last executing test programs: 4m51.890711659s ago: executing program 1 (id=6853): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) 4m50.761215776s ago: executing program 1 (id=6921): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) 4m50.707480127s ago: executing program 1 (id=6922): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff"], 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd18751300"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) 4m50.707052797s ago: executing program 1 (id=6924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r0, &(0x7f0000003300)=[{&(0x7f00000000c0)='r', 0x1}], 0x1, 0x8, 0x7, 0xa) 4m50.646538808s ago: executing program 1 (id=6931): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 4m50.646446068s ago: executing program 1 (id=6932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x18}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) 4m35.656355219s ago: executing program 32 (id=6932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x18}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) 3m58.316951963s ago: executing program 4 (id=9182): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009000100"], 0x20}}, 0x0) 3m58.297129724s ago: executing program 4 (id=9186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) 3m58.243178554s ago: executing program 4 (id=9189): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 3m58.242821734s ago: executing program 4 (id=9192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0}}], 0x1, 0x20000080) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) 3m58.186640655s ago: executing program 4 (id=9195): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 3m58.186572015s ago: executing program 4 (id=9196): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x2c, 0x5a, 0x32, 0x20, 0x5372, 0x2303, 0xa10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd9, 0x5, 0x2, 0xec, 0xc8, 0xd8, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)={0x20}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 3m42.856154611s ago: executing program 33 (id=9196): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x2c, 0x5a, 0x32, 0x20, 0x5372, 0x2303, 0xa10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd9, 0x5, 0x2, 0xec, 0xc8, 0xd8, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)={0x20}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 3m6.209097955s ago: executing program 5 (id=10489): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3m6.106527977s ago: executing program 5 (id=10492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) ioprio_set$uid(0x3, 0x0, 0x6000) 3m6.106429587s ago: executing program 5 (id=10493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x40, 0x25, [{{0x9, 0x4, 0x0, 0x1d, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x4, 0xf8, 0x1, {0x22, 0x9eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xfd, 0x4}}}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m5.358836808s ago: executing program 5 (id=10514): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 3m5.358699708s ago: executing program 5 (id=10515): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x3f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) 3m5.190820201s ago: executing program 5 (id=10518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) 3m5.190705421s ago: executing program 34 (id=10518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) 1m6.432491188s ago: executing program 3 (id=13986): r0 = inotify_init1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.378873189s ago: executing program 3 (id=13987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xcd, 0x0, 0x1000000}]}) 1m6.378613949s ago: executing program 3 (id=13988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) statx(r0, &(0x7f0000001280)='./file0\x00', 0x1000, 0x20, 0x0) 1m6.368562649s ago: executing program 3 (id=13989): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 1m6.357151459s ago: executing program 3 (id=13990): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="ba7d", 0x2}], 0x1) 1m6.27886944s ago: executing program 3 (id=13991): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 57.886140969s ago: executing program 0 (id=14128): openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) 57.87822792s ago: executing program 0 (id=14129): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0xc0386723, &(0x7f00000000c0)={r1}) 57.86483677s ago: executing program 0 (id=14130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000092}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)) 57.759747931s ago: executing program 0 (id=14135): sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 57.706858282s ago: executing program 0 (id=14136): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) 57.706646792s ago: executing program 0 (id=14137): capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 51.147316123s ago: executing program 35 (id=13991): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 42.622785434s ago: executing program 36 (id=14137): capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 36.703031986s ago: executing program 8 (id=14506): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x52) 36.692094876s ago: executing program 8 (id=14507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) 36.641858887s ago: executing program 8 (id=14508): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 35.475341394s ago: executing program 8 (id=14529): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x0, 0x3, 0xc, "522743b2", "ddf6bc1e"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x7, 0x0, 0xff, 0xe, 0x3}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0xf, 0x16, "4388289b8aca4d62e5a7ebdbe57a4ac25a4682cc269e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) 35.370497536s ago: executing program 6 (id=14533): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_disconnect(r0) 33.970883008s ago: executing program 6 (id=14540): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 33.970692637s ago: executing program 6 (id=14541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) 33.876690719s ago: executing program 6 (id=14542): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 33.865103279s ago: executing program 6 (id=14543): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) 33.77205566s ago: executing program 6 (id=14546): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x9, 0x4e23, 0x8, 0xa, 0xa0, 0xc0, 0x2}, {0x2, 0xfffffffffffffffc, 0x1000, 0x74, 0x80000000008, 0x1, 0x8000000000000000, 0x9}, {0x0, 0x6, 0xc3, 0x5}, 0xfffffff9, 0x6e6bc0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x33}, 0xa, @in6=@local, 0x3507, 0x0, 0x3, 0x1, 0xf80, 0x80000, 0xdaf1}}, 0xe8) 33.673799402s ago: executing program 37 (id=14546): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x9, 0x4e23, 0x8, 0xa, 0xa0, 0xc0, 0x2}, {0x2, 0xfffffffffffffffc, 0x1000, 0x74, 0x80000000008, 0x1, 0x8000000000000000, 0x9}, {0x0, 0x6, 0xc3, 0x5}, 0xfffffff9, 0x6e6bc0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x33}, 0xa, @in6=@local, 0x3507, 0x0, 0x3, 0x1, 0xf80, 0x80000, 0xdaf1}}, 0xe8) 32.426574111s ago: executing program 8 (id=14577): mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') 32.426286632s ago: executing program 8 (id=14579): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000f8f000/0x1000)=nil, 0x1000}}) 26.226296016s ago: executing program 9 (id=14668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x24000000, 0x0, 0x0) 26.134567138s ago: executing program 9 (id=14670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff7, @loopback, 0x1ff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) 26.082350479s ago: executing program 9 (id=14672): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00003be000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x2}) 25.326754941s ago: executing program 2 (id=14680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x314d6a91125d5e3b, 0xfffffffc}) 25.158802633s ago: executing program 9 (id=14684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000011}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) dup3(r1, r0, 0x0) 24.882859757s ago: executing program 9 (id=14688): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, 0x0) 24.858747718s ago: executing program 7 (id=14689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 24.69984376s ago: executing program 7 (id=14690): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400003, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x5b8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) 24.518815593s ago: executing program 7 (id=14691): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f0000000380)="5e799f8fcc4bc4f6c48411860eee170a75b22230aad26ed7", 0x5dc) 24.422718334s ago: executing program 7 (id=14692): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 23.544267698s ago: executing program 7 (id=14693): setuid(0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) 23.486817519s ago: executing program 2 (id=14694): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @local, 0x14}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = dup2(r0, r0) write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43, 0x9, 0xfffd, {0x0, 0x0, 0x2000000000000, 0x2, 0x6, 0x10001, 0x0, 0x986, 0x4a}}, 0x43) 23.467407889s ago: executing program 2 (id=14695): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x7, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 23.458923929s ago: executing program 7 (id=14696): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) 23.366893391s ago: executing program 2 (id=14697): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='\v', 0x1, 0x40088c4, 0x0, 0x0) close(r0) 23.366566161s ago: executing program 2 (id=14698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r0) setuid(0xee01) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'bond_slave_0\x00', @local}) 23.343480401s ago: executing program 2 (id=14699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000a0000000ff03dfd2eb738da3000000000000b4601a32f3db514cc7084fafd6f0b1db17a08a5a8516967f17035092f39a6219"], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 23.082729645s ago: executing program 9 (id=14700): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 16.760494762s ago: executing program 38 (id=14579): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000f8f000/0x1000)=nil, 0x1000}}) 4.838179255s ago: executing program 39 (id=14700): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1.777654243s ago: executing program 40 (id=14699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000a0000000ff03dfd2eb738da3000000000000b4601a32f3db514cc7084fafd6f0b1db17a08a5a8516967f17035092f39a6219"], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 41 (id=14696): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) kernel console output (not intermixed with test programs): mber 109 [ 368.568330][T25506] bridge_slave_0: left allmulticast mode [ 368.579912][T25506] bridge_slave_0: left promiscuous mode [ 368.585978][T25506] : port 1(bridge_slave_0) entered disabled state [ 368.651575][T27797] kvm: kvm [27796]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 368.673928][T27801] __vm_enough_memory: pid: 27801, comm: syz.3.13305, bytes: 70373039144960 not enough memory for the allocation [ 368.742286][T27786] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.749388][T27786] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.756730][T27786] bridge_slave_0: entered allmulticast mode [ 368.766316][T27786] bridge_slave_0: entered promiscuous mode [ 368.772620][T25506] tipc: Disabling bearer [ 368.779098][T25506] tipc: Left network mode [ 368.783514][T27786] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.790777][T27786] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.797906][T27786] bridge_slave_1: entered allmulticast mode [ 368.804190][T27786] bridge_slave_1: entered promiscuous mode [ 368.821127][T25506] veth1_macvtap: left allmulticast mode [ 368.835958][T25506] veth1_macvtap: left promiscuous mode [ 368.939269][T27786] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.946438][T27786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.953684][T27786] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.960736][T27786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.966123][ T1677] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 368.998302][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.006213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.026753][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.033836][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.042650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.049718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.074086][T27786] veth0_vlan: entered promiscuous mode [ 369.084591][T27786] veth1_macvtap: entered promiscuous mode [ 369.146088][ T1677] usb 4-1: Using ep0 maxpacket: 32 [ 369.152676][ T1677] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.164465][ T1677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 369.175708][ T1677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.187421][ T1677] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 369.197459][ T1677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.208212][ T1677] usb 4-1: config 0 descriptor?? [ 369.213691][T27805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.229516][ T1677] hub 4-1:0.0: USB hub found [ 369.276124][ T736] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 369.427654][ T736] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 369.438850][ T1677] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 369.447100][ T736] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 369.460648][ T736] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 369.469816][ T736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.478162][ T736] usb 7-1: Product: syz [ 369.482397][ T736] usb 7-1: Manufacturer: syz [ 369.487311][ T736] usb 7-1: SerialNumber: syz [ 369.496325][ T736] usb 7-1: config 0 descriptor?? [ 369.501580][T27827] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 369.513848][ T736] hub 7-1:0.0: bad descriptor, ignoring hub [ 369.521308][ T736] hub 7-1:0.0: probe with driver hub failed with error -5 [ 369.628697][ T1677] usbhid 4-1:0.0: can't add hid device: -71 [ 369.637031][ T1677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 369.666248][ T1677] usb 4-1: USB disconnect, device number 110 [ 369.714814][ T10] usb 7-1: USB disconnect, device number 28 [ 370.116153][T27898] input: syz0 as /devices/virtual/input/input108 [ 370.122552][T27898] input: failed to attach handler leds to device input108, error: -6 [ 370.546285][T27957] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 