last executing test programs: 1m22.140301911s ago: executing program 0 (id=534): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5d30, &(0x7f0000000140)={0x0, 0xb2ba, 0x20000, 0x3, 0x2ff}, &(0x7f00000001c0), &(0x7f0000000200)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000499000/0x3000)=nil, 0x3000, 0xf, 0x12010, r0, 0x10000000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ff1131330000000000010902240001000040b1090400000103000100092101628c393f050009058103ff030c0000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x133, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x121, 0x2, 0x1, 0xfb, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "e3acb316"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x67, 0x0, 0x5f2}, {0x6, 0x24, 0x1a, 0x2}, [@mdlm_detail={0xac, 0x24, 0x13, 0xfd, "062cf1830d92215af3a93abce51998da0adbf1c3e6577986f4585ee547febdc534ebcc3c338f45ca3583effa72ce8226ae8ce68594a926b07f41efb33b928057de5c970a879fe2cdb7a9600a293c1529f1a98fd26bc2386ebf81b63553d1e516a570d191a661c7d3ca7a83f3ba314610ad2c8852f6c56466d13d9cb3727c5a8efacb2220a5a575c259ea1333e19d3a1382b213f5fb81c6a214bd224a35c3b5558ca00930fa6d4a22"}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0xa3605406cbf43f1d, 0x40, 0x5, 0xfb}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x3, 0x0, 0x3, 0xff, 0x2}, 0x2a, &(0x7f0000000400)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x5, 0x1ff}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xa, 0xf0f, 0xfffe, [0xc0f0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0xe, 0x3, 0x81}]}, 0x6, [{0xaa, &(0x7f0000000440)=@string={0xaa, 0x3, "8075c0e0c46e8d9a24b5581c965ce37ad45f3a679b776a297683b804e17a7f6749b95f09404bc8cdc94e4747b327a863913b388ba3bd2bb9aec84cfb904dfa2cc42c674765e0a1a1f75c12e2cf6d671776bc4c75b9a6a2c3a8690dd4d2aea029aecca1900c437c6fd80c70b2f8e6c0ef52259ab5f90dcdc45028d050a9a11fdd090880c96de818d6eb43706f9a2db789ac65615873e756a74403c120456beefad226a3afd8fd8cf7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}, {0xf8, &(0x7f0000000580)=@string={0xf8, 0x3, "42f6a1f0ac2d8658a61baf0b2b94a3cea31843de9369b5c56e0f5e65168e9891abbc88a0a436918919a4705abf054ecb583f6c7e5ab6ec898197957f7e219b2ad3ba26f76f75e8b54f3ca9b6fd380e24c61eb9f1606b2162afc37f4bab44cfbee15b1c4a63e5031bf18da084de7c564fb2fcaace61159cec021f49167008694b7504e3f33ff0d785936b9cfffbb941d910fc9ec56dbdcd21f35bf397f6e2cb599bd2e8080a3e6a22632d7bdc8d8a126d181e1e3764d9f6f354459f70258ba33f2519aaeb8f22c5ede242b6f43958d74443917aa6b4705ada9b8d282cfd5284f9eda2ffb14a9ee25a1cdfbb9d215344067ca3902ae0b2"}}, {0xe6, &(0x7f0000000680)=@string={0xe6, 0x3, "3ffded7f96c78d44700adf9e06908802edf46d9cb88c96e9b8bd16fb818d0ee763f67acc789f47ca7c63ef538994603b03412fcba80a7ae16d003fd0189dc09bd649e83a5461b37d80be6051b405d62c78d8308f4d06f0585f939b1b68eda9e53a68ac24198a0488f2b38a8c17433bd326f459acba16e8f33db3fead74d3dc01adbf6f3d9b966d6e5134ca6789a16127aac178def60ad992697dea3159bcb6c3747cb03a3862d53c291f199238015b73d0b477ba5058f3bf874125a09b4e9c388cb64329017c968fa2d63b4654765a9efffe7a66d76b0cef67f13342496e51737dee7fdc"}}, {0x22, &(0x7f0000000780)=@string={0x22, 0x3, "59c6a244be540760b98f746233269be5fe11941a0b4a71929b0812dbf9e6ca25"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x40, 0x7, 0xf3, {0xf3, 0x23, "880ec09ca16b18efe3bfe8b59075330decd28a81401e0ca06599a2b2feb1bfe52f20853c069893c17af9c037e1584adf5d7938b849091c5d5e2664078ffd92490cc121730e0859f165fc4ff3bda34866851c4051865299393d83f13d65d27094e2ea8f378d774c5c6dc4bd09f3d5d9ecabeab7f10b38f6a629e31309c9c40089d8f3d2e7a8f8607a71b4bf5efe818f2d898a3af5e7c5dbbf7bf8467831b30f0aeb2628bc8cdb3dbd6b329978b379415e04ebd7335795a4b46f06e3b14d70f0e2a7e20bc8ddd9ed7378a7c1b626009cb6c7837066b1b0fbf7af723fbbcef883ed0950fe3c6f77ed6e299324481105e85c72"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x40, 0x13, 0x76, "51e00382c4660936cf60e081abec17cb8dc7f9689a372e9344ec3644e1a23374e5588bb5e49d1fd9aac1b9dea82fa242e9c5e256d54e4ad790aff98f88c425c954befb80c9404cf711cafadef09d79b5505f0742af81f56c4f6b3275ee3b871fab56d9a5d4b1c156db68082bfcb8474070d3b3022df7"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xe5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x1ff, 0x42, 0xfff, 0x3, 0x7, 0x0, 0x5, 0x5, 0x2, 0x200, 0xffff, 0x7}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0xfff}, &(0x7f0000000b40)={0x20, 0x83, 0x2}, &(0x7f0000000b80)={0x20, 0x87, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20edd95098c4690500000005", @ANYRESHEX=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000040)={@random="d8429b29a3bf", @local, @val={@void, {0x8100, 0x7, 0x1}}, {@llc_tr={0x11, {@llc={0xdc, 0x6, "ac4a", "dc446c89b7d00cde3c2219b6bdc62979dea7332ae71956b8e38eacee7a08"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0x77d, 0x64d, 0x7a3, 0x14]}) 1m20.288047258s ago: executing program 3 (id=541): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000300)={0x1f, 0x400000, "6d59da60ac72b12cbe3ad6b98999cac6dfde9166ca5171ed", {0x6, 0x1}, 0x200}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000100)=0x100000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1m20.281365912s ago: executing program 1 (id=542): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={r1, 0x0, 0x1, 0xdf, 0x7}) write(r0, &(0x7f0000000100)="c4ad0d23a89008d9c782ffd2a1afafc6ec25684261b89cea6b14ba664b583eabc8d41cf5a82d750ec08b81c3f717e5e3dabcc8f735766a997b5adfa230616dcae379cb03e9b2853ec1f0d64d0adda60cf5138a0748f1120fadbd39ddac810e41a4788ba635f76df12cf7cad91423e234fcc579b7787ab31f3899c2ae94c15f56ec33ecd0df981cb85d265cc2", 0x8c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r0, 0x7, {0x0, 0x0, 0x0, 0x5, 0xbc38, 0x0, 0x9, 0x1, 0x4, "1669f85999e82d8831725b7a4b77f9317082057f5e2cf0e1b5b7c3d819946a7e5408673cc093eb008a34436f1232626d0036e5f1ba74a65f936f2d9d7251a640", "3cb16a6f9dfd6e72f77463cb92cc664321e4e35b5c7df8f25c46e807e7c11f0113fa70ad096bb6fc7c697fd9b677f36ec9fd8bc11f37dcda1c1eef3bdca304f5", "b35807a7f5464b5a1708b56e498921a4502258fda1db52628488603cde2af717", [0xe652]}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x54000, 0x0) ioctl$int_in(r7, 0x73, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000440)={0x1, 0x2}) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) recvmmsg$unix(r7, &(0x7f0000000480), 0x0, 0x2000, &(0x7f00000004c0)) kexec_load(0xff, 0x7, &(0x7f0000001840)=[{&(0x7f0000000500)="f01132a6058aa4ba811600299570d340f282519df4fd8c5d2f44f1db106490e59d1a47a912f1b4d09fd657a8ed56ce08458405e020c20b801292ba327ed7e1891c8fe2a5150bafc622112b0101a805de9a214060f6317ac33682f2179eb34cff718f8e3cb86f6e200ffa56f758d666c6d64dcfb174cae8067ba3d461572a10eca4161d7fa5e8fafa2c45756badd3afda1b08fa1f7f626936e50883c0aee21d035ce6219f5610ffdf04923e3d025c40fb1e08fb56b4891185f42efef8cf2427d0ceda00682756376d7c197c36bc86b250e32640d99e321588a488c58932c3646c8e04e78a3f", 0xe5, 0x7, 0x2}, {&(0x7f0000000600)="543278d3e5cd901ae7bf05f6a2939a0ef1734c8686efbd1888c5f79441c69a68177af07e66f95686bf26522e8476c2aba756b3672fa6f69dcbe816bef17a5ce97f8547d0da854d2f1c16cf88186f5c4d677275e695d786e399a7fd3987863e1e4ab07be2304a4e1ed955749802378df7990ec89ff4665e1736882933fe6f7189b1dcfe2c3927e2", 0x87, 0x58, 0x7f}, {&(0x7f00000006c0)="bd444d64aabc23762c23e614c326ea5be47664ac1f2ce2a04178d8a6ca19575b3d8554d4445f64b2d886ecb39a7aa6fd05452b5ea947f371a5c91dc2591eaeb22bedd756b387590b0251c8e53d86aa869811ce2c60048d58f6f276e6b0fa145f095d80e372b18e4f3c6fd164", 0x6c, 0x0, 0x101}, {&(0x7f0000000740)="bb09dfe31932e583fd2809411f3fcc557ffbd0945acce15c29d786a5d1c583681c2f6572ed9c81acb2547e7f016f0fd0caccb7de9522dc250cf05ef78a921979a22e669a35c8d8b4af0eb5f67d8ccc6ddbdabb7de3845bf32e4734cccb43", 0x5e, 0x8000, 0x10001}, {&(0x7f00000007c0)="09d6778079ebacbd9d", 0x9, 0x90, 0x8}, {&(0x7f0000000800), 0x0, 0x7fffffffffffffff, 0x7}, {&(0x7f0000000840)="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", 0x1000, 0x8, 0x4}], 0x280000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x24000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x73a}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040150) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000001b40)='/dev/null\x00', &(0x7f0000001b80)='./file0\x00', 0xffffffffffffffff) preadv2(r7, &(0x7f0000001bc0), 0x0, 0x4, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000001c00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001c40)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001c80)={r10, @in={{0x2, 0x4e22, @multicast2}}, 0x5, 0x9}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'bridge0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x88b4) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000001e40)={0x0, 0x0, {0x10000, 0x1, 0x2007, 0x1, 0x2, 0x2, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000001f40)={&(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0], 0x7, r2, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000002080)={0x101, 0x9, &(0x7f0000001f80)=[0x0, r4, r2, r11, r1, r1, r2, r5, r5], &(0x7f0000001fc0)=[0x8001], &(0x7f0000002000)=[r6], &(0x7f0000002040)=[0x5, 0x100000000, 0x0, 0x5], 0x0, 0xcf5}) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f00000020c0)={0x1, 0x0, [{}]}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r7) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0xf4, r12, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}], @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xd2}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "f3fac594e869c6"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xe, 0x4, "336baa90a8cf65d11797"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xb, 0x4, "003c46d666bb3c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e72224eae5"}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xe06}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4811}, 0x880) 1m20.114912161s ago: executing program 1 (id=543): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x93, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000009c0)=[@uexit={0x0, 0x18, 0x9}, @code={0x1, 0x69, {"0fc737410f015cacb0449dc7442400e3110000c744240200600000c7442406000000000f011c24d9ff0fc77e00c744240087000000c74424023ec7397aff2c240f01b7f37f00002665460fc72d0b00000066b874000f00d0"}}, @code={0x1, 0x53, {"67450f22c4643e3e0f7828ae66baf80cb84038798bef66bafc0cb804000000ef440fc77f81c4c2c509e667660f28a3ffff000066ba2100edf3420faec766ba4200ec"}}, @code={0x1, 0x55, {"66b813008ec06536410f01cf440f20c0350c000000440f22c06664420f2391400fc71c9fc74424001c000000c744240200400000ff1c24470f31c4e1fd7fdc0fc7380f08"}}, @code={0x1, 0x65, {"660fc7b4a93fa7bbfcc403417f8500000000b766baf80cb808f3d382ef66bafc0cecf00fc74db60f2318430fa7c0b9db0b0000b800000080ba000000000f30c421f012eac463c10e2cb93f672e3e2e3e440f01c2"}}, @code={0x1, 0x59, {"c401fa2d8448feff0000450f01d1460f060f78154300000066baf80cb828ad6582ef66bafc0c66b8064066ef6466f30f1650fd640f1a4a3826f30f009d1988000041db424b0f2304"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"0f20d835080000000f22d8c4820509b10c0000000f06b8010000000f01c1f3430fa7c04e0fc7290f20c035000004000f22c0f3450faef766440f3880b700d08a8166baf80cb82275c784ef66bafc0cec"}}, @code={0x1, 0x6d, {"c4c1fd281166430f383ee6430f0743cf66b819008ec8d8ab3d56000066baf80cb8f669b08def66bafc0cb080eec7442400e7000000c7442402aa900000ff1c24c74424000c010000c7442402fa000000ff1c24c4e1595e3d00280000"}}], 0x2cd}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x7, 0x4, 0x0, 0x2, 0xff, 0x8, 0x4}, {0x4, 0x5952, 0x0, 0x401, 0x56f, 0x1, 0x800}, {0x80000008, 0xfffffff0, 0x3, 0xb, 0x5, 0x383, 0x6}, {0x40000000, 0x9, 0x6, 0x2, 0x9, 0x0, 0x5}, {0x0, 0xe, 0x6, 0x9, 0xd, 0x1, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f0000000500)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, 0x0}, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 1m20.059652459s ago: executing program 3 (id=545): openat$rtc(0xffffffffffffff9c, &(0x7f0000001640), 0x2080, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f00)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.896294109s ago: executing program 4 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0x5, 0x860e19c3c20b7d7d) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 1m19.651441775s ago: executing program 4 (id=547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x7}}}, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/4079, 0xfef}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000600)=""/33, 0x21}], 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x46) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x64, &(0x7f0000000500)=ANY=[@ANYBLOB="64036634c400781c32fb6e4db9a5a5dae0a316f6b835248eb1d4df018bf1a5282682c0afea1b0a3eb83470800af91e28cc22c62db3a49663ee3c999b9d9915ce222b4579c70500000000000000ba1ae3cd7fab932168859c75a9d322e7e9d8005294261e"]}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe04000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 1m19.201004s ago: executing program 2 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x80, 0x9, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100}}}}) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x54fbb31de3a94a90, 0x800, 0x0, 0x1}, 0x20) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.984301477s ago: executing program 0 (id=550): unshare(0x20020480) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) 1m18.909437764s ago: executing program 4 (id=551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc4, &(0x7f0000000800)={@local, @link_local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0x42, 0x1, "f3", "c13f833523fbf42055bcfe6b3bde1494c3bd5d80bb358259b04ba49697ac3881249bc2edb06b8399491c3bd73eb3d70761f05f7e399d164d45793a6c5f0ca17e0c88d2406eb598a9f86c956ed716fc406e16ba92559d3fac7776f29ca9d45292c24debd4a3efccbd38cfaa45011536b0d025e9029eb8864af89dbbee83923ef02f0b8f1f48b1de8a0a653afb3e11952daf3f987c609eaa3b96b3e2055991d4767a38ce2c2acc4452abf660"}}}}}, 0x0) recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x14004054}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_setup(0x58, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[0x0]) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x0, 0x1, @mcast1, 0xfffffffd}}}, 0x38) write(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0xffff, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002d000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfffff000, 0x6, 0x7, 0x42875, r6, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x0, 0xc, @void, @value, @void, @value}, 0x50) 1m18.86769673s ago: executing program 2 (id=552): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {0x1200}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 1m18.728316675s ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0xe703, 0x20000000}, 0x84) 1m18.562334649s ago: executing program 2 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="000000850000007a0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000090) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002abd7000fbdbdf25300000000c00990006000000360041000000060036002600000006003600100000000600360018000000060036002400"/74], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r12, r11, 0x0, 0x5) 1m18.441004897s ago: executing program 0 (id=555): syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0332b2aebdc586dd60fca33f00006701fe8000000000000c0000000000010015fe8000000000000000000000000000aa"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)="00d0", 0x2, 0xfffffffffffffffb) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) (async) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async, rerun: 64) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x80000b}, 0x1c) listen(r9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="143d06069888c3c619302d3e88a03858760600000024bd"], 0x14}}, 0x0) 1m16.620301943s ago: executing program 3 (id=556): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000300)={0x1f, 0x400000, "6d59da60ac72b12cbe3ad6b98999cac6dfde9166ca5171ed", {0x6, 0x1}, 0x200}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000100)=0x100000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1m15.788387444s ago: executing program 3 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000280)={0x0, 0x8, "6dadd3b51567f3aa46f0645bf9d84fade7cf8c0e3580f1c8cc4d0192a4ef5379", 0x3800, 0x7f, 0xe6db, 0x6, 0x2, 0x7, 0xc7, 0x0, [0x7, 0x400, 0x6, 0x5]}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000cb96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba247886a9291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e3364871ee77ba64ae799a29d42c4365f8b9928eb15a7523f43020d9803060c8221d4d8f691ac14187fa7fe929eada4e16ac2eaef502c9912c59bc1f461aa032057030e4f8fa907f80b40638c022cf66b16ca7a05c35cc075ba7c93d6556c3e736a16f24f4561115962be30c4d6a248df33862d98e3b802f20ecd8348dce1149f0d11a55345a8c6410759ab7b3da2a0813df6b07385acd40a9600aa4da6eb2cc38c522bb135da7ee2c0522a4c83c97380d83c919a34fbe774744da402cff16093328e1309bbfbe881a1e9e1221a51dbef9372f0078843e95887c91fe62efc46d25fc84109f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) syz_emit_ethernet(0xff, &(0x7f0000000400)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x2c, 0x3, 0x0, 