last executing test programs: 9.58545767s ago: executing program 3 (id=2487): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x8a0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, 0x0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r1}, 0x14) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000140)={0x60, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) 8.807260956s ago: executing program 3 (id=2495): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000024ca, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/216, 0xd8}], 0x1}, 0x40002102) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 8.70812468s ago: executing program 3 (id=2496): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x303, 0x0, 0x0, 0xe0ff, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) semget$private(0x0, 0x2, 0x8) mprotect(&(0x7f00009c2000/0x3000)=nil, 0x3000, 0x0) 8.364978397s ago: executing program 3 (id=2497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071105f000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xd3]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x9, 0x24000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x400000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={"e615bf4e", 0x6, 0x36, 0x3, 0x32a6, 0x5, "417f24c04ddcf88b888be30bb6f487", "e12f32c7", "2a87cbe6", "ed21d3f3", ["7ffa4fbff7652c78a5632840", "2aa7e34cdefb41485dd86c42", "dd09192fb0784b1c4c46c58b", "28988ff4e3ef51f68f7379ed"]}) r3 = accept4$tipc(r0, 0x0, &(0x7f00000002c0), 0x80000) sendmsg$tipc(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000cc0)="5ccae0f431cd196b7078cd2a9120f10111b3da2a5abfb8cf938fbd8e802c3842c206547fe1ad32d3aaff220405345a4d4367eada57315dcf572d2f0e2aeef74c3ac9694265e9ce772080b905e532c25cb331c77ed1e1ee303cac36b4200dd0244140d67fd579ec17095c3d1eb00e03ed63342a67a123a39c54a4158146573e0d6f21ca09386ade3a2d8517cd035e04fbab79480873d57aa06f60a32303fd45067a27b6b88b4f161882c35d69128e9225afd2c60233d797c0012dfdfef5034d25f0f8d43e0fe5a241e8bae84b38ea333f877711936f122a0fd313a534413a62b868a8b7fa4f3ad95ba8a7e1", 0xeb}, {&(0x7f0000000dc0)="32c4257beeaf393e75359e3b4eea20f76dbe564c33b62264e75838512848472729536eb63f22e230d35e5ccb3cf4f949e787375977f7b60048c01b1d0a1e099bb5f6a88bd28a9f6f2c1df787d2d72db9ec043dcebe1f504690ddb792", 0x5c}, {&(0x7f0000000e40)="e4d1df4d08436e29938dfc736e745389245b9fa6f0f2512cb764b7fa6cac731fb6cb5010f787b2d83b51925bce93d76a1b246ed264900d3b4327fb491740007772ec47e1f7b0a1ae74f2e423074d987c4643a9736c98b4c55b85b6e1b3abd210b63e9fb87ca30d68fea96624a767855a2a1a59aac69d656a", 0x78}, {&(0x7f0000000ec0)="319c2cc76367ae8658ee41bfc1cfad0f9374e02e8c44fe387d7d184533e4b68d3ec87f4bf7406bae45ca5346f61837c92a37dedc20ba8d3c86139228ac491ff1926c8050606d5eeb2a7410a82b0badd083cb32dc6432ddf17b", 0x59}, {&(0x7f0000000f40)="02315e97f6bfdd57756a54be7a8ee540cc18f86cc8733b0d1c8dd692", 0x1c}, {&(0x7f0000000f80)="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", 0xfd}], 0x6, &(0x7f00000010c0)="7aa573a114aa5c1f6a4f51fb0d21993665d965d611511dc31477777a1529f32c5b3ea01887325ecf20cff23ee5ea4fdfa50ea25bc9", 0x35, 0x8000}, 0x20000000) r4 = gettid() tkill(r4, 0x1f) timer_create(0x0, &(0x7f0000000240)={0x0, 0x2, 0x4, @tid=r4}, &(0x7f0000000140)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="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") syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000800904000000010100000a24010000060201020c24020502020602060006ff090401000001020000090401010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504072501000006000904020000010200000904020101ffff00000724d17bf018000724015afd05000f2402020000859900354fa656e9470c2402011f024808bac2ad3d072401000100001105"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) socket$inet6(0xa, 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) 8.001340575s ago: executing program 1 (id=2501): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES16]) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000100)={0x2, 0x3, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x100, 0x5) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x2c, r8, 0x509, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x2c}}, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000400000022007dea"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x180821, 0x0) 6.172978338s ago: executing program 3 (id=2506): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000024ca, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/216, 0xd8}], 0x1}, 0x40002102) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 5.983202936s ago: executing program 1 (id=2508): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 5.880085302s ago: executing program 3 (id=2509): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getgroups(0x0, 0x0) 5.063648032s ago: executing program 1 (id=2515): mq_open(0x0, 0x80, 0x0, &(0x7f0000000180)={0x4, 0x3fffc, 0x5, 0xffff97a9}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000780)="32b94c78243b4d12", 0x8, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) (fail_nth: 3) 4.89599561s ago: executing program 1 (id=2518): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x8a0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, 0x0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000140)={0x60, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) 4.755291922s ago: executing program 0 (id=2519): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000024ca, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/216, 0xd8}], 0x1}, 0x40002102) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 4.589148738s ago: executing program 4 (id=2520): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x303, 0x0, 0x0, 0xe0ff, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) semget$private(0x0, 0x2, 0x8) mprotect(&(0x7f00009c2000/0x3000)=nil, 0x3000, 0x0) 4.524157561s ago: executing program 0 (id=2521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x600}, 0x0) 4.421929236s ago: executing program 0 (id=2522): socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x4e868757) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe4) (async) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r2 = syz_io_uring_setup(0x24ba, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0xfffffffe}, 0x1a) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$inet6(0xa, 0x1, 0x4) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) (async) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffefff7ffe, &(0x7f0000000140)={0xa, 0x4e23, 0x80000001, @private2}, 0xfffffffffffffe3a) (async) sendmmsg$inet6(r11, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="007c13abd52cf41ad7", 0x9}, {&(0x7f0000001300)="e6a77044c694087bcedeae8387c2cc85e9cb78b68beb8154448b7f19e6a1cd9154bc8a90cd786ee5e3f214ed854b9613c81d456c0d63e907bd3dbe3a7f54455c9ab178dcb47589c33899895d9ae8571bdab6142c717e2ddf680b6f431f6d1004bdee8e8e863f25950d5bd29cd48b231d9adc9b30865846143b89ae111d5206a4", 0x80}], 0x2}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003640)="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", 0xf7e}, {&(0x7f0000000340)="e36037716d9da2b424f79c17a5fde898657ede9ac6fcd1ac92c709d7063bd8a8f1dad272ad6d348a9384cb6854b2d4a2689eee736f4ef4605644be79b481b181549a295666cc90b80e05a50421ef11294e47e37a1bcfcca201ec1dea833a7f6930fdb08070d9e665a94fb2946979629cf226163e9172452781e986653385e1a62cc2d50b1eda8217d4f918dc2903121ef948", 0x92}], 0x2}}], 0x2, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) (async) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) 4.181742933s ago: executing program 0 (id=2523): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x10c}}, 0x0) r4 = syz_pidfd_open(r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="887281f1ffb6a66fdc2607446d60418b", 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0xc0844123, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) 3.944155897s ago: executing program 4 (id=2524): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 3.883970095s ago: executing program 0 (id=2525): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc05053c0, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x100) flock(r1, 0x1f) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x37, 0x1, 0x0, "3ad38e0000000000000e1f60b82726d20fb29634b50b865066c27891ca55e21f"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x61c}], 0x1, 0x0, 0x0, 0x0) r8 = dup(r5) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000140)={0x0, 0x7, [@random="59ec89d88158", @link_local, @multicast, @local, @remote, @link_local, @multicast]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x6, 0xeefc, 0xfffffff9, 0x9f91}) ustat(0xa, &(0x7f0000000040)) 3.040931056s ago: executing program 4 (id=2528): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000001, 0x0]}]}]}, 0x34}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.941226327s ago: executing program 4 (id=2529): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x92c, &(0x7f0000000340), &(0x7f0000000140), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x15, 0x20000000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000380), 0x40000, 0x8c42) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) 2.844066736s ago: executing program 2 (id=2530): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000024ca, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/216, 0xd8}], 0x1}, 0x40002102) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 2.644921671s ago: executing program 2 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0xb0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x68, 0x1e02, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}, {0x4}]}]}, 0xb0}, 0x1, 0x600}, 0x0) 2.55988918s ago: executing program 2 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 2.002769634s ago: executing program 4 (id=2533): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) semget$private(0x0, 0x2, 0x8) mprotect(&(0x7f00009c2000/0x3000)=nil, 0x3000, 0x0) 1.791883359s ago: executing program 1 (id=2534): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x10c}}, 0x0) r5 = syz_pidfd_open(r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="887281f1ffb6a66fdc2607446d60418b", 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0xc0844123, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff04, 0x0) 1.513087109s ago: executing program 2 (id=2535): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceaf", 0x45}], 0x1) r0 = socket(0x1e, 0x80000, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x2000011a) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000c40)={{r2}, "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"}) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x300, 0x0, 0x0) 1.252188164s ago: executing program 0 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (fail_nth: 6) 1.145796659s ago: executing program 2 (id=2537): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 317.516357ms ago: executing program 4 (id=2538): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000001, 0x0]}]}]}, 0x34}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 294.609645ms ago: executing program 1 (id=2539): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(0x0, 0x90000, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'erspan0\x00', 0xfffffffd}, 0x18) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0xa6, &(0x7f0000000600)={&(0x7f00000000c0)={0x30, r3, 0xfdd1df4705532f1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x7}}}}, 0x30}}, 0x0) syz_open_dev$dri(0x0, 0x8d, 0x881) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) unshare(0x2040600) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r6, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r5, 0x0, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)) sendmsg$unix(r0, 0x0, 0x20000000) 0s ago: executing program 2 (id=2540): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000024ca, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/216, 0xd8}], 0x1}, 0x40002102) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): 7] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1018.032784][T13323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.062553][T13323] usb 1-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1018.118549][T13323] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1018.141366][T13323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.141587][T20002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2297'. [ 1018.159855][T13323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.176525][T13323] usb 1-1: Product: syz [ 1018.180803][T13323] usb 1-1: Manufacturer: syz [ 1018.185824][T13323] usb 1-1: SerialNumber: syz [ 1018.427927][T13323] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1018.491376][T13323] usb 1-1: USB disconnect, device number 79 [ 1018.922879][T20017] syzkaller1: entered promiscuous mode [ 1018.943260][T20017] syzkaller1: entered allmulticast mode [ 1018.963510][T13769] Bluetooth: hci1: command 0x0c1a tx timeout [ 1019.603884][T13769] Bluetooth: hci2: command 0x0c1a tx timeout [ 1019.607899][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 1019.694828][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 1019.793409][ T5243] Bluetooth: hci4: command 0x0c1a tx timeout [ 1020.219671][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2309'. [ 1020.924812][T20048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2314'. [ 1021.046840][ T5243] Bluetooth: hci1: command 0x0c1a tx timeout [ 1021.613762][ T29] audit: type=1326 audit(1727460235.424:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1021.643913][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.651442][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.683534][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 1021.697562][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 1021.730041][ T29] audit: type=1326 audit(1727460235.424:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1021.765097][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 1021.843491][ T5243] Bluetooth: hci4: command 0x0c1a tx timeout [ 1021.860662][ T29] audit: type=1326 audit(1727460235.424:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.017105][ T29] audit: type=1326 audit(1727460235.424:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.041487][ T29] audit: type=1326 audit(1727460235.424:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.067650][ T29] audit: type=1326 audit(1727460235.424:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.119144][T20094] FAULT_INJECTION: forcing a failure. [ 1022.119144][T20094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.152838][T20094] CPU: 0 UID: 0 PID: 20094 Comm: syz.4.2326 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1022.154215][ T29] audit: type=1326 audit(1727460235.424:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.163300][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1022.163320][T20094] Call