last executing test programs: 4m14.594536321s ago: executing program 0 (id=2064): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) 4m13.227725141s ago: executing program 0 (id=2068): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 4m11.821594098s ago: executing program 0 (id=2070): syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 4m7.640297687s ago: executing program 0 (id=2077): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 4m4.319138421s ago: executing program 0 (id=2084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd514000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2800) close(r0) 4m0.23061587s ago: executing program 0 (id=2096): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0882, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f) 3m43.531195075s ago: executing program 32 (id=2096): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0882, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f) 2m51.491959911s ago: executing program 2 (id=2247): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m49.638339896s ago: executing program 2 (id=2252): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000c000000000000ad01000000000029d9fe067e1760a9d1c57e1aadf5"], 0x0, 0x26, 0x0, 0x1, 0x3, 0x10000}, 0x28) unshare(0x28040680) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m47.053655798s ago: executing program 2 (id=2257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 2m40.744241043s ago: executing program 2 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x4) 2m39.051716502s ago: executing program 2 (id=2268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m35.81208617s ago: executing program 2 (id=2272): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600010a00"], 0x78}}, 0x0) 2m27.981717728s ago: executing program 3 (id=2288): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2m27.366379852s ago: executing program 3 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x0) 2m25.630416364s ago: executing program 3 (id=2293): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m21.462560409s ago: executing program 3 (id=2297): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x149a82, 0x160) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x8) 2m19.576191192s ago: executing program 33 (id=2272): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600010a00"], 0x78}}, 0x0) 2m19.237925133s ago: executing program 3 (id=2302): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @empty, 0x5}, 0x1c) 2m17.763369213s ago: executing program 3 (id=2306): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m16.205691178s ago: executing program 4 (id=2308): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) 2m14.786838845s ago: executing program 4 (id=2310): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 2m13.939397943s ago: executing program 4 (id=2312): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvfrom(r0, 0x0, 0x0, 0x40010040, 0x0, 0x0) 2m12.475232759s ago: executing program 4 (id=2315): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0xe4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x5}) 2m12.184898463s ago: executing program 4 (id=2317): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x5, 0x88, {0x0, 0xff}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) 2m11.535414348s ago: executing program 4 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000020000000c000000180001801400020076657468315f766972745f776966690018000380140001"], 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0) 2m2.289228302s ago: executing program 34 (id=2306): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m55.823258774s ago: executing program 35 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000020000000c000000180001801400020076657468315f766972745f776966690018000380140001"], 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0) 5.225252399s ago: executing program 1 (id=2456): setuid(0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8000000) 3.967754712s ago: executing program 1 (id=2457): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.488201325s ago: executing program 1 (id=2458): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) getresgid(0x0, 0x0, 0x0) 1.761661546s ago: executing program 1 (id=2459): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 227.7887ms ago: executing program 1 (id=2460): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x542c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) 0s ago: executing program 1 (id=2461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_create(0x6) kernel console output (not intermixed with test programs): g maximum allowed: 32 [ 174.186809][ T998] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.186834][ T998] usb 3-1: config 1 has no interface number 0 [ 174.186884][ T998] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.186909][ T998] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.186954][ T998] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.186979][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.285250][ T998] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 