0x0) close(r8) r9 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 1m15.534094393s ago: executing program 2 (id=558): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0x5, 0x860e19c3c20b7d7d) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 1m14.196390361s ago: executing program 1 (id=559): syz_emit_ethernet(0xce, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x44, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "ccf0294e2a3bdb"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 1m13.33635687s ago: executing program 4 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005008200000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) 1m13.199589717s ago: executing program 1 (id=561): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x1, {0x2, 0xf0, 0x1}}, 0x18) 1m13.072680998s ago: executing program 4 (id=562): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@any, 0x8fb}, 0x0, 0x2, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0x8080000, 0xf, 0x1, 0x7, 0x7f, 0x2, 0xc1, 0x9, 0x88, 0x7, 0x2}, {0x6000, 0x10000, 0x0, 0xd, 0xa1, 0x5a, 0x7e, 0x8, 0x6, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x9, 0x4, 0x9, 0x0, 0x8, 0x3, 0xc, 0x8, 0x9, 0x3}, {0xeeee8000, 0x0, 0xa, 0x2, 0x0, 0x76, 0x3, 0x65, 0x10, 0x3, 0x8, 0x81}, {0xd000, 0xeeef0000, 0xf, 0x6, 0xfd, 0x2, 0x9, 0xdf, 0x4, 0x4, 0x9, 0x2c}, {0x0, 0xd000, 0xd, 0x0, 0xf4, 0x1, 0x80, 0x5, 0x4a, 0x7, 0xd, 0x2}, {0x10000, 0xeeef0000, 0x3, 0x2f, 0x6, 0x9, 0x9, 0x84, 0x4, 0x2, 0x9d, 0x1}, {0x4000, 0x4, 0x4, 0x5, 0xb, 0x80, 0x3, 0xf, 0x3, 0x6, 0x10, 0x5e}, {0xd000, 0x10}, {0x3000, 0x8000}, 0x20, 0x0, 0x2000, 0x200202, 0xb, 0x2000, 0xeeee0000, [0x9, 0x804, 0x0, 0x5d]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = io_uring_setup(0x385d, &(0x7f0000000080)={0x0, 0xcc32, 0x400, 0x1, 0x356}) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfc, 0x3, [0x8, 0x0, 0x7]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x16, 0x9, 0x0, 0x9e}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffe}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x2, 0x5, 0x0, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x0, 0x5, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x20, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) writev(r3, &(0x7f0000001440)=[{&(0x7f0000000080)="8d", 0x1}], 0x1) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@any, 0x8fb}, 0x0, 0x2, 0x5}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0x8080000, 0xf, 0x1, 0x7, 0x7f, 0x2, 0xc1, 0x9, 0x88, 0x7, 0x2}, {0x6000, 0x10000, 0x0, 0xd, 0xa1, 0x5a, 0x7e, 0x8, 0x6, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x9, 0x4, 0x9, 0x0, 0x8, 0x3, 0xc, 0x8, 0x9, 0x3}, {0xeeee8000, 0x0, 0xa, 0x2, 0x0, 0x76, 0x3, 0x65, 0x10, 0x3, 0x8, 0x81}, {0xd000, 0xeeef0000, 0xf, 0x6, 0xfd, 0x2, 0x9, 0xdf, 0x4, 0x4, 0x9, 0x2c}, {0x0, 0xd000, 0xd, 0x0, 0xf4, 0x1, 0x80, 0x5, 0x4a, 0x7, 0xd, 0x2}, {0x10000, 0xeeef0000, 0x3, 0x2f, 0x6, 0x9, 0x9, 0x84, 0x4, 0x2, 0x9d, 0x1}, {0x4000, 0x4, 0x4, 0x5, 0xb, 0x80, 0x3, 0xf, 0x3, 0x6, 0x10, 0x5e}, {0xd000, 0x10}, {0x3000, 0x8000}, 0x20, 0x0, 0x2000, 0x200202, 0xb, 0x2000, 0xeeee0000, [0x9, 0x804, 0x0, 0x5d]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_uring_setup(0x385d, &(0x7f0000000080)={0x0, 0xcc32, 0x400, 0x1, 0x356}) (async) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfc, 0x3, [0x8, 0x0, 0x7]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x16, 0x9, 0x0, 0x9e}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffe}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x2, 0x5, 0x0, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x0, 0x5, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x20, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) close(r3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) writev(r3, &(0x7f0000001440)=[{&(0x7f0000000080)="8d", 0x1}], 0x1) (async) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 1m12.992280206s ago: executing program 2 (id=563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x10, 0x6, 0x4) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) 1m12.760592905s ago: executing program 3 (id=564): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {0x1600}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 1m12.361758161s ago: executing program 3 (id=565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000025f85e40fd0b1700a32f0102030109022400010000000009040000"], 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d00010103f80f050904000801030101000921ff00010122b00b09058103100002ba07090502032000080eb84abdf5610fb3291ec6ba0f8ada35ffd166e911e4f8"], &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB="050f050000fcf7c4f4cbd2340ed2a776f192497a443921ea37d18b8614bd931431a84f08117c1f2385226438f26a7daa24ab3f95e685d330f6049e34bf56e461c4a0bf82c27412a64763ca329442823ad4ff8c26e20fac94062f2090eb0e629e4d31f19b9ee1e1915b45fe2f6bd4e7f0bfcee4a09c7d511f85f567516c76"], 0x1, [{0x0, 0x0}]}) (async) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x95, [{{0x9, 0x4, 0x0, 0x6d, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd, 0x9, 0xd}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x58, &(0x7f0000002280)={0x5, 0xf, 0x58, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x7, 0xf00, 0xf, [0xf, 0xc00f, 0x30, 0xfff0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x3, 0x6, 0x800, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x8, 0xf00, 0xcae, [0xffc0f0, 0xf, 0x3f00, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x5, 0xfd, 0xffc0}]}, 0x3, [{0x8d, &(0x7f0000002300)=@string={0x8d, 0x3, "e1311025b3d1ecc53a299cd41546726d896558c09097883fa49b879b355e46ba0f314fb663a5fdc1009a6f92833d8bed72e7f369eb4ebfad9a6a042913017e1f0717f65317ef9c4ebde4f5160ebc1a86e13651b2b204da6057ca8fb50b600997a0cce90d5c2623dbea31ff8ec41b325dd224cc0d496d374a020f23d946a8b49f509dae0dbdbfdd07301327"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0x11, &(0x7f0000002400)=@string={0x11, 0x3, "c422d81f7246c032ffa16f48315412"}}]}) (async) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) (async) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) 1m12.172285016s ago: executing program 0 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) (async) 1m12.169159418s ago: executing program 2 (id=567): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000300)={0x1f, 0x400000, "6d59da60ac72b12cbe3ad6b98999cac6dfde9166ca5171ed", {0x6, 0x1}, 0x200}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000100)=0x100000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1m12.087773052s ago: executing program 1 (id=568): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd6000000000140080fe8000000000000000000000000000aafe8000000000000000000000000000aa800040"], 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xf8}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x99}, 0x2) 1m9.313990005s ago: executing program 4 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x101301) io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) syz_usb_connect(0x0, 0x485, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xd8, 0xf7, 0x50, 0x10, 0x19d2, 0xfffc, 0x43c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x473, 0x1, 0x9, 0x80, 0x20, 0x8, [{{0x9, 0x4, 0x5, 0x11, 0xd, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x9}}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x1}}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0x3, 0x8, 0x4, [@generic={0x4b, 0x10, "99410c29bb680fc9aa23030cdd6c501b9effc686d5d8d24fdfcf23b972fe2944ece8765f2a4c72c0cacdcc40c8de03cfd1c1ef8b24670b88d190139258903032794a80b3a9dc209dc5"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0xd7}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x7, 0x4, 0x5, [@generic={0x52, 0x10, "293e1614cd5e0a4109f435594ca26b750464874488302b037fd677242eab35baeed67dd332f0cd8e2aa69a6f8d8acad2e78577c25870d3bc307c0f8b28b922b3bef3e7eecca3ec52465392b735af78b1"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xb, 0x81, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}, @generic={0x7d, 0xd, "754bba59b848f2f9e987e3521c322c293107b51a6b71976e0c7d5bf42a2196f876e894903509b45e112438b62d138cf267d84a2efe1c7e343774bd2f75f69656f0d22b41622d114736c9af3a31510389af99fe775339cab39ee3ddb7c368bd7ad40da82dad0bb38465611fb71a76758e7fb52aedb3c39ff5c1fff1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0xb0, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x6, 0x4, [@generic={0x1a, 0x6, "f4f3aab71b892021b0bcb693c972920e566129232fc86903"}, @generic={0xc2, 0x3, "099c40f514b64137ce3c6a833e5d98840442ec2fe7acfc76b8a31c55fc4bb232971c8e221348a220c92af191134a0e8c8d0ba907d3f6c9e96272773387288c5fcb4147771b4038c963f7e9f9557d8b7b5f502b149f439792b8f4be4c9d197e09352844949a64a890669fd104d7eecd13079876a1741fdb42d9488a6cafa0d1120496f0031055d25a70898a9bba4452852ef66f105398eff41e8d5bd68a2c51493632d804de50d837e1412b98c74468f040e8ff5f3d946892874ef58c5a57434a"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0xff, 0x10, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x0, 0xf9, [@generic={0x67, 0xc, "fe23f2a60cdf0911b98ab5b037af839e80131e53b32cdcaf3055b580527758a1cfb035ab8b0b229f380479eaaf4658c2c0541d1c6b66f489b6101a93a3a786b36e1fd85f8f7bda99d298363df01d85a0428b95e8af08f3ea7bcefa8f5a1973c515a5e74979"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x7d, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xba}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0xfd, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x9, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x69, 0x10}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x65f}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x7, 0xe, 0x7f, [@generic={0x2e, 0x21, "6cee668b6f7f11e6bf42c6703ccd49049e762788c8f37efc87b56dc87388a9e5cf35d5cd77d84a8bc3b74e2b"}, @generic={0xbf, 0x21, "07549a3ecece636702ead1f9854a79bea4b11f0c37c1d43edec7cc48fb617e09f3739ec581fa5038611e5053131736e40f84762511d214d1d75f8348355fc26fb493a3ea152128a6f8e8ea4274357b0b7314a9b7d4be06e2aa4e22e35620887594f276260d232cf89411cf3c1201f6570b15bbaa8ab8aae3c707b4a7372a65290f75ed73dfa3d298d9b135bdd05ad1a2f8f0073cc9c0da2d4e5187efb73f3bfdb195c77419445b2109909f75bf2954a7530e152126a588c40e0a8653ce"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xf1, 0x1, 0x8, [@generic={0x64, 0x9, "645e18e395207179d40fc0155f8d41dd2d42df772d1d90a4154cc3bf8bde916bed324a6abd4b535628ef4122ce833e918b5c536ea6f398d381017834f58c9e417a25ab87eae4c6114624d2f7da6a60d740eaa74c0fb8555b73ded3028123f140597d"}, @generic={0x2, 0x22}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0xe, 0xf9, 0x8, 0x8}, 0xf8, &(0x7f0000000240)=ANY=[@ANYBLOB="050ff80005141004de1987234dc81dce61816b18ef425d14650710021e8d00010c100afe000000000f78080003100bc9100158885ed546b0854d998e1139146ac73e24244f34345b474fdd885c5955f8ab5c1ba10f495de29cb711820ddd7611d4e4122d6aec8a42e5d3ee55e511a89f948e9bc789d47ed4e864fb29116f31772ed9f2ca984140233cbb797b2ff1c89dccca759ac164317fd416a5c694b49601b09b30925186e832114f7be66af9ad914acad30064816614668b411aec397117059502c3a927a4ab5e7ce48b7bd288b7d3f3b469b258c5c692af090015b54976d9bc0d31ad7191aa00"/248], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x480a}}]}) getrlimit(0x1, &(0x7f0000000000)) 1m8.816232048s ago: executing program 0 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000100)=@hat={'permhat ', 0x2}, 0x1b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20048014}, 0x850) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc0106442, &(0x7f0000000080)) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474", 0x2f, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x3c, r8, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}}, 0x0) 1m8.81586016s ago: executing program 1 (id=571): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) mq_unlink(&(0x7f0000000040)='^(\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x40, 0x1cd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0) r3 = syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) ioctl$SG_IO(r3, 0x2285, &(0x7f0000004880)={0x53, 0xfffffffffffffffd, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f00000047c0)="4d79e2ff8264", 0x0, 0x8, 0x10000, 0x2, 0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0xe, 0xc, 0xe, 0xb4, 0xfffffffffffffffc, 0x7, 0x26, 0x1ff]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r6, 0x8800000) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r7, r6, 0x0, 0x558410e9) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000380)="c482c9a606440f20c03508000000440f22c0c7442400c1000000c7442402a4000000ff1c240f01c40f06c421f913b917a37dd6470f3248b856000000000000000f23d80f21f835000000400f23f866baf80cb836da5688ef66bafc0c66edc4e17c50e6", 0x63}], 0x1, 0x40, &(0x7f0000000440), 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r10, 0x4, 0x10}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 0s ago: executing program 32 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000100)=@hat={'permhat ', 0x2}, 0x1b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20048014}, 0x850) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc0106442, &(0x7f0000000080)) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474", 0x2f, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x3c, r8, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): e [ 162.435443][ T5880] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 162.444686][ T6896] veth0_macvtap: entered allmulticast mode [ 162.460051][ T5880] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 162.472845][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.490195][ T5880] usb 2-1: Product: syz [ 162.504389][ T5880] usb 2-1: Manufacturer: syz [ 162.512602][ T5880] usb 2-1: SerialNumber: syz [ 162.525137][ T53] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.547293][ T5880] usb 2-1: config 0 descriptor?? [ 162.626290][ T5140] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 162.636563][ T5140] Bluetooth: hci1: Injecting HCI hardware error event [ 162.644630][ T5833] Bluetooth: hci1: hardware error 0x00 [ 162.689641][ T53] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 162.698140][ T53] usb 4-1: config 0 has no interface number 0 [ 162.705676][ T53] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.717534][ T53] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.724958][ T5877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.730712][ T53] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 162.764959][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.815086][ T53] usb 4-1: Product: syz [ 162.826613][ T53] usb 4-1: Manufacturer: syz [ 162.844037][ T53] usb 4-1: SerialNumber: syz [ 162.867397][ T53] usb 4-1: config 0 descriptor?? [ 162.911734][ T53] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 162.927259][ T5877] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.945367][ T53] vmk80xx 4-1:0.255: probe with driver vmk80xx failed with error -22 [ 162.949959][ T5877] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.001858][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.029584][ T5877] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 163.063072][ T5877] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.086755][ T5877] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.100546][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.108200][ T53] usb 4-1: USB disconnect, device number 15 [ 163.116372][ T5877] usb 3-1: Product: syz [ 163.120858][ T5877] usb 3-1: Manufacturer: syz [ 163.159449][ T6920] bridge_slave_0: left allmulticast mode [ 163.165354][ T6920] bridge_slave_0: left promiscuous mode [ 163.171160][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.180840][ T5877] cdc_wdm 3-1:1.0: skipping garbage [ 163.186703][ T5877] cdc_wdm 3-1:1.0: skipping garbage [ 163.194702][ T5877] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.197806][ T5880] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 163.200660][ T5877] cdc_wdm 3-1:1.0: Unknown control protocol [ 163.242725][ T6920] bridge_slave_1: left allmulticast mode [ 163.292267][ T6920] bridge_slave_1: left promiscuous mode [ 163.306311][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.371032][ T6920] bond0: (slave bond_slave_0): Releasing backup interface [ 163.414402][ T6920] bond0: (slave bond_slave_1): Releasing backup interface [ 163.490293][ T6920] team0: Port device team_slave_0 removed [ 163.519582][ T6920] team0: Port device team_slave_1 removed [ 163.533627][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.544906][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.560437][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.571896][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.692833][ T5877] usb 3-1: USB disconnect, device number 11 [ 163.779847][ T6892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.293'. [ 163.807620][ T5880] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.845850][ T6929] FAULT_INJECTION: forcing a failure. [ 163.845850][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.872486][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.3.303 