Trace: [ 1022.163330][T20094] [ 1022.163340][T20094] dump_stack_lvl+0x241/0x360 [ 1022.163381][T20094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.163414][T20094] ? __pfx__printk+0x10/0x10 [ 1022.163450][T20094] ? snprintf+0xda/0x120 [ 1022.163478][T20094] should_fail_ex+0x3b0/0x4e0 [ 1022.163513][T20094] _copy_to_user+0x2f/0xb0 [ 1022.163542][T20094] simple_read_from_buffer+0xca/0x150 [ 1022.235246][T20094] proc_fail_nth_read+0x1e9/0x250 [ 1022.240333][T20094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.245937][T20094] ? rw_verify_area+0x55e/0x6f0 [ 1022.250831][T20094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.256422][T20094] vfs_read+0x201/0xbc0 [ 1022.260623][T20094] ? __pfx_lock_release+0x10/0x10 [ 1022.265700][T20094] ? __pfx_vfs_read+0x10/0x10 [ 1022.270426][T20094] ? __fget_files+0x3f3/0x470 [ 1022.275149][T20094] ? fdget_pos+0x24e/0x320 [ 1022.279633][T20094] ksys_read+0x183/0x2b0 [ 1022.283943][T20094] ? __pfx_ksys_read+0x10/0x10 [ 1022.288760][T20094] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1022.295407][T20094] ? lockdep_hardirqs_on+0x99/0x150 [ 1022.300670][T20094] __do_fast_syscall_32+0xb4/0x110 [ 1022.305819][T20094] ? exc_page_fault+0x590/0x8c0 [ 1022.310725][T20094] do_fast_syscall_32+0x34/0x80 [ 1022.315640][T20094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1022.322021][T20094] RIP: 0023:0xf747d579 [ 1022.326127][T20094] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1022.333452][ T29] audit: type=1326 audit(1727460235.424:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.345757][T20094] RSP: 002b:00000000f57665a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1022.345792][T20094] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5766620 [ 1022.345808][T20094] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1022.345822][T20094] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1022.345835][T20094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1022.345848][T20094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.345877][T20094] [ 1022.572802][ T29] audit: type=1326 audit(1727460235.424:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.598995][ T29] audit: type=1326 audit(1727460235.424:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.4.2324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1022.779842][T20102] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2330'. [ 1023.030583][ T2910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.249922][ T2910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.545363][ T2910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.572690][T13769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.659268][T13769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.668906][T13769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.670153][ T2910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.718282][T13769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.743389][T13769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1023.755714][T13769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.763595][ T5286] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1023.967513][ T5286] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1023.977025][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.011923][ T5286] usb 4-1: config 0 descriptor?? [ 1024.313799][ T2910] bridge_slave_1: left allmulticast mode [ 1024.319861][ T2910] bridge_slave_1: left promiscuous mode [ 1024.327777][ T2910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.412444][ T2910] bridge_slave_0: left allmulticast mode [ 1024.413570][T14087] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1024.427370][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.441651][ T2910] bridge_slave_0: left promiscuous mode [ 1024.453511][ T2910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.478603][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.670811][T14087] usb 5-1: Using ep0 maxpacket: 8 [ 1024.702132][T14087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.714520][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.737364][T14087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1024.759197][T14087] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.790471][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.805633][T14087] usb 5-1: string descriptor 0 read error: -22 [ 1024.821831][T14087] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.852671][T14087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.925012][T14087] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1024.952165][T14087] cdc_ncm 5-1:1.0: bind() failure [ 1025.094364][ T5289] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1025.310176][ T5285] usb 5-1: USB disconnect, device number 75 [ 1025.338880][ T5289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.350774][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.374434][ T5289] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1025.383927][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1025.401290][ T5289] usb 3-1: SerialNumber: syz [ 1025.599835][ T2910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.616233][ T2910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.650601][ T5289] usb 3-1: 0:2 : does not exist [ 1025.659684][ T2910] bond0 (unregistering): Released all slaves [ 1025.682917][T20114] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 1025.762143][T20114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.791853][T20114] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1025.846229][ T5243] Bluetooth: hci3: command tx timeout [ 1025.899202][ T5286] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1025.909623][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1025.919603][ T5286] [drm:udl_init] *ERROR* Selecting channel failed [ 1025.936627][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2344'. [ 1025.942861][ T5286] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1025.952435][ T5286] [drm] Initialized udl on minor 2 [ 1025.961745][ T5286] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1025.971329][ T5286] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1025.985934][T10460] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1026.002499][T10460] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1026.011456][T10460] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1026.025793][ T5286] usb 4-1: USB disconnect, device number 94 [ 1026.049033][T20121] chnl_net:caif_netlink_parms(): no params data found [ 1026.138374][ T5289] usb 3-1: USB disconnect, device number 98 [ 1026.582950][ T2910] hsr_slave_0: left promiscuous mode [ 1026.618579][ T2910] hsr_slave_1: left promiscuous mode [ 1026.692351][ T2910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.700201][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.725467][ T2910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.756118][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.882523][ T2910] veth1_macvtap: left promiscuous mode [ 1026.889987][ T5289] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1026.921972][ T2910] veth0_macvtap: left promiscuous mode [ 1026.952005][ T2910] veth1_vlan: left promiscuous mode [ 1026.991438][ T2910] veth0_vlan: left promiscuous mode [ 1027.077211][ T5289] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1027.100288][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.147814][ T5289] usb 4-1: Product: syz [ 1027.163680][ T5289] usb 4-1: Manufacturer: syz [ 1027.181981][ T5289] usb 4-1: SerialNumber: syz [ 1027.227918][ T5289] usb 4-1: config 0 descriptor?? [ 1027.469912][ T5289] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1027.843755][ T5285] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1027.924510][ T5243] Bluetooth: hci3: command tx timeout [ 1028.026693][ T5285] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 1028.049484][ T5285] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 1028.064638][ T5285] usb 1-1: Manufacturer: syz [ 1028.099547][ T5285] usb 1-1: config 0 descriptor?? [ 1028.335477][ T2910] team0 (unregistering): Port device team_slave_1 removed [ 1028.379429][T14087] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1028.404084][ T2910] team0 (unregistering): Port device team_slave_0 removed [ 1028.516468][ T5285] gs_usb 1-1:0.0: Configuring for 133 interfaces [ 1028.522939][ T5285] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1028.531073][ T5285] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 1028.552962][T14087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1028.562915][T14087] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1028.572969][T14087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1028.583022][T14087] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1028.597290][T14087] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1028.607233][T14087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.615573][T14087] usb 5-1: Product: syz [ 1028.619776][T14087] usb 5-1: Manufacturer: syz [ 1028.624480][T14087] usb 5-1: SerialNumber: syz [ 1028.631350][T14087] usb 5-1: config 0 descriptor?? [ 1028.718302][ T5289] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1028.738615][ T5289] usb 4-1: USB disconnect, device number 95 [ 1028.762683][ T5285] usb 1-1: USB disconnect, device number 80 [ 1028.842063][T20222] x_tables: duplicate underflow at hook 1 [ 1028.866311][T13323] usb 5-1: USB disconnect, device number 76 [ 1028.957943][T20224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1029.161760][T20200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2355'. [ 1029.270873][T20121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.293441][T20121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.310154][T20121] bridge_slave_0: entered allmulticast mode [ 1029.317667][T20121] bridge_slave_0: entered promiscuous mode [ 1029.404571][T20121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.412254][T20121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.419796][T20121] bridge_slave_1: entered allmulticast mode [ 1029.440202][T20121] bridge_slave_1: entered promiscuous mode [ 1029.653123][T20121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.694402][T20121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.874677][T20121] team0: Port device team_slave_0 added [ 1029.889007][T20121] team0: Port device team_slave_1 added [ 1030.003432][ T5243] Bluetooth: hci3: command tx timeout [ 1030.016775][T20121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.034732][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.063548][T20121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.084352][T20121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.103258][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.181855][T20121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.223417][ T5286] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1030.400270][ T5286] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1030.414913][T20121] hsr_slave_0: entered promiscuous mode [ 1030.433398][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.441463][ T5286] usb 4-1: Product: syz [ 1030.479047][T20121] hsr_slave_1: entered promiscuous mode [ 1030.497368][ T5286] usb 4-1: Manufacturer: syz [ 1030.517874][ T5286] usb 4-1: SerialNumber: syz [ 1030.569028][ T5286] usb 4-1: config 0 descriptor?? [ 1030.727041][T13323] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1030.750188][T20273] raw_sendmsg: syz.0.2375 forgot to set AF_INET. Fix it! [ 1030.791149][ T5286] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1030.933443][T13323] usb 3-1: Using ep0 maxpacket: 8 [ 1030.950627][T13323] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1030.993324][T13323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 240, changing to 11 [ 1031.030664][T13323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33535, setting to 1024 [ 1031.068883][T13323] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1031.078955][T13323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.103346][T13323] usb 3-1: Product: syz [ 1031.112243][T13323] usb 3-1: Manufacturer: syz [ 1031.130816][T13323] usb 3-1: SerialNumber: syz [ 1031.146770][T13323] usb 3-1: config 0 descriptor?? [ 1031.293633][T13323] rc_core: IR keymap rc-streamzap not found [ 1031.313486][T13323] Registered IR keymap rc-empty [ 1031.319983][T13323] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1031.397338][T13323] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 1031.498715][T13323] usb 3-1: USB disconnect, device number 99 [ 1031.601739][T20302] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 1031.704032][T20304] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 1031.729614][T20304] team0: Port device netdevsim0 removed [ 1031.740049][T20304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1031.960832][T20121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.972273][T20121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.983366][ T5237] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1032.008133][T20121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.028610][ T5286] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1032.040407][ T5286] usb 4-1: USB disconnect, device number 96 [ 1032.054855][T20121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.085570][ T5243] Bluetooth: hci3: command tx timeout [ 1032.137882][T20311] FAULT_INJECTION: forcing a failure. [ 1032.137882][T20311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.173380][ T5237] usb 1-1: Using ep0 maxpacket: 32 [ 1032.194398][T20311] CPU: 0 UID: 0 PID: 20311 Comm: syz.2.2383 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1032.204909][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1032.215006][T20311] Call Trace: [ 1032.218317][T20311] [ 1032.221300][T20311] dump_stack_lvl+0x241/0x360 [ 1032.222701][T20121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.226046][T20311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.226088][T20311] ? __pfx__printk+0x10/0x10 [ 1032.226123][T20311] ? __pfx_lock_release+0x10/0x10 [ 1032.226165][T20311] should_fail_ex+0x3b0/0x4e0 [ 1032.226202][T20311] _copy_from_user+0x2f/0xe0 [ 1032.256876][T20311] get_compat_msghdr+0xae/0x730 [ 1032.261755][T20311] ? __fget_files+0x29/0x470 [ 1032.266354][T20311] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1032.271818][T20311] ? __fget_files+0x3f3/0x470 [ 1032.276552][T20311] __sys_sendmsg+0x25d/0x380 [ 1032.281163][T20311] ? __pfx___sys_sendmsg+0x10/0x10 [ 1032.286295][T20311] ? __pfx_vfs_write+0x10/0x10 [ 1032.291120][T20311] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1032.297748][T20311] ? lockdep_hardirqs_on+0x99/0x150 [ 1032.302969][T20311] __do_fast_syscall_32+0xb4/0x110 [ 1032.308092][T20311] ? exc_page_fault+0x590/0x8c0 [ 