last executing test programs: 53.678421016s ago: executing program 2 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000240)=0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x400) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, 0xf) 51.547537791s ago: executing program 2 (id=394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000a70000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 50.925257971s ago: executing program 4 (id=395): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1806000000000000000000000000000085000000bc00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 50.738742672s ago: executing program 4 (id=396): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) 50.737722322s ago: executing program 3 (id=397): openat$nullb(0xffffffffffffff9c, 0x0, 0xb9b04f73e14de9c9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x800, 0x70) setpgid(0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 50.59957844s ago: executing program 4 (id=398): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3, [0x10000d3a, 0xd94, 0x599, 0x7b1]}) 49.624510067s ago: executing program 3 (id=400): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="2800000004000000000000000000000004000000000000000004c7e008c57dba59"], 0x28) fdatasync(r0) 48.498603017s ago: executing program 0 (id=401): syz_usb_connect(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d2c0583adf11f83223067407a18"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$9p(&(0x7f0000000cc0), 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x8919, 0x0) socket$inet(0x2, 0x6, 0x4) 48.326065724s ago: executing program 4 (id=402): r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4048040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 48.31728785s ago: executing program 3 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) 48.159056831s ago: executing program 3 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000240)=0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x400) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, 0xf) 46.15025415s ago: executing program 1 (id=405): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x18) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x0, 0x8, 0x8, 0x8, 0x4c, 0x4, 0x6, 0x44, 0x1, 0xf, 0x1, 0xa6}, {0xaf, 0x6, 0x6, 0x5, 0x2, 0x6, 0x9, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x3}, {0x9, 0x4, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x2, 0x9, 0x7f, 0x1, 0x591}], 0xc2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.098840586s ago: executing program 3 (id=406): userfaultfd(0x1) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x7f00) 46.077769388s ago: executing program 4 (id=407): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2800000004000000000000000000000004000000000000000004c7e008c57dba59"], 0x28) fdatasync(r0) 45.797758926s ago: executing program 2 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 44.394799881s ago: executing program 2 (id=409): r0 = socket$inet(0xa, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x308, 0x238, 0x238, 0x308, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x0, 0x1}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xffffff00], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x1, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="07cd64f0d34fcf662a40ca5f43da6a3e3300543c7f032341e21b39a7a4d0da64911860e7484a12526ccb", @ANYRES32, @ANYRES8=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000ef7e59525d50949f001811000032983aa9c5b173b4f09f981cd8fe71f4611c54ac2aaf41d218", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 44.275531722s ago: executing program 1 (id=410): openat$nullb(0xffffffffffffff9c, 0x0, 0xb9b04f73e14de9c9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x800, 0x70) setpgid(0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 42.847732382s ago: executing program 1 (id=411): openat$nullb(0xffffffffffffff9c, 0x0, 0xb9b04f73e14de9c9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 42.810790286s ago: executing program 0 (id=412): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1806000000000000000000000000000085000000bc00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 42.486063804s ago: executing program 0 (id=413): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3, [0x10000d3a, 0xd94, 0x599, 0x7b1]}) 41.810187475s ago: executing program 1 (id=414): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="2800000004000000000000000000000004000000000000000004c7e008c57dba59"], 0x28) fdatasync(r0) 41.726875061s ago: executing program 0 (id=415): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) 41.4271277s ago: executing program 0 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000240)=0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x400) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, 0xf) 40.763907929s ago: executing program 1 (id=417): r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4048040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) syz_emit_vhci(0x0, 0x7) 38.605587466s ago: executing program 0 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000a70000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, 0x0) 38.604971328s ago: executing program 2 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 38.54440486s ago: executing program 4 (id=420): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x18) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x0, 0x8, 0x8, 0x8, 0x4c, 0x4, 0x6, 0x44, 0x1, 0xf, 0x1, 0xa6}, {0xaf, 0x6, 0x6, 0x5, 0x2, 0x6, 0x9, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x3}, {0x9, 0x4, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x2, 0x9, 0x7f, 0x1, 0x591}], 0xc2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.157987165s ago: executing program 1 (id=421): openat$nullb(0xffffffffffffff9c, 0x0, 0xb9b04f73e14de9c9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x800, 0x70) setpgid(0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 37.686524925s ago: executing program 3 (id=422): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180f000000000000000000831400000095000000009ae0002d0b3caa855ac1967a9d142f145b3804e1794c8cfcc302c44d59f2788f6ddbc414a6d47acd8513ac634b5c41aa57a0f38dc7c8bee83d8e612e34fcef179b664a60b97ee37b91388ff3a6de653c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x800fffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 35.266119443s ago: executing program 2 (id=423): syz_usb_connect(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d2c0583adf11f83223067407a18"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$9p(&(0x7f0000000cc0), 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x8919, 0x0) socket$inet(0x2, 0x6, 0x4) 0s ago: executing program 32 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000a70000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, 0x0) kernel console output (not intermixed with test programs): 94084][ T5820] Bluetooth: hci4: command tx timeout [ 90.307772][ T5823] bridge_slave_0: entered promiscuous mode [ 90.315495][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.322908][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.349055][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.366735][ T5818] hsr_slave_0: entered promiscuous mode [ 90.373196][ T5818] hsr_slave_1: entered promiscuous mode [ 90.392958][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.400685][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.408248][ T5823] bridge_slave_1: entered allmulticast mode [ 90.415343][ T5823] bridge_slave_1: entered promiscuous mode [ 90.437144][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.444112][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.470258][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.575818][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.591883][ T5817] hsr_slave_0: entered promiscuous mode [ 90.598467][ T5817] hsr_slave_1: entered promiscuous mode [ 90.604509][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.612859][ T5817] Cannot create hsr debugfs directory [ 90.621890][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.635549][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.667504][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.720625][ T5830] hsr_slave_0: entered promiscuous mode [ 90.727185][ T5830] hsr_slave_1: entered promiscuous mode [ 90.733294][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.740913][ T5830] Cannot create hsr debugfs directory [ 90.807927][ T5826] team0: Port device team_slave_0 added [ 90.822338][ T5823] team0: Port device team_slave_0 added [ 90.832805][ T5823] team0: Port device team_slave_1 added [ 90.847661][ T5826] team0: Port device team_slave_1 added [ 90.939680][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.946707][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.972771][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.030766][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.038262][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.065038][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.095560][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.102628][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.128625][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.141758][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.148790][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.174900][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.321045][ T5823] hsr_slave_0: entered promiscuous mode [ 91.327464][ T5823] hsr_slave_1: entered promiscuous mode [ 91.333605][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.341330][ T5823] Cannot create hsr debugfs directory [ 91.443415][ T5826] hsr_slave_0: entered promiscuous mode [ 91.450075][ T5826] hsr_slave_1: entered promiscuous mode [ 91.456565][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.464163][ T5826] Cannot create hsr debugfs directory [ 91.667497][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.682280][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.724062][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.758586][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.814911][ T59] cfg80211: failed to load regulatory.db [ 91.863275][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.892846][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.907939][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.929046][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.999479][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.018670][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.033748][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.062122][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.154079][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.182420][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.208259][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.224957][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.276885][ T5820] Bluetooth: hci0: command tx timeout [ 92.286760][ T5820] Bluetooth: hci1: command tx timeout [ 92.305916][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.318657][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.356643][ T5825] Bluetooth: hci2: command tx timeout [ 92.357070][ T5828] Bluetooth: hci3: command tx timeout [ 92.362127][ T5820] Bluetooth: hci4: command tx timeout [ 92.373165][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.384190][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.395327][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.444889][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.465099][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.475662][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.503263][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.510491][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.525596][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.552736][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.564347][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.571524][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.599353][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.606602][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.640864][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.648083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.679362][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.686642][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.697185][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.704428][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.830901][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.852658][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.945392][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.006809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.013989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.062884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.070115][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.130394][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.273608][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.312660][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.319908][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.382144][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.389346][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.420486][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.522146][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.567767][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.652204][ T5818] veth0_vlan: entered promiscuous mode [ 93.721754][ T5818] veth1_vlan: entered promiscuous mode [ 93.860917][ T5817] veth0_vlan: entered promiscuous mode [ 93.896901][ T5817] veth1_vlan: entered promiscuous mode [ 93.910724][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.923138][ T5818] veth0_macvtap: entered promiscuous mode [ 93.976918][ T5818] veth1_macvtap: entered promiscuous mode [ 94.042215][ T5817] veth0_macvtap: entered promiscuous mode [ 94.095681][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.108497][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.129001][ T5817] veth1_macvtap: entered promiscuous mode [ 94.140252][ T5823] veth0_vlan: entered promiscuous mode [ 94.170471][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180789][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189938][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199715][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229878][ T5823] veth1_vlan: entered promiscuous mode [ 94.285274][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.316570][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.329003][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.357011][ T5820] Bluetooth: hci1: command tx timeout [ 94.357582][ T5828] Bluetooth: hci0: command tx timeout [ 94.372210][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.382684][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.392531][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.401282][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.429049][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.437663][ T5828] Bluetooth: hci3: command tx timeout [ 94.439963][ T5820] Bluetooth: hci4: command tx timeout [ 94.443084][ T5828] Bluetooth: hci2: command tx timeout [ 94.464907][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.578488][ T5823] veth0_macvtap: entered promiscuous mode [ 94.588946][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.595989][ T5830] veth0_vlan: entered promiscuous mode [ 94.598170][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.621806][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.629362][ T5823] veth1_macvtap: entered promiscuous mode [ 94.634866][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.712158][ T5830] veth1_vlan: entered promiscuous mode [ 94.730966][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.736805][ T5826] veth0_vlan: entered promiscuous mode [ 94.763755][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.773083][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.794768][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.821561][ T5826] veth1_vlan: entered promiscuous mode [ 94.851596][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.898710][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.916844][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.929809][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.939054][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120331][ T5830] veth0_macvtap: entered promiscuous mode [ 95.386481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.403036][ T5826] veth0_macvtap: entered promiscuous mode [ 95.681065][ T5830] veth1_macvtap: entered promiscuous mode [ 95.705760][ T5826] veth1_macvtap: entered promiscuous mode [ 95.757286][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.804495][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.830485][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.830508][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.867456][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.870964][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871014][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871043][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871071][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.889977][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.924359][ T5918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.931692][ T5919] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.039129][ T5918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.057413][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.066382][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.067848][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.148028][ T5918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.173642][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.185848][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.204392][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.229797][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.314085][ T5918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.437728][ T5828] Bluetooth: hci0: command tx timeout [ 96.437739][ T5820] Bluetooth: hci1: command tx timeout [ 96.495687][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.516554][ T5828] Bluetooth: hci2: command tx timeout [ 96.521395][ T5820] Bluetooth: hci4: command tx timeout [ 96.521997][ T5828] Bluetooth: hci3: command tx timeout [ 96.534140][ T10] hid-generic FFFF:0004:0000.0001: unknown main item tag 0x0 [ 96.541605][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.551286][ T10] hid-generic FFFF:0004:0000.0001: unknown main item tag 0x0 [ 96.559265][ T10] hid-generic FFFF:0004:0000.0001: unknown main item tag 0x0 [ 96.586455][ T10] hid-generic FFFF:0004:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 96.704698][ T5918] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.712953][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.816293][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.824172][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.835660][ T5918] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.846643][ T5932] fido_id[5932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.864505][ T5918] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.987766][ T5937] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 97.459952][ T5918] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.473527][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.504880][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.604276][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.617260][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.746786][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.415973][ T5952] netlink: 'syz.3.13': attribute type 3 has an invalid length. [ 98.436884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.747430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.757848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.952916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.078783][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 99.157320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.476999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.771488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.967617][ T5951] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13'. [ 100.277818][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.311954][ T10] usb 2-1: config 0 has no interface number 0 [ 100.480184][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 100.937064][ T5965] delete_channel: no stack [ 100.961936][ T10] usb 2-1: string descriptor 0 read error: -71 [ 100.987765][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.030715][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.069329][ T5956] openvswitch: netlink: Message has 8 unknown bytes. [ 101.121352][ T10] usb 2-1: config 0 descriptor?? [ 101.154116][ T10] usb 2-1: can't set config #0, error -71 [ 101.212369][ T10] usb 2-1: USB disconnect, device number 2 [ 101.216274][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.370414][ T5979] loop5: detected capacity change from 0 to 1 [ 101.391724][ T5977] Zero length message leads to an empty skb [ 101.421463][ T24] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 101.444392][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.654312][ T24] usb 1-1: config 0 descriptor?? [ 101.674166][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 101.692529][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.716525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 101.724855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 101.837380][ T5876] usb 3-1: device descriptor read/64, error -71 [ 101.998182][ T5994] trusted_key: syz.4.25 sent an empty control message without MSG_MORE. [ 102.079908][ T24] gspca_cpia1: usb_control_msg 03, error -32 [ 102.088424][ T5962] delete_channel: no stack [ 102.113763][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 102.123124][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 102.132580][ T24] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 102.150372][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.158984][ T24] usb 1-1: USB disconnect, device number 2 [ 102.240148][ T5998] netlink: 'syz.4.26': attribute type 3 has an invalid length. [ 102.335179][ T5998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.26'. [ 102.393814][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 102.420715][ T5876] usb 3-1: device descriptor read/64, error -71 [ 102.486214][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.501694][ T6005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29'. [ 102.576226][ T5876] usb usb3-port1: attempt power cycle [ 102.660024][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 102.730806][ T5916] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 103.188150][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 103.199821][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 103.210698][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 103.233217][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 103.245676][ T6008] netlink: 'syz.1.30': attribute type 10 has an invalid length. [ 103.257572][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.265818][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.276256][ T5916] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 103.281526][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.292515][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.300814][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.302106][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.308446][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.328571][ T6008] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.339545][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.359417][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 103.368302][ T6008] bridge_slave_1: left allmulticast mode [ 103.373986][ T6008] bridge_slave_1: left promiscuous mode [ 103.379883][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.399959][ T5916] usb 5-1: Product: syz [ 103.408911][ T5876] usb 3-1: device descriptor read/8, error -71 [ 103.415568][ T5916] usb 5-1: Manufacturer: syz [ 103.433886][ T6008] bridge_slave_0: left allmulticast mode [ 103.435161][ T5916] usb 5-1: SerialNumber: syz [ 103.439778][ T6008] bridge_slave_0: left promiscuous mode [ 103.450387][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.482323][ T6008] bond0: (slave bridge0): Releasing backup interface [ 103.570774][ T5916] usb 5-1: config 0 descriptor?? [ 103.693907][ T5916] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 103.781816][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.830115][ T5916] usb 5-1: USB disconnect, device number 2 [ 103.864480][ T5876] usb 3-1: device descriptor read/8, error -71 [ 103.986906][ T5876] usb usb3-port1: unable to enumerate USB device [ 104.028630][ T6019] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.278561][ T5811] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.458415][ T5811] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 104.467952][ T5811] usb 1-1: config 0 has no interface number 0 [ 104.474087][ T5811] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.314596][ T5811] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 105.328515][ T5811] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 105.339644][ T5811] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 105.351812][ T5811] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.364954][ T5811] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 105.374176][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.381890][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.395821][ T5811] usb 1-1: config 0 descriptor?? [ 105.408709][ T5811] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 105.422769][ T5811] gspca_mr97310a: reg write [21] error -22 [ 105.435090][ T5811] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 105.555562][ T9] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 105.585918][ T9] usb 5-1: config 5 has no interface number 0 [ 105.625185][ T30] audit: type=1326 audit(1748049312.759:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.1.37" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efefc78e969 code=0x0 [ 105.625818][ T9] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 105.680594][ T24] usb 1-1: USB disconnect, device number 3 [ 105.764458][ T9] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 105.787320][ T9] usb 5-1: config 5 interface 123 has no altsetting 0 [ 105.803022][ T9] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 