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 163.872513][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.872528][ T6929] Call Trace: [ 163.872539][ T6929] [ 163.872548][ T6929] dump_stack_lvl+0x189/0x250 [ 163.872578][ T6929] ? __lock_acquire+0xaac/0xd20 [ 163.872605][ T6929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.872631][ T6929] ? __pfx__printk+0x10/0x10 [ 163.872650][ T6929] ? __might_fault+0xb0/0x130 [ 163.872684][ T6929] should_fail_ex+0x414/0x560 [ 163.872719][ T6929] _copy_from_user+0x2d/0xb0 [ 163.872745][ T6929] media_device_ioctl+0x1d8/0x430 [ 163.872786][ T6929] ? __pfx_media_device_ioctl+0x10/0x10 [ 163.872811][ T6929] ? __lock_acquire+0xaac/0xd20 [ 163.872860][ T6929] ? __fget_files+0x3a0/0x420 [ 163.872883][ T6929] ? __fget_files+0x2a/0x420 [ 163.872910][ T6929] ? media_ioctl+0xfe/0x120 [ 163.872936][ T6929] ? __pfx_media_ioctl+0x10/0x10 [ 163.872964][ T6929] __se_sys_ioctl+0xf9/0x170 [ 163.872985][ T6929] do_syscall_64+0xf6/0x210 [ 163.873005][ T6929] ? clear_bhb_loop+0x45/0xa0 [ 163.873027][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.873045][ T6929] RIP: 0033:0x7f820f98e969 [ 163.873068][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.873083][ T6929] RSP: 002b:00007f82108e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.873104][ T6929] RAX: ffffffffffffffda RBX: 00007f820fbb5fa0 RCX: 00007f820f98e969 [ 163.873116][ T6929] RDX: 0000200000000b00 RSI: 00000000c0487c04 RDI: 0000000000000004 [ 163.873128][ T6929] RBP: 00007f82108e3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.873138][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.873149][ T6929] R13: 0000000000000000 R14: 00007f820fbb5fa0 R15: 00007f820fcdfa28 [ 163.873177][ T6929] [ 163.886873][ T5880] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 164.108067][ T5880] asix 2-1:0.0: probe with driver asix failed with error -71 [ 164.158946][ T6931] netlink: 'syz.2.304': attribute type 13 has an invalid length. [ 164.212813][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.222460][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.268979][ T5880] usb 2-1: USB disconnect, device number 14 [ 164.317642][ T6931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.360938][ T6936] netlink: 'syz.3.306': attribute type 5 has an invalid length. [ 164.669437][ T6942] netlink: 'syz.1.310': attribute type 5 has an invalid length. [ 164.687928][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 164.695801][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 164.993983][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 164.994000][ T30] audit: type=1326 audit(1745735526.807:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f98e969 code=0x7ffc0000 [ 165.169065][ T30] audit: type=1326 audit(1745735526.807:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f820f98e969 code=0x7ffc0000 [ 165.234969][ T30] audit: type=1326 audit(1745735526.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f98e969 code=0x7ffc0000 [ 165.258168][ T30] audit: type=1326 audit(1745735526.807:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f820f98d2d0 code=0x7ffc0000 [ 165.281322][ T30] audit: type=1326 audit(1745735526.807:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.282538][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 165.303533][ T30] audit: type=1326 audit(1745735526.807:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.303580][ T30] audit: type=1326 audit(1745735526.807:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.303623][ T30] audit: type=1326 audit(1745735526.817:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.303675][ T30] audit: type=1326 audit(1745735526.937:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.303719][ T30] audit: type=1326 audit(1745735527.017:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820f98e56b code=0x7ffc0000 [ 165.496967][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.664482][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.673911][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 165.679374][ T5879] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 165.695124][ T5879] usb 1-1: config 0 has no interface number 0 [ 165.700386][ T10] usb 4-1: config 7 has an invalid interface number: 246 but max is 0 [ 165.701560][ T5879] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.737357][ T10] usb 4-1: config 7 has no interface number 0 [ 165.744093][ T5879] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.755860][ T10] usb 4-1: config 7 interface 246 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 165.791986][ T10] usb 4-1: config 7 interface 246 has no altsetting 0 [ 165.806807][ T5879] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 165.816037][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.824037][ T5879] usb 1-1: Product: syz [ 165.829053][ T5879] usb 1-1: Manufacturer: syz [ 165.833941][ T5879] usb 1-1: SerialNumber: syz [ 165.855089][ T5879] usb 1-1: config 0 descriptor?? [ 165.864980][ T10] usb 4-1: New USB device found, idVendor=24c6, idProduct=ad0e, bcdDevice=9d.4c [ 165.874621][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.883183][ T1207] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 165.891078][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.909244][ T10] usb 4-1: Product: syz [ 165.914075][ T10] usb 4-1: Manufacturer: syz [ 165.920065][ T10] usb 4-1: SerialNumber: syz [ 165.925369][ T5879] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 165.973431][ T5879] vmk80xx 1-1:0.255: probe with driver vmk80xx failed with error -22 [ 166.030494][ T6951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.065372][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 166.083857][ T5877] usb 2-1: config 0 has no interfaces? [ 166.095049][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 166.114086][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 166.249208][ T1207] usb 5-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 166.301585][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.328218][ T1207] usb 5-1: Product: syz [ 166.360856][ T5879] usb 1-1: USB disconnect, device number 13 [ 166.378440][ T10] usb 4-1: USB disconnect, device number 16 [ 166.405146][ T1207] usb 5-1: Manufacturer: syz [ 166.410107][ T1207] usb 5-1: SerialNumber: syz [ 166.415607][ T5877] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.430825][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.454995][ T1207] usb 5-1: config 0 descriptor?? [ 166.529945][ T1207] safe_serial 5-1:0.0: safe_serial converter detected [ 166.565911][ T1207] safe_serial 5-1:0.0: probe with driver safe_serial failed with error -22 [ 166.575798][ T5877] usb 2-1: Product: syz [ 166.604884][ T5877] usb 2-1: Manufacturer: syz [ 166.615148][ T5877] usb 2-1: SerialNumber: syz [ 166.640270][ T5877] usb 2-1: config 0 descriptor?? [ 166.738907][ T5877] usb 5-1: USB disconnect, device number 17 [ 166.905961][ T6969] netlink: 'syz.0.317': attribute type 5 has an invalid length. [ 166.937660][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 167.167254][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.177498][ T5833] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 167.177574][ T5833] Bluetooth: hci4: Injecting HCI hardware error event [ 167.194460][ T5833] Bluetooth: hci4: hardware error 0x00 [ 167.381711][ T1207] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 167.413715][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.422590][ T1207] usb 4-1: Product: syz [ 167.432343][ T1207] usb 4-1: Manufacturer: syz [ 167.452584][ T1207] usb 4-1: SerialNumber: syz [ 167.472560][ T6978] netlink: 56 bytes leftover after parsing attributes in process `syz.2.320'. [ 167.472820][ T1207] usb 4-1: config 0 descriptor?? [ 167.511578][ T1207] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 167.523234][ T1207] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 167.536387][ T6982] netlink: 'syz.2.320': attribute type 33 has an invalid length. [ 167.539016][ T1207] usbserial_generic 4-1:0.0: device has no bulk endpoints [ 167.552953][ T6982] netlink: 152 bytes leftover after parsing attributes in process `syz.2.320'. [ 167.713878][ T1207] usb 4-1: USB disconnect, device number 17 [ 169.005889][ T1207] usb 2-1: USB disconnect, device number 15 [ 169.269300][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 169.313869][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 169.385187][ T7022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.333'. [ 169.402487][ T7022] vlan0: entered allmulticast mode [ 169.504719][ T7022] macvtap0: entered allmulticast mode [ 169.529495][ T7022] veth0_macvtap: entered allmulticast mode [ 169.834997][ T5879] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 169.997456][ T5879] usb 3-1: config 2 has an invalid interface number: 73 but max is 0 [ 170.040959][ T5879] usb 3-1: config 2 has no interface number 0 [ 170.255544][ T5879] usb 3-1: too many endpoints for config 2 interface 73 altsetting 47: 187, using maximum allowed: 30 [ 170.295674][ T5833] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 170.304960][ T5833] Bluetooth: hci3: Injecting HCI hardware error event [ 170.324902][ T5140] Bluetooth: hci3: hardware error 0x00 [ 170.774200][ T5879] usb 3-1: config 2 interface 73 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 170.787550][ T5879] usb 3-1: config 2 interface 73 has no altsetting 0 [ 170.817421][ T5879] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 170.827406][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.836134][ T5879] usb 3-1: Product: syz [ 170.840421][ T5879] usb 3-1: Manufacturer: syz [ 170.845177][ T5879] usb 3-1: SerialNumber: syz [ 171.070790][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.083619][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.091479][ T1207] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 171.222408][ T7062] loop2: detected capacity change from 0 to 7 [ 171.237552][ T5879] usb 3-1: Could not find all expected endpoints [ 171.269817][ T5840] Dev loop2: unable to read RDB block 7 [ 171.306585][ T5840] loop2: unable to read partition table [ 171.322776][ T1207] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 171.332297][ T5879] usb 3-1: USB disconnect, device number 12 [ 171.339551][ T5840] loop2: partition table beyond EOD, truncated [ 171.356860][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.366508][ T7062] Dev loop2: unable to read RDB block 7 [ 171.377059][ T7062] loop2: unable to read partition table [ 171.400099][ T1207] usb 4-1: Product: syz [ 171.400211][ T7062] loop2: partition table beyond EOD, truncated [ 171.413886][ T7062] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.442244][ T5200] Dev loop2: unable to read RDB block 7 [ 171.449589][ T5200] loop2: unable to read partition table [ 171.461599][ T5200] loop2: partition table beyond EOD, truncated [ 171.462303][ T1207] usb 4-1: Manufacturer: syz [ 171.472598][ T1207] usb 4-1: SerialNumber: syz [ 171.537767][ T1207] usb 4-1: config 0 descriptor?? [ 171.578160][ T7067] sctp: failed to load transform for md5: -2 [ 171.647208][ T1207] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 018 [ 171.896972][ T7076] Unknown options in mask 5 [ 172.032127][ T1207] (null): failure reading functionality [ 172.064604][ T7080] FAULT_INJECTION: forcing a failure. [ 172.064604][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.065274][ T1207] i2c i2c-1: failure reading functionality [ 172.088897][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.4.349 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 172.088925][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.088936][ T7080] Call Trace: [ 172.088944][ T7080] [ 172.088952][ T7080] dump_stack_lvl+0x189/0x250 [ 172.088987][ T7080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.089015][ T7080] ? __pfx__printk+0x10/0x10 [ 172.089045][ T7080] should_fail_ex+0x414/0x560 [ 172.089080][ T7080] _copy_to_user+0x31/0xb0 [ 172.089122][ T7080] simple_read_from_buffer+0xe1/0x170 [ 172.089153][ T7080] proc_fail_nth_read+0x1df/0x250 [ 172.089183][ T7080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.089212][ T7080] ? rw_verify_area+0x258/0x650 [ 172.089230][ T7080] ? aa_sk_perm+0x81e/0x950 [ 172.089257][ T7080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.089284][ T7080] vfs_read+0x1fd/0x980 [ 172.089303][ T7080] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.089337][ T7080] ? __pfx_vfs_read+0x10/0x10 [ 172.089358][ T7080] ? bpf_lsm_socket_connect+0x9/0x20 [ 172.089398][ T7080] ? __sys_connect+0x339/0x440 [ 172.089416][ T7080] ? do_sys_openat2+0x154/0x1c0 [ 172.089441][ T7080] ? __pfx___sys_connect+0x10/0x10 [ 172.089464][ T7080] ksys_read+0x145/0x250 [ 172.089485][ T7080] ? __pfx_ksys_read+0x10/0x10 [ 172.089524][ T7080] ? do_syscall_64+0xba/0x210 [ 172.089548][ T7080] do_syscall_64+0xf6/0x210 [ 172.089582][ T7080] ? clear_bhb_loop+0x45/0xa0 [ 172.089603][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.089619][ T7080] RIP: 0033:0x7fcb5a18d37c [ 172.089635][ T7080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.089649][ T7080] RSP: 002b:00007fcb5b0b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.089668][ T7080] RAX: ffffffffffffffda RBX: 00007fcb5a3b5fa0 RCX: 00007fcb5a18d37c [ 172.089680][ T7080] RDX: 000000000000000f RSI: 00007fcb5b0b40a0 RDI: 0000000000000004 [ 172.089691][ T7080] RBP: 00007fcb5b0b4090 R08: 0000000000000000 R09: 0000000000000000 [ 172.089701][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.089711][ T7080] R13: 0000000000000000 R14: 00007fcb5a3b5fa0 R15: 00007fcb5a4dfa28 [ 172.089757][ T7080] [ 172.130859][ T1207] i2c i2c-1: connected i2c-tiny-usb device [ 172.133003][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.326808][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.332796][ C1] hrtimer: interrupt took 238003323 ns [ 172.432936][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.751133][ T7095] veth0: entered promiscuous mode [ 172.790342][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.355'. [ 172.826336][ T7091] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 172.935470][ T5140] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 172.990536][ T7094] veth0: left promiscuous mode [ 172.999038][ T7103] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.629430][ T7116] Unknown options in mask 5 [ 173.695259][ T1207] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 173.855231][ T5879] usb 4-1: USB disconnect, device number 18 [ 173.927191][ T1207] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 173.945198][ T1207] usb 1-1: config 0 has no interface number 0 [ 173.945557][ T7119] FAULT_INJECTION: forcing a failure. [ 173.945557][ T7119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.995132][ T1207] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.041002][ T1207] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 174.053884][ T1207] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 174.063228][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.085045][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.1.361 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 174.085066][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 174.085075][ T7119] Call Trace: [ 174.085081][ T7119] [ 174.085087][ T7119] dump_stack_lvl+0x189/0x250 [ 174.085113][ T7119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.085134][ T7119] ? __pfx__printk+0x10/0x10 [ 174.085149][ T7119] ? kasan_save_track+0x3e/0x80 [ 174.085170][ T7119] should_fail_ex+0x414/0x560 [ 174.085196][ T7119] _copy_to_user+0x31/0xb0 [ 174.085216][ T7119] media_device_get_topology+0x79d/0x15b0 [ 174.085247][ T7119] ? __pfx_media_device_get_topology+0x10/0x10 [ 174.085303][ T7119] media_device_ioctl+0x2c6/0x430 [ 174.085325][ T7119] ? __pfx_media_device_ioctl+0x10/0x10 [ 174.085344][ T7119] ? __lock_acquire+0xaac/0xd20 [ 174.085382][ T7119] ? __fget_files+0x3a0/0x420 [ 174.085399][ T7119] ? __fget_files+0x2a/0x420 [ 174.085418][ T7119] ? media_ioctl+0xfe/0x120 [ 174.085439][ T7119] ? __pfx_media_ioctl+0x10/0x10 [ 174.085460][ T7119] __se_sys_ioctl+0xf9/0x170 [ 174.085476][ T7119] do_syscall_64+0xf6/0x210 [ 174.085491][ T7119] ? clear_bhb_loop+0x45/0xa0 [ 174.085508][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.085521][ T7119] RIP: 0033:0x7f675918e969 [ 174.085533][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.085544][ T7119] RSP: 002b:00007f675a0c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.085559][ T7119] RAX: ffffffffffffffda RBX: 00007f67593b5fa0 RCX: 00007f675918e969 [ 174.085569][ T7119] RDX: 0000200000000b00 RSI: 00000000c0487c04 RDI: 0000000000000004 [ 174.085578][ T7119] RBP: 00007f675a0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 174.085587][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.085595][ T7119] R13: 0000000000000000 R14: 00007f67593b5fa0 R15: 00007f67594dfa28 [ 174.085615][ T7119] [ 174.091560][ T1207] usb 1-1: Product: syz [ 174.370871][ T1207] usb 1-1: Manufacturer: syz [ 174.376500][ T1207] usb 1-1: SerialNumber: syz [ 174.385305][ T1207] usb 1-1: config 0 descriptor?? [ 174.397576][ T1207] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 174.427915][ T1207] vmk80xx 1-1:0.255: probe with driver vmk80xx failed with error -22 [ 174.560417][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 174.622356][ T1207] usb 1-1: USB disconnect, device number 14 [ 174.641617][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 174.750806][ T7143] netlink: 'syz.2.368': attribute type 5 has an invalid length. [ 174.761113][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 175.112983][ T7154] Unknown options in mask 5 [ 176.705846][ T7152] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.371'. [ 176.715277][ T7152] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 176.723565][ T7152] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.757669][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 177.659850][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 177.681220][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 177.694926][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.838767][ T7208] loop2: detected capacity change from 0 to 7 [ 177.899812][ T7208] Dev loop2: unable to read RDB block 7 [ 177.915485][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 177.922717][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.933871][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.943743][ T53] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 177.952904][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.962710][ T7208] loop2: unable to read partition table [ 177.969307][ T53] usb 5-1: config 0 descriptor?? [ 177.977867][ T7208] loop2: partition table beyond EOD, truncated [ 177.985501][ T7208] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.205607][ T7216] loop2: detected capacity change from 0 to 7 [ 178.213167][ T7216] Dev loop2: unable to read RDB block 7 [ 178.219991][ T7216] loop2: unable to read partition table [ 178.226876][ T7216] loop2: partition table beyond EOD, truncated [ 178.264667][ T7216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.346499][ T5835] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 178.410970][ T53] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 178.587895][ T53] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 178.595009][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 178.606939][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.623595][ T5835] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 178.643135][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.664359][ T7220] FAULT_INJECTION: forcing a failure. [ 178.664359][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.689430][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.3.391 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 178.689457][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.689468][ T7220] Call Trace: [ 178.689476][ T7220] [ 178.689485][ T7220] dump_stack_lvl+0x189/0x250 [ 178.689523][ T7220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.689547][ T7220] ? __pfx__printk+0x10/0x10 [ 178.689575][ T7220] should_fail_ex+0x414/0x560 [ 178.689608][ T7220] _copy_to_user+0x31/0xb0 [ 178.689634][ T7220] simple_read_from_buffer+0xe1/0x170 [ 178.689660][ T7220] proc_fail_nth_read+0x1df/0x250 [ 178.689687][ T7220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.689714][ T7220] ? rw_verify_area+0x258/0x650 [ 178.689732][ T7220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.689756][ T7220] vfs_read+0x1fd/0x980 [ 178.689781][ T7220] ? __pfx___mutex_lock+0x10/0x10 [ 178.689800][ T7220] ? __pfx_vfs_read+0x10/0x10 [ 178.689820][ T7220] ? __fget_files+0x2a/0x420 [ 178.689851][ T7220] ? __fget_files+0x3a0/0x420 [ 178.689871][ T7220] ? __fget_files+0x2a/0x420 [ 178.689901][ T7220] ksys_read+0x145/0x250 [ 178.689919][ T7220] ? __fget_files+0x2a/0x420 [ 178.689941][ T7220] ? __pfx_ksys_read+0x10/0x10 [ 178.689963][ T7220] ? do_syscall_64+0xba/0x210 [ 178.689984][ T7220] do_syscall_64+0xf6/0x210 [ 178.690003][ T7220] ? clear_bhb_loop+0x45/0xa0 [ 178.690025][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.690042][ T7220] RIP: 0033:0x7f820f98d37c [ 178.690060][ T7220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.690075][ T7220] RSP: 002b:00007f82108e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.690094][ T7220] RAX: ffffffffffffffda RBX: 00007f820fbb5fa0 RCX: 00007f820f98d37c [ 178.690107][ T7220] RDX: 000000000000000f RSI: 00007f82108e30a0 RDI: 0000000000000005 [ 178.690115][ T5835] usb 1-1: config 0 descriptor?? [ 178.690117][ T7220] RBP: 00007f82108e3090 R08: 0000000000000000 R09: 0000000000000000 [ 178.690127][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.690137][ T7220] R13: 0000000000000000 R14: 00007f820fbb5fa0 R15: 00007f820fcdfa28 [ 178.690161][ T7220] [ 179.001533][ T10] usb 5-1: USB disconnect, device number 18 [ 179.143250][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 179.335755][ T5835] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 179.565424][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.795787][ T7244] loop2: detected capacity change from 0 to 7 [ 179.804028][ T7244] Dev loop2: unable to read RDB block 7 [ 179.816413][ T7244] loop2: unable to read partition table [ 179.822439][ T7244] loop2: partition table beyond EOD, truncated [ 179.841495][ T7244] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.949407][ T7246] loop2: detected capacity change from 0 to 7 [ 179.976750][ T7246] Dev loop2: unable to read RDB block 7 [ 179.982406][ T7246] loop2: unable to read partition table [ 179.991923][ T5877] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.002506][ T10] usb 3-1: config 0 has no interfaces? [ 180.092774][ T7246] loop2: partition table beyond EOD, truncated [ 180.112665][ T1207] usb 1-1: USB disconnect, device number 15 [ 180.167248][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.184192][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.193958][ T7246] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.225666][ T10] usb 3-1: Product: syz [ 180.241626][ T10] usb 3-1: Manufacturer: syz [ 180.255438][ T10] usb 3-1: SerialNumber: syz [ 180.275135][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 180.291146][ T10] usb 3-1: config 0 descriptor?? [ 180.310043][ T5877] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 180.327538][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.344758][ T5877] usb 5-1: config 0 descriptor?? [ 180.441131][ T5877] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 180.884607][ T5877] gspca_sunplus: reg_r err -71 [ 180.894961][ T5877] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 180.917008][ T5877] usb 5-1: USB disconnect, device number 19 [ 180.951266][ T5835] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 181.134909][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 181.142090][ T5835] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.188596][ T5835] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.216797][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.257267][ T5835] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 181.284685][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.312379][ T5835] usb 4-1: config 0 descriptor?? [ 181.800956][ T7275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.410'. [ 181.845151][ T5877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 182.014003][ T5835] usbhid 4-1:0.0: can't add hid device: -71 [ 182.020250][ T5835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.193193][ T5835] usb 4-1: USB disconnect, device number 19 [ 182.294379][ T5877] usb 1-1: config 0 has no interfaces? [ 182.344537][ T5877] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 182.365037][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.394214][ T5877] usb 1-1: Product: syz [ 182.399814][ T5877] usb 1-1: Manufacturer: syz [ 182.408739][ T5877] usb 1-1: SerialNumber: syz [ 182.426832][ T5877] usb 1-1: config 0 descriptor?? [ 182.450953][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.508872][ T5835] usb 3-1: USB disconnect, device number 13 [ 182.692888][ T7270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.408'. [ 182.787897][ T7284] loop2: detected capacity change from 0 to 7 [ 182.808401][ T7284] Dev loop2: unable to read RDB block 7 [ 182.982757][ T7284] loop2: unable to read partition table [ 183.332755][ T10] usb 5-1: config 0 has no interfaces? [ 183.405127][ T7284] loop2: partition table beyond EOD, truncated [ 183.417694][ T7284] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.505026][ T7288] netlink: 'syz.3.413': attribute type 13 has an invalid length. [ 183.577265][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.587623][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.625040][ T10] usb 5-1: Product: syz [ 183.636124][ T10] usb 5-1: Manufacturer: syz [ 183.641108][ T7288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.670490][ T10] usb 5-1: SerialNumber: syz [ 183.767636][ T10] usb 5-1: config 0 descriptor?? [ 183.792135][ T7291] netlink: 'syz.1.414': attribute type 13 has an invalid length. [ 184.034467][ T7291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.339099][ T7282] usb usb8: usbfs: process 7282 (syz.4.411) did not claim interface 0 before use [ 184.351150][ T7282] netlink: 'syz.4.411': attribute type 10 has an invalid length. [ 184.375992][ T7282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.469312][ T53] usb 1-1: USB disconnect, device number 16 [ 185.126898][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 185.308506][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 185.329175][ T10] usb 1-1: config 0 has no interface number 0 [ 185.373185][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.384414][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 185.400169][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 185.412916][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 185.428135][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 185.439208][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.456461][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 185.512868][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.550082][ T10] usb 1-1: config 0 descriptor?? [ 185.556228][ T7311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.563690][ T7311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.613168][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 185.730424][ T975] usb 5-1: USB disconnect, device number 20 [ 185.834530][ T7321] FAULT_INJECTION: forcing a failure. [ 185.834530][ T7321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.839882][ T10] usb 1-1: USB disconnect, device number 17 [ 185.848889][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.4.422 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 185.848916][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.848930][ T7321] Call Trace: [ 185.848938][ T7321] [ 185.848946][ T7321] dump_stack_lvl+0x189/0x250 [ 185.848985][ T7321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.849013][ T7321] ? __pfx__printk+0x10/0x10 [ 185.849047][ T7321] should_fail_ex+0x414/0x560 [ 185.849084][ T7321] _copy_to_user+0x31/0xb0 [ 185.849114][ T7321] simple_read_from_buffer+0xe1/0x170 [ 185.849145][ T7321] proc_fail_nth_read+0x1df/0x250 [ 185.849176][ T7321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.849208][ T7321] ? rw_verify_area+0x258/0x650 [ 185.849229][ T7321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.849267][ T7321] vfs_read+0x1fd/0x980 [ 185.849295][ T7321] ? __pfx___mutex_lock+0x10/0x10 [ 185.849317][ T7321] ? __pfx_vfs_read+0x10/0x10 [ 185.849342][ T7321] ? __fget_files+0x2a/0x420 [ 185.849374][ T7321] ? __fget_files+0x3a0/0x420 [ 185.849399][ T7321] ? __fget_files+0x2a/0x420 [ 185.849433][ T7321] ksys_read+0x145/0x250 [ 185.849458][ T7321] ? __pfx_ksys_read+0x10/0x10 [ 185.849484][ T7321] ? do_syscall_64+0xba/0x210 [ 185.849510][ T7321] do_syscall_64+0xf6/0x210 [ 185.849532][ T7321] ? clear_bhb_loop+0x45/0xa0 [ 185.849557][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.849577][ T7321] RIP: 0033:0x7fcb5a18d37c [ 185.849595][ T7321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.849612][ T7321] RSP: 002b:00007fcb5b0b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.849634][ T7321] RAX: ffffffffffffffda RBX: 00007fcb5a3b5fa0 RCX: 00007fcb5a18d37c [ 185.849649][ T7321] RDX: 000000000000000f RSI: 00007fcb5b0b40a0 RDI: 0000000000000005 [ 185.849663][ T7321] RBP: 00007fcb5b0b4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.849675][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.849687][ T7321] R13: 0000000000000000 R14: 00007fcb5a3b5fa0 R15: 00007fcb5a4dfa28 [ 185.849719][ T7321] [ 186.017861][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.333329][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 186.465269][ T7329] loop2: detected capacity change from 0 to 7 [ 186.495139][ T7329] Dev loop2: unable to read RDB block 7 [ 186.503076][ T7329] loop2: unable to read partition table [ 186.527072][ T5877] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.552345][ T7329] loop2: partition table beyond EOD, truncated [ 186.600005][ T7329] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.687595][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 186.687609][ T30] audit: type=1326 audit(1745735548.507:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.3.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f820f98e969 code=0x0 [ 186.815715][ T5877] usb 5-1: config 0 has no interfaces? [ 186.838169][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 186.923198][ T7341] netlink: 'syz.0.427': attribute type 5 has an invalid length. [ 186.951049][ T5877] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.027164][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.051176][ T5877] usb 5-1: Product: syz [ 187.060359][ T5877] usb 5-1: Manufacturer: syz [ 187.116051][ T5877] usb 5-1: SerialNumber: syz [ 187.133878][ T5877] usb 5-1: config 0 descriptor?? [ 187.649528][ T7327] team0: Device gtp0 is of different type [ 187.747213][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 188.169391][ T30] audit: type=1326 audit(1745735549.977:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f98e969 code=0x7ffc0000 [ 188.208512][ T30] audit: type=1326 audit(1745735549.977:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f98e969 code=0x7ffc0000 [ 188.740343][ T7370] openvswitch: netlink: IPv4 tun info is not correct [ 189.127144][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 189.665747][ T10] usb 5-1: USB disconnect, device number 21 [ 189.854728][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 190.050125][ T7383] loop2: detected capacity change from 0 to 7 [ 190.062914][ T7383] Dev loop2: unable to read RDB block 7 [ 190.069863][ T7383] loop2: unable to read partition table [ 190.085225][ T7383] loop2: partition table beyond EOD, truncated [ 190.095151][ T7383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.495211][ T53] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.610869][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.756124][ T53] usb 5-1: config 0 has no interfaces? [ 190.770335][ T10] usb 2-1: config 0 has no interfaces? [ 190.799299][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.814370][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.829499][ T10] usb 2-1: Product: syz [ 190.832977][ T53] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.843183][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.851385][ T53] usb 5-1: Product: syz [ 190.856830][ T53] usb 5-1: Manufacturer: syz [ 190.857240][ T10] usb 2-1: Manufacturer: syz [ 190.861443][ T53] usb 5-1: SerialNumber: syz [ 190.869658][ T10] usb 2-1: SerialNumber: syz [ 190.880646][ T53] usb 5-1: config 0 descriptor?? [ 190.894662][ T5835] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.928016][ T10] usb 2-1: config 0 descriptor?? [ 191.015260][ T5877] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 191.045068][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 191.080052][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.091369][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.104961][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.142504][ T7387] usb usb8: usbfs: process 7387 (syz.4.443) did not claim interface 0 before use [ 191.190476][ T7389] usb usb8: usbfs: process 7389 (syz.1.445) did not claim interface 0 before use [ 191.204218][ T7389] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 191.214969][ T7389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.269095][ T5835] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.283867][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.292826][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 191.370147][ T5877] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 