370.558669][T27957] overlayfs: missing 'lowerdir' [ 370.584037][T27961] kvm: kvm [27960]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 370.816047][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 370.835836][ T736] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 370.965846][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 370.972216][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.980751][ T10] usb 7-1: config 0 has no interface number 0 [ 370.986890][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.997887][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.007756][ T10] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 371.008905][ T736] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 371.023796][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.027112][ T736] usb 3-1: config 0 has no interface number 0 [ 371.036037][ T10] usb 7-1: config 0 descriptor?? [ 371.045851][ T736] usb 3-1: config 0 interface 208 has no altsetting 0 [ 371.054684][ T736] usb 3-1: New USB device found, idVendor=0403, idProduct=fa04, bcdDevice=97.e1 [ 371.063828][ T736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.071882][ T736] usb 3-1: Product: syz [ 371.076374][ T736] usb 3-1: Manufacturer: syz [ 371.081097][ T736] usb 3-1: SerialNumber: syz [ 371.086985][ T736] usb 3-1: config 0 descriptor?? [ 371.189381][T27982] bpf: Bad value for 'gid' [ 371.207649][T27984] rust_binder: Error while translating object. [ 371.207681][T27984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 371.213890][T27984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:152 [ 371.295466][ T736] ftdi_sio 3-1:0.208: FTDI USB Serial Device converter detected [ 371.313506][ T736] ftdi_sio ttyUSB0: unknown device type: 0x97e1 [ 371.322158][ T736] usb 3-1: USB disconnect, device number 112 [ 371.329063][ T736] ftdi_sio 3-1:0.208: device disconnected [ 371.656840][ T10] uclogic 0003:28BD:0094.007C: failed retrieving string descriptor #100: -71 [ 371.666042][ T10] uclogic 0003:28BD:0094.007C: failed retrieving pen parameters: -71 [ 371.674199][ T10] uclogic 0003:28BD:0094.007C: pen probing failed: -71 [ 371.681121][ T10] uclogic 0003:28BD:0094.007C: failed probing parameters: -71 [ 371.688703][ T10] uclogic 0003:28BD:0094.007C: probe with driver uclogic failed with error -71 [ 371.698966][ T10] usb 7-1: USB disconnect, device number 29 [ 371.765975][ T9] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 371.916987][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.928034][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 371.940883][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 371.949953][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.959043][ T9] usb 1-1: config 0 descriptor?? [ 372.135822][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 372.286055][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 372.292123][ T10] usb 3-1: config 13 has an invalid interface number: 203 but max is 0 [ 372.300634][ T10] usb 3-1: config 13 has no interface number 0 [ 372.306873][ T10] usb 3-1: config 13 interface 203 has no altsetting 0 [ 372.315010][ T10] usb 3-1: New USB device found, idVendor=0e21, idProduct=0520, bcdDevice= 1.00 [ 372.324094][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.332134][ T10] usb 3-1: Product: syz [ 372.336333][ T10] usb 3-1: Manufacturer: syz [ 372.340946][ T10] usb 3-1: SerialNumber: syz [ 372.369415][ T9] konepure 0003:1E7D:2DB4.007D: item fetching failed at offset 10/11 [ 372.377702][ T9] konepure 0003:1E7D:2DB4.007D: parse failed [ 372.383714][ T9] konepure 0003:1E7D:2DB4.007D: probe with driver konepure failed with error -22 [ 372.405853][T14277] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 372.405854][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 372.418115][ T64] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 372.445197][T28024] bridge0: entered promiscuous mode [ 372.450778][T28023] bridge0: left promiscuous mode [ 372.518614][T28028] overlayfs: workdir and upperdir must reside under the same mount [ 372.577983][ T736] usb 1-1: USB disconnect, device number 114 [ 372.589000][ T10] usb-storage 3-1:13.203: USB Mass Storage device detected [ 372.597011][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 372.603592][ T64] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.614958][ T64] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 372.615589][ T10] usb-storage 3-1:13.203: Quirks match for vid 0e21 pid 0520: 2 [ 372.636121][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.642751][ T64] usb 7-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 372.651911][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.661303][ T64] usb 7-1: config 0 descriptor?? [ 372.677803][ T10] usb 3-1: USB disconnect, device number 113 [ 372.897401][T28051] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 372.897404][ T36] audit: type=1400 audit(2000000129.301:33847): avc: denied { remount } for pid=28050 comm="syz.3.13423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 373.069720][ T64] logitech-hidpp-device 0003:046D:C262.007E: ignoring exceeding usage max [ 373.079985][ T64] logitech-hidpp-device 0003:046D:C262.007E: item fetching failed at offset 5/8 [ 373.089362][ T64] logitech-hidpp-device 0003:046D:C262.007E: hidpp_probe:parse failed [ 373.110298][ T64] logitech-hidpp-device 0003:046D:C262.007E: probe with driver logitech-hidpp-device failed with error -22 [ 373.161833][T28070] can0: slcan on ttyS3. [ 373.237360][T28070] can0 (unregistered): slcan off ttyS3. [ 373.281227][ T9] usb 7-1: USB disconnect, device number 30 [ 373.836776][ T36] audit: type=1326 audit(2000000130.241:33848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28131 comm="syz.6.13447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee2b8e929 code=0x0 [ 374.052462][ T36] audit: type=1400 audit(2000000130.451:33849): avc: denied { attach_queue } for pid=28156 comm="syz.2.13460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.103444][ T36] audit: type=1326 audit(2000000130.501:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.3.13465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3378e929 code=0x0 [ 374.351470][T28194] batadv_slave_1: entered promiscuous mode [ 374.357711][T28193] batadv_slave_1: left promiscuous mode [ 374.698342][ T36] audit: type=1326 audit(2000000131.101:33851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.0.13492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9254d8e929 code=0x0 [ 374.956132][ T737] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 375.107469][ T737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.121882][ T737] usb 7-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00 [ 375.131148][ T737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.140370][ T737] usb 7-1: config 0 descriptor?? [ 375.201312][T28277] input: syz0 as /devices/virtual/input/input109 [ 375.352054][T28287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=28287 comm=syz.3.13521 [ 375.515334][T28302] input: syz1 as /devices/virtual/input/input110 [ 375.567410][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.580898][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.589123][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.596387][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.603361][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.610510][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.620136][ T737] wacom 0003:056A:00E2.007F: unknown main item tag 0x0 [ 375.637752][ T737] wacom 0003:056A:00E2.007F: hidraw0: USB HID v0.2f Device [HID 056a:00e2] on usb-dummy_hcd.6-1/input0 [ 375.768334][ T9] usb 7-1: USB disconnect, device number 31 [ 375.875850][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 376.025872][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 376.032328][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.043372][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.053165][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 376.066011][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice=36.5b [ 376.075051][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.083868][ T10] usb 4-1: config 0 descriptor?? [ 376.493457][ T10] logitech 0003:046D:C623.0080: unknown main item tag 0xe [ 376.500754][ T10] logitech 0003:046D:C623.0080: unknown main item tag 0x4 [ 376.507969][ T10] logitech 0003:046D:C623.0080: item fetching failed at offset 24/69 [ 376.516305][ T10] logitech 0003:046D:C623.0080: parse failed [ 376.522368][ T10] logitech 0003:046D:C623.0080: probe with driver logitech failed with error -22 [ 376.665634][ T36] audit: type=1326 audit(2000000133.061:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.2.13546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5658e929 code=0x7fc00000 [ 376.692778][ T737] usb 4-1: USB disconnect, device number 111 [ 376.846096][T28402] kvm: kvm [28401]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 377.051284][T28411] input: syz0 as /devices/virtual/input/input114 [ 377.055871][ T31] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 377.216922][ T31] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 377.226082][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.239894][ T31] usb 7-1: config 0 descriptor?? [ 377.263356][T28417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13583'. [ 377.511810][T28421] kvm_intel: kvm [28420]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x203 [ 377.652265][T28423] 9p: Unknown Cache mode or invalid value 딊 [ 377.971346][T28455] loop9: detected capacity change from 0 to 7 [ 377.979956][T28455] buffer_io_error: 7 callbacks suppressed [ 377.979974][T28455] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.994945][T28455] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.002893][T28455] loop9: unable to read partition table [ 378.014372][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.022991][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.031316][T28455] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 378.031316][T28455] ) failed (rc=-5) [ 378.049623][ T31] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 378.061756][T28460] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.069892][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.077964][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.088471][ T31] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 378.100635][T28460] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.108715][T28460] loop9: unable to read partition table [ 378.108942][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.114415][T28460] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 378.114415][T28460] ) failed (rc=-5) [ 378.135528][ T31] asix 7-1:0.0: probe with driver asix failed with error -71 [ 378.143928][ T31] usb 7-1: USB disconnect, device number 32 [ 378.156232][T19693] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.805842][ T736] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 378.820032][T28551] rust_binder: 28551: no such ref 0 [ 378.825472][T28551] rust_binder: Write failure EINVAL in pid:302 [ 378.825617][T28551] rust_binder: Read failure Err(EAGAIN) in pid:302 [ 378.956873][ T736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.974892][ T736] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.984467][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.001295][ T736] usb 3-1: config 0 descriptor?? [ 379.014842][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13654'. [ 379.077848][T28574] rust_binder: Write failure EFAULT in pid:316 [ 379.101162][T28580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.408747][T28617] input: syz1 as /devices/virtual/input/input116 [ 379.422442][ T736] keytouch 0003:0926:3333.0081: fixing up Keytouch IEC report descriptor [ 379.442203][ T736] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0081/input/input117 [ 379.539057][ T736] keytouch 0003:0926:3333.0081: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 379.625910][ T737] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 379.776950][ T737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.787938][ T737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.797823][ T737] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 379.806928][ T737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.815761][ T737] usb 1-1: config 0 descriptor?? [ 379.837704][ T9] usb 3-1: USB disconnect, device number 114 [ 380.225516][ T737] hid-multitouch 0003:1FD2:6007.0082: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 380.425200][ T737] usb 1-1: USB disconnect, device number 115 [ 380.525846][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 380.595838][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 380.685853][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 380.693358][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.705698][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.713786][ T9] usb 7-1: Product: syz [ 380.718258][ T9] usb 7-1: Manufacturer: syz [ 380.722895][ T9] usb 7-1: SerialNumber: syz [ 380.733318][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 380.739791][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 380.765878][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 380.772332][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.783627][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.793792][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 380.804087][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.814447][ T10] usb 3-1: config 0 descriptor?? [ 380.952691][ T9] r8152-cfgselector 7-1: Needed 2 retries to read version [ 380.960033][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 380.969020][ T9] r8152-cfgselector 7-1: bad CDC descriptors [ 381.026492][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 381.032626][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.041426][ T10] usb 3-1: USB disconnect, device number 115 [ 381.154058][ T9] r8152-cfgselector 7-1: USB disconnect, device number 33 [ 381.557854][ T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 381.700287][T28714] loop9: detected capacity change from 0 to 7 [ 381.706715][T28714] loop9: unable to read partition table [ 381.712494][T28714] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 381.712494][T28714] ) failed (rc=-5) [ 381.715887][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 381.734590][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.745667][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.772054][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.785398][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.794551][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.806500][ T9] usb 1-1: config 0 descriptor?? [ 