105.829640][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.846144][ T9] usb 5-1: Product: syz [ 105.856452][ T9] usb 5-1: Manufacturer: syz [ 105.866168][ T9] usb 5-1: SerialNumber: syz [ 106.474482][ T9] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 106.588475][ T9] usb 5-1: USB disconnect, device number 3 [ 107.779893][ T6059] FAULT_INJECTION: forcing a failure. [ 107.779893][ T6059] name failslab, interval 1, probability 0, space 0, times 1 [ 107.816180][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.3.42 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 107.816209][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.816229][ T6059] Call Trace: [ 107.816238][ T6059] [ 107.816250][ T6059] dump_stack_lvl+0x189/0x250 [ 107.816294][ T6059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.816321][ T6059] ? __pfx__printk+0x10/0x10 [ 107.816357][ T6059] ? __pfx___might_resched+0x10/0x10 [ 107.816387][ T6059] ? fs_reclaim_acquire+0x7d/0x100 [ 107.816414][ T6059] should_fail_ex+0x414/0x560 [ 107.816440][ T6059] should_failslab+0xa8/0x100 [ 107.816461][ T6059] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 107.816490][ T6059] ? __d_alloc+0x31/0x6f0 [ 107.816516][ T6059] __d_alloc+0x31/0x6f0 [ 107.816545][ T6059] d_alloc_parallel+0xe0/0x14e0 [ 107.816591][ T6059] ? __d_lookup+0x66/0x780 [ 107.816620][ T6059] ? __pfx_d_alloc_parallel+0x10/0x10 [ 107.816660][ T6059] path_openat+0xa3b/0x3830 [ 107.816683][ T6059] ? arch_stack_walk+0xfc/0x150 [ 107.816741][ T6059] ? __pfx_path_openat+0x10/0x10 [ 107.816761][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.816794][ T6059] do_filp_open+0x1fa/0x410 [ 107.816817][ T6059] ? __pfx_do_filp_open+0x10/0x10 [ 107.816862][ T6059] ? _raw_spin_unlock+0x28/0x50 [ 107.816879][ T6059] ? alloc_fd+0x64c/0x6c0 [ 107.816924][ T6059] do_sys_openat2+0x121/0x1c0 [ 107.816944][ T6059] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.816966][ T6059] ? ksys_write+0x1f0/0x250 [ 107.816986][ T6059] ? rcu_is_watching+0x15/0xb0 [ 107.817016][ T6059] __x64_sys_openat+0x138/0x170 [ 107.817040][ T6059] do_syscall_64+0xf6/0x210 [ 107.817060][ T6059] ? clear_bhb_loop+0x60/0xb0 [ 107.817081][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.817097][ T6059] RIP: 0033:0x7f65c138e969 [ 107.817123][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.817138][ T6059] RSP: 002b:00007f65c2246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.817156][ T6059] RAX: ffffffffffffffda RBX: 00007f65c15b5fa0 RCX: 00007f65c138e969 [ 107.817166][ T6059] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 107.817194][ T6059] RBP: 00007f65c2246090 R08: 0000000000000000 R09: 0000000000000000 [ 107.817203][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.817212][ T6059] R13: 0000000000000000 R14: 00007f65c15b5fa0 R15: 00007ffc03b29c78 [ 107.817238][ T6059] [ 109.139194][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 109.464984][ T6101] netlink: 'syz.4.54': attribute type 11 has an invalid length. [ 110.778156][ T6144] netlink: 'syz.1.61': attribute type 7 has an invalid length. [ 110.995481][ T5811] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.013911][ T6150] netlink: 'syz.2.63': attribute type 7 has an invalid length. [ 111.216268][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 111.232935][ T5811] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 111.247234][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.289100][ T5811] usb 1-1: Product: syz [ 111.301304][ T5811] usb 1-1: Manufacturer: syz [ 111.313902][ T5811] usb 1-1: SerialNumber: syz [ 111.347529][ T5811] usb 1-1: config 0 descriptor?? [ 111.371771][ T5811] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.602874][ T5811] usb 1-1: USB disconnect, device number 4 [ 112.696568][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.868838][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 112.909803][ T9] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 112.955515][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 112.998997][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 113.029750][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.052822][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 113.073907][ T9] usb 1-1: Product: syz [ 113.084459][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 113.093423][ T9] usb 1-1: Manufacturer: syz [ 113.110228][ T9] usb 1-1: SerialNumber: syz [ 113.148492][ T9] usb 1-1: config 0 descriptor?? [ 113.205664][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.247464][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 113.327423][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 113.455294][ T9] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 113.503916][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 113.524056][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 113.533818][ T9] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 113.545274][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 113.588161][ T9] usb 1-1: USB disconnect, device number 5 [ 113.601375][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 113.638526][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 113.707047][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 113.768867][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 114.592595][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 114.610543][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 114.618000][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 114.627498][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 114.634984][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 114.642572][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 114.654190][ T6192] trusted_key: encrypted_key: keylen parameter is missing [ 114.662683][ T6190] trusted_key: encrypted_key: keylen parameter is missing [ 114.998322][ T6213] capability: warning: `syz.2.75' uses deprecated v2 capabilities in a way that may be insecure [ 115.033979][ T6213] capability: warning: `syz.2.75' uses 32-bit capabilities (legacy support in use) [ 115.667926][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 116.883779][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.895700][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.307502][ T6232] netlink: 136 bytes leftover after parsing attributes in process `syz.2.80'. [ 117.346490][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.371959][ T6232] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 118.617288][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.138082][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.145447][ T5906] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 119.215033][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.262624][ T5906] usb 4-1: config 0 descriptor?? [ 119.957127][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 120.383818][ T5906] uclogic 0003:28BD:0075.0002: interface is invalid, ignoring [ 120.395670][ T5906] usb 4-1: USB disconnect, device number 2 [ 122.920166][ T5906] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.993599][ T6318] netlink: 'syz.1.102': attribute type 21 has an invalid length. [ 123.226534][ T6326] FAULT_INJECTION: forcing a failure. [ 123.226534][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 123.302475][ T6326] CPU: 1 UID: 60929 PID: 6326 Comm: syz.2.108 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 123.302503][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.302517][ T6326] Call Trace: [ 123.302525][ T6326] [ 123.302533][ T6326] dump_stack_lvl+0x189/0x250 [ 123.302575][ T6326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.302600][ T6326] ? __pfx__printk+0x10/0x10 [ 123.302634][ T6326] ? __pfx___might_resched+0x10/0x10 [ 123.302667][ T6326] should_fail_ex+0x414/0x560 [ 123.302715][ T6326] should_failslab+0xa8/0x100 [ 123.302735][ T6326] kmem_cache_alloc_noprof+0x73/0x3c0 [ 123.302764][ T6326] ? getname_flags+0xb8/0x540 [ 123.302787][ T6326] getname_flags+0xb8/0x540 [ 123.302804][ T6326] ? __fget_files+0x3a0/0x420 [ 123.302826][ T6326] user_path_at+0x24/0x60 [ 123.302850][ T6326] do_fchownat+0x105/0x270 [ 123.302873][ T6326] ? __pfx_do_fchownat+0x10/0x10 [ 123.302902][ T6326] __x64_sys_lchown+0x85/0xa0 [ 123.302923][ T6326] do_syscall_64+0xf6/0x210 [ 123.302949][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 123.302974][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.302992][ T6326] RIP: 0033:0x7f4b01d8e969 [ 123.303018][ T6326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.303034][ T6326] RSP: 002b:00007f4b02cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 123.303061][ T6326] RAX: ffffffffffffffda RBX: 00007f4b01fb5fa0 RCX: 00007f4b01d8e969 [ 123.303075][ T6326] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000200000000240 [ 123.303098][ T6326] RBP: 00007f4b02cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.303109][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.303119][ T6326] R13: 0000000000000000 R14: 00007f4b01fb5fa0 R15: 00007fff9f2f2d38 [ 123.303166][ T6326] [ 123.504603][ T6336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.107'. [ 124.782443][ T5958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.969028][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 124.992110][ T5958] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 125.036837][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.139690][ T5958] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.161310][ T30] audit: type=1800 audit(1748049332.279:3): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.117" name="/" dev="fuse" ino=1 res=0 errno=0 [ 125.162622][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.256063][ T6367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.115'. [ 125.839203][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.852162][ T5958] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 125.890302][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.967098][ T30] audit: type=1804 audit(1748049332.299:4): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.117" name="/newroot/25/file1" dev="fuse" ino=1 res=1 errno=0 [ 126.437092][ T5958] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.488987][ T6361] mmap: syz.3.117 (6361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.503599][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.549843][ T30] audit: type=1800 audit(1748049332.299:5): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.117" name="/" dev="fuse" ino=1 res=0 errno=0 [ 126.566119][ T5958] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.610386][ T30] audit: type=1326 audit(1748049333.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6365 comm="syz.2.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b01d8e969 code=0x0 [ 126.646765][ T5958] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 126.687312][ T5958] usb 2-1: can't read configurations, error -71 [ 127.967578][ T6392] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.075144][ T5828] Bluetooth: hci0: Dropping invalid advertising data [ 128.091305][ T5828] Bluetooth: hci0: unknown advertising packet type: 0x40 [ 128.091593][ T5828] Bluetooth: hci0: Malformed LE Event: 0x02 [ 130.710273][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.268338][ T6344] delete_channel: no stack [ 132.763426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770616][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.491982][ T6437] IPVS: Error connecting to the multicast addr [ 136.511801][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 137.990406][ T6465] FAULT_INJECTION: forcing a failure. [ 137.990406][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.003849][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.0.144 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 138.003883][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.003895][ T6465] Call Trace: [ 138.003902][ T6465] [ 138.003909][ T6465] dump_stack_lvl+0x189/0x250 [ 138.003943][ T6465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.003971][ T6465] ? __pfx__printk+0x10/0x10 [ 138.004012][ T6465] should_fail_ex+0x414/0x560 [ 138.004038][ T6465] strncpy_from_user+0x36/0x290 [ 138.004062][ T6465] path_removexattrat+0xe0/0x690 [ 138.004090][ T6465] ? __pfx_path_removexattrat+0x10/0x10 [ 138.004112][ T6465] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 138.004138][ T6465] ? __pfx_vfs_write+0x10/0x10 [ 138.004190][ T6465] ? rcu_is_watching+0x15/0xb0 [ 138.004230][ T6465] __x64_sys_removexattr+0x62/0x70 [ 138.004253][ T6465] do_syscall_64+0xf6/0x210 [ 138.004278][ T6465] ? asm_sysvec_call_function_single+0x1a/0x20 [ 138.004298][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 138.004322][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.004341][ T6465] RIP: 0033:0x7fd0ef98e969 [ 138.004359][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.004375][ T6465] RSP: 002b:00007fd0f0795038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 138.004396][ T6465] RAX: ffffffffffffffda RBX: 00007fd0efbb6080 RCX: 00007fd0ef98e969 [ 138.004410][ T6465] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 138.004422][ T6465] RBP: 00007fd0f0795090 R08: 0000000000000000 R09: 0000000000000000 [ 138.004434][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.004445][ T6465] R13: 0000000000000000 R14: 00007fd0efbb6080 R15: 00007fffb9712318 [ 138.004476][ T6465] [ 140.329765][ T6496] Bluetooth: MGMT ver 1.23 [ 140.340193][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 