1032.312959][T20311] do_fast_syscall_32+0x34/0x80 [ 1032.317847][T20311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1032.324213][T20311] RIP: 0023:0xf749d579 [ 1032.328293][T20311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1032.347910][T20311] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1032.356352][T20311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1032.364372][T20311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.372375][T20311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1032.380355][T20311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1032.388339][T20311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.396336][T20311] [ 1032.461664][T20121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.483093][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.490297][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.499701][ T5237] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1032.509375][ T5237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.520236][ T5237] usb 1-1: Product: syz [ 1032.533524][ T5237] usb 1-1: Manufacturer: syz [ 1032.538195][ T5237] usb 1-1: SerialNumber: syz [ 1032.564342][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.571575][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.614634][ T5237] usb 1-1: config 0 descriptor?? [ 1032.639054][ T5237] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1032.692313][T20121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.716997][T20121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1032.799012][T20121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.921799][T20121] veth0_vlan: entered promiscuous mode [ 1032.985669][T20121] veth1_vlan: entered promiscuous mode [ 1033.078985][T20121] veth0_macvtap: entered promiscuous mode [ 1033.130681][T20121] veth1_macvtap: entered promiscuous mode [ 1033.181767][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.207144][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.238710][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.289044][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.319469][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.337577][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.357732][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.377585][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.391225][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.412579][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.434374][T20121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.484468][ T5289] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1033.492239][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.555857][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.576941][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.608775][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.632122][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.651192][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.661182][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.671681][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.682057][T20121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.683507][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 1033.693410][T20121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.701585][ T5289] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.717610][ T5289] usb 3-1: config 0 has no interface number 0 [ 1033.720449][T20121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.725223][ T5289] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.784677][T20121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.803411][T20121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.812178][T20121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.813252][ T5289] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.847037][T20121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.859478][ T5237] gspca_stk1135: reg_w 0xd err -71 [ 1033.866133][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.872530][ T5237] gspca_stk1135: Sensor write failed [ 1033.875061][ T46] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1033.887823][T20345] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1033.895724][ T5289] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.909900][ T5286] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1033.924596][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.932601][ T5237] gspca_stk1135: Sensor write failed [ 1033.951959][ T46] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1033.965825][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.975670][ T5289] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1034.009392][ T5237] gspca_stk1135: Sensor read failed [ 1034.029387][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.044275][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.064735][ T5237] gspca_stk1135: Sensor read failed [ 1034.079889][ T5237] gspca_stk1135: Detected sensor type unknown (0x0) [ 1034.090267][ T5289] usb 3-1: config 0 descriptor?? [ 1034.093331][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 1034.107780][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.127770][ T5286] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1034.133478][ T5237] gspca_stk1135: Sensor read failed [ 1034.156951][ T5286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1034.163961][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.178684][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.203142][ T5237] gspca_stk1135: Sensor read failed [ 1034.211195][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1034.225544][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.241045][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1034.243161][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.263514][ T5286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1034.286945][ T5237] gspca_stk1135: Sensor write failed [ 1034.291313][ T5286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1034.303885][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.311754][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.312751][ T5237] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.330333][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.341322][T20350] program syz.3.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.352982][ T5237] gspca_stk1135: Sensor write failed [ 1034.373914][ T5237] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1034.440774][ T5237] usb 1-1: USB disconnect, device number 81 [ 1034.543844][ T5289] holtek_mouse 0003:04D9:A072.0015: unknown main item tag 0x2 [ 1034.570129][ T5289] holtek_mouse 0003:04D9:A072.0015: item fetching failed at offset 3/4 [ 1034.585836][ T5286] usb 5-1: GET_CAPABILITIES returned 0 [ 1034.603388][ T5286] usbtmc 5-1:16.0: can't read capabilities [ 1034.603796][ T5289] holtek_mouse 0003:04D9:A072.0015: hid parse failed: -22 [ 1034.666823][ T5289] holtek_mouse 0003:04D9:A072.0015: probe with driver holtek_mouse failed with error -22 [ 1034.826477][ T5289] usb 5-1: USB disconnect, device number 77 [ 1034.858925][T20365] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1034.902139][T20365] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1034.928703][T20365] veth0_to_bridge: entered allmulticast mode [ 1034.949594][ T5285] usb 3-1: USB disconnect, device number 100 [ 1034.975626][T20365] veth0_to_bridge: entered promiscuous mode [ 1034.982235][T20365] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1034.997066][T20365] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1035.004357][T20365] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1035.032350][T20363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1035.263435][T13320] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1035.432152][T20392] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1035.452899][T20392] vhci_hcd: invalid port number 10 [ 1035.484323][T13320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1035.493891][T20392] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1035.510547][T13320] usb 4-1: not running at top speed; connect to a high speed hub [ 1035.530706][T13320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.556740][T20392] netlink: 'syz.0.2399': attribute type 10 has an invalid length. [ 1035.583412][T13320] usb 4-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1035.589439][T20392] team0: Failed to send options change via netlink (err -105) [ 1035.606425][T13320] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1035.613334][ T5286] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1035.633458][T20392] team0: Port device netdevsim0 added [ 1035.652517][T13320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.682293][T13320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.700867][T13320] usb 4-1: Product: syz [ 1035.717071][ T9023] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1035.728933][T13320] usb 4-1: Manufacturer: syz [ 1035.743380][T13320] usb 4-1: SerialNumber: syz [ 1035.864764][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 1035.879936][ T5286] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.892352][ T5286] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1035.903609][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.911656][ T5286] usb 2-1: Product: syz [ 1035.916096][ T5286] usb 2-1: Manufacturer: syz [ 1035.920720][ T5286] usb 2-1: SerialNumber: syz [ 1035.929480][ T5286] usb 2-1: config 0 descriptor?? [ 1035.936491][ T5286] cdc_phonet 2-1:0.0: skipping garbage [ 1035.942175][ T5286] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1036.022597][T13320] usb 4-1: bad CDC descriptors [ 1036.081142][T13320] usb 4-1: USB disconnect, device number 97 [ 1036.088711][T20359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.295231][ T5286] usb 2-1: USB disconnect, device number 78 [ 1036.502371][T20427] netlink: 'syz.4.2406': attribute type 3 has an invalid length. [ 1036.513921][T20427] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2406'. [ 1036.614605][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1036.614626][ T29] audit: type=1326 audit(1727460250.414:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20414 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1036.643811][ T29] audit: type=1326 audit(1727460250.414:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20414 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1036.665724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.671975][ T29] audit: type=1326 audit(1727460250.414:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20414 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1036.694419][ T29] audit: type=1326 audit(1727460250.424:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20414 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1036.716387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.783360][ T46] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1037.163330][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1037.188333][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.202406][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1037.219054][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.239882][ T46] usb 1-1: config 0 descriptor?? [ 1037.251512][ T46] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1037.353376][T10460] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1037.503860][T10460] usb 5-1: Using ep0 maxpacket: 16 [ 1037.513596][T10460] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 1037.522372][T10460] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.552262][T10460] usb 5-1: config 8 has no interface number 0 [ 1037.580604][T10460] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1037.620204][T10460] usb 5-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1037.670534][T10460] usb 5-1: config 8 interface 249 has no altsetting 0 [ 1037.696250][T10460] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 1037.718383][T10460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.732278][T10460] usb 5-1: Product: 䀊 [ 1037.740098][T10460] usb 5-1: Manufacturer: â [ 1037.753027][T10460] usb 5-1: SerialNumber: à  [ 1037.823445][T13323] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1037.844295][T14087] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1037.953890][ T46] gspca_vc032x: reg_w err -110 [ 1037.958856][ T46] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1037.993466][T13323] usb 3-1: Using ep0 maxpacket: 16 [ 1038.003798][T14087] usb 4-1: Using ep0 maxpacket: 16 [ 1038.029182][T14087] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.040468][T14087] usb 4-1: config 0 has no interface number 0 [ 1038.057866][T14087] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.082500][T14087] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.100545][T14087] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.120543][ T5621] usb 1-1: USB disconnect, device number 82 [ 1038.133119][T13323] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.171185][T13323] usb 3-1: config 0 has no interface number 0 [ 1038.199582][T14087] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1038.219174][T13323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.224678][T14087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.287342][T14087] usb 4-1: config 0 descriptor?? [ 1038.371870][T13323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.445545][T13323] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.509618][T13323] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1038.544614][T10460] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 1038.557329][T13323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.567794][T10460] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1038.591427][T10460] dib0700: firmware download failed at 7 with -71 [ 1038.615969][T10460] usb 5-1: USB disconnect, device number 78 [ 1038.737254][T14087] holtek_mouse 0003:04D9:A072.0016: unknown main item tag 0x2 [ 1038.768385][T13323] usb 3-1: config 0 descriptor?? [ 1038.796861][T14087] holtek_mouse 0003:04D9:A072.0016: item fetching failed at offset 3/4 [ 1038.829352][T14087] holtek_mouse 0003:04D9:A072.0016: hid parse failed: -22 [ 1038.848696][T14087] holtek_mouse 0003:04D9:A072.0016: probe with driver holtek_mouse failed with error -22 [ 1039.064220][T14087] usb 4-1: USB disconnect, device number 98 [ 1039.290389][T13323] holtek_mouse 0003:04D9:A072.0017: unknown main item tag 0x2 [ 1039.320792][T13323] holtek_mouse 0003:04D9:A072.0017: item fetching failed at offset 3/4 [ 1039.372499][T13323] holtek_mouse 0003:04D9:A072.0017: hid parse failed: -22 [ 1039.403356][T13323] holtek_mouse 0003:04D9:A072.0017: probe with driver holtek_mouse failed with error -22 [ 1039.572192][T13323] usb 3-1: USB disconnect, device number 101 [ 1039.791229][T20488] netlink: 