last executing test programs: 1m31.984782253s ago: executing program 3 (id=208): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) mkdir(&(0x7f0000000440)='./file0\x00', 0x140) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607050, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x204) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4b000001000000000000000a5a23b5467a27a2dc72a52554fa7555312a", @ANYRESOCT, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) 1m31.956934591s ago: executing program 1 (id=209): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f00000024c0)=ANY=[@ANYBLOB='0\x00'], 0x30) write$FUSE_INIT(r2, &(0x7f00000045c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x101, 0xb205c, 0x5, 0x670, 0x8, 0x10000}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2ac2820, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x0) (fail_nth: 4) 1m31.540661762s ago: executing program 1 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x390, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "093696f5"}]}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/251, 0xfb}], 0x1, 0x0, 0xffffff25}}], 0x1, 0x0, 0x0) 1m31.271343577s ago: executing program 2 (id=213): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0xffff27dc, 0x24da, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x64, 0x0, 0x43, 0x4, 0x0, @loopback, @private=0xa010102, {[@timestamp={0x44, 0xc, 0x18, 0x0, 0x9, [0x5, 0x101]}, @rr={0x7, 0x13, 0xec, [@remote, @private=0xa010102, @local, @empty]}, @rr={0x7, 0x1f, 0xa, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0xffffff7f}, 0x10) 1m31.107108461s ago: executing program 2 (id=214): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x2ff, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"}) (fail_nth: 4) 1m31.000523329s ago: executing program 1 (id=215): setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r4, &(0x7f00000194c0)=""/102376, 0x18fe8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 1m30.932310982s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xa, 0xfe, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfc, 0x0, 0x9, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x800000}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3e1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000440)=""/81, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0x5, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000340), &(0x7f00000005c0)=r9}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0xfffffffffffffffd}) close_range(r5, 0xffffffffffffffff, 0x0) 1m30.723330604s ago: executing program 3 (id=218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) r2 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="07000a00cef74e00"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x4810) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3, r7, 0x0}]) write$selinux_user(r7, &(0x7f0000000200)={'system_u:object_r:iptables_exec_t:s0', 0x20, 'root\x00'}, 0x2a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000140)) 1m29.951150116s ago: executing program 4 (id=219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106d040ac2000000000001090224000100000008090400000136000001220700090581032800000000"], 0x0) creat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0xfffffeb4, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00'], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r5 = mq_open(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x4, 0x0) mq_notify(r5, &(0x7f00000001c0)={0x0, 0x19, 0x0, @tid=r1}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x30}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000500)="0f21ee66b8050000000f23c80f21f86635040020000f23f80f01c50f0fc1ae66b8ccd3098166efbafc0c66b8d691000066efc11822a97d0067660f3a14ec02baf80c66b8ae105b8366efbafc0c5f0b04d8d8f20f38f1d1660f6a98f68f", 0x5d}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xdaa}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) 1m28.49589365s ago: executing program 0 (id=222): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x100, 0x7}) 1m28.385279858s ago: executing program 0 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000210000280012800b00010067656e657665000018000280140007"], 0x17}, 0x9, 0x0, 0x0, 0x95}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x1c}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000020394cc3b4503000000000000000017e59fd62b1b25f6d25da3b547f02881587ff8128b33b10ae8b1abaf3e8d94a22b96b30229496835bc22c21c0d60bbc4f9e7dbf134c0a035a21e3300"], 0x14}}, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0x1, @win={{0x8494, 0x8, 0x200, 0xd}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40}}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='minix\x00', 0xa1805b, 0x0) 1m28.281267782s ago: executing program 3 (id=224): r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x80000001, 0xfa80, 0xb, 0x1fd, 0x1}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 1m28.224863416s ago: executing program 1 (id=225): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f00000002c0)='./file0\x00', 0x3) open(&(0x7f0000000340)='./file0\x00', 0x40, 0x3f) 1m28.048954613s ago: executing program 0 (id=226): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) io_destroy(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x4002) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x4000, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) r7 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2842, &(0x7f00000003c0)={0x0, 0xaa0e, 0x2, 0x0, 0xca}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x19, 0x0, 0x0, 0x1, 0x0}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)=0x204) connect$pptp(r10, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) pread64(r2, &(0x7f0000002180)=""/4105, 0x1009, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "4abb"}, @local=@item_4={0x3, 0x2, 0x1, "83aa3469"}]}}, 0x0}, 0x0) 1m27.937432743s ago: executing program 1 (id=227): sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m27.290930656s ago: executing program 3 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x7) 1m26.917228293s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xa, 0xfe, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfc, 0x0, 0x9, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x800000}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3e1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000440)=""/81, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0x5, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000340), &(0x7f00000005c0)=r9}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0xfffffffffffffffd}) close_range(r5, 0xffffffffffffffff, 0x0) 1m26.916773271s ago: executing program 3 (id=230): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x37, 0x2, @thr={&(0x7f0000000000)="5dec020006b77b6451e2b099711d9618e6931393a21ab7cdac8849ad6cfb1bb0c8947b511b010c69a6678c2d0d11287d85ae05666ae57f657f7028d79101d7ee2cba4ce14ba1489f6ad00599eff77588fbedb7499d57a0cff446ad3f9ed7ae9c3a07df67339e370a83616852a71a51a0686515695ac085772ed5c6522c840650bd2519933de0cc867333de110d9c2df8b956ed48306d933256fb4d08fcaae7ed77f26e8b0f02d3001a91036e53265485fa612ae935841074b4aaeeae43293b6ca2764e723fab8f924fb7126f650df7950b1793", &(0x7f0000000100)="4349047682facd2e8084d188679b3178a3c5bafabf8fcdc07ae1747f4ea5b6c5f9794cb50aacc22a39b61ed32113158009b7d0cad7f36580b1258698658c8989b8a7d1ae2f0d46847955"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c47dbacb5b000000000000003260f932d4efb52e888655fe3fa1fb9c7c5a1dabd6b57dc29a26611200d8e7a5954c6eb00d2fd09287518a26e54e6bd25e4db6def40cc7b2df6f45f42b4f1f72492d0cf6e1a1690c9a176cb9984a32c45ede5a213adaed57ed6ac86cadccef37a0419dc1f6b97d35030bf5350f050eb0ad649c32965838f0418ed42371d53d22859e4380cb69d2aa062761ca955f9fc2fc4ad624f28ba17226740bd9f02e899e1689f22cc29be7dc3e37cafcc2744dfb3e36996dc30a464177acedaedc241fc6dc"], 0x48) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x8, @sliced={0xfff9, [0x29, 0x7, 0xede, 0x8, 0x5, 0x7537, 0x8, 0x8000, 0x7, 0xfffc, 0x3, 0x3, 0x3ff, 0x3, 0x1, 0x8, 0x200, 0x6, 0x2, 0x7, 0xff93, 0x3, 0x5, 0x7fff, 0x0, 0x1cc8, 0x2, 0xac1, 0xc0, 0xfffb, 0xfffe, 0x6, 0x7, 0x5, 0x0, 0x6f, 0x6, 0x7f, 0x5, 0x401, 0x5, 0x204, 0x4901, 0x4, 0xaffd, 0x8, 0x9, 0x3], 0x586f}}) 1m25.842933035s ago: executing program 2 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000800000000000008100000008000300", @ANYRES32=r2], 0x58}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) 1m25.842128725s ago: executing program 4 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001680)=[@text16={0x10, &(0x7f0000000080)="66b92200004066b8f7d3000066ba000000000f3065660f388142080fc77200ba4000b019ee660f5a0bf426660f38047385dde2660f545608ba4200ec", 0x3c}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x46}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) (async) sendmsg$inet6(r8, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000000029000000040000002b0000000000000710"], 0x30}, 0x0) getsockname$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) (async) r10 = syz_clone(0xc055500, &(0x7f0000000300)="748ba35935e9a69e93f452e42a1426dde34687e145c0ffc187b514d01b453186be1ed643431d26b1aec356d132888dfc3dcf06c91f7d657601176cb925c67b81af08c96748e3fde7702572de20c91a3e4b4359", 0x53, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000006c0)="35138e0cee0af8834fe7cbf3072be098963666ebb6fa815aadb568c4b8708814d0cea825a85769d50b6ee2df39a9999fdb0362ed34e236a472a7560f805edc05a4011d94310bd1a2638421e3c199cbbc020f1b4c68e858600cf843e71d3518abd70428bf1ba3a0427dbb3abff44928751077ce89413826cf6c532c2fb1a32123f98630bc1df174a88e39dc8bb876df2a95ae68bdcae6b7e2399568297e7bc9b5d8f5fb47c9de020f3ee7617411ff1279429e6625a91bbfd54ec1dfda01b46a1398340bd9b6aedfd0e5c09d2fe7facc32233a0670b92ef6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={r10, r4, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x34}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0080000000000008140012800a0001007678000030ff4e0d08000a0000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 1m25.764336479s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @sdr={0x39555659, 0x6}}) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x4c}}, 0x0) 1m25.653002118s ago: executing program 2 (id=234): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) (fail_nth: 4) 1m25.605356943s ago: executing program 4 (id=235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x9, 0x5, 0x3}) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000040)={0x0, 0xf}) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000000c0)) 1m25.414950087s ago: executing program 0 (id=236): setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r3, &(0x7f00000194c0)=""/102376, 0x18fe8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 1m25.180791674s ago: executing program 4 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) socket$kcm(0x10, 0x400000002, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m24.901370414s ago: executing program 2 (id=238): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m24.419368493s ago: executing program 0 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xa, 0xfe, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfc, 0x0, 0x9, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r5 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x800000}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3e1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000440)=""/81, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0x5, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000340), &(0x7f00000005c0)=r9}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0xfffffffffffffffd}) close_range(r5, 0xffffffffffffffff, 0x0) 1m24.387282583s ago: executing program 1 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000780)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x6, r3}, {0x8, 0x2}], {0x10, 0x1}, {0x20, 0x2}}, 0x34, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f8) mount(0x0, 0x0, 0x0, 0x8003, 0x0) 1m22.777100657s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYRES32], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x2) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x9) rmdir(&(0x7f0000000040)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipmr_newroute={0x34, 0x18, 0x1, 0x70bd2d, 0x25dfdbfd, {0x80, 0x80, 0x4, 0xe, 0xfd, 0x4, 0x0, 0x1}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @RTA_MARK={0x8, 0x10, 0x7f}, @RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f0000000340)={0x40, 0x4, 0xa7, {0xa7, 0x6, "f34db743d1d7c906420ab80680044b50033842fea9ead491743beb0144276a07d7f81e15d6e297fc3abc8eda3c93ba5825f2a4c52eb04d804bf681daac4ae0ad064e29077b359ceca3497d86785c930b070a6492eca36155fe0189d8484af239e1cbc0be4f3741a63f0c537e47587a97f48fb2cfdddde9b1770242c68d446fb80270354419403ab6e7f5254ef16231d32532704c8335f8ae2e4ae5c184c3f5720644c57e52"}}, &(0x7f00000007c0)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "4ee09f4641bbcce65b15ac210645fe8209d66134df5bd8ff0224de38a058e30b5cf1d76fbdcac67521ec8be6b12cc301e4c1a0367b6d7889cde5edcc45768ed4576c85ac09b30c66a56f203e5972f1c4117ff8cd9a90ee41e5593b7c6d318f5864894cf9fd3057e0c2cc2cc7cd5ca2444fc1b133a5090e434389038d025a83b68a5d54f5ff3ffaf90fc71b002446fbca002a6a188be693ca9d52f97461312920ede6ca5342e665aade6d4be8688455744f7be79baf46812a8f497f6d46613358377b67907dd14f1f484b53fb3178bcb3f2"}}, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global=@item_012={0x2, 0x1, 0x5, "8a46"}, @local=@item_012={0x1, 0x2, 0x9, '\b'}, @main=@item_012={0x1, 0x0, 0xb, "be"}, @global=@item_4={0x3, 0x1, 0x3, "411fb0f0"}, @local=@item_4={0x3, 0x2, 0x1, "300ad623"}, @global=@item_4={0x3, 0x1, 0xb, "c85d6206"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbd80, 0x3f, 0x1, {0x22, 0x4d8}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x60, 0x3, 0xa3, "3d0dbc8a87e279d63c8ab6877d157d620ca4b22bbbb237c83a6208eafd03da32db76eee1f6caf849b850067fdac8b41e7a15deca2979385ceb5dd5464b8cb39f4ecfc37be326d6cb35341dedaf4515eeab8f0e7bcf7f33ebb27ec328383353febb9c1f5a7ba3d29754ca6e351f2eebf86c354b8d2e9d394cc5c2e2e0c376c44bd63d23caa5ca6cc41343e90ffe385e35df677a8a621bbf4f17dcb297d99982dc5b1bd6"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x1, 0xb, "1608f5b0c8fe66d68297a9"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000, @void, @value, @void, @value}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x6c, 0x0, 0x160, 0x0, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xff], [], 'wlan1\x00', '\x00', {0xff}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x8, 0x8, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0x0, 