140.349285][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.143'. [ 141.162926][ T6496] syz.1.143 (6496) used greatest stack depth: 20008 bytes left [ 143.979624][ T6504] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 143.987328][ T6504] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 143.994949][ T6504] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.158'. [ 144.009877][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.188531][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.223854][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 144.243630][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.262315][ T9] usb 4-1: Product: syz [ 144.293010][ T9] usb 4-1: Manufacturer: syz [ 144.316220][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.356261][ T5958] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.413664][ T9] usb 4-1: SerialNumber: syz [ 144.456247][ T24] usb 2-1: device descriptor read/64, error -71 [ 144.475097][ T9] usb 4-1: can't set config #1, error -71 [ 144.529046][ T9] usb 4-1: USB disconnect, device number 3 [ 144.616494][ T5958] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.685304][ T5958] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.707006][ T5958] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.720667][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.736813][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.752656][ T6513] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 144.770672][ T5958] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.866282][ T24] usb 2-1: device descriptor read/64, error -71 [ 144.993845][ T24] usb usb2-port1: attempt power cycle [ 145.180105][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 145.186148][ T5958] usb 5-1: USB disconnect, device number 4 [ 145.191032][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:5 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 145.191072][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.191087][ T5828] Workqueue: hci4 hci_rx_work [ 145.191120][ T5828] Call Trace: [ 145.191128][ T5828] [ 145.191138][ T5828] dump_stack_lvl+0x189/0x250 [ 145.191175][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.191204][ T5828] ? __pfx__printk+0x10/0x10 [ 145.191242][ T5828] ? __rcu_read_unlock+0x84/0xe0 [ 145.191267][ T5828] ? kernfs_path_from_node+0x2b/0x260 [ 145.191292][ T5828] ? kernfs_path_from_node+0x216/0x260 [ 145.191318][ T5828] sysfs_create_dir_ns+0x259/0x280 [ 145.191349][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.191373][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 145.191403][ T5828] kobject_add_internal+0x59f/0xb40 [ 145.191444][ T5828] kobject_add+0x155/0x220 [ 145.191480][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 145.191510][ T5828] ? _raw_spin_unlock+0x3f/0x50 [ 145.191548][ T5828] ? get_device_parent+0x366/0x3a0 [ 145.191577][ T5828] device_add+0x408/0xb50 [ 145.191606][ T5828] hci_conn_add_sysfs+0xd5/0x1e0 [ 145.191652][ T5828] le_conn_complete_evt+0xc3a/0x1220 [ 145.191702][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.191743][ T5828] ? irqentry_exit+0x74/0x90 [ 145.191768][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.191804][ T5828] hci_le_conn_complete_evt+0x187/0x450 [ 145.191848][ T5828] hci_event_packet+0x7a2/0x1270 [ 145.191882][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.191915][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 145.191956][ T5828] ? hci_send_to_monitor+0xd7/0x4f0 [ 145.191981][ T5828] hci_rx_work+0x46a/0xe80 [ 145.192020][ T5828] ? process_scheduled_works+0x9ec/0x17a0 [ 145.192056][ T5828] process_scheduled_works+0xade/0x17a0 [ 145.192122][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.192175][ T5828] worker_thread+0x8a0/0xda0 [ 145.192224][ T5828] kthread+0x711/0x8a0 [ 145.192253][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 145.192273][ T5828] ? __pfx_kthread+0x10/0x10 [ 145.192298][ T5828] ? __pfx_kthread+0x10/0x10 [ 145.192320][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.192349][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.192374][ T5828] ? __pfx_kthread+0x10/0x10 [ 145.192397][ T5828] ret_from_fork+0x4b/0x80 [ 145.192416][ T5828] ? __pfx_kthread+0x10/0x10 [ 145.192440][ T5828] ret_from_fork_asm+0x1a/0x30 [ 145.192491][ T5828] [ 145.192522][ T5828] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.252696][ T6523] openvswitch: netlink: Message has 8 unknown bytes. [ 145.256551][ T5828] Bluetooth: hci4: failed to register connection device [ 145.536791][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.569607][ T24] usb 2-1: device descriptor read/8, error -71 [ 145.829465][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.911117][ T24] usb 2-1: device descriptor read/8, error -71 [ 146.051087][ T24] usb usb2-port1: unable to enumerate USB device [ 146.349920][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.517874][ T24] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 146.526439][ T24] usb 3-1: config 0 has no interface number 0 [ 146.532586][ T24] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 146.543884][ T24] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 146.574588][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.608748][ T24] usb 3-1: config 0 descriptor?? [ 146.631141][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input6 [ 146.702368][ T24] input: failed to attach handler mousedev to device input6, error: -5 [ 149.283046][ T5916] usb 3-1: USB disconnect, device number 6 [ 149.817373][ T6556] netlink: 'syz.4.175': attribute type 27 has an invalid length. [ 149.856352][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.083787][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.123029][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 150.157514][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 150.165649][ T24] usb 2-1: Product: syz [ 150.186122][ T24] usb 2-1: Manufacturer: syz [ 150.190752][ T24] usb 2-1: SerialNumber: syz [ 150.338566][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.577378][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 150.723476][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.795940][ T5916] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 150.805378][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.888381][ T5916] usb 5-1: Product: syz [ 150.893088][ T5916] usb 5-1: Manufacturer: syz [ 150.901343][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 150.946747][ T5916] usb 5-1: SerialNumber: syz [ 151.067478][ T5916] usb 5-1: config 0 descriptor?? [ 151.084986][ T24] usb 2-1: USB disconnect, device number 9 [ 151.096318][ T5916] gs_usb 5-1:0.0: Required endpoints not found [ 151.147785][ T24] usblp0: removed [ 151.286803][ T5983] usb 5-1: USB disconnect, device number 5 [ 152.666574][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.208254][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 153.218977][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.420956][ T9] usb 4-1: Product: syz [ 153.425161][ T9] usb 4-1: Manufacturer: syz [ 153.431596][ T9] usb 4-1: SerialNumber: syz [ 153.439859][ T9] usb 4-1: config 0 descriptor?? [ 154.544270][ T24] usb 4-1: USB disconnect, device number 4 [ 160.149430][ T6628] netlink: 'syz.0.196': attribute type 27 has an invalid length. [ 160.287505][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.468770][ T5958] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.488109][ T5906] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.531055][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 160.556124][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 160.574479][ T5906] usb 2-1: Product: syz [ 160.585062][ T5906] usb 2-1: Manufacturer: syz [ 160.593607][ T5906] usb 2-1: SerialNumber: syz [ 160.666164][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 160.678592][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.693150][ T5958] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 160.705210][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.713871][ T5958] usb 1-1: Product: syz [ 160.718391][ T5958] usb 1-1: Manufacturer: syz [ 160.723016][ T5958] usb 1-1: SerialNumber: syz [ 160.731824][ T5958] usb 1-1: config 0 descriptor?? [ 160.740066][ T5958] gs_usb 1-1:0.0: Required endpoints not found [ 160.746310][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.822997][ T5906] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.931982][ T5916] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 160.946260][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.954499][ T5916] usb 5-1: Product: syz [ 160.962959][ T5916] usb 5-1: Manufacturer: syz [ 160.968538][ T5916] usb 5-1: SerialNumber: syz [ 160.986005][ T5916] usb 5-1: config 0 descriptor?? [ 160.994028][ T5906] usb 1-1: USB disconnect, device number 8 [ 161.036429][ T5916] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 006 [ 161.660396][ T5916] i2c i2c-1: failure reading functionality [ 161.685716][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 161.704311][ T5916] usb 5-1: USB disconnect, device number 6 [ 162.195171][ T6653] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.204039][ T6653] overlayfs: failed to set xattr on upper [ 162.209873][ T6653] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.216764][ T6653] overlayfs: ...falling back to index=off. [ 162.222575][ T6653] overlayfs: ...falling back to uuid=null. [ 162.331161][ T5958] usb 2-1: USB disconnect, device number 10 [ 164.506160][ T5958] usblp0: removed [ 164.831759][ T6667] x_tables: ip6_tables: SET.1 target: invalid size 8 (kernel) != (user) 0 [ 165.951243][ T6676] openvswitch: netlink: Message has 8 unknown bytes. [ 166.093638][ T6677] netlink: 'syz.4.212': attribute type 27 has an invalid length. [ 166.506158][ T5958] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.886172][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 166.893195][ T5958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.908357][ T5958] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 166.921534][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.931847][ T5958] usb 5-1: Product: syz [ 166.954236][ T5958] usb 5-1: Manufacturer: syz [ 166.967161][ T5958] usb 5-1: SerialNumber: syz [ 166.990400][ T5958] usb 5-1: config 0 descriptor?? [ 167.060400][ T5958] gs_usb 5-1:0.0: Required endpoints not found [ 167.208593][ T5916] usb 5-1: USB disconnect, device number 7 [ 167.256138][ T5878] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.026164][ T5878] usb 1-1: device descriptor read/all, error -71 [ 170.537791][ T5916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.713487][ T6705] openvswitch: netlink: Message has 8 unknown bytes. [ 170.777990][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 171.144181][ T5916] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.277484][ T5916] usb 3-1: config 0 has no interface number 0 [ 171.320310][ T5916] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.350283][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.360930][ T5916] usb 3-1: Product: syz [ 171.365431][ T5916] usb 3-1: Manufacturer: syz [ 171.372484][ T5916] usb 3-1: SerialNumber: syz [ 171.387618][ T5916] usb 3-1: config 0 descriptor?? [ 171.409106][ T5916] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.626323][ T5916] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.651401][ T5916] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.075234][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 172.083746][ T5916] usb 3-1: USB disconnect, device number 7 [ 172.871371][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.891303][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.903385][ T5916] quatech2 3-1:0.51: device disconnected [ 173.470536][ T5879] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.667050][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.696157][ T5879] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 175.713807][ T6733] netlink: 'syz.2.230': attribute type 27 has an invalid length. [ 175.743848][ T5879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.768859][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.780185][ T5879] usb 2-1: Product: syz [ 175.784378][ T5879] usb 2-1: Manufacturer: syz [ 175.789863][ T5879] usb 2-1: SerialNumber: syz [ 175.812900][ T5879] cdc_mbim 2-1:1.0: skipping garbage [ 175.972663][ T6737] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 175.982296][ T6737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.993569][ T6737] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 176.134943][ T5983] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.696304][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 176.869868][ T5983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.904359][ T5983] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 176.926182][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.951567][ T5983] usb 3-1: Product: syz [ 176.967024][ T5879] cdc_mbim 2-1:1.0: bind() failure [ 176.991174][ T5879] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 176.998672][ T5879] cdc_ncm 2-1:1.1: bind() failure [ 177.003321][ T5983] usb 3-1: Manufacturer: syz [ 177.009068][ T5879] usb 2-1: USB disconnect, device number 11 [ 177.087801][ T5983] usb 3-1: SerialNumber: syz [ 177.511909][ T5983] usb 3-1: config 0 descriptor?? [ 177.538657][ T5983] gs_usb 3-1:0.0: Required endpoints not found [ 178.178438][ T5958] usb 3-1: USB disconnect, device number 