last executing test programs: 1m51.66068481s ago: executing program 0 (id=237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.566677386s ago: executing program 0 (id=238): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m51.387553865s ago: executing program 0 (id=240): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m51.324710779s ago: executing program 0 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x0) 1m51.235905999s ago: executing program 0 (id=242): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) 1m50.940054902s ago: executing program 0 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000000}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1m50.67617292s ago: executing program 32 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000000}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1m14.703454426s ago: executing program 4 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.994405426s ago: executing program 4 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m12.551620187s ago: executing program 2 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.07555439s ago: executing program 4 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0xffff, 0x7, 0x59a9}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.785355353s ago: executing program 3 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m8.139677484s ago: executing program 3 (id=484): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0xffffffb8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.978726087s ago: executing program 4 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x1ad, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100000, 0x5, 0x2, 0x6, 0x1}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m7.305517067s ago: executing program 4 (id=487): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m7.172956865s ago: executing program 2 (id=488): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) close(0x5) 1m7.08079905s ago: executing program 5 (id=489): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1m6.853933279s ago: executing program 2 (id=490): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001100)={0x0, 0x200000, 0x800, 0x9}, 0x20) 1m6.588737603s ago: executing program 3 (id=491): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000044c000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00005b6000/0x4000)=nil, &(0x7f000069d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m6.567107333s ago: executing program 5 (id=493): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) 1m6.461674232s ago: executing program 2 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321014000000000000000100001c"], 0x4a) 1m6.140142689s ago: executing program 1 (id=495): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 1m6.006395161s ago: executing program 3 (id=496): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1033, r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r4, 0x1, 0x0) 1m5.902667988s ago: executing program 5 (id=497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m5.503463128s ago: executing program 2 (id=498): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1m4.480409303s ago: executing program 3 (id=499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xa593, 0xffff, 0x2, 0x7fe}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m4.111481547s ago: executing program 1 (id=500): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m3.923337448s ago: executing program 5 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 1m3.719172353s ago: executing program 1 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m3.389618419s ago: executing program 1 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f00000006c0)={0xbd8, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x358, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @random="a5a10764828d", @device_a, @device_b, {0x4, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x2cc2, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x39, "5e100deeabac1198dd9a9737aae9a20ee7f84d972782240fd689e23bfd4621dfbc96b0bb23360013e2244e53c32069de371999807b41f15e0c"}, {@broadcast, @broadcast, 0xed, "dd73e8015b0ee4f5078fa12058d2da4ed56bae4571e9e4c054ebec8bac2df62669e8289fe53153252c3f6deae3b636436c250134badb169e97dfbb83912626af469a95cf1f3d1c32eb17c575fc8f0cbf881b41e3e9ee9ba7a8445bef2acce6086ce8caa493748117709fef3766b3e3f4b4bf3ff7e238608ec09918157926f57a7fffe45055b70b8e8c66214fd96e57fac6e5731e53af78c385bcdbb6c5a023401caeee950bd4d1b054528698b4ad35f1d381c6c6ba1718e26a266756b12db49d7488ea203c7f2cd661afc65a7b3f5085b65d01526d676337c4b57405b08a59fc6c7085ab8fe3c1cee9abb95623"}, {@device_a, @device_a, 0x8d, "5b83f14462ce4caa0c4d40870ec6503bd78b5931eda196ddc1999206b91feb8a5ca623bc60306c5ebeaebd2dc0d0d7d8891c9b4dbc585d44344e33f4569df742cbebe906729313e24d67ebee7c47fc41307c7189206d1ad533c1124bd5ed4c8ec4fdb2e7a2c0b9f12468ee326fcf81a091c69144ea82cf0b0c4dafad456e46a7817cd5b4c8c97cfb702655ac1b"}, {@device_a, @device_b, 0x53, "37b7f970c2e10c4a7609b4930b68156d18b0e103b33b0c6f9cf6a5626ddd9967455cddae1138805c0c27c8b38e27d382057e2fb274bbf64897bab3039051cb0aaeabb78c68207e828c24c2268a9a456c797cc4"}, {@device_a, @device_a, 0xe5, "ce223a4ef4802adb93bb55aa53feb1f74a12d43d69efb31fdda3dae3eeb30c7a04600a54698ad20c4107cef0530870540f8edbe4fb44dad768efb8e9d6d46b8cab393b7e9fc559499a6a95cf6871c849f956e6681663dfbed1d6b4c2d0e16734ce1689303b787cb3d87ba70c3d73a7f6079bbaae0ee526345acafcedca11cc2747debecfe8c2cac076c559c1cc97c7489245c1c10cbea4ec4fd7387a28aad7baf898f9dca46cd72fd021620707edf6bb695a090ce25f04007b88f2930f0e5ac1c8cd0730db435203ab3c38eefe369e53d1e59886b222f5f8db4a2e4a7956b97ddc4c36f3ae"}]}}, @NL80211_ATTR_FRAME={0xa0, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @from_mac=@device_b, @device_a, @broadcast, {0x4, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x1, "d8"}, {@broadcast, @device_a, 0x61, "0d72aeaeb49e075e019d15b78a5b5e54d307c2e609367296bb653f089898b862c1882b3815ac351a5305b47ace257cb74aecd8fd33a0367dbeff0671c213cf50447d6698839eca12ed243a3f261905d836cac009db891eb3444723c8755e21fdbf"}]}}, @NL80211_ATTR_FRAME={0x7a6, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2752}, @random="2354498554df", @broadcast, @from_mac, {0x5, 0x9}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x8845}, 0x0) 1m3.369453871s ago: executing program 4 (id=504): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1m2.443146471s ago: executing program 2 (id=505): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) 1m2.087357966s ago: executing program 5 (id=506): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x11, 0x100a42) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x80, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m1.940066432s ago: executing program 1 (id=507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 1m0.882566875s ago: executing program 1 (id=508): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m0.368857851s ago: executing program 5 (id=509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.290268325s ago: executing program 3 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xa8e48a35f0ba0699}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x3, 0x7fff, 0x7f, 0x1, 0xf34e}, {0x8, 0x0, 0xffff, 0x1, 0x8}, 0x1, 0x8, 0x1dab}}]}}]}, 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 33 (id=509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0:50 [ 90.341719][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.516279][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.534205][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562975][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.583950][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.618239][ T99] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.729222][ T5729] netlink: 64467 bytes leftover after parsing attributes in process `syz.4.8'. [ 90.813949][ T5726] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.857638][ T5620] Bluetooth: hci0: command tx timeout [ 90.865387][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.902804][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.012843][ T5610] Bluetooth: hci1: command tx timeout [ 91.019185][ T5620] Bluetooth: hci3: command tx timeout [ 91.093107][ T5610] Bluetooth: hci4: command tx timeout [ 91.098707][ T5620] Bluetooth: hci2: command tx timeout [ 91.104860][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.810226][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.821250][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.833540][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.975101][ T5705] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.026262][ T188] cfg80211: failed to load regulatory.db [ 92.146737][ T5705] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.156142][ T5705] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 92.170580][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.181641][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.194294][ T5705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.209694][ T5705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.229081][ T5705] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.239336][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.248789][ T5705] usb 5-1: Product: syz [ 92.257349][ T5705] usb 5-1: Manufacturer: syz [ 92.277662][ T5761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.296654][ T5705] cdc_wdm 5-1:1.0: skipping garbage [ 92.303877][ T5705] cdc_wdm 5-1:1.0: skipping garbage [ 92.349297][ T5705] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 92.374459][ T5705] cdc_wdm 5-1:1.0: Unknown control protocol [ 92.605280][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.612399][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.620082][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.626760][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.634682][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.641925][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.648950][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.655722][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.662369][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.669206][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.675628][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.682284][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.689874][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.697025][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.704287][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.710968][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.717344][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.724596][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.732611][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 92.739266][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 92.764831][ T5705] usb 5-1: USB disconnect, device number 2 [ 94.073883][ T5800] netlink: 5 bytes leftover after parsing attributes in process `syz.4.26'. [ 94.086522][ T5800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.221479][ T5810] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 94.506849][ T5816] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 94.518185][ T5816] netlink: 64547 bytes leftover after parsing attributes in process `syz.0.31'. [ 94.631406][ T5820] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 94.689817][ T5823] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 94.689817][ T5823] program syz.0.34 not setting count and/or reply_len properly [ 95.354653][ T5835] syz.3.39 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 95.391150][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 95.391182][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.391202][ T5835] Call Trace: [ 95.391211][ T5835] [ 95.391219][ T5835] dump_stack_lvl+0xe8/0x150 [ 95.391254][ T5835] dump_header+0xd3/0x4b0 [ 95.391281][ T5835] oom_kill_process+0x3ab/0x970 [ 95.391305][ T5835] out_of_memory+0x1064/0x1480 [ 95.391340][ T5835] ? try_charge_memcg+0xbca/0x1590 [ 95.391381][ T5835] ? __pfx_out_of_memory+0x10/0x10 [ 95.391411][ T5835] ? do_raw_spin_unlock+0xf5/0x210 [ 95.391443][ T5835] try_charge_memcg+0xc74/0x1590 [ 95.391488][ T5835] ? __pfx_try_charge_memcg+0x10/0x10 [ 95.391523][ T5835] ? percpu_ref_tryget+0x15/0x180 [ 95.391552][ T5835] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 95.391577][ T5835] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 95.391597][ T5835] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 95.391618][ T5835] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 95.391655][ T5835] ? __kmalloc_cache_noprof+0x150/0x660 [ 95.391680][ T5835] __kmalloc_cache_noprof+0x372/0x660 [ 95.391704][ T5835] ? __kmalloc_cache_noprof+0x150/0x660 [ 95.391726][ T5835] ? prog_array_map_alloc+0x51/0x200 [ 95.391749][ T5835] ? prog_array_map_alloc+0x51/0x200 [ 95.391778][ T5835] prog_array_map_alloc+0x51/0x200 [ 95.391803][ T5835] map_create+0xf2a/0x1b90 [ 95.391840][ T5835] ? __pfx_map_create+0x10/0x10 [ 95.391878][ T5835] ? bpf_lsm_bpf+0x9/0x20 [ 95.391901][ T5835] ? security_bpf+0x7e/0x2d0 [ 95.391932][ T5835] __sys_bpf+0xaea/0xd90 [ 95.391964][ T5835] ? vfs_write+0x920/0xba0 [ 95.391993][ T5835] ? __pfx___sys_bpf+0x10/0x10 [ 95.392023][ T5835] ? do_futex+0x458/0x4e0 [ 95.392084][ T5835] ? rcu_is_watching+0x15/0xb0 [ 95.392123][ T5835] __x64_sys_bpf+0xba/0xd0 [ 95.392158][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.392181][ T5835] do_syscall_64+0x174/0x580 [ 95.392204][ T5835] ? trace_irq_disable+0x3b/0x140 [ 95.392230][ T5835] ? clear_bhb_loop+0x40/0x90 [ 95.392256][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.392277][ T5835] RIP: 0033:0x7f1bb419e0d9 [ 95.392307][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.392325][ T5835] RSP: 002b:00007f1bb4fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.392352][ T5835] RAX: ffffffffffffffda RBX: 00007f1bb4425fa0 RCX: 00007f1bb419e0d9 [ 95.392367][ T5835] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000000 [ 95.392380][ T5835] RBP: 00007f1bb4235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.392393][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.392405][ T5835] R13: 00007f1bb4426038 R14: 00007f1bb4425fa0 R15: 00007f1bb454fa48 [ 95.392439][ T5835] [ 95.738548][ T5835] memory: usage 0kB, limit 0kB, failcnt 19 [ 95.751115][ T5835] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.772599][ T5835] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.831868][ T5835] Memory cgroup stats for /syz3/test: [ 95.832510][ T5835] cache 0 [ 95.876627][ T5835] rss 0 [ 95.887371][ T5835] rss_huge 0 [ 95.909907][ T5835] shmem 0 [ 95.918088][ T5835] mapped_file 