191.380635][ T5877] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 191.392982][ T7398] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 191.403673][ T7398] veth1_macvtap: left promiscuous mode [ 191.418359][ T7398] team0: Device veth1_macvtap failed to register rx_handler [ 191.429285][ T5877] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 191.450526][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.474476][ T5877] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 191.490181][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.508964][ T5835] usb 1-1: config 0 descriptor?? [ 191.654900][ T5877] usb 4-1: Product: syz [ 191.659177][ T5877] usb 4-1: Manufacturer: syz [ 191.663847][ T5877] usb 4-1: SerialNumber: syz [ 191.677655][ T5877] usb 4-1: config 0 descriptor?? [ 191.909075][ T5877] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 191.951128][ T5185] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 191.955315][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.973145][ T5185] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 192.008462][ T5185] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 192.042561][ T5877] usb 4-1: USB disconnect, device number 20 [ 192.105657][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.171576][ T5835] HID 045e:07da: Invalid code 65791 type 1 [ 192.376459][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.419152][ T5835] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input13 [ 192.438628][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.458799][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.492366][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.527999][ T5835] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 192.606331][ T5835] usb 1-1: USB disconnect, device number 18 [ 192.949804][ T5879] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.137024][ T5879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.149821][ T5879] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.194869][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 193.244890][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.338137][ T7406] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.369488][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.373262][ T1207] usb 2-1: USB disconnect, device number 16 [ 193.436718][ T7410] loop2: detected capacity change from 0 to 7 [ 193.467910][ T7410] Dev loop2: unable to read RDB block 7 [ 193.480330][ T7410] loop2: unable to read partition table [ 193.527428][ T7410] loop2: partition table beyond EOD, truncated [ 193.570726][ T7410] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.648975][ T5879] usb 5-1: USB disconnect, device number 22 [ 193.755326][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 193.783909][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 193.799664][ T7424] loop2: detected capacity change from 0 to 7 [ 193.810259][ T7424] Dev loop2: unable to read RDB block 7 [ 193.817426][ T7424] loop2: unable to read partition table [ 193.824230][ T7424] loop2: partition table beyond EOD, truncated [ 193.861380][ T7424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.928655][ T5879] usb 4-1: USB disconnect, device number 21 [ 193.947337][ T7419] vlan0: entered allmulticast mode [ 194.140291][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.148953][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601033][ T5877] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 194.900623][ T5877] usb 1-1: config 0 has no interfaces? [ 194.909401][ T5877] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 194.922684][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.007380][ T5877] usb 1-1: Product: syz [ 195.034080][ T5877] usb 1-1: Manufacturer: syz [ 195.067990][ T5877] usb 1-1: SerialNumber: syz [ 195.125923][ T5877] usb 1-1: config 0 descriptor?? [ 195.474536][ T7474] loop2: detected capacity change from 0 to 7 [ 195.537571][ T7474] Dev loop2: unable to read RDB block 7 [ 195.622032][ T7474] loop2: unable to read partition table [ 195.675325][ T7474] loop2: partition table beyond EOD, truncated [ 195.715623][ T7474] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.803557][ T7480] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 195.827436][ T7480] bridge0: port 3(macsec0) entered blocking state [ 195.847481][ T7480] bridge0: port 3(macsec0) entered disabled state [ 195.856461][ T5879] IPVS: starting estimator thread 0... [ 195.887577][ T7480] macsec0: entered allmulticast mode [ 195.919746][ T7480] veth1_macvtap: entered allmulticast mode [ 196.006842][ T7480] macsec0: entered promiscuous mode [ 196.013942][ T7480] bridge0: port 3(macsec0) entered blocking state [ 196.020769][ T7480] bridge0: port 3(macsec0) entered forwarding state [ 196.192664][ T7481] IPVS: using max 40 ests per chain, 96000 per kthread [ 196.275703][ T7484] loop2: detected capacity change from 0 to 7 [ 196.286423][ T5940] Dev loop2: unable to read RDB block 7 [ 196.294028][ T5940] loop2: unable to read partition table [ 196.369539][ T5940] loop2: partition table beyond EOD, truncated [ 196.484126][ T7484] Dev loop2: unable to read RDB block 7 [ 196.490739][ T7484] loop2: unable to read partition table [ 196.497036][ T7484] loop2: partition table beyond EOD, truncated [ 196.508162][ T7484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.870630][ T7488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.250934][ T5835] usb 1-1: USB disconnect, device number 19 [ 197.627499][ T7468] syz.2.466: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.649825][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.2.466 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 197.649847][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.649856][ T7468] Call Trace: [ 197.649862][ T7468] [ 197.649869][ T7468] dump_stack_lvl+0x189/0x250 [ 197.649897][ T7468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.649918][ T7468] ? __pfx__printk+0x10/0x10 [ 197.649933][ T7468] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.649957][ T7468] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.649982][ T7468] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 197.650008][ T7468] warn_alloc+0x214/0x310 [ 197.650034][ T7468] ? __pfx_warn_alloc+0x10/0x10 [ 197.650060][ T7468] ? __get_vm_area_node+0x1c5/0x2d0 [ 197.650077][ T7468] ? __get_vm_area_node+0x25a/0x2d0 [ 197.650100][ T7468] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 197.650122][ T7468] ? __asan_memset+0x22/0x50 [ 197.650153][ T7468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.650172][ T7468] ? __kasan_kmalloc_large+0x1a/0xa0 [ 197.650191][ T7468] ? rcu_is_watching+0x15/0xb0 [ 197.650213][ T7468] ? hash_ip_create+0x741/0x1410 [ 197.650234][ T7468] ? hash_ip_create+0x741/0x1410 [ 197.650254][ T7468] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 197.650279][ T7468] ? hash_ip_create+0x741/0x1410 [ 197.650300][ T7468] ? hash_ip_create+0x6d5/0x1410 [ 197.650324][ T7468] hash_ip_create+0x741/0x1410 [ 197.650358][ T7468] ? __pfx_hash_ip_create+0x10/0x10 [ 197.650381][ T7468] ? __nla_parse+0x40/0x60 [ 197.650397][ T7468] ? __pfx_hash_ip_create+0x10/0x10 [ 197.650439][ T7468] ip_set_create+0xa94/0x1940 [ 197.650457][ T7468] ? ip_set_create+0x4a2/0x1940 [ 197.650482][ T7468] ? __pfx_ip_set_create+0x10/0x10 [ 197.650526][ T7468] nfnetlink_rcv_msg+0xb4a/0x1130 [ 197.650545][ T7468] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 197.650577][ T7468] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.650620][ T7468] ? preempt_schedule_common+0x83/0xd0 [ 197.650671][ T7468] netlink_rcv_skb+0x219/0x490 [ 197.650702][ T7468] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.650727][ T7468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.650773][ T7468] ? apparmor_capable+0x137/0x1b0 [ 197.650802][ T7468] ? bpf_lsm_capable+0x9/0x20 [ 197.650834][ T7468] ? security_capable+0x7e/0x2e0 [ 197.650862][ T7468] nfnetlink_rcv+0x273/0x2530 [ 197.650890][ T7468] ? __dev_queue_xmit+0x27e/0x3a70 [ 197.650914][ T7468] ? __dev_queue_xmit+0x27e/0x3a70 [ 197.650937][ T7468] ? __dev_queue_xmit+0x27e/0x3a70 [ 197.650963][ T7468] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 197.651002][ T7468] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 197.651030][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.651051][ T7468] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 197.651072][ T7468] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 197.651103][ T7468] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.651146][ T7468] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 197.651171][ T7468] ? rcu_is_watching+0x15/0xb0 [ 197.651216][ T7468] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 197.651241][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.651274][ T7468] ? rcu_is_watching+0x15/0xb0 [ 197.651306][ T7468] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 197.651338][ T7468] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 197.651361][ T7468] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.651400][ T7468] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.651439][ T7468] netlink_unicast+0x758/0x8d0 [ 197.651480][ T7468] netlink_sendmsg+0x805/0xb30 [ 197.651509][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.651537][ T7468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.651558][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.651578][ T7468] __sock_sendmsg+0x219/0x270 [ 197.651610][ T7468] ____sys_sendmsg+0x505/0x830 [ 197.651652][ T7468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.651682][ T7468] ? import_iovec+0x74/0xa0 [ 197.651710][ T7468] ___sys_sendmsg+0x21f/0x2a0 [ 197.651734][ T7468] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.651792][ T7468] ? __fget_files+0x2a/0x420 [ 197.651816][ T7468] ? __fget_files+0x3a0/0x420 [ 197.651850][ T7468] __x64_sys_sendmsg+0x19b/0x260 [ 197.651875][ T7468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.651915][ T7468] ? do_syscall_64+0xba/0x210 [ 197.651940][ T7468] do_syscall_64+0xf6/0x210 [ 197.651961][ T7468] ? clear_bhb_loop+0x45/0xa0 [ 197.651985][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.652004][ T7468] RIP: 0033:0x7f5cb9f8e969 [ 197.652023][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.652039][ T7468] RSP: 002b:00007f5cb79d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.652059][ T7468] RAX: ffffffffffffffda RBX: 00007f5cba1b6240 RCX: 00007f5cb9f8e969 [ 197.652074][ T7468] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 000000000000000b [ 197.652086][ T7468] RBP: 00007f5cba010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 197.652098][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.652110][ T7468] R13: 0000000000000000 R14: 00007f5cba1b6240 R15: 00007f5cba2dfa28 [ 197.652141][ T7468] [ 198.167666][ T7468] Mem-Info: [ 198.170870][ T7468] active_anon:10630 inactive_anon:2795 isolated_anon:0 [ 198.170870][ T7468] active_file:13028 inactive_file:38355 isolated_file:0 [ 198.170870][ T7468] unevictable:768 dirty:187 writeback:0 [ 198.170870][ T7468] slab_reclaimable:10012 slab_unreclaimable:167594 [ 198.170870][ T7468] mapped:39188 shmem:4294 pagetables:964 [ 198.170870][ T7468] sec_pagetables:0 bounce:0 [ 198.170870][ T7468] kernel_misc_reclaimable:0 [ 198.170870][ T7468] free:1241511 free_pcp:5481 free_cma:0 [ 198.221011][ T7468] Node 0 active_anon:42520kB inactive_anon:11180kB active_file:52112kB inactive_file:153344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156752kB dirty:744kB writeback:0kB shmem:15640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10704kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.255231][ T7468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.286617][ T7468] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.313868][ T7468] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 198.319768][ T7468] Node 0 DMA32 free:1035584kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:42512kB inactive_anon:11180kB active_file:52112kB inactive_file:153252kB unevictable:1536kB writepending:744kB present:3129332kB managed:2564180kB mlocked:0kB bounce:0kB free_pcp:21912kB local_pcp:4112kB free_cma:0kB [ 198.351620][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 198.356499][ T7468] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 198.383353][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 198.388219][ T7468] Node 1 Normal free:3915100kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.417146][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 198.421984][ T7468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.449467][ T7468] Node 0 DMA32: 0*4kB 10*8kB (ME) 11*16kB (UE) 22*32kB (UME) 165*64kB (UME) 43*128kB (UME) 28*256kB (UME) 21*512kB (UME) 9*1024kB (UM) 10*2048kB (UME) 237*4096kB (UM) = 1035392kB [ 198.484934][ T7468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.496562][ T7468] Node 1 Normal: 185*4kB (UME) 37*8kB (UME) 31*16kB (UME) 197*32kB (UME) 109*64kB (UME) 33*128kB (UME) 17*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 947*4096kB (UM) = 3915100kB [ 198.515316][ T7468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.524919][ T7468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.534317][ T7468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.543979][ T7468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.553379][ T7468] 58352 total pagecache pages [ 198.558101][ T7468] 2674 pages in swap cache [ 198.562535][ T7468] Free swap = 114476kB [ 198.567745][ T7468] Total swap = 124996kB [ 198.572006][ T7468] 2097051 pages RAM [ 198.575946][ T7468] 0 pages HighMem/MovableOnly [ 198.580744][ T7468] 424348 pages reserved [ 198.584950][ T7468] 0 pages cma reserved [ 198.694664][ T7493] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7493] [ 198.696957][ T7494] dns_resolver: Unsupported server list version (0) [ 199.138482][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 199.157859][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.3.475'. [ 199.251052][ T7501] vlan2: entered allmulticast mode [ 199.309863][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 199.465282][ T53] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.557348][ T7513] loop2: detected capacity change from 0 to 7 [ 199.568814][ T7513] Dev loop2: unable to read RDB block 7 [ 199.585058][ T7513] loop2: unable to read partition table [ 199.599745][ T7513] loop2: partition table beyond EOD, truncated [ 199.631355][ T7513] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.648946][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 199.657082][ T53] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 199.665994][ T53] usb 3-1: can't read configurations, error -61 [ 199.715966][ T7514] Unknown options in mask 5 [ 199.805093][ T53] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 199.852940][ T7519] netlink: 'syz.1.482': attribute type 13 has an invalid length. [ 199.922466][ T7523] netlink: 'syz.3.483': attribute type 5 has an invalid length. [ 199.976228][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 199.999263][ T53] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.007266][ T53] usb 3-1: can't read configurations, error -61 [ 200.063194][ T53] usb usb3-port1: attempt power cycle [ 200.121800][ T7519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.515311][ T53] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 200.712899][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 200.748355][ T53] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.762848][ T53] usb 3-1: can't read configurations, error -61 [ 200.894964][ T53] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 200.966388][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 200.988332][ T53] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.999536][ T53] usb 3-1: can't read configurations, error -61 [ 201.109250][ T53] usb usb3-port1: unable to enumerate USB device [ 202.995265][ T5877] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 203.054339][ T7549] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 203.130157][ T7549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.490'. [ 203.156618][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.187246][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.204990][ T7549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.294965][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.334919][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.391176][ T5877] usb 3-1: Product: syz [ 203.397683][ T5877] usb 3-1: Manufacturer: syz [ 203.416005][ T5877] usb 3-1: SerialNumber: syz [ 203.670530][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.680525][ T7569] netlink: 'syz.0.495': attribute type 5 has an invalid length. [ 203.682754][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.729592][ T5877] usb 3-1: cannot find UAC_HEADER [ 203.864706][ T5877] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.875007][ T5835] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 204.015833][ T5877] usb 3-1: USB disconnect, device number 18 [ 204.065184][ T30] audit: type=1800 audit(1745735565.877:191): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 204.090571][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.116073][ T5835] usb 2-1: config 0 has no interfaces? [ 204.143835][ T5835] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.153171][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.171989][ T5835] usb 2-1: Product: syz [ 204.181049][ T5835] usb 2-1: Manufacturer: syz [ 204.194911][ T53] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 204.216228][ T5835] usb 2-1: SerialNumber: syz [ 204.258280][ T5835] usb 2-1: config 0 descriptor?? [ 204.400946][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 204.419793][ T53] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 204.429174][ T53] usb 4-1: config 0 has no interface number 0 [ 204.453691][ T53] usb 4-1: config 0 interface 181 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 204.490636][ T53] usb 4-1: config 0 interface 181 altsetting 6 endpoint 0xB has an invalid bInterval 36, changing to 9 [ 204.523334][ T53] usb 4-1: config 0 interface 181 has no altsetting 0 [ 204.544903][ T53] usb 4-1: New USB device found, idVendor=0cf3, idProduct=817b, bcdDevice=68.9e [ 204.554577][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.566354][ T53] usb 4-1: Product: syz [ 204.571544][ T53] usb 4-1: Manufacturer: syz [ 204.586126][ T53] usb 4-1: SerialNumber: syz [ 204.611865][ T53] usb 4-1: config 0 descriptor?? [ 204.858816][ T53] usb 4-1: USB disconnect, device number 22 [ 206.125020][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 206.331265][ T10] usb 4-1: config 0 has no interfaces? [ 206.390217][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 206.429994][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.661261][ T53] usb 2-1: USB disconnect, device number 17 [ 206.676605][ T10] usb 4-1: Product: syz [ 206.680836][ T10] usb 4-1: Manufacturer: syz [ 206.793551][ T10] usb 4-1: SerialNumber: syz [ 206.812805][ T10] usb 4-1: config 0 descriptor?? [ 207.246083][ T7604] team0: Device gtp0 is of different type [ 209.392983][ T7647] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.445955][ T7647] bridge0: port 3(veth0_to_bridge) entered disabled state [ 209.605141][ T7647] veth0_to_bridge: entered allmulticast mode [ 209.626555][ T7647] veth0_to_bridge: entered promiscuous mode [ 209.632638][ T7647] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.696065][ T7647] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.703335][ T7647] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 210.064619][ T10] usb 4-1: USB disconnect, device number 23 [ 210.088845][ T7581] syz.4.498 (7581): drop_caches: 1 [ 210.254851][ T30] audit: type=1326 audit(1745735572.067:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675918e969 code=0x7ffc0000 [ 210.302440][ T7661] delete_channel: no stack [ 210.380411][ T30] audit: type=1326 audit(1745735572.067:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675918e969 code=0x7ffc0000 [ 210.518753][ T30] audit: type=1326 audit(1745735572.067:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675918e969 code=0x7ffc0000 [ 210.668239][ T30] audit: type=1326 audit(1745735572.067:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675918e969 code=0x7ffc0000 [ 210.695365][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 210.728346][ T30] audit: type=1326 audit(1745735572.067:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675918e969 code=0x7ffc0000 [ 211.087112][ T7688] Unknown options in mask 5 [ 211.286162][ T53] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 211.471001][ T7692] netlink: 452 bytes leftover after parsing attributes in process `syz.1.521'. [ 211.547818][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.594041][ T53] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 211.667422][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 211.687137][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 211.771726][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 211.785103][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 211.796329][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.837054][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 211.846408][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.936639][ T53] usb 5-1: Product: syz [ 211.942357][ T53] usb 5-1: Manufacturer: syz [ 211.993331][ T53] usb 5-1: SerialNumber: syz [ 212.020465][ T53] usb 5-1: config 0 descriptor?? [ 212.078147][ T7682] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.165996][ T5835] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 212.294939][ T975] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 212.356258][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 212.367397][ T5835] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 212.392219][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.511703][ T975] usb 2-1: config 0 has no interfaces? [ 212.524110][ T975] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.533242][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.543931][ T5835] usb 4-1: Product: syz [ 212.551878][ T5835] usb 4-1: Manufacturer: syz [ 212.556841][ T975] usb 2-1: Product: syz [ 212.561936][ T5835] usb 4-1: SerialNumber: syz [ 212.566687][ T975] usb 2-1: Manufacturer: syz [ 212.585298][ T975] usb 2-1: SerialNumber: syz [ 212.611088][ T5835] usb 4-1: config 0 descriptor?? [ 212.621984][ T975] usb 2-1: config 0 descriptor?? [ 212.627666][ T53] rc_core: IR keymap rc-xbox-dvd not found [ 212.652501][ T5835] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 212.665384][ T53] Registered IR keymap rc-empty [ 212.694040][ T53] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 212.717325][ T53] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 212.762713][ T53] usb 5-1: USB disconnect, device number 23 [ 212.768757][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 212.873117][ T7696] team0: Device gtp0 is of different type [ 212.971125][ T5879] usb 2-1: USB disconnect, device number 18 [ 213.695520][ T5835] gspca_sonixj: reg_r err -32 [ 213.700301][ T5835] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 213.971871][ T7714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.045263][ T5835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.210613][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 214.220023][ T5835] usb 5-1: config 9 has an invalid interface number: 5 but max is 0 [ 214.229172][ T5835] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 214.238758][ T5835] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 214.263851][ T5835] usb 5-1: config 9 has no interface number 0 [ 214.273467][ T5835] usb 5-1: config 9 interface 5 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 214.339075][ T5835] usb 5-1: config 9 interface 5 has no altsetting 0 [ 214.366341][ T5835] usb 5-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=43.c7 [ 214.377173][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.388028][ T5835] usb 5-1: Product: syz [ 214.398432][ T5835] usb 5-1: Manufacturer: ä Š [ 214.409998][ T5835] usb 5-1: SerialNumber: syz [ 214.655774][ T1207] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.738059][ T5879] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 214.815356][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 214.823509][ T975] usb 4-1: USB disconnect, device number 24 [ 214.845098][ T1207] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 214.870660][ T1207] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.902233][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.917815][ T5879] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 214.931154][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.939779][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.968399][ T1207] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.970930][ T5879] usb 2-1: config 0 descriptor?? [ 214.998090][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 215.008055][ T1207] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.022000][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.186314][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 215.287710][ T1207] usb 3-1: usb_control_msg returned -32 [ 215.306913][ T1207] usbtmc 3-1:16.0: can't read capabilities [ 215.377648][ T10] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 215.388501][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.399984][ T10] usb 1-1: config 0 descriptor?? [ 215.413562][ T10] usbhid 1-1:0.0: can't add hid device: -22 [ 215.420840][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 215.456879][ T5879] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 215.555054][ T5877] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 215.648381][ T7734] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 215.704856][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 215.720050][ T5877] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 215.739131][ T5877] usb 4-1: config 11 has no interface number 0 [ 215.750300][ T5877] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.763425][ T5877] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.779249][ T5877] usb 4-1: config 11 interface 95 has no altsetting 0 [ 215.800102][ T5877] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 215.813691][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.833258][ T5877] usb 4-1: Product: syz [ 215.840249][ T5877] usb 4-1: Manufacturer: syz [ 215.846600][ T5877] usb 4-1: SerialNumber: syz [ 215.964594][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.973433][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.071760][ T5877] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 216.092131][ T5877] usb 4-1: USB disconnect, device number 25 [ 216.161818][ T5879] usb 2-1: USB disconnect, device number 19 [ 216.407296][ T5877] usb 3-1: USB disconnect, device number 19 [ 216.522939][ T5835] option 5-1:9.5: GSM modem (1-port) converter detected [ 216.524981][ T7741] netlink: 'syz.1.538': attribute type 5 has an invalid length. [ 216.552584][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 216.580735][ T5835] usb 5-1: USB disconnect, device number 24 [ 216.589360][ T5835] option 5-1:9.5: device disconnected [ 217.074509][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 217.230950][ T7758] Unknown options in mask 5 [ 217.255489][ T5877] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 217.426743][ T5877] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 217.436196][ T5877] usb 4-1: config 150 has no interface number 0 [ 217.568519][ T5877] usb 4-1: config 150 interface 204 has no altsetting 0 [ 217.589196][ T5877] usb 4-1: config 150 interface 1 has no altsetting 0 [ 217.607459][ T5877] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 217.616849][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.638630][ T5877] usb 4-1: Product: syz [ 217.652114][ T5877] usb 4-1: Manufacturer: syz [ 217.664726][ T5877] usb 4-1: SerialNumber: syz [ 217.893650][ T5877] xr_serial 4-1:150.204: xr_serial converter detected [ 217.916551][ T5879] usb 1-1: USB disconnect, device number 20 [ 218.716964][ T5877] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 218.734873][ T5835] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.914222][ T5879] usb 4-1: USB disconnect, device number 26 [ 218.934242][ T5835] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 218.950047][ T5879] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 219.000938][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.178252][ T5879] xr_serial 4-1:150.204: device disconnected [ 219.197112][ T5835] usb 5-1: config 0 has no interfaces? [ 219.393575][ T5835] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 219.435311][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.466195][ T5835] usb 5-1: Product: syz [ 219.473768][ T5835] usb 5-1: Manufacturer: syz [ 219.484088][ T5835] usb 5-1: SerialNumber: syz [ 219.510070][ T5835] usb 5-1: config 0 descriptor?? [ 219.746894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.759419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.772163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 219.784993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.797615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.810187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 219.822717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.835314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.847901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 219.860432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.845205][ T5835] usb 5-1: USB disconnect, device number 25 [ 223.057911][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 223.995030][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 224.108733][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 224.258019][ T7810] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.266844][ T7810] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.275731][ T7810] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.284443][ T7810] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.585141][ T975] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 224.754836][ C0] net_ratelimit: 12730 callbacks suppressed [ 224.754865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 224.755560][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 224.761176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.790450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.802963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 224.815355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.827754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.840229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 224.852621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.865149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.877560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 224.921148][ T975] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 227.225938][ T975] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.548432][ C0] sched: DL replenish lagged too much [ 227.576462][ T975] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.604539][ T7828] misc userio: Can't change port type on an already running userio instance [ 227.698289][ T975] usb 5-1: string descriptor 0 read error: -71 [ 227.704646][ T975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.829581][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.085120][ T975] usb 5-1: can't set config #1, error -71 [ 228.204226][ T975] usb 5-1: USB disconnect, device number 26 [ 229.764962][ C0] net_ratelimit: 17104 callbacks suppressed [ 229.764983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.783318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 229.795607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.807871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.820154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 229.832933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.845296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.857622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 229.869851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.882095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.447639][ T975] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 230.522455][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 234.775083][ C0] net_ratelimit: 10772 callbacks suppressed [ 234.775106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.793525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 234.805933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.818493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.830971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 234.843349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.855834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.868298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 234.880739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.893191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.784828][ C0] net_ratelimit: 12781 callbacks suppressed [ 239.784850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.805121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.817570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 239.830003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.842418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.854894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 239.867276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.879717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.892164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 239.904560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.794971][ C0] net_ratelimit: 12048 callbacks