0xff000000], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x62, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x4, 0x3}, {0x0, 0x0, 0x3}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3c0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) 1m11.113429514s ago: executing program 0 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xa, 0xfe, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfc, 0x0, 0x9, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x800000}, [@tmpl={0x44, 0x8, [{{@in6=@private2, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x400000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3e1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000440)=""/81, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0x5, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000340), &(0x7f00000005c0)=r8}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0xfffffffffffffffd}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 32 (id=233): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0xa, @sdr={0x39555659, 0x6}}) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): idge_slave_0) entered blocking state [ 53.964916][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.974626][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.981707][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.990169][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.997311][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.033451][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.040580][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.080455][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.150992][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.170336][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 54.170350][ T29] audit: type=1400 audit(1733771207.993:111): avc: denied { sys_module } for pid=5826 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.171908][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.221295][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.263586][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.286054][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.293259][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.341318][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.353360][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.361067][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.389853][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.397022][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.409930][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.417100][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.451525][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.462577][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.486458][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.502291][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.526752][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.610843][ T5816] veth0_vlan: entered promiscuous mode [ 54.628840][ T5826] veth0_vlan: entered promiscuous mode [ 54.651432][ T5816] veth1_vlan: entered promiscuous mode [ 54.680280][ T5826] veth1_vlan: entered promiscuous mode [ 54.759452][ T5826] veth0_macvtap: entered promiscuous mode [ 54.785718][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.793527][ T5816] veth0_macvtap: entered promiscuous mode [ 54.802006][ T5826] veth1_macvtap: entered promiscuous mode [ 54.821894][ T5816] veth1_macvtap: entered promiscuous mode [ 54.858473][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.870549][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.891790][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.901122][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.910748][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.920387][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.939471][ T5815] veth0_vlan: entered promiscuous mode [ 54.946232][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.957052][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.968309][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.978298][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.989010][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.999937][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.015045][ T5817] veth0_vlan: entered promiscuous mode [ 55.037432][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.046340][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.055353][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.064553][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.076214][ T5815] veth1_vlan: entered promiscuous mode [ 55.088003][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.131849][ T5817] veth1_vlan: entered promiscuous mode [ 55.185190][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.192094][ T5823] veth0_vlan: entered promiscuous mode [ 55.193157][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.203575][ T5823] veth1_vlan: entered promiscuous mode [ 55.221721][ T5815] veth0_macvtap: entered promiscuous mode [ 55.237757][ T5817] veth0_macvtap: entered promiscuous mode [ 55.268596][ T5815] veth1_macvtap: entered promiscuous mode [ 55.277823][ T5817] veth1_macvtap: entered promiscuous mode [ 55.297720][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.306825][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.316678][ T5823] veth0_macvtap: entered promiscuous mode [ 55.343086][ T29] audit: type=1400 audit(1733771209.163:112): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.d8obS7/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.344902][ T5823] veth1_macvtap: entered promiscuous mode [ 55.384136][ T29] audit: type=1400 audit(1733771209.163:113): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.393751][ T2119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.413984][ T5825] Bluetooth: hci0: command tx timeout [ 55.419581][ T5825] Bluetooth: hci4: command tx timeout [ 55.428096][ T5825] Bluetooth: hci2: command tx timeout [ 55.428167][ T2119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.433537][ T5825] Bluetooth: hci1: command tx timeout [ 55.444044][ T29] audit: type=1400 audit(1733771209.203:114): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.d8obS7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.447995][ T5821] Bluetooth: hci3: command tx timeout [ 55.478770][ T29] audit: type=1400 audit(1733771209.203:115): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.501548][ T29] audit: type=1400 audit(1733771209.203:116): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.d8obS7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.505825][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.528949][ T29] audit: type=1400 audit(1733771209.203:117): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.d8obS7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.566056][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.566073][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.566087][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.571044][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.608682][ T29] audit: type=1400 audit(1733771209.213:118): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.615510][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.628524][ T29] audit: type=1400 audit(1733771209.243:119): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.662154][ T29] audit: type=1400 audit(1733771209.243:120): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.671065][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.687414][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.709574][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.720223][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.731055][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.741536][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.752099][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.767720][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.778399][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.788733][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.799370][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.811244][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.821175][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.838082][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.862435][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.874421][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.884916][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.896773][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.906843][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.917436][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.928727][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.942770][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.956627][ T5898] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 55.964791][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.974812][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.985757][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.996099][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.006645][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.017635][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.029338][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.038494][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.048128][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.057106][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.067012][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.077695][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.087585][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.090180][ T5899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 56.098427][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.115339][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.126908][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.137104][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.147696][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.158415][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.177328][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.186670][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.195598][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.208930][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.219070][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.227859][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.236605][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.263070][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.272090][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.283198][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.296654][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.326404][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.342172][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.581906][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.589931][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.614711][ T5904] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 56.868446][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.895334][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.110011][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.132961][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.178824][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.193046][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.211098][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.223524][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.262375][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.290668][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.490526][ T5821] Bluetooth: hci3: command tx timeout [ 57.490563][ T5825] Bluetooth: hci1: command tx timeout [ 57.496417][ T5821] Bluetooth: hci2: command tx timeout [ 57.501374][ T53] Bluetooth: hci0: command tx timeout [ 57.501467][ T5832] Bluetooth: hci4: command tx timeout [ 57.620544][ T5919] overlayfs: missing 'workdir' [ 58.272916][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.724171][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 58.787302][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.822561][ T5895] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 58.914965][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 58.940562][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 58.963150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.011186][ T5895] usb 4-1: Product: syz [ 59.038183][ T5895] usb 4-1: Manufacturer: syz [ 59.073761][ T5895] usb 4-1: SerialNumber: syz [ 59.193473][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 59.193489][ T29] audit: type=1400 audit(1733771213.013:166): avc: denied { write } for pid=5938 comm="syz.2.13" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.341411][ T29] audit: type=1400 audit(1733771213.163:167): avc: denied { name_bind } for pid=5920 comm="syz.3.4" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.438218][ T29] audit: type=1400 audit(1733771213.163:168): avc: denied { node_bind } for pid=5920 comm="syz.3.4" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.509132][ T29] audit: type=1400 audit(1733771213.323:169): avc: denied { create } for pid=5920 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.564528][ T5821] Bluetooth: hci2: command tx timeout [ 59.564569][ T5832] Bluetooth: hci4: command tx timeout [ 59.570745][ T5821] Bluetooth: hci0: command tx timeout [ 59.575999][ T5819] Bluetooth: hci3: command tx timeout [ 59.587606][ T5825] Bluetooth: hci1: command tx timeout [ 59.998740][ T29] audit: type=1400 audit(1733771213.813:170): avc: denied { create } for pid=5960 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.088010][ T8] usb 4-1: USB disconnect, device number 2 [ 60.101512][ T29] audit: type=1400 audit(1733771213.873:171): avc: denied { write } for pid=5960 comm="syz.2.