0 [ 95.927678][ T5835] dirty 0 [ 95.935265][ T5835] writeback 0 [ 95.942664][ T5835] workingset_refault_anon 0 [ 95.947243][ T5835] workingset_refault_file 0 [ 95.951784][ T5835] swap 0 [ 95.954717][ T5835] swapcached 0 [ 95.958120][ T5835] pgpgin 0 [ 95.961208][ T5835] pgpgout 0 [ 95.964429][ T5835] pgfault 0 [ 95.967579][ T5835] pgmajfault 0 [ 95.971075][ T5835] inactive_anon 0 [ 95.977975][ T5835] active_anon 0 [ 95.981604][ T5835] inactive_file 0 [ 95.985349][ T5835] active_file 0 [ 95.988853][ T5835] unevictable 0 [ 95.995728][ T5835] hierarchical_memory_limit 0 [ 96.000483][ T5835] hierarchical_memsw_limit 9223372036854771712 [ 96.008576][ T5835] total_cache 0 [ 96.012691][ T5835] total_rss 0 [ 96.016026][ T5835] total_rss_huge 0 [ 96.019777][ T5835] total_shmem 0 [ 96.023321][ T5835] total_mapped_file 0 [ 96.027375][ T5835] total_dirty 0 [ 96.030922][ T5835] total_writeback 0 [ 96.034857][ T5835] total_workingset_refault_anon 0 [ 96.039956][ T5835] total_workingset_refault_file 0 [ 96.045236][ T5835] total_swap 0 [ 96.048700][ T5835] total_swapcached 0 [ 96.054027][ T5835] total_pgpgin 0 [ 96.058044][ T5835] total_pgpgout 0 [ 96.061775][ T5835] total_pgfault 0 [ 96.141673][ T5835] total_pgmajfault 0 [ 96.163668][ T5835] total_inactive_anon 0 [ 96.197711][ T5835] total_active_anon 0 [ 96.217150][ T5835] total_inactive_file 0 [ 96.242954][ T5835] total_active_file 0 [ 96.262269][ T5835] total_unevictable 0 [ 96.295918][ T5835] anon_cost 0 [ 96.339480][ T5835] file_cost 0 [ 96.358999][ T5835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.39,pid=5834,uid=0 [ 96.384454][ T5835] Memory cgroup out of memory: Killed process 5835 (syz.3.39) total-vm:104228kB, anon-rss:1424kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 97.826473][ T5880] syzkaller1: entered promiscuous mode [ 97.832843][ T5880] syzkaller1: entered allmulticast mode [ 97.892320][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.072149][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 98.085495][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 98.104312][ T10] usb 4-1: config 0 has no interface number 0 [ 98.122169][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 98.136689][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 98.159593][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.186954][ T10] usb 4-1: Product: syz [ 98.207041][ T10] usb 4-1: Manufacturer: syz [ 98.238025][ T10] usb 4-1: SerialNumber: syz [ 98.276943][ T10] usb 4-1: config 0 descriptor?? [ 98.774786][ T5904] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.59'. [ 99.416982][ T5620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 99.428724][ T5620] Bluetooth: hci0: Injecting HCI hardware error event [ 99.437619][ T5620] Bluetooth: hci0: hardware error 0x00 [ 99.542162][ T5680] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 99.691629][ T5923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.724734][ T5680] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 99.735144][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.746358][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 99.763596][ T5680] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.780661][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 99.810679][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 99.822603][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.843696][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 99.861422][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.904149][ T5680] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 99.915551][ T10] usb 4-1: USB disconnect, device number 2 [ 99.931391][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.970823][ T5680] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.996980][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.025799][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 100.065072][ T5680] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 100.083991][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 100.115485][ T5680] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.149328][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.187457][ T5680] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 100.214130][ T5680] usb 1-1: string descriptor 0 read error: -22 [ 100.223964][ T5680] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.238517][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.279596][ T5680] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.977008][ T5954] 0: reclassify loop, rule prio 0, protocol 03 [ 101.493824][ T5620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.793315][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.972451][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.009214][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.056406][ T29] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.095004][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.113470][ T29] usb 5-1: SerialNumber: syz [ 102.248544][ T5975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.376688][ T29] usb 5-1: 0:2 : does not exist [ 102.493207][ T5688] IPVS: starting estimator thread 0... [ 102.531139][ T5984] netlink: 64 bytes leftover after parsing attributes in process `syz.2.84'. [ 102.612373][ T5985] IPVS: using max 30 ests per chain, 72000 per kthread [ 102.627848][ T29] usb 5-1: USB disconnect, device number 3 [ 102.795463][ T5688] usb 1-1: USB disconnect, device number 2 [ 102.807330][ T5679] udevd[5679]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.132491][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 103.196131][ T5680] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.243203][ T5688] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.382051][ T5680] usb 4-1: Using ep0 maxpacket: 8 [ 103.396937][ T5680] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 103.406029][ T5680] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.424048][ T5680] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.438866][ T5680] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.449819][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 103.457571][ T5680] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.472039][ T5680] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.487201][ T5688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.513026][ T5688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.534468][ T5688] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.546000][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.559359][ T5688] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 103.569560][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.593503][ T5688] usb 1-1: Product: syz [ 103.607304][ T5688] usb 1-1: Manufacturer: syz [ 103.621482][ T5688] usb 1-1: SerialNumber: syz [ 103.797898][ T5680] usb 4-1: GET_CAPABILITIES returned 0 [ 103.810608][ T5680] usbtmc 4-1:16.0: can't read capabilities [ 103.867273][ T5688] usb 1-1: unit 4 not found! [ 103.876327][ T5688] usb 1-1: unit 0 not found! [ 104.331147][ T5705] usb 4-1: USB disconnect, device number 3 [ 104.347768][ T5688] usb 1-1: USB disconnect, device number 3 [ 104.812080][ T5680] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.982857][ T5680] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 105.002051][ T5680] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 105.021078][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.036144][ T5680] usb 5-1: config 0 has no interfaces? [ 105.050956][ T5680] usb 5-1: config index 1 descriptor too short (expected 28277, got 36) [ 105.070727][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.083730][ T5680] usb 5-1: config 0 has no interfaces? [ 105.107397][ T5680] usb 5-1: config index 2 descriptor too short (expected 28277, got 36) [ 105.119905][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.144680][ T5680] usb 5-1: config 0 has no interfaces? [ 105.166386][ T5680] usb 5-1: config index 3 descriptor too short (expected 28277, got 36) [ 105.187714][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.210528][ T5680] usb 5-1: config 0 has no interfaces? [ 105.225674][ T5680] usb 5-1: config index 4 descriptor too short (expected 28277, got 36) [ 105.244187][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.268086][ T5680] usb 5-1: config 0 has no interfaces? [ 105.281318][ T5680] usb 5-1: config index 5 descriptor too short (expected 28277, got 36) [ 105.309765][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.340772][ T5680] usb 5-1: config 0 has no interfaces? [ 105.357150][ T5680] usb 5-1: config index 6 descriptor too short (expected 28277, got 36) [ 105.377842][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.402062][ T5680] usb 5-1: config 0 has no interfaces? [ 105.411786][ T5680] usb 5-1: config index 7 descriptor too short (expected 28277, got 36) [ 105.444927][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.471839][ T5680] usb 5-1: config 0 has no interfaces? [ 105.484138][ T5680] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 105.505261][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.537194][ T5680] usb 5-1: config 0 descriptor?? [ 105.754071][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.902229][ T5680] usb 5-1: string descriptor 0 read error: -71 [ 105.932109][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 105.933221][ T5680] usb 5-1: USB disconnect, device number 4 [ 105.970998][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.001665][ T5705] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 106.025010][ T5705] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 106.076713][ T5705] usb 3-1: config 14 has no interface number 0 [ 106.096980][ T5705] usb 3-1: config 14 has no interface number 1 [ 106.112113][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 106.153439][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 106.185589][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 106.210696][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 106.254364][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 106.285412][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.334580][ T5705] usb 3-1: config 14 interface 57 has no altsetting 0 [ 106.354661][ T5705] usb 3-1: config 14 interface 228 has no altsetting 0 [ 106.375554][ T5705] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 106.392921][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.415262][ T5705] usb 3-1: Product: syz [ 106.429071][ T5705] usb 3-1: Manufacturer: syz [ 106.444561][ T5705] usb 3-1: SerialNumber: syz [ 106.772151][ T5663] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.911887][ T5705] legousbtower 3-1:14.57: interrupt endpoints not found [ 106.945368][ T5663] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.962855][ T5663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.988073][ T5663] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.008601][ T5663] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.038104][ T5663] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.053100][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.078367][ T5663] usb 1-1: Product: syz [ 107.088700][ T5663] usb 1-1: Manufacturer: syz [ 107.130968][ T5663] cdc_wdm 1-1:1.0: skipping garbage [ 107.150223][ T5663] cdc_wdm 1-1:1.0: skipping garbage [ 107.227346][ T5663] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 107.237823][ T5663] cdc_wdm 1-1:1.0: Unknown control protocol [ 107.311068][ T5705] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 107.325200][ T5705] legousbtower 3-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 107.393512][ T5680] usb 1-1: USB disconnect, device number 4 [ 107.412688][ T5688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.524462][ T30] audit: type=1800 audit(1786042160.931:2): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.110" name="/" dev="fuse" ino=6 res=0 errno=0 [ 107.584528][ T5688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.608753][ T5688] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.631800][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.657481][ T5688] usb 2-1: config 0 descriptor?? [ 107.668252][ T6064] binder: 6063:6064 ioctl c0306201 0 returned -14 [ 107.745033][ T6065] binder: 6063:6065 ioctl c0306201 0 returned -14 [ 107.896457][ T5688] usbhid 2-1:0.0: can't add hid device: -71 [ 107.912662][ T5688] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.936696][ T5688] usb 2-1: USB disconnect, device number 2 [ 108.009206][ T6069] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 108.362120][ T5688] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.546555][ T5688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.592447][ T5688] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 108.623215][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.671575][ T5688] usb 2-1: config 0 descriptor?? [ 108.757637][ T6083] netlink: 'syz.4.119': attribute type 12 has an invalid length. [ 108.890647][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.924209][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.134267][ T10] usb 3-1: USB disconnect, device number 2 [ 109.195104][ T10] legousbtower 3-1:14.228: LEGO USB Tower #-159 now disconnected [ 109.251221][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 109.553311][ T5688] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 109.585967][ T5688] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 109.966144][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 109.966146][ T5663] usb 2-1: USB disconnect, device number 3 [ 109.983207][ T6110] netlink: 11 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.012093][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.086368][ T6110] macvlan2: entered promiscuous mode [ 110.116040][ T6110] macvlan2: entered allmulticast mode [ 110.151824][ T6115] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 110.192322][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 110.209709][ T29] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 110.233850][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.261027][ T29] usb 3-1: Product: syz [ 110.267552][ T29] usb 3-1: Manufacturer: syz [ 110.280317][ T6115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.284063][ T29] usb 3-1: SerialNumber: syz [ 110.332225][ T29] usb 3-1: config 0 descriptor?? [ 110.368535][ T29] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 110.424008][ T6120] bond1: (slave geneve2): making interface the new active one [ 110.437084][ T6120] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 111.548941][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 111.582452][ T29] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 