'syz.4.2418': attribute type 4 has an invalid length. [ 1039.842597][T20492] FAULT_INJECTION: forcing a failure. [ 1039.842597][T20492] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.899369][T20494] kAFS: unable to lookup cell '.S²jË¡8' [ 1039.908448][T20492] CPU: 1 UID: 0 PID: 20492 Comm: syz.1.2419 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1039.918923][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1039.928997][T20492] Call Trace: [ 1039.932293][T20492] [ 1039.935236][T20492] dump_stack_lvl+0x241/0x360 [ 1039.939976][T20492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1039.945206][T20492] ? __pfx__printk+0x10/0x10 [ 1039.949857][T20492] ? ref_tracker_alloc+0x332/0x490 [ 1039.955028][T20492] should_fail_ex+0x3b0/0x4e0 [ 1039.959737][T20492] ? skb_clone+0x20c/0x390 [ 1039.964187][T20492] should_failslab+0xac/0x100 [ 1039.968897][T20492] ? skb_clone+0x20c/0x390 [ 1039.973348][T20492] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1039.978760][T20492] skb_clone+0x20c/0x390 [ 1039.983020][T20492] __netlink_deliver_tap+0x3cc/0x7c0 [ 1039.988355][T20492] ? netlink_deliver_tap+0x2e/0x1b0 [ 1039.993576][T20492] netlink_deliver_tap+0x19d/0x1b0 [ 1039.998707][T20492] netlink_unicast+0x7c4/0x990 [ 1040.003526][T20492] ? __pfx_netlink_unicast+0x10/0x10 [ 1040.008830][T20492] ? __virt_addr_valid+0x183/0x530 [ 1040.013962][T20492] ? __check_object_size+0x48e/0x900 [ 1040.019317][T20492] netlink_sendmsg+0x8e4/0xcb0 [ 1040.024117][T20492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.029430][T20492] ? __pfx_lock_release+0x10/0x10 [ 1040.034486][T20492] ? aa_sock_msg_perm+0x91/0x160 [ 1040.039443][T20492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.044746][T20492] __sock_sendmsg+0x221/0x270 [ 1040.049441][T20492] ____sys_sendmsg+0x52a/0x7e0 [ 1040.054225][T20492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.059532][T20492] __sys_sendmsg+0x292/0x380 [ 1040.064140][T20492] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.069275][T20492] ? __pfx_vfs_write+0x10/0x10 [ 1040.074087][T20492] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1040.080722][T20492] ? lockdep_hardirqs_on+0x99/0x150 [ 1040.085947][T20492] __do_fast_syscall_32+0xb4/0x110 [ 1040.091073][T20492] ? exc_page_fault+0x590/0x8c0 [ 1040.095942][T20492] do_fast_syscall_32+0x34/0x80 [ 1040.100836][T20492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.107179][T20492] RIP: 0023:0xf742d579 [ 1040.111262][T20492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1040.130878][T20492] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1040.139315][T20492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1040.147298][T20492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.155278][T20492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.163262][T20492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1040.171252][T20492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1040.179250][T20492] [ 1040.339800][T20494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2420'. [ 1040.489815][T20503] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2423'. [ 1040.502079][T20503] netlink: get zone limit has 8 unknown bytes [ 1040.858815][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2426'. [ 1040.917876][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2427'. [ 1040.957997][T20519] netlink: 'syz.2.2430': attribute type 4 has an invalid length. [ 1041.022617][T20519] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2430'. [ 1041.171881][T20519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 1041.553485][T14087] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1041.733486][T14087] usb 5-1: Using ep0 maxpacket: 8 [ 1041.749489][T14087] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1041.773522][T10460] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1041.793397][T14087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.822081][T14087] usb 5-1: Product: syz [ 1041.842979][T14087] usb 5-1: Manufacturer: syz [ 1041.858305][T14087] usb 5-1: SerialNumber: syz [ 1041.879335][T14087] usb 5-1: config 0 descriptor?? [ 1041.897051][T14087] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1041.963392][T10460] usb 2-1: Using ep0 maxpacket: 16 [ 1041.981559][T10460] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1041.990214][T10460] usb 2-1: config 0 has no interface number 0 [ 1042.022117][T10460] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.063685][T10460] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.093325][T10460] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.114319][T10460] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1042.126775][T10460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.153699][T10460] usb 2-1: config 0 descriptor?? [ 1042.245148][ T5621] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1042.438060][ T5621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1042.459806][ T5621] usb 1-1: config 234 has an invalid interface number: 101 but max is 0 [ 1042.483512][ T5621] usb 1-1: config 234 has no interface number 0 [ 1042.498199][ T5621] usb 1-1: config 234 interface 101 has no altsetting 0 [ 1042.528260][ T5621] usb 1-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 1042.544170][T14087] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1042.563499][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.576131][T10460] holtek_mouse 0003:04D9:A072.0018: unknown main item tag 0x2 [ 1042.585100][T14087] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1042.604361][ T5621] usb 1-1: Product: syz [ 1042.608680][T10460] holtek_mouse 0003:04D9:A072.0018: item fetching failed at offset 3/4 [ 1042.617115][ T5621] usb 1-1: Manufacturer: syz [ 1042.623064][T14087] usb 5-1: USB disconnect, device number 79 [ 1042.643390][ T5621] usb 1-1: SerialNumber: syz [ 1042.655110][T10460] holtek_mouse 0003:04D9:A072.0018: hid parse failed: -22 [ 1042.672821][T10460] holtek_mouse 0003:04D9:A072.0018: probe with driver holtek_mouse failed with error -22 [ 1042.794023][T10460] usb 2-1: USB disconnect, device number 79 [ 1042.902869][ T5621] usb-storage 1-1:234.101: USB Mass Storage device detected [ 1042.919534][ T5621] usb-storage 1-1:234.101: Quirks match for vid 04b8 pid 0602: 1 [ 1042.988558][ T5621] usb 1-1: USB disconnect, device number 83 [ 1043.183346][T13323] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1043.335446][T13323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.356783][T13323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.380958][T20549] netlink: 'syz.4.2442': attribute type 29 has an invalid length. [ 1043.383301][T13323] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1043.418661][T13323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.459628][T13323] usb 3-1: config 0 descriptor?? [ 1043.653441][ T5621] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1043.751332][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2446'. [ 1043.854024][ T5621] usb 5-1: Using ep0 maxpacket: 8 [ 1043.866464][ T5621] usb 5-1: config 9 has an invalid interface number: 227 but max is 2 [ 1043.890533][ T5621] usb 5-1: config 9 has an invalid interface number: 153 but max is 2 [ 1043.904768][ T5621] usb 5-1: config 9 has an invalid interface number: 234 but max is 2 [ 1043.916351][T13323] usbhid 3-1:0.0: can't add hid device: -71 [ 1043.921028][ T5621] usb 5-1: config 9 has no interface number 0 [ 1043.930087][T13323] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1043.931956][ T5621] usb 5-1: config 9 has no interface number 1 [ 1043.957431][T13323] usb 3-1: USB disconnect, device number 102 [ 1043.960180][ T5621] usb 5-1: config 9 has no interface number 2 [ 1043.971706][ T5621] usb 5-1: config 9 interface 227 altsetting 255 endpoint 0x8 has invalid maxpacket 1040, setting to 64 [ 1043.994665][ T5621] usb 5-1: config 9 interface 227 altsetting 255 bulk endpoint 0xE has invalid maxpacket 1024 [ 1044.007054][ T5621] usb 5-1: config 9 interface 227 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1044.017907][ T5621] usb 5-1: config 9 interface 227 altsetting 255 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1044.047855][ T5621] usb 5-1: config 9 interface 227 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 1044.059719][ T5621] usb 5-1: config 9 interface 153 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1044.071812][ T5621] usb 5-1: config 9 interface 153 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1044.090833][ T5621] usb 5-1: config 9 interface 234 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1044.105019][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1044.117551][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1044.128587][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1044.139692][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1044.150638][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1044.161556][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1044.173772][T10460] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1044.182731][ T5621] usb 5-1: config 9 interface 234 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1044.193741][ T5621] usb 5-1: config 9 interface 227 has no altsetting 0 [ 1044.200795][ T5621] usb 5-1: config 9 interface 153 has no altsetting 0 [ 1044.211090][ T5621] usb 5-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=c5.65 [ 1044.221223][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.230692][ T5621] usb 5-1: Product: syz [ 1044.234998][ T5621] usb 5-1: Manufacturer: syz [ 1044.239644][ T5621] usb 5-1: SerialNumber: syz [ 1044.256570][T20549] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1044.264091][T20549] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1044.342410][T10460] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1044.351096][T10460] usb 4-1: not running at top speed; connect to a high speed hub [ 1044.364120][T10460] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1044.375970][T10460] usb 4-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1044.389782][T10460] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1044.399387][T10460] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.438988][T10460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.458031][T10460] usb 4-1: Product: syz [ 1044.462343][T10460] usb 4-1: Manufacturer: syz [ 1044.473322][T10460] usb 4-1: SerialNumber: syz [ 1044.491807][T20549] netlink: 'syz.4.2442': attribute type 29 has an invalid length. [ 1044.545792][ T5621] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1044.586270][ T5621] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1044.608517][T20576] FAULT_INJECTION: forcing a failure. [ 1044.608517][T20576] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.634651][ T5621] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1044.662026][T20576] CPU: 1 UID: 0 PID: 20576 Comm: syz.2.2452 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1044.672506][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1044.682600][T20576] Call Trace: [ 1044.685917][T20576] [ 1044.688878][T20576] dump_stack_lvl+0x241/0x360 [ 1044.693607][T20576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.698858][T20576] ? __pfx__printk+0x10/0x10 [ 1044.703507][T20576] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1044.709092][T20576] ? __pfx___might_resched+0x10/0x10 [ 1044.714418][T20576] should_fail_ex+0x3b0/0x4e0 [ 1044.719135][T20576] ? skb_clone+0x20c/0x390 [ 1044.723588][T20576] should_failslab+0xac/0x100 [ 1044.728303][T20576] ? skb_clone+0x20c/0x390 [ 1044.732755][T20576] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1044.738174][T20576] skb_clone+0x20c/0x390 [ 1044.742456][T20576] nfnetlink_rcv+0x575/0x2ab0 [ 1044.747172][T20576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.753560][T20576] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1044.759508][T20576] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1044.764649][T20576] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1044.770578][T20576] ? rcu_preempt_deferred_qs_irqrestore+0x9f8/0xc70 [ 1044.777191][T20576] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1044.784147][T20576] ? rcu_is_watching+0x15/0xb0 [ 1044.788926][T20576] ? rcu_read_unlock_special+0x470/0x550 [ 1044.794605][T20576] ? skb_clone+0x240/0x390 [ 1044.799040][T20576] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1044.805034][T20576] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1044.810515][T20576] ? __rcu_read_unlock+0xa1/0x110 [ 1044.815555][T20576] netlink_unicast+0x7f6/0x990 [ 1044.820343][T20576] ? __pfx_netlink_unicast+0x10/0x10 [ 1044.825641][T20576] ? __virt_addr_valid+0x183/0x530 [ 1044.830778][T20576] ? __check_object_size+0x48e/0x900 [ 1044.836074][T20576] netlink_sendmsg+0x8e4/0xcb0 [ 1044.840863][T20576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.846169][T20576] ? __pfx_lock_release+0x10/0x10 [ 1044.851211][T20576] ? aa_sock_msg_perm+0x91/0x160 [ 1044.856162][T20576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.861480][T20576] __sock_sendmsg+0x221/0x270 [ 1044.866175][T20576] ____sys_sendmsg+0x52a/0x7e0 [ 1044.870949][T20576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.876247][T20576] __sys_sendmsg+0x292/0x380 [ 1044.880844][T20576] ? __pfx___sys_sendmsg+0x10/0x10 [ 1044.885984][T20576] ? __pfx_vfs_write+0x10/0x10 [ 1044.890785][T20576] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1044.897399][T20576] ? lockdep_hardirqs_on+0x99/0x150 [ 1044.902613][T20576] __do_fast_syscall_32+0xb4/0x110 [ 1044.907730][T20576] ? exc_page_fault+0x590/0x8c0 [ 1044.912596][T20576] do_fast_syscall_32+0x34/0x80 [ 1044.917453][T20576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1044.923788][T20576] RIP: 0023:0xf749d579 [ 1044.927862][T20576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1044.947477][T20576] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1044.955905][T20576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000840 [ 1044.963885][T20576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.971862][T20576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1044.979839][T20576] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.987818][T20576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.995813][T20576] [ 1045.007107][ T5621] usb 5-1: USB disconnect, device number 80 [ 1045.063552][ T5289] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1045.063694][T10460] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1045.104339][T10460] usb 4-1: USB disconnect, device number 99 [ 1045.263664][ T5289] usb 1-1: Using ep0 maxpacket: 8 [ 1045.273979][ T5289] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1045.288551][ T5289] usb 1-1: config 0 has no interface number 0 [ 1045.297361][ T5289] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1045.309005][ T5289] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1045.320087][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.348547][ T5289] usb 1-1: config 0 descriptor?? [ 1045.389502][ T5289] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1045.439017][T20582] netlink: 'syz.4.2455': attribute type 13 has an invalid length. [ 1045.454121][ T5312] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1045.456810][T20582] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2455'. [ 1045.479391][T20582] syz_tun: refused to change device tx_queue_len [ 1045.487298][T20582] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1045.608882][T20574] trusted_key: encrypted_key: master key parameter 'default"0' is invalid [ 1045.643326][ T5312] usb 3-1: Using ep0 maxpacket: 16 [ 1045.664009][T20574] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2451'. [ 1045.666357][ T5312] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1045.696948][ T5289] usb 1-1: USB disconnect, device number 84 [ 1045.728395][ T5289] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1045.735486][ T5312] usb 3-1: config 0 has no interface number 0 [ 1045.741650][ T5312] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.781534][ T5312] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.802382][ T5312] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.834403][ T5312] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1045.853510][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.874005][ T5312] usb 3-1: config 0 descriptor?? [ 1046.058503][T20595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1046.325178][ T5312] holtek_mouse 0003:04D9:A072.0019: unknown main item tag 0x2 [ 1046.333118][ T5312] holtek_mouse 0003:04D9:A072.0019: item fetching failed at offset 3/4 [ 1046.342092][ T5312] holtek_mouse 0003:04D9:A072.0019: hid parse failed: -22 [ 1046.350063][ T5312] holtek_mouse 0003:04D9:A072.0019: probe with driver holtek_mouse failed with error -22 [ 1046.602950][ T5621] usb 3-1: USB disconnect, device number 103 [ 1047.593351][T14087] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1047.661872][T20631] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 1047.684826][T20626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2472'. [ 1047.773406][T14087] usb 3-1: Using ep0 maxpacket: 8 [ 1047.804539][T14087] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1047.827558][T14087] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1047.853405][T14087] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 1047.889565][T14087] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1047.905141][T14087] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.945586][T14087] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1047.985202][T14087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.173676][ T5621] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1048.226165][T14087] usb 3-1: GET_CAPABILITIES returned 0 [ 1048.231734][T14087] usbtmc 3-1:16.0: can't read capabilities [ 1048.333338][ T5621] usb 4-1: Using ep0 maxpacket: 8 [ 1048.340415][ T5621] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1048.359294][ T5621] usb 4-1: config 0 has no interface number 0 [ 1048.376011][ T5621] usb 4-1: New USB device found, idVendor=083a, idProduct=7511, bcdDevice=b6.2d [ 1048.385552][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.405691][ T5621] usb 4-1: Product: syz [ 1048.413377][ T5621] usb 4-1: Manufacturer: syz [ 1048.418488][ T5621] usb 4-1: SerialNumber: syz [ 1048.435388][ T5621] usb 4-1: config 0 descriptor?? [ 1048.593489][T14087] usb 3-1: USB disconnect, device number 104 [ 1048.695914][ T5621] usb 4-1: USB disconnect, device number 100 [ 1048.733902][ T5312] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1048.923298][ T5312] usb 5-1: Using ep0 maxpacket: 16 [ 1048.934586][ T5312] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.942640][ T5312] usb 5-1: config 0 has no interface number 0 [ 1048.963315][ T5312] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.993451][ T5312] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.013240][ T5312] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.033277][ T5312] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1049.042371][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.081394][ T5312] usb 5-1: config 0 descriptor?? [ 1049.483426][ T5621] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1049.538763][ T5312] holtek_mouse 0003:04D9:A072.001A: unknown main item tag 0x2 [ 1049.563838][ T5312] holtek_mouse 0003:04D9:A072.001A: item fetching failed at offset 3/4 [ 1049.582774][ T5312] holtek_mouse 0003:04D9:A072.001A: hid parse failed: -22 [ 1049.602733][ T5312] holtek_mouse 0003:04D9:A072.001A: probe with driver holtek_mouse failed with error -22 [ 1049.643578][ T5621] usb 1-1: Using ep0 maxpacket: 8 [ 1049.650722][ T5621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.693760][ T5621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.727353][ T5621] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.40 [ 1049.743336][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.761798][ T5621] usb 1-1: Product: syz [ 1049.770144][ T5312] usb 5-1: USB disconnect, device number 81 [ 1049.780752][ T5621] usb 1-1: Manufacturer: syz [ 1049.798023][ T5621] usb 1-1: SerialNumber: syz [ 1049.826081][T20660] netlink: 'syz.3.2485': attribute type 10 has an invalid length. [ 1049.841219][ T5621] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1049.858645][ T5621] usb 1-1: no configuration chosen from 1 choice [ 1049.883591][T20660] team0: Failed to send options change via netlink (err -105) [ 1049.900355][T20660] team0: Port device netdevsim0 added [ 1049.913623][ T994] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1050.350118][T20673] vlan3: entered promiscuous mode [ 1050.369607][T20673] team0: entered promiscuous mode [ 1050.383303][T20673] team_slave_0: entered promiscuous mode [ 1050.389247][T20673] team_slave_1: entered promiscuous mode [ 1050.411208][T20673] team0: Device vlan3 is already an upper device of the team interface [ 1050.441425][T20673] team0: left promiscuous mode [ 1050.447818][T20673] team_slave_0: left promiscuous mode [ 1050.457705][T20673] team_slave_1: left promiscuous mode [ 1050.479030][T20676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1051.003338][ T5312] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1051.184673][ T5312] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1051.202409][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.211698][ T5312] usb 3-1: Product: syz [ 1051.216256][ T5312] usb 3-1: Manufacturer: syz [ 1051.223109][ T5312] usb 3-1: SerialNumber: syz [ 1051.239354][ T5312] usb 3-1: config 0 descriptor?? [ 1051.342933][T20697] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 1051.392604][T20697] bond0: (slave netdevsim0): Releasing backup interface [ 1051.435370][T20697] team0: Port device netdevsim0 added [ 1051.462629][ T5312] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1051.883391][ T5621] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1051.903370][T13320] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1051.933329][T14087] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1052.033423][ T5621] usb 4-1: Using ep0 maxpacket: 8 [ 1052.041771][ T5621] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1052.057073][ T5621] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1052.065958][ T5621] usb 4-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 1052.076547][ T5621] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1052.084429][T13320] usb 2-1: Using ep0 maxpacket: 16 [ 1052.085871][ T5621] usb 4-1: config 1 has no interface number 1 [ 1052.096903][ T5621] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1052.099307][T13320] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.109864][ T5621] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 1052.109901][ T5621] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1052.116175][T14087] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1052.126614][T13320] usb 2-1: config 0 has no interface number 0 [ 1052.136728][T14087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.173825][ T5621] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1052.190248][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.199340][T13320] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.201332][ T5286] usb 1-1: USB disconnect, device number 85 [ 1052.217240][ T5621] usb 4-1: Product: syz [ 1052.220057][T13320] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.223888][ T5621] usb 4-1: Manufacturer: syz [ 1052.236989][T14087] usb 5-1: Product: syz [ 1052.239033][T13320] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.266033][T14087] usb 5-1: Manufacturer: syz [ 1052.267003][T13320] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1052.270764][T14087] usb 5-1: SerialNumber: syz [ 1052.278275][ T5621] usb 4-1: SerialNumber: syz [ 1052.290675][T14087] usb 5-1: config 0 descriptor?? [ 1052.315730][T13320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.362731][T13320] usb 2-1: config 0 descriptor?? [ 1052.399548][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 1052.522202][T14087] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1052.621865][ T5621] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1052.630063][ T5621] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1052.649300][ T5621] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 1052.669806][ T5621] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1052.689249][ T5621] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1052.700851][ T5621] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 1052.791020][T13320] holtek_mouse 0003:04D9:A072.001B: unknown main item tag 0x2 [ 1052.833607][ T5621] usb 4-1: USB disconnect, device number 101 [ 1052.847903][T13320] holtek_mouse 0003:04D9:A072.001B: item fetching failed at offset 3/4 [ 1052.881789][T13320] holtek_mouse 0003:04D9:A072.001B: hid parse failed: -22 [ 1052.900262][T13320] holtek_mouse 0003:04D9:A072.001B: probe with driver holtek_mouse failed with error -22 [ 1052.923112][ T5312] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1052.927400][T17511] udevd[17511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.943111][ T5312] usb 3-1: USB disconnect, device number 105 [ 1053.020883][ T46] usb 2-1: USB disconnect, device number 80 [ 1053.093489][T13323] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1053.257563][T13323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.268674][T13323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.278617][T13323] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1053.313326][T13323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.323942][T13323] usb 1-1: config 0 descriptor?? [ 1053.763119][T13323] lenovo 0003:17EF:6062.001C: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 1053.942684][T14087] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1053.963922][T14087] usb 5-1: USB disconnect, device number 82 [ 1053.967480][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.990696][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.032188][ T46] usb 1-1: USB disconnect, device number 86 [ 1054.200906][T20728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1054.237913][T13769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.253078][T13769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.270089][T13769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.282138][T13769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.290596][T13769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1054.298475][T13769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1054.487191][T20733] chnl_net:caif_netlink_parms(): no params data found [ 1054.535889][ T46] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1054.689547][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.697754][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.705869][T20733] bridge_slave_0: entered allmulticast mode [ 1054.713157][T20733] bridge_slave_0: entered promiscuous mode [ 1054.723321][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1054.732196][ T46] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 1054.741554][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.744047][T20733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.749781][ T46] usb 3-1: Product: syz [ 1054.760923][ T46] usb 3-1: Manufacturer: syz [ 1054.765735][ T46] usb 3-1: SerialNumber: syz [ 1054.772455][ T46] usb 3-1: config 0 descriptor?? [ 1054.791647][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.804760][ T46] as10x_usb: device has been detected [ 1054.809078][T20733] bridge_slave_1: entered allmulticast mode [ 1054.810672][ T46] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1054.849037][T20733] bridge_slave_1: entered promiscuous mode [ 1054.868605][ T46] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1054.885859][T20740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2516'. [ 1054.912733][ T46] as10x_usb: error during firmware upload part1 [ 1054.940845][ T46] Registered device PCTV Systems picoStick (74e) [ 1055.016227][T20733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.017119][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 1055.047726][T20733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.129859][ T46] usb 3-1: USB disconnect, device number 106 [ 1055.143877][ T5621] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1055.144486][T20733] team0: Port device team_slave_0 added [ 1055.193168][T20733] team0: Port device team_slave_1 added [ 1055.195276][ T46] Unregistered device PCTV Systems picoStick (74e) [ 1055.203529][ T46] as10x_usb: device has been disconnected [ 1055.253080][T20733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.273468][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.311729][ T5621] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1055.323241][T20733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.336304][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.357280][ T5621] usb 2-1: Product: syz [ 1055.359483][T20733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.363034][ T5621] usb 2-1: Manufacturer: syz [ 1055.390178][ T5621] usb 2-1: SerialNumber: syz [ 1055.391280][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.406343][ T5621] usb 2-1: config 0 descriptor?? [ 1055.478350][T20733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.594195][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2523'. [ 1055.648500][T20733] hsr_slave_0: entered promiscuous mode [ 1055.655626][T20733] hsr_slave_1: entered promiscuous mode [ 1055.663368][ T5621] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1055.673631][T20733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.681228][T20733] Cannot create hsr debugfs directory [ 