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.186180][ T29] audit: type=1400 audit(1733771214.003:172): avc: denied { bind } for pid=5963 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.216026][ T29] audit: type=1400 audit(1733771214.013:173): avc: denied { write } for pid=5963 comm="syz.1.21" path="socket:[9230]" dev="sockfs" ino=9230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.272164][ T29] audit: type=1400 audit(1733771214.013:174): avc: denied { setopt } for pid=5963 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.330869][ T29] audit: type=1400 audit(1733771214.013:175): avc: denied { read } for pid=5963 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.057970][ T5997] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 62.089626][ T6000] FAULT_INJECTION: forcing a failure. [ 62.089626][ T6000] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.108087][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.2.32 Not tainted 6.13.0-rc2-syzkaller #0 [ 62.116894][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.126965][ T6000] Call Trace: [ 62.130248][ T6000] [ 62.133183][ T6000] dump_stack_lvl+0x16c/0x1f0 [ 62.137882][ T6000] should_fail_ex+0x497/0x5b0 [ 62.142576][ T6000] _copy_from_iter+0x2a1/0x1560 [ 62.147435][ T6000] ? trace_lock_acquire+0x14e/0x1f0 [ 62.152698][ T6000] ? __alloc_skb+0x1fe/0x380 [ 62.157314][ T6000] ? __pfx__copy_from_iter+0x10/0x10 [ 62.162661][ T6000] ? __virt_addr_valid+0x1a4/0x590 [ 62.167813][ T6000] ? __virt_addr_valid+0x5e/0x590 [ 62.172875][ T6000] ? __phys_addr_symbol+0x30/0x80 [ 62.177937][ T6000] ? __check_object_size+0x488/0x710 [ 62.183250][ T6000] netlink_sendmsg+0x813/0xd70 [ 62.188050][ T6000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.193386][ T6000] ____sys_sendmsg+0xaaf/0xc90 [ 62.198260][ T6000] ? copy_msghdr_from_user+0x10b/0x160 [ 62.203758][ T6000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.209082][ T6000] ___sys_sendmsg+0x135/0x1e0 [ 62.213798][ T6000] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.219033][ T6000] ? __pfx_lock_release+0x10/0x10 [ 62.224078][ T6000] ? trace_lock_acquire+0x14e/0x1f0 [ 62.229303][ T6000] ? __fget_files+0x206/0x3a0 [ 62.233994][ T6000] __sys_sendmsg+0x16e/0x220 [ 62.238611][ T6000] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.243774][ T6000] do_syscall_64+0xcd/0x250 [ 62.248314][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.254235][ T6000] RIP: 0033:0x7fbc34d7fed9 [ 62.258666][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.278304][ T6000] RSP: 002b:00007fbc35c17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.286746][ T6000] RAX: ffffffffffffffda RBX: 00007fbc34f45fa0 RCX: 00007fbc34d7fed9 [ 62.294760][ T6000] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 62.302750][ T6000] RBP: 00007fbc35c170a0 R08: 0000000000000000 R09: 0000000000000000 [ 62.310743][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.318724][ T6000] R13: 0000000000000000 R14: 00007fbc34f45fa0 R15: 00007ffcf78be8b8 [ 62.326718][ T6000] [ 62.329796][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.722206][ T6009] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.730881][ T6009] overlayfs: failed to set xattr on upper [ 62.742592][ T6009] overlayfs: ...falling back to redirect_dir=nofollow. [ 62.750466][ T6009] overlayfs: ...falling back to metacopy=off. [ 62.757362][ T6009] overlayfs: ...falling back to index=off. [ 62.764034][ T6009] overlayfs: ...falling back to uuid=null. [ 62.823116][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.37'. [ 63.483832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.492188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.596614][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.2.40 [ 63.603700][ T6029] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 63.609253][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 63.673781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 63.776161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.784679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.821736][ T6032] capability: warning: `syz.3.41' uses 32-bit capabilities (legacy support in use) [ 63.843813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.852420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.001739][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.193660][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 64.373535][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 64.390243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.398966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.407429][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.415735][ T8] usb 2-1: Product: syz [ 64.420110][ T8] usb 2-1: Manufacturer: syz [ 64.424874][ T8] usb 2-1: SerialNumber: syz [ 64.475857][ T8] usb 2-1: config 0 descriptor?? [ 64.525946][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 64.525957][ T29] audit: type=1400 audit(1733771218.333:221): avc: denied { watch watch_reads } for pid=6039 comm="syz.2.44" path="/10/bus" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.566546][ T29] audit: type=1400 audit(1733771218.343:222): avc: denied { unlink } for pid=6039 comm="syz.2.44" name="#3" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.617517][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 64.666362][ T29] audit: type=1400 audit(1733771218.483:223): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.732997][ T6042] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 64.751583][ T29] audit: type=1400 audit(1733771218.493:224): avc: denied { ioctl } for pid=6041 comm="syz.0.47" path="socket:[8495]" dev="sockfs" ino=8495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.788505][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.44'. [ 64.790083][ T29] audit: type=1400 audit(1733771218.573:225): avc: denied { create } for pid=6049 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.820238][ T29] audit: type=1400 audit(1733771218.613:226): avc: denied { map } for pid=6049 comm="syz.4.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.820350][ T6052] Zero length message leads to an empty skb [ 64.847328][ T6042] trusted_key: encrypted_key: insufficient parameters specified [ 64.868789][ T29] audit: type=1400 audit(1733771218.613:227): avc: denied { read write } for pid=6049 comm="syz.4.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.914057][ T29] audit: type=1400 audit(1733771218.633:228): avc: denied { read } for pid=6049 comm="syz.4.45" path="socket:[8502]" dev="sockfs" ino=8502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.997089][ T29] audit: type=1400 audit(1733771218.813:229): avc: denied { write } for pid=6028 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.017041][ T1863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.044970][ T29] audit: type=1400 audit(1733771218.863:230): avc: denied { connect } for pid=6028 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.064381][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.183740][ T1863] usb 4-1: Using ep0 maxpacket: 8 [ 65.198939][ T1863] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 65.207780][ T1863] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 65.219117][ T1863] usb 4-1: config 0 has no interface number 0 [ 65.229992][ T1863] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.235477][ T6063] syz.4.48: attempt to access beyond end of device [ 65.235477][ T6063] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 65.241759][ T1863] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.271231][ T1863] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.312331][ T6063] syz.4.48: attempt to access beyond end of device [ 65.312331][ T6063] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 65.333013][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.343224][ T6054] nbd4: detected capacity change from 0 to 14 [ 65.361085][ T1863] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 65.374927][ T1863] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 65.477373][ T1863] usb 4-1: Product: syz [ 65.509224][ T1863] usb 4-1: Manufacturer: syz [ 65.523222][ T6063] block nbd4: Send control failed (result -89) [ 65.535986][ T1863] usb 4-1: config 0 descriptor?? [ 65.553944][ T6063] block nbd4: Request send failed, requeueing [ 65.562645][ T5832] block nbd4: Receive control failed (result -32) [ 65.563006][ T40] block nbd4: Dead connection, failed to find a fallback [ 65.586674][ T40] block nbd4: shutting down sockets [ 65.592376][ T40] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.603101][ T5932] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.620701][ T5932] Buffer I/O error on dev nbd4, logical block 0, async page read [ 65.654851][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 65.684385][ T5932] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.702829][ T5932] Buffer I/O error on dev nbd4, logical block 1, async page read [ 65.710796][ T6063] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.710825][ T5932] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.710857][ T5932] Buffer I/O error on dev nbd4, logical block 2, async page read [ 65.738111][ T5932] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.741160][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 65.747254][ T5932] Buffer I/O error on dev nbd4, logical block 3, async page read [ 65.764631][ T5932] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.767527][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 65.773893][ T5932] Buffer I/O error on dev nbd4, logical block 0, async page read [ 65.791340][ T5932] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.800705][ T5932] Buffer I/O error on dev nbd4, logical block 1, async page read [ 65.808712][ T5932] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.817865][ T5932] Buffer I/O error on dev nbd4, logical block 2, async page read [ 65.826201][ T5932] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.835697][ T5932] Buffer I/O error on dev nbd4, logical block 3, async page read [ 65.843706][ T5932] Buffer I/O error on dev nbd4, logical block 0, async page read [ 65.851686][ T5932] Buffer I/O error on dev nbd4, logical block 1, async page read [ 65.861916][ T5932] ldm_validate_partition_table(): Disk read failed. [ 65.870727][ T5932] Dev nbd4: unable to read RDB block 0 [ 65.877164][ T5932] nbd4: unable to read partition table [ 65.882883][ T5932] nbd4: partition table beyond EOD, truncated [ 65.893348][ T5932] ldm_validate_partition_table(): Disk read failed. [ 65.900876][ T5932] Dev nbd4: unable to read RDB block 0 [ 65.906991][ T5932] nbd4: unable to read partition table [ 65.912736][ T5932] nbd4: partition table beyond EOD, truncated [ 65.927446][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 65.938578][ T6064] ldm_validate_partition_table(): Disk read failed. [ 65.945995][ T6064] Dev nbd4: unable to read RDB block 0 [ 65.951909][ T6064] nbd4: unable to read partition table [ 65.959006][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2 [ 65.968756][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 65.984514][ T6064] nbd4: partition table beyond EOD, truncated [ 65.992111][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 66.015761][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 66.029354][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.072470][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.090076][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 66.106382][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 66.132304][ T6063] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 66.145281][ T6063] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 66.146169][ T8] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 66.244429][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.403724][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 66.429776][ T5868] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 66.500500][ T5868] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.670019][ T5868] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.701515][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.715552][ T5868] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 66.724687][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.766672][ T5832] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 66.784611][ T5868] usb 1-1: config 0 descriptor?? [ 67.023740][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.176294][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.186542][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.196476][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.217261][ T5868] nintendo 0003:057E:200E.0001: collection stack underflow [ 67.226668][ T5868] nintendo 0003:057E:200E.0001: item 0 0 0 12 parsing failed [ 67.238994][ T5868] nintendo 0003:057E:200E.0001: HID parse failed [ 67.254288][ T5868] nintendo 0003:057E:200E.0001: probe - fail = -22 [ 67.263158][ T5868] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -22 [ 67.272655][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.282268][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.290791][ T25] usb 5-1: Product: syz [ 67.295490][ T25] usb 5-1: Manufacturer: syz [ 67.308471][ T25] usb 5-1: SerialNumber: syz [ 67.357219][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 67.363809][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 67.369616][ T25] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 67.377276][ T25] cdc_ncm 5-1:1.0: bind() failure [ 67.425076][ T8] usb 2-1: USB disconnect, device number 2 [ 67.567387][ T5868] usb 5-1: USB disconnect, device number 2 [ 67.751015][ T6096] ptrace attach of "./syz-executor exec"[5816] was attempted by ""[6096] [ 67.848756][ T1863] usb 4-1: USB disconnect, device number 3 [ 69.176289][ T5913] usb 1-1: USB disconnect, device number 2 [ 69.973786][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.159927][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 70.174717][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.218537][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.243698][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 70.265641][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 70.265665][ T29] audit: type=1400 audit(1733771224.093:263): avc: denied { read } for pid=6137 comm="syz.2.73" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.275161][ T6139] FAULT_INJECTION: forcing a failure. [ 70.275161][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 70.298498][ T29] audit: type=1400 audit(1733771224.093:264): avc: denied { open } for pid=6137 comm="syz.2.73" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.308021][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.331439][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.345972][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 70.356648][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.2.73 Not tainted 6.13.0-rc2-syzkaller #0 [ 70.365442][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.375508][ T6139] Call Trace: [ 70.378772][ T6139] [ 70.381690][ T6139] dump_stack_lvl+0x16c/0x1f0 [ 70.386353][ T6139] should_fail_ex+0x497/0x5b0 [ 70.391015][ T6139] ? fs_reclaim_acquire+0xae/0x150 [ 70.396112][ T6139] should_failslab+0xc2/0x120 [ 70.400786][ T6139] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 70.406152][ T6139] ? vm_area_dup+0x21/0x2f0 [ 70.410640][ T6139] vm_area_dup+0x21/0x2f0 [ 70.414958][ T6139] __split_vma+0x181/0x1160 [ 70.419463][ T6139] ? __pfx___split_vma+0x10/0x10 [ 70.424472][ T6139] ? __pfx_mark_lock+0x10/0x10 [ 70.429221][ T6139] vms_gather_munmap_vmas+0x38b/0x1730 [ 70.434714][ T6139] ? mark_lock+0xb5/0xc60 [ 70.439041][ T6139] ? mark_lock+0xb5/0xc60 [ 70.443388][ T6139] ? is_bpf_text_address+0x30/0x1a0 [ 70.448661][ T6139] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 70.454536][ T6139] ? __pfx_mark_lock+0x10/0x10 [ 70.459290][ T6139] ? __lock_acquire+0x15a9/0x3c40 [ 70.464297][ T6139] ? hlock_class+0x4e/0x130 [ 70.468801][ T6139] ? mark_lock+0xb5/0xc60 [ 70.473124][ T6139] ? __pfx_mark_lock+0x10/0x10 [ 70.477869][ T6139] do_vmi_align_munmap+0x27f/0x890 [ 70.482964][ T6139] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 70.488617][ T6139] do_vmi_munmap+0x20b/0x3e0 [ 70.493204][ T6139] do_munmap+0xbe/0x100 [ 70.497350][ T6139] ? __pfx_do_munmap+0x10/0x10 [ 70.502101][ T6139] ? __do_sys_mremap+0x21c/0x15e0 [ 70.507110][ T6139] ? __pfx_down_write_killable+0x10/0x10 [ 70.512726][ T6139] ? vfs_write+0x306/0x1150 [ 70.517211][ T6139] __do_sys_mremap+0x1099/0x15e0 [ 70.522145][ T6139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.528127][ T6139] ? __pfx___do_sys_mremap+0x10/0x10 [ 70.533395][ T6139] ? __fget_files+0x206/0x3a0 [ 70.538081][ T6139] ? fput+0x67/0x440 [ 70.541981][ T6139] ? ksys_write+0x1ba/0x250 [ 70.546462][ T6139] ? __pfx_ksys_write+0x10/0x10 [ 70.551291][ T6139] do_syscall_64+0xcd/0x250 [ 70.555791][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.561663][ T6139] RIP: 0033:0x7fbc34d7fed9 [ 70.566055][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.585653][ T6139] RSP: 002b:00007fbc35c17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 70.594041][ T6139] RAX: ffffffffffffffda RBX: 00007fbc34f45fa0 RCX: 00007fbc34d7fed9 [ 70.602002][ T6139] RDX: 0000000000001000 RSI: 0000000000002000 RDI: 00000000203eb000 [ 70.610039][ T6139] RBP: 00007fbc35c170a0 R08: 0000000020003000 R09: 0000000000000000 [ 70.618000][ T6139] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 70.625949][ T6139] R13: 0000000000000000 R14: 00007fbc34f45fa0 R15: 00007ffcf78be8b8 [ 70.633913][ T6139] [ 70.636934][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.643514][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.655770][ T8] usb 5-1: config 0 descriptor?? [ 70.664130][ T29] audit: type=1400 audit(1733771224.093:265): avc: denied { map } for pid=6137 comm="syz.2.73" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.805579][ T29] audit: type=1400 audit(1733771224.633:266): avc: denied { create } for pid=6140 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.831914][ T29] audit: type=1400 audit(1733771224.653:267): avc: denied { write } for pid=6140 comm="syz.2.74" path="socket:[9604]" dev="sockfs" ino=9604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.894283][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 70.901158][ T29] audit: type=1400 audit(1733771224.703:268): avc: denied { create } for pid=6140 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.932247][ T5913] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 70.944505][ T29] audit: type=1400 audit(1733771224.713:269): avc: denied { nlmsg_read } for pid=6140 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.945008][ T5913] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 70.965014][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.266675][ T5913] usb 1-1: config 0 has no interface number 0 [ 71.281329][ T5913] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.346598][ T5913] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.355694][ T29] audit: type=1400 audit(1733771225.183:270): avc: denied { map } for pid=6151 comm="syz.3.77" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.358016][ T5913] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.381205][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.382608][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426168][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.808942][ T5913] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 71.818502][ T5913] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 71.828499][ T5913] usb 1-1: Product: syz [ 71.832655][ T5913] usb 1-1: Manufacturer: syz [ 71.842070][ T5913] usb 1-1: config 0 descriptor?? [ 71.863778][ T8] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 71.983338][ T5868] usb 5-1: USB disconnect, device number 3 [ 71.992295][ T6162] FAULT_INJECTION: forcing a failure. [ 71.992295][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.005709][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.3.81 Not tainted 6.13.0-rc2-syzkaller #0 [ 72.014585][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.024661][ T6162] Call Trace: [ 72.027949][ T6162] [ 72.030934][ T6162] dump_stack_lvl+0x16c/0x1f0 [ 72.035647][ T6162] should_fail_ex+0x497/0x5b0 [ 72.040391][ T6162] strncpy_from_user+0x3b/0x2d0 [ 72.045277][ T6162] getname_flags.part.0+0x8f/0x550 [ 72.050422][ T6162] getname+0x8d/0xe0 [ 72.054332][ T6162] do_sys_openat2+0x104/0x1e0 [ 72.059034][ T6162] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.064260][ T6162] ? __fget_files+0x206/0x3a0 [ 72.068972][ T6162] __x64_sys_openat+0x175/0x210 [ 72.073854][ T6162] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.078358][ T29] audit: type=1400 audit(1733771225.903:271): avc: denied { execute } for pid=6165 comm="syz.2.83" path="/26/memory.events" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.079233][ T6162] ? ksys_write+0x1ba/0x250 [ 72.079267][ T6162] do_syscall_64+0xcd/0x250 [ 72.111257][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.117177][ T6162] RIP: 0033:0x7f3b2277fed9 [ 72.121601][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.141229][ T6162] RSP: 002b:00007f3b23652058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.149669][ T6162] RAX: ffffffffffffffda RBX: 00007f3b22945fa0 RCX: 00007f3b2277fed9 [ 72.157661][ T6162] RDX: 0000000000008000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 72.165662][ T6162] RBP: 00007f3b236520a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.173663][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.176361][ T29] audit: type=1400 audit(1733771226.003:272): avc: denied { append } for pid=6167 comm="syz.2.84" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.181637][ T6162] R13: 0000000000000000 R14: 00007f3b22945fa0 R15: 00007ffdef018018 [ 72.181665][ T6162] [ 72.240006][ T6168] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 72.883893][ T117] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.051772][ T117] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 73.061438][ T117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.081784][ T117] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.092938][ T117] usb 3-1: config 1 has no interface number 1 [ 73.102586][ T117] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 73.129205][ T117] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.148076][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.162973][ T117] usb 3-1: Product: syz [ 73.178094][ T117] usb 3-1: Manufacturer: syz [ 73.183058][ T117] usb 3-1: SerialNumber: syz [ 73.252185][ T5913] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input7 [ 73.288261][ T5913] input: failed to attach handler kbd to device input7, error: -5 [ 73.367458][ T5913] usb 1-1: USB disconnect, device number 3 [ 73.843149][ T6190] FAULT_INJECTION: forcing a failure. [ 73.843149][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 73.866616][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.3.91 Not tainted 6.13.0-rc2-syzkaller #0 [ 73.875434][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.879861][ T117] usb 3-1: USB disconnect, device number 2 [ 73.885492][ T6190] Call Trace: [ 73.885507][ T6190] [ 73.885515][ T6190] dump_stack_lvl+0x16c/0x1f0 [ 73.885540][ T6190] should_fail_ex+0x497/0x5b0 [ 73.885563][ T6190] ? fs_reclaim_acquire+0xae/0x150 [ 73.885591][ T6190] should_failslab+0xc2/0x120 [ 73.885612][ T6190] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 73.885634][ T6190] ? __alloc_skb+0x2b1/0x380 [ 73.885663][ T6190] __alloc_skb+0x2b1/0x380 [ 73.885687][ T6190] ? __pfx___alloc_skb+0x10/0x10 [ 73.885714][ T6190] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 73.942497][ T6190] netlink_alloc_large_skb+0x69/0x130 [ 73.947857][ T6190] netlink_sendmsg+0x689/0xd70 [ 73.952603][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.957875][ T6190] ____sys_sendmsg+0xaaf/0xc90 [ 73.962619][ T6190] ? copy_msghdr_from_user+0x10b/0x160 [ 73.968061][ T6190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.973339][ T6190] ___sys_sendmsg+0x135/0x1e0 [ 73.978009][ T6190] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.983199][ T6190] ? __pfx_lock_release+0x10/0x10 [ 73.988211][ T6190] ? trace_lock_acquire+0x14e/0x1f0 [ 73.993394][ T6190] ? __fget_files+0x206/0x3a0 [ 73.998065][ T6190] __sys_sendmsg+0x16e/0x220 [ 74.002638][ T6190] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.007738][ T6190] do_syscall_64+0xcd/0x250 [ 74.012221][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.018116][ T6190] RIP: 0033:0x7f3b2277fed9 [ 74.022528][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.042115][ T6190] RSP: 002b:00007f3b23652058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.050517][ T6190] RAX: ffffffffffffffda RBX: 00007f3b22945fa0 RCX: 00007f3b2277fed9 [ 74.058471][ T6190] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 74.066509][ T6190] RBP: 00007f3b236520a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.074548][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.082508][ T6190] R13: 0000000000000000 R14: 00007f3b22945fa0 R15: 00007ffdef018018 [ 74.090466][ T6190] [ 74.254045][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.440432][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 74.490906][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.506215][ T8] usb 2-1: config 0 has no interface number 0 [ 74.565705][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 74.575873][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.621760][ T8] usb 2-1: Product: syz [ 74.661820][ T8] usb 2-1: Manufacturer: syz [ 74.748082][ T8] usb 2-1: SerialNumber: syz [ 75.070867][ T8] usb 2-1: config 0 descriptor?? [ 75.080694][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 75.623450][ T8] gspca_spca1528: reg_w err -110 [ 75.643756][ T8] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 76.703948][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 76.703965][ T29] audit: type=1400 audit(1733771229.983:285): avc: denied { write } for pid=6217 comm="syz.0.100" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.738673][ T9] cfg80211: failed to load regulatory.db [ 76.757238][ T6225] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 76.771264][ T6225] netlink: 224 bytes leftover after parsing attributes in process `syz.3.102'. [ 76.853126][ T29] audit: type=1400 audit(1733771230.673:286): avc: denied { ioctl } for pid=6219 comm="syz.3.102" path="socket:[9032]" dev="sockfs" ino=9032 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.003827][ T5868] usb 2-1: USB disconnect, device number 3 [ 77.012276][ T29] audit: type=1400 audit(1733771230.833:287): avc: denied { create } for pid=6234 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.031543][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.080208][ T29] audit: type=1400 audit(1733771230.863:288): avc: denied { connect } for pid=6234 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.099552][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.113304][ T6241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.107'. [ 77.141775][ T29] audit: type=1400 audit(1733771230.933:289): avc: denied { write } for pid=6234 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.294370][ T5895] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 77.556142][ T29] audit: type=1400 audit(1733771231.383:290): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.238297][ T5895] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 78.266175][ T5895] usb 1-1: config 0 has no interface number 0 [ 78.306993][ T5895] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.469022][ T5895] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 78.477914][ T6244] netlink: 5 bytes leftover after parsing attributes in process `syz.2.104'. [ 78.488139][ T6244] 0ªX¹¦D: renamed from gretap0 (while UP) [ 78.503891][ T29] audit: type=1400 audit(1733771232.293:291): avc: denied { map } for pid=6234 comm="syz.2.104" path="socket:[9876]" dev="sockfs" ino=9876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.504778][ T6244] 0ªX¹¦D: entered allmulticast mode [ 78.544745][ T6244] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 78.548200][ T29] audit: type=1400 audit(1733771232.293:292): avc: denied { accept } for pid=6234 comm="syz.2.104" path="socket:[9876]" dev="sockfs" ino=9876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.914934][ T5895] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 78.929546][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 78.977210][ T5895] usb 1-1: Product: syz [ 78.997101][ T5895] usb 1-1: SerialNumber: syz [ 79.011020][ T5895] usb 1-1: config 0 descriptor?? [ 79.020121][ T5895] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 79.031530][ T5895] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 79.223288][ T29] audit: type=1400 audit(1733771233.043:293): avc: denied { connect } for pid=6236 comm="syz.0.105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.252084][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.259873][ T29] audit: type=1400 audit(1733771233.063:294): avc: denied { write } for pid=6236 comm="syz.0.105" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.284677][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.327460][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.545082][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.553497][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.560945][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.568132][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.576310][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.583682][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.590841][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.597952][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.605849][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.612975][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.642144][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 