111.633580][ T29] usb 3-1: USB disconnect, device number 3 [ 112.693009][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.852257][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 112.880131][ T29] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.916321][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.955385][ T29] usb 4-1: config 0 has no interface number 0 [ 112.974512][ T29] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.032918][ T29] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.061086][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.100591][ T29] usb 4-1: Product: syz [ 113.119104][ T29] usb 4-1: Manufacturer: syz [ 113.140968][ T29] usb 4-1: SerialNumber: syz [ 113.185755][ T29] usb 4-1: config 0 descriptor?? [ 113.220615][ T29] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.483462][ T29] usb 4-1: qt2_attach - failed to power on unit: -71 [ 113.515802][ T29] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 113.567051][ T29] usb 4-1: USB disconnect, device number 4 [ 113.891554][ T6174] binder: BINDER_SET_CONTEXT_MGR already set [ 113.920228][ T6174] binder: 6172:6174 ioctl 4018620d 200000004a80 returned -16 [ 114.342441][ T6178] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 114.546989][ T5680] IPVS: starting estimator thread 0... [ 114.628499][ T6178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.652123][ T6187] IPVS: using max 27 ests per chain, 64800 per kthread [ 114.827232][ T6182] bond1: (slave ip6gretap1): making interface the new active one [ 114.869204][ T6182] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 115.754802][ T6214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.132186][ T5663] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.307168][ T5663] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 116.332238][ T5663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.351185][ T5663] usb 3-1: Product: syz [ 116.357203][ T6230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 116.362068][ T5663] usb 3-1: Manufacturer: syz [ 116.411689][ T5663] usb 3-1: SerialNumber: syz [ 116.445105][ T5663] usb 3-1: config 0 descriptor?? [ 116.478221][ T5663] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 117.002879][ T5663] gspca_sunplus: reg_r err -110 [ 117.354535][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 117.384679][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 117.956174][ T5672] usb 3-1: USB disconnect, device number 4 [ 118.293170][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 118.306368][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 118.470382][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.492661][ T5663] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.652104][ T5663] usb 5-1: Using ep0 maxpacket: 16 [ 118.667467][ T5663] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 118.702112][ T5663] usb 5-1: config 0 has no interface number 0 [ 118.724248][ T5663] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 118.751891][ T5663] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 118.780113][ T5663] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 118.796795][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.819636][ T5663] usb 5-1: Product: syz [ 118.832146][ T5663] usb 5-1: Manufacturer: syz [ 118.845519][ T5663] usb 5-1: SerialNumber: syz [ 118.864253][ T5663] usb 5-1: config 0 descriptor?? [ 118.886643][ T6274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.904677][ T6274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.927632][ T6296] binder: 6294:6296 ioctl c0306201 200000000040 returned -14 [ 119.180331][ T6274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.206916][ T6274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.428221][ T5663] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 119.708839][ T6323] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 119.845863][ T6323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.987934][ T6325] bond1: (slave gretap1): making interface the new active one [ 120.018847][ T6325] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 120.442162][ T5663] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.465143][ T5663] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 120.483751][ T5705] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 120.504402][ T5663] asix 5-1:0.34: probe with driver asix failed with error -71 [ 120.552431][ T5663] usb 5-1: USB disconnect, device number 5 [ 120.656351][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 120.675903][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 120.713677][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.733584][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.754914][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.774414][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.811863][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 120.837613][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 120.855890][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 120.863628][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 120.886887][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.899481][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.916849][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.952237][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.964658][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.044294][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 121.073951][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.091239][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.146590][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 121.199768][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.259980][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 121.328265][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 121.378778][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.443484][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 121.475773][ T5705] usb 4-1: string descriptor 0 read error: -22 [ 121.491122][ T5705] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.524000][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.621917][ T5705] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.713482][ T6365] loop5: detected capacity change from 0 to 7 [ 121.753730][ T6365] Dev loop5: unable to read RDB block 7 [ 121.769354][ T6365] loop5: AHDI p1 p2 p3 [ 121.781078][ T6365] loop5: partition table partially beyond EOD, truncated [ 121.820136][ T6365] loop5: p1 start 1818582900 is beyond EOD, truncated [ 121.843232][ T6365] loop5: p3 start 335544320 is beyond EOD, truncated [ 122.222811][ T6376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.490291][ T6382] vivid-004: ================= START STATUS ================= [ 122.559616][ T6382] vivid-004: Radio HW Seek Mode: Bounded [ 122.593131][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.649867][ T6382] vivid-004: Radio Programmable HW Seek: false [ 122.724934][ T6382] vivid-004: RDS Rx I/O Mode: Block I/O [ 122.761776][ T6382] vivid-004: Generate RBDS Instead of RDS: false [ 122.794941][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.812651][ T6382] vivid-004: RDS Reception: true [ 122.835262][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.850635][ T6382] vivid-004: RDS Program Type: 0 inactive [ 122.870894][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.901596][ T6382] vivid-004: RDS PS Name: inactive [ 122.904867][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.961363][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.962433][ T6382] vivid-004: RDS Radio Text: [ 122.984666][ T29] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.012817][ T6382] inactive [ 123.021388][ T6382] vivid-004: RDS Traffic Announcement: false inactive [ 123.037383][ T29] usb 5-1: Manufacturer: syz [ 123.051556][ T6382] vivid-004: RDS Traffic Program: false inactive [ 123.067158][ T29] usb 5-1: config 0 descriptor?? [ 123.072599][ T6382] vivid-004: RDS Music: false inactive [ 123.080785][ T6382] vivid-004: ================== END STATUS ================== [ 123.303081][ T5672] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.358841][ T10] IPVS: starting estimator thread 0... [ 123.462979][ T6394] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.482098][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 123.496849][ T5672] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 123.506420][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.515516][ T5672] usb 2-1: Product: syz [ 123.519779][ T5672] usb 2-1: Manufacturer: syz [ 123.525157][ T5672] usb 2-1: SerialNumber: syz [ 123.542983][ T5672] usb 2-1: config 0 descriptor?? [ 123.560721][ T5672] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 123.578072][ T29] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 123.611018][ T29] appleir 0003:05AC:8243.0001: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 123.997345][ T29] usb 4-1: USB disconnect, device number 5 [ 124.799074][ T5672] gspca_topro: reg_w err -71 [ 124.833840][ T5672] gspca_topro: Sensor soi763a [ 124.860573][ T5672] usb 2-1: USB disconnect, device number 4 [ 125.033299][ T5680] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.202174][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 125.221744][ T5680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.243489][ T5680] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 125.262389][ T5680] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 125.282269][ T5680] usb 4-1: config 14 has no interface number 0 [ 125.293683][ T5680] usb 4-1: config 14 has no interface number 1 [ 125.312181][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 125.332906][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 125.353639][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 125.368920][ T29] usb 5-1: USB disconnect, device number 6 [ 125.379870][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 125.402779][ T5680] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 125.429381][ T5680] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.460997][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.466039][ T5680] usb 4-1: config 14 interface 57 has no altsetting 0 [ 125.485932][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.498531][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.507998][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.516645][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.539351][ T5680] usb 4-1: config 14 interface 228 has no altsetting 0 [ 125.578133][ T5680] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 125.597344][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.608915][ T5680] usb 4-1: Product: syz [ 125.613243][ T5680] usb 4-1: Manufacturer: syz [ 125.617882][ T5680] usb 4-1: SerialNumber: syz [ 126.066960][ T5680] legousbtower 4-1:14.57: interrupt endpoints not found [ 126.084671][ T5663] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.283657][ T5663] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 126.305857][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.329866][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.355779][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.376241][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.393359][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.404851][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.413083][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.427506][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.434773][ T5672] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.447271][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.461207][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.475938][ T5680] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 126.482432][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.504173][ T5680] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 126.511049][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.535874][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.558574][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.583296][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.599310][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.610808][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.628893][ T5672] usb 2-1: Using ep0 maxpacket: 16 [ 126.641470][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.653395][ T5672] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.661473][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.683933][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.693184][ T5672] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.713906][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.719926][ T5672] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 126.736474][ T5663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.750183][ T5663] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.754536][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.783535][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.793971][ T5663] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.808082][ T5663] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.810554][ T5672] usb 2-1: config 0 descriptor?? [ 126.829054][ T5663] usb 3-1: Product: syz [ 126.838055][ T5663] usb 3-1: Manufacturer: syz [ 126.848289][ T5663] usb 3-1: SerialNumber: syz [ 126.857456][ T5663] usb 3-1: config 0 descriptor?? [ 126.880581][ T5663] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 126.937968][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.950306][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.959805][ T6438] bridge_slave_0: entered allmulticast mode [ 126.970135][ T6438] bridge_slave_0: entered promiscuous mode [ 126.982429][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.990034][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.997815][ T6438] bridge_slave_1: entered allmulticast mode [ 127.007624][ T6438] bridge_slave_1: entered promiscuous mode [ 127.090157][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.122317][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.148403][ T5663] usb 3-1: USB disconnect, device number 5 [ 127.187239][ T5663] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 127.266637][ T6438] team0: Port device team_slave_0 added [ 127.275563][ T6438] team0: Port device team_slave_1 added [ 127.295966][ T5672] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 127.342775][ T10] usb 4-1: USB disconnect, device number 6 [ 127.408252][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.425804][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.469934][ T10] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 127.484584][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.526353][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.554815][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.609441][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.657264][ T5610] Bluetooth: hci1: command tx timeout [ 127.736413][ T6438] hsr_slave_0: entered promiscuous mode [ 127.743920][ T6438] hsr_slave_1: entered promiscuous mode [ 127.752621][ T6438] debugfs: 'hsr0' already exists in 'hsr' [ 127.765290][ T6438] Cannot create hsr debugfs directory [ 127.799382][ T29] usb 2-1: USB disconnect, device number 5 [ 127.825085][ T6473] xt_hashlimit: size too large, truncated to 1048576 [ 128.276114][ T6438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.288105][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.298324][ T6438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.308618][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.319057][ T6438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.335145][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.343770][ T6438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.366501][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.431174][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 128.637719][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.721608][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.752011][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.759249][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.827985][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.835372][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.159892][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.303101][ T6438] veth0_vlan: entered promiscuous mode [ 129.331115][ T6438] veth1_vlan: entered promiscuous mode [ 129.355544][ T6511] binder: 6510:6511 unknown command 0 [ 129.367472][ T6511] binder: 6510:6511 ioctl c0306201 200000000180 returned -22 [ 129.397962][ T6438] veth0_macvtap: entered promiscuous mode [ 129.450821][ T6438] veth1_macvtap: entered promiscuous mode [ 129.538138][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.568128][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.647020][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.676672][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.725792][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.742059][ T5610] Bluetooth: hci1: command tx timeout [ 129.796396][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.866749][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.881417][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.953564][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.971927][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.331735][ T6527] netlink: 'syz.4.274': attribute type 19 has an invalid length. [ 130.552713][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.983632][ T5680] IPVS: starting estimator thread 0... [ 131.103776][ T6554] IPVS: using max 24 ests per chain, 57600 per kthread [ 131.293402][ T6552] kvm_intel: kvm [6538]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x98f7 [ 131.325916][ T6552] kvm: kvm [6538]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe0f2 [ 131.358385][ T6552] kvm: kvm [6538]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfe18 [ 131.883408][ T5610] Bluetooth: hci1: command tx timeout [ 132.192141][ T5663] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.245682][ T6570] binder: 6569:6570 ioctl c0306201 2000000001c0 returned -22 [ 132.372080][ T5663] usb 5-1: Using ep0 maxpacket: 8 [ 132.381084][ T5663] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 132.391279][ T5663] usb 5-1: config 179 has no interface number 0 [ 132.399304][ T5663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 132.410936][ T5663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 132.423593][ T5663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.423634][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 132.435437][ T5663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 132.486410][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 132.487658][ T5663] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 132.511799][ T5663] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 132.521410][ T5663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.530277][ T5872] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.540497][ T5872] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.549680][ T6575] Zero length message leads to an empty skb [ 132.562942][ T5872] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.587112][ T6563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.615570][ T5872] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.842298][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 132.903054][ T5705] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 132.935971][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943927][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028064][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.073410][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.114194][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.135412][ T5672] usb 5-1: USB disconnect, device number 7 [ 133.135422][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.150235][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.188125][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.251352][ T10] usb 3-1: config 0 descriptor?? [ 133.289046][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 133.330517][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 133.368952][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 133.386341][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 133.398874][ T10] usb 3-1: media controller created [ 133.407449][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.422508][ T5705] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.464932][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 133.471067][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 133.509098][ T6577] dvb-usb: bulk message failed: -22 (2/0) [ 133.518626][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 133.545908][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 133.556896][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 133.571149][ T10] usb 3-1: USB disconnect, device number 6 [ 133.592566][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.615868][ T5705] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 133.628131][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.648653][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 133.671565][ T5705] usb 4-1: config 0 descriptor?? [ 133.703483][ T5705] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 133.752182][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.760281][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 133.769349][ T29] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 133.778554][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 133.788493][ T29] usb 2-1: Product: syz [ 133.792967][ T29] usb 2-1: Manufacturer: syz [ 133.797637][ T29] usb 2-1: SerialNumber: syz [ 133.805532][ T29] usb 2-1: config 0 descriptor?? [ 133.817548][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 133.892452][ T5610] Bluetooth: hci1: command tx timeout [ 133.925584][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.936119][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.953593][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.962905][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.970971][ T24] usb 6-1: Product: syz [ 133.976453][ T24] usb 6-1: Manufacturer: syz [ 133.981127][ T24] usb 6-1: SerialNumber: syz [ 134.208270][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.249273][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.290903][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 134.327030][ T24] usb 6-1: USB disconnect, device number 2 [ 134.334425][ T29] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 134.347691][ T29] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 134.799300][ T29] usb 2-1: USB disconnect, device number 6 [ 134.892103][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.917820][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 134.927897][ T5705] gspca_stv06xx: I2C: Read error writing address: -71 [ 134.965119][ T5705] usb 4-1: USB disconnect, device number 7 [ 135.053469][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 135.065406][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 135.074182][ T24] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 135.087486][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.098219][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.112980][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.125780][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.137376][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.148327][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.380276][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 135.396946][ T24] usbtmc 6-1:16.0: can't read capabilities [ 135.621703][ T5705] usb 6-1: USB disconnect, device number 3 [ 137.152090][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.334020][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 137.369226][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.413881][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.460916][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.501726][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.598131][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.738601][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.787922][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.839637][ T24] usb 5-1: Manufacturer: syz [ 137.900405][ T24] usb 5-1: config 0 descriptor?? [ 138.294813][ T24] rc_core: IR keymap rc-hauppauge not found [ 138.316316][ T24] Registered IR keymap rc-empty [ 138.327573][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.374503][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.385927][ T6685] netlink: 64 bytes leftover after parsing attributes in process `syz.3.322'. [ 138.407506][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 138.447372][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 138.465282][ T6689] syzkaller1: entered promiscuous mode [ 138.483660][ T6689] syzkaller1: entered allmulticast mode [ 138.509463][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.552431][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.582256][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.622466][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.653840][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.692914][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.740599][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.784909][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.843019][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.873654][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.917061][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 138.928381][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 138.960024][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.971514][ T6701] kAFS: unable to lookup cell 'ÿ' [ 138.982086][ T6701] kAFS: unable to lookup cell '(,c¾Ì' [ 138.997014][ T24] usb 5-1: USB disconnect, device number 8 [ 139.362098][ T5672] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.412611][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.502304][ T5680] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.525825][ T5672] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.542912][ T5672] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.563934][ T5672] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.582074][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 139.589069][ T5672] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 139.610034][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.630360][ T5672] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 139.644892][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 139.659329][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 139.669974][ T5680] usb 4-1: Using ep0 maxpacket: 16 [ 139.676736][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.677159][ T5672] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.704043][ T5680] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 139.719259][ T5680] usb 4-1: config 0 has no interface number 0 [ 139.730805][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.741049][ T5680] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 139.751818][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.765770][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.775838][ T5680] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 139.786057][ T5672] usb 3-1: Product: syz [ 139.796379][ T10] usb 6-1: SerialNumber: syz [ 139.801142][ T5672] usb 3-1: Manufacturer: syz [ 139.811835][ T6708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 139.822670][ T5680] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 139.836420][ T6708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 139.845353][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.856453][ T5672] cdc_wdm 3-1:1.0: skipping garbage [ 139.871065][ T5672] cdc_wdm 3-1:1.0: skipping garbage [ 139.887149][ T5680] usb 4-1: Product: syz [ 139.894170][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 139.900684][ T5680] usb 4-1: Manufacturer: syz [ 139.905744][ T5672] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 139.912878][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 139.920108][ T5680] usb 4-1: SerialNumber: syz [ 139.925404][ T5672] cdc_wdm 3-1:1.0: Unknown control protocol [ 139.940586][ T5680] usb 4-1: config 0 descriptor?? [ 139.958373][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.963513][ T6710] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.972387][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.991459][ T6710] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.080990][ T5672] usb 3-1: USB disconnect, device number 7 [ 140.115262][ T6708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 140.156106][ T6708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 140.232529][ T6710] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.242840][ T6710] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.266966][ T6725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.354703][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.391871][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.458843][ T5680] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 140.792056][ T6727] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.812895][ T6671] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.822308][ T10] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 140.860799][ T6671] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.899972][ T6671] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.917666][ T6671] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.995064][ T6727] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.018193][ T6727] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.060673][ T6727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.089417][ T6727] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.111273][ T6727] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.126733][ T6727] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.142066][ T6727] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.160975][ T6727] usb 3-1: Product: syz [ 141.170825][ T6727] usb 3-1: Manufacturer: syz [ 141.196611][ T6727] cdc_wdm 3-1:1.0: skipping garbage [ 141.208083][ T6727] cdc_wdm 3-1:1.0: skipping garbage [ 141.217751][ T6727] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 141.225485][ T6727] cdc_wdm 3-1:1.0: Unknown control protocol [ 141.401479][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.407263][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.413338][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.422014][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.427920][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.434062][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.442012][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.447899][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.453799][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.459689][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.467747][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.475836][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.482006][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.487919][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.494916][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.500938][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.506864][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.512780][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.520458][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.526541][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.533720][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.539460][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.546215][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.553695][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.559901][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.566034][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.573363][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.579094][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.585704][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.593289][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.599018][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.604822][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.610707][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.616425][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.622359][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.628077][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.634179][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.639908][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.645928][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.651649][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.657874][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.663578][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.671573][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.677322][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.684545][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.690281][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.696140][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.702032][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.707909][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.713802][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.719826][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.725738][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.731616][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.737522][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.743477][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.749366][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.755276][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.761165][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.767055][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.772984][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.780037][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.785974][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.791886][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.797872][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.804955][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.811329][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.817219][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.823145][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.829053][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.835016][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.840960][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.847074][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.852970][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.858860][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.865559][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.871470][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.879882][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.885638][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.892117][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.899439][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.905913][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.911641][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.917519][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.923583][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.929322][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.935115][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.941008][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.946737][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.952562][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.958448][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.964337][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.970226][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.976366][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.983843][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 141.989576][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 141.995749][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 142.001817][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 142.007728][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 142.013461][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 142.019316][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 142.025048][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 142.030982][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 142.037670][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 142.047502][ T5680] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 142.050731][ T24] usb 3-1: USB disconnect, device number 8 [ 142.057694][ T5680] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 142.058210][ T5680] asix 4-1:0.34: probe with driver asix failed with error -71 [ 142.089921][ T5680] usb 4-1: USB disconnect, device number 8 [ 142.352382][ T5663] usb 6-1: USB disconnect, device number 4 [ 142.391541][ T5663] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 143.016257][ T30] audit: type=1800 audit(1786042196.421:3): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.347" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 143.116440][ T6790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 143.313100][ T30] audit: type=1326 audit(1786042196.721:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.3.350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bb419e0d9 code=0x0 [ 143.886162][ T6814] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 144.902586][ T5663] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.046990][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.072749][ T6851] bond1: (slave ip6erspan0): making interface the new active one [ 145.084297][ T5663] usb 5-1: Using ep0 maxpacket: 32 [ 145.095753][ T5663] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.112365][ T5663] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 145.128714][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.364'. [ 145.131151][ T5663] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 145.146098][ T5663] usb 5-1: config 14 has no interface number 0 [ 145.152393][ T5663] usb 5-1: config 14 has no interface number 1 [ 145.160353][ T5663] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 145.171701][ T5663] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 145.189170][ T5663] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 145.201722][ T6851] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 145.211567][ T5663] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 145.246469][ T5663] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 145.288827][ T5663] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.330820][ T5663] usb 5-1: config 14 interface 57 has no altsetting 0 [ 145.364397][ T5663] usb 5-1: config 14 interface 228 has no altsetting 0 [ 145.398803][ T5663] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 145.428762][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.472841][ T5663] usb 5-1: Product: syz [ 145.530497][ T5663] usb 5-1: Manufacturer: syz [ 145.541757][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.366'. [ 145.562030][ T5663] usb 5-1: SerialNumber: syz [ 145.812579][ T6864] netlink: 64 bytes leftover after parsing attributes in process `syz.5.368'. [ 145.836074][ T6864] netlink: 64 bytes leftover after parsing attributes in process `syz.5.368'. [ 146.051475][ T5663] legousbtower 5-1:14.57: interrupt endpoints not found [ 146.465149][ T5663] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 146.481317][ T5663] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 147.012612][ T5663] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.183721][ T5663] usb 3-1: Using ep0 maxpacket: 8 [ 147.194746][ T5663] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 147.206901][ T5663] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.218344][ T5663] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.229488][ T5663] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.243039][ T5663] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.257649][ T5663] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.289043][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.322454][ T54] usb 5-1: USB disconnect, device number 9 [ 147.369397][ T54] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 147.559451][ T5663] usb 3-1: usb_control_msg returned -32 [ 147.565440][ T5663] usbtmc 3-1:16.0: can't read capabilities [ 147.915481][ T5663] usb 3-1: USB disconnect, device number 9 [ 147.921862][ T6882] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 147.929616][ T6893] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 148.402137][ T5663] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.582184][ T5663] usb 5-1: Using ep0 maxpacket: 32 [ 148.590185][ T5663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.633016][ T5663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.654966][ T5663] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.674425][ T5663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.716888][ T5663] usb 5-1: config 0 descriptor?? [ 148.751305][ T5663] hub 5-1:0.0: USB hub found [ 148.950081][ T5663] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 149.142121][ T5687] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.308371][ T5687] usb 4-1: not running at top speed; connect to a high speed hub [ 149.337010][ T5687] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 149.367905][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.376288][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 149.395618][ T5663] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 149.397006][ T5687] usb 4-1: Product: syz [ 149.411133][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 149.438152][ T5687] usb 4-1: Manufacturer: syz [ 149.447895][ T5663] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 149.458584][ T5687] usb 4-1: SerialNumber: syz [ 149.825662][ T5680] usb 5-1: USB disconnect, device number 10 [ 151.080992][ T6958] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 151.130310][ T6958] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 151.206467][ T6960] netlink: 64 bytes leftover after parsing attributes in process `syz.1.402'. [ 151.218383][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.404'. [ 151.798514][ T24] usb 4-1: USB disconnect, device number 9 [ 152.782085][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.932392][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 152.949134][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.968843][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.982986][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.014336][ T24] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 153.033521][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.051792][ T24] usb 4-1: Product: syz [ 153.063139][ T24] usb 4-1: Manufacturer: syz [ 153.074333][ T24] usb 4-1: SerialNumber: syz [ 153.293201][ T7003] batman_adv: batadv0: Adding interface: dummy0 [ 153.304174][ T7003] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.331866][ T24] usb 4-1: unit 4 not found! [ 153.346538][ T24] usb 4-1: unit 0 not found! [ 153.368529][ T7003] batman_adv: batadv0: Interface activated: dummy0 [ 153.763136][ T5680] usb 4-1: USB disconnect, device number 10 [ 154.481321][ T7022] loop2: detected capacity change from 0 to 7 [ 154.525703][ T7022] Dev loop2: unable to read RDB block 7 [ 154.537271][ T7022] loop2: AHDI p1 p2 [ 154.547786][ T7022] loop2: partition table partially beyond EOD, truncated [ 155.692114][ T5687] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.852027][ T5687] usb 5-1: Using ep0 maxpacket: 8 [ 155.877820][ T5687] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.920376][ T5687] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.960858][ T5687] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 155.998387][ T5687] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 156.025561][ T5687] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 156.053754][ T5687] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.082096][ T5687] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.101036][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.236477][ T7063] bridge0: port 3(veth0) entered blocking state [ 156.245555][ T7063] bridge0: port 3(veth0) entered disabled state [ 156.252295][ T7063] veth0: entered allmulticast mode [ 156.275801][ T7063] veth0: entered promiscuous mode [ 156.281888][ T7063] bridge0: port 3(veth0) entered blocking state [ 156.288626][ T7063] bridge0: port 3(veth0) entered forwarding state [ 156.304114][ T7065] bridge0: port 4(veth1) entered blocking state [ 156.311423][ T7065] bridge0: port 4(veth1) entered disabled state [ 156.321156][ T7065] veth1: entered allmulticast mode [ 156.329416][ T7065] veth1: entered promiscuous mode [ 156.335570][ T7065] bridge0: port 4(veth1) entered blocking state [ 156.342480][ T7065] bridge0: port 4(veth1) entered forwarding state [ 156.455649][ T5687] usb 5-1: GET_CAPABILITIES returned 0 [ 156.462175][ T5687] usbtmc 5-1:16.0: can't read capabilities [ 156.676973][ T5663] usb 5-1: USB disconnect, device number 11 [ 157.203318][ T7088] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 157.352073][ T5663] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 157.513089][ T5663] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 157.523095][ T6727] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 157.546690][ T5663] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 157.590812][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.644006][ T5663] usb 2-1: config 0 has no interfaces? [ 157.684398][ T5663] usb 2-1: config index 1 descriptor too short (expected 28277, got 36) [ 157.731903][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.778635][ T5663] usb 2-1: config 0 has no interfaces? [ 157.800367][ T5663] usb 2-1: config index 2 descriptor too short (expected 28277, got 36) [ 157.830091][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.878235][ T5663] usb 2-1: config 0 has no interfaces? [ 157.911657][ T5663] usb 2-1: config index 3 descriptor too short (expected 28277, got 36) [ 157.949093][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.993200][ T5663] usb 2-1: config 0 has no interfaces? [ 158.016955][ T5663] usb 2-1: config index 4 descriptor too short (expected 28277, got 36) [ 158.044925][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.071697][ T6727] usb 6-1: Using ep0 maxpacket: 16 [ 158.080337][ T5663] usb 2-1: config 0 has no interfaces? [ 158.111706][ T5663] usb 2-1: config index 5 descriptor too short (expected 28277, got 36) [ 158.154604][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.207971][ T5663] usb 2-1: config 0 has no interfaces? [ 158.230692][ T5663] usb 2-1: config index 6 descriptor too short (expected 28277, got 36) [ 158.275309][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.329600][ T5663] usb 2-1: config 0 has no interfaces? [ 158.356384][ T5663] usb 2-1: config index 7 descriptor too short (expected 28277, got 36) [ 158.381423][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.403762][ T5663] usb 2-1: config 0 has no interfaces? [ 158.409517][ T5663] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 158.423861][ T5663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.445004][ T5663] usb 2-1: config 0 descriptor?? [ 158.679435][ T6727] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 158.705172][ T6727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.754722][ T6727] usb 6-1: Product: syz [ 158.775246][ T6727] usb 6-1: Manufacturer: syz [ 158.779924][ T6727] usb 6-1: SerialNumber: syz [ 158.852874][ T5663] usb 2-1: string descriptor 0 read error: -71 [ 158.904790][ T5663] usb 2-1: USB disconnect, device number 7 [ 158.952243][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.154032][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 159.168945][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 159.203896][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.226757][ T24] usb 5-1: Product: syz [ 159.236651][ T24] usb 5-1: Manufacturer: syz [ 159.247953][ T24] usb 5-1: SerialNumber: syz [ 159.300526][ T24] usb 5-1: config 0 descriptor?? [ 159.325567][ T24] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 160.028933][ T7113] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 160.304849][ T7113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.470488][ T7116] bond1: (slave geneve2): making interface the new active one [ 160.486551][ T7116] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 160.567954][ T24] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 160.614387][ T24] usb 5-1: USB disconnect, device number 12 [ 160.901271][ T6727] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.926827][ T6727] usb 6-1: MIDIStreaming interface descriptor not found [ 162.464095][ T7148] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 162.770205][ T7148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.053572][ T7152] bond2: (slave ip6gretap1): making interface the new active one [ 163.091669][ T7152] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 163.108759][ T6727] usb 6-1: USB disconnect, device number 5 [ 163.165952][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 163.281864][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.474'. [ 163.715507][ T7166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 164.470094][ T7181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.080600][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.811954][ C0] sched: DL replenish lagged too much [ 175.632554][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.645071][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.659113][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.670944][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.682798][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.694748][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.706551][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.718357][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.730140][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.741964][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.642347][ C1] net_ratelimit: 8117 callbacks suppressed [ 180.642370][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.660072][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.671829][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.683575][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.695320][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.708635][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.720428][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.732219][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.743961][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.755721][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.652208][ C1] net_ratelimit: 8147 callbacks suppressed [ 185.652229][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.669929][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.681783][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.693731][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.705575][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.717381][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.729185][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.740982][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.752822][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.764617][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.662466][ C1] net_ratelimit: 8209 callbacks suppressed [ 190.662486][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.680099][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.691892][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.703688][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.715511][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.727328][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739063][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.750814][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.762938][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.774718][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.439631][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.460828][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.672091][ C1] net_ratelimit: 8382 callbacks suppressed [ 195.672113][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.689728][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.701541][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.713747][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.725521][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.737310][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.749061][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.760832][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.772591][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.784462][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.682115][ C1] net_ratelimit: 8368 callbacks suppressed [ 200.682136][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.699764][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.711543][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.723292][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.735231][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.747515][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.759324][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.771138][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.782911][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.795723][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.692071][ C1] net_ratelimit: 8144 callbacks suppressed [ 205.692094][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.709847][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.721709][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.733530][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.745334][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.757249][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769072][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.780919][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.792733][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.804526][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.421697][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 208.441840][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 208.466790][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 210.702289][ C1] net_ratelimit: 8548 callbacks suppressed [ 210.702310][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.705025][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.709679][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.720744][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.732122][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.749799][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.754364][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.765384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.777187][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.802671][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.712071][ C0] net_ratelimit: 10633 callbacks suppressed [ 215.712092][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.713012][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.723274][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 215.730881][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.746164][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.754027][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.765210][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.776324][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.791178][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 215.798601][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.722034][ C0] net_ratelimit: 11570 callbacks suppressed [ 220.722055][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.722609][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.733234][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 220.740864][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.755321][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.763250][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.774117][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.785429][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 220.799792][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 220.807571][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.732286][ C1] net_ratelimit: 11807 callbacks suppressed [ 225.732308][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 225.732585][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.739873][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.750915][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.762279][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.776807][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 225.784683][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.798928][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.806785][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.817771][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.742100][ C1] net_ratelimit: 11575 callbacks suppressed [ 230.742123][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.742911][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 230.749936][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.767867][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.772144][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 230.783410][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.794235][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.809842][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 230.816973][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.835399][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.751968][ C1] net_ratelimit: 10852 callbacks suppressed [ 