381.895857][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 382.058938][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 382.065415][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.077023][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.090728][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.104651][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.113837][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.124631][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 382.130720][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 382.138011][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 382.220862][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0083/input/input118 [ 382.234928][ T9] microsoft 0003:045E:07DA.0083: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 382.417488][ T9] usb 1-1: USB disconnect, device number 116 [ 382.442637][T28765] vcan0: entered allmulticast mode [ 382.449140][T28765] vcan0: left allmulticast mode [ 382.756048][ T737] usb 4-1: reset high-speed USB device number 112 using dummy_hcd [ 382.845827][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 382.995850][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 383.002074][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.013000][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.022880][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 383.031993][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.043413][ T10] usb 7-1: config 0 descriptor?? [ 383.215947][ T737] usb 4-1: USB disconnect, device number 112 [ 383.456084][ T10] kone 0003:1E7D:2CED.0084: unknown main item tag 0x0 [ 383.471842][ T10] kone 0003:1E7D:2CED.0084: unknown main item tag 0x0 [ 383.479750][ T10] kone 0003:1E7D:2CED.0084: unknown main item tag 0x0 [ 383.487052][ T10] kone 0003:1E7D:2CED.0084: unknown main item tag 0x0 [ 383.494024][ T10] kone 0003:1E7D:2CED.0084: unknown main item tag 0x0 [ 383.512469][ T10] kone 0003:1E7D:2CED.0084: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 383.666040][ T10] kone 0003:1E7D:2CED.0084: couldn't init struct kone_device [ 383.673510][ T10] kone 0003:1E7D:2CED.0084: couldn't install mouse [ 383.704064][ T10] kone 0003:1E7D:2CED.0084: probe with driver kone failed with error -5 [ 383.725234][ T10] usb 7-1: USB disconnect, device number 34 [ 383.795149][T28833] warn_alloc: 1 callbacks suppressed [ 383.795166][T28833] syz.0.13777: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 383.815752][T28833] CPU: 1 UID: 0 PID: 28833 Comm: syz.0.13777 Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 57fdd3e93686ba62eddbadecdc135f5c3b5b89e0 [ 383.815790][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.815804][T28833] Call Trace: [ 383.815812][T28833] [ 383.815821][T28833] __dump_stack+0x21/0x30 [ 383.815852][T28833] dump_stack_lvl+0x10c/0x190 [ 383.815878][T28833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 383.815905][T28833] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 383.815928][T28833] dump_stack+0x19/0x20 [ 383.815952][T28833] warn_alloc+0x1bc/0x2a0 [ 383.815974][T28833] ? stack_depot_save_flags+0x38/0x800 [ 383.816002][T28833] ? __cfi_warn_alloc+0x10/0x10 [ 383.816021][T28833] ? kasan_save_track+0x4f/0x80 [ 383.816043][T28833] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 383.816063][T28833] ? xskq_create+0x68/0x2a0 [ 383.816080][T28833] ? xsk_init_queue+0xb6/0x120 [ 383.816096][T28833] ? xsk_setsockopt+0x43f/0x6f0 [ 383.816111][T28833] ? do_sock_setsockopt+0x26a/0x400 [ 383.816129][T28833] ? __x64_sys_setsockopt+0x1b8/0x250 [ 383.816145][T28833] ? x64_sys_call+0x2adc/0x2ee0 [ 383.816166][T28833] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 383.816183][T28833] __vmalloc_node_range_noprof+0x135/0x1420 [ 383.816205][T28833] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 383.816222][T28833] ? avc_has_perm+0x144/0x220 [ 383.816239][T28833] ? kasan_save_alloc_info+0x40/0x50 [ 383.816256][T28833] ? __kasan_kmalloc+0x96/0xb0 [ 383.816278][T28833] vmalloc_user_noprof+0x77/0x90 [ 383.816294][T28833] ? xskq_create+0xdb/0x2a0 [ 383.816311][T28833] xskq_create+0xdb/0x2a0 [ 383.816328][T28833] xsk_init_queue+0xb6/0x120 [ 383.816343][T28833] xsk_setsockopt+0x43f/0x6f0 [ 383.816359][T28833] ? __cfi_xsk_setsockopt+0x10/0x10 [ 383.816382][T28833] ? do_futex+0x309/0x500 [ 383.816405][T28833] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 383.816421][T28833] ? security_socket_setsockopt+0x33/0xd0 [ 383.816441][T28833] ? __cfi_xsk_setsockopt+0x10/0x10 [ 383.816457][T28833] do_sock_setsockopt+0x26a/0x400 [ 383.816474][T28833] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 383.816492][T28833] __x64_sys_setsockopt+0x1b8/0x250 [ 383.816511][T28833] x64_sys_call+0x2adc/0x2ee0 [ 383.816530][T28833] do_syscall_64+0x58/0xf0 [ 383.816544][T28833] ? clear_bhb_loop+0x50/0xa0 [ 383.816562][T28833] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 383.816579][T28833] RIP: 0033:0x7f9254d8e929 [ 383.816592][T28833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.816605][T28833] RSP: 002b:00007f9255bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.816621][T28833] RAX: ffffffffffffffda RBX: 00007f9254fb5fa0 RCX: 00007f9254d8e929 [ 383.816633][T28833] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 383.816642][T28833] RBP: 00007f9254e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 383.816651][T28833] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 383.816661][T28833] R13: 0000000000000000 R14: 00007f9254fb5fa0 R15: 00007ffe0252cff8 [ 383.816673][T28833] [ 384.105858][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 384.108110][T28833] Mem-Info: [ 384.128605][T28833] active_anon:7022 inactive_anon:25 isolated_anon:0 [ 384.128605][T28833] active_file:13212 inactive_file:13166 isolated_file:0 [ 384.128605][T28833] unevictable:0 dirty:235 writeback:0 [ 384.128605][T28833] slab_reclaimable:6906 slab_unreclaimable:72889 [ 384.128605][T28833] mapped:24810 shmem:163 pagetables:1401 [ 384.128605][T28833] sec_pagetables:0 bounce:0 [ 384.128605][T28833] kernel_misc_reclaimable:0 [ 384.128605][T28833] free:1495887 free_pcp:8909 free_cma:0 [ 384.173637][ T736] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 384.181737][T28833] Node 0 active_anon:27988kB inactive_anon:100kB active_file:52848kB inactive_file:52664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99140kB dirty:940kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5448kB pagetables:5504kB sec_pagetables:0kB all_unreclaimable? no [ 384.214026][T28833] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:68kB free_cma:0kB [ 384.244169][T28833] lowmem_reserve[]: 0 3921 3921 [ 384.249097][T28833] Normal free:3023208kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27988kB inactive_anon:100kB active_file:52848kB inactive_file:52664kB unevictable:0kB writepending:940kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:30080kB local_pcp:15496kB free_cma:0kB [ 384.280965][T28833] lowmem_reserve[]: 0 0 0 [ 384.285361][T28833] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 384.301326][T28833] Normal: 24*4kB (U) 157*8kB (UME) 88*16kB (UM) 155*32kB (ME) 260*64kB (UME) 138*128kB (UME) 118*256kB (UME) 51*512kB (UME) 30*1024kB (UM) 19*2048kB (UME) 697*4096kB (UME) = 3022888kB [ 384.319716][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 384.327105][T28833] 26613 total pagecache pages [ 384.331870][T28833] 76 pages in swap cache [ 384.336755][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 384.345650][ T9] usb 3-1: config 0 has no interface number 0 [ 384.355934][T28833] Free swap = 124436kB [ 384.357249][ T736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 384.360111][T28833] Total swap = 124996kB [ 384.360125][T28833] 2097051 pages RAM [ 384.360135][T28833] 0 pages HighMem/MovableOnly [ 384.369130][ T736] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 384.372024][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 384.376035][ T736] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 384.382234][T28833] 351521 pages reserved [ 384.390033][ T736] usb 4-1: config 1 has no interface number 1 [ 384.396232][T28833] 0 pages cma reserved [ 384.405416][ T736] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 384.412369][T28833] Memory allocations: [ 384.415746][ T736] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 384.420086][T28833] 0 B 0 init/main.c:1370 func:do_initcalls [ 384.454265][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 384.463298][ T736] usb 4-1: string descriptor 0 read error: -22 [ 384.463354][ T736] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.463379][ T736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.469637][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.495877][T28833] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 384.503987][T28833] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 384.513516][ T736] usb 4-1: low speed audio streaming not supported [ 384.515898][ T9] usb 3-1: Product: syz [ 384.524531][T28833] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 384.539314][ T9] usb 3-1: Manufacturer: syz [ 384.543957][ T9] usb 3-1: SerialNumber: syz [ 384.548662][T28833] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 384.557511][ T9] usb 3-1: config 0 descriptor?? [ 384.567195][T28833] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 384.576025][ T9] smsc75xx v1.0.0 [ 384.580877][T28833] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 384.590229][T28833] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 384.598198][T28833] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 384.606151][T28833] 0 B 0 init/initramfs.c:101 func:find_link [ 384.690671][T28852] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 384.751310][T28858] SELinux: failed to load policy [ 384.796962][T25506] Bluetooth: hci0: Frame reassembly failed (-84) [ 384.818957][T28870] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13795'. [ 385.165615][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 385.177104][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 385.186823][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 385.194434][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 385.204770][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 385.214586][ T9] usb 3-1: USB disconnect, device number 116 [ 385.357950][ T10] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.369653][ T10] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.380701][ T10] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.392115][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 385.401182][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.412166][T28879] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 386.226039][ T10] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 386.233658][ T10] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input119 [ 386.245291][ T10] usb 7-1: USB disconnect, device number 35 [ 386.703559][ T736] usb 4-1: USB disconnect, device number 113 [ 386.866964][ T36] audit: type=1326 audit(2000000143.271:33853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28940 comm="syz.3.13827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3378e929 code=0x0 [ 386.890088][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 386.895842][T14277] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 386.992588][ T36] audit: type=1400 audit(2000000143.391:33854): avc: denied { unmount } for pid=27429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 387.385843][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 387.505844][ T736] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 387.546987][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.557992][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.568747][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.581678][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.590790][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.604154][ T9] usb 7-1: config 0 descriptor?? [ 387.613284][ T9] hub 7-1:0.0: USB hub found [ 387.675846][ T736] usb 1-1: Using ep0 maxpacket: 16 [ 387.682145][ T736] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.693106][ T736] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.700803][ T736] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 387.709928][ T736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.725547][ T736] usb 1-1: config 0 descriptor?? [ 387.761435][T29002] input: syz0 as /devices/virtual/input/input120 [ 387.812936][ T9] hub 7-1:0.0: 14 ports detected [ 387.822093][ T9] hub 7-1:0.0: insufficient power available to use all downstream ports [ 387.835756][ T36] audit: type=1400 audit(2000000144.241:33855): avc: denied { mount } for pid=29011 comm="syz.3.13860" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 387.850087][T29014] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 387.862312][ T36] audit: type=1400 audit(2000000144.241:33856): avc: denied { search } for pid=29011 comm="syz.3.13860" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.892715][ T36] audit: type=1400 audit(2000000144.241:33857): avc: denied { write } for pid=29011 comm="syz.3.13860" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.139873][ T736] logitech-djreceiver 0003:046D:C71B.0085: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input0 [ 388.225811][ T9] usb 7-1: USB disconnect, device number 36 [ 388.298944][ T36] audit: type=1400 audit(2000000144.701:33858): avc: denied { append } for pid=29063 comm="syz.2.13885" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.335847][ T702] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 388.341337][ T736] usb 1-1: USB disconnect, device number 117 [ 388.515822][ T702] usb 4-1: Using ep0 maxpacket: 16 [ 388.536546][ T702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.547527][ T702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.557554][ T702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.570409][ T702] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.579494][ T702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.591327][ T702] usb 4-1: config 0 descriptor?? [ 388.680595][T29082] ip_vti0: mtu less than device minimum [ 389.004716][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.031030][ T702] microsoft 0003:045E:07DA.0086: ignoring exceeding usage max [ 389.044279][T29120] tipc: Started in network mode [ 389.045087][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.062307][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.064307][T29120] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 389.070238][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.085709][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.096097][T29120] tipc: Enabled bearer , priority 10 [ 