174.301335][ T814] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 174.301391][ T814] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 174.329963][ T814] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 174.330007][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.330030][ T814] usb 5-1: Product: syz [ 174.330046][ T814] usb 5-1: Manufacturer: syz [ 174.330062][ T814] usb 5-1: SerialNumber: syz [ 174.373619][ T814] usb 5-1: config 0 descriptor?? [ 174.389924][ T814] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 174.484747][ T998] snd_usb_pod 3-1:1.1: invalid control EP [ 174.484777][ T998] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 174.485385][ T998] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 174.542404][ T998] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 174.678305][ T7687] netlink: 13 bytes leftover after parsing attributes in process `syz.0.810'. [ 174.754565][ T6094] usb 3-1: USB disconnect, device number 7 [ 174.904685][ T5796] usb 5-1: USB disconnect, device number 3 [ 175.211722][ T7702] tc_dump_action: action bad kind [ 175.394047][ T7706] comedi comedi2: no devices specified [ 176.668848][ T7741] bond1: option lacp_active: invalid value (8) [ 176.769858][ T7741] bond1 (unregistering): Released all slaves [ 176.959360][ T7758] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 177.323795][ T5796] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.474127][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 177.476817][ T5796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 177.493780][ T5796] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 177.493815][ T5796] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 177.493837][ T5796] usb 5-1: Product: syz [ 177.493852][ T5796] usb 5-1: Manufacturer: syz [ 177.493867][ T5796] usb 5-1: SerialNumber: syz [ 177.856567][ T5796] usb 5-1: Invalid connection information received from device [ 178.128104][ T998] usb 5-1: USB disconnect, device number 4 [ 178.265294][ T7797] netlink: 108 bytes leftover after parsing attributes in process `syz.3.863'. [ 178.379903][ T7802] openvswitch: netlink: Actions may not be safe on all matching packets [ 178.948538][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 178.948565][ T7822] netlink: 740 bytes leftover after parsing attributes in process `syz.0.875'. [ 179.035927][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 179.375240][ T7834] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 179.376173][ T37] audit: type=1326 audit(1776599933.436:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.377787][ T37] audit: type=1326 audit(1776599933.436:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.389458][ T37] audit: type=1326 audit(1776599933.446:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.390424][ T37] audit: type=1326 audit(1776599933.446:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.390473][ T37] audit: type=1326 audit(1776599933.446:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.395765][ T37] audit: type=1326 audit(1776599933.456:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.395813][ T37] audit: type=1326 audit(1776599933.456:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.396384][ T37] audit: type=1326 audit(1776599933.456:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 179.398265][ T37] audit: type=1326 audit(1776599933.456:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7830 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 180.822114][ T7885] netlink: 666 bytes leftover after parsing attributes in process `syz.0.904'. [ 181.520160][ T7905] netlink: 248 bytes leftover after parsing attributes in process `syz.1.915'. [ 181.972409][ T7916] openvswitch: netlink: Multiple metadata blocks provided [ 181.972733][ T7912] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20004 [ 182.523114][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 182.523171][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 182.523186][ T7935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 182.971442][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.935'. [ 183.473002][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'. [ 184.266128][ T7990] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 184.266149][ T7990] overlayfs: missing 'lowerdir' [ 184.440484][ T5881] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 184.593597][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.594395][ T5881] usb 5-1: not running at top speed; connect to a high speed hub [ 184.600024][ T5881] usb 5-1: config 13 has an invalid interface number: 102 but max is 0 [ 184.600055][ T5881] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 184.600076][ T5881] usb 5-1: config 13 has no interface number 0 [ 184.655306][ T5881] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 184.655340][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.655363][ T5881] usb 5-1: Product: syz [ 184.655379][ T5881] usb 5-1: Manufacturer: syz [ 184.655393][ T5881] usb 5-1: SerialNumber: syz [ 184.972409][ T5881] cdc_phonet 5-1:13.102: skipping garbage [ 184.972466][ T5881] cdc_phonet 5-1:13.102: probe with driver cdc_phonet failed with error -22 [ 185.026600][ T5881] usb 5-1: USB disconnect, device number 5 [ 185.973549][ T8040] comedi comedi0: Minor 9 could not be opened [ 186.736013][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.884419][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.884484][ T5895] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 186.884510][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.939511][ T5895] usb 2-1: config 0 descriptor?? [ 187.013221][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 187.429272][ T5895] pwc: recv_control_msg error -71 req 02 val 2b00 [ 187.430209][ T5895] pwc: recv_control_msg error -71 req 02 val 2700 [ 187.438626][ T5895] pwc: recv_control_msg error -71 req 02 val 2c00 [ 187.440165][ T5895] pwc: recv_control_msg error -71 req 04 val 1000 [ 187.458548][ T5895] pwc: recv_control_msg error -71 req 04 val 1300 [ 187.462065][ T5895] pwc: recv_control_msg error -71 req 04 val 1400 [ 187.462572][ T5895] pwc: recv_control_msg error -71 req 02 val 2000 [ 187.463057][ T5895] pwc: recv_control_msg error -71 req 02 val 2100 [ 187.465666][ T5895] pwc: recv_control_msg error -71 req 04 val 1500 [ 187.466178][ T5895] pwc: recv_control_msg error -71 req 02 val 2500 [ 187.467337][ T5895] pwc: recv_control_msg error -71 req 02 val 2400 [ 187.468181][ T5895] pwc: recv_control_msg error -71 req 02 val 2600 [ 187.468646][ T5895] pwc: recv_control_msg error -71 req 02 val 2900 [ 187.472518][ T5895] pwc: recv_control_msg error -71 req 02 val 2800 [ 187.484521][ T5895] pwc: recv_control_msg error -71 req 04 val 1100 [ 187.578557][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 187.666231][ T5895] pwc: Registered as video103. [ 187.694281][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 187.788324][ T8021] syz.0.972 (8021): drop_caches: 2 [ 187.850798][ T5895] usb 2-1: USB disconnect, device number 7 [ 187.920900][ T814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.073320][ T814] usb 5-1: Using ep0 maxpacket: 16 [ 188.089218][ T814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.089249][ T814] usb 5-1: config 0 has no interface number 0 [ 188.124079][ T814] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 188.124114][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.124136][ T814] usb 5-1: Product: syz [ 188.124151][ T814] usb 5-1: Manufacturer: syz [ 188.124168][ T814] usb 5-1: SerialNumber: syz [ 188.237664][ T814] usb 5-1: config 0 descriptor?? [ 188.384586][ T8090] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 188.523413][ T814] usb 5-1: selecting invalid altsetting 1 [ 188.523440][ T814] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 188.523486][ T814] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 188.523548][ T814] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 188.568860][ T814] usb 5-1: USB disconnect, device number 6 [ 188.719125][ T8093] bridge0: port 3(veth1_to_bridge) entered blocking state [ 188.723385][ T8093] bridge0: port 3(veth1_to_bridge) entered disabled state [ 188.723606][ T8093] veth1_to_bridge: entered allmulticast mode [ 188.765054][ T8093] veth1_to_bridge: entered promiscuous mode [ 188.765289][ T8093] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 188.835211][ T8093] bridge0: port 3(veth1_to_bridge) entered blocking state [ 188.837160][ T8093] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 189.174724][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 189.726807][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 189.726835][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 189.726850][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 189.726865][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 189.949466][ T8135] bond0: option arp_validate: invalid value (55553) [ 189.950010][ T13] bond0: (slave bond_slave_0): interface is now down [ 189.950033][ T13] bond0: (slave bond_slave_1): interface is now down [ 190.222008][ T13] bond0: now running without any active interface! [ 190.570490][ T5881] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 190.723812][ T5881] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 190.723846][ T5881] usb 1-1: config 0 has no interface number 0 [ 190.723896][ T5881] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 190.723927][ T5881] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.729951][ T5881] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 190.729986][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.730008][ T5881] usb 1-1: Product: syz [ 190.730024][ T5881] usb 1-1: Manufacturer: syz [ 190.730040][ T5881] usb 1-1: SerialNumber: syz [ 190.807639][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 190.822435][ T5881] usb 1-1: config 0 descriptor?? [ 190.823834][ T8142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.844508][ T5881] usb-storage 1-1:0.20: USB Mass Storage device detected [ 190.984310][ T5881] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 191.111969][ T5881] scsi host1: usb-storage 1-1:0.20 [ 191.203568][ T5881] usb 