8 [ 179.708995][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.346139][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 180.395798][ T5916] usb 4-1: config 255 has an invalid interface number: 222 but max is 0 [ 180.523083][ T6776] openvswitch: netlink: Message has 8 unknown bytes. [ 180.545958][ T5916] usb 4-1: config 255 has an invalid descriptor of length 35, skipping remainder of the config [ 180.988539][ T5916] usb 4-1: config 255 has no interface number 0 [ 181.108911][ T5916] usb 4-1: config 255 interface 222 altsetting 0 endpoint 0x4 has invalid maxpacket 60364, setting to 64 [ 181.192288][ T5916] usb 4-1: config 255 interface 222 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.514773][ T5916] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=4d.b4 [ 181.564747][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.618979][ T5916] usb 4-1: Product: syz [ 181.623203][ T5916] usb 4-1: Manufacturer: syz [ 181.636265][ T5916] usb 4-1: SerialNumber: syz [ 181.679471][ T5916] HFC-S_USB 4-1:255.222: probe with driver HFC-S_USB failed with error -5 [ 181.901665][ T6762] netlink: 'syz.3.240': attribute type 5 has an invalid length. [ 182.000726][ T5879] usb 4-1: USB disconnect, device number 5 [ 182.057558][ T6785] FAULT_INJECTION: forcing a failure. [ 182.057558][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 182.117585][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.2.245 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 182.117613][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.117625][ T6785] Call Trace: [ 182.117633][ T6785] [ 182.117642][ T6785] dump_stack_lvl+0x189/0x250 [ 182.117675][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.117702][ T6785] ? __pfx__printk+0x10/0x10 [ 182.117738][ T6785] ? __pfx___might_resched+0x10/0x10 [ 182.117766][ T6785] ? fs_reclaim_acquire+0x7d/0x100 [ 182.117793][ T6785] should_fail_ex+0x414/0x560 [ 182.117819][ T6785] should_failslab+0xa8/0x100 [ 182.117839][ T6785] __kmalloc_noprof+0xcb/0x4f0 [ 182.117866][ T6785] ? kfree+0x4d/0x440 [ 182.117890][ T6785] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.117922][ T6785] tomoyo_realpath_from_path+0xe3/0x5d0 [ 182.117950][ T6785] ? tomoyo_domain+0xda/0x130 [ 182.117982][ T6785] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 182.118004][ T6785] tomoyo_path_number_perm+0x1e8/0x5a0 [ 182.118025][ T6785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.118073][ T6785] ? __lock_acquire+0xaac/0xd20 [ 182.118114][ T6785] ? __fget_files+0x2a/0x420 [ 182.118137][ T6785] ? __fget_files+0x3a0/0x420 [ 182.118153][ T6785] ? __fget_files+0x2a/0x420 [ 182.118174][ T6785] security_file_ioctl+0xcb/0x2d0 [ 182.118199][ T6785] __se_sys_ioctl+0x47/0x170 [ 182.118227][ T6785] do_syscall_64+0xf6/0x210 [ 182.118263][ T6785] ? clear_bhb_loop+0x60/0xb0 [ 182.118285][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.118302][ T6785] RIP: 0033:0x7f4b01d8e969 [ 182.118318][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.118333][ T6785] RSP: 002b:00007f4b02cb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.118352][ T6785] RAX: ffffffffffffffda RBX: 00007f4b01fb5fa0 RCX: 00007f4b01d8e969 [ 182.118366][ T6785] RDX: 0000000000000000 RSI: 0000000080e85411 RDI: 0000000000000003 [ 182.118376][ T6785] RBP: 00007f4b02cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 182.118387][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.118397][ T6785] R13: 0000000000000000 R14: 00007f4b01fb5fa0 R15: 00007fff9f2f2d38 [ 182.118426][ T6785] [ 182.122945][ T6785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.377020][ T5916] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.626132][ T5958] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 182.710917][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.736242][ T5916] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 182.768589][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.784293][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.799216][ T5958] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 182.810775][ T5958] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 182.810793][ T5958] usb 1-1: config 0 has no interface number 0 [ 182.814087][ T5958] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 182.814108][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.814122][ T5958] usb 1-1: Product: syz [ 182.814133][ T5958] usb 1-1: Manufacturer: syz [ 182.814144][ T5958] usb 1-1: SerialNumber: syz [ 182.821970][ T5958] usb 1-1: config 0 descriptor?? [ 182.825376][ T5958] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 182.825411][ T5958] usb 1-1: No valid video chain found. [ 182.829828][ T5916] usb 5-1: Product: syz [ 182.829849][ T5916] usb 5-1: Manufacturer: syz [ 182.829865][ T5916] usb 5-1: SerialNumber: syz [ 182.849185][ T5916] cdc_mbim 5-1:1.0: skipping garbage [ 183.055558][ T6790] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 183.724109][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.376221][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 184.620134][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.156447][ T6806] input: syz1 as /devices/virtual/input/input7 [ 186.247262][ T6813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 186.255049][ T5916] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 186.445723][ T5916] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 186.473161][ T5916] wwan wwan0: port wwan0mbim0 attached [ 186.580563][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 186.599381][ T5878] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 186.599436][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.620666][ T5916] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 16:b4:67:d1:ec:de [ 186.638323][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.647885][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.693402][ T5879] usb 1-1: USB disconnect, device number 11 [ 186.712449][ T6819] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.737424][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 186.748238][ T5878] usb 4-1: config 0 descriptor?? [ 186.754720][ T5878] usb 4-1: can't set config #0, error -71 [ 186.790697][ T5958] usb 5-1: USB disconnect, device number 8 [ 186.808388][ T5958] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 186.949838][ T5878] usb 4-1: USB disconnect, device number 6 [ 187.027673][ T6822] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.036808][ T6822] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.045618][ T6822] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.054368][ T6822] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.170379][ T6822] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.179385][ T6822] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.188372][ T6822] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.197308][ T6822] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.326511][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.906132][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 187.926010][ T5878] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.312598][ T5878] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.626876][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.663354][ T5878] usb 4-1: config 1 has no interface number 0 [ 188.674362][ T6834] fuse: Bad value for 'fd' [ 188.679783][ T5878] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.731592][ T5878] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.849666][ T5878] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.862842][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.238226][ T5878] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 189.299448][ T5958] wwan wwan0: port wwan0mbim0 disconnected [ 189.501937][ T5878] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 189.633848][ T6849] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 190.224148][ T9] usb 4-1: USB disconnect, device number 7 [ 190.232453][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 191.566239][ T6862] netlink: 44 bytes leftover after parsing attributes in process `syz.4.264'. [ 191.591172][ T6862] use of bytesused == 0 is deprecated and will be removed in the future, [ 191.599894][ T6862] use the actual size instead. [ 192.456135][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.626162][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 192.640300][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.659270][ T5879] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.706472][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.735459][ T6875] program syz.4.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.756815][ T5879] usb 2-1: Product: syz [ 192.770378][ T5879] usb 2-1: Manufacturer: syz [ 192.831888][ T5879] usb 2-1: SerialNumber: syz [ 192.873496][ T5879] usb 2-1: config 0 descriptor?? [ 192.907682][ T5879] gs_usb 2-1:0.0: Required endpoints not found [ 193.299072][ T5879] usb 2-1: USB disconnect, device number 12 [ 193.377068][ T6884] FAULT_INJECTION: forcing a failure. [ 193.377068][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.390606][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.3.273 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 193.390625][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.390634][ T6884] Call Trace: [ 193.390640][ T6884] [ 193.390646][ T6884] dump_stack_lvl+0x189/0x250 [ 193.390668][ T6884] ? __lock_acquire+0xaac/0xd20 [ 193.390690][ T6884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.390709][ T6884] ? __pfx__printk+0x10/0x10 [ 193.390732][ T6884] ? __might_fault+0xb0/0x130 [ 193.390762][ T6884] should_fail_ex+0x414/0x560 [ 193.390781][ T6884] _copy_from_iter+0x1db/0x15a0 [ 193.390805][ T6884] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 193.390825][ T6884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 193.390848][ T6884] ? __pfx__copy_from_iter+0x10/0x10 [ 193.390867][ T6884] ? __build_skb_around+0x257/0x3e0 [ 193.390887][ T6884] ? netlink_sendmsg+0x642/0xb30 [ 193.390903][ T6884] ? skb_put+0x11b/0x210 [ 193.390923][ T6884] netlink_sendmsg+0x6b2/0xb30 [ 193.390939][ T6884] ? is_bpf_text_address+0x26/0x2b0 [ 193.390965][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.390988][ T6884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.391004][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.391021][ T6884] __sock_sendmsg+0x219/0x270 [ 193.391038][ T6884] ____sys_sendmsg+0x505/0x830 [ 193.391062][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.391089][ T6884] ? import_iovec+0x74/0xa0 [ 193.391111][ T6884] ___sys_sendmsg+0x21f/0x2a0 [ 193.391133][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.391178][ T6884] ? __fget_files+0x2a/0x420 [ 193.391191][ T6884] ? __fget_files+0x3a0/0x420 [ 193.391212][ T6884] __x64_sys_sendmsg+0x19b/0x260 [ 193.391234][ T6884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.391266][ T6884] ? do_syscall_64+0xba/0x210 [ 193.391293][ T6884] do_syscall_64+0xf6/0x210 [ 193.391311][ T6884] ? clear_bhb_loop+0x60/0xb0 [ 193.391329][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.391342][ T6884] RIP: 0033:0x7f65c138e969 [ 193.391354][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.391366][ T6884] RSP: 002b:00007f65c2246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.391381][ T6884] RAX: ffffffffffffffda RBX: 00007f65c15b5fa0 RCX: 00007f65c138e969 [ 193.391391][ T6884] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000003 [ 193.391399][ T6884] RBP: 00007f65c2246090 R08: 0000000000000000 R09: 0000000000000000 [ 193.391408][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.391416][ T6884] R13: 0000000000000000 R14: 00007f65c15b5fa0 R15: 00007ffc03b29c78 [ 193.391445][ T6884] [ 193.788094][ T6886] openvswitch: netlink: Message has 8 unknown bytes. [ 194.209697][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.215992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.285201][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 194.453889][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 195.898121][ T5879] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 196.266896][ T5879] usb 3-1: config 1 interface 0 has no altsetting 0 [ 196.277187][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.288695][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.331452][ T5879] usb 3-1: Product: syz [ 196.348183][ T5879] usb 3-1: Manufacturer: syz [ 196.370863][ T5879] usb 3-1: SerialNumber: syz [ 197.545060][ T30] audit: type=1804 audit(1748049404.689:7): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.280" name="/newroot/50/file1" dev="fuse" ino=1 res=1 errno=0 [ 197.626316][ T5879] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 197.646155][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.646920][ T30] audit: type=1800 audit(1748049404.689:8): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.280" name="/" dev="fuse" ino=1 res=0 errno=0 [ 197.683311][ T30] audit: type=1800 audit(1748049404.719:9): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.280" name="/" dev="fuse" ino=1 res=0 errno=0 [ 197.776231][ T5916] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 197.848446][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.897253][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 197.914403][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 197.929677][ T9] usb 5-1: Product: syz [ 197.940309][ T9] usb 5-1: Manufacturer: syz [ 