235.751989][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.753020][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.760116][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.770726][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.782429][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 235.796728][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 235.804497][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.825185][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.838052][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.848811][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.761975][ C1] net_ratelimit: 10347 callbacks suppressed [ 240.761997][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.768791][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.780862][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.792104][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.803326][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 240.817798][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 240.825756][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.845780][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.847681][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.858773][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.772281][ C1] net_ratelimit: 10390 callbacks suppressed [ 245.772307][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.774426][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.779976][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.791189][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.802415][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.816818][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 245.824528][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 245.845534][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.858220][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.869109][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.782002][ C1] net_ratelimit: 10387 callbacks suppressed [ 250.782025][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 250.782033][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.783528][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.790392][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.804991][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 250.812065][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.833152][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.845382][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.856335][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.867594][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.727459][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 255.792371][ C1] net_ratelimit: 10402 callbacks suppressed [ 255.792394][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 255.799394][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.811271][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.822327][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.833485][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.848360][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 255.855843][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.876792][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.877889][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.889605][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.115267][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.133145][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.802417][ C1] net_ratelimit: 10677 callbacks suppressed [ 260.802439][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.805268][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 260.809808][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.831139][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.843629][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 260.854575][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.865614][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.880504][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 260.888102][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.908890][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.812177][ C1] net_ratelimit: 10376 callbacks suppressed [ 265.812203][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.814320][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 265.819615][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.841307][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.853237][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 265.864436][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.875571][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.890217][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 265.898082][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.918759][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.822109][ C1] net_ratelimit: 10237 callbacks suppressed [ 270.822132][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.822996][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 270.829723][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.850649][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.863341][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 270.874301][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.885465][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.901637][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 270.907985][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.928692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.832003][ C1] net_ratelimit: 10281 callbacks suppressed [ 275.832033][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.835193][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 275.839605][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.859932][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.873112][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.884330][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.895722][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 275.909818][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 275.917888][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.938232][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.842215][ C1] net_ratelimit: 10494 callbacks suppressed [ 280.842237][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 280.848424][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.860802][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.872227][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.883740][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.898918][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 280.905772][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.927149][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.928499][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.939874][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.852350][ C1] net_ratelimit: 10882 callbacks suppressed [ 285.852372][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.853583][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 285.859989][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 285.880529][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.882289][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.893299][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.904743][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.918980][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 285.927006][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.946761][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.862389][ C1] net_ratelimit: 10512 callbacks suppressed [ 290.862411][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.863391][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 290.869767][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 290.891020][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.903650][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.914700][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.925876][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.940678][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 290.947933][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.969737][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.872270][ C1] net_ratelimit: 10502 callbacks suppressed [ 295.872292][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.874502][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 295.879891][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.903256][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.913471][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 295.924683][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.935431][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.950305][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 295.958163][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.978908][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.882322][ C1] net_ratelimit: 10979 callbacks suppressed [ 300.882344][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 300.890108][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.901030][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.912168][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.923531][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.937704][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 300.945881][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.966590][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.968132][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.979330][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.891988][ C1] net_ratelimit: 10698 callbacks suppressed [ 305.892010][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.901286][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.910583][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.921665][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.932921][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.948268][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 305.955576][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 305.976760][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.976906][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.989614][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.902301][ C1] net_ratelimit: 10119 callbacks suppressed [ 310.902329][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.904703][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 310.910065][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.930620][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.943702][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 310.954667][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.966043][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.980035][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 310.988416][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.008271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.912344][ C1] net_ratelimit: 10755 callbacks suppressed [ 315.912367][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.912396][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.920020][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.931245][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.942253][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.958272][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 315.964435][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 315.985427][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.997791][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.009011][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.141887][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 317.148893][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7252/1:b..l [ 317.157276][ C1] rcu: (detected by 1, t=10503 jiffies, g=31293, q=1526 ncpus=2) [ 317.165130][ C1] task:syz.4.504 state:R running task stack:25752 pid:7252 tgid:7250 ppid:5624 task_flags:0x40044c flags:0x00080001 [ 317.179720][ C1] Call Trace: [ 317.183046][ C1] [ 317.186011][ C1] __schedule+0x17d9/0x56c0 [ 317.190580][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.195570][ C1] ? __pfx___schedule+0x10/0x10 [ 317.200476][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.205471][ C1] preempt_schedule_irq+0x4d/0xa0 [ 317.210542][ C1] irqentry_exit+0x14f/0x8f0 [ 317.215173][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.220249][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.226266][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 317.233168][ C1] Code: cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 28 19 a5 11 <65> 8b 0d 49 19 a5 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 317.252808][ C1] RSP: 0018:ffffc90005f1f160 EFLAGS: 00000246 [ 317.258917][ C1] RAX: ffffffff82060db7 RBX: ffffea0001c79040 RCX: 0000000000000046 [ 317.266924][ C1] RDX: ffff8880301f5d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.274933][ C1] RBP: 0000000000000000 R08: ffffea0001c79077 R09: 1ffffd400038f20e [ 317.282951][ C1] R10: dffffc0000000000 R11: fffff9400038f20f R12: ffff888054ae8380 [ 317.290960][ C1] R13: 1ffff92000be3e48 R14: ffffc90005f1f240 R15: ffff88805568cdc0 [ 317.298982][ C1] ? xas_reload+0x107/0x470 [ 317.303543][ C1] xas_reload+0x107/0x470 [ 317.307914][ C1] find_lock_entries+0x483/0xad0 [ 317.312894][ C1] ? find_lock_entries+0x12a/0xad0 [ 317.318045][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 317.323549][ C1] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 317.329937][ C1] shmem_undo_range+0x2c7/0x15d0 [ 317.334931][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 317.340348][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.345352][ C1] ? unwind_next_frame+0x8f/0x2550 [ 317.350531][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.355516][ C1] ? percpu_counter_add_batch+0xec/0x1d0 [ 317.361203][ C1] shmem_evict_inode+0x280/0xa80 [ 317.366188][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 317.371947][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 317.377491][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 317.383594][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.388691][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 317.393845][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 317.399383][ C1] evict+0x624/0xb50 [ 317.403327][ C1] ? __pfx_evict+0x10/0x10 [ 317.407777][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 317.412927][ C1] ? _raw_spin_unlock+0x28/0x50 [ 317.417830][ C1] ? iput+0xb84/0xf00 [ 317.421866][ C1] dentry_kill+0x1b9/0x880 [ 317.426316][ C1] finish_dput+0x1a/0x260 [ 317.430697][ C1] __fput+0x675/0xa50 [ 317.434733][ C1] task_work_run+0x1d9/0x270 [ 317.439373][ C1] ? __pfx_task_work_run+0x10/0x10 [ 317.444533][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 317.449696][ C1] do_exit+0x73a/0x2360 [ 317.453905][ C1] ? __pfx_do_exit+0x10/0x10 [ 317.458538][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.463610][ C1] do_group_exit+0x22d/0x2f0 [ 317.468246][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.473510][ C1] get_signal+0x121b/0x12c0 [ 317.478078][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 317.483708][ C1] ? __pfx_task_work_add+0x10/0x10 [ 317.488864][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.495180][ C1] ? __fput_deferred+0x216/0x380 [ 317.500171][ C1] exit_to_user_mode_loop+0x104/0x730 [ 317.505585][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.510401][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.516514][ C1] do_syscall_64+0x353/0x580 [ 317.521145][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.526209][ C1] ? clear_bhb_loop+0x40/0x90 [ 317.530934][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.536864][ C1] RIP: 0033:0x7f8f0599e0d9 [ 317.541316][ C1] RSP: 002b:00007f8f06895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.549769][ C1] RAX: 0000000000000000 RBX: 00007f8f05c25fa0 RCX: 00007f8f0599e0d9 [ 317.557777][ C1] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 317.565804][ C1] RBP: 00007f8f05a35024 R08: 0000000000000000 R09: 0000000000000000 [ 317.573851][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.581863][ C1] R13: 00007f8f05c26038 R14: 00007f8f05c25fa0 R15: 00007f8f05d4fa48 [ 317.589888][ C1] [ 317.592949][ C1] rcu: rcu_preempt kthread starved for 1866 jiffies! g31293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 317.604123][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 317.614123][ C1] rcu: RCU grace-period kthread stack dump: [ 317.620038][ C1] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 317.633584][ C1] Call Trace: [ 317.636898][ C1] [ 317.639866][ C1] __schedule+0x17d9/0x56c0 [ 317.644432][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.649470][ C1] ? __pfx___schedule+0x10/0x10 [ 317.654382][ C1] ? schedule+0x90/0x2b0 [ 317.658681][ C1] schedule+0x164/0x2b0 [ 317.662887][ C1] schedule_timeout+0x152/0x2c0 [ 317.667785][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 317.673220][ C1] ? __pfx_process_timeout+0x10/0x10 [ 317.678551][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.684405][ C1] ? prepare_to_swait_event+0x322/0x350 [ 317.690004][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 317.694911][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 317.701110][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 317.706475][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 317.711729][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 317.717604][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 317.722255][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 317.727498][ C1] ? __kthread_parkme+0x71/0x1f0 [ 317.732491][ C1] ? __kthread_parkme+0x196/0x1f0 [ 317.737565][ C1] kthread+0x388/0x470 [ 317.741679][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 317.746912][ C1] ? __pfx_kthread+0x10/0x10 [ 317.751541][ C1] ret_from_fork+0x514/0xb70 [ 317.756185][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 317.761373][ C1] ? __switch_to+0xc89/0x1420 [ 317.766127][ C1] ? __pfx_kthread+0x10/0x10 [ 317.770767][ C1] ret_from_fork_asm+0x1a/0x30 [ 317.775603][ C1] [ 317.778660][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 317.785017][ C1] Sending NMI from CPU 1 to CPUs 0: [ 317.790272][ C0] NMI backtrace for cpu 0 [ 317.790297][ C0] CPU: 0 UID: 0 PID: 3219 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 317.790321][ C0] Tainted: [L]=SOFTLOCKUP [ 317.790328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.790339][ C0] Workqueue: bat_events batadv_dat_purge [ 317.790367][ C0] RIP: 0010:memset_orig+0x75/0xb0 [ 317.790388][ C0] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 317.790404][ C0] RSP: 0018:ffffc90000006658 EFLAGS: 00000202 [ 317.790419][ C0] RAX: 0000000000000000 RBX: ffffc90000006758 RCX: 0000000000000001 [ 317.790431][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000006758 [ 317.790442][ C0] RBP: 1ffffffff21ddefd R08: ffffc90000006767 R09: 0000000000000000 [ 317.790454][ C0] R10: ffffc90000006758 R11: fffff52000000ced R12: dffffc0000000000 [ 317.790467][ C0] R13: ffffffff90eef7e8 R14: ffffc90000006708 R15: ffffc90000006750 [ 317.790480][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 317.790494][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.790506][ C0] CR2: 00007ff3f1626b73 CR3: 000000000e946000 CR4: 00000000003526f0 [ 317.790521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.790532][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 317.790542][ C0] Call Trace: [ 317.790549][ C0] [ 317.790555][ C0] unwind_next_frame+0xd04/0x2550 [ 317.790576][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 317.790596][ C0] ? unwind_next_frame+0x8f/0x2550 [ 317.790613][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.790634][ C0] arch_stack_walk+0x11b/0x150 [ 317.790664][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 317.790688][ C0] stack_trace_save+0xa9/0x100 [ 317.790707][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 317.790725][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 317.790747][ C0] ? __lock_acquire+0x683/0x2cf0 [ 317.790771][ C0] kasan_save_track+0x3e/0x80 [ 317.790792][ C0] ? kasan_save_track+0x3e/0x80 [ 317.790811][ C0] ? kasan_save_free_info+0x40/0x50 [ 317.790827][ C0] ? __kasan_slab_free+0x5c/0x80 [ 317.790847][ C0] ? kmem_cache_free+0x182/0x650 [ 317.790868][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 317.790885][ C0] ? NF_HOOK+0x64e/0x6e0 [ 317.790908][ C0] ? br_nf_post_routing+0xa53/0xee0 [ 317.790933][ C0] ? nf_hook_slow+0xc5/0x220 [ 317.790951][ C0] ? NF_HOOK+0x23e/0x3f0 [ 317.790973][ C0] ? br_forward_finish+0xd3/0x130 [ 317.790995][ C0] ? br_nf_forward_finish+0xa76/0xea0 [ 317.791011][ C0] ? NF_HOOK+0x64e/0x6e0 [ 317.791034][ C0] ? br_nf_forward_ip+0x7eb/0xa30 [ 317.791048][ C0] ? nf_hook_slow+0xc5/0x220 [ 317.791066][ C0] ? NF_HOOK+0x23e/0x3f0 [ 317.791087][ C0] ? __br_forward+0x397/0x540 [ 317.791109][ C0] ? br_flood+0x3e6/0x8d0 [ 317.791130][ C0] ? br_handle_frame_finish+0x1175/0x1990 [ 317.791162][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 317.791186][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 317.791203][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 317.791219][ C0] ? br_handle_frame+0x127f/0x1510 [ 317.791244][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 317.791266][ C0] ? process_backlog+0x706/0x1860 [ 317.791287][ C0] ? __napi_poll+0xaa/0x330 [ 317.791305][ C0] ? net_rx_action+0x61d/0xf50 [ 317.791326][ C0] ? handle_softirqs+0x225/0x840 [ 317.791343][ C0] ? do_softirq+0x76/0xd0 [ 317.791359][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 317.791391][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 317.791407][ C0] kasan_save_free_info+0x40/0x50 [ 317.791424][ C0] __kasan_slab_free+0x5c/0x80 [ 317.791445][ C0] kmem_cache_free+0x182/0x650 [ 317.791465][ C0] ? __skb_ext_put+0x221/0x2f0 [ 317.791489][ C0] ? __skb_ext_del+0x271/0x390 [ 317.791515][ C0] br_nf_dev_queue_xmit+0x4f6/0x2540 [ 317.791538][ C0] ? NF_HOOK+0xa2/0x6e0 [ 317.791562][ C0] NF_HOOK+0x64e/0x6e0 [ 317.791589][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 317.791615][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 317.791631][ C0] ? net_generic+0x1e/0x240 [ 317.791657][ C0] ? net_generic+0x1e/0x240 [ 317.791683][ C0] br_nf_post_routing+0xa53/0xee0 [ 317.791709][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 317.791727][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 317.791754][ C0] nf_hook_slow+0xc5/0x220 [ 317.791774][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 317.791798][ C0] NF_HOOK+0x23e/0x3f0 [ 317.791822][ C0] ? NF_HOOK+0xa2/0x3f0 [ 317.791844][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 317.791868][ C0] ? net_generic+0x1e/0x240 [ 317.791892][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 317.791919][ C0] ? net_generic+0x1e/0x240 [ 317.791944][ C0] br_forward_finish+0xd3/0x130 [ 317.791966][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 317.791991][ C0] br_nf_forward_finish+0xa76/0xea0 [ 317.792012][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 317.792030][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 317.792055][ C0] ? NF_HOOK+0xa2/0x6e0 [ 317.792079][ C0] ? NF_HOOK+0xa2/0x6e0 [ 317.792103][ C0] NF_HOOK+0x64e/0x6e0 [ 317.792130][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 317.792159][ C0] ? net_generic+0x1e/0x240 [ 317.792184][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 317.792202][ C0] ? net_generic+0x1e/0x240 [ 317.792225][ C0] ? net_generic+0x1e/0x240 [ 317.792252][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 317.792267][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 317.792283][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 317.792309][ C0] nf_hook_slow+0xc5/0x220 [ 317.792329][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 317.792351][ C0] NF_HOOK+0x23e/0x3f0 [ 317.792375][ C0] ? NF_HOOK+0xa2/0x3f0 [ 317.792396][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 317.792419][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 317.792444][ C0] ? br_handle_vlan+0x5e/0x530 [ 317.792466][ C0] __br_forward+0x397/0x540 [ 317.792487][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 317.792512][ C0] br_flood+0x3e6/0x8d0 [ 317.792541][ C0] br_handle_frame_finish+0x1175/0x1990 [ 317.792566][ C0] ? kasan_save_track+0x4f/0x80 [ 317.792592][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 317.792621][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 317.792641][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 317.792662][ C0] ? nf_hook_slow+0x176/0x220 [ 317.792682][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 317.792708][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 317.792734][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 317.792755][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 317.792781][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 317.792808][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 317.792825][ C0] ? lock_acquire+0x106/0x350 [ 317.792849][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 317.792866][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 317.792896][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 317.792914][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 317.792931][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 317.792950][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 317.792967][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 317.792997][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 317.793022][ C0] br_handle_frame+0x127f/0x1510 [ 317.793052][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 317.793080][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 317.793127][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 317.793153][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.793172][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 317.793197][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 317.793225][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 317.793251][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 317.793272][ C0] ? ip6_rcv_finish+0x265/0x280 [ 317.793296][ C0] ? NF_HOOK+0x336/0x3c0 [ 317.793322][ C0] ? process_backlog+0x3c3/0x1860 [ 317.793343][ C0] ? lock_acquire+0x106/0x350 [ 317.793364][ C0] ? process_backlog+0x3c3/0x1860 [ 317.793389][ C0] ? process_backlog+0x3c3/0x1860 [ 317.793410][ C0] ? process_backlog+0x3c3/0x1860 [ 317.793434][ C0] process_backlog+0x706/0x1860 [ 317.793458][ C0] ? process_backlog+0x3c3/0x1860 [ 317.793487][ C0] __napi_poll+0xaa/0x330 [ 317.793509][ C0] net_rx_action+0x61d/0xf50 [ 317.793537][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 317.793574][ C0] handle_softirqs+0x225/0x840 [ 317.793593][ C0] ? do_softirq+0x76/0xd0 [ 317.793612][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 317.793633][ C0] do_softirq+0x76/0xd0 [ 317.793650][ C0] [ 317.793656][ C0] [ 317.793662][ C0] __local_bh_enable_ip+0xf8/0x130 [ 317.793681][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 317.793705][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 317.793723][ C0] process_scheduled_works+0xa8e/0x14e0 [ 317.793755][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.793772][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.793794][ C0] ? assign_work+0x3af/0x5d0 [ 317.793813][ C0] rescuer_thread+0x7b6/0x10b0 [ 317.793835][ C0] ? rescuer_thread+0xb8/0x10b0 [ 317.793865][ C0] kthread+0x388/0x470 [ 317.793888][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 317.793906][ C0] ? __pfx_kthread+0x10/0x10 [ 317.793929][ C0] ret_from_fork+0x514/0xb70 [ 317.793953][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 317.793976][ C0] ? __switch_to+0xc89/0x1420 [ 317.793997][ C0] ? __pfx_kthread+0x10/0x10 [ 317.794019][ C0] ret_from_fork_asm+0x1a/0x30 [ 317.794052][ C0] [ 320.922268][ C1] net_ratelimit: 7629 callbacks suppressed [ 320.922290][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.923535][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.929813][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.941208][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.952255][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.967855][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 320.974498][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.997764][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.007901][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 321.019314][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.932067][ C1] net_ratelimit: 9941 callbacks suppressed [ 325.932091][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.941277][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.950787][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.961812][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.973201][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.987511][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 325.995307][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 326.016152][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.022761][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.028806][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.341115][ T31] INFO: task kworker/1:2:54 blocked for more than 145 seconds.