1-1: USB disconnect, device number 6 [ 191.426245][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.526563][ T8178] delete_channel: no stack [ 191.973764][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 192.267317][ T8203] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 192.267345][ T8203] openvswitch: netlink: Flow key attr not present in new flow. [ 192.720575][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.882056][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 192.888217][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.888254][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.908648][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.908682][ T5895] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 192.908702][ T5895] usb 2-1: Product: syz [ 192.908717][ T5895] usb 2-1: Manufacturer: syz [ 192.956927][ T5895] hub 2-1:4.0: USB hub found [ 193.166928][ T5895] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 193.249936][ T5895] usb 2-1: USB disconnect, device number 8 [ 194.602011][ T8266] bond1 (unregistering): Released all slaves [ 194.618470][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618545][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.470552][ T998] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 195.634827][ T998] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.634891][ T998] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 195.634927][ T998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.705585][ T5820] Bluetooth: hci3: ACL packet for unknown connection handle 3319 [ 195.733245][ T998] usb 1-1: config 0 descriptor?? [ 196.165329][ T998] ath6kl: Failed to read usb control message: -71 [ 196.165389][ T998] ath6kl: Unable to read the bmi data from the device: -71 [ 196.165406][ T998] ath6kl: Unable to recv target info: -71 [ 196.169391][ T998] ath6kl: Failed to init ath6kl core: -71 [ 196.170164][ T998] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.267215][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 196.287147][ T998] usb 1-1: USB disconnect, device number 7 [ 196.288958][ T8329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.288973][ T8329] IPv6: NLM_F_CREATE should be set when creating new route [ 196.289057][ T8329] IPv6: NLM_F_CREATE should be set when creating new route [ 197.690206][ T8366] delete_channel: no stack [ 198.043879][ T37] audit: type=1326 audit(1776599952.096:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.043936][ T37] audit: type=1326 audit(1776599952.106:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.063814][ T37] audit: type=1326 audit(1776599952.126:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.063865][ T37] audit: type=1326 audit(1776599952.126:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.063904][ T37] audit: type=1326 audit(1776599952.126:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.063943][ T37] audit: type=1326 audit(1776599952.126:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.067044][ T37] audit: type=1326 audit(1776599952.126:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.067090][ T37] audit: type=1326 audit(1776599952.126:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fae0359c819 code=0x7ffc0000 [ 198.410510][ T6011] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.595521][ T8402] capability: warning: `syz.0.1153' uses 32-bit capabilities (legacy support in use) [ 198.670500][ T6011] usb 3-1: config 9 has an invalid interface number: 176 but max is 0 [ 198.670535][ T6011] usb 3-1: config 9 has no interface number 0 [ 198.670571][ T6011] usb 3-1: config 9 interface 176 has no altsetting 0 [ 198.675464][ T6011] usb 3-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=ae.16 [ 198.675498][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.675520][ T6011] usb 3-1: Product: syz [ 198.675536][ T6011] usb 3-1: Manufacturer: syz [ 198.675552][ T6011] usb 3-1: SerialNumber: syz [ 198.900456][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.123285][ T31] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 199.123453][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12408, setting to 64 [ 199.123487][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.123532][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 199.123625][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.175318][ T6011] usb 3-1: USB disconnect, device number 8 [ 199.183140][ T31] usb 2-1: config 0 descriptor?? [ 199.443148][ T814] usb 2-1: USB disconnect, device number 9 [ 199.879653][ T8427] libceph: resolve '9.' (ret=-3): failed [ 201.020548][ T8467] netlink: 'syz.4.1185': attribute type 10 has an invalid length. [ 201.247513][ T8477] cgroup: noprefix used incorrectly [ 201.390408][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 201.422279][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1194'. [ 202.805439][ T8533] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.057407][ T8539] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1221'. [ 203.352717][ T8549] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1226'. [ 203.508441][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 204.288759][ T8584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.326909][ T8622] program syz.4.