last executing test programs: 12.756912691s ago: executing program 3 (id=366): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0xf}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 12.536815773s ago: executing program 0 (id=369): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) read(r1, &(0x7f0000000040)=""/139, 0xffffffffffffff64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r4 = dup2(r1, r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0xec, 0x19, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0xec}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x275c, 0x0, 0x305, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x60, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "521b51d45bd8"}, @NL80211_NAN_FUNC_SRF={0x34, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x80}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}]}, @NL80211_ATTR_NAN_FUNC={0xffffffffffffff7d, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x64, 0xb, "6e3d24789195d4b21aa87e1ec79592998c95ef692fae84abe65f59f2f568142bcea35a784d93fd1a04f0e8ce35cef799a4768025849fa15fa8e812b07be11f5750d5fda4fafb2686987e71317e127ac9367aefcf21e818b9576eb37eae92902c"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x238, 0xe, 0x0, 0x1, [{0xd2, 0x0, "6785b38a7670cc7b9c9063d787c3e561f670e18951028a44480b18d679784bdd2f6c970a3e34998a886a29cd60811ea7c9aa6ed9f9868b34d68cdf8913ef43de2f21225ba27ac1167303b0fe62a1668eca9c18f08323df1a4b2f1f7025b40ab79b4efb4cdf78694bd49e795c7428fb816fdd3e15375b8ff3376c96a2bf83f58a459ce5a39e48646c9439a7e0ca2bc0984b6ab89f55e6188f06e1d6494df11b15595ec437d7f8afe61d4a181d116cdd3538a076855ed4058da7438529c5797350c8016c1dafc90220cf3875ab5615"}, {0x33, 0x0, "7b36c649edc17249a7de5bba25dea62b07dda2a22489122fab64368b2d9cab7a43a085c1d067337f12fcd4b1593e3b"}, {0x4}, {0xbb, 0x0, "e7a5870de4190bf6287f27be71da893252e373ba9379a462c5f73842159c13878f24faff01f570ed0e95d6d9248641fa0a4e86047b0b0c9807ffcfec1f3e7a51b3fcf1083ceb5969e51f7148f54c968eaed59b3944757da43ca6a314bc41339c849177da4dc6a60207e145e1692dafc69a412db298d5e4d3c7164bc648836d9e592170f5fcdb42ff7a7e5dd7c6b174b24ffae09cc202e6f70716f1f57e693c0243eb6a7e7a8703c28383c6408ddccd6a386341390e3170"}, {0x69, 0x0, "30b75b4392359fd146cc41145055a151608dff7b3ccb6ead10b629d7dd15cc74d660c127ba52d31a931bcba4997276553f32904e72f9c924b9329ae3734e096cb6c78c720865e9dc28e196caddafcb91682ebc2eecb59c21b15a9a317ac72186675aec39ad"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x23d4, 0xd, 0x0, 0x1, [{0xb3, 0x0, "32cb62bcd70ace5c1c76069ed0cb588eef75d0dab29b0ed858241e52943791aa26ffcea6c7ebec1fd518ac14d06fa646e4d1e536a06bcd4b93fa0f47b8e9f75c06aedd59534a2152280d808e9d009f171e37e57a3c95d0da77b0d753b688aa39dbf2691be6313c249ed961b64ea306cc75d4e33beccf9adf0738419334e4b1164c46a8c6d0b8ced1c75a1bc788bfe56d2c70df5db4c2358b086dc9a6fc64ba18c9557ebdf5a5d355ada90e19d6672c"}, {0xa0, 0x0, "4859939f574fa2bb4f2e01c52fb7f8b779dcb1b03cf151ec7bb6b1de94ff4693e0cf9bcadeda1243fe4c5cb3e1d6d0f7c3b5e3f9b001cb956759e071367154ebffe5a7d00a3e717b91d03b6fb0bf85c5d0c716c3b0a636945af61cee01c2e630333b48a2bcd35dac25ddb07299e69d5001700de8628b7601c64ecb0b4e88c4c6de090088335ca8d10fcf719cb6d1df7a0d7a8f548c8d045dcdbd6402"}, {0x1004, 0x0, "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"}, {0x100, 0x0, "effbb16cbed72bfbe19cd84ab669add33e5c9bbea385162d2944a92f66a0a567d7cce39b8e949880c64cb8477b8259c8a34721f66c03e5b73b1ca7e2f14dab0965115baaa0b009461c2a3016cadd711efab50dc4e009f95e8ba271985fb764ec5d9746187159f969dfe5cae438f09528dc5afa58b194330ec08ebcf24903b51c70a0538d767b2aca90de1d6aae3d21673eaab52a3b78a6f516a10d7fa244e5d05b488f11e20d114a712cc9739af093f22fe87002fab5b8cde4163a2cdfbfcf25f4980704cdcf59e0159a9fc0ee048049bc138beb123afbc5a0d625338c89179be753e827693ccab9084ae97c93fcdf445c14bb612fa0217781d0b180"}, {0x1004, 0x0, "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"}, {0x85, 0x0, "0ef49299d96c166262652fe1fbf017664a079863a92ad91c348a2617187d92e448145a2da317894ca885c0c37164866543010157b50599854df047c8cf209fa300b77abc3cdfc4339e32ccf557fba4fc9e1fb34f158eaa16fca6536171af19537b5100687546bfe6d53b58dcfbdb479e4f61a439cdfd57bd31f2d0955711802a8d"}, {0xec, 0x0, "84500c4524781c9bbbd37f5dad04a4755517a4f26e5750f0f1da9ba32ba21d6ae9782760504f2dd8a100a7d8bcf4aa3caba3a46b426a262c21fc44e6dfa4af630b88e7e96280e14f4debb6e248d1529606ada2817f5594ec65e4027a1e4d66218832143717b0d3b575406ab8162d926f9114352cce8c77037a456f815faf301a17ad9903ee30b547b1f1f3a9da80134715ed2e26155a1a6f2db0a5353863379fc301a45d247da074080c71fcddd8370a1c1fca6be1ae9e7c32fb9aee69980b3358654e2773d0e351f1f3273dbd48c3491067892c37d1336fac2d8a35e2ac21bdf46984c6686e3c9e"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x12}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x275c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) 11.158942771s ago: executing program 2 (id=371): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 9.858728061s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002080500000000000000000008000001"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, &(0x7f0000000700)='./file0\x00') io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) 9.384624111s ago: executing program 4 (id=374): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003786bf2f48abd37a08307e7e8520bfa9c427b6e152639ebebab971bf0706187ba273390e5ac7359e38c6be5f84b2d3e7156be23ed9588443171f404ec075067a8bc1c25fdeb341aa6407da3b61be4535fd144d3754a5704f08ed50425ebf88ebe964f84120da3f80993bec15a25d7bb2ea9b286cad617ffdd86d477b70b7ccad12ca7a9d78a11afc72ad505344b935880313e1ae052eefa9ee400dfbe00690c524463e6df4568924bb46c5841d8493e1e26805f205b605db57b2c7fc77ce05712e87085f28b775d346aba3e1f8f366e34f0588c3f27c1e13cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x1, 0x0, '\x00', 0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async, rerun: 64) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x0) (async) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (async, rerun: 32) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x7f, 0x74bf00) (rerun: 32) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ca32c7329458e68a330a721f000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000674ae874c8a3ac27c779eb00"/108]}, 0xbc) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x2, 0x1, 0x3, {0xa, 0x4, 0xb, 0x8001}}) r7 = open(0x0, 0x64842, 0x389b0d52417bb201) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x200488b0}, 0x40c4) (async, rerun: 64) pwritev2(r7, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) (async, rerun: 64) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) (async, rerun: 64) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x1000, 0xffffffff}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 9.245908606s ago: executing program 4 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) (fail_nth: 2) 8.655424687s ago: executing program 0 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140), 0x14000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x3}}}]}, 0x24}}, 0x0) 8.574207923s ago: executing program 4 (id=378): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a120000001200000000001200ffffe0000012fe"], 0x0) 8.339679333s ago: executing program 4 (id=379): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x10100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) dup(0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) fchdir(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) 8.282331511s ago: executing program 3 (id=380): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000300)=[{0x0, 0xffffffffffffff88}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x500}, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000814) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x1, 0x8) openat$cgroup_ro(r11, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) close(r7) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, &(0x7f0000000080)) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400"/20, @ANYRES32=r8, @ANYRESDEC=r5, @ANYRES32=r4, @ANYBLOB="04d8cdba90cdfc", @ANYRESHEX=r11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000e004000000000012dd1be467aacf1612ed67c79418110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020003000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.218896418s ago: executing program 0 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x0, 0x8}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="5810235a8c132d76", 0x8, 0xfffffffffffffffe}]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x7) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="fb2f2abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @dev}, &(0x7f0000000080)=0xc) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000000)) 8.146503183s ago: executing program 2 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bfed258dc7b29d10aaaaaabb810010000800450000740000000000019078ac1e0101ac1414aa0303907803fe00004600000000000000002f0003ac14141eac1414bb44440001ac141420000000047f000001fffffbfeac14141f00000000ac1414aa00000000ac1414aa00000000e000000100000000ac141430000000007f00000100000006"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 7.670789903s ago: executing program 1 (id=384): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1800, 0x402, 0x7c, 0x618e, 0x1}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000500)="ab", 0x1, 0x11, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) (fail_nth: 31) 7.244512019s ago: executing program 1 (id=385): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x105}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26e}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 7.179487203s ago: executing program 0 (id=386): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) write$sndseq(r1, &(0x7f0000000740), 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) openat$fb0(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000040)={0x4000, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000240)) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendfile(r6, r5, 0x0, 0xffba83) 7.082126268s ago: executing program 3 (id=387): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = socket(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x6b, 0x8, 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x48, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x38}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000071121400000000007f150000000000009500000000000000ca5e3e379af9f838ef020326d8e8d978a4bb5a56ac5ed2adf9738a5ab86ed0a3a79581e249fe28ea01a87ebeb71be3a5a812b7b4a4252d2f6c010966947e360c1fd48deeb1a0dbd8a871dd64d7385bf7f7b0a4308586a0306b8649973c6f9458d0829f5708b27e2871153b07ec676d0725f3809ff278295c70a0d4115eb77e167e8011f8ff89847825f265f388f19f10d5c638a1e3ccf14afebfb4107c2c2c778ba052d9"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'cpuset'}]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.95938672s ago: executing program 3 (id=388): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) write$sndseq(r1, &(0x7f0000000740), 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000001c0)={0xbd83, 0x8, &(0x7f00000000c0)=[0x7b, 0x1ff, 0x100, 0x9, 0x10, 0x4, 0x70, 0x3], &(0x7f0000000100)=[0x4], &(0x7f0000000140), &(0x7f0000000180)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000240)) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendfile(r6, r5, 0x0, 0xffba83) 5.939056796s ago: executing program 1 (id=389): mprotect(&(0x7f00001ba000/0x4000)=nil, 0x4000, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x41}}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 5.138013396s ago: executing program 4 (id=390): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0xf}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.952698836s ago: executing program 3 (id=391): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@chain) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000480000001c0000001c00000002000000000000000000000000000f1c000000de00"/54], 0x0, 0x36}, 0x28) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (fail_nth: 1) 4.758874303s ago: executing program 0 (id=392): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_secret(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x58, 0x14, 0x400, 0x2, 0x25dfdbfd, {0x2, 0x80, 0x41, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xff, 0x80, 0xffffffc0}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x4, 0xffffff81, 0x9}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@chain) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000480000001c0000001c00000002000000000000000000000000000f1c000000de00"/54], 0x0, 0x36}, 0x28) r3 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.057988445s ago: executing program 0 (id=393): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r5, &(0x7f0000001380)=[{0x0}], 0x1, 0x8, 0xfffffff6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0xf}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.057678517s ago: executing program 2 (id=394): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 3.943646373s ago: executing program 1 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 3.929312777s ago: executing program 2 (id=396): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) (fail_nth: 1) 3.507412363s ago: executing program 3 (id=397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bfed258dc7b29d10aaaaaabb810010000800450000740000000000019078ac1e0101ac1414aa0303907803fe00004600000000000000002f0003ac14141eac1414bb44440001ac141420000000047f000001fffffbfeac14141f00000000ac1414aa00000000ac1414aa00000000e000000100000000ac141430000000007f00000100000006"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.13375079s ago: executing program 1 (id=398): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast1, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@mpls_newroute={0xe4, 0x18, 0x8, 0x70bd25, 0x25dfdbff, {0x1c, 0x80, 0x14, 0x5, 0xff, 0x2, 0xff, 0x8, 0x500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0xd3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xffffd}, {0x5}, {0x65, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x10}, {0x100, 0x0, 0x1}, {0x4}, {0x8}, {0x4, 0x0, 0x1}, {0x1d6, 0x0, 0x1}, {}, {0x1}, {0x200, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x0, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0xff49d}, {0x7, 0x0, 0x1}, {0x7}, {0xc, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf8}, @RTA_VIA={0x14, 0x12, {0xf, "f39bc76b9464ac8e8c520228a423"}}, @RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc894}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000020007fafb70000000000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x20000800) 2.335681491s ago: executing program 2 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x26020480) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x9000000}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x8, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) 866.447407ms ago: executing program 1 (id=400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x585, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x38, 0x97, 0xe2, 0xff, 0xd46, 0x2011, 0x1809, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x573, 0x1, 0xe0, 0xf7, 0x70, 0x5, "", [{{0x9, 0x4, 0xa2, 0x80, 0xc, 0xa4, 0x9, 0x2, 0x10, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0xa, 0xf2, 0x3, [@generic={0x3c, 0xb, "2547ac06d62803932fe95c644f1fefb118c59ce1b0eb3be989df0fe37deed528d6cd20652976d9abada761444f1b98dccddcc3bc99e08a2b85ef"}, @generic={0x67, 0x23, "929ea3faf08aace483933929702e780cdb3ad01857aac6d7f6677746d28914c781073256ea44877de54b7b81e813eab2df0a3e3dc742d66e1656a6eed9d736f80ada481a207c13325ada38690a6ce396d83a64068474d5358361c87a8d5cefe23d7256cbf2"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0xff, 0x9, [@generic={0x47, 0x24, "ad83bbfebd7458bad2954eedf1f7d08024807b53be93ffb251842d411b2e3637cba53a9c5229adcfc818f583c972b4b4e7913c352ae21fa4334b845fdcca74a99acdb7bab5"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x2, 