1055.833732][T20774] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1055.846187][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1055.855852][T20774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1056.037188][T20733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.147103][T20733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.235542][T20733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.351131][T20733] team0: Port device netdevsim0 removed [ 1056.361832][T20733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.404315][T13769] Bluetooth: hci0: command tx timeout [ 1056.501488][T20733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1056.518690][T20733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1056.533386][T13323] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1056.546623][T20733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1056.580227][T20733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1056.703938][T13323] usb 1-1: Using ep0 maxpacket: 8 [ 1056.724582][T13323] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1056.732839][T13323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.745443][T20733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.777267][T13323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1056.795747][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.814521][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.821676][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.829867][T13323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1056.842230][T13323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.856932][T13323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1056.861781][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.873312][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.901181][T13323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.963701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.976038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.988433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.000771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.013138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.025525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.036318][T20733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.037866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.055713][T20733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.060130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.082516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.094852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.156077][T13323] usb 1-1: GET_CAPABILITIES returned 0 [ 1057.161669][T13323] usbtmc 1-1:16.0: can't read capabilities [ 1057.290943][T20791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.304799][T20733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.351000][T20791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.396907][T13323] usb 1-1: USB disconnect, device number 87 [ 1057.492835][T20733] veth0_vlan: entered promiscuous mode [ 1057.550040][T20733] veth1_vlan: entered promiscuous mode [ 1057.750025][T20733] veth0_macvtap: entered promiscuous mode [ 1057.811840][T20733] veth1_macvtap: entered promiscuous mode [ 1057.913074][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.010728][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.059312][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.127231][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.179474][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.252767][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.333426][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.381786][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.437087][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.486279][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.497119][T13769] Bluetooth: hci0: command tx timeout [ 1058.507243][T20804] FAULT_INJECTION: forcing a failure. [ 1058.507243][T20804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.556329][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.571795][T20804] CPU: 0 UID: 0 PID: 20804 Comm: syz.0.2536 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1058.582274][T20804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1058.592359][T20804] Call Trace: [ 1058.595671][T20804] [ 1058.598628][T20804] dump_stack_lvl+0x241/0x360 [ 1058.603357][T20804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.608601][T20804] ? __pfx__printk+0x10/0x10 [ 1058.613243][T20804] ? snprintf+0xda/0x120 [ 1058.617523][T20804] should_fail_ex+0x3b0/0x4e0 [ 1058.622253][T20804] _copy_to_user+0x2f/0xb0 [ 1058.626724][T20804] simple_read_from_buffer+0xca/0x150 [ 1058.632150][T20804] proc_fail_nth_read+0x1e9/0x250 [ 1058.637224][T20804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.642822][T20804] ? rw_verify_area+0x55e/0x6f0 [ 1058.647715][T20804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.653310][T20804] vfs_read+0x201/0xbc0 [ 1058.657511][T20804] ? __pfx_lock_release+0x10/0x10 [ 1058.662586][T20804] ? __pfx_vfs_read+0x10/0x10 [ 1058.667318][T20804] ? __fget_files+0x3f3/0x470 [ 1058.672047][T20804] ? fdget_pos+0x24e/0x320 [ 1058.676502][T20804] ksys_read+0x183/0x2b0 [ 1058.680790][T20804] ? __pfx_ksys_read+0x10/0x10 [ 1058.685604][T20804] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1058.692238][T20804] ? lockdep_hardirqs_on+0x99/0x150 [ 1058.697483][T20804] __do_fast_syscall_32+0xb4/0x110 [ 1058.702630][T20804] ? exc_page_fault+0x590/0x8c0 [ 1058.707525][T20804] do_fast_syscall_32+0x34/0x80 [ 1058.712411][T20804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1058.718776][T20804] RIP: 0023:0xf746d579 [ 1058.722904][T20804] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1058.742547][T20804] RSP: 002b:00000000f57355a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1058.751007][T20804] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5735620 [ 1058.759011][T20804] RDX: 000000000000000f RSI: 00000000f745bff4 RDI: 0000000000000000 [ 1058.767012][T20804] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1058.775017][T20804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1058.783033][T20804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1058.791053][T20804] [ 1058.806235][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.819033][T20733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.828995][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.851971][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.872668][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.899838][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.929168][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.950644][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.961190][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.982528][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.998050][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.016071][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.032620][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.063659][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.087639][T20733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.133392][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1059.169781][T20733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.199638][T20733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.241078][T20733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.302257][T20733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.166262][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.172625][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.563450][T13769] Bluetooth: hci0: command tx timeout [ 1061.973384][ C1] net_ratelimit: 21765 callbacks suppressed [ 1061.973411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.973623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.979805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1061.991747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1062.003563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1062.015590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1062.027712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1062.039535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1062.051308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1062.063372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.152425][T13769] Bluetooth: hci0: command tx timeout [ 1065.254233][ C1] sched: DL replenish lagged too much [ 1066.983329][ C0] net_ratelimit: 29191 callbacks suppressed [ 1066.983358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.983409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.989558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1067.001706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1067.013570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1067.026002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1067.037360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1067.049435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1067.061340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1067.073919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.993365][ C0] net_ratelimit: 25235 callbacks suppressed [ 1071.993389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.993905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.999575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1072.011684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1072.023562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1072.036053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1072.047389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1072.059496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1072.071424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1072.084050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1077.003418][ C0] net_ratelimit: 24928 callbacks suppressed [ 1077.003442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.003737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1077.009650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.021737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1077.033646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.046086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1077.057423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.069555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1077.081483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.094055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.013245][ C0] net_ratelimit: 25228 callbacks suppressed [ 1082.013271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.013479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1082.019581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.032080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.043388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.055459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1082.067349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.079867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.091210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.103412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1087.023308][ C1] net_ratelimit: 24948 callbacks suppressed [ 1087.023331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1087.023452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1087.030103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1087.041534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1087.053683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1087.065498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1087.077928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1087.089312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1087.101385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1087.113350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.033284][ C0] net_ratelimit: 24933 callbacks suppressed [ 1092.033308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.034188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.039468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.051644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1092.063504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.075994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.087396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.099780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1092.111299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.124002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.043319][ C0] net_ratelimit: 25042 callbacks suppressed [ 1097.043345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.043395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.049698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.061681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1097.073456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.086178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.097517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.109462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1097.121346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.134413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.053262][ C0] net_ratelimit: 25027 callbacks suppressed [ 1102.053287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.053450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1102.059478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.072078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.083573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.095454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1102.107545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.120184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.131553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.143600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1107.063828][ C1] net_ratelimit: 22990 callbacks suppressed [ 1107.063844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1107.073333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1107.082591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1107.093913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1107.106601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1107.117989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1107.129982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1107.141897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1107.154595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1107.166024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.073279][ C0] net_ratelimit: 23138 callbacks suppressed [ 