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.409972][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1266'. [ 205.421406][ T8626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.867277][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1270'. [ 206.320557][ T1912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.470428][ T1912] usb 4-1: Using ep0 maxpacket: 32 [ 206.489879][ T1912] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 206.489912][ T1912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.489935][ T1912] usb 4-1: Product: syz [ 206.489950][ T1912] usb 4-1: Manufacturer: syz [ 206.489966][ T1912] usb 4-1: SerialNumber: syz [ 206.534747][ T1912] usb 4-1: config 0 descriptor?? [ 206.565566][ T1912] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 206.988871][ T1912] gspca_ov534_9: reg_w failed -71 [ 207.380447][ T1912] gspca_ov534_9: Unknown sensor 0000 [ 207.380567][ T1912] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 207.388141][ T1912] usb 4-1: USB disconnect, device number 8 [ 207.448950][ T8683] qrtr: Invalid version 0 [ 207.986917][ T8702] netlink: 'syz.1.1301': attribute type 15 has an invalid length. [ 207.986949][ T8702] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1301'. [ 208.083168][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1303'. [ 209.115487][ T8733] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 209.241957][ T8733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.420515][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.680480][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 209.689067][ T31] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 209.689100][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.689121][ T31] usb 4-1: config 0 has no interface number 0 [ 209.689170][ T31] usb 4-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.695326][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 209.695356][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.695377][ T31] usb 4-1: Product: syz [ 209.695391][ T31] usb 4-1: Manufacturer: syz [ 209.695405][ T31] usb 4-1: SerialNumber: syz [ 209.708159][ T31] usb 4-1: config 0 descriptor?? [ 209.838093][ T31] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input10 [ 210.026803][ T31] usb 4-1: USB disconnect, device number 9 [ 210.050488][ T998] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.207916][ T998] usb 2-1: Using ep0 maxpacket: 8 [ 210.224136][ T998] usb 2-1: config 6 has an invalid interface number: 3 but max is 0 [ 210.224169][ T998] usb 2-1: config 6 has no interface number 0 [ 210.224206][ T998] usb 2-1: config 6 interface 3 has no altsetting 0 [ 210.255361][ T998] usb 2-1: New USB device found, idVendor=19d2, idProduct=1432, bcdDevice=c9.c9 [ 210.255395][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.255417][ T998] usb 2-1: Product: syz [ 210.255433][ T998] usb 2-1: Manufacturer: syz [ 210.255449][ T998] usb 2-1: SerialNumber: syz [ 210.647356][ T998] usb 2-1: USB disconnect, device number 10 [ 210.673589][ T37] audit: type=1326 audit(1776599964.726:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x0 [ 210.884566][ T8772] netlink: 'syz.4.1336': attribute type 2 has an invalid length. [ 211.841251][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 211.945693][ T8803] ip6gre1: entered promiscuous mode [ 212.056114][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 212.357367][ T8816] bridge0: port 3(hsr0) entered blocking state [ 212.357507][ T8816] bridge0: port 3(hsr0) entered disabled state [ 212.357734][ T8816] hsr0: entered allmulticast mode [ 212.357752][ T8816] hsr_slave_0: entered allmulticast mode [ 212.357773][ T8816] hsr_slave_1: entered allmulticast mode [ 212.367689][ T8816] hsr0: entered promiscuous mode [ 212.368489][ T8816] bridge0: port 3(hsr0) entered blocking state [ 212.368616][ T8816] bridge0: port 3(hsr0) entered forwarding state [ 212.379555][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 213.299231][ T8844] netlink: 'syz.2.1367': attribute type 21 has an invalid length. [ 213.299265][ T8844] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1367'. [ 213.299332][ T8844] netlink: 'syz.2.1367': attribute type 5 has an invalid length. [ 213.299347][ T8844] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1367'. [ 213.518600][ T8852] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1372'. [ 213.570456][ T6011] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.653350][ T5820] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 213.653545][ T5820] Bluetooth: hci2: Injecting HCI hardware error event [ 213.658736][ T60] Bluetooth: hci2: hardware error 0x00 [ 213.723221][ T6011] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 213.723255][ T6011] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.723277][ T6011] usb 2-1: config 0 has no interface number 0 [ 213.723330][ T6011] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 213.723355][ T6011] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.729759][ T6011] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 213.729795][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.729817][ T6011] usb 2-1: Product: syz [ 213.729833][ T6011] usb 2-1: Manufacturer: syz [ 213.729848][ T6011] usb 2-1: SerialNumber: syz [ 213.765388][ T6011] usb 2-1: config 0 descriptor?? [ 214.136453][ T8870] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1383'. [ 214.136488][ T8870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1383'. [ 214.136505][ T8870] netlink: 'syz.4.1383': attribute type 3 has an invalid length. [ 214.136520][ T8870] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1383'. [ 214.271580][ T5881] usb 2-1: USB disconnect, device number 11 [ 215.084845][ T8901] netlink: 'syz.2.1396': attribute type 63 has an invalid length. [ 215.900569][ T6011] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.970510][ T60] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 216.051481][ T6011] usb 5-1: Using ep0 maxpacket: 16 [ 216.059203][ T6011] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.074403][ T6011] usb 5-1: config 3 has an invalid interface number: 11 but max is 0 [ 216.074545][ T6011] usb 5-1: config 3 has no interface number 0 [ 216.074598][ T6011] usb 5-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 216.074628][ T6011] usb 5-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 216.074653][ T6011] usb 5-1: config 3 interface 11 altsetting 225 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 216.074679][ T6011] usb 5-1: config 3 interface 11 altsetting 225 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 216.074708][ T6011] usb 5-1: config 3 interface 11 has no altsetting 0 [ 216.159962][ T6011] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 216.159997][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.160020][ T6011] usb 5-1: Product: syz [ 216.160034][ T6011] usb 5-1: Manufacturer: syz [ 216.160050][ T6011] usb 5-1: SerialNumber: syz [ 216.496745][ T6011] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.11/input/input12 [ 216.547636][ T6011] usb 5-1: USB disconnect, device number 7 [ 216.549224][ C0] appletouch 5-1:3.11: atp_complete: usb_submit_urb failed with result -19 [ 216.569054][ T8943] MPI: mpi too large (107144 bits) [ 216.664609][ T1912] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.727204][ T6011] appletouch 5-1:3.11: input: appletouch disconnected [ 216.814750][ T37] audit: type=1326 audit(1776599970.876:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.815548][ T37] audit: type=1326 audit(1776599970.876:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.818467][ T37] audit: type=1326 audit(1776599970.876:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.818805][ T37] audit: type=1326 audit(1776599970.876:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.819310][ T37] audit: type=1326 audit(1776599970.876:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.819358][ T37] audit: type=1326 audit(1776599970.876:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.820087][ T37] audit: type=1326 audit(1776599970.876:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.820135][ T37] audit: type=1326 audit(1776599970.876:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.891492][ T1912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.891533][ T1912] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 216.891555][ T1912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.895843][ T37] audit: type=1326 audit(1776599970.956:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 216.931808][ T1912] usb 1-1: config 0 descriptor?? [ 217.174509][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 217.174551][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 217.181159][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 217.319605][ T8958] veth1_macvtap: left promiscuous mode [ 217.319699][ T8958] macsec0: entered promiscuous mode [ 217.319719][ T8958] macsec0: entered allmulticast mode [ 217.323020][ T1912] usbhid 1-1:0.0: can't add hid device: -71 [ 217.323140][ T1912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 217.428803][ T8959] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1426'. [ 217.458431][ T1912] usb 1-1: USB disconnect, device number 8 [ 217.532834][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1428'. [ 217.769178][ T8966] ./file0: Can't lookup blockdev [ 218.436618][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 218.600571][ T6011] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 218.754074][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 218.754109][ T6011] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 218.754135][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 218.754158][ T6011] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 218.759486][ T6011] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 218.759521][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.759543][ T6011] usb 5-1: Product: syz [ 218.759559][ T6011] usb 5-1: Manufacturer: syz [ 218.759576][ T6011] usb 