watchdog+0x10/0x10 [ 229.405005][ T37] ? __cfi_kthread+0x10/0x10 [ 229.405027][ T37] ret_from_fork+0x64/0xa0 [ 229.405055][ T37] ? __cfi_kthread+0x10/0x10 [ 229.405076][ T37] ret_from_fork_asm+0x1a/0x30 [ 229.405097][ T37] [ 229.405105][ T37] Sending NMI from CPU 1 to CPUs 0: [ 229.550159][ T36] audit: type=1400 audit(1789500765.758:355): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2917]" dev="pipefs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 229.556657][ C0] NMI backtrace for cpu 0 [ 229.556671][ C0] CPU: 0 UID: 0 PID: 36 Comm: kauditd Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 229.556693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.556701][ C0] RIP: 0010:find_match+0x9b/0x10d0 [ 229.556724][ C0] Code: 00 4c 89 6d c0 48 8b 5d d0 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 d5 f9 e2 fc <48> 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 [ 229.556737][ C0] RSP: 0018:ffffc90000007210 EFLAGS: 00000246 [ 229.556753][ C0] RAX: dffffc0000000000 RBX: ffff88810db394c0 RCX: 0000000000000100 [ 229.556765][ C0] RDX: ffff88810367a600 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.556776][ C0] RBP: ffffc900000072d0 R08: ffffc90000007540 R09: ffffc90000007550 [ 229.556788][ C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000001 [ 229.556799][ C0] R13: 1ffff11021b67298 R14: 0000000000000003 R15: 0000000000000000 [ 229.556809][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 229.556823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.556835][ C0] CR2: 00007f55b6a07ff8 CR3: 0000000145686000 CR4: 00000000003526b0 [ 229.556852][ C0] DR0: 0000000000000005 DR1: 00000000570fac24 DR2: 0000000000000010 [ 229.556879][ C0] DR3: 00000000000003ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 229.556890][ C0] Call Trace: [ 229.556895][ C0] [ 229.556904][ C0] __find_rr_leaf+0x249/0x840 [ 229.556921][ C0] ? rt6_check_expired+0x250/0x250 [ 229.556936][ C0] ? __flow_hash_from_keys+0x440/0x6e0 [ 229.556955][ C0] ? fib6_node_lookup+0x4ee/0x520 [ 229.556973][ C0] fib6_table_lookup+0x2d0/0x980 [ 229.556993][ C0] ? __cfi_fib6_table_lookup+0x10/0x10 [ 229.557010][ C0] ? ipv6_rcv+0xf1/0x240 [ 229.557028][ C0] ip6_pol_route+0x17a/0x1370 [ 229.557046][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 229.557068][ C0] ? __cfi_ip6_pol_route+0x10/0x10 [ 229.557085][ C0] ? netif_receive_skb+0x160/0x7b0 [ 229.557103][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 229.557121][ C0] ? br_flood+0x66d/0x720 [ 229.557141][ C0] ? br_pass_frame_up+0x126/0x1b0 [ 229.557156][ C0] ip6_pol_route_input+0x5a/0x80 [ 229.557174][ C0] fib6_rule_lookup+0x4f1/0x6d0 [ 229.557190][ C0] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 229.557208][ C0] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 229.557224][ C0] ? ip6t_do_table+0x1d2/0x1510 [ 229.557244][ C0] ip6_route_input+0x60d/0x8d0 [ 229.557262][ C0] ? __cfi_ip6_route_input+0x10/0x10 [ 229.557281][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 229.557300][ C0] ? __asan_memset+0x39/0x50 [ 229.557316][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 229.557337][ C0] ip6_rcv_finish+0x15a/0x3c0 [ 229.557354][ C0] ipv6_rcv+0xf1/0x240 [ 229.557371][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 229.557388][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 229.557405][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.557420][ C0] ? __kasan_check_read+0x15/0x20 [ 229.557435][ C0] ? sched_balance_trigger+0x21d/0x950 [ 229.557464][ C0] process_backlog+0x472/0xaf0 [ 229.557484][ C0] __napi_poll+0xd0/0x600 [ 229.557501][ C0] net_rx_action+0x5dc/0xd70 [ 229.557521][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 229.557538][ C0] ? sched_clock_cpu+0x75/0x400 [ 229.557559][ C0] ? sched_clock+0x44/0x60 [ 229.557579][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 229.557599][ C0] handle_softirqs+0x1aa/0x620 [ 229.557617][ C0] __irq_exit_rcu+0x47/0xb0 [ 229.557631][ C0] irq_exit_rcu+0xd/0x30 [ 229.557645][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 229.557663][ C0] [ 229.557669][ C0] [ 229.557674][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 229.557692][ C0] RIP: 0010:vprintk_emit+0x547/0x650 [ 229.557713][ C0] Code: 81 e6 00 02 00 00 31 ff e8 16 c7 1e 00 48 81 e3 00 02 00 00 75 07 e8 28 c2 1e 00 eb 06 e8 21 c2 1e 00 fb c6 05 49 53 55 07 00 31 fd ff ff e8 0f c2 1e 00 e9 94 fe ff ff 41 ff ce bf 58 89 41 [ 229.557726][ C0] RSP: 0018:ffffc9000025fac0 EFLAGS: 00000293 [ 229.557739][ C0] RAX: ffffffff8168b7ef RBX: 0000000000000200 RCX: ffff88810367a600 [ 229.557750][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 229.557760][ C0] RBP: ffffc9000025fb88 R08: 0000000000000003 R09: 0000000000000004 [ 229.557770][ C0] R10: dffffc0000000000 R11: fffff5200004bf48 R12: 1ffff9200004bf5c [ 229.557782][ C0] R13: 00000000000000ed R14: 0000000000000000 R15: dffffc0000000000 [ 229.557793][ C0] ? vprintk_emit+0x53f/0x650 [ 229.557813][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 229.557832][ C0] ? __kasan_check_write+0x18/0x20 [ 229.557847][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 229.557868][ C0] vprintk_default+0x2a/0x40 [ 229.557887][ C0] vprintk+0x93/0xa0 [ 229.557900][ C0] _printk+0xde/0x140 [ 229.557919][ C0] ? __cfi__printk+0x10/0x10 [ 229.557938][ C0] kauditd_hold_skb+0x1cc/0x230 [ 229.557956][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 229.557973][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 229.557989][ C0] kauditd_send_queue+0x2c5/0x320 [ 229.558005][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 229.558021][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 229.558039][ C0] kauditd_thread+0x4ea/0x750 [ 229.558054][ C0] ? __kasan_check_write+0x18/0x20 [ 229.558069][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 229.558084][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 229.558099][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 229.558116][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 229.558133][ C0] ? __kasan_check_read+0x15/0x20 [ 229.558147][ C0] ? __kthread_parkme+0x12f/0x180 [ 229.558163][ C0] ? schedule+0xc5/0x240 [ 229.558178][ C0] kthread+0x2c4/0x360 [ 229.558194][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 229.558209][ C0] ? __cfi_kthread+0x10/0x10 [ 229.558226][ C0] ret_from_fork+0x64/0xa0 [ 229.558246][ C0] ? __cfi_kthread+0x10/0x10 [ 229.558263][ C0] ret_from_fork_asm+0x1a/0x30 [ 229.558278][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.113384][ C1] net_ratelimit: 123833 callbacks suppressed [ 233.113406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.113564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.119487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.131420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.143303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.155200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.167245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.179169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.191303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.203158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:5d:dd:09:d0:15, vlan:0)