1112.073304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.074468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1112.079605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.091569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1112.103360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.115969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1112.127405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.139334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1112.151088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.163945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1117.083383][ C0] net_ratelimit: 25095 callbacks suppressed [ 1117.083408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.083688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1117.089690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.101819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1117.113710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.125631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1117.137396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.150311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1117.161649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.173506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.093268][ C0] net_ratelimit: 26915 callbacks suppressed [ 1122.093292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1122.093989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.099486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1122.112100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.124056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1122.136013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1122.147864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1122.160467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.171806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1122.183812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1127.103246][ C0] net_ratelimit: 28173 callbacks suppressed [ 1127.103270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.103336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1127.109567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.121676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1127.133542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.145536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1127.157329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.169612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1127.181386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.193675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1132.113399][ C0] net_ratelimit: 28140 callbacks suppressed [ 1132.113424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.113541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1132.119743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.131998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1132.143621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.155923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1132.167539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.179599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1132.191445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.204033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1137.123289][ C0] net_ratelimit: 25416 callbacks suppressed [ 1137.123316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.123409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1137.129512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.142264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1137.153470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.165757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1137.177640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.189817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1137.201566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.213493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1142.133468][ C0] net_ratelimit: 24920 callbacks suppressed [ 1142.133491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.134183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1142.139791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.152124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1142.163835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.175842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1142.187836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.200394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1142.211551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1142.223828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1147.143328][ C0] net_ratelimit: 25283 callbacks suppressed [ 1147.143359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.143406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1147.149690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.161585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1147.173621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.186389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1147.197369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.209733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1147.221289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.233712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.153364][ C0] net_ratelimit: 25603 callbacks suppressed [ 1152.153388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.153430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1152.159696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.171912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.183579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.195739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1152.207897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.220500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1152.231498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.243685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1157.163255][ C0] net_ratelimit: 26175 callbacks suppressed [ 1157.163279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.163597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1157.169671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.181864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1157.193563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.205745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1157.217466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.229516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1157.241396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.253966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1162.173382][ C0] net_ratelimit: 25742 callbacks suppressed [ 1162.173405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.173672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1162.179706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.192012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1162.203706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.215899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.227671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.239508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.251599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.264187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1167.183261][ C1] net_ratelimit: 25651 callbacks suppressed [ 1167.183285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.183386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.190093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1167.201487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.213701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1167.225326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.237578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.249286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.261318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.273256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.193205][ C0] net_ratelimit: 25777 callbacks suppressed [ 1172.193228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.193803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1172.199520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.211386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1172.223309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.236020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1172.247112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.259567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1172.271163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1172.283455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1177.203223][ C0] net_ratelimit: 26197 callbacks suppressed [ 1177.203249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.203323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1177.209455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.222208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1177.233383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.245656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1177.257399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.269399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1177.281321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.293907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1182.213268][ C0] net_ratelimit: 25750 callbacks suppressed [ 1182.213292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.213827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1182.219595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.231493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1182.243440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.256032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1182.267207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.279488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1182.291127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.303564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.223346][ C0] net_ratelimit: 25885 callbacks suppressed [ 1187.223371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.223751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1187.229662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.241809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1187.253496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.265742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.277502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.289637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.301491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.314086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1192.233132][ C0] net_ratelimit: 25642 callbacks suppressed [ 1192.233360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1192.239099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.251330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1192.263268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.275939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1192.287117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.299510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1192.311040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.323433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1192.334980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.243258][ C1] net_ratelimit: 25272 callbacks suppressed [ 1197.243282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1197.243620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.249747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1197.261529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.273492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1197.285351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.298013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1197.309300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.321465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1197.333375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.253162][ C0] net_ratelimit: 26015 callbacks suppressed [ 1202.253184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.253693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.259403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.271455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.283335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.295893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1202.307195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.319379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1202.331066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1202.343334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.263156][ C1] net_ratelimit: 26074 callbacks suppressed [ 1207.263183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1207.263465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.269776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1207.281476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.293748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.305388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.317534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.329475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.342114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1207.353427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.483161][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1211.490189][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19679/1:b..l [ 1211.498812][ C0] rcu: (detected by 0, t=10503 jiffies, g=213065, q=1139 ncpus=2) [ 1211.506735][ C0] task:syz-executor state:R running task stack:19888 pid:19679 tgid:19679 ppid:19676 flags:0x20000000 [ 1211.519995][ C0] Call Trace: [ 1211.523316][ C0] [ 1211.526271][ C0] __schedule+0x1895/0x4b30 [ 1211.530877][ C0] ? __pfx___schedule+0x10/0x10 [ 1211.535773][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1211.541803][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 1211.547135][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1211.552293][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1211.558074][ C0] irqentry_exit+0x5e/0x90 [ 1211.562536][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1211.568566][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 1211.573893][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9a 4f 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1211.593534][ C0] RSP: 0018:ffffc9000303f400 EFLAGS: 00000206 [ 1211.599638][ C0] RAX: 0000000000000001 RBX: 1ffff92000607e8c RCX: be0c63a39efd4800 [ 1211.607643][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adb40 RDI: ffffffff8c60f460 [ 1211.615645][ C0] RBP: ffffc9000303f550 R08: ffffffff9426c7c7 R09: 1ffffffff284d8f8 [ 1211.623641][ C0] R10: dffffc0000000000 R11: fffffbfff284d8f9 R12: 1ffff92000607e88 [ 1211.631643][ C0] R13: dffffc0000000000 R14: ffffc9000303f460 R15: 0000000000000246 [ 1211.639674][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1211.644758][ C0] ? mark_lock+0x9a/0x360 [ 1211.649123][ C0] ? page_ext_get+0x20/0x2a0 [ 1211.653762][ C0] page_ext_get+0x3d/0x2a0 [ 1211.658307][ C0] ? page_ext_get+0x20/0x2a0 [ 1211.662941][ C0] __reset_page_owner+0x30/0x430 [ 1211.667924][ C0] free_unref_page+0xcfb/0xf20 [ 1211.672738][ C0] __slab_free+0x31b/0x3d0 [ 1211.677194][ C0] ? __phys_addr+0xba/0x170 [ 1211.681731][ C0] qlist_free_all+0x9a/0x140 [ 1211.686353][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 1211.691846][ C0] __kasan_slab_alloc+0x23/0x80 [ 1211.696727][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1211.702478][ C0] __kmalloc_noprof+0x1a6/0x400 [ 1211.707397][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1211.713001][ C0] tomoyo_path_perm+0x2b7/0x740 [ 1211.717895][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1211.723126][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1211.728809][ C0] ? tomoyo_path_perm+0x287/0x740 [ 1211.733876][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1211.739334][ C0] ? mark_lock+0x9a/0x360 [ 1211.743694][ C0] ? __kasan_slab_free+0x59/0x70 [ 1211.748674][ C0] ? __lock_acquire+0x1384/0x2050 [ 1211.753746][ C0] security_inode_getattr+0x130/0x330 [ 1211.759167][ C0] vfs_getattr+0x45/0x430 [ 1211.763539][ C0] do_statx_fd+0x124/0x460 [ 1211.767999][ C0] ? __pfx_do_statx_fd+0x10/0x10 [ 1211.773009][ C0] ? do_sys_openat2+0x17a/0x1d0 [ 1211.777901][ C0] ? kmem_cache_free+0x1a2/0x420 [ 1211.782881][ C0] ? __might_fault+0xaa/0x120 [ 1211.787600][ C0] ? __might_fault+0xc6/0x120 [ 1211.792317][ C0] __se_sys_statx+0x153/0x2b0 [ 1211.797038][ C0] ? __pfx___se_sys_statx+0x10/0x10 [ 1211.802287][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1211.808313][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1211.814691][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1211.821329][ C0] ? __ia32_sys_statx+0x20/0xc0 [ 1211.826223][ C0] __do_fast_syscall_32+0xb4/0x110 [ 1211.831373][ C0] ? exc_page_fault+0x590/0x8c0 [ 1211.836273][ C0] do_fast_syscall_32+0x34/0x80 [ 1211.841155][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1211.847513][ C0] RIP: 0023:0xf747d579 [ 1211.851608][ C0] RSP: 002b:00000000f75cea80 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 1211.860057][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7375e2a [ 1211.868071][ C0] RDX: 0000000000001800 RSI: 00000000000007ff RDI: 00000000f75ceb3c [ 1211.876175][ C0] RBP: 00000000f75cec90 R08: 0000000000000000 R09: 0000000000000000 [ 1211.884175][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1211.892194][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1211.900247][ C0] [ 1211.903310][ C0] rcu: rcu_preempt kthread starved for 10207 jiffies! g213065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1211.914629][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1211.924649][ C0] rcu: RCU grace-period kthread stack dump: [ 1211.930558][ C0] task:rcu_preempt state:R running task stack:24440 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1211.942351][ C0] Call Trace: [ 1211.945669][ C0] [ 1211.948628][ C0] __schedule+0x1895/0x4b30 [ 1211.953194][ C0] ? __pfx___schedule+0x10/0x10 [ 1211.958083][ C0] ? __pfx_lock_release+0x10/0x10 [ 1211.963163][ C0] ? __asan_memset+0x23/0x50 [ 1211.967791][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1211.973638][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1211.980004][ C0] ? schedule+0x90/0x320 [ 1211.984279][ C0] schedule+0x14b/0x320 [ 1211.988479][ C0] schedule_timeout+0x1be/0x310 [ 1211.993386][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1211.998806][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1212.004137][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1212.009727][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1212.014603][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1212.019930][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1212.026127][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1212.031433][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1212.037369][ C0] ? finish_swait+0xd4/0x1e0 [ 1212.041990][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1212.046624][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.051859][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1212.057788][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1212.062849][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.068071][ C0] kthread+0x2f0/0x390 [ 1212.072190][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.077412][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.082049][ C0] ret_from_fork+0x4b/0x80 [ 1212.086506][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.091125][ C0] ret_from_fork_asm+0x1a/0x30 [ 1212.095948][ C0] [ 1212.098991][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1212.105338][ C0] CPU: 0 UID: 0 PID: 5312 Comm: kworker/0:8 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1212.115783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1212.125882][ C0] Workqueue: events nsim_dev_trap_report_work [ 1212.132001][ C0] RIP: 0010:preempt_count_sub+0x14/0x170 [ 1212.137674][ C0] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 89 fb 48 c7 c0 40 39 3c 9a 48 c1 e8 03 <49> be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 [ 1212.157317][ C0] RSP: 0018:ffffc90000006758 EFLAGS: 00000a06 [ 1212.163421][ C0] RAX: 1ffffffff3478728 RBX: 0000000000000001 RCX: ffffc900000068a8 [ 1212.171506][ C0] RDX: dffffc0000000000 RSI: ffffc90000000000 RDI: 0000000000000001 [ 1212.179505][ C0] RBP: ffffc900000068a0 R08: ffffc90000006890 R09: 0000000000000000 [ 1212.187508][ C0] R10: ffffc900000068f0 R11: fffff52000000d20 R12: dffffc0000000000 [ 1212.195597][ C0] R13: ffffc900000068a0 R14: ffffc90000000000 R15: ffffc900000068a0 [ 1212.203599][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1212.212560][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.219176][ C0] CR2: 00000000f757ed3c CR3: 0000000061a80000 CR4: 00000000003506f0 [ 1212.227190][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1212.235209][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1212.243213][ C0] Call Trace: [ 1212.246515][ C0] [ 1212.249387][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1212.255857][ C0] ? print_other_cpu_stall+0x1475/0x15b0 [ 1212.261546][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1212.267412][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1212.273300][ C1] net_ratelimit: 22784 callbacks suppressed [ 1212.273322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.273672][ C0] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 1212.280185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.291516][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1212.291546][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 1212.291571][ C0] ? acct_account_cputime+0x207/0x210 [ 1212.297566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.308889][ C0] ? update_process_times+0x1ce/0x230 [ 1212.308932][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1212.308962][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1212.315042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.319771][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 1212.326510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.337241][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1212.337275][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1212.343411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.347762][ C0] ? hrtimer_interrupt+0x396/0x990 [ 1212.353785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.365080][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1212.365110][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1212.370777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.382411][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.382455][ C0] ? preempt_count_sub+0x14/0x170 [ 1212.389219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.394303][ C0] ? arch_stack_walk+0xe5/0x150 [ 1212.394336][ C0] unwind_next_frame+0x18e6/0x22d0 [ 1212.406993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1212.411401][ C0] ? __unwind_start+0xf8/0x740 [ 1212.497287][ C0] __unwind_start+0x59a/0x740 [ 1212.502044][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1212.508244][ C0] arch_stack_walk+0xe5/0x150 [ 1212.512967][ C0] ? arch_stack_walk+0xe5/0x150 [ 1212.517851][ C0] stack_trace_save+0x118/0x1d0 [ 1212.522734][ C0] ? mark_lock+0x9a/0x360 [ 1212.527099][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1212.532517][ C0] kasan_save_track+0x3f/0x80 [ 1212.537267][ C0] __kasan_slab_alloc+0x66/0x80 [ 1212.542156][ C0] ? skb_ext_add+0x1d6/0x910 [ 1212.546778][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1212.552276][ C0] skb_ext_add+0x1d6/0x910 [ 1212.556744][ C0] br_nf_forward_ip+0xd8/0x7b0 [ 1212.561542][ C0] ? __netif_receive_skb_core+0x13e8/0x4570 [ 1212.567471][ C0] ? __netif_receive_skb+0x12f/0x650 [ 1212.572793][ C0] ? process_backlog+0x662/0x15b0 [ 1212.577864][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1212.583009][ C0] nf_hook_slow+0xc3/0x220 [ 1212.587469][ C0] NF_HOOK+0x2a7/0x460 [ 1212.591585][ C0] ? NF_HOOK+0x9f/0x460 [ 1212.595782][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1212.600416][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1212.605925][ C0] __br_forward+0x489/0x660 [ 1212.610481][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1212.615978][ C0] ? __pfx___br_forward+0x10/0x10 [ 1212.621055][ C0] ? skb_clone+0x240/0x390 [ 1212.625526][ C0] maybe_deliver+0xb3/0x150 [ 1212.630068][ C0] br_flood+0x2e4/0x660 [ 1212.634268][ C0] br_handle_frame_finish+0x18ba/0x1fe0 [ 1212.639884][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1212.645820][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1212.651227][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1212.657057][ C0] ? ip6t_do_table+0x205/0x18a0 [ 1212.661936][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1212.667693][ C0] ? ip6t_do_table+0x205/0x18a0 [ 1212.672583][ C0] ? nf_hook_slow+0x175/0x220 [ 1212.677294][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1212.683219][ C0] br_nf_hook_thresh+0x472/0x590 [ 1212.688193][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1212.693688][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1212.699619][ C0] ? skb_push+0x97/0x100 [ 1212.703893][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 1212.709900][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1212.715837][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 1212.721242][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 1212.726826][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1212.732755][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1212.739298][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 1212.744529][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 1212.749246][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1212.754747][ C0] br_handle_frame+0x9fd/0x1530 [ 1212.759642][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1212.764970][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1212.770900][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.776933][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1212.782255][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 1212.788031][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 1212.792749][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 1212.797461][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1212.803570][ C0] ? mark_lock+0x9a/0x360 [ 1212.807954][ C0] ? __lock_acquire+0x1384/0x2050 [ 1212.813064][ C0] __netif_receive_skb+0x12f/0x650 [ 1212.818231][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1212.823307][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1212.828974][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.835001][ C0] ? __pfx_lock_release+0x10/0x10 [ 1212.840074][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1212.845238][ C0] process_backlog+0x662/0x15b0 [ 1212.850134][ C0] ? process_backlog+0x33b/0x15b0 [ 1212.855199][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1212.860513][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.866562][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1212.872930][ C0] __napi_poll+0xcb/0x490 [ 1212.877300][ C0] net_rx_action+0x89b/0x1240 [ 1212.882025][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1212.887168][ C0] ? __run_timer_base+0x178/0x8e0 [ 1212.892225][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1212.897934][ C0] handle_softirqs+0x2c5/0x980 [ 1212.902740][ C0] ? do_softirq+0x11b/0x1e0 [ 1212.907277][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1212.912605][ C0] do_softirq+0x11b/0x1e0 [ 1212.916964][ C0] [ 1212.919917][ C0] [ 1212.922869][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1212.927756][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1212.933426][ C0] ? rcu_is_watching+0x15/0xb0 [ 1212.938221][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1212.943473][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1212.949314][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1212.955068][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1212.960296][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1212.966134][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1212.971806][ C0] ? process_scheduled_works+0x976/0x1850 [ 1212.977556][ C0] process_scheduled_works+0xa63/0x1850 [ 1212.983158][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1212.989182][ C0] ? assign_work+0x364/0x3d0 [ 1212.993815][ C0] worker_thread+0x870/0xd30 [ 1212.998449][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1213.004401][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1213.009472][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1213.014633][ C0] kthread+0x2f0/0x390 [ 1213.018736][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1213.023891][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.028510][ C0] ret_from_fork+0x4b/0x80 [ 1213.032964][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.037577][ C0] ret_from_fork_asm+0x1a/0x30 [ 1213.042389][ C0] [ 1217.283330][ C0] net_ratelimit: 24429 callbacks suppressed [ 1217.283355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.283898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1217.289532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.302211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.313802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.325703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.337591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.350234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0) [ 1217.361420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.373732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:58:1f:64:77:e1, vlan:0)