389.104957][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.112322][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.127439][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.135327][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.142660][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.152813][ T702] microsoft 0003:045E:07DA.0086: unknown main item tag 0x0 [ 389.203998][ T702] microsoft 0003:045E:07DA.0086: No inputs registered, leaving [ 389.213425][ T702] microsoft 0003:045E:07DA.0086: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 389.227429][ T702] microsoft 0003:045E:07DA.0086: no inputs found [ 389.233802][ T702] microsoft 0003:045E:07DA.0086: could not initialize ff, continuing anyway [ 389.268156][ T702] usb 4-1: USB disconnect, device number 114 [ 389.447854][T29153] netlink: 'syz.6.13926': attribute type 16 has an invalid length. [ 389.455865][T29153] netlink: 'syz.6.13926': attribute type 1 has an invalid length. [ 389.463699][T29153] netlink: 'syz.6.13926': attribute type 1 has an invalid length. [ 389.471592][T29153] netlink: 'syz.6.13926': attribute type 2 has an invalid length. [ 389.479444][T29153] netlink: 64006 bytes leftover after parsing attributes in process `syz.6.13926'. [ 389.595861][ T736] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 389.746424][ T736] usb 3-1: Using ep0 maxpacket: 32 [ 389.752722][ T736] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.761423][ T736] usb 3-1: config 0 has no interface number 0 [ 389.767749][ T736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.779424][ T736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.789229][ T736] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 389.798406][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.807500][ T736] usb 3-1: config 0 descriptor?? [ 389.885851][ T702] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 390.035831][ T702] usb 7-1: Using ep0 maxpacket: 16 [ 390.042060][ T702] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.053177][ T702] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.063053][ T702] usb 7-1: config 0 interface 0 has no altsetting 0 [ 390.069708][ T702] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 390.078915][ T702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.087693][ T702] usb 7-1: config 0 descriptor?? [ 390.215840][ T9] tipc: Node number set to 4269801488 [ 390.295490][T29174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.304627][T29174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.415883][ T736] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0087/input/input122 [ 390.428706][ T736] uclogic 0003:28BD:0094.0087: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 390.517930][ T702] hid (null): bogus close delimiter [ 390.523281][ T702] hid (null): unknown global tag 0xd [ 390.531085][ T702] hid (null): global environment stack overflow [ 390.537379][ T702] hid (null): invalid report_count 18947 [ 390.543016][ T702] hid (null): report_id 0 is invalid [ 390.616098][ T736] usb 3-1: USB disconnect, device number 117 [ 390.717270][ T737] usb 7-1: USB disconnect, device number 37 [ 390.758158][ T36] audit: type=1400 audit(2000000147.161:33859): avc: denied { name_bind } for pid=29201 comm="syz.3.13949" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 390.915855][ T702] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 391.066868][ T702] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 391.085854][ T702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.096084][ T702] usb 1-1: config 0 descriptor?? [ 391.198631][ T36] audit: type=1326 audit(2000000147.601:33860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29227 comm="syz.3.13962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3378e929 code=0x0 [ 391.344301][T29243] kvm: kvm [29242]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 391.466603][ T36] audit: type=1400 audit(2000000147.871:33861): avc: denied { create } for pid=29255 comm="syz.2.13975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 391.493382][ T36] audit: type=1400 audit(2000000147.891:33862): avc: denied { connect } for pid=29255 comm="syz.2.13975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 391.895845][ T736] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 391.924123][ T702] usb 1-1: Cannot set autoneg [ 391.930313][ T702] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 391.943060][ T702] usb 1-1: USB disconnect, device number 118 [ 392.046910][ T736] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.061010][ T736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.070177][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.078432][ T736] usb 3-1: SerialNumber: syz [ 392.180950][T29287] input: syz0 as /devices/virtual/input/input123 [ 392.589028][T29314] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 392.892254][ T736] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 392.926939][ T736] usb 3-1: USB disconnect, device number 118 [ 393.404979][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 393.404998][ T36] audit: type=1400 audit(2000000149.801:33864): avc: denied { ioctl } for pid=29377 comm="syz.2.14025" path="/186/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 393.505834][ T702] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 393.515919][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 393.657007][ T702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.667169][ T702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.676150][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 393.681844][ T702] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.690997][ T702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.699081][ T702] usb 1-1: SerialNumber: syz [ 393.703873][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.715033][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 393.724728][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.733866][ T9] usb 7-1: config 0 descriptor?? [ 393.934652][ T702] usb 1-1: 0:2 : does not exist [ 393.942760][ T702] usb 1-1: USB disconnect, device number 119 [ 393.954349][T19693] udevd[19693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 394.143425][ T9] logitech-djreceiver 0003:046D:C513.0089: unknown main item tag 0x0 [ 394.152196][ T9] logitech-djreceiver 0003:046D:C513.0089: unknown main item tag 0x0 [ 394.160361][ T9] logitech-djreceiver 0003:046D:C513.0089: unknown main item tag 0x0 [ 394.168620][ T9] logitech-djreceiver 0003:046D:C513.0089: unknown main item tag 0x0 [ 394.176785][ T9] logitech-djreceiver 0003:046D:C513.0089: unknown main item tag 0x0 [ 394.344949][ T9] usb 7-1: USB disconnect, device number 38 [ 394.463408][T29392] pim6reg1: entered promiscuous mode [ 394.468804][T29392] pim6reg1: entered allmulticast mode [ 394.549560][T29405] netlink: 'syz.0.14038': attribute type 4 has an invalid length. [ 394.772890][T29426] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 395.115902][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 395.265835][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 395.272139][ T9] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 395.280664][ T9] usb 1-1: config 0 has no interface number 0 [ 395.286858][ T9] usb 1-1: config 0 interface 230 has no altsetting 0 [ 395.295022][ T9] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 395.304121][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.312175][ T9] usb 1-1: Product: syz [ 395.316390][ T9] usb 1-1: Manufacturer: syz [ 395.321019][ T9] usb 1-1: SerialNumber: syz [ 395.326367][ T9] usb 1-1: config 0 descriptor?? [ 395.332083][ T9] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 395.339917][ T9] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 395.755878][ T736] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 395.915830][ T736] usb 3-1: Using ep0 maxpacket: 16 [ 395.922073][ T736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 395.933289][ T736] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 395.943054][ T736] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 395.956837][ T736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.965917][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 395.973891][ T736] usb 3-1: SerialNumber: syz [ 395.979699][T29447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.190586][ T736] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 396.200041][ T736] usb 3-1: USB disconnect, device number 119 [ 396.792655][T29492] tipc: Started in network mode [ 396.797968][T29492] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 396.806914][T29492] tipc: Enabling of bearer rejected, failed to enable media [ 396.897068][T29501] overlay: filesystem on ./bus not supported as upperdir [ 397.616841][ T9] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 397.798341][ T736] usb 1-1: USB disconnect, device number 120 [ 398.675848][ T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 398.825815][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 398.832049][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.842570][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 398.851727][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.864881][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 398.874312][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.884503][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 398.896939][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 398.911109][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 399.265843][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 399.289515][ T36] audit: type=1326 audit(2000000155.691:33865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29567 comm="syz.2.14111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb5658e929 code=0x0 [ 399.427455][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.439027][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.450133][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 399.460011][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.472978][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.482088][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.490996][ T9] usb 7-1: config 0 descriptor?? [ 399.526349][ T736] usb 1-1: reset high-speed USB device number 121 using dummy_hcd [ 399.898835][ T9] plantronics 0003:047F:FFFF.008A: ignoring exceeding usage max [ 399.909015][ T9] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 399.916531][ T9] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 399.923963][ T9] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 399.931502][ T9] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 399.938945][ T9] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 399.946543][ T9] plantronics 0003:047F:FFFF.008A: No inputs registered, leaving [ 399.958176][ T9] plantronics 0003:047F:FFFF.008A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 399.985959][ T736] usb 1-1: USB disconnect, device number 121 [ 400.156550][ T736] usb 7-1: USB disconnect, device number 39 [ 400.509572][T29600] input: syz0 as /devices/virtual/input/input124 [ 400.685839][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 400.845825][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 400.852230][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.863434][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.873656][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.886672][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 400.893386][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 400.902697][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.911951][ T9] usb 3-1: config 0 descriptor?? [ 401.320045][T29596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.333088][T29596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.543629][ T9] usb 3-1: USB disconnect, device number 120 [ 402.487806][T29676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29676 comm=syz.2.14159 [ 403.503622][ T36] audit: type=1400 audit(2000000159.901:33866): avc: denied { unmount } for pid=27786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 403.578734][T29754] Falling back ldisc for ttyS3. [ 404.286353][T29767] random: crng reseeded on system resumption [ 405.595878][T29814] rust_binder: Write failure EFAULT in pid:551 [ 407.526473][T29816] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.545817][T29816] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.571349][T29816] bridge_slave_0: entered allmulticast mode [ 407.596268][T29816] bridge_slave_0: entered promiscuous mode [ 407.602966][T29816] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.640276][T29816] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.665902][T29816] bridge_slave_1: entered allmulticast mode [ 407.672309][T29816] bridge_slave_1: entered promiscuous mode [ 407.848213][T29816] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.855312][T29816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.862660][T29816] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.869740][T29816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.947307][T25506] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.955470][T25506] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.980309][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.987467][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.010153][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.017279][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.080224][T29816] veth0_vlan: entered promiscuous mode [ 408.109214][T29816] veth1_macvtap: entered promiscuous mode [ 408.501417][T29853] netlink: 'syz.6.14238': attribute type 1 has an invalid length. [ 408.785852][ T64] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 408.816099][ T36] audit: type=1326 audit(2000000165.221:33867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.6.14251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee2b8e929 code=0x0 [ 408.946835][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.965819][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.975650][ T64] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 408.985049][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.994205][ T64] usb 3-1: config 0 descriptor?? [ 409.310069][T29899] fuse: Invalid gid '00000000000037777777777' [ 409.804819][ T64] hid-led 0003:27B8:01ED.008C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 409.823979][ T64] hid-led 0003:27B8:01ED.008C: ThingM blink(1) initialized [ 410.005982][ T736] usb 3-1: USB disconnect, device number 121 [ 410.976237][ T64] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 411.146906][ T64] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.159593][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 411.170810][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 