0xa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x400}, @generic={0x101, 0xb, "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"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x7, 0x2, 0x26}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x49, 0x4, [@generic={0xe3, 0xb, "b3630bf690aa3ca7773b5158d70339cb2180ee3aca64b1d0fbf93f28e35dcfc3f5e5bcb8b8e403962b1b6e4a284a02917b818c7f35caf441036509a5565080e4e0f559b9b7b18135f7a614819a4cebd933ba3db22b7488f0f1735393f09db5f6c43cb5ce5bcd435b286ac220014b9b0bcb5d235ddadf5854e729064db15637ba5e6ba1e0397d36ea3fccd00956267b0685260e5406282a58d088229cd8e7c4dd443e413cb47f6fda5b81eb25e09adc251fc9bf83d9a58db0988e0017a8fecc9811968ff771ae365117f5e91e83bff46d291de12e98ecac7fa72edfccca68408866"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x10, 0x3, 0x1, [@generic={0x93, 0x30, "5ac48192f194321945da50c4933643f6dfd431b65953bc71f0614a70cc60b4a5a58938f5fdb319c9f6150de75fb8e2be598271a03ad4aec7f03c1d2721cbfa5c3f732a9f4b7b6605f614e47ec65fad5748b7c7783634e53cec89aaaf2f8dfb77de0cddb321daaf88a1b901fd0f82040f250d75cb904922deab86ebe2c8313b438b44ed56e746adcdb9ceb525e0c1370eda"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0x1}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x12, 0x6, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0x80, 0x7c}}, {{0x9, 0x5, 0xb, 0x18, 0x400, 0x89, 0x7, 0x8, [@generic={0x30, 0xf, "5fa3ff36d8390af02881d3dc03547310d14173c4c860e33b55b03e05beeeaa94ce59f1f44392d495dc6472212e94"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0xa5, 0xf7, [@generic={0xd7, 0xa, "3eb4878dbc402655cc301ec8c5db90ddd9ac610293e6707df6e3cc3abcf428a3a1e6ff944b29ae17666355b0710e8085f0bcf0ec031e39b3951b397befc05b27873898bf1957f557ace643acb5b58e79f5ba59088f85d2cd656300c7d460af39756a25337a167961595b08d3fb0a5e4df17ef4b9635097397e308408172a31919eb98dd8268fd69c0f2c09c9dbd681c4675b77c3624197e30ff716ed47a5b9f84de3afd329038cae1c3245b0b4f2cb5290eda317ded706a302be11cb4eb18bc428c72b91488854516572916c9daa9a293cfd39bdbf"}, @generic={0x71, 0xa, "72f922fdb7c19c3bb68dff265da5521667a54872a7109ac060e7ce3212b1b66174951d812d5eec27177ae233ce26c83411323ab99270f87d1e8a97212de4c36e4f1485da8cc52bf8a9f357dcafc68a933f66c9de7594c6848746d539315eb1f0e4381fd16c22f6e21802b87af5c891"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0xb7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x9, 0xa}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0xff, 0x5, 0x40, 0x4}, 0x4b, &(0x7f00000000c0)={0x5, 0xf, 0x4b, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x4, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x8, 0xff00, 0x44e}, @generic={0x25, 0x10, 0xb, "5be6ac002a4cc5b2f5855338f190b85f04ec71dde8d4cb500f4f06efb40bd585675e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x9, 0xb, 0x7e10, 0x2}]}, 0x8, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x457}}, {0x6c, &(0x7f0000000780)=@string={0x6c, 0x3, "6c0c11c598339dd2049c390dc57b74d14ca44e5f2001b89a9b4c4b05934706c688e549da15d3f7ced5a503a7961ba06ceefcd2fdc819c67db3a822250415867761ca52d72d8d1867c07f3c085be0c5e87125242fdface69bd853bb57523e3041fcae9c51efd8fcb6e9e5"}}, {0x65, &(0x7f0000000800)=@string={0x65, 0x3, "cf8323e58ae5b20648212fcf450a095f67248294d6912be0ebe69c664e7a15fbed9e35b503ee0e9876fc0a31b3e7f786af310fcfbe24c17a218655a2221544cca9caf526ead527a88783499a94a77bd6b23e96802a2dd974ce27cb03ece45c0beff28f"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1c09}}, {0x67, &(0x7f00000008c0)=@string={0x67, 0x3, "9699ad2e89863ab0a15db74224de708e5109e2ffcd6845605eb0af20d70b0e855120c45cc7e6e58111e15ebb040069108306e8687ca7d2257f02d0e4b6539a815b98f5ffaa9176769be3ec68c1157f17c582bf58f9ddc6f9a06a18fcba6971f6aaa17bf8b4"}}, {0xca, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca03a22c7a33b5646bde64ecf591d75f736352991e312de894ff9754941c0747e2656090a0e47effda138efd1b8349f4f17d84f1cba0422e929f789fed058ed36b82e3308a3fbb27e0842a26b08673d782870a777de9c68e72ca3026caf72836f4cbb2b6649c14bda18c6aa7b2632dc41c2b3c9f7286ef0d9686c5550623b8e5d78ff4f3f4ba9a3532139a1131aabf6408617a3cba9ae07c4bec922d011ab7a7f47c6a1e9733770e1ba4c61e7218c2fba9918963a179d0c087458760f80ad7eae35c6dd8cdeceaac80a1961c0fb22ea3ffad1e068fba263f2a7385423493e482ff34ac78e5457a8a7d6b713520b3"]}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x500a}}, {0xc1, &(0x7f0000000a80)=@string={0xc1, 0x3, "f591227087f25a46647c9d768f51d6d46b5e6f06c2f6eaf2d2dd82c96b765e3ba6cc5fbdc71669dead6919ad0665ac4bcdc16fbd50a7c5a27fabaedf1acf507f231173db2c4a71feba290bfd4568eed22cf7a861664b3ba3f33c08ff7c00acdba677c605a09b7347f6991cecc05329f572365ecefe8e7572ebcda799e9358c52af44d1ad58e5f47988b401f0fb478ab48645a6545a3c564af9d6d51c90a30672bbef52eee3b84b29bc968a60e4ad02e2a89fd063bf90ba6b4f3ab829010706"}}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x0, @val=0xf5}}}}}}}}, 0x0) 0s ago: executing program 4 (id=401): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) write$sndseq(r1, &(0x7f0000000740), 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000001c0)={0xbd83, 0x8, &(0x7f00000000c0)=[0x7b, 0x1ff, 0x100, 0x9, 0x10, 0x4, 0x70, 0x3], &(0x7f0000000100)=[0x4], &(0x7f0000000140), &(0x7f0000000180)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000240)) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r5 = socket(0x2, 0x3, 0xff) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendfile(r5, r4, 0x0, 0xffba83) kernel console output (not intermixed with test programs): 6198] netlink: 64 bytes leftover after parsing attributes in process `syz.4.68'. [ 116.372255][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.71'. [ 117.045196][ T29] audit: type=1326 audit(1774861621.564:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.097167][ T29] audit: type=1326 audit(1774861621.564:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.248753][ T29] audit: type=1326 audit(1774861621.564:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.417620][ T29] audit: type=1326 audit(1774861621.564:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.474566][ T29] audit: type=1326 audit(1774861621.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.529836][ T29] audit: type=1326 audit(1774861621.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.608510][ T29] audit: type=1326 audit(1774861621.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.682220][ T29] audit: type=1326 audit(1774861621.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 117.777384][ T29] audit: type=1326 audit(1774861621.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 118.037880][ T29] audit: type=1326 audit(1774861621.564:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.3.76" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb5f6c code=0x7ffc0000 [ 118.082089][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.269441][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 118.276885][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.291001][ T5830] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.300416][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.314367][ T5830] usb 5-1: Product: syz [ 118.323812][ T5830] usb 5-1: Manufacturer: syz [ 118.334411][ T5830] usb 5-1: SerialNumber: syz [ 118.420750][ T5830] usb 5-1: config 0 descriptor?? [ 118.460180][ T5830] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.493131][ T5830] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 118.944315][ T6251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.84'. [ 119.064743][ T5830] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 119.435997][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.530611][ T5830] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 119.557192][ T5830] em28xx 5-1:0.0: board has no eeprom [ 119.560133][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.613550][ T6264] netlink: 'syz.2.88': attribute type 29 has an invalid length. [ 119.748129][ T981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.938192][ T5830] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.999886][ T6269] block device autoloading is deprecated and will be removed. [ 120.019647][ T5830] em28xx 5-1:0.0: dvb set to bulk mode. [ 120.026098][ T5918] em28xx 5-1:0.0: Binding DVB extension [ 120.050165][ T981] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 120.064558][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.089014][ T981] usb 3-1: config 0 descriptor?? [ 120.106409][ T981] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 120.371263][ T981] usb 3-1: USB disconnect, device number 4 [ 120.529336][ T5892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.688730][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 120.791133][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 120.931626][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.942512][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 120.954767][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 120.981573][ T5892] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 120.991045][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.002327][ T5892] usb 1-1: Product: syz [ 121.006923][ T5892] usb 1-1: Manufacturer: syz [ 121.013331][ T5892] usb 1-1: SerialNumber: syz [ 121.037894][ T5892] usb 1-1: config 0 descriptor?? [ 121.184609][ T5892] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 121.218505][ T6227] em28xx 5-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 121.231926][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 121.294455][ T6269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.89'. [ 121.577894][ T5918] em28xx 5-1:0.0: Registering input extension [ 121.637836][ T6265] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 121.709480][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 122.339028][ T5892] usb 5-1: USB disconnect, device number 3 [ 122.353701][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 122.381656][ T5892] em28xx 5-1:0.0: Disconnecting em28xx [ 122.387326][ T5892] em28xx 5-1:0.0: Closing input extension [ 122.404218][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 122.482013][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 122.506087][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 122.537696][ T5178] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 122.542500][ T5892] em28xx 5-1:0.0: Freeing device [ 122.889082][ T5830] usb 1-1: USB disconnect, device number 3 [ 123.097016][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.355920][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.868640][ T5892] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.901689][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.929696][ T5892] usb 5-1: config 0 descriptor?? [ 124.267251][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 124.396327][ T5892] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 124.456023][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input11 [ 124.731108][ T5892] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 124.758258][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.948945][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.960188][ T5899] usb 3-1: config 0 has no interfaces? [ 124.969164][ T981] usb 5-1: USB disconnect, device number 4 [ 124.988525][ T5899] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.020796][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.039782][ T6305] fido_id[6305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 125.068913][ T5899] usb 3-1: config 0 descriptor?? [ 125.542478][ T6309] FAULT_INJECTION: forcing a failure. [ 125.542478][ T6309] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.611156][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 125.611184][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.611196][ T6309] Call Trace: [ 125.611204][ T6309] [ 125.611212][ T6309] dump_stack_lvl+0xe8/0x150 [ 125.611254][ T6309] should_fail_ex+0x412/0x560 [ 125.611289][ T6309] _copy_from_user+0x2d/0xb0 [ 125.611312][ T6309] snd_rawmidi_kernel_write1+0x3ab/0x640 [ 125.611351][ T6309] snd_rawmidi_write+0x5cd/0xc00 [ 125.611372][ T6309] ? kstrtouint+0x6e/0xe0 [ 125.611412][ T6309] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 125.611434][ T6309] ? __pfx_default_wake_function+0x10/0x10 [ 125.611461][ T6309] ? apparmor_file_permission+0x1f4/0x300 [ 125.611488][ T6309] ? bpf_lsm_file_permission+0x9/0x20 [ 125.611512][ T6309] ? security_file_permission+0x75/0x260 [ 125.611538][ T6309] ? rw_verify_area+0x255/0x4d0 [ 125.611559][ T6309] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 125.611582][ T6309] vfs_write+0x29a/0xb90 [ 125.611611][ T6309] ? __pfx_vfs_write+0x10/0x10 [ 125.611634][ T6309] ? __fget_files+0x2a/0x420 [ 125.611654][ T6309] ? __fget_files+0x2a/0x420 [ 125.611669][ T6309] ? __fget_files+0x3a0/0x420 [ 125.611685][ T6309] ? __fget_files+0x2a/0x420 [ 125.611710][ T6309] ksys_write+0x150/0x270 [ 125.611735][ T6309] ? __pfx_ksys_write+0x10/0x10 [ 125.611767][ T6309] __do_fast_syscall_32+0x20d/0x640 [ 125.611796][ T6309] ? do_fast_syscall_32+0x33/0x70 [ 125.611821][ T6309] ? asm_int80_emulation+0x1a/0x20 [ 125.611840][ T6309] ? do_int80_emulation+0x274/0x4d0 [ 125.611864][ T6309] ? trace_irq_disable+0x3b/0x150 [ 125.611886][ T6309] do_fast_syscall_32+0x33/0x70 [ 125.611913][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.611936][ T6309] RIP: 0023:0xf7f06f6c [ 125.611955][ T6309] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 125.611971][ T6309] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 125.611994][ T6309] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 125.612008][ T6309] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 125.612020][ T6309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.612031][ T6309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.612042][ T6309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.612071][ T6309] [ 125.875425][ T5899] usb 3-1: USB disconnect, device number 5 [ 126.348536][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.478958][ T5830] usb 5-1: device descriptor read/64, error -71 [ 126.836286][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.168140][ T5830] usb 5-1: device descriptor read/64, error -71 [ 127.320711][ T5830] usb usb5-port1: attempt power cycle [ 127.678197][ T5830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.734983][ T5830] usb 5-1: device descriptor read/8, error -71 [ 127.823064][ T6341] FAULT_INJECTION: forcing a failure. [ 127.823064][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 127.836199][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 127.836224][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.836234][ T6341] Call Trace: [ 127.836241][ T6341] [ 127.836250][ T6341] dump_stack_lvl+0xe8/0x150 [ 127.836284][ T6341] should_fail_ex+0x412/0x560 [ 127.836321][ T6341] should_failslab+0xa8/0x100 [ 127.836347][ T6341] ? dst_alloc+0x105/0x170 [ 127.836374][ T6341] kmem_cache_alloc_noprof+0x87/0x650 [ 127.836402][ T6341] ? __pfx_ip6_dst_gc+0x10/0x10 [ 127.836441][ T6341] dst_alloc+0x105/0x170 [ 127.836473][ T6341] ip6_pol_route+0xafb/0x13d0 [ 127.836492][ T6341] ? ip6_pol_route+0x160/0x13d0 [ 127.836516][ T6341] ? __pfx_ip6_pol_route+0x10/0x10 [ 127.836540][ T6341] ? __lock_acquire+0x6b5/0x2cf0 [ 127.836578][ T6341] fib6_rule_lookup+0x222/0x730 [ 127.836599][ T6341] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 127.836620][ T6341] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 127.836649][ T6341] ? lock_acquire+0xf0/0x2e0 [ 127.836689][ T6341] ip6_route_output_flags+0x364/0x5d0 [ 127.836709][ T6341] ? ip6_route_output_flags+0x2e/0x5d0 [ 127.836733][ T6341] icmpv6_rt_has_prefsrc+0x4f/0x3e0 [ 127.836761][ T6341] ? icmp6_send+0x228/0x1b50 [ 127.836788][ T6341] icmp6_send+0xe6d/0x1b50 [ 127.836814][ T6341] ? icmp6_send+0x228/0x1b50 [ 127.836860][ T6341] ? __pfx_icmp6_send+0x10/0x10 [ 127.836886][ T6341] ? splice_balance_callbacks+0x70/0x80 [ 127.836912][ T6341] ? __schedule+0x15f3/0x52d0 [ 127.836963][ T6341] ? __pfx___xfrm_decode_session+0x10/0x10 [ 127.837004][ T6341] ? __pfx_ip6_link_failure+0x10/0x10 [ 127.837031][ T6341] ip6_link_failure+0x3b/0x4c0 [ 127.837061][ T6341] ? __pfx_ip6_link_failure+0x10/0x10 [ 127.837088][ T6341] vti_tunnel_xmit+0x10a4/0x1a00 [ 127.837124][ T6341] ? lockdep_hardirqs_on+0x7a/0x110 [ 127.837158][ T6341] ? __pfx_vti_tunnel_xmit+0x10/0x10 [ 127.837211][ T6341] dev_hard_start_xmit+0x2d8/0x870 [ 127.837258][ T6341] __dev_queue_xmit+0x16d1/0x3890 [ 127.837295][ T6341] ? __dev_queue_xmit+0x277/0x3890 [ 127.837322][ T6341] ? __lock_acquire+0x6b5/0x2cf0 [ 127.837361][ T6341] ? __pfx___dev_queue_xmit+0x10/0x10 [ 127.837387][ T6341] ? neigh_connected_output+0x1ea/0x460 [ 127.837425][ T6341] ? read_seqbegin+0xac/0x180 [ 127.837442][ T6341] ? neigh_connected_output+0x1ea/0x460 [ 127.837489][ T6341] ? ip6_output+0x126/0x550 [ 127.837510][ T6341] ip6_output+0x340/0x550 [ 127.837532][ T6341] ? ip6_send_skb+0x10f/0x390 [ 127.837557][ T6341] ip6_send_skb+0x1d5/0x390 [ 127.837584][ T6341] rawv6_push_pending_frames+0x65e/0x810 [ 127.837612][ T6341] ? ip6_append_data+0x1b7/0x280 [ 127.837638][ T6341] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 127.837668][ T6341] ? __pfx_raw6_getfrag+0x10/0x10 [ 127.837700][ T6341] rawv6_sendmsg+0x1387/0x18e0 [ 127.837741][ T6341] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 127.837782][ T6341] ? aa_sk_perm+0x6d5/0x900 [ 127.837821][ T6341] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.837854][ T6341] ? sock_rps_record_flow+0x19/0x400 [ 127.837883][ T6341] ? inet_sendmsg+0x2f4/0x370 [ 127.837906][ T6341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.837933][ T6341] ____sys_sendmsg+0x80a/0x9f0 [ 127.837970][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.838021][ T6341] ___sys_sendmsg+0x2a5/0x360 [ 127.838054][ T6341] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.838084][ T6341] ? kstrtoull+0x12f/0x1d0 [ 127.838146][ T6341] ? __fget_files+0x2a/0x420 [ 127.838163][ T6341] ? __fget_files+0x3a0/0x420 [ 127.838195][ T6341] __sys_sendmmsg+0x2e7/0x4e0 [ 127.838228][ T6341] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.838288][ T6341] ? fput+0xa0/0xd0 [ 127.838317][ T6341] ? ksys_write+0x242/0x270 [ 127.838350][ T6341] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 127.838378][ T6341] __do_fast_syscall_32+0x20d/0x640 [ 127.838406][ T6341] ? do_fast_syscall_32+0x33/0x70 [ 127.838437][ T6341] ? asm_int80_emulation+0x1a/0x20 [ 127.838454][ T6341] ? do_int80_emulation+0x274/0x4d0 [ 127.838478][ T6341] ? trace_irq_disable+0x3b/0x150 [ 127.838502][ T6341] do_fast_syscall_32+0x33/0x70 [ 127.838528][ T6341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.838551][ T6341] RIP: 0023:0xf7f06f6c [ 127.838570][ T6341] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 127.838586][ T6341] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 127.838606][ T6341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 127.838620][ T6341] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.838631][ T6341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.838641][ T6341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.838652][ T6341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.838686][ T6341] [ 128.649639][ T6351] process 'syz.1.110' launched './file2' with NULL argv: empty string added [ 128.658846][ T5830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.671380][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 128.671393][ T29] audit: type=1326 audit(1774861633.174:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 128.712467][ T5830] usb 5-1: device descriptor read/8, error -71 [ 128.767439][ T29] audit: type=1326 audit(1774861633.174:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 128.828440][ T5830] usb usb5-port1: unable to enumerate USB device [ 128.908124][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.112'. [ 128.917391][ T6355] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 128.927207][ T29] audit: type=1326 audit(1774861633.174:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 128.958844][ T29] audit: type=1326 audit(1774861633.174:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.099672][ T29] audit: type=1326 audit(1774861633.174:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.141466][ T29] audit: type=1326 audit(1774861633.174:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.164236][ T29] audit: type=1326 audit(1774861633.174:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.388612][ T29] audit: type=1326 audit(1774861633.174:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.423488][ T29] audit: type=1326 audit(1774861633.174:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 129.476808][ T29] audit: type=1326 audit(1774861633.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 130.018203][ T5830] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 130.183092][ T5830] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.209179][ T5830] usb 5-1: config 0 has no interface number 0 [ 130.224783][ T5830] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.240271][ T5830] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.253735][ T5830] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 130.263649][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.288848][ T5830] usb 5-1: config 0 descriptor?? [ 130.546805][ T6363] libceph: resolve '96.' (ret=-3): failed [ 132.028529][ T5830] usbhid 5-1:0.1: can't add hid device: -71 [ 132.045476][ T5830] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 132.768972][ T5830] usb 5-1: USB disconnect, device number 9 [ 132.923922][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930622][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.188349][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.320822][ T5830] usb 2-1: device descriptor read/64, error -71 [ 133.471309][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 133.486719][ T6404] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 133.578140][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.731835][ T5830] usb 2-1: device descriptor read/64, error -71 [ 133.778129][ T5918] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 133.888468][ T5830] usb usb2-port1: attempt power cycle [ 135.030999][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.053431][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.220756][ T5918] usb 5-1: not running at top speed; connect to a high speed hub [ 135.241251][ T5830] usb 2-1: device descriptor read/8, error -71 [ 135.577922][ T5918] usb 5-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 135.611989][ T5918] usb 5-1: too many endpoints for config 1 interface 2 altsetting 59: 246, using maximum allowed: 30 [ 135.758853][ T5918] usb 5-1: config 1 interface 2 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 135.809227][ T5918] usb 5-1: config 1 interface 2 has no altsetting 0 [ 135.929289][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 135.942339][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.951453][ T5918] usb 5-1: Product: syz [ 135.955766][ T5918] usb 5-1: Manufacturer: syz [ 135.965880][ T5918] usb 5-1: SerialNumber: syz [ 136.204087][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.215146][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.578044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.598043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.618054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.922480][ T5918] usb 5-1: interface 3 not found [ 137.944915][ T5918] usb 5-1: USB disconnect, device number 10 [ 138.728436][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.059807][ T5918] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 139.069689][ T5918] usb 2-1: config 1 has no interface number 0 [ 139.079997][ T5918] usb 2-1: config 1 interface 8 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.116472][ T5918] usb 2-1: config 1 interface 8 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.127071][ T5918] usb 2-1: config 1 interface 8 has no altsetting 0 [ 139.140835][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 139.147218][ T5918] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 139.156943][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.298381][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.497043][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.507749][ T5899] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.526749][ T981] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.548727][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 139.569629][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 139.588386][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.619154][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.635366][ T981] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 139.647769][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.662303][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.685797][ T981] usb 4-1: Product: syz [ 139.702362][ T981] usb 4-1: Manufacturer: syz [ 139.721847][ T981] usb 4-1: SerialNumber: syz [ 139.753292][ T981] usb 4-1: config 0 descriptor?? [ 139.781817][ T981] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 139.883327][ T981] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 139.927810][ T981] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 140.009254][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.146'. [ 140.183161][ T5918] usbhid 2-1:1.8: can't add hid device: -71 [ 140.190034][ T5918] usbhid 2-1:1.8: probe with driver usbhid failed with error -71 [ 140.217490][ T5918] usb 2-1: USB disconnect, device number 8 [ 140.855270][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 140.865689][ T6481] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 141.385468][ T6487] capability: warning: `syz.0.151' uses deprecated v2 capabilities in a way that may be insecure [ 142.001141][ T5892] usb 4-1: USB disconnect, device number 3 [ 142.010363][ T5892] garmin_gps 4-1:0.0: device disconnected [ 142.118282][ T981] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.268172][ T981] usb 1-1: device descriptor read/64, error -71 [ 142.491847][ T5892] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.548302][ T981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.672914][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.683446][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.688358][ T981] usb 1-1: device descriptor read/64, error -71 [ 142.713200][ T5892] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 142.768199][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.776771][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.808478][ T5892] usb 4-1: config 0 descriptor?? [ 142.818536][ T5892] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.818726][ T981] usb usb1-port1: attempt power cycle [ 142.929023][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 142.978156][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 142.978431][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 142.993876][ T9] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 143.005856][ T5892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.014676][ T9] usb 2-1: config 0 has no interface number 0 [ 143.023303][ T9] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.042369][ T5892] usb 4-1: media controller created [ 143.055908][ T9] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 143.079347][ T9] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 143.099355][ T9] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.166732][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.168256][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 143.187632][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.208110][ T9] usb 2-1: Product: syz [ 143.212416][ T9] usb 2-1: Manufacturer: syz [ 143.213528][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 143.257865][ T9] usb 2-1: SerialNumber: syz [ 143.274675][ T5892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.284561][ T9] usb 2-1: config 0 descriptor?? [ 143.303458][ T6504] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.311002][ T981] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.313576][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 143.352760][ T981] usb 1-1: device descriptor read/8, error -71 [ 143.368652][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 143.368788][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input13 [ 143.406212][ T5892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.443669][ T5178] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 143.451817][ T5892] usb 4-1: USB disconnect, device number 4 [ 143.495734][ T6510] batadv_slave_0: entered promiscuous mode [ 143.552239][ T6510] FAULT_INJECTION: forcing a failure. [ 143.552239][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 143.598112][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.4.158 Not tainted syzkaller #0 PREEMPT(full) [ 143.598139][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.598150][ T6510] Call Trace: [ 143.598157][ T6510] [ 143.598165][ T6510] dump_stack_lvl+0xe8/0x150 [ 143.598197][ T6510] should_fail_ex+0x412/0x560 [ 143.598230][ T6510] should_failslab+0xa8/0x100 [ 143.598257][ T6510] __kmalloc_cache_noprof+0x88/0x660 [ 143.598277][ T6510] ? __pfx_stack_trace_save+0x10/0x10 [ 143.598297][ T6510] ? rtnl_newlink+0x136/0x1be0 [ 143.598322][ T6510] rtnl_newlink+0x136/0x1be0 [ 143.598342][ T6510] ? kasan_save_track+0x4f/0x80 [ 143.598362][ T6510] ? kasan_save_track+0x3e/0x80 [ 143.598380][ T6510] ? kasan_save_free_info+0x46/0x50 [ 143.598405][ T6510] ? __kasan_slab_free+0x5c/0x80 [ 143.598424][ T6510] ? kmem_cache_free+0x187/0x630 [ 143.598445][ T6510] ? __dev_queue_xmit+0x16d1/0x3890 [ 143.598469][ T6510] ? __netlink_deliver_tap+0x5ad/0x850 [ 143.598487][ T6510] ? netlink_deliver_tap+0x19c/0x1b0 [ 143.598503][ T6510] ? netlink_unicast+0x7e3/0x9b0 [ 143.598528][ T6510] ? netlink_sendmsg+0x813/0xb40 [ 143.598547][ T6510] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.598564][ T6510] ? do_fast_syscall_32+0x33/0x70 [ 143.598588][ T6510] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.598644][ T6510] ? kasan_quarantine_put+0xbb/0x1f0 [ 143.598663][ T6510] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.598690][ T6510] ? kmem_cache_free+0x187/0x630 [ 143.598710][ T6510] ? nlmon_xmit+0xb0/0x100 [ 143.598744][ T6510] ? __lock_acquire+0x6b5/0x2cf0 [ 143.598774][ T6510] ? __local_bh_enable_ip+0xd0/0x130 [ 143.598798][ T6510] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.598820][ T6510] ? __dev_queue_xmit+0x277/0x3890 [ 143.598843][ T6510] ? __local_bh_enable_ip+0xd0/0x130 [ 143.598864][ T6510] ? __dev_queue_xmit+0x277/0x3890 [ 143.598912][ T6510] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.598931][ T6510] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 143.598953][ T6510] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 143.598972][ T6510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.598989][ T6510] ? ref_tracker_free+0x693/0x840 [ 143.599006][ T6510] ? __copy_skb_header+0xa3/0x4a0 [ 143.599032][ T6510] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.599067][ T6510] netlink_rcv_skb+0x232/0x4b0 [ 143.599087][ T6510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.599108][ T6510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.599137][ T6510] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.599163][ T6510] netlink_unicast+0x80f/0x9b0 [ 143.599198][ T6510] ? __pfx_netlink_unicast+0x10/0x10 [ 143.599228][ T6510] ? netlink_sendmsg+0x650/0xb40 [ 143.599245][ T6510] ? skb_put+0x11b/0x210 [ 143.599269][ T6510] netlink_sendmsg+0x813/0xb40 [ 143.599296][ T6510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.599318][ T6510] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.599348][ T6510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.599373][ T6510] ____sys_sendmsg+0x972/0x9f0 [ 143.599405][ T6510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.599433][ T6510] ? kstrtoull+0x12f/0x1d0 [ 143.599467][ T6510] ___sys_sendmsg+0x2a5/0x360 [ 143.599495][ T6510] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.599520][ T6510] ? get_pid_task+0x20/0x1f0 [ 143.599537][ T6510] ? get_pid_task+0x20/0x1f0 [ 143.599552][ T6510] ? get_pid_task+0x20/0x1f0 [ 143.599595][ T6510] ? __fget_files+0x2a/0x420 [ 143.599611][ T6510] ? __fget_files+0x3a0/0x420 [ 143.599638][ T6510] __sys_sendmsg+0x183/0x260 [ 143.599663][ T6510] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.599707][ T6510] __do_fast_syscall_32+0x20d/0x640 [ 143.599733][ T6510] ? do_fast_syscall_32+0x33/0x70 [ 143.599756][ T6510] ? asm_int80_emulation+0x1a/0x20 [ 143.599773][ T6510] ? do_int80_emulation+0x274/0x4d0 [ 143.599801][ T6510] do_fast_syscall_32+0x33/0x70 [ 143.599826][ T6510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.599848][ T6510] RIP: 0023:0xf700ef6c [ 143.599864][ T6510] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 143.599880][ T6510] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 143.599900][ T6510] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000200 [ 143.599913][ T6510] RDX: 0000000000009080 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.599923][ T6510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.599933][ T6510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.599944][ T6510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.599971][ T6510] [ 143.621375][ T6509] batadv_slave_0: left promiscuous mode [ 143.641404][ T981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.704771][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 143.784645][ T981] usb 1-1: device descriptor read/8, error -71 [ 143.919648][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 144.068551][ T6515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.113043][ T6515] IPv6: NLM_F_CREATE should be set when creating new route [ 144.120530][ T6515] IPv6: NLM_F_CREATE should be set when creating new route [ 144.127840][ T6515] IPv6: NLM_F_CREATE should be set when creating new route [ 144.148414][ T981] usb usb1-port1: unable to enumerate USB device [ 144.284621][ T42] usb 2-1: USB disconnect, device number 9 [ 144.413431][ T6523] xt_addrtype: ipv6 does not support BROADCAST matching [ 144.448748][ T981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.628752][ T981] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 144.646994][ T981] usb 5-1: config 1 has no interface number 0 [ 144.653678][ T981] usb 5-1: config 1 interface 8 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.678103][ T981] usb 5-1: config 1 interface 8 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.688135][ T981] usb 5-1: config 1 interface 8 has no altsetting 0 [ 145.864970][ T981] usb 5-1: string descriptor 0 read error: -22 [ 145.916180][ T981] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 145.926422][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.419924][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.428812][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.975211][ T981] usbhid 5-1:1.8: can't add hid device: -71 [ 146.982887][ T981] usbhid 5-1:1.8: probe with driver usbhid failed with error -71 [ 147.047993][ T981] usb 5-1: USB disconnect, device number 12 [ 147.480338][ T6551] veth0_macvtap: left promiscuous mode [ 147.497437][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 147.542235][ T6551] veth0_macvtap: entered promiscuous mode [ 147.580807][ T6551] team0: Device macvtap0 failed to register rx_handler [ 147.620573][ T6551] veth0_macvtap: left promiscuous mode [ 148.270595][ T6563] input: syz0 as /devices/virtual/input/input14 [ 148.376520][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 148.622777][ T6568] netlink: 5 bytes leftover after parsing attributes in process `syz.1.172'. [ 148.769183][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 148.769203][ T29] audit: type=1326 audit(1774861653.204:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.098124][ T29] audit: type=1326 audit(1774861653.204:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.200748][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 149.208102][ T29] audit: type=1326 audit(1774861653.204:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.287996][ T6573] FAULT_INJECTION: forcing a failure. [ 149.287996][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 149.358320][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.4.173 Not tainted syzkaller #0 PREEMPT(full) [ 149.358347][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.358355][ T6573] Call Trace: [ 149.358360][ T6573] [ 149.358365][ T6573] dump_stack_lvl+0xe8/0x150 [ 149.358388][ T6573] should_fail_ex+0x412/0x560 [ 149.358409][ T6573] should_failslab+0xa8/0x100 [ 149.358426][ T6573] __kvmalloc_node_noprof+0x178/0x8a0 [ 149.358441][ T6573] ? xfrm_user_rcv_msg_compat+0x4f1/0x1550 [ 149.358455][ T6573] ? __nla_parse+0x40/0x60 [ 149.358470][ T6573] xfrm_user_rcv_msg_compat+0x4f1/0x1550 [ 149.358483][ T6573] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.358504][ T6573] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 149.358536][ T6573] ? xfrm_get_translator+0x1b/0x240 [ 149.358553][ T6573] ? xfrm_get_translator+0x1b/0x240 [ 149.358573][ T6573] xfrm_user_rcv_msg+0x2cb/0xc40 [ 149.358591][ T6573] ? look_up_lock_class+0x57/0x110 [ 149.358606][ T6573] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 149.358641][ T6573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 149.358662][ T6573] ? rcu_is_watching+0x15/0xb0 [ 149.358678][ T6573] ? trace_contention_end+0x3d/0x150 [ 149.358697][ T6573] ? __mutex_lock+0x319/0x1300 [ 149.358716][ T6573] netlink_rcv_skb+0x232/0x4b0 [ 149.358729][ T6573] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 149.358747][ T6573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.358766][ T6573] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.358778][ T6573] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.358791][ T6573] xfrm_netlink_rcv+0x79/0x90 [ 149.358808][ T6573] netlink_unicast+0x80f/0x9b0 [ 149.358830][ T6573] ? __pfx_netlink_unicast+0x10/0x10 [ 149.358847][ T6573] ? netlink_sendmsg+0x650/0xb40 [ 149.358858][ T6573] ? skb_put+0x11b/0x210 [ 149.358874][ T6573] netlink_sendmsg+0x813/0xb40 [ 149.358891][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.358905][ T6573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.358924][ T6573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.358940][ T6573] ____sys_sendmsg+0x972/0x9f0 [ 149.358960][ T6573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.358977][ T6573] ? kstrtoull+0x12f/0x1d0 [ 149.358998][ T6573] ___sys_sendmsg+0x2a5/0x360 [ 149.359024][ T6573] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.359040][ T6573] ? get_pid_task+0x20/0x1f0 [ 149.359051][ T6573] ? get_pid_task+0x20/0x1f0 [ 149.359061][ T6573] ? get_pid_task+0x20/0x1f0 [ 149.359086][ T6573] ? __fget_files+0x2a/0x420 [ 149.359097][ T6573] ? __fget_files+0x3a0/0x420 [ 149.359113][ T6573] __sys_sendmsg+0x183/0x260 [ 149.359129][ T6573] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.359155][ T6573] __do_fast_syscall_32+0x20d/0x640 [ 149.359172][ T6573] ? do_fast_syscall_32+0x33/0x70 [ 149.359186][ T6573] ? asm_int80_emulation+0x1a/0x20 [ 149.359197][ T6573] ? do_int80_emulation+0x274/0x4d0 [ 149.359211][ T6573] ? trace_irq_disable+0x3b/0x150 [ 149.359223][ T6573] do_fast_syscall_32+0x33/0x70 [ 149.359239][ T6573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.359253][ T6573] RIP: 0023:0xf700ef6c [ 149.359266][ T6573] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 149.359275][ T6573] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 149.359290][ T6573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 149.359298][ T6573] RDX: 0000000000044050 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359305][ T6573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.359312][ T6573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.359318][ T6573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.359335][ T6573] [ 149.361836][ T29] audit: type=1326 audit(1774861653.214:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.804543][ T29] audit: type=1326 audit(1774861653.214:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.848267][ T29] audit: type=1326 audit(1774861653.214:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.878304][ T29] audit: type=1326 audit(1774861653.214:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 149.901411][ T29] audit: type=1326 audit(1774861653.214:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 150.001060][ T29] audit: type=1326 audit(1774861653.214:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 150.060860][ T6553] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 150.084309][ T29] audit: type=1326 audit(1774861653.214:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 150.388221][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.548794][ T981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 150.560466][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.368209][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 151.414219][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.448843][ T981] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 151.457236][ T981] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 151.466768][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 151.491011][ T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 151.500585][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.705765][ T981] usb 2-1: config 1 has no interface number 0 [ 151.780091][ T5899] usb 5-1: config 0 descriptor?? [ 151.794320][ T981] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.832301][ T981] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 151.880582][ T981] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 151.890432][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.935141][ T981] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 152.174614][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.294925][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 152.317216][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 152.399754][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.412539][ T5899] usb 5-1: USB disconnect, device number 13 [ 152.417115][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.480995][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 152.626380][ T981] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 153.127218][ T42] usb 2-1: USB disconnect, device number 10 [ 153.143313][ T42] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 154.688175][ T981] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 154.979470][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 154.989618][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.999793][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 155.038831][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.051850][ T981] usb 5-1: string descriptor 0 read error: -22 [ 155.118272][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.142690][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.166690][ T6627] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.197'. [ 155.189632][ T981] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 155.429943][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.445389][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.721253][ T981] usb 5-1: USB disconnect, device number 14 [ 158.912418][ T6670] capability: warning: `syz.1.196' uses 32-bit capabilities (legacy support in use) [ 159.670499][ T5830] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.717367][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 159.737977][ T6684] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.830189][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 159.857275][ T5830] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 159.876809][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.892581][ T5830] usb 2-1: Product: syz [ 159.897757][ T5830] usb 2-1: Manufacturer: syz [ 159.903779][ T5830] usb 2-1: SerialNumber: syz [ 159.926536][ T5830] usb 2-1: config 0 descriptor?? [ 159.951456][ T5830] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 159.987925][ T5830] usb 2-1: Detected FT-X [ 160.649770][ T5830] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 160.858208][ T5830] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 160.866171][ T5830] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.984460][ T5830] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 163.911285][ T5918] usb 2-1: USB disconnect, device number 11 [ 163.932997][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.039033][ T5918] ftdi_sio 2-1:0.0: device disconnected [ 165.649515][ T5830] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.679158][ T5830] usb 3-1: can't read configurations, error -71 [ 169.030133][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 169.921619][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 169.933994][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 169.968187][ T981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.298133][ T981] usb 1-1: device descriptor read/64, error -71 [ 170.548129][ T981] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.749036][ T981] usb 1-1: device descriptor read/64, error -71 [ 170.918510][ T981] usb usb1-port1: attempt power cycle [ 171.288248][ T981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.333626][ T981] usb 1-1: device descriptor read/8, error -71 [ 171.662391][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 171.729744][ T981] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.786345][ T981] usb 1-1: device descriptor read/8, error -71 [ 171.901456][ T981] usb usb1-port1: unable to enumerate USB device [ 172.018262][ T42] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 172.172147][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.193278][ T42] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.226924][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.268836][ T42] usb 5-1: config 0 descriptor?? [ 173.040419][ T42] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 173.082513][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input15 [ 173.270791][ T42] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 173.302696][ T42] usb 5-1: USB disconnect, device number 15 [ 173.387733][ T6845] input: syz0 as /devices/virtual/input/input16 [ 173.456937][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 173.456956][ T29] audit: type=1800 audit(1774861677.984:114): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="tmpfs" ino=306 res=0 errno=0 [ 173.554517][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 173.911977][ T6843] fido_id[6843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 174.011476][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 174.044729][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 176.408377][ T5918] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 177.332322][ T981] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.510071][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.525753][ T981] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.539065][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.562538][ T6903] input: syz1 as /devices/virtual/input/input17 [ 177.581426][ T981] usb 1-1: config 0 descriptor?? [ 178.223176][ T981] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 178.261051][ T981] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input18 [ 178.630778][ T981] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 178.813450][ T981] usb 1-1: USB disconnect, device