79.642154][ T5865] usb 1-1: USB disconnect, device number 4 [ 79.860911][ T5865] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 81.203786][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.261068][ T6278] process 'syz.2.114' launched './file0' with NULL argv: empty string added [ 81.383771][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 81.462523][ T5895] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 81.616224][ T5895] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.670576][ T5895] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.752200][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.785570][ T5895] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 81.823751][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.220962][ T5895] usb 5-1: config 0 descriptor?? [ 82.925554][ T5895] nintendo 0003:057E:200E.0003: collection stack underflow [ 82.933030][ T5895] nintendo 0003:057E:200E.0003: item 0 0 0 12 parsing failed [ 82.948875][ T5895] nintendo 0003:057E:200E.0003: HID parse failed [ 83.194578][ T5895] nintendo 0003:057E:200E.0003: probe - fail = -22 [ 83.207123][ T5895] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -22 [ 83.640603][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 83.640619][ T29] audit: type=1400 audit(1733771237.463:299): avc: denied { getopt } for pid=6315 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.462864][ T6325] syz.3.129[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.462950][ T6325] syz.3.129[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.498785][ T6325] syz.3.129[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.515031][ T6325] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 84.538926][ T117] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.545113][ T5865] usb 5-1: USB disconnect, device number 4 [ 84.621571][ T6325] mmap: syz.3.129 (6325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.640365][ T29] audit: type=1400 audit(1733771238.463:300): avc: denied { read } for pid=6324 comm="syz.3.129" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.679129][ T29] audit: type=1400 audit(1733771238.463:301): avc: denied { open } for pid=6324 comm="syz.3.129" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.712051][ T29] audit: type=1400 audit(1733771238.533:302): avc: denied { ioctl } for pid=6324 comm="syz.3.129" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.745113][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.756436][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.791250][ T117] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 84.808126][ T117] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 84.831489][ T117] usb 3-1: Product: syz [ 84.848945][ T117] usb 3-1: config 0 descriptor?? [ 85.031058][ T29] audit: type=1400 audit(1733771238.853:303): avc: denied { name_bind } for pid=6338 comm="syz.3.135" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.064701][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.067731][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.067882][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.068194][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.068271][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.068588][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.068690][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.068962][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.069054][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.069336][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.069439][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.145938][ T29] audit: type=1400 audit(1733771238.903:304): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.145975][ T29] audit: type=1400 audit(1733771238.903:305): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.146004][ T29] audit: type=1400 audit(1733771238.903:306): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.156917][ T117] usbhid 3-1:0.0: can't add hid device: -71 [ 85.157004][ T117] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 85.169325][ T117] usb 3-1: USB disconnect, device number 3 [ 85.234708][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 85.236756][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.238060][ T5865] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 85.238077][ T5865] usb 5-1: config 127 has no interface number 0 [ 85.238091][ T5865] usb 5-1: config 127 interface 25 has no altsetting 0 [ 85.239862][ T5865] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 85.239887][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.239900][ T5865] usb 5-1: Product: syz [ 85.239909][ T5865] usb 5-1: Manufacturer: syz [ 85.239918][ T5865] usb 5-1: SerialNumber: syz [ 85.270776][ T29] audit: type=1400 audit(1733771239.093:307): avc: denied { create } for pid=6338 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.451225][ T29] audit: type=1400 audit(1733771239.273:308): avc: denied { mounton } for pid=6350 comm="syz.2.137" path="/proc/119/task" dev="proc" ino=10389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 85.926852][ T5865] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 86.068756][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.138'. [ 86.736507][ T5865] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 86.754079][ T5865] usb 5-1: USB disconnect, device number 5 [ 86.999059][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.163665][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 87.177895][ T46] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 87.653279][ T46] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.663300][ T46] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.676496][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.683426][ T46] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 87.692587][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.711027][ T46] usb 4-1: config 0 descriptor?? [ 87.894827][ T6391] syz.0.149[6391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.894933][ T6391] syz.0.149[6391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.958450][ T6391] syz.0.149[6391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.197562][ T46] nintendo 0003:057E:200E.0004: collection stack underflow [ 88.221945][ T46] nintendo 0003:057E:200E.0004: item 0 0 0 12 parsing failed [ 88.229820][ T46] nintendo 0003:057E:200E.0004: HID parse failed [ 88.262311][ T46] nintendo 0003:057E:200E.0004: probe - fail = -22 [ 88.262381][ T46] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -22 [ 88.313822][ T5865] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.486270][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 88.516862][ T6398] FAULT_INJECTION: forcing a failure. [ 88.516862][ T6398] name failslab, interval 1, probability 0, space 0, times 0 [ 88.530027][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.2.151 Not tainted 6.13.0-rc2-syzkaller #0 [ 88.538904][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.548981][ T6398] Call Trace: [ 88.552272][ T6398] [ 88.555214][ T6398] dump_stack_lvl+0x16c/0x1f0 [ 88.559918][ T6398] should_fail_ex+0x497/0x5b0 [ 88.564626][ T6398] ? fs_reclaim_acquire+0xae/0x150 [ 88.569772][ T6398] should_failslab+0xc2/0x120 [ 88.574474][ T6398] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 88.579903][ T6398] ? __proc_create+0x2c0/0x8b0 [ 88.584695][ T6398] __proc_create+0x2c0/0x8b0 [ 88.589307][ T6398] ? __pfx___proc_create+0x10/0x10 [ 88.594440][ T6398] ? __pfx_vsnprintf+0x10/0x10 [ 88.599224][ T6398] ? find_held_lock+0x2d/0x110 [ 88.604019][ T6398] proc_create_reg+0x7d/0x180 [ 88.608836][ T6398] ? __pfx_bcm_proc_show+0x10/0x10 [ 88.613950][ T6398] proc_create_net_single+0x87/0x170 [ 88.619247][ T6398] ? __pfx_proc_create_net_single+0x10/0x10 [ 88.625137][ T6398] bcm_connect+0x1ed/0x4d0 [ 88.629552][ T6398] ? __pfx_bcm_connect+0x10/0x10 [ 88.634482][ T6398] __sys_connect_file+0x13e/0x1a0 [ 88.639506][ T6398] __sys_connect+0x14f/0x170 [ 88.644095][ T6398] ? __pfx___sys_connect+0x10/0x10 [ 88.649213][ T6398] __x64_sys_connect+0x72/0xb0 [ 88.654663][ T6398] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.659852][ T6398] do_syscall_64+0xcd/0x250 [ 88.664365][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.670248][ T6398] RIP: 0033:0x7fbc34d7fed9 [ 88.674650][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.694248][ T6398] RSP: 002b:00007fbc35c17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 88.702648][ T6398] RAX: ffffffffffffffda RBX: 00007fbc34f45fa0 RCX: 00007fbc34d7fed9 [ 88.710606][ T6398] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000006 [ 88.718563][ T6398] RBP: 00007fbc35c170a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.726525][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.734483][ T6398] R13: 0000000000000000 R14: 00007fbc34f45fa0 R15: 00007ffcf78be8b8 [ 88.742457][ T6398] [ 88.763378][ T5865] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.786288][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 88.830255][ T5865] usb 5-1: config 0 has no interface number 0 [ 89.054895][ T5865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.095747][ T5865] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.131606][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.537829][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 89.679449][ T5865] usb 5-1: config 0 descriptor?? [ 89.692292][ T5865] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 90.094192][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 90.094209][ T29] audit: type=1400 audit(1733771243.923:324): avc: denied { write } for pid=6411 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.148364][ T46] usb 5-1: USB disconnect, device number 6 [ 90.421783][ T6412] bridge0: port 3(veth0_to_bridge) entered blocking state [ 90.611978][ T6412] bridge0: port 3(veth0_to_bridge) entered disabled state [ 90.645627][ T5865] usb 4-1: USB disconnect, device number 4 [ 90.655174][ T6412] veth0_to_bridge: entered allmulticast mode [ 90.835858][ T6412] veth0_to_bridge: entered promiscuous mode [ 90.890209][ T6412] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.890789][ T6412] bridge0: port 3(veth0_to_bridge) entered blocking state [ 90.890868][ T6412] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 91.763573][ T29] audit: type=1400 audit(1733771245.583:325): avc: denied { create } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.783259][ T29] audit: type=1400 audit(1733771245.583:326): avc: denied { connect } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.372813][ T29] audit: type=1400 audit(1733771246.173:327): avc: denied { bind } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.412305][ T29] audit: type=1400 audit(1733771246.173:328): avc: denied { setopt } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.543512][ T29] audit: type=1400 audit(1733771246.173:329): avc: denied { write } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.614113][ T29] audit: type=1400 audit(1733771246.233:330): avc: denied { read } for pid=6448 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.633688][ T117] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 92.774999][ T29] audit: type=1400 audit(1733771246.603:331): avc: denied { write } for pid=6461 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.803743][ T117] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 92.811966][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.829256][ T29] audit: type=1400 audit(1733771246.603:332): avc: denied { nlmsg_write } for pid=6461 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.852881][ T117] usb 2-1: config 0 has no interface number 0 [ 92.861270][ T117] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.876982][ T29] audit: type=1400 audit(1733771246.703:333): avc: denied { compute_member } for pid=6463 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.943076][ T117] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 92.957078][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.985819][ T117] usb 2-1: Product: syz [ 92.993658][ T117] usb 2-1: Manufacturer: syz [ 93.002751][ T117] usb 2-1: SerialNumber: syz [ 93.024355][ T117] usb 2-1: config 0 descriptor?? [ 93.948580][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.991360][ T117] usb 2-1: probing VID:PID(0424:012C) [ 94.011221][ T117] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 94.143817][ T117] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 94.754824][ T117] usb 2-1: USB disconnect, device number 5 [ 94.910458][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 94.924839][ T46] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 94.936163][ T46] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.950840][ T46] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.980566][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.128158][ T46] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 95.138360][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.150748][ T46] usb 5-1: config 0 descriptor?? [ 95.685247][ T6498] IPVS: set_ctl: invalid protocol: 161 172.20.20.170:20002 [ 95.869098][ T46] nintendo 0003:057E:200E.0005: collection stack underflow [ 95.876653][ T46] nintendo 0003:057E:200E.0005: item 0 0 0 12 parsing failed [ 95.884465][ T46] nintendo 0003:057E:200E.0005: HID parse failed [ 95.894265][ T46] nintendo 0003:057E:200E.0005: probe - fail = -22 [ 95.900873][ T46] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -22 [ 97.257695][ T46] usb 5-1: USB disconnect, device number 7 [ 97.341937][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 97.341953][ T29] audit: type=1400 audit(1733771251.163:339): avc: denied { getopt } for pid=6525 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.441309][ T6549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.723822][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 99.506019][ T6558] capability: warning: `syz.1.194' uses deprecated v2 capabilities in a way that may be insecure [ 99.523718][ T29] audit: type=1400 audit(1733771253.333:340): avc: denied { bind } for pid=6557 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.593658][ T29] audit: type=1400 audit(1733771253.333:341): avc: denied { listen } for pid=6557 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.667288][ T6559] 9pnet_fd: Insufficient options for proto=fd [ 99.679015][ T29] audit: type=1400 audit(1733771253.343:342): avc: denied { write } for pid=6557 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.716246][ T29] audit: type=1400 audit(1733771253.343:343): avc: denied { accept } for pid=6557 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.088958][ T29] audit: type=1400 audit(1733771253.343:344): avc: denied { read } for pid=6557 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.297950][ T29] audit: type=1400 audit(1733771254.123:345): avc: denied { setopt } for pid=6543 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.317259][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.324760][ T1207] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.963878][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.083968][ T1207] usb 5-1: Using ep0 maxpacket: 8 [ 101.136102][ T5865] usb 4-1: device descriptor read/64, error -71 [ 101.149477][ T1207] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 101.227824][ T1207] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.269665][ T1207] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.320943][ T1207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.342608][ T1207] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 101.403848][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.433929][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.567258][ T1207] usb 5-1: config 0 descriptor?? [ 101.730204][ T5865] usb 4-1: device descriptor read/64, error -71 [ 101.868196][ T5865] usb usb4-port1: attempt power cycle [ 102.043437][ T1207] nintendo 0003:057E:200E.0006: collection stack underflow [ 102.054462][ T1207] nintendo 0003:057E:200E.0006: item 0 0 0 12 parsing failed [ 102.062770][ T1207] nintendo 0003:057E:200E.0006: HID parse failed [ 102.070962][ T1207] nintendo 0003:057E:200E.0006: probe - fail = -22 [ 102.079538][ T1207] nintendo 0003:057E:200E.0006: probe with driver nintendo failed with error -22 [ 102.714163][ T5865] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.738709][ T5865] usb 4-1: device descriptor read/8, error -71 [ 102.765780][ T6594] FAULT_INJECTION: forcing a failure. [ 102.765780][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 102.782552][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.2.205 Not tainted 6.13.0-rc2-syzkaller #0 [ 102.791456][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.801521][ T6594] Call Trace: [ 102.804785][ T6594] [ 102.807694][ T6594] dump_stack_lvl+0x16c/0x1f0 [ 102.812366][ T6594] should_fail_ex+0x497/0x5b0 [ 102.817049][ T6594] ? fs_reclaim_acquire+0xae/0x150 [ 102.822199][ T6594] should_failslab+0xc2/0x120 [ 102.826899][ T6594] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 102.832292][ T6594] ? security_file_alloc+0x34/0x2b0 [ 102.834731][ T6597] FAULT_INJECTION: forcing a failure. [ 102.834731][ T6597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.837494][ T6594] security_file_alloc+0x34/0x2b0 [ 102.855536][ T6594] init_file+0x93/0x480 [ 102.859737][ T6594] alloc_empty_file+0x91/0x1e0 [ 102.864502][ T6594] path_openat+0xe1/0x2d60 [ 102.868997][ T6594] ? hlock_class+0x4e/0x130 [ 102.873494][ T6594] ? __lock_acquire+0x15a9/0x3c40 [ 102.878517][ T6594] ? __pfx_path_openat+0x10/0x10 [ 102.883463][ T6594] ? __pfx___lock_acquire+0x10/0x10 [ 102.888649][ T6594] ? lock_acquire.part.0+0x11b/0x380 [ 102.893938][ T6594] ? find_held_lock+0x2d/0x110 [ 102.898712][ T6594] do_filp_open+0x20c/0x470 [ 102.903205][ T6594] ? __pfx_do_filp_open+0x10/0x10 [ 102.908236][ T6594] ? find_held_lock+0x2d/0x110 [ 102.913029][ T6594] ? _raw_spin_unlock+0x28/0x50 [ 102.917905][ T6594] ? alloc_fd+0x41f/0x760 [ 102.922248][ T6594] do_sys_openat2+0x17a/0x1e0 [ 102.926920][ T6594] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.932112][ T6594] ? __fget_files+0x206/0x3a0 [ 102.936804][ T6594] __x64_sys_creat+0xcd/0x120 [ 102.941513][ T6594] ? __pfx___x64_sys_creat+0x10/0x10 [ 102.946815][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 102.951663][ T6594] ? do_syscall_64+0x91/0x250 [ 102.956336][ T6594] do_syscall_64+0xcd/0x250 [ 102.960839][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.966756][ T6594] RIP: 0033:0x7fbc34d7fed9 [ 102.971180][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.990801][ T6594] RSP: 002b:00007fbc35c17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 102.999216][ T6594] RAX: ffffffffffffffda RBX: 00007fbc34f45fa0 RCX: 00007fbc34d7fed9 [ 103.007189][ T6594] RDX: 0000000000000000 RSI: ecf86c37d53049b6 RDI: 0000000020000180 [ 103.015156][ T6594] RBP: 00007fbc35c170a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.023121][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.031108][ T6594] R13: 0000000000000001 R14: 00007fbc34f45fa0 R15: 00007ffcf78be8b8 [ 103.039098][ T6594] [ 103.042108][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.1.206 Not tainted 6.13.0-rc2-syzkaller #0 [ 103.050980][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.061399][ T6597] Call Trace: [ 103.064698][ T6597] [ 103.067648][ T6597] dump_stack_lvl+0x16c/0x1f0 [ 103.072368][ T6597] should_fail_ex+0x497/0x5b0 [ 103.077053][ T6597] _copy_from_user+0x2e/0xd0 [ 103.081645][ T6597] copy_mount_options+0x76/0x190 [ 103.086582][ T6597] __x64_sys_mount+0x1ad/0x320 [ 103.091354][ T6597] ? __pfx___x64_sys_mount+0x10/0x10 [ 103.096639][ T6597] do_syscall_64+0xcd/0x250 [ 103.101142][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.107028][ T6597] RIP: 0033:0x7fc67a17fed9 [ 103.111431][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.131029][ T6597] RSP: 002b:00007fc67aebe058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.139446][ T6597] RAX: ffffffffffffffda RBX: 00007fc67a345fa0 RCX: 00007fc67a17fed9 [ 103.147419][ T6597] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 103.155480][ T6597] RBP: 00007fc67aebe0a0 R08: 00000000200001c0 R09: 0000000000000000 [ 103.163437][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.171395][ T6597] R13: 0000000000000000 R14: 00007fc67a345fa0 R15: 00007ffe1a99a638 [ 103.179549][ T6597] [ 103.182633][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.243966][ T5865] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.284172][ T5865] usb 4-1: device descriptor read/8, error -71 [ 103.349110][ T6603] FAULT_INJECTION: forcing a failure. [ 103.349110][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 103.373256][ T29] audit: type=1400 audit(1733771257.173:346): avc: denied { remount } for pid=6601 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.393525][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.209 Not tainted 6.13.0-rc2-syzkaller #0 [ 103.402409][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.412488][ T6603] Call Trace: [ 103.415783][ T6603] [ 103.418721][ T6603] dump_stack_lvl+0x16c/0x1f0 [ 103.423422][ T6603] should_fail_ex+0x497/0x5b0 [ 103.428111][ T6603] ? fs_reclaim_acquire+0xae/0x150 [ 103.433259][ T6603] should_failslab+0xc2/0x120 [ 103.437930][ T6603] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 103.443381][ T6603] ? security_file_alloc+0x34/0x2b0 [ 103.448599][ T6603] security_file_alloc+0x34/0x2b0 [ 103.453625][ T6603] init_file+0x93/0x480 [ 103.457796][ T6603] alloc_empty_file+0x91/0x1e0 [ 103.462584][ T6603] path_openat+0xe1/0x2d60 [ 103.467007][ T6603] ? hlock_class+0x4e/0x130 [ 103.471532][ T6603] ? __lock_acquire+0x15a9/0x3c40 [ 103.476571][ T6603] ? __pfx_path_openat+0x10/0x10 [ 103.481497][ T6603] ? __pfx___lock_acquire+0x10/0x10 [ 103.486684][ T6603] ? lock_acquire.part.0+0x11b/0x380 [ 103.491955][ T6603] ? find_held_lock+0x2d/0x110 [ 103.496714][ T6603] do_filp_open+0x20c/0x470 [ 103.501204][ T6603] ? __pfx_do_filp_open+0x10/0x10 [ 103.506213][ T6603] ? find_held_lock+0x2d/0x110 [ 103.510980][ T6603] ? alloc_fd+0x41f/0x760 [ 103.515304][ T6603] do_sys_openat2+0x17a/0x1e0 [ 103.519973][ T6603] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.525162][ T6603] ? __fget_files+0x206/0x3a0 [ 103.529828][ T6603] __x64_sys_openat+0x175/0x210 [ 103.534672][ T6603] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.540035][ T6603] ? ksys_write+0x1ba/0x250 [ 103.544531][ T6603] do_syscall_64+0xcd/0x250 [ 103.549025][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.554905][ T6603] RIP: 0033:0x7fc67a17fed9 [ 103.559307][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.578903][ T6603] RSP: 002b:00007fc67aebe058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.587300][ T6603] RAX: ffffffffffffffda RBX: 00007fc67a345fa0 RCX: 00007fc67a17fed9 [ 103.595260][ T6603] RDX: 0000000000004000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 103.603218][ T6603] RBP: 00007fc67aebe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.611176][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.619136][ T6603] R13: 0000000000000000 R14: 00007fc67a345fa0 R15: 00007ffe1a99a638 [ 103.627104][ T6603] [ 103.630187][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.640768][ T5865] usb usb4-port1: unable to enumerate USB device [ 103.679546][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.683242][ T6604] ======================================================= [ 103.683242][ T6604] WARNING: The mand mount option has been deprecated and [ 103.683242][ T6604] and is ignored by this kernel. Remove the mand [ 103.683242][ T6604] option from the mount to silence this warning. [ 103.683242][ T6604] ======================================================= [ 103.692547][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.723361][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.784893][ T6607] bond1: entered allmulticast mode [ 103.790356][ T6607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.070548][ T29] audit: type=1400 audit(1733771257.893:347): avc: denied { read } for pid=6612 comm="syz.1.211" lport=50615 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.094222][ T29] audit: type=1400 audit(1733771257.893:348): avc: denied { append } for pid=6618 comm="syz.2.213" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.116897][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.134548][ T29] audit: type=1400 audit(1733771257.963:349): avc: denied { setopt } for pid=6612 comm="syz.1.211" lport=50615 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.325623][ T5913] usb 5-1: USB disconnect, device number 8 [ 104.443851][ T117] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.569595][ T29] audit: type=1400 audit(1733771258.393:350): avc: denied { getopt } for pid=6626 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.289696][ T117] usb 3-1: Using ep0 maxpacket: 16 [ 105.357654][ T117] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 105.369895][ T117] usb 3-1: config 0 has no interface number 0 [ 105.376495][ T117] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 105.485711][ T29] audit: type=1400 audit(1733771259.183:351): avc: denied { setattr } for pid=6630 comm="syz.3.218" path="/dev/vsock" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.511028][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.220'. [ 105.540253][ T117] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 106.376673][ T29] audit: type=1400 audit(1733771260.173:352): avc: denied { connect } for pid=6642 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.513191][ T29] audit: type=1400 audit(1733771260.263:353): avc: denied { shutdown } for pid=6642 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.624455][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.664394][ T117] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 106.673457][ T117] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 106.685239][ T117] usb 3-1: Product: syz [ 106.689401][ T117] usb 3-1: SerialNumber: syz [ 106.786986][ T117] usb 3-1: config 0 descriptor?? [ 106.836217][ T117] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 106.856583][ T117] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 106.874199][ T6651] netlink: 'syz.0.223': attribute type 7 has an invalid length. [ 106.889219][ T6651] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.898834][ T6651] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.907615][ T6651] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.916355][ T6651] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.064119][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 107.083086][ T29] audit: type=1400 audit(1733771260.903:354): avc: denied { read write } for pid=6621 comm="syz.2.214" name="event4" dev="devtmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.085912][ T5913] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 107.107204][ T29] audit: type=1400 audit(1733771260.903:355): avc: denied { open } for pid=6621 comm="syz.2.214" path="/dev/input/event4" dev="devtmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.117732][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.154674][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 107.163939][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.177808][ T5913] usb 5-1: config 0 descriptor?? [ 107.184648][ C1] cm109_urb_ctl_callback: 140 callbacks suppressed [ 107.184669][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 107.185705][ T5865] usb 3-1: USB disconnect, device number 4 [ 107.191247][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 107.225194][ T5865] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 108.713763][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 109.403787][ T5913] usb 5-1: string descriptor 0 read error: -71 [ 109.414300][ T5913] usb 5-1: USB disconnect, device number 9 [ 109.539091][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.231'. [ 109.640780][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 109.640796][ T29] audit: type=1400 audit(1733771263.463:359): avc: denied { create } for pid=6687 comm="syz.2.234" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.641409][ T6688] FAULT_INJECTION: forcing a failure. [ 109.641409][ T6688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.681975][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.2.234 Not tainted 6.13.0-rc2-syzkaller #0 [ 109.690861][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.700908][ T6688] Call Trace: [ 109.704175][ T6688] [ 109.707102][ T6688] dump_stack_lvl+0x16c/0x1f0 [ 109.711789][ T6688] should_fail_ex+0x497/0x5b0 [ 109.716481][ T6688] _copy_from_user+0x2e/0xd0 [ 109.721067][ T6688] memdup_user+0x71/0xd0 [ 109.725299][ T6688] strndup_user+0x78/0xe0 [ 109.729621][ T6688] __x64_sys_mount+0x181/0x320 [ 109.734405][ T6688] ? __pfx___x64_sys_mount+0x10/0x10 [ 109.739712][ T6688] do_syscall_64+0xcd/0x250 [ 109.744208][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.750092][ T6688] RIP: 0033:0x7fbc34d7fed9 [ 109.754496][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.774093][ T6688] RSP: 002b:00007fbc35c17058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.782522][ T6688] RAX: ffffffffffffffda RBX: 00007fbc34f45fa0 RCX: 00007fbc34d7fed9 [ 109.790482][ T6688] RDX: 0000000020000140 RSI: 0000000020000040 RDI: 0000000020000240 [ 109.798441][ T6688] RBP: 00007fbc35c170a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.806402][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.814400][ T6688] R13: 0000000000000000 R14: 00007fbc34f45fa0 R15: 00007ffcf78be8b8 [ 109.822392][ T6688] [ 109.825528][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.874720][ T29] audit: type=1400 audit(1733771263.693:360): avc: denied { create } for pid=6690 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.900049][ T29] audit: type=1400 audit(1733771263.693:361): avc: denied { bind } for pid=6690 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.340945][ T29] audit: type=1400 audit(1733771264.153:362): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.363563][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.126443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.138858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.151159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.163383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.175616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.187847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.200085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.212443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.224726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.236954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.660270][ T46] sched: DL replenish lagged too much [ 121.133709][ C0] net_ratelimit: 15754 callbacks suppressed [ 121.133723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.151946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.164193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.176428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.188904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.201207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.213438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.225709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.237951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.250169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.637682][ T29] audit: type=1400 audit(1733771266.303:363): avc: denied { getopt } for pid=6707 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.143634][ C1] net_ratelimit: 26365 callbacks suppressed [ 126.143654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.144105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 126.149712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.161695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.173749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.186111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 126.197464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.209430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.221450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.233727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 131.153666][ C1] net_ratelimit: 36063 callbacks suppressed [ 131.153687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.154107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 131.159749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.171728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.183768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.195989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 131.207425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.219387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.231401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.243644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 133.495150][ T117] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.163674][ C1] net_ratelimit: 35545 callbacks suppressed [ 136.163695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.163936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 136.169763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.181728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.193798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.206005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 136.217481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.229449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.241471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.253700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 141.173761][ C1] net_ratelimit: 39500 callbacks suppressed [ 141.173782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.174122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 141.179830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.191842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.203823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.216061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 141.227701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.239730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.251697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.263936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 146.183625][ C1] net_ratelimit: 37312 callbacks suppressed [ 146.183646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.184038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 146.189761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.201595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.213663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.226090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 146.237504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.249312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.261268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.273663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 151.193702][ C0] net_ratelimit: 33278 callbacks suppressed [ 151.193722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 151.193752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.199780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.211886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.224270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 151.235704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.247508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.259480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.271887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 151.283377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.203650][ C0] net_ratelimit: 37022 callbacks suppressed [ 156.203671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.203709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.210187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 156.221733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.233597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.245552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.257907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 156.269440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.281274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.293215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.213611][ C1] net_ratelimit: 37777 callbacks suppressed [ 161.213633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.214090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 161.219711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.231685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.243712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.256077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 161.267510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.279410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.291441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.303689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 166.223651][ C0] net_ratelimit: 34040 callbacks suppressed [ 166.223670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 166.223770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.229811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.241933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.254501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 166.265716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.277691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.289706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.302274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 166.313423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.287462][ T117] usb 5-1: device descriptor read/64, error -110 [ 171.233596][ C1] net_ratelimit: 32174 callbacks suppressed [ 171.233616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.233895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 171.239779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.251818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.263811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.276363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 171.287475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.299457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.311612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.324153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 176.243747][ C1] net_ratelimit: 28243 callbacks suppressed [ 176.243768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.244172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 176.249823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.261792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.273810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.286385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 176.297528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.309508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.321546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.334113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 178.458746][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.253612][ C1] net_ratelimit: 31374 callbacks suppressed [ 181.253632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.253667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.259749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.272337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 181.283461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.295425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.307442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.320024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 181.331240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.343197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.263657][ C1] net_ratelimit: 36529 callbacks suppressed [ 186.263677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.263873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 186.269731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.281708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.293736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.305920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.317427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.329780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 186.341303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.353586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.273600][ C1] net_ratelimit: 38156 callbacks suppressed [ 191.273622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.274195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.279766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.292143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 191.303749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.315593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.327811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.340089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.351624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.363854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 196.283633][ C0] net_ratelimit: 37854 callbacks suppressed [ 196.283653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 196.283782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.290083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.301750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.313979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 196.325426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.337398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.349407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.361266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 196.373078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.293639][ C1] net_ratelimit: 32595 callbacks suppressed [ 201.293662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.293775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 201.299732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.312111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.323706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.335962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 201.347464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.359294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.371279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.384519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 206.303581][ C1] net_ratelimit: 33036 callbacks suppressed [ 206.303601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.303627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 206.309665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.321658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.333631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.345520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 206.357387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.369580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.381209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.393611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 211.313611][ C1] net_ratelimit: 39091 callbacks suppressed [ 