411.180946][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.204110][ T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.215410][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.236639][ T64] usb 3-1: config 0 descriptor?? [ 411.387327][ T36] audit: type=1326 audit(2000000167.791:33868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.6.14298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee2b8e929 code=0x0 [ 411.644759][ T64] plantronics 0003:047F:FFFF.008D: ignoring exceeding usage max [ 411.668614][ T64] plantronics 0003:047F:FFFF.008D: No inputs registered, leaving [ 411.678686][ T64] plantronics 0003:047F:FFFF.008D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 412.883297][T30046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14321'. [ 413.195836][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 413.355856][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 413.366550][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.385827][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.395623][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.410180][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.420183][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.429203][ T9] usb 7-1: config 0 descriptor?? [ 413.840388][ T9] microsoft 0003:045E:07DA.008E: unknown main item tag 0x1 [ 413.856068][ T9] microsoft 0003:045E:07DA.008E: No inputs registered, leaving [ 413.864582][ T9] microsoft 0003:045E:07DA.008E: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 413.886393][ T9] microsoft 0003:045E:07DA.008E: no inputs found [ 413.892784][ T9] microsoft 0003:045E:07DA.008E: could not initialize ff, continuing anyway [ 413.945812][ T736] usb 3-1: reset high-speed USB device number 122 using dummy_hcd [ 413.965843][ T736] usb 3-1: device reset changed ep0 maxpacket size! [ 413.972668][ T1677] usb 3-1: USB disconnect, device number 122 [ 414.048279][ T736] usb 7-1: USB disconnect, device number 40 [ 414.120178][ T1677] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 414.285864][ T1677] usb 3-1: Using ep0 maxpacket: 32 [ 414.292232][ T1677] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 414.304579][ T1677] usb 3-1: config 0 has no interface number 0 [ 414.314177][ T1677] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 414.323921][ T1677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.333246][ T1677] usb 3-1: Product: syz [ 414.337694][ T1677] usb 3-1: Manufacturer: syz [ 414.342323][ T1677] usb 3-1: SerialNumber: syz [ 414.349432][ T1677] usb 3-1: config 0 descriptor?? [ 414.355286][ T1677] smsc95xx v2.0.0 [ 414.532248][ T36] audit: type=1400 audit(2000000170.931:33869): avc: denied { write } for pid=30090 comm="syz.7.14342" path="socket:[162684]" dev="sockfs" ino=162684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.088268][T30125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=30125 comm=syz.6.14359 [ 415.175802][ T36] audit: type=1400 audit(2000000171.571:33870): avc: denied { sys_nice } for pid=30131 comm="syz.6.14362" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 415.286371][T30138] input: syz0 as /devices/virtual/input/input125 [ 415.364009][ T1677] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 415.379566][ T1677] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 415.389832][ T1677] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 415.401624][ T1677] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 415.425233][ T1677] usb 3-1: USB disconnect, device number 123 [ 415.555832][ T64] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 415.705805][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 415.716317][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.737406][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.757428][ T64] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 415.775862][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.794908][ T64] usb 7-1: config 0 descriptor?? [ 416.216153][ T64] smartjoyplus 0003:0925:8866.008F: unknown main item tag 0x4 [ 416.224350][ T64] smartjoyplus 0003:0925:8866.008F: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.6-1/input0 [ 416.238442][ T64] smartjoyplus 0003:0925:8866.008F: no output reports found [ 416.287223][ T46] bridge_slave_1: left allmulticast mode [ 416.292920][ T46] bridge_slave_1: left promiscuous mode [ 416.299049][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.306687][ T46] bridge_slave_0: left allmulticast mode [ 416.312342][ T46] bridge_slave_0: left promiscuous mode [ 416.318150][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.390663][T30154] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.399141][T30154] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.406525][T30154] bridge_slave_0: entered allmulticast mode [ 416.413023][T30154] bridge_slave_0: entered promiscuous mode [ 416.426890][ T46] veth1_macvtap: left promiscuous mode [ 416.427121][ T64] usb 7-1: USB disconnect, device number 41 [ 416.436135][ T46] veth0_vlan: left promiscuous mode [ 416.490978][T30154] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.498143][T30154] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.507201][T30154] bridge_slave_1: entered allmulticast mode [ 416.513425][T30154] bridge_slave_1: entered promiscuous mode [ 416.530173][T30177] pim6reg1: entered promiscuous mode [ 416.535489][T30177] pim6reg1: entered allmulticast mode [ 416.592790][T30154] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.599902][T30154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.607245][T30154] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.614283][T30154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.670075][T30154] veth0_vlan: entered promiscuous mode [ 416.681269][T30154] veth1_macvtap: entered promiscuous mode [ 416.767372][T30191] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 416.782330][T30191] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 417.266584][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 417.315864][T30258] bridge0: port 3(veth0_to_bridge) entered blocking state [ 417.323024][T30258] bridge0: port 3(veth0_to_bridge) entered disabled state [ 417.330425][T30258] veth0_to_bridge: entered allmulticast mode [ 417.337085][T30258] veth0_to_bridge: entered promiscuous mode [ 417.343229][T30258] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.355606][ T36] audit: type=1400 audit(2000000173.741:33871): avc: denied { write } for pid=30250 comm="syz.8.14415" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 417.365843][T30258] bridge0: port 3(veth0_to_bridge) entered blocking state [ 417.386385][T30258] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 417.416825][ T10] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 417.425012][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.437105][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.448844][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.460228][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.473675][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.482803][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.491799][ T10] usb 7-1: config 0 descriptor?? [ 417.497055][T30225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 417.648108][T30268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.648452][T30268] rust_binder: Error in use_page_slow: ESRCH [ 417.654974][T30268] rust_binder: use_range failure ESRCH [ 417.661071][T30268] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 417.666589][T30268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 417.674646][T30268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:674 [ 417.696741][T30270] netlink: 116 bytes leftover after parsing attributes in process `syz.2.14424'. [ 417.715098][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14424'. [ 417.925463][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.933290][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.940750][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.948303][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.955702][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.963169][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.970608][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.978030][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.985457][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 417.992866][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.000607][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.009043][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.016500][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.023895][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.031321][ T10] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 418.038900][ T10] plantronics 0003:047F:FFFF.0090: No inputs registered, leaving [ 418.050033][ T10] plantronics 0003:047F:FFFF.0090: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 418.125880][ T64] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 418.186488][ T10] usb 7-1: USB disconnect, device number 42 [ 418.275826][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 418.283132][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.294536][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.304335][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 418.313427][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.323274][T30297] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14436'. [ 418.332807][ T64] usb 3-1: config 0 descriptor?? [ 418.338132][T30297] ip_vti0: entered promiscuous mode [ 418.343728][T30297] ip_vti0: entered allmulticast mode [ 418.645826][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 418.748770][ T64] savu 0003:1E7D:2D5A.0091: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 418.806888][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.817929][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.828392][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 418.837496][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 418.845512][ T10] usb 9-1: SerialNumber: syz [ 418.854473][ T10] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 418.862918][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 418.870585][ T10] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 418.878809][ T10] scsi host1: usb-storage 9-1:1.0 [ 419.006676][ T31] usb 3-1: USB disconnect, device number 124 [ 419.915709][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14469'. [ 420.126878][ T10] usb 9-1: USB disconnect, device number 2 [ 420.185844][ T64] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 420.335830][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 420.342132][ T64] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 420.352310][ T64] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.363267][ T64] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.373362][ T64] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 420.386185][ T64] usb 3-1: config 7 interface 0 has no altsetting 0 [ 420.392815][ T64] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 420.401897][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.570036][T30388] GUP no longer grows the stack in syz.6.14476 (30388): 200000004000-200000008000 (200000002000) [ 420.580671][T30388] CPU: 0 UID: 0 PID: 30388 Comm: syz.6.14476 Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 57fdd3e93686ba62eddbadecdc135f5c3b5b89e0 [ 420.580695][T30388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.580706][T30388] Call Trace: [ 420.580712][T30388] [ 420.580718][T30388] __dump_stack+0x21/0x30 [ 420.580744][T30388] dump_stack_lvl+0x10c/0x190 [ 420.580762][T30388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 420.580780][T30388] ? find_vma+0xcd/0x110 [ 420.580800][T30388] ? _raw_spin_trylock+0xaf/0x130 [ 420.580814][T30388] ? vma_is_secretmem+0x11/0x50 [ 420.580831][T30388] dump_stack+0x19/0x20 [ 420.580848][T30388] __get_user_pages+0x1e34/0x22d0 [ 420.580863][T30388] ? __cfi___switch_to+0x10/0x10 [ 420.580885][T30388] ? populate_vma_page_range+0x230/0x230 [ 420.580912][T30388] get_user_pages_remote+0x392/0xbe0 [ 420.580930][T30388] ? __cfi_mtree_load+0x10/0x10 [ 420.580957][T30388] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 420.580980][T30388] ? __cfi_get_user_pages_remote+0x10/0x10 [ 420.580996][T30388] __access_remote_vm+0x1e2/0x640 [ 420.581019][T30388] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 420.581036][T30388] ? access_remote_vm+0x60/0x60 [ 420.581057][T30388] ? __kasan_check_write+0x18/0x20 [ 420.581075][T30388] ? _raw_spin_lock+0x8c/0x120 [ 420.581088][T30388] ? __cfi__raw_spin_lock+0x10/0x10 [ 420.581102][T30388] access_remote_vm+0x39/0x60 [ 420.581125][T30388] proc_pid_cmdline_read+0x4bb/0xbf0 [ 420.581140][T30388] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 420.581154][T30388] ? bpf_lsm_file_permission+0xd/0x20 [ 420.581173][T30388] vfs_readv+0x62b/0xa50 [ 420.581186][T30388] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 420.581200][T30388] ? do_readv+0x2d0/0x2d0 [ 420.581227][T30388] __x64_sys_preadv+0x197/0x2a0 [ 420.581248][T30388] ? __cfi___x64_sys_preadv+0x10/0x10 [ 420.581269][T30388] ? switch_fpu_return+0x12/0x20 [ 420.581283][T30388] x64_sys_call+0x1ee9/0x2ee0 [ 420.581304][T30388] do_syscall_64+0x58/0xf0 [ 420.581317][T30388] ? clear_bhb_loop+0x50/0xa0 [ 420.581335][T30388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 420.581352][T30388] RIP: 0033:0x7fcee2b8e929 [ 420.581365][T30388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.581377][T30388] RSP: 002b:00007fcee3964038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 420.581393][T30388] RAX: ffffffffffffffda RBX: 00007fcee2db5fa0 RCX: 00007fcee2b8e929 [ 420.581405][T30388] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 420.581415][T30388] RBP: 00007fcee2c10b39 R08: 0000000000000200 R09: 0000000000000000 [ 420.581424][T30388] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 420.581433][T30388] R13: 0000000000000000 R14: 00007fcee2db5fa0 R15: 00007ffd9a3e4ab8 [ 420.581445][T30388] [ 420.983280][ T64] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0092/input/input126 [ 421.011191][ T64] kye 0003:0458:5010.0092: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 421.042586][T30408] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 421.073608][T30408] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 421.242150][ T736] usb 3-1: USB disconnect, device number 125 [ 421.458486][T30425] netlink: 'syz.6.14492': attribute type 4 has an invalid length. [ 421.470049][T30425] netlink: 'syz.6.14492': attribute type 17 has an invalid length. [ 421.693267][T30444] pim6reg1: entered promiscuous mode [ 421.698660][T30444] pim6reg1: entered