197.944718][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 197.956877][ T9] usb 5-1: SerialNumber: syz [ 197.977329][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.005606][ T5916] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 198.034045][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.081801][ T5916] usb 2-1: Product: syz [ 198.099831][ T5916] usb 2-1: Manufacturer: syz [ 198.119910][ T5916] usb 2-1: SerialNumber: syz [ 198.147965][ T5916] usb 2-1: config 0 descriptor?? [ 198.188198][ T5916] gs_usb 2-1:0.0: Required endpoints not found [ 198.205845][ T9] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.399293][ T9] usb 2-1: USB disconnect, device number 13 [ 198.428758][ T5916] usb 5-1: USB disconnect, device number 9 [ 198.479860][ T5916] usblp1: removed [ 198.717269][ T6931] Bluetooth: MGMT ver 1.23 [ 199.097969][ T5811] usb 3-1: USB disconnect, device number 9 [ 199.139620][ T5811] usblp0: removed [ 199.396460][ T6937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.599463][ T6961] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.317160][ T6970] IPVS: Error connecting to the multicast addr [ 205.866318][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.098193][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.143130][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 206.165596][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 206.198001][ T9] usb 1-1: Product: syz [ 206.202260][ T9] usb 1-1: Manufacturer: syz [ 206.231291][ T9] usb 1-1: SerialNumber: syz [ 206.466024][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 206.692440][ T5879] usb 1-1: USB disconnect, device number 12 [ 206.714969][ T5879] usblp0: removed [ 207.038549][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 207.989266][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 208.334924][ T7009] openvswitch: netlink: Message has 8 unknown bytes. [ 208.405746][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 208.462269][ T24] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 208.496207][ T24] usb 2-1: config 0 has no interface number 0 [ 208.596302][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 208.616167][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.646138][ T24] usb 2-1: Product: syz [ 208.650362][ T24] usb 2-1: Manufacturer: syz [ 208.688150][ T24] usb 2-1: SerialNumber: syz [ 208.920749][ T24] usb 2-1: config 0 descriptor?? [ 208.946016][ T24] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 208.952731][ T24] usb 2-1: No valid video chain found. [ 212.447124][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 212.453829][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 212.463198][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 212.470831][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 212.526588][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.800255][ T7044] IPVS: Error connecting to the multicast addr [ 213.298564][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.314255][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 213.334735][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.345350][ T24] usb 4-1: Product: syz [ 213.349737][ T24] usb 4-1: Manufacturer: syz [ 213.354417][ T24] usb 4-1: SerialNumber: syz [ 213.458073][ T5958] usb 2-1: USB disconnect, device number 14 [ 213.631696][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 213.950609][ T24] usb 4-1: USB disconnect, device number 8 [ 214.073222][ T24] usblp0: removed [ 214.576648][ T5958] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.817349][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 217.309495][ T7076] FAULT_INJECTION: forcing a failure. [ 217.309495][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.374221][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.0.327 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 217.374252][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.374264][ T7076] Call Trace: [ 217.374272][ T7076] [ 217.374281][ T7076] dump_stack_lvl+0x189/0x250 [ 217.374313][ T7076] ? __lock_acquire+0xaac/0xd20 [ 217.374344][ T7076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.374372][ T7076] ? __pfx__printk+0x10/0x10 [ 217.374403][ T7076] ? __might_fault+0xb0/0x130 [ 217.374447][ T7076] should_fail_ex+0x414/0x560 [ 217.374474][ T7076] _copy_from_iter+0x1db/0x15a0 [ 217.374508][ T7076] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 217.374536][ T7076] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 217.374568][ T7076] ? __pfx__copy_from_iter+0x10/0x10 [ 217.374595][ T7076] ? __build_skb_around+0x257/0x3e0 [ 217.374626][ T7076] ? netlink_sendmsg+0x642/0xb30 [ 217.374648][ T7076] ? skb_put+0x11b/0x210 [ 217.374678][ T7076] netlink_sendmsg+0x6b2/0xb30 [ 217.374700][ T7076] ? is_bpf_text_address+0x26/0x2b0 [ 217.374737][ T7076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.374770][ T7076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.374792][ T7076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.374817][ T7076] __sock_sendmsg+0x219/0x270 [ 217.374841][ T7076] ____sys_sendmsg+0x505/0x830 [ 217.374875][ T7076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.374914][ T7076] ? import_iovec+0x74/0xa0 [ 217.374946][ T7076] ___sys_sendmsg+0x21f/0x2a0 [ 217.374976][ T7076] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.375043][ T7076] ? __fget_files+0x2a/0x420 [ 217.375061][ T7076] ? __fget_files+0x3a0/0x420 [ 217.375092][ T7076] __x64_sys_sendmsg+0x19b/0x260 [ 217.375123][ T7076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.375169][ T7076] ? do_syscall_64+0xba/0x210 [ 217.375200][ T7076] do_syscall_64+0xf6/0x210 [ 217.375233][ T7076] ? clear_bhb_loop+0x60/0xb0 [ 217.375262][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.375281][ T7076] RIP: 0033:0x7fd0ef98e969 [ 217.375299][ T7076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.375316][ T7076] RSP: 002b:00007fd0f07b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.375337][ T7076] RAX: ffffffffffffffda RBX: 00007fd0efbb5fa0 RCX: 00007fd0ef98e969 [ 217.375352][ T7076] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 217.375364][ T7076] RBP: 00007fd0f07b6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.375376][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.375387][ T7076] R13: 0000000000000000 R14: 00007fd0efbb5fa0 R15: 00007fffb9712318 [ 217.375419][ T7076] [ 219.504756][ T5958] usb 5-1: device descriptor read/all, error -71 [ 220.050080][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 220.480604][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.686740][ T7113] x_tables: duplicate underflow at hook 1 [ 220.728290][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.635462][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.989380][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.089861][ T9] usb 3-1: Product: syz [ 222.094111][ T9] usb 3-1: Manufacturer: syz [ 222.105032][ T9] usb 3-1: SerialNumber: syz [ 222.341342][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.377526][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.466233][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.245606][ C1] usblp0: nonzero write bulk status received: -71 [ 223.272243][ T5906] usb 3-1: USB disconnect, device number 10 [ 223.279176][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 223.940812][ T5876] usb 1-1: device descriptor read/all, error -71 [ 223.947152][ T5879] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.970139][ T5906] usblp0: removed [ 224.188892][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.268194][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.315648][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.347937][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.365664][ T5879] usb 5-1: Product: syz [ 224.389758][ T5879] usb 5-1: Manufacturer: syz [ 224.408980][ T5879] usb 5-1: SerialNumber: syz [ 224.764943][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 224.786167][ T5906] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 224.856792][ T5879] usb 5-1: 0:2 : does not exist [ 224.960199][ T5906] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 224.975739][ T5906] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 225.004597][ T5906] usb 3-1: config 0 has no interface number 0 [ 225.032826][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 225.073050][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.106291][ T5906] usb 3-1: Product: syz [ 225.111671][ T5906] usb 3-1: Manufacturer: syz [ 225.132341][ T5906] usb 3-1: SerialNumber: syz [ 225.161205][ T5906] usb 3-1: config 0 descriptor?? [ 225.190424][ T5906] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 225.224698][ T5906] usb 3-1: No valid video chain found. [ 225.381244][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 228.580275][ T7163] process 'syz.4.342' launched '/dev/fd/8' with NULL argv: empty string added [ 228.727735][ T7170] FAULT_INJECTION: forcing a failure. [ 228.727735][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.766241][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.354 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 228.766270][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.766282][ T7170] Call Trace: [ 228.766290][ T7170] [ 228.766298][ T7170] dump_stack_lvl+0x189/0x250 [ 228.766334][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.766361][ T7170] ? __pfx__printk+0x10/0x10 [ 228.766403][ T7170] should_fail_ex+0x414/0x560 [ 228.766430][ T7170] _copy_to_user+0x31/0xb0 [ 228.766461][ T7170] simple_read_from_buffer+0xe1/0x170 [ 228.766496][ T7170] proc_fail_nth_read+0x1df/0x250 [ 228.766520][ T7170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.766544][ T7170] ? rw_verify_area+0x258/0x650 [ 228.766570][ T7170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.766592][ T7170] vfs_read+0x200/0x980 [ 228.766624][ T7170] ? __pfx___mutex_lock+0x10/0x10 [ 228.766650][ T7170] ? __pfx_vfs_read+0x10/0x10 [ 228.766678][ T7170] ? __fget_files+0x2a/0x420 [ 228.766702][ T7170] ? __fget_files+0x3a0/0x420 [ 228.766719][ T7170] ? __fget_files+0x2a/0x420 [ 228.766746][ T7170] ksys_read+0x145/0x250 [ 228.766771][ T7170] ? rcu_is_watching+0x15/0xb0 [ 228.766801][ T7170] ? __pfx_ksys_read+0x10/0x10 [ 228.766832][ T7170] ? do_syscall_64+0xba/0x210 [ 228.766862][ T7170] do_syscall_64+0xf6/0x210 [ 228.766887][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 228.766912][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.766931][ T7170] RIP: 0033:0x7fd0ef98d37c [ 228.766948][ T7170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.766964][ T7170] RSP: 002b:00007fd0f0795030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.766985][ T7170] RAX: ffffffffffffffda RBX: 00007fd0efbb6080 RCX: 00007fd0ef98d37c [ 228.766999][ T7170] RDX: 000000000000000f RSI: 00007fd0f07950a0 RDI: 0000000000000004 [ 228.767011][ T7170] RBP: 00007fd0f0795090 R08: 0000000000000000 R09: 0000000000000000 [ 228.767023][ T7170] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 228.767034][ T7170] R13: 0000000000000000 R14: 00007fd0efbb6080 R15: 00007fffb9712318 [ 228.767066][ T7170] [ 229.981739][ T5879] usb 5-1: USB disconnect, device number 12 [ 230.167508][ T5958] usb 3-1: USB disconnect, device number 11 [ 232.167180][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.311180][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 232.495822][ T5811] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.145322][ T5983] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.298532][ T5811] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 233.308534][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.346207][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.362578][ T5983] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.384851][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.404954][ T5983] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 233.423421][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.438556][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 233.447465][ T5983] usb 4-1: Product: syz [ 233.451782][ T5983] usb 4-1: Manufacturer: syz [ 233.456640][ T5811] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.466137][ T5983] usb 4-1: SerialNumber: syz [ 233.471066][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.563391][ T5811] usb 2-1: config 0 descriptor?? [ 233.616521][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.953332][ T5983] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.096697][ T24] usb 1-1: device descriptor read/64, error -71 [ 234.286540][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 234.292725][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.301720][ C0] usblp0: nonzero write bulk status received: -71 [ 234.302144][ T5879] usb 4-1: USB disconnect, device number 9 [ 234.311714][ T5811] usb 2-1: USB disconnect, device number 15 [ 234.318038][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 234.364594][ T5879] usblp0: removed [ 234.387201][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 234.536313][ T24] usb 1-1: device descriptor read/64, error -71 [ 234.545024][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 234.554273][ T5916] usb 3-1: can't read configurations, error -61 [ 234.669177][ T24] usb usb1-port1: attempt power cycle [ 234.706599][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.927634][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 234.935964][ T5916] usb 3-1: can't read