211.313632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.313729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.319720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.332010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 211.343533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.355357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.367336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.379328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 211.391205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.403460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.657559][ T5132] Bluetooth: hci2: command tx timeout [ 211.663012][ T5132] Bluetooth: hci1: command tx timeout [ 211.675031][ T5132] Bluetooth: hci3: command tx timeout [ 211.680534][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 216.323679][ C1] net_ratelimit: 37701 callbacks suppressed [ 216.323700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.323759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 216.329797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.341676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.353714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.365670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 216.377445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.389746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.401353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.413819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 221.333651][ C1] net_ratelimit: 35707 callbacks suppressed [ 221.333672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.333685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.334207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 221.339773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.351720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.363609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.375605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 221.387652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.399886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.411582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.343589][ C1] net_ratelimit: 32799 callbacks suppressed [ 226.343610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.343730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.349699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.362106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 226.373539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.385521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.397495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.409705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 226.421436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.433666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.353633][ C1] net_ratelimit: 32597 callbacks suppressed [ 231.353653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.354034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 231.359736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.371682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.383655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.395820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 231.407733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.419851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.431460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.443722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.313554][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 236.320543][ C1] rcu: (detected by 1, t=10502 jiffies, g=10373, q=345 ncpus=2) [ 236.328270][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10475 (4294960756-4294950281), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 236.341646][ C1] rcu: rcu_preempt kthread starved for 10476 jiffies! g10373 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 236.352852][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 236.362826][ C1] rcu: RCU grace-period kthread stack dump: [ 236.364053][ C0] net_ratelimit: 33056 callbacks suppressed [ 236.364065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.368730][ C1] task:rcu_preempt state:R [ 236.374771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.386533][ C1] running task stack:26544 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 236.391597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.403248][ C1] Call Trace: [ 236.403257][ C1] [ 236.403268][ C1] __schedule+0xe58/0x5ad0 [ 236.413033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.424545][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 236.424580][ C1] ? __pfx___schedule+0x10/0x10 [ 236.428371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.430737][ C1] ? schedule+0x298/0x350 [ 236.435284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.446995][ C1] ? __pfx_lock_release+0x10/0x10 [ 236.447022][ C1] ? lock_acquire+0x2f/0xb0 [ 236.452504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.457053][ C1] ? schedule+0x1fd/0x350 [ 236.457083][ C1] schedule+0xe7/0x350 [ 236.457099][ C1] schedule_timeout+0x124/0x280 [ 236.469651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.473352][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 236.485800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 236.490198][ C1] ? __pfx_process_timeout+0x10/0x10 [ 236.494856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.506608][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.506631][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 236.577521][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 236.582307][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 236.587596][ C1] ? rcu_gp_init+0xc82/0x1630 [ 236.592294][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 236.597505][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 236.603317][ C1] rcu_gp_kthread+0x271/0x380 [ 236.608000][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.613206][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.618410][ C1] ? __kthread_parkme+0x148/0x220 [ 236.623454][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.628660][ C1] kthread+0x2c1/0x3a0 [ 236.632738][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.637942][ C1] ? __pfx_kthread+0x10/0x10 [ 236.642542][ C1] ret_from_fork+0x45/0x80 [ 236.646961][ C1] ? __pfx_kthread+0x10/0x10 [ 236.651560][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.656343][ C1] [ 236.659360][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 236.665677][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller #0 [ 236.674266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.684326][ C1] RIP: 0010:netif_receive_skb+0x5e/0x7b0 [ 236.689971][ C1] Code: 03 48 c7 44 24 10 00 96 0b 89 48 01 d8 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 00 f3 f3 f3 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 78 31 c0 e8 d6 6d 8e f8 0f 1f 44 00 00 e8 cc 6d 8e f8 [ 236.709594][ C1] RSP: 0018:ffffc90000a18318 EFLAGS: 00000286 [ 236.715669][ C1] RAX: da3bdcf6d04e9100 RBX: 1ffff92000143063 RCX: ffffffff89fdb7f9 [ 236.723642][ C1] RDX: ffff88801d6cc880 RSI: ffffffff89fdb82f RDI: ffff88816cbf2c80 [ 236.731617][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 236.739593][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff88816cbf2c80 [ 236.747571][ C1] R13: ffff88805de4e000 R14: ffff88807c6a4d80 R15: ffff88807cf35000 [ 236.755548][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 236.764487][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.771076][ C1] CR2: 00007fd4c0a5f580 CR3: 0000000032eac000 CR4: 00000000003526f0 [ 236.779055][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.787031][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.795011][ C1] Call Trace: [ 236.798294][ C1] [ 236.801139][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 236.807482][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 236.812961][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 236.818601][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 236.824677][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 236.831101][ C1] ? find_held_lock+0x2d/0x110 [ 236.835880][ C1] ? hrtimer_run_queues+0x97/0x500 [ 236.841007][ C1] ? update_process_times+0x178/0x2d0 [ 236.846390][ C1] ? __pfx_update_process_times+0x10/0x10 [ 236.852121][ C1] ? read_tsc+0x9/0x20 [ 236.856196][ C1] ? ktime_get+0x1ac/0x300 [ 236.860618][ C1] ? tick_nohz_handler+0x376/0x530 [ 236.865738][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 236.871201][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 236.876585][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 236.882309][ C1] ? read_tsc+0x9/0x20 [ 236.886391][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 236.891524][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 236.897687][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 236.903509][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.909679][ C1] ? br_netif_receive_skb+0xc9/0x200 [ 236.914978][ C1] ? br_netif_receive_skb+0xff/0x200 [ 236.920273][ C1] ? netif_receive_skb+0x5e/0x7b0 [ 236.925312][ C1] ? br_multicast_count+0x8a/0xbd0 [ 236.930435][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 236.935910][ C1] ? br_netif_receive_skb+0xff/0x200 [ 236.941201][ C1] br_pass_frame_up+0x346/0x490 [ 236.946059][ C1] br_handle_frame_finish+0xdcf/0x1c80 [ 236.951538][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 236.957456][ C1] ? ip6t_do_table+0xd20/0x1d40 [ 236.962308][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 236.967600][ C1] ? ip6t_do_table+0xd50/0x1d40 [ 236.972459][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 236.977574][ C1] ? nf_hook_slow+0x132/0x200 [ 236.982265][ C1] br_nf_hook_thresh+0x303/0x410 [ 236.987208][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 236.993111][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 236.998582][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 237.004483][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.010384][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.016285][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 237.022266][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 237.028157][ C1] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 237.033539][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 237.039435][ C1] ? __pfx_lock_release+0x10/0x10 [ 237.044469][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 237.049670][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 237.056170][ C1] br_nf_pre_routing+0x860/0x15b0 [ 237.061207][ C1] br_handle_frame+0x9eb/0x1490 [ 237.066058][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 237.071347][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 237.077238][ C1] ? mark_lock+0xb5/0xc60 [ 237.081580][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 237.086863][ C1] __netif_receive_skb_core.constprop.0+0xa76/0x4470 [ 237.093514][ C1] ? kasan_quarantine_put+0x10/0x240 [ 237.098793][ C1] ? kmem_cache_free+0x152/0x4c0 [ 237.103732][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 237.108425][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 237.115523][ C1] ? hlock_class+0x4e/0x130 [ 237.120030][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 237.124979][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 237.130169][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 237.135362][ C1] ? process_backlog+0x3f1/0x15f0 [ 237.140391][ C1] __netif_receive_skb_one_core+0xb1/0x1e0 [ 237.146204][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 237.152599][ C1] ? rcu_is_watching+0x12/0xc0 [ 237.157367][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.162771][ C1] ? process_backlog+0x3f1/0x15f0 [ 237.167803][ C1] ? process_backlog+0x3f1/0x15f0 [ 237.172805][ C1] __netif_receive_skb+0x1d/0x160 [ 237.177819][ C1] process_backlog+0x443/0x15f0 [ 237.182687][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 237.188061][ C1] net_rx_action+0xa94/0x1010 [ 237.192714][ C1] ? tmigr_handle_remote+0x153/0xdd0 [ 237.197991][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 237.203110][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 237.208743][ C1] ? run_timer_base+0x11c/0x190 [ 237.213586][ C1] ? run_timer_base+0x121/0x190 [ 237.218442][ C1] handle_softirqs+0x213/0x8f0 [ 237.223233][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 237.228537][ C1] __irq_exit_rcu+0x109/0x170 [ 237.233192][ C1] irq_exit_rcu+0x9/0x30 [ 237.237426][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 237.243063][ C1] [ 237.245985][ C1] [ 237.248891][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.254858][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 237.260152][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 d5 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 66 b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.279771][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 237.285846][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b28e679 [ 237.293822][ C1] RDX: 0000000000000001 RSI: ffff888143e8e800 RDI: ffff888143e8e864 [ 237.301794][ C1] RBP: ffff888143e8e864 R08: 0000000000000001 R09: ffffed10170e6fed [ 237.309759][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff88801ef2d000 [ 237.317715][ C1] R13: ffffffff8ee14e20 R14: 0000000000000001 R15: 0000000000000000 [ 237.325697][ C1] ? ct_kernel_exit+0x139/0x190 [ 237.330554][ C1] acpi_idle_enter+0xc5/0x160 [ 237.335221][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 237.340252][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 237.346055][ C1] cpuidle_enter+0x4e/0xa0 [ 237.350453][ C1] do_idle+0x310/0x3f0 [ 237.354507][ C1] ? __pfx_do_idle+0x10/0x10 [ 237.359108][ C1] cpu_startup_entry+0x4f/0x60 [ 237.363874][ C1] start_secondary+0x222/0x2b0 [ 237.368680][ C1] ? __pfx_start_secondary+0x10/0x10 [ 237.373960][ C1] common_startup_64+0x13e/0x148 [ 237.378914][ C1] [ 241.373621][ C1] net_ratelimit: 32328 callbacks suppressed [ 241.373650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.373747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.379808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.391811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 241.403652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.415999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.427614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.439880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:05:96:b1:e6:00, vlan:0) [ 241.451777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.463507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)