allmulticast mode [ 422.005813][ T736] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 422.095840][ T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 422.165854][ T736] usb 3-1: Using ep0 maxpacket: 32 [ 422.172053][ T736] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.182078][ T736] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x4 has invalid wMaxPacketSize 0 [ 422.191896][ T736] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 422.204922][ T736] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.211590][ T736] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 422.220665][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.229325][ T736] usb 3-1: config 0 descriptor?? [ 422.256927][ T64] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.267166][ T64] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.276781][ T64] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.285946][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.293945][ T64] usb 9-1: SerialNumber: syz [ 422.426157][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14509'. [ 422.508570][ T64] usb 9-1: 0:2 : does not exist [ 422.515814][ T64] usb 9-1: USB disconnect, device number 3 [ 422.525412][T29920] udevd[29920]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.653892][T30481] tun0: tun_chr_ioctl cmd 1074025675 [ 422.661168][T30481] tun0: persist enabled [ 422.665552][T30481] tun0: tun_chr_ioctl cmd 1074025675 [ 422.670900][T30481] tun0: persist enabled [ 422.693748][ T736] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 422.709181][ T736] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 422.717188][ T736] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 422.725357][ T736] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 422.740192][ T736] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 422.750433][ T736] hid-thrustmaster 0003:044F:B65D.0093: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 422.775653][ T736] hid-thrustmaster 0003:044F:B65D.0093: Unexpected non-int endpoint [ 422.910614][ C1] hid-thrustmaster 0003:044F:B65D.0093: URB to get model id failed with error -71 [ 422.910686][ T64] usb 3-1: USB disconnect, device number 126 [ 423.295888][ T736] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 423.385818][ T64] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 423.445811][ T736] usb 9-1: Using ep0 maxpacket: 16 [ 423.452120][ T736] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.463361][ T736] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 423.473365][ T736] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 423.483145][ T736] usb 9-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.496219][ T736] usb 9-1: config 1 interface 0 has no altsetting 0 [ 423.503578][ T736] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.513103][ T736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.521507][ T736] usb 9-1: SerialNumber: syz [ 423.528025][T30507] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 423.535265][T30507] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 423.545837][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 423.552600][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.562848][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 423.571795][ T64] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 423.585838][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.600114][ T64] hub 7-1:1.0: bad descriptor, ignoring hub [ 423.610080][ T64] hub 7-1:1.0: probe with driver hub failed with error -5 [ 423.798371][T30516] hub 6-0:1.0: USB hub found [ 423.803284][T30516] hub 6-0:1.0: 1 port detected [ 423.915937][ T1677] usb 7-1: USB disconnect, device number 43 [ 424.497212][T30531] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 424.504515][T30531] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 424.805834][T14277] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 424.805908][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 424.903356][T30548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 424.903555][T30548] rust_binder: Error while translating object. [ 424.913282][T30548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 424.919828][T30548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 424.986526][T25506] bridge_slave_1: left allmulticast mode [ 425.001349][T25506] bridge_slave_1: left promiscuous mode [ 425.007273][T25506] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.017154][T25506] bridge_slave_0: left allmulticast mode [ 425.023865][T25506] bridge_slave_0: left promiscuous mode [ 425.029685][T25506] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.153748][T25506] tipc: Left network mode [ 425.164031][T25506] veth1_macvtap: left promiscuous mode [ 425.170689][T25506] veth0_vlan: left promiscuous mode [ 425.240305][T30557] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.247452][T30557] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.254572][T30557] bridge_slave_0: entered allmulticast mode [ 425.261216][T30557] bridge_slave_0: entered promiscuous mode [ 425.270916][T30557] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.281066][T30557] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.288248][T30557] bridge_slave_1: entered allmulticast mode [ 425.294768][T30557] bridge_slave_1: entered promiscuous mode [ 425.355059][T30557] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.362163][T30557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.369512][T30557] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.376577][T30557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.400346][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.408351][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.418051][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.425163][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.434394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.441488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.470439][T30557] veth0_vlan: entered promiscuous mode [ 425.482553][T30557] veth1_macvtap: entered promiscuous mode [ 425.881930][T30601] input: syz1 as /devices/virtual/input/input127 [ 426.008824][ T36] audit: type=1326 audit(2000000182.411:33872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.2.14574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb5658e929 code=0x0 [ 426.068578][ T736] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 426.079031][ T736] usb 9-1: USB disconnect, device number 4 [ 426.136000][T30621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 427.825870][ T31] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 427.977241][ T31] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 427.990086][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 427.998246][ T31] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 428.022592][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.035999][ T31] usb 10-1: config 0 descriptor?? [ 428.044506][T30680] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 428.192093][T25506] Bluetooth: hci0: Frame reassembly failed (-84) [ 428.200149][T25506] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 428.455321][ T31] wacom 0003:056A:0020.0094: unknown main item tag 0x0 [ 428.462470][ T31] wacom 0003:056A:0020.0094: unknown main item tag 0x0 [ 428.469718][ T31] wacom 0003:056A:0020.0094: unknown main item tag 0x0 [ 428.477088][ T31] wacom 0003:056A:0020.0094: unknown main item tag 0x0 [ 428.484130][ T31] wacom 0003:056A:0020.0094: unknown main item tag 0x0 [ 428.491517][ T31] wacom 0003:056A:0020.0094: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 428.502617][ T31] wacom 0003:056A:0020.0094: hidraw0: USB HID v0.05 Device [HID 056a:0020] on usb-dummy_hcd.9-1/input0 [ 428.530783][ T31] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0020.0094/input/input128 [ 428.655414][ T31] usb 10-1: USB disconnect, device number 2 [ 429.402653][T30729] loop2: detected capacity change from 0 to 7 [ 429.655820][ T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 429.808116][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.819821][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.831103][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.841209][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.854423][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.863752][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.874358][ T10] usb 3-1: config 0 descriptor?? [ 430.235854][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 430.241999][T14277] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 430.289355][ T10] plantronics 0003:047F:FFFF.0095: unknown main item tag 0x0 [ 430.304062][ T10] plantronics 0003:047F:FFFF.0095: unknown main item tag 0x0 [ 430.319074][ T10] plantronics 0003:047F:FFFF.0095: unknown main item tag 0x0 [ 430.335841][ T10] plantronics 0003:047F:FFFF.0095: unknown main item tag 0x0 [ 430.350147][ T10] plantronics 0003:047F:FFFF.0095: unknown main item tag 0x0 [ 430.358004][ T10] plantronics 0003:047F:FFFF.0095: No inputs registered, leaving [ 430.379166][ T10] plantronics 0003:047F:FFFF.0095: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 430.548999][ T10] usb 3-1: USB disconnect, device number 127 [ 430.601616][T30739] input: syz0 as /devices/virtual/input/input131 [ 432.164696][T30812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14666'. [ 432.184115][T30812] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14666'. [ 432.203183][T30812] netlink: 'syz.2.14666': attribute type 6 has an invalid length. [ 432.219782][T30812] netlink: 'syz.2.14666': attribute type 5 has an invalid length. [ 432.235302][T30812] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14666'. [ 433.276898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.289012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.301277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.313348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.325650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.337732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.350001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.362074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.374363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.386436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.415859][ T737] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 433.579314][ T737] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.621283][ T737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.657858][ T737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 433.687047][ T737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.715988][ T737] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.725086][ T737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.786307][ T737] usb 3-1: config 0 descriptor?? [ 433.851969][T30864] input: syz1 as /devices/virtual/input/input132 [ 433.895811][ T736] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 434.056930][ T736] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.082563][ T736] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.117504][ T736] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 434.145823][ T736] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.169851][ T736] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.190063][ T736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.206745][ T737] plantronics 0003:047F:FFFF.0096: No inputs registered, leaving [ 434.225003][ T736] usb 10-1: config 0 descriptor?? [ 434.232871][ T737] plantronics 0003:047F:FFFF.0096: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 434.476843][ T737] usb 3-1: USB disconnect, device number 2 [ 434.640680][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.659115][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.675835][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.689873][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.705840][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.721253][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.736944][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.752161][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.766926][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.783170][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.799107][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.815843][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.829868][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.847017][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.864854][ T736] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 434.877661][ T736] plantronics 0003:047F:FFFF.0097: No inputs registered, leaving [ 434.908685][ T736] plantronics 0003:047F:FFFF.0097: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 434.948874][ T736] usb 10-1: USB disconnect, device number 3 [ 438.285818][ C1] net_ratelimit: 106568 callbacks suppressed [ 438.285841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 438.285846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.285919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.292088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 438.303931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.315831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 438.328027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.339788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 438.351685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.363634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 440.375772][ C0] sched: DL replenish lagged too much [ 443.295792][ C0] net_ratelimit: 142455 callbacks suppressed [ 443.295815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.295837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 443.302142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.313912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 443.325952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.337798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 443.349747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.361763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 443.373881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.385661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.305782][ C1] net_ratelimit: 145003 callbacks suppressed [ 448.305805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.305872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.311925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.323923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.335811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.347774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.359753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.371930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.383700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 