suppressed [ 244.794993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 244.795284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.801364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.814369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.825382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.838101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.849112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 244.862046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.872950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.885938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.804897][ C0] net_ratelimit: 12264 callbacks suppressed [ 249.804919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 249.805423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.811291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.824355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.835370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.848317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.859427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 249.872297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.883409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.896480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.814791][ C0] net_ratelimit: 13331 callbacks suppressed [ 254.814813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.815290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.821236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.834232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.845127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 254.858244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.868971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.882119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.893064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.906191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.831776][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.851178][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.825016][ C0] net_ratelimit: 17367 callbacks suppressed [ 259.825039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 259.825599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.831339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.844439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.855379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.868225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.879596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 259.892698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.903465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.916605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.835040][ C0] net_ratelimit: 15325 callbacks suppressed [ 264.835061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.835395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.841445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 264.854472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.865324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.878371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.889427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.902206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.913192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 264.926203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.837961][ T975] usb 1-1: device descriptor read/64, error -32 [ 269.844844][ C0] net_ratelimit: 15367 callbacks suppressed [ 269.844867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 269.845644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.851128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.864205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.875208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.888033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.898959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 269.911923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.922737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.935783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.854972][ C0] net_ratelimit: 16635 callbacks suppressed [ 274.854992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.855198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.861434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.874222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.885149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 274.898028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.908968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.921998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.933017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.945828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.864997][ C0] net_ratelimit: 15691 callbacks suppressed [ 279.865022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.865776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.871414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 279.884470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.895318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.908361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.919398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.932205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.943148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 279.956068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.874924][ C0] net_ratelimit: 13232 callbacks suppressed [ 284.874956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 284.875244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.881301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.894319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.905372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.918296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.929238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 284.942102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.953089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.966098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.885167][ C0] net_ratelimit: 15342 callbacks suppressed [ 289.885190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.885367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.891646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 289.904520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.915443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.928436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.939456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.952227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.963253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 289.976144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.894781][ C0] net_ratelimit: 15547 callbacks suppressed [ 294.894804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 294.896193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.901157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.914321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.925338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.938142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.948996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 294.962002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.972814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.985997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.904847][ C1] net_ratelimit: 16243 callbacks suppressed [ 299.904872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.904884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 299.905222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.912484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.923567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.936987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.947446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 299.960345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.971207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.984188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.914939][ C0] net_ratelimit: 16518 callbacks suppressed [ 304.914963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 304.915408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.921233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.934296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.945267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.958838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.969079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 304.982157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.992942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.006164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.924895][ C1] net_ratelimit: 17206 callbacks suppressed [ 309.924918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.925173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.932234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.943216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 309.956192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.967020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.980073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.991037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.003882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.014781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 314.934828][ C0] net_ratelimit: 17697 callbacks suppressed [ 314.934851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 314.936046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.941115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.954208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.965223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.984869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.989026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 315.001951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.012840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.025917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.945096][ C0] net_ratelimit: 17850 callbacks suppressed [ 319.945119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 319.945754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.951398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.964553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.975508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.988399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.999379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 320.016025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.023256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.036198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.954891][ C0] net_ratelimit: 17766 callbacks suppressed [ 324.954915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 324.955944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.961806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.974251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.985259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.998074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.009150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 325.025855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.032995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.046048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.964779][ C0] net_ratelimit: 17805 callbacks suppressed [ 329.964802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 329.965725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.971117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.984134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.995135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.007927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.018839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 330.035858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.042693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.055643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.974770][ C0] net_ratelimit: 17612 callbacks suppressed [ 334.974792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.975608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.981249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 334.994273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.005092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.018195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.029141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.046134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.052896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 335.065859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.984786][ C0] net_ratelimit: 17543 callbacks suppressed [ 339.984808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.986052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.991235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 340.004234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.015095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.028125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.039114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.051996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.062879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 340.075910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.994799][ C0] net_ratelimit: 17858 callbacks suppressed [ 344.994820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.995983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.001255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.014068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.025015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 345.037968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.048823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.061930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.072843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.085668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.004814][ C0] net_ratelimit: 17614 callbacks suppressed [ 350.004837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 350.005742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.011172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.024209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.035136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.048116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.059004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.075782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.082794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.095775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.015039][ C0] net_ratelimit: 17722 callbacks suppressed [ 355.015063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 355.015090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.021419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.034467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.045465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.058317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.069284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.084888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.093046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 355.105988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.024785][ C0] net_ratelimit: 17485 callbacks suppressed [ 360.024807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.025325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.031221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.044320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.055270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 360.068286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.079319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.092289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.103344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 360.116344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.035031][ C0] net_ratelimit: 17629 callbacks suppressed [ 365.035053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 365.035260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.041402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.054493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.065419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 365.078495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.089271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.102323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.113204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.126175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.045103][ C0] net_ratelimit: 17821 callbacks suppressed [ 370.045125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.045790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.051474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 