number 12 [ 178.996461][ T6907] fido_id[6907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.360849][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 179.388247][ T5918] usb 5-1: can't read configurations, error -71 [ 180.306351][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.4.268'. [ 181.213956][ T6942] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.858158][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.138254][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 182.156715][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.184586][ T5918] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.224884][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.284564][ T6965] FAULT_INJECTION: forcing a failure. [ 182.284564][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.300819][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 182.333813][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) [ 182.333854][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.333866][ T6965] Call Trace: [ 182.333873][ T6965] [ 182.333881][ T6965] dump_stack_lvl+0xe8/0x150 [ 182.333915][ T6965] should_fail_ex+0x412/0x560 [ 182.333951][ T6965] _copy_to_user+0x31/0xb0 [ 182.333976][ T6965] simple_read_from_buffer+0xe1/0x170 [ 182.334011][ T6965] proc_fail_nth_read+0x1bb/0x230 [ 182.334045][ T6965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.334077][ T6965] ? rw_verify_area+0x2a6/0x4d0 [ 182.334098][ T6965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.334128][ T6965] vfs_read+0x20c/0xa70 [ 182.334147][ T6965] ? __fget_files+0x2a/0x420 [ 182.334164][ T6965] ? fdget_pos+0x246/0x320 [ 182.334187][ T6965] ? __pfx___mutex_lock+0x10/0x10 [ 182.334215][ T6965] ? __pfx_vfs_read+0x10/0x10 [ 182.334239][ T6965] ? __fget_files+0x2a/0x420 [ 182.334263][ T6965] ? __fget_files+0x3a0/0x420 [ 182.334290][ T6965] ? __fget_files+0x2a/0x420 [ 182.334319][ T6965] ksys_read+0x150/0x270 [ 182.334344][ T6965] ? __pfx_ksys_read+0x10/0x10 [ 182.334371][ T6965] ? asm_int80_emulation+0x1a/0x20 [ 182.334398][ T6965] do_int80_emulation+0x173/0x4d0 [ 182.334425][ T6965] ? trace_irq_disable+0x3b/0x150 [ 182.334442][ T6965] ? asm_int80_emulation+0x1a/0x20 [ 182.334460][ T6965] ? clear_bhb_loop+0x40/0x90 [ 182.334480][ T6965] ? clear_bhb_loop+0x40/0x90 [ 182.334504][ T6965] asm_int80_emulation+0x1a/0x20 [ 182.334523][ T6965] RIP: 0023:0xf71b5cab [ 182.334543][ T6965] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 182.334559][ T6965] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 182.334583][ T6965] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 182.334597][ T6965] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 182.334608][ T6965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.334619][ T6965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.334631][ T6965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.334662][ T6965] [ 182.560744][ T5918] usb 3-1: config 0 descriptor?? [ 182.688990][ T5899] usb 5-1: config 0 has an invalid interface number: 250 but max is 2 [ 182.697231][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.707357][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 182.716239][ T5899] usb 5-1: config 0 has no interface number 0 [ 182.726828][ T5899] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 182.736106][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.744273][ T5899] usb 5-1: Product: syz [ 182.748616][ T5899] usb 5-1: Manufacturer: syz [ 182.753433][ T5899] usb 5-1: SerialNumber: syz [ 182.789153][ T5899] usb 5-1: config 0 descriptor?? [ 182.798511][ T5899] uvcvideo 5-1:0.250: probe with driver uvcvideo failed with error -22 [ 183.342803][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 183.354079][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 183.394686][ T5918] usb 3-1: USB disconnect, device number 8 [ 184.404882][ T6981] FAULT_INJECTION: forcing a failure. [ 184.404882][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 184.418633][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(full) [ 184.418660][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.418671][ T6981] Call Trace: [ 184.418678][ T6981] [ 184.418686][ T6981] dump_stack_lvl+0xe8/0x150 [ 184.418719][ T6981] should_fail_ex+0x412/0x560 [ 184.418752][ T6981] should_failslab+0xa8/0x100 [ 184.418776][ T6981] ? dst_alloc+0x105/0x170 [ 184.418802][ T6981] kmem_cache_alloc_noprof+0x87/0x650 [ 184.418823][ T6981] ? __pfx_find_exception+0x10/0x10 [ 184.418845][ T6981] ? fib_lookup+0x76/0x440 [ 184.418869][ T6981] dst_alloc+0x105/0x170 [ 184.418909][ T6981] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 184.418944][ T6981] ? ip_route_output_key_hash+0xd8/0x2a0 [ 184.418969][ T6981] ip_route_output_key_hash+0x18d/0x2a0 [ 184.418996][ T6981] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 184.419024][ T6981] ? tomoyo_check_inet_address+0x289/0x950 [ 184.419045][ T6981] ? tomoyo_check_inet_address+0x6d6/0x950 [ 184.419064][ T6981] ? kstrtouint+0x6e/0xe0 [ 184.419092][ T6981] ? tomoyo_check_inet_address+0x289/0x950 [ 184.419110][ T6981] ? dst_release+0x72/0x1b0 [ 184.419139][ T6981] __ip4_datagram_connect+0x8f4/0x1270 [ 184.419182][ T6981] __ip6_datagram_connect+0x9f0/0x1150 [ 184.419214][ T6981] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 184.419239][ T6981] ? ip6_datagram_connect_v6_only+0x56/0xa0 [ 184.419266][ T6981] ? __local_bh_enable_ip+0xd0/0x130 [ 184.419297][ T6981] ip6_datagram_connect_v6_only+0x63/0xa0 [ 184.419323][ T6981] __sys_connect+0x312/0x450 [ 184.419348][ T6981] ? __pfx___sys_connect+0x10/0x10 [ 184.419390][ T6981] __ia32_sys_connect+0x7a/0x90 [ 184.419414][ T6981] __do_fast_syscall_32+0x20d/0x640 [ 184.419442][ T6981] ? do_fast_syscall_32+0x33/0x70 [ 184.419466][ T6981] ? asm_int80_emulation+0x1a/0x20 [ 184.419485][ T6981] ? do_int80_emulation+0x274/0x4d0 [ 184.419509][ T6981] ? trace_irq_disable+0x3b/0x150 [ 184.419532][ T6981] do_fast_syscall_32+0x33/0x70 [ 184.419564][ T6981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.419588][ T6981] RIP: 0023:0xf705ef6c [ 184.419607][ T6981] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 184.419623][ T6981] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 184.419646][ T6981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 184.419661][ T6981] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 184.419672][ T6981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.419683][ T6981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.419695][ T6981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.419726][ T6981] [ 185.006854][ T5918] usb 5-1: USB disconnect, device number 18 [ 185.368179][ T5899] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 185.578854][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.589087][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.785640][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.820330][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.846761][ T5899] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 185.862768][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.949850][ T5899] usb 1-1: config 0 descriptor?? [ 186.264438][ T7005] hub 9-0:1.0: USB hub found [ 186.270886][ T7005] hub 9-0:1.0: 1 port detected [ 186.541846][ T6984] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 186.572615][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 186.592890][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 186.629007][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 186.681721][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 186.706843][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 186.846537][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 186.950691][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: U2F Zero LED initialised [ 186.972413][ T5899] hid-u2fzero 0003:10C4:8ACF.0008: U2F Zero RNG initialised [ 186.998635][ T5899] usb 1-1: USB disconnect, device number 13 [ 187.595326][ T7014] FAULT_INJECTION: forcing a failure. [ 187.595326][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.630821][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 187.630851][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.630871][ T7014] Call Trace: [ 187.630879][ T7014] [ 187.630886][ T7014] dump_stack_lvl+0xe8/0x150 [ 187.630908][ T7014] should_fail_ex+0x412/0x560 [ 187.630930][ T7014] _copy_from_user+0x2d/0xb0 [ 187.630945][ T7014] get_compat_msghdr+0xb3/0x4c0 [ 187.630963][ T7014] ? __pfx_get_compat_msghdr+0x10/0x10 [ 187.630975][ T7014] ? __lock_acquire+0x6b5/0x2cf0 [ 187.630993][ T7014] ? kfree+0x4d/0x630 [ 187.631008][ T7014] ___sys_recvmsg+0x1dd/0x590 [ 187.631026][ T7014] ? __pfx____sys_recvmsg+0x10/0x10 [ 187.631044][ T7014] ? ktime_get_ts64+0xa9/0x3f0 [ 187.631073][ T7014] do_recvmmsg+0x3a5/0x800 [ 187.631092][ T7014] ? __pfx_do_recvmmsg+0x10/0x10 [ 187.631117][ T7014] ? _copy_from_user+0x94/0xb0 [ 187.631134][ T7014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.631153][ T7014] __sys_recvmmsg+0x12f/0x290 [ 187.631170][ T7014] ? __pfx___sys_recvmmsg+0x10/0x10 [ 187.631185][ T7014] ? ksys_write+0x242/0x270 [ 187.631202][ T7014] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 187.631219][ T7014] __do_fast_syscall_32+0x20d/0x640 [ 187.631236][ T7014] ? do_fast_syscall_32+0x33/0x70 [ 187.631250][ T7014] ? asm_int80_emulation+0x1a/0x20 [ 187.631262][ T7014] ? do_int80_emulation+0x274/0x4d0 [ 187.631276][ T7014] ? trace_irq_disable+0x3b/0x150 [ 187.631289][ T7014] do_fast_syscall_32+0x33/0x70 [ 187.631304][ T7014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.631318][ T7014] RIP: 0023:0xf7f06f6c [ 187.631330][ T7014] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 187.631340][ T7014] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 187.631354][ T7014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 187.631363][ T7014] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 187.631370][ T7014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.631377][ T7014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.631384][ T7014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.631400][ T7014] [ 188.370600][ T7016] bridge0: entered promiscuous mode [ 188.386942][ T7016] bridge0: port 3(macvlan2) entered blocking state [ 188.409396][ T7016] bridge0: port 3(macvlan2) entered disabled state [ 188.423685][ T7016] macvlan2: entered allmulticast mode [ 188.446301][ T7016] bridge0: entered allmulticast mode [ 188.539132][ T7020] openvswitch: netlink: VXLAN extension message has 228 unknown bytes. [ 188.559997][ T7016] macvlan2: left allmulticast mode [ 188.560025][ T7016] bridge0: left allmulticast mode [ 188.560606][ T7016] bridge0: left promiscuous mode [ 188.888352][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 189.049826][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.062541][ T42] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.188132][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.289922][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 189.441466][ T42] usb 4-1: config 0 descriptor?? [ 189.690455][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 189.714909][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.751058][ T42] usb 4-1: USB disconnect, device number 5 [ 190.488771][ T5918] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.788273][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 190.821011][ T5918] usb 3-1: config 0 has no interfaces? [ 190.829157][ T5918] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.848147][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.858301][ T5918] usb 3-1: Product: syz [ 190.862501][ T5918] usb 3-1: Manufacturer: syz [ 190.867151][ T5918] usb 3-1: SerialNumber: syz [ 190.875325][ T5918] usb 3-1: config 0 descriptor?? [ 191.512014][ T5918] usb 3-1: USB disconnect, device number 9 [ 191.570144][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.305'. [ 193.451414][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 193.656599][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 193.682700][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 193.701115][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 193.727298][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 193.749287][ T10] usb 3-1: config 1 has no interface number 0 [ 193.755613][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.791560][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 193.826267][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 193.854378][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.889819][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 194.094130][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 194.364388][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370955][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.642252][ T5892] usb 3-1: USB disconnect, device number 10 [ 194.650470][ T5892] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 196.523958][ T7117] syzkaller0: entered promiscuous mode [ 196.640828][ T7117] syzkaller0: entered allmulticast mode [ 198.201470][ T7028] Set syz1 is full, maxelem 65536 reached [ 198.586666][ T7155] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.573975][ T7166] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 199.706348][ T7170] FAULT_INJECTION: forcing a failure. [ 199.706348][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.729373][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 199.729401][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.729413][ T7170] Call Trace: [ 199.729421][ T7170] [ 199.729429][ T7170] dump_stack_lvl+0xe8/0x150 [ 199.729463][ T7170] should_fail_ex+0x412/0x560 [ 199.729498][ T7170] _copy_from_user+0x2d/0xb0 [ 199.729523][ T7170] get_compat_msghdr+0xb3/0x4c0 [ 199.729547][ T7170] ? __lock_acquire+0x6b5/0x2cf0 [ 199.729577][ T7170] ? __pfx_get_compat_msghdr+0x10/0x10 [ 199.729601][ T7170] ? kstrtoull+0x12f/0x1d0 [ 199.729637][ T7170] ___sys_sendmsg+0x201/0x360 [ 199.729668][ T7170] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.729695][ T7170] ? get_pid_task+0x20/0x1f0 [ 199.729715][ T7170] ? get_pid_task+0x20/0x1f0 [ 199.729731][ T7170] ? get_pid_task+0x20/0x1f0 [ 199.729776][ T7170] ? __fget_files+0x2a/0x420 [ 199.729794][ T7170] ? __fget_files+0x3a0/0x420 [ 199.729835][ T7170] __sys_sendmsg+0x183/0x260 [ 199.729869][ T7170] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.729914][ T7170] __do_fast_syscall_32+0x20d/0x640 [ 199.729941][ T7170] ? do_fast_syscall_32+0x33/0x70 [ 199.729963][ T7170] ? asm_int80_emulation+0x1a/0x20 [ 199.729981][ T7170] ? do_int80_emulation+0x274/0x4d0 [ 199.730003][ T7170] ? trace_irq_disable+0x3b/0x150 [ 199.730024][ T7170] do_fast_syscall_32+0x33/0x70 [ 199.730050][ T7170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.730073][ T7170] RIP: 0023:0xf7f06f6c [ 199.730091][ T7170] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 199.730107][ T7170] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 199.730129][ T7170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 199.730143][ T7170] RDX: 0000000004008094 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.730155][ T7170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.730165][ T7170] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.730177][ T7170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.730205][ T7170] [ 201.171094][ T7185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.340'. [ 201.465702][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.482061][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.507203][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.526495][ T7185] bond0 (unregistering): Released all slaves [ 201.623650][ T7192] openvswitch: netlink: VXLAN extension message has 228 unknown bytes. [ 201.674751][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 201.695770][ T5899] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 