448.395651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.315819][ C1] net_ratelimit: 145026 callbacks suppressed [ 453.315841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 453.315851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.316058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.322018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 453.334115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.345941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 453.357814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.369883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 453.381993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.393795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.325817][ C1] net_ratelimit: 134409 callbacks suppressed [ 458.325839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.325890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.332012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.344052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.355901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.368116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.380036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.392177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.403872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 458.415869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.335785][ C1] net_ratelimit: 142512 callbacks suppressed [ 463.335807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 463.335970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.341934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 463.354008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.365904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 463.377820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.389809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 463.401985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.413691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 463.425682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.345805][ C1] net_ratelimit: 139258 callbacks suppressed [ 468.345834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 468.345878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.351948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 468.363929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.375924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 468.388130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.399806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 468.411809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.423677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 468.435641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.355803][ C1] net_ratelimit: 144058 callbacks suppressed [ 473.355828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 473.355933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.361961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 473.374034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.385871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 473.397813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.409803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 473.421950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.433664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 473.445783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.365764][ C1] net_ratelimit: 140614 callbacks suppressed [ 478.365791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 478.365878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.371903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 478.383958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.395822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 478.407817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.419765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 478.431927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.443619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 478.455668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.375785][ C1] net_ratelimit: 136944 callbacks suppressed [ 483.375809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 483.375832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.381940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 483.393945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.405813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 483.417768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.429768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 483.441892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.453639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 483.465662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.385778][ C1] net_ratelimit: 138113 callbacks suppressed [ 488.385801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 488.385858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.391899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 488.403969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.415971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 488.428158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.439989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 488.451962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.463811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 488.475955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.395797][ C1] net_ratelimit: 142192 callbacks suppressed [ 493.395819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 493.395851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.401945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 493.414084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.425813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 493.437928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.449800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 493.461813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.473852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 493.485932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.405768][ C1] net_ratelimit: 138098 callbacks suppressed [ 498.405790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 498.405812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.411878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 498.424077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.435794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 498.447753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.459764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 498.471904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.483631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 498.495803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.415795][ C1] net_ratelimit: 137011 callbacks suppressed [ 503.415820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 503.415823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.415907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.421938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 503.433929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.445820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 503.458025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.469772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 503.481880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.493652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.425749][ C1] net_ratelimit: 138969 callbacks suppressed [ 508.425773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.425867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.431860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.444027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.455767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.467777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.479843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.491745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.503648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 508.515658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.435765][ C1] net_ratelimit: 136194 callbacks suppressed [ 513.435787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 513.436040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.441880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 513.453872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.465854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 513.477856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.489739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 513.501748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.513619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 513.525677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.445754][ C1] net_ratelimit: 136642 callbacks suppressed [ 518.445776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 518.446004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.451897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 518.463878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.475862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 518.487863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.499745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 518.511738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.523631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 518.535587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.455763][ C0] net_ratelimit: 139418 callbacks suppressed [ 523.455787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.455814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 523.461875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.473881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 523.486038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.497776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 523.509973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.521647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 523.533616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.545595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.465763][ C1] net_ratelimit: 144001 callbacks suppressed [ 528.465787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.465849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.471892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.483874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.495916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.508066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.519767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.531917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.543605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 528.555568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.475749][ C1] net_ratelimit: 142059 callbacks suppressed [ 533.475774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 533.475913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.481890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 533.493861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.505880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 533.517902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.529778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 533.541762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.553669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 533.565598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.485745][ C0] net_ratelimit: 135310 callbacks suppressed [ 538.485769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.485798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 538.491843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.503857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 538.515854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.527756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 538.539754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.551617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 538.563570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.575559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.495772][ C1] net_ratelimit: 135923 callbacks suppressed [ 543.495796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.495834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.501883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.513871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.525876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.538047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.549757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.562004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.573732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 543.585670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.505737][ C1] net_ratelimit: 138406 callbacks suppressed [ 548.505760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 548.505788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.511861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 548.523844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.535834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 548.547832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.559684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 548.571689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.583541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 548.595539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.515741][ C1] net_ratelimit: 142580 callbacks suppressed [ 553.515763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 553.515827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.521935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 553.534157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.545840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 553.557790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.569775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 553.581781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.593741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 553.605687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.525757][ C1] net_ratelimit: 143778 callbacks suppressed [ 558.525780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 558.525826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.531870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 558.543854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.555858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 