configurations, error -61 [ 234.975547][ T5916] usb usb3-port1: attempt power cycle [ 235.026251][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 235.057519][ T24] usb 1-1: device descriptor read/8, error -71 [ 235.130244][ T7238] bridge0: port 3(veth0_to_bridge) entered blocking state [ 235.137730][ T7238] bridge0: port 3(veth0_to_bridge) entered disabled state [ 235.146503][ T7238] veth0_to_bridge: entered allmulticast mode [ 235.154249][ T7238] veth0_to_bridge: entered promiscuous mode [ 235.163524][ T7238] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.178031][ T7238] bridge0: port 3(veth0_to_bridge) entered blocking state [ 235.186236][ T7238] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 235.311746][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 235.336177][ T5916] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.354719][ T24] usb 1-1: device descriptor read/8, error -71 [ 235.381717][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 235.400899][ T5916] usb 3-1: can't read configurations, error -61 [ 235.489518][ T24] usb usb1-port1: unable to enumerate USB device [ 235.573790][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 235.648692][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 235.675571][ T5916] usb 3-1: can't read configurations, error -61 [ 235.718358][ T5916] usb usb3-port1: unable to enumerate USB device [ 239.412787][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 239.511807][ T7272] bridge0: port 3(veth0_to_bridge) entered blocking state [ 239.532555][ T7272] bridge0: port 3(veth0_to_bridge) entered disabled state [ 239.549779][ T7272] veth0_to_bridge: entered allmulticast mode [ 239.567797][ T7272] veth0_to_bridge: entered promiscuous mode [ 239.573896][ T7272] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.617535][ T7272] bridge0: port 3(veth0_to_bridge) entered blocking state [ 239.624781][ T7272] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 239.776566][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 239.784820][ T24] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 239.799147][ T24] usb 1-1: config 0 has no interface number 0 [ 239.815566][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 239.825409][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.848513][ T24] usb 1-1: Product: syz [ 239.917753][ T24] usb 1-1: Manufacturer: syz [ 239.980149][ T24] usb 1-1: SerialNumber: syz [ 240.186372][ T24] usb 1-1: config 0 descriptor?? [ 240.394937][ T24] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 240.424784][ T24] usb 1-1: No valid video chain found. [ 241.953957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.072993][ T24] usb 1-1: USB disconnect, device number 19 [ 245.976283][ T5811] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 246.186315][ T5811] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 246.197204][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.233037][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.264072][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.295085][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.316147][ T5958] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 246.344871][ T5811] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.490274][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.298667][ T5811] usb 1-1: config 0 descriptor?? [ 247.304153][ T5811] usb 1-1: can't set config #0, error -71 [ 247.312627][ T5811] usb 1-1: USB disconnect, device number 20 [ 247.320963][ T5958] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.345310][ T5958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.375538][ T7319] bridge0: port 3(veth0_to_bridge) entered blocking state [ 247.376872][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.391470][ T7319] bridge0: port 3(veth0_to_bridge) entered disabled state [ 247.415836][ T7319] veth0_to_bridge: entered allmulticast mode [ 247.435600][ T5958] usb 2-1: Product: syz [ 247.454509][ T7319] veth0_to_bridge: entered promiscuous mode [ 247.460591][ T5958] usb 2-1: Manufacturer: syz [ 247.465277][ T5958] usb 2-1: SerialNumber: syz [ 247.475558][ T7319] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.783164][ T7319] bridge0: port 3(veth0_to_bridge) entered blocking state [ 247.790514][ T7319] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 248.190523][ T5958] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.624415][ T5958] usb 2-1: USB disconnect, device number 16 [ 248.645228][ T5958] usblp0: removed [ 248.776117][ T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 250.827926][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 250.846467][ T24] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 250.854702][ T24] usb 1-1: config 0 has no interface number 0 [ 250.865677][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 250.881913][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.891116][ T24] usb 1-1: Product: syz [ 250.895718][ T24] usb 1-1: Manufacturer: syz [ 250.900773][ T24] usb 1-1: SerialNumber: syz [ 250.939525][ T24] usb 1-1: config 0 descriptor?? [ 250.975705][ T24] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 251.026231][ T24] usb 1-1: No valid video chain found. [ 252.686860][ T24] usb 1-1: USB disconnect, device number 21 [ 254.136116][ T5811] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 254.901423][ T5811] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 254.916085][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.933220][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.956551][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.986093][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.019025][ T5811] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.038832][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.162986][ T5811] usb 3-1: config 0 descriptor?? [ 255.464024][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 255.667114][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058557][ T5811] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.176974][ T5811] usb 3-1: USB disconnect, device number 16 [ 258.483196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.495740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.508392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.520937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.533438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.545735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.558049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.570345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.582588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.594844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.486080][ C0] net_ratelimit: 20586 callbacks suppressed [ 263.486124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.486272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.492565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.504397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.516448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.528546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.540357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.552334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.564385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.576329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.686028][ C1] sched: DL replenish lagged too much [ 268.496174][ C1] net_ratelimit: 24833 callbacks suppressed [ 268.496196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.496449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.502492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.514540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.526592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.538346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.550414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.562413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.574377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.586344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.506119][ C0] net_ratelimit: 26003 callbacks suppressed [ 273.506142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.506447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.512517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.524491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.536388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.548122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.560186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.572246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.583951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.595988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.516123][ C0] net_ratelimit: 24666 callbacks suppressed [ 278.516143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.516194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.522478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.534289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.546489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.558337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.570129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.582010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.593952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.606210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.876563][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 283.526188][ C1] net_ratelimit: 24426 callbacks suppressed [ 283.526209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.526369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.532463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.544657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.556582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.568416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.580316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.592326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.604415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.616283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.536192][ C1] net_ratelimit: 24854 callbacks suppressed [ 288.536214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.536355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.542686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.554505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.566319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.578264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.590497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.602077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.614151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.626146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.546194][ C1] net_ratelimit: 25473 callbacks suppressed [ 293.546216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.546861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.552657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.564719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.576830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.588559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.600594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.612584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.624639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.636411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.556136][ C0] net_ratelimit: 25438 callbacks suppressed [ 298.556157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.556202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.562420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.574547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.586407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.598258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.611658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.622305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.634114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.646069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.566193][ C0] net_ratelimit: 25703 callbacks suppressed [ 303.566214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.566379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.572510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.584409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.596438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.608371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.620217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.632163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.644170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.656256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.576281][ C0] net_ratelimit: 25647 callbacks suppressed [ 308.576301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.576387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.582576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.594604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.606649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.618569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.630619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.642297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.654361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.666420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.586115][ C1] net_ratelimit: 26074 callbacks suppressed [ 