370.064463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.075420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.088382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.099323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 370.112287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.123176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.136180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.054807][ C0] net_ratelimit: 17844 callbacks suppressed [ 375.054830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 375.055091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.061185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.074184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.085254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.098190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.109117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.125781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.132893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 375.145794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.064914][ C0] net_ratelimit: 17470 callbacks suppressed [ 380.064936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.065500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.071295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 380.085202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.095285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.116777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.119258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.132952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.143078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.156783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.054727][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 385.061746][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7843/1:b..l [ 385.070093][ C1] rcu: (detected by 1, t=10503 jiffies, g=26489, q=581 ncpus=2) [ 385.075303][ C0] net_ratelimit: 16783 callbacks suppressed [ 385.075322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.077859][ C1] task:syz.0.570 state:R [ 385.084206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.096071][ C1] running task stack:27096 pid:7843 tgid:7838 ppid:5841 task_flags:0x40044c flags:0x00004006 [ 385.096167][ C1] Call Trace: [ 385.101395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 385.112872][ C1] [ 385.112889][ C1] __schedule+0x16e2/0x4cd0 [ 385.124358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.127202][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 385.139670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 385.142171][ C1] ? preempt_schedule_common+0x83/0xd0 [ 385.147063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.158620][ C1] ? __pfx___schedule+0x10/0x10 [ 385.158659][ C1] ? do_raw_spin_lock+0x121/0x290 [ 385.164818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.176312][ C1] ? preempt_schedule+0xae/0xc0 [ 385.182230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.193635][ C1] preempt_schedule_common+0x83/0xd0 [ 385.193672][ C1] preempt_schedule+0xae/0xc0 [ 385.198979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 385.203526][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 385.215906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.220321][ C1] preempt_schedule_thunk+0x16/0x30 [ 385.277049][ C1] _raw_spin_unlock+0x3f/0x50 [ 385.281768][ C1] unmap_page_range+0x3756/0x4210 [ 385.286873][ C1] ? mas_next_slot+0xc20/0xcf0 [ 385.291694][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 385.297195][ C1] ? unmap_single_vma+0x1b2/0x2a0 [ 385.302351][ C1] unmap_vmas+0x25d/0x3c0 [ 385.306734][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 385.311647][ C1] exit_mmap+0x245/0xba0 [ 385.315935][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 385.320747][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 385.326424][ C1] ? __pfx_exit_aio+0x10/0x10 [ 385.331143][ C1] ? uprobe_clear_state+0x274/0x290 [ 385.336372][ C1] __mmput+0x118/0x420 [ 385.340493][ C1] exit_mm+0x1da/0x2c0 [ 385.344609][ C1] ? __pfx_exit_mm+0x10/0x10 [ 385.349224][ C1] ? taskstats_exit+0x43c/0xa30 [ 385.354103][ C1] ? tty_audit_exit+0x153/0x200 [ 385.358982][ C1] do_exit+0x859/0x2550 [ 385.363185][ C1] ? do_raw_spin_lock+0x121/0x290 [ 385.368236][ C1] ? __pfx_do_exit+0x10/0x10 [ 385.372853][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 385.378267][ C1] do_group_exit+0x21c/0x2d0 [ 385.382921][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.388152][ C1] get_signal+0x125e/0x1310 [ 385.392710][ C1] arch_do_signal_or_restart+0x95/0x780 [ 385.398376][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.404571][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 385.410500][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 385.416074][ C1] do_syscall_64+0x103/0x210 [ 385.420689][ C1] ? clear_bhb_loop+0x45/0xa0 [ 385.425393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.431308][ C1] RIP: 0033:0x7f003a78e56b [ 385.435741][ C1] RSP: 002b:00007f003b63ff10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.444185][ C1] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f003a78e56b [ 385.452197][ C1] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 385.460192][ C1] RBP: 00007f003b640fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 385.468201][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.476200][ C1] R13: 00007f003b63ffb0 R14: 0000200000000000 R15: 00007f003aae0320 [ 385.484220][ C1] [ 385.487272][ C1] rcu: rcu_preempt kthread starved for 7849 jiffies! g26489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 385.498509][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 385.508506][ C1] rcu: RCU grace-period kthread stack dump: [ 385.514417][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 385.527976][ C1] Call Trace: [ 385.531275][ C1] [ 385.534234][ C1] __schedule+0x16e2/0x4cd0 [ 385.538788][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 385.544024][ C1] ? schedule+0x165/0x360 [ 385.548398][ C1] ? __pfx___schedule+0x10/0x10 [ 385.553296][ C1] ? schedule+0x91/0x360 [ 385.557574][ C1] schedule+0x165/0x360 [ 385.561785][ C1] schedule_timeout+0x12b/0x270 [ 385.566665][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 385.572074][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 385.578091][ C1] ? __pfx_process_timeout+0x10/0x10 [ 385.583424][ C1] ? prepare_to_swait_event+0x341/0x380 [ 385.589013][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 385.593921][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.599185][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 385.605395][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 385.610720][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 385.615970][ C1] ? finish_swait+0xcd/0x1f0 [ 385.620605][ C1] rcu_gp_kthread+0x99/0x390 [ 385.625243][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 385.630480][ C1] ? __kthread_parkme+0x7b/0x200 [ 385.635448][ C1] ? __kthread_parkme+0x1a1/0x200 [ 385.640522][ C1] kthread+0x70e/0x8a0 [ 385.644622][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 385.649863][ C1] ? __pfx_kthread+0x10/0x10 [ 385.654487][ C1] ? __pfx_kthread+0x10/0x10 [ 385.659119][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.664353][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.669573][ C1] ? __pfx_kthread+0x10/0x10 [ 385.674367][ C1] ret_from_fork+0x4b/0x80 [ 385.678809][ C1] ? __pfx_kthread+0x10/0x10 [ 385.683428][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.688234][ C1] [ 385.691277][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 385.697639][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 385.709315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 385.719396][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 385.725682][ C1] Code: 75 0e 48 8d 65 f0 5b 41 5e 5d c3 cc cc cc cc cc e8 05 fc a8 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 [ 385.745335][ C1] RSP: 0018:ffffc90000a074a0 EFLAGS: 00000286 [ 385.751438][ C1] RAX: ffffffff89850ab2 RBX: ffffc90000a07560 RCX: a09d7c2ec0fb9700 [ 385.759438][ C1] RDX: 0000000000000001 RSI: ffffffff89850ab2 RDI: ffffc90000a07560 [ 385.767606][ C1] RBP: ffffc90000a07530 R08: ffffc90000a07ae0 R09: 0000000000000000 [ 385.775639][ C1] R10: ffffc90000a074f8 R11: ffffffff81acaa70 R12: ffff88801c6c5a00 [ 385.783634][ C1] R13: 0000000000000000 R14: ffffffff81acaa70 R15: ffffc90000a074a8 [ 385.791635][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 385.800591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.807198][ C1] CR2: 00007f9980400000 CR3: 00000000684b8000 CR4: 00000000003526f0 [ 385.815194][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.823194][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.831213][ C1] Call Trace: [ 385.834513][ C1] [ 385.837377][ C1] arch_stack_walk+0x10d/0x150 [ 385.842180][ C1] ? nf_hook_slow+0xc2/0x220 [ 385.846812][ C1] stack_trace_save+0x9c/0xe0 [ 385.851521][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 385.856928][ C1] ? nf_hook_slow+0xc2/0x220 [ 385.861573][ C1] kasan_save_track+0x3e/0x80 [ 385.866277][ C1] ? kasan_save_track+0x3e/0x80 [ 385.871157][ C1] ? kasan_save_free_info+0x46/0x50 [ 385.876389][ C1] ? __kasan_slab_free+0x62/0x70 [ 385.881364][ C1] ? kmem_cache_free+0x192/0x3f0 [ 385.886332][ C1] ? br_nf_dev_queue_xmit+0x4fe/0x2680 [ 385.891828][ C1] ? NF_HOOK+0x618/0x6b0 [ 385.896100][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 385.901380][ C1] ? br_nf_dev_queue_xmit+0x4fe/0x2680 [ 385.906873][ C1] kasan_save_free_info+0x46/0x50 [ 385.911951][ C1] __kasan_slab_free+0x62/0x70 [ 385.916752][ C1] kmem_cache_free+0x192/0x3f0 [ 385.921544][ C1] ? __skb_ext_put+0x21a/0x2e0 [ 385.926343][ C1] br_nf_dev_queue_xmit+0x4fe/0x2680 [ 385.931702][ C1] ? NF_HOOK+0x9e/0x6b0 [ 385.935891][ C1] NF_HOOK+0x618/0x6b0 [ 385.940013][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 385.944637][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 385.950395][ C1] ? net_generic+0x1e/0x240 [ 385.954928][ C1] ? net_generic+0x1e/0x240 [ 385.959468][ C1] ? net_generic+0x1e/0x240 [ 385.964008][ C1] ? skb_pull+0xc1/0x1d0 [ 385.968283][ C1] br_nf_post_routing+0xb66/0xfe0 [ 385.973336][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 385.979096][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 385.984680][ C1] nf_hook_slow+0xc2/0x220 [ 385.989137][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 385.995061][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 386.000982][ C1] NF_HOOK+0x215/0x3c0 [ 386.005092][ C1] ? __lock_acquire+0xaac/0xd20 [ 386.009981][ C1] ? NF_HOOK+0x9e/0x3c0 [ 386.014171][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 386.018788][ C1] ? net_generic+0x1e/0x240 [ 386.023331][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 386.029262][ C1] ? net_generic+0x1e/0x240 [ 386.033802][ C1] br_forward_finish+0xd3/0x130 [ 386.038682][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 386.044607][ C1] br_nf_forward_finish+0xa3c/0xe60 [ 386.049849][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 386.055605][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 386.061098][ C1] ? NF_HOOK+0x9e/0x6b0 [ 386.065285][ C1] ? NF_HOOK+0x9e/0x6b0 [ 386.069493][ C1] NF_HOOK+0x618/0x6b0 [ 386.073597][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 386.078223][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 386.083992][ C1] br_nf_forward_ip+0x647/0x7e0 [ 386.088877][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 386.094645][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 386.099793][ C1] nf_hook_slow+0xc2/0x220 [ 386.104251][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 386.109743][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 386.115233][ C1] NF_HOOK+0x215/0x3c0 [ 386.119336][ C1] ? NF_HOOK+0x9e/0x3c0 [ 386.123535][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 386.128154][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 386.133673][ C1] __br_forward+0x41e/0x600 [ 386.138205][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 386.143695][ C1] ? skb_clone+0x246/0x3a0 [ 386.148148][ C1] ? __pfx___br_forward+0x10/0x10 [ 386.153211][ C1] br_handle_frame_finish+0x146c/0x1950 [ 386.158803][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 386.164739][ C1] ? ip6t_do_table+0x1db/0x1530 [ 386.169621][ C1] ? nf_hook_slow+0x176/0x220 [ 386.174334][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 386.180273][ C1] br_nf_hook_thresh+0x3bf/0x490 [ 386.185255][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 386.190751][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 386.196681][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 386.201573][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 386.207591][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 386.213526][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 386.219110][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 386.224521][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 386.230449][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 386.237012][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 386.242255][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 386.247748][ C1] br_handle_frame+0x97f/0x14c0 [ 386.252647][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 386.257988][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 386.263929][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 386.269257][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 386.275014][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 386.279718][ C1] ? kmem_cache_free+0x192/0x3f0 [ 386.284686][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 386.289398][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 386.295499][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 386.300551][ C1] ? NF_HOOK+0x309/0x3a0 [ 386.304820][ C1] ? skb_orphan+0xaf/0xd0 [ 386.309206][ C1] ? __lock_acquire+0xaac/0xd20 [ 386.314100][ C1] ? process_backlog+0x2d5/0x14f0 [ 386.319164][ C1] ? process_backlog+0x2d5/0x14f0 [ 386.324229][ C1] __netif_receive_skb+0x72/0x380 [ 386.329295][ C1] ? process_backlog+0x2d5/0x14f0 [ 386.334365][ C1] process_backlog+0x60e/0x14f0 [ 386.339367][ C1] ? __pfx_process_backlog+0x10/0x10 [ 386.344708][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 386.350117][ C1] __napi_poll+0xc4/0x480 [ 386.354481][ C1] ? net_rx_action+0x447/0xdf0 [ 386.359282][ C1] net_rx_action+0x6ea/0xdf0 [ 386.363923][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 386.369113][ C1] handle_softirqs+0x283/0x870 [ 386.373915][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 386.378710][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 386.384042][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 386.389275][ C1] __irq_exit_rcu+0xca/0x1f0 [ 386.393893][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 386.399124][ C1] irq_exit_rcu+0x9/0x30 [ 386.403391][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 386.409151][ C1] [ 386.412105][ C1] [ 386.415068][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.421072][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 386.426815][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 6b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 386.446462][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 386.452562][ C1] RAX: a09d7c2ec0fb9700 RBX: ffffffff81973da8 RCX: a09d7c2ec0fb9700 [ 386.460594][ C1] RDX: 0000000000000001 RSI: ffffffff8d748fd9 RDI: ffffffff8bc1cde0 [ 386.468590][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 386.476587][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ec970 [ 386.484578][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d8b40 [ 386.492578][ C1] ? do_idle+0x1e8/0x510 [ 386.496874][ C1] default_idle+0x13/0x20 [ 386.501246][ C1] default_idle_call+0x74/0xb0 [ 386.506059][ C1] do_idle+0x1e8/0x510 [ 386.510169][ C1] ? __pfx_do_idle+0x10/0x10 [ 386.514804][ C1] cpu_startup_entry+0x44/0x60 [ 386.519604][ C1] start_secondary+0x101/0x110 [ 386.524400][ C1] common_startup_64+0x13e/0x147 [ 386.529401][ C1] [ 386.970371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.988128][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.084985][ C0] net_ratelimit: 14363 callbacks suppressed [ 390.085008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.086058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.091340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.105305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.115269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.129130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.139017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:2b:06:9e:90:94, vlan:0) [ 390.153032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.162988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.176913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)