558.567927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.579855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 558.591829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.603923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 558.615675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.278672][ T37] INFO: task syz.7.14696:30877 blocked for more than 122 seconds. [ 561.328354][ T37] Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 [ 561.551290][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.736408][ T36] audit: type=1400 audit(2000000318.061:33873): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1469]" dev="pipefs" ino=1469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 561.826315][ T37] task:syz.7.14696 state:D stack:0 pid:30877 tgid:30877 ppid:29816 flags:0x00004004 [ 561.842847][ T37] Call Trace: [ 561.846215][ T37] [ 561.849169][ T37] __schedule+0x132b/0x1e00 [ 561.853708][ T37] ? __sched_text_start+0x10/0x10 [ 561.858802][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 561.864217][ T37] ? rcu_barrier_entrain+0x350/0x4d0 [ 561.869549][ T37] schedule+0xc6/0x240 [ 561.873635][ T37] schedule_timeout+0xb2/0x3a0 [ 561.878445][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 561.883849][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 561.889427][ T37] ? generic_exec_single+0x20a/0x500 [ 561.894715][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 561.900362][ T37] wait_for_common+0x359/0x630 [ 561.905146][ T37] ? wait_for_completion+0x40/0x40 [ 561.910275][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 561.916817][ T37] wait_for_completion+0x1c/0x40 [ 561.921756][ T37] rcu_barrier+0x415/0x530 [ 561.926189][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 561.931567][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 561.936337][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 561.941454][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 561.947102][ T37] ? __kasan_check_write+0x18/0x20 [ 561.952221][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 561.957870][ T37] kvm_put_kvm+0xb04/0x12b0 [ 561.962378][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 561.967510][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 561.973159][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 561.978401][ T37] kvm_vm_release+0x47/0x70 [ 561.982917][ T37] __fput+0x1fe/0xa00 [ 561.986910][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 561.992453][ T37] ____fput+0x20/0x30 [ 561.996447][ T37] task_work_run+0x1e3/0x250 [ 562.001040][ T37] ? __cfi_task_work_run+0x10/0x10 [ 562.006158][ T37] ? __kasan_check_write+0x18/0x20 [ 562.011277][ T37] resume_user_mode_work+0x36/0x50 [ 562.016398][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 562.021865][ T37] do_syscall_64+0x64/0xf0 [ 562.026284][ T37] ? clear_bhb_loop+0x50/0xa0 [ 562.030964][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 562.036886][ T37] RIP: 0033:0x7f01e958e929 [ 562.041299][ T37] RSP: 002b:00007ffefa579948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 562.049721][ T37] RAX: 0000000000000000 RBX: 000000000006a227 RCX: 00007f01e958e929 [ 562.057699][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 562.065670][ T37] RBP: 00007f01e97b7ba0 R08: 0000000000000001 R09: 00000005fa579c3f [ 562.073655][ T37] R10: 00007f01e9200000 R11: 0000000000000246 R12: 00007f01e97b5fac [ 562.081633][ T37] R13: 00007f01e97b5fa0 R14: ffffffffffffffff R15: 00007ffefa579a60 [ 562.089620][ T37] [ 562.116771][ T37] INFO: task syz.2.14699:30885 blocked for more than 123 seconds. [ 562.124717][ T37] Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 [ 562.156038][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.176654][ T37] task:syz.2.14699 state:D stack:0 pid:30885 tgid:30884 ppid:27786 flags:0x00004004 [ 562.196305][ T37] Call Trace: [ 562.199627][ T37] [ 562.202572][ T37] __schedule+0x132b/0x1e00 [ 562.216989][ T37] ? __sched_text_start+0x10/0x10 [ 562.222088][ T37] ? __call_rcu_nocb_wake+0x337/0xb30 [ 562.267812][ T37] ? __kasan_check_write+0x18/0x20 [ 562.272996][ T37] ? rcutree_migrate_callbacks+0xc40/0xc40 [ 562.680173][ T37] schedule+0xc6/0x240 [ 562.684425][ T37] schedule_timeout+0xb2/0x3a0 [ 562.689243][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 562.694650][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 562.700251][ T37] ? __virt_addr_valid+0xc5/0x380 [ 562.705303][ T37] wait_for_common+0x359/0x630 [ 562.710109][ T37] ? wait_for_completion+0x40/0x40 [ 562.715239][ T37] wait_for_completion_state+0x19/0x40 [ 562.720758][ T37] __wait_rcu_gp+0x296/0x2c0 [ 562.725378][ T37] synchronize_rcu_normal+0x113/0x160 [ 562.730795][ T37] ? synchronize_rcu_expedited+0x7b0/0x7b0 [ 562.736648][ T37] ? __cfi_call_rcu_hurry+0x10/0x10 [ 562.741871][ T37] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 562.747298][ T37] ? call_rcu_hurry+0x30/0x30 [ 562.751999][ T37] synchronize_rcu+0x98/0x2e0 [ 562.756723][ T37] ? __cfi_synchronize_rcu+0x10/0x10 [ 562.762038][ T37] ? call_rcu+0x14/0x20 [ 562.766230][ T37] ? can_rx_unregister+0x686/0x740 [ 562.771369][ T37] bcm_release+0x638/0x8d0 [ 562.775820][ T37] sock_close+0xda/0x280 [ 562.780090][ T37] ? __cfi_sock_close+0x10/0x10 [ 562.784958][ T37] __fput+0x1fe/0xa00 [ 562.788994][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 562.794563][ T37] ____fput+0x20/0x30 [ 562.798589][ T37] task_work_run+0x1e3/0x250 [ 562.803203][ T37] ? __cfi_task_work_run+0x10/0x10 [ 562.808351][ T37] ? __kasan_check_write+0x18/0x20 [ 562.813494][ T37] resume_user_mode_work+0x36/0x50 [ 562.818640][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 562.824127][ T37] do_syscall_64+0x64/0xf0 [ 562.828576][ T37] ? clear_bhb_loop+0x50/0xa0 [ 562.833281][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 562.839229][ T37] RIP: 0033:0x7fbb5658e929 [ 562.843661][ T37] RSP: 002b:00007fbb57407038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 562.852105][ T37] RAX: 0000000000000000 RBX: 00007fbb567b5fa0 RCX: 00007fbb5658e929 [ 562.860103][ T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 562.868118][ T37] RBP: 00007fbb56610b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.876158][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.884143][ T37] R13: 0000000000000000 R14: 00007fbb567b5fa0 R15: 00007ffe0af3cee8 [ 562.892151][ T37] [ 562.895251][ T37] NMI backtrace for cpu 1 [ 562.895270][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 57fdd3e93686ba62eddbadecdc135f5c3b5b89e0 [ 562.895298][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.895311][ T37] Call Trace: [ 562.895318][ T37] [ 562.895327][ T37] __dump_stack+0x21/0x30 [ 562.895355][ T37] dump_stack_lvl+0x10c/0x190 [ 562.895378][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 562.895411][ T37] dump_stack+0x19/0x20 [ 562.895433][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 562.895465][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 562.895486][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 562.895516][ T37] ? sched_show_task+0x379/0x560 [ 562.895538][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 562.895559][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.895581][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.895604][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 562.895636][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 562.895658][ T37] watchdog+0xd8f/0xed0 [ 562.895683][ T37] ? __cfi_watchdog+0x10/0x10 [ 562.895707][ T37] ? __kasan_check_read+0x15/0x20 [ 562.895730][ T37] ? __kthread_parkme+0x138/0x180 [ 562.895758][ T37] ? schedule+0xc6/0x240 [ 562.895779][ T37] kthread+0x2c7/0x370 [ 562.895808][ T37] ? __cfi_watchdog+0x10/0x10 [ 562.895829][ T37] ? __cfi_kthread+0x10/0x10 [ 562.895859][ T37] ret_from_fork+0x64/0xa0 [ 562.895882][ T37] ? __cfi_kthread+0x10/0x10 [ 562.895911][ T37] ret_from_fork_asm+0x1a/0x30 [ 562.895938][ T37] [ 563.052500][ T37] Sending NMI from CPU 1 to CPUs 0: [ 563.059536][ C0] NMI backtrace for cpu 0 [ 563.059609][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted 6.12.30-syzkaller-g15d2fe054444 #0 57fdd3e93686ba62eddbadecdc135f5c3b5b89e0 [ 563.059630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.059640][ C0] RIP: 0010:kasan_check_range+0x4e/0x2a0 [ 563.059668][ C0] Code: 82 68 02 00 00 49 89 f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 54 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df <4f> 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc [ 563.059682][ C0] RSP: 0018:ffffc900000072d0 EFLAGS: 00000a06 [ 563.059696][ C0] RAX: ffffc90000007301 RBX: 0000000000000010 RCX: ffffffff84df3c89 [ 563.059707][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffff888158bfce18 [ 563.059717][ C0] RBP: ffffc900000072f8 R08: ffff888158bfce28 R09: 000000000001ffff [ 563.059727][ C0] R10: dffffc0000000000 R11: 0200000000000000 R12: 0000000000000000 [ 563.059738][ C0] R13: ffffffff84df3c89 R14: ffff888158bfce18 R15: 1ffff1102b17f9c3 [ 563.059749][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 563.059761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.059771][ C0] CR2: 00007f9ff95f84c0 CR3: 000000010a3e4000 CR4: 00000000003526b0 [ 563.059785][ C0] Call Trace: [ 563.059791][ C0] [ 563.059798][ C0] ? ip6_route_input+0x1d9/0x8d0 [ 563.059820][ C0] __asan_memcpy+0x31/0x80 [ 563.059837][ C0] ip6_route_input+0x1d9/0x8d0 [ 563.059857][ C0] ? __cfi_ip6_route_input+0x10/0x10 [ 563.059877][ C0] ? ip6t_do_table+0x1dc/0x14d0 [ 563.059898][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 563.059918][ C0] ? ret_from_fork+0x64/0xa0 [ 563.059935][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 563.059949][ C0] ? __asan_memset+0x39/0x50 [ 563.059966][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 563.059980][ C0] ip6_rcv_finish+0x15a/0x3c0 [ 563.060000][ C0] ipv6_rcv+0xed/0x220 [ 563.060018][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 563.060036][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 563.060051][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 563.060069][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 563.060084][ C0] netif_receive_skb+0x147/0x7b0 [ 563.060100][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 563.060113][ C0] ? br_flood+0x67e/0x730 [ 563.060133][ C0] br_pass_frame_up+0x126/0x1c0 [ 563.060148][ C0] br_handle_frame_finish+0x12d9/0x1720 [ 563.060165][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 563.060183][ C0] br_handle_frame+0x5a6/0xba0 [ 563.060199][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 563.060214][ C0] __netif_receive_skb_core+0xf48/0x3940 [ 563.060236][ C0] ? ip6_mc_input+0x4f3/0x670 [ 563.060256][ C0] ? ip6_mc_input+0x4f3/0x670 [ 563.060275][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 563.060294][ C0] ? qdisc_run_end+0x120/0x120 [ 563.060315][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 563.060333][ C0] ? ip6_rcv_finish+0x344/0x3c0 [ 563.060352][ C0] ? ipv6_rcv+0xed/0x220 [ 563.060370][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 563.060389][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 563.060407][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 563.060425][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 563.060439][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 563.060452][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 563.060467][ C0] process_backlog+0x3e5/0xae0 [ 563.060483][ C0] __napi_poll+0xd3/0x610 [ 563.060504][ C0] net_rx_action+0x584/0xce0 [ 563.060520][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 563.060533][ C0] ? sched_clock+0x44/0x60 [ 563.060548][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 563.060564][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 563.060587][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 563.060603][ C0] handle_softirqs+0x1ae/0x630 [ 563.060623][ C0] __do_softirq+0xf/0x16 [ 563.060637][ C0] do_softirq+0xa6/0x100 [ 563.060655][ C0] [ 563.060659][ C0] [ 563.060665][ C0] ? __cfi_do_softirq+0x10/0x10 [ 563.060682][ C0] ? dst_destroy+0x37d/0x460 [ 563.060699][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 563.060715][ C0] __local_bh_enable_ip+0x74/0x80 [ 563.060733][ C0] rcu_do_batch+0x5c6/0xd20 [ 563.060752][ C0] ? rcu_core+0xd20/0xd20 [ 563.060766][ C0] ? __kasan_check_write+0x18/0x20 [ 563.060783][ C0] ? _raw_spin_lock+0x8c/0x120 [ 563.060795][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 563.060812][ C0] ? __kasan_check_read+0x15/0x20 [ 563.060828][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 563.060845][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 563.060863][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 563.060880][ C0] ? __kasan_check_write+0x18/0x20 [ 563.060896][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 563.060910][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 563.060923][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 563.060937][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 563.060956][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 563.060976][ C0] ? __kasan_check_read+0x15/0x20 [ 563.060992][ C0] ? __kthread_parkme+0x138/0x180 [ 563.061011][ C0] ? schedule+0xc6/0x240 [ 563.061025][ C0] kthread+0x2c7/0x370 [ 563.061045][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 563.061062][ C0] ? __cfi_kthread+0x10/0x10 [ 563.061081][ C0] ret_from_fork+0x64/0xa0 [ 563.061097][ C0] ? __cfi_kthread+0x10/0x10 [ 563.061121][ C0] ret_from_fork_asm+0x1a/0x30 [ 563.061142][ C0] [ 563.555744][ C1] net_ratelimit: 119795 callbacks suppressed [ 563.555766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 563.560740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.565237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 563.569639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.574289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 563.579004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.582016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 563.588020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.599970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 563.611924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.565721][ C0] net_ratelimit: 147272 callbacks suppressed [ 568.565745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.565748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 568.565807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 568.571813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.583821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 568.595809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.607780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 568.619663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.631627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:81:9c:7c:ad:3d, vlan:0) [ 568.643489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)