201.695793][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.704763][ T5899] usb 1-1: config 0 descriptor?? [ 201.707662][ T5899] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 204.020232][ T7206] mmap: syz.1.346 (7206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 204.589697][ T5899] usb 1-1: Detected FT232A [ 204.607207][ T5899] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 204.948617][ T5899] usb 1-1: USB disconnect, device number 14 [ 204.997100][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.271408][ T5899] ftdi_sio 1-1:0.0: device disconnected [ 205.648707][ T5899] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 205.818223][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 205.825593][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.874235][ T5899] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 205.890619][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.915869][ T5899] usb 1-1: Product: syz [ 205.924879][ T5899] usb 1-1: Manufacturer: syz [ 205.950536][ T5899] usb 1-1: SerialNumber: syz [ 206.139474][ T5899] usb 1-1: config 0 descriptor?? [ 206.229193][ T5899] usb 1-1: bad CDC descriptors [ 206.240657][ T5899] usb 1-1: unsupported MDLM descriptors [ 209.301774][ T797] usb 1-1: USB disconnect, device number 15 [ 210.020533][ T7268] FAULT_INJECTION: forcing a failure. [ 210.020533][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.118230][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.2.359 Not tainted syzkaller #0 PREEMPT(full) [ 210.118260][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.118271][ T7268] Call Trace: [ 210.118279][ T7268] [ 210.118287][ T7268] dump_stack_lvl+0xe8/0x150 [ 210.118321][ T7268] should_fail_ex+0x412/0x560 [ 210.118355][ T7268] _copy_from_user+0x2d/0xb0 [ 210.118380][ T7268] get_compat_msghdr+0xb3/0x4c0 [ 210.118404][ T7268] ? __lock_acquire+0x6b5/0x2cf0 [ 210.118433][ T7268] ? __pfx_get_compat_msghdr+0x10/0x10 [ 210.118458][ T7268] ? kstrtoull+0x12f/0x1d0 [ 210.118494][ T7268] ___sys_sendmsg+0x201/0x360 [ 210.118527][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.118554][ T7268] ? get_pid_task+0x20/0x1f0 [ 210.118573][ T7268] ? get_pid_task+0x20/0x1f0 [ 210.118589][ T7268] ? get_pid_task+0x20/0x1f0 [ 210.118636][ T7268] ? __fget_files+0x2a/0x420 [ 210.118653][ T7268] ? __fget_files+0x3a0/0x420 [ 210.118681][ T7268] __sys_sendmsg+0x183/0x260 [ 210.118708][ T7268] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.118753][ T7268] __do_fast_syscall_32+0x20d/0x640 [ 210.118782][ T7268] ? do_fast_syscall_32+0x33/0x70 [ 210.118806][ T7268] ? asm_int80_emulation+0x1a/0x20 [ 210.118824][ T7268] ? do_int80_emulation+0x274/0x4d0 [ 210.118848][ T7268] ? trace_irq_disable+0x3b/0x150 [ 210.118870][ T7268] do_fast_syscall_32+0x33/0x70 [ 210.118896][ T7268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.118919][ T7268] RIP: 0023:0xf7f27f6c [ 210.118938][ T7268] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 210.118954][ T7268] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 210.118976][ T7268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 210.119000][ T7268] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.119011][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.119022][ T7268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.119033][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.119063][ T7268] [ 210.468873][ T7271] FAULT_INJECTION: forcing a failure. [ 210.468873][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.497339][ T7271] CPU: 1 UID: 0 PID: 7271 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 210.497358][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.497365][ T7271] Call Trace: [ 210.497370][ T7271] [ 210.497375][ T7271] dump_stack_lvl+0xe8/0x150 [ 210.497397][ T7271] should_fail_ex+0x412/0x560 [ 210.497419][ T7271] _copy_from_user+0x2d/0xb0 [ 210.497433][ T7271] get_compat_msghdr+0xb3/0x4c0 [ 210.497451][ T7271] ? __pfx_get_compat_msghdr+0x10/0x10 [ 210.497466][ T7271] ? kfree+0x4d/0x630 [ 210.497482][ T7271] ___sys_recvmsg+0x1dd/0x590 [ 210.497498][ T7271] ? __lock_acquire+0x6b5/0x2cf0 [ 210.497514][ T7271] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.497547][ T7271] do_recvmmsg+0x3a5/0x800 [ 210.497567][ T7271] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.497588][ T7271] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 210.497608][ T7271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.497627][ T7271] __sys_recvmmsg+0x1a5/0x290 [ 210.497652][ T7271] ? __pfx___sys_recvmmsg+0x10/0x10 [ 210.497667][ T7271] ? ksys_write+0x242/0x270 [ 210.497684][ T7271] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 210.497701][ T7271] __do_fast_syscall_32+0x20d/0x640 [ 210.497717][ T7271] ? do_fast_syscall_32+0x33/0x70 [ 210.497732][ T7271] ? asm_int80_emulation+0x1a/0x20 [ 210.497743][ T7271] ? do_int80_emulation+0x274/0x4d0 [ 210.497757][ T7271] ? trace_irq_disable+0x3b/0x150 [ 210.497770][ T7271] do_fast_syscall_32+0x33/0x70 [ 210.497785][ T7271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.497800][ T7271] RIP: 0023:0xf7f06f6c [ 210.497811][ T7271] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 210.497822][ T7271] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 210.497835][ T7271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004c00 [ 210.497844][ T7271] RDX: 0000000004000032 RSI: 0000000040000021 RDI: 0000000000000000 [ 210.497851][ T7271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.497858][ T7271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.497864][ T7271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.497880][ T7271] [ 211.888124][ T797] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 211.975617][ T981] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.052529][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 212.058906][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 212.065107][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 212.082338][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 212.083267][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 212.099811][ T797] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.135840][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.149689][ T981] usb 2-1: device descriptor read/64, error -71 [ 212.153392][ T797] usb 1-1: Product: syz [ 212.173486][ T797] usb 1-1: Manufacturer: syz [ 212.185738][ T797] usb 1-1: SerialNumber: syz [ 212.258723][ T797] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.367212][ T42] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.413404][ T981] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.574814][ T981] usb 2-1: device descriptor read/64, error -71 [ 212.699134][ T981] usb usb2-port1: attempt power cycle [ 212.727801][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.754079][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.779903][ T5899] usb 1-1: USB disconnect, device number 16 [ 213.601409][ T42] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 213.633260][ T42] ath9k_htc: Failed to initialize the device [ 213.688271][ T981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.697751][ T5899] usb 1-1: ath9k_htc: USB layer deinitialized [ 213.742205][ T981] usb 2-1: device descriptor read/8, error -71 [ 214.038217][ T981] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.268110][ T981] usb 2-1: device descriptor read/8, error -71 [ 214.414295][ T5899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 214.479704][ T981] usb usb2-port1: unable to enumerate USB device [ 214.501062][ T7318] FAULT_INJECTION: forcing a failure. [ 214.501062][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 214.515335][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(full) [ 214.515354][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.515361][ T7318] Call Trace: [ 214.515366][ T7318] [ 214.515372][ T7318] dump_stack_lvl+0xe8/0x150 [ 214.515394][ T7318] should_fail_ex+0x412/0x560 [ 214.515415][ T7318] should_failslab+0xa8/0x100 [ 214.515432][ T7318] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 214.515445][ T7318] ? __alloc_skb+0x186/0x7d0 [ 214.515458][ T7318] ? __alloc_skb+0x1d0/0x7d0 [ 214.515469][ T7318] ? __local_bh_enable_ip+0xd0/0x130 [ 214.515487][ T7318] __alloc_skb+0x1d0/0x7d0 [ 214.515502][ T7318] netlink_sendmsg+0x5d4/0xb40 [ 214.515519][ T7318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.515533][ T7318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 214.515552][ T7318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.515568][ T7318] ____sys_sendmsg+0x972/0x9f0 [ 214.515587][ T7318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.515604][ T7318] ? kstrtoull+0x12f/0x1d0 [ 214.515628][ T7318] ___sys_sendmsg+0x2a5/0x360 [ 214.515645][ T7318] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.515660][ T7318] ? get_pid_task+0x20/0x1f0 [ 214.515677][ T7318] ? get_pid_task+0x20/0x1f0 [ 214.515687][ T7318] ? get_pid_task+0x20/0x1f0 [ 214.515712][ T7318] ? __fget_files+0x2a/0x420 [ 214.515722][ T7318] ? __fget_files+0x3a0/0x420 [ 214.515738][ T7318] __sys_sendmsg+0x183/0x260 [ 214.515754][ T7318] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.515780][ T7318] __do_fast_syscall_32+0x20d/0x640 [ 214.515797][ T7318] ? do_fast_syscall_32+0x33/0x70 [ 214.515811][ T7318] ? asm_int80_emulation+0x1a/0x20 [ 214.515826][ T7318] ? do_int80_emulation+0x274/0x4d0 [ 214.515841][ T7318] ? trace_irq_disable+0x3b/0x150 [ 214.515854][ T7318] do_fast_syscall_32+0x33/0x70 [ 214.515877][ T7318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.515892][ T7318] RIP: 0023:0xf700ef6c [ 214.515904][ T7318] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 214.515914][ T7318] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 214.515927][ T7318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 214.515936][ T7318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.515942][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.515949][ T7318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.515955][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.515972][ T7318] [ 214.829762][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 214.886265][ T5899] usb 1-1: device descriptor read/all, error -71 [ 215.085104][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 215.290274][ T7321] bond_slave_0: entered promiscuous mode [ 215.296145][ T7321] bond_slave_1: entered promiscuous mode [ 215.321732][ T7321] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 215.379468][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 215.500354][ T7321] bond_slave_0: left promiscuous mode [ 215.505875][ T7321] bond_slave_1: left promiscuous mode [ 215.590969][ T29] audit: type=1326 audit(1774861720.124:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.616073][ T29] audit: type=1326 audit(1774861720.144:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.650119][ T7340] tipc: Failed to remove unknown binding: 66,0,0/0:3018921760/3018921762 [ 215.657415][ T29] audit: type=1326 audit(1774861720.144:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.659520][ T7340] tipc: Failed to remove unknown binding: 66,0,0/0:3018921760/3018921761 [ 215.692434][ T29] audit: type=1326 audit(1774861720.144:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.713638][ T7335] vlan2: entered allmulticast mode [ 215.728265][ T29] audit: type=1326 audit(1774861720.144:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.751921][ T29] audit: type=1326 audit(1774861720.144:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 215.802098][ T7346] tipc: Failed to remove unknown binding: 66,0,0/0:3018921760/3018921762 [ 215.810953][ T7335] bridge0: entered allmulticast mode [ 215.816559][ T7346] tipc: Failed to remove unknown binding: 66,0,0/0:3018921760/3018921761 [ 216.089695][ T7351] FAULT_INJECTION: forcing a failure. [ 216.089695][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 216.119311][ T7351] CPU: 1 UID: 0 PID: 7351 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT(full) [ 216.119340][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.119351][ T7351] Call Trace: [ 216.119360][ T7351] [ 216.119369][ T7351] dump_stack_lvl+0xe8/0x150 [ 216.119403][ T7351] should_fail_ex+0x412/0x560 [ 216.119439][ T7351] should_failslab+0xa8/0x100 [ 216.119468][ T7351] __kmalloc_cache_noprof+0x88/0x660 [ 216.119492][ T7351] ? sctp_add_bind_addr+0x8c/0x370 [ 216.119518][ T7351] sctp_add_bind_addr+0x8c/0x370 [ 216.119542][ T7351] sctp_copy_local_addr_list+0x314/0x4f0 [ 216.119576][ T7351] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 216.119606][ T7351] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 216.119641][ T7351] ? sctp_v4_is_any+0x35/0x60 [ 216.119662][ T7351] ? sctp_copy_one_addr+0x93/0x360 [ 216.119706][ T7351] sctp_bind_addr_copy+0xb3/0x3c0 [ 216.119738][ T7351] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 216.119771][ T7351] sctp_connect_new_asoc+0x2ff/0x6b0 [ 216.119798][ T7351] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 216.119830][ T7351] ? __local_bh_enable_ip+0xd0/0x130 [ 216.119854][ T7351] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 216.119878][ T7351] ? security_sctp_bind_connect+0x7e/0x2c0 [ 216.119907][ T7351] sctp_sendmsg+0x1528/0x2c10 [ 216.119945][ T7351] ? __pfx_sctp_sendmsg+0x10/0x10 [ 216.119968][ T7351] ? aa_sk_perm+0x6d5/0x900 [ 216.119990][ T7351] ? __pfx_aa_sk_perm+0x10/0x10 [ 216.120008][ T7351] ? sock_rps_record_flow+0x19/0x400 [ 216.120024][ T7351] ? __pfx_inet_sendmsg+0x10/0x10 [ 216.120039][ T7351] ? inet_sendmsg+0x2f4/0x370 [ 216.120054][ T7351] ? __pfx_inet_sendmsg+0x10/0x10 [ 216.120069][ T7351] __sys_sendto+0x5de/0x710 [ 216.120085][ T7351] ? __pfx___sys_sendto+0x10/0x10 [ 216.120113][ T7351] ? fput+0xa0/0xd0 [ 216.120130][ T7351] ? ksys_write+0x242/0x270 [ 216.120147][ T7351] __ia32_sys_sendto+0xdd/0x100 [ 216.120162][ T7351] __do_fast_syscall_32+0x20d/0x640 [ 216.120180][ T7351] ? do_fast_syscall_32+0x33/0x70 [ 216.120194][ T7351] ? asm_int80_emulation+0x1a/0x20 [ 216.120205][ T7351] ? do_int80_emulation+0x274/0x4d0 [ 216.120219][ T7351] ? trace_irq_disable+0x3b/0x150 [ 216.120232][ T7351] do_fast_syscall_32+0x33/0x70 [ 216.120248][ T7351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.120264][ T7351] RIP: 0023:0xf705ef6c [ 216.120282][ T7351] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 216.120298][ T7351] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 216.120320][ T7351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 216.120333][ T7351] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000080000000 [ 216.120342][ T7351] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 216.120349][ T7351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.120356][ T7351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.120373][ T7351] [ 216.581737][ T7353] C: renamed from team_slave_0 (while UP) [ 216.620026][ T7353] netlink: 'syz.1.385': attribute type 3 has an invalid length. [ 216.818350][ T7353] netlink: 152 bytes leftover after parsing attributes in process `syz.1.385'. [ 217.249493][ T7353] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.268121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 218.859869][ T7373] FAULT_INJECTION: forcing a failure. [ 218.859869][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 219.008188][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) [ 219.008223][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.008235][ T7373] Call Trace: [ 219.008243][ T7373] [ 219.008252][ T7373] dump_stack_lvl+0xe8/0x150 [ 219.008287][ T7373] should_fail_ex+0x412/0x560 [ 219.008323][ T7373] should_failslab+0xa8/0x100 [ 219.008351][ T7373] __kmalloc_noprof+0xe8/0x760 [ 219.008375][ T7373] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.008404][ T7373] tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.008437][ T7373] ? tomoyo_path_number_perm+0x219/0x630 [ 219.008464][ T7373] tomoyo_path_number_perm+0x246/0x630 [ 219.008495][ T7373] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.008526][ T7373] ? __lock_acquire+0x6b5/0x2cf0 [ 219.008588][ T7373] ? __fget_files+0x2a/0x420 [ 219.008613][ T7373] ? __fget_files+0x3a0/0x420 [ 219.008631][ T7373] ? __fget_files+0x2a/0x420 [ 219.008654][ T7373] security_file_ioctl_compat+0xc3/0x2a0 [ 219.008684][ T7373] __ia32_compat_sys_ioctl+0x139/0x950 [ 219.008714][ T7373] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 219.008744][ T7373] ? __fget_files+0x3a0/0x420 [ 219.008769][ T7373] ? fput+0xa0/0xd0 [ 219.008798][ T7373] ? ksys_write+0x242/0x270 [ 219.008843][ T7373] __do_fast_syscall_32+0x20d/0x640 [ 219.008872][ T7373] ? do_fast_syscall_32+0x33/0x70 [ 219.008895][ T7373] ? asm_int80_emulation+0x1a/0x20 [ 219.008914][ T7373] ? do_int80_emulation+0x274/0x4d0 [ 219.008938][ T7373] ? trace_irq_disable+0x3b/0x150 [ 219.008961][ T7373] do_fast_syscall_32+0x33/0x70 [ 219.008986][ T7373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.009010][ T7373] RIP: 0023:0xf7fb5f6c [ 219.009028][ T7373] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 219.009046][ T7373] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 219.009069][ T7373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a2 [ 219.009083][ T7373] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.009095][ T7373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.009107][ T7373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.009120][ T7373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.009151][ T7373] [ 219.261672][ T7376] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.278233][ T7376] bridge0: port 3(veth0_to_bridge) entered disabled state [ 219.285774][ T7376] veth0_to_bridge: entered allmulticast mode [ 219.293664][ T7376] veth0_to_bridge: entered promiscuous mode [ 219.299918][ T7376] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.314619][ T7376] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.322151][ T7376] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 219.343491][ T7373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.382557][ T7373] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.411376][ T7373] bridge0: port 3(veth0_to_bridge) entered disabled state [ 219.459690][ T7373] veth0_to_bridge: entered allmulticast mode [ 219.684835][ T7373] veth0_to_bridge: entered promiscuous mode [ 219.724806][ T7373] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.747608][ T7373] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.754968][ T7373] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 219.965650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.979208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.991628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.004271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.017629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.030303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.042808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.056247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.068782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.444768][ T7395] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 221.517536][ T7395] netlink: 17 bytes leftover after parsing attributes in process `syz.1.398'. [ 222.258104][ C1] net_ratelimit: 4448 callbacks suppressed [ 222.258123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.276508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.290106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.302534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.314800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.327536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.339735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.352124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.364998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.377199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.323341][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.592565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 225.967874][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 226.011704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 226.372327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 226.850264][ T5899] usb 2-1: config 0 has no interfaces? [ 226.855821][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.889856][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.268029][ C0] net_ratelimit: 13067 callbacks suppressed [ 227.268053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.268192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.274340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.286447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.298517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.311290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.322313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.334300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.346147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.358041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.672315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.342284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 232.278106][ C1] net_ratelimit: 18223 callbacks suppressed [ 232.278130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.278298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.284092][ C0] sched: DL replenish lagged too much [ 232.285370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.296528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.308559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.313834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.325676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.338083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.350934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.361929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.288076][ C0] net_ratelimit: 18499 callbacks suppressed [ 237.288100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.288223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.294384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.307153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.318234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.330184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.342036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.353936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.365942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.378693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.298207][ C1] net_ratelimit: 17779 callbacks suppressed [ 242.298214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.298231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.298527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.304535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.317294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.328437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.340387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.352296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.364176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.376175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.308102][ C0] net_ratelimit: 16762 callbacks suppressed [ 247.308132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.308141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.309252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.314459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.326434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.338357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.350110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.362107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.374917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.386008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.318120][ C0] net_ratelimit: 16872 callbacks suppressed [ 252.318144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.318550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.324612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.336501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.348411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.360198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.372286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.385080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.396270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.408224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.932110][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.950412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.328268][ C0] net_ratelimit: 16944 callbacks suppressed [ 257.328292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.328577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.334633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.346689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.358634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.370381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.382444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.395352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.406408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.418430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.338142][ C1] net_ratelimit: 16710 callbacks suppressed [ 262.338159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.348195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.357348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.368475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.380824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.393265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.405110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.417101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.429849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.440908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.348028][ C0] net_ratelimit: 16739 callbacks suppressed [ 267.348052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.349063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.354385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.366325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.378364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.390199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.402345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.415037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.426138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.438143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.358059][ C0] net_ratelimit: 16995 callbacks suppressed [ 272.358082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.358730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.364415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.376352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.388347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.400225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.412331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.424991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.436192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.448107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.368157][ C0] net_ratelimit: 16870 callbacks suppressed [ 277.368182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.369017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.374507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.386449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.398400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.410242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.422330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.435139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.446373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.458340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.378032][ C1] net_ratelimit: 16889 callbacks suppressed [ 282.378058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.378108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.384295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.396396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.409126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.420201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.432171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.444000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.455812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.467895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.388059][ C1] net_ratelimit: 16702 callbacks suppressed [ 287.388083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.388157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.395227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.406348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.418295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.430149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.441965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.454034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.466785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.477828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.398107][ C0] net_ratelimit: 16685 callbacks suppressed [ 292.398131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.398276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.404508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.416410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.428305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.440139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.452180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.464865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.475971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.487929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.408027][ C1] net_ratelimit: 16785 callbacks suppressed [ 297.408044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.408052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.409201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.414388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.426317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.438256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.450028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.462021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.474814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.485947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.418110][ C0] net_ratelimit: 16906 callbacks suppressed [ 302.418134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.418137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.419251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.424469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.436402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.448323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.460154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.472127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.485098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.496177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.428180][ C0] net_ratelimit: 16863 callbacks suppressed [ 307.428203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.428370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.434572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.446480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.458358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.470191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.482251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.495061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.506301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.518264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.437987][ C1] net_ratelimit: 16697 callbacks suppressed [ 312.438013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.438125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.444245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.456368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.469090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.480180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.492098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.504028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.516318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.528504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.448065][ C1] net_ratelimit: 16690 callbacks suppressed [ 317.448087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.448102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 317.448450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.454413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.466415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 317.478366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.490307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.503105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.514379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 317.526252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.606313][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.864168][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.458039][ C0] net_ratelimit: 19607 callbacks suppressed [ 322.458065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.458522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.464388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.476424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.488241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 322.500140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.512123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.525027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.536063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.548068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.468044][ C0] net_ratelimit: 21467 callbacks suppressed [ 327.468068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.468244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.474344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 327.486388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.498306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.511273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.522366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.534317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.546204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.558045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.478020][ C0] net_ratelimit: 21387 callbacks suppressed [ 332.478045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 332.478095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.484340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.496395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.508281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.520130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.532297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:81:02:c4:21:4f, vlan:0) [ 332.545011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.556030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.568293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.277940][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 336.284929][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7402/1:b..l [ 336.293158][ C0] rcu: (detected by 0, t=10503 jiffies, g=24417, q=2129 ncpus=2) [ 336.300980][ C0] task:syz.2.399 state:R running task stack:25192 pid:7402 tgid:7398 ppid:5845 task_flags:0x40054c flags:0x08080002 [ 336.315237][ C0] Call Trace: [ 336.318548][ C0] [ 336.321496][ C0] __schedule+0x15dd/0x52d0 [ 336.326011][ C0] ? rcu_is_watching+0x15/0xb0 [ 336.330779][ C0] ? __pfx___schedule+0x10/0x10 [ 336.335660][ C0] ? __schedule+0x15f3/0x52d0 [ 336.340360][ C0] preempt_schedule_irq+0x4d/0xa0 [ 336.345378][ C0] irqentry_exit+0x599/0x620 [ 336.349971][ C0] ? trace_irq_disable+0x3b/0x150 [ 336.355027][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.361026][ C0] RIP: 0010:lock_release+0x94/0x3d0 [ 336.366222][ C0] Code: 85 0d 02 00 00 65 4c 8b 3d c1 d3 7a 11 41 83 bf 54 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 20 64 e0 93 0f 84 ea 01 00 00 9c 5b 48 c7 c7 36 39 f1 8d e8 4f 81 0d 0a 65 ff 05 38 19 7b 11 c7 44 [ 336.385838][ C0] RSP: 0000:ffffc900036d7190 EFLAGS: 00000202 [ 336.391913][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000001 [ 336.399910][ C0] RDX: ffffc900036d7301 RSI: ffffffff8c27cfe0 RDI: ffffffff8c27cfa0 [ 336.407895][ C0] RBP: dffffc0000000000 R08: ffffc900036d7318 R09: 0000000000000000 [ 336.415877][ C0] R10: ffffc900036d7378 R11: fffff520006dae71 R12: ffffc900036d7328 [ 336.423873][ C0] R13: ffffffff81767e95 R14: ffffffff8e75e5e0 R15: ffff88802f3bbd00 [ 336.431851][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 336.437025][ C0] ? deref_stack_reg+0x19f/0x230 [ 336.442124][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 336.447232][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 336.452352][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 336.457511][ C0] ? __unwind_start+0xf7/0x760 [ 336.462311][ C0] __unwind_start+0x5b8/0x760 [ 336.467116][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.473290][ C0] arch_stack_walk+0xe3/0x150 [ 336.477979][ C0] ? arch_stack_walk+0xe3/0x150 [ 336.482862][ C0] stack_trace_save+0xa9/0x100 [ 336.487653][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 336.493041][ C0] ? stack_depot_save_flags+0x33/0x810 [ 336.498520][ C0] kasan_save_track+0x3e/0x80 [ 336.503279][ C0] __kasan_kmalloc+0x93/0xb0 [ 336.507896][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 336.513281][ C0] ? kmem_cache_free+0x15b/0x630 [ 336.518223][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 336.523899][ C0] kmem_cache_free+0x15b/0x630 [ 336.528688][ C0] ? tear_down_vmas+0x312/0x520 [ 336.533557][ C0] tear_down_vmas+0x312/0x520 [ 336.538261][ C0] exit_mmap+0x4b6/0xa10 [ 336.542635][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 336.547458][ C0] ? __pfx_exit_aio+0x10/0x10 [ 336.552247][ C0] ? uprobe_clear_state+0x27c/0x290 [ 336.557460][ C0] __mmput+0x118/0x430 [ 336.561546][ C0] exit_mm+0x168/0x220 [ 336.565646][ C0] do_exit+0x6a2/0x23c0 [ 336.569919][ C0] ? __pfx_do_exit+0x10/0x10 [ 336.574595][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 336.579628][ C0] do_group_exit+0x21b/0x2d0 [ 336.584265][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.589600][ C0] get_signal+0x1284/0x1330 [ 336.594144][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 336.599713][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 336.605731][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 336.611919][ C0] exit_to_user_mode_loop+0x86/0x480 [ 336.617205][ C0] ? rcu_is_watching+0x15/0xb0 [ 336.621979][ C0] __do_fast_syscall_32+0x415/0x640 [ 336.627209][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.632428][ C0] ? do_fast_syscall_32+0x33/0x70 [ 336.637446][ C0] ? irqentry_exit+0x10e/0x620 [ 336.642211][ C0] ? rcu_is_watching+0x15/0xb0 [ 336.647007][ C0] do_fast_syscall_32+0x33/0x70 [ 336.651880][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.658210][ C0] RIP: 0023:0xf7f27f6c [ 336.662302][ C0] RSP: 002b:00000000f53a450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 336.670768][ C0] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 000000000000127f [ 336.678739][ C0] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.686733][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.694719][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.702691][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.710802][ C0] [ 336.713816][ C0] rcu: rcu_preempt kthread starved for 2451 jiffies! g24417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 336.724929][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 336.734919][ C0] rcu: RCU grace-period kthread stack dump: [ 336.740811][ C0] task:rcu_preempt state:R running task stack:27648 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 336.754328][ C0] Call Trace: [ 336.757601][ C0] [ 336.760539][ C0] __schedule+0x15dd/0x52d0 [ 336.765186][ C0] ? __pfx___schedule+0x10/0x10 [ 336.770062][ C0] ? schedule+0x90/0x360 [ 336.774329][ C0] schedule+0x164/0x360 [ 336.778488][ C0] schedule_timeout+0x158/0x2c0 [ 336.783374][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 336.788797][ C0] ? __pfx_process_timeout+0x10/0x10 [ 336.794115][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 336.799935][ C0] ? prepare_to_swait_event+0x340/0x370 [ 336.805522][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 336.810422][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 336.816584][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 336.821872][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 336.827118][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.832967][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 336.837573][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.842782][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.848639][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 336.853609][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 336.858657][ C0] kthread+0x388/0x470 [ 336.862754][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.867977][ C0] ? __pfx_kthread+0x10/0x10 [ 336.872598][ C0] ret_from_fork+0x51e/0xb90 [ 336.877219][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 336.882359][ C0] ? __switch_to+0xc7d/0x1450 [ 336.887057][ C0] ? __pfx_kthread+0x10/0x10 [ 336.891647][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.896457][ C0] [ 336.899498][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 336.905828][ C0] Sending NMI from CPU 0 to CPUs 1: [ 336.911041][ C1] NMI backtrace for cpu 1 [ 336.911056][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 336.911075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.911091][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x10/0x90 [ 336.911120][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 08 de 56 11 <65> 8b 0d 29 de 56 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 336.911134][ C1] RSP: 0018:ffffc90000a082f0 EFLAGS: 00000246 [ 336.911150][ C1] RAX: ffffffff8a573510 RBX: ffff8880568638df RCX: ffff88801dac8000 [ 336.911162][ C1] RDX: ffff88801dac8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.911173][ C1] RBP: 000000000000001e R08: ffffc90000a08600 R09: ffffc90000a08610 [ 336.911184][ C1] R10: ffffc90000a08460 R11: fffff5200014108e R12: 0000000000000003 [ 336.911195][ C1] R13: 0000000000000000 R14: 1ffff1100ad0c71b R15: 0000000000000001 [ 336.911206][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 336.911219][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.911230][ C1] CR2: 0000558c70acc480 CR3: 0000000067916000 CR4: 00000000003526f0 [ 336.911246][ C1] Call Trace: [ 336.911252][ C1] [ 336.911258][ C1] find_match+0x60/0xb40 [ 336.911285][ C1] __find_rr_leaf+0x248/0x760 [ 336.911310][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 336.911329][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 336.911347][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 336.911373][ C1] fib6_table_lookup+0x3b4/0xa80 [ 336.911397][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 336.911415][ C1] ip6_pol_route+0x228/0x13d0 [ 336.911430][ C1] ? ip6_pol_route+0x160/0x13d0 [ 336.911445][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 336.911459][ C1] ? ip6t_do_table+0x1df/0x1560 [ 336.911477][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.911500][ C1] fib6_rule_lookup+0x556/0x730 [ 336.911515][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 336.911530][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 336.911549][ C1] ? ip6t_do_table+0x1df/0x1560 [ 336.911569][ C1] ip6_route_input+0x730/0xad0 [ 336.911586][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 336.911605][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 336.911633][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 336.911653][ C1] ip6_rcv_finish+0x141/0x280 [ 336.911673][ C1] NF_HOOK+0x336/0x3c0 [ 336.911691][ C1] ? skb_orphan+0xaf/0xd0 [ 336.911710][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 336.911727][ C1] ? NF_HOOK+0x9e/0x3c0 [ 336.911745][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 336.911764][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 336.911786][ C1] ? process_backlog+0x3eb/0x1950 [ 336.911802][ C1] process_backlog+0x7dd/0x1950 [ 336.911826][ C1] __napi_poll+0xae/0x340 [ 336.911839][ C1] ? skb_defer_free_flush+0x233/0x260 [ 336.911856][ C1] net_rx_action+0x627/0xf70 [ 336.911871][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 336.911894][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 336.911920][ C1] handle_softirqs+0x22a/0x870 [ 336.911942][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 336.911964][ C1] __irq_exit_rcu+0x5f/0x150 [ 336.911983][ C1] irq_exit_rcu+0x9/0x30 [ 336.912001][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 336.912019][ C1] [ 336.912024][ C1] [ 336.912031][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.912048][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 336.912066][ C1] Code: 0e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 42 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 336.912079][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 336.912098][ C1] RAX: 000000000048a7ab RBX: ffffffff819a913a RCX: 0000000080000001 [ 336.912109][ C1] RDX: 0000000000000001 RSI: ffffffff8defa6a8 RDI: ffffffff8c27d000 [ 336.912120][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 336.912131][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 336.912142][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 336.912155][ C1] ? do_idle+0x36a/0x5f0 [ 336.912179][ C1] default_idle+0x9/0x20 [ 336.912199][ C1] default_idle_call+0x72/0xb0 [ 336.912219][ C1] do_idle+0x36a/0x5f0 [ 336.912241][ C1] ? __pfx_do_idle+0x10/0x10 [ 336.912262][ C1] ? do_idle+0xe/0x5f0 [ 336.912283][ C1] cpu_startup_entry+0x43/0x60 [ 336.912303][ C1] start_secondary+0x101/0x110 [ 336.912321][ C1] common_startup_64+0x13e/0x147 [ 336.912343][ C1] [ 337.488154][ C0] net_ratelimit: 17481 callbacks suppressed [ 337.488178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:81:02:c4:21:4f, vlan:0) [ 337.488317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.494439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.506572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.518373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 337.530381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.542293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.555325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.566231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.578274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.497992][ C0] net_ratelimit: 19794 callbacks suppressed [ 342.498016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.498077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.504339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.516196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.528295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:81:02:c4:21:4f, vlan:0) [ 342.540996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.552019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.564080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.575924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:45:02:95:e2:20, vlan:0) [ 342.587893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)