313.586138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.586317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.592450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.604579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.616445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.628332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.640225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.652198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.664346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.676212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.596060][ C1] net_ratelimit: 24423 callbacks suppressed [ 318.596080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.596255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.602324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.614300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.626408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.638193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.650084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.662153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.674144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.686984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.928932][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.947995][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.606178][ C1] net_ratelimit: 21379 callbacks suppressed [ 323.606199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.606930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.612560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.624395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.636351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.648387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.660371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.672272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.684026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.696118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.616231][ C1] net_ratelimit: 21393 callbacks suppressed [ 328.616253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.617968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.622538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.634508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.646647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.658532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.670336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.682499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.694350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.706127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.626130][ C0] net_ratelimit: 19700 callbacks suppressed [ 333.626151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.626247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.634189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.644348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.656276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.668386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.680287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.692120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.704210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.716070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.636258][ C1] net_ratelimit: 18456 callbacks suppressed [ 338.636279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.638010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.642655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.654498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.666524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.678724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.690521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.702469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.714484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.726170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.646180][ C0] net_ratelimit: 18249 callbacks suppressed [ 343.646202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.646649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.652503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.664678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.678577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.688399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.700262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.712310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.724313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.736274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.656095][ C1] net_ratelimit: 18195 callbacks suppressed [ 348.656117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.657178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.662505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.674449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.686423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.698456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.710384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.722366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.734314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.746061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.666415][ C1] net_ratelimit: 17976 callbacks suppressed [ 353.666435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.668186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.673839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.684957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.696749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.708662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.720724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.732727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.744618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.756572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.676099][ C1] net_ratelimit: 16065 callbacks suppressed [ 358.676119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.676300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.682569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.695275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.707578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.718389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.730371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.742382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.754167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.766125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.686317][ C1] net_ratelimit: 16631 callbacks suppressed [ 363.686340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.687634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.692751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:cd:03:78:a1:b3, vlan:0) [ 363.705093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.716481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.728519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.741410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.752324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.764333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.776339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.635982][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 366.642969][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7410/1:b..l [ 366.651230][ C0] rcu: (detected by 0, t=10503 jiffies, g=20105, q=4727 ncpus=2) [ 366.659050][ C0] task:syz.1.421 state:R running task stack:26520 pid:7410 tgid:7408 ppid:5823 task_flags:0x40044c flags:0x00000002 [ 366.673175][ C0] Call Trace: [ 366.676469][ C0] [ 366.679420][ C0] __schedule+0x168f/0x4c70 [ 366.683961][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 366.689266][ C0] ? __pfx___schedule+0x10/0x10 [ 366.694138][ C0] ? do_syscall_64+0x103/0x210 [ 366.698922][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.705009][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.711195][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 366.716505][ C0] preempt_schedule_irq+0xb5/0x150 [ 366.721637][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 366.727383][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 366.733214][ C0] irqentry_exit+0x6f/0x90 [ 366.737650][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 366.743645][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x90 [ 366.750427][ C0] Code: 89 74 11 18 48 89 44 11 20 e9 58 62 92 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 14 25 08 a0 72 92 65 8b 0d f8 aa b2 10 81 e1 [ 366.770073][ C0] RSP: 0018:ffffc90003dbf058 EFLAGS: 00000246 [ 366.776170][ C0] RAX: 0000000000000001 RBX: 000000000004dad0 RCX: 36a8f3c2c8ef7700 [ 366.784154][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 366.792145][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 366.800146][ C0] R10: 0000000000000000 R11: ffffffff8228ee3e R12: 0000000000000120 [ 366.808246][ C0] R13: 0000000000000000 R14: ffff88801b180000 R15: dffffc0000000000 [ 366.816280][ C0] ? __update_page_owner_free_handle+0x2e/0x450 [ 366.822562][ C0] page_ext_lookup+0xed/0x160 [ 366.827281][ C0] ? __update_page_owner_free_handle+0x2e/0x450 [ 366.833566][ C0] __update_page_owner_free_handle+0xe2/0x450 [ 366.839677][ C0] ? page_ext_put+0x97/0xc0 [ 366.844221][ C0] __reset_page_owner+0x85/0x1f0 [ 366.849199][ C0] free_unref_folios+0xb70/0x1490 [ 366.854265][ C0] folios_put_refs+0x559/0x640 [ 366.859065][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 366.864421][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 366.870792][ C0] shmem_undo_range+0x49e/0x14b0 [ 366.875773][ C0] ? __lock_acquire+0xaac/0xd20 [ 366.880661][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 366.886095][ C0] ? __lock_acquire+0xaac/0xd20 [ 366.891016][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 366.896695][ C0] shmem_evict_inode+0x272/0xa70 [ 366.901655][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 366.907305][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 366.912784][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 366.918879][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 366.924099][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 366.929573][ C0] evict+0x501/0x9c0 [ 366.933501][ C0] ? __pfx_evict+0x10/0x10 [ 366.937931][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 366.943164][ C0] ? _raw_spin_unlock+0x28/0x50 [ 366.948043][ C0] ? iput+0x6d8/0x9d0 [ 366.952054][ C0] __dentry_kill+0x209/0x660 [ 366.956664][ C0] ? dput+0x37/0x2b0 [ 366.960579][ C0] dput+0x19f/0x2b0 [ 366.964406][ C0] __fput+0x68e/0xa70 [ 366.968416][ C0] task_work_run+0x1d4/0x260 [ 366.973035][ C0] ? __pfx_task_work_run+0x10/0x10 [ 366.978189][ C0] do_exit+0x8d6/0x2550 [ 366.982371][ C0] ? do_raw_spin_lock+0x121/0x290 [ 366.987410][ C0] ? __pfx_do_exit+0x10/0x10 [ 366.992016][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 366.997425][ C0] do_group_exit+0x21c/0x2d0 [ 367.002039][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.007261][ C0] get_signal+0x125e/0x1310 [ 367.011804][ C0] arch_do_signal_or_restart+0x95/0x780 [ 367.017375][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.023569][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 367.029491][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 367.035067][ C0] do_syscall_64+0x103/0x210 [ 367.039677][ C0] ? clear_bhb_loop+0x60/0xb0 [ 367.044374][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.050304][ C0] RIP: 0033:0x7efefc78e969 [ 367.054751][ C0] RSP: 002b:00007efefd690038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 367.063185][ C0] RAX: 0000000000010106 RBX: 00007efefc9b6080 RCX: 00007efefc78e969 [ 367.071200][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 367.079189][ C0] RBP: 00007efefc810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 367.087178][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 367.095162][ C0] R13: 0000000000000000 R14: 00007efefc9b6080 R15: 00007fffb7fab688 [ 367.103161][ C0] [ 368.696064][ C1] net_ratelimit: 17903 callbacks suppressed [ 368.696083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:be:52:75:7b:47, vlan:0) [ 368.697268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.702298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.714820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.726308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:cd:03:78:a1:b3, vlan:0) [ 368.738241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.750057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.761917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.774848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.785939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.706187][ C0] net_ratelimit: 18315 callbacks suppressed [ 373.706207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.707002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.712558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.724453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.736313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.748304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.760423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.772225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.784173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:75:72:3d:93:be, vlan:0) [ 373.796023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)