5-1: SerialNumber: syz [ 218.852532][ T6011] usb 5-1: config 0 descriptor?? [ 218.866349][ T6011] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 219.185317][ T6011] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 219.306733][ T31] usb 5-1: USB disconnect, device number 8 [ 219.510691][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 219.510723][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 220.820421][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 220.982743][ T5881] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 220.982779][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.982801][ T5881] usb 2-1: Product: syz [ 220.982816][ T5881] usb 2-1: Manufacturer: syz [ 220.982831][ T5881] usb 2-1: SerialNumber: syz [ 221.062359][ T5881] r8152-cfgselector 2-1: Unknown version 0x0000 [ 221.062390][ T5881] r8152-cfgselector 2-1: config 0 descriptor?? [ 221.150509][ T6011] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.310251][ T6011] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 221.310571][ T6011] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 221.310601][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.319729][ T5881] r8152-cfgselector 2-1: Unknown version 0x0000 [ 221.355724][ T5881] r8152-cfgselector 2-1: No union descriptors [ 221.554799][ T5881] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 221.584695][ T6011] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 222.301804][ T9109] 9pnet_fd: Insufficient options for proto=fd [ 222.618278][ T6011] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 222.827900][ T6011] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 222.827926][ T6011] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 222.898598][ T6011] usb 5-1: USB disconnect, device number 9 [ 223.553418][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 223.986550][ T9163] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 223.986585][ T9163] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1523'. [ 225.094013][ T5809] Bluetooth: hci4: unexpected event for opcode 0x202d [ 225.233320][ T9213] process 'syz.1.1549' launched './file0' with NULL argv: empty string added [ 226.073404][ T6094] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.232144][ T6094] usb 1-1: Using ep0 maxpacket: 16 [ 226.258949][ T6094] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 226.263979][ T6094] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 226.264014][ T6094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.264036][ T6094] usb 1-1: Product: syz [ 226.264052][ T6094] usb 1-1: Manufacturer: syz [ 226.264069][ T6094] usb 1-1: SerialNumber: syz [ 226.349942][ T6094] r8152-cfgselector 1-1: Unknown version 0x0000 [ 226.349973][ T6094] r8152-cfgselector 1-1: config 0 descriptor?? [ 226.380480][ T998] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.533343][ T998] usb 4-1: Using ep0 maxpacket: 32 [ 226.558944][ T998] usb 4-1: config 16 has an invalid interface number: 36 but max is 1 [ 226.559253][ T998] usb 4-1: config 16 has an invalid interface number: 181 but max is 1 [ 226.559286][ T998] usb 4-1: config 16 has no interface number 0 [ 226.559304][ T998] usb 4-1: config 16 has no interface number 1 [ 226.559425][ T998] usb 4-1: config 16 interface 36 has no altsetting 0 [ 226.559448][ T998] usb 4-1: config 16 interface 181 has no altsetting 0 [ 226.620429][ T998] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=d3.37 [ 226.620463][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.620486][ T998] usb 4-1: Product: syz [ 226.620502][ T998] usb 4-1: Manufacturer: syz [ 226.620517][ T998] usb 4-1: SerialNumber: syz [ 226.859999][ T6094] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 226.939800][ T998] qmi_wwan 4-1:16.36: bogus CDC Union: master=0, slave=0 [ 226.950046][ T998] qmi_wwan 4-1:16.36: probe with driver qmi_wwan failed with error -22 [ 227.006208][ T998] usb 4-1: USB disconnect, device number 10 [ 227.210541][ T6011] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.363170][ T6011] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 227.363206][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.386792][ T6011] usb 5-1: config 0 descriptor?? [ 227.609901][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 227.721041][ T6011] usb 5-1: string descriptor 0 read error: -71 [ 227.721130][ T6011] ldusb 5-1:0.0: Interrupt in endpoint not found [ 227.759557][ T6011] usb 5-1: USB disconnect, device number 10 [ 228.005284][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 228.841197][ T9315] tmpfs: Bad value for 'mpol' [ 229.429602][ T9339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.986935][ T37] audit: type=1107 audit(1776599983.986:142): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 230.286303][ T9371] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 233.120564][ T6011] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.293965][ T6011] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 233.294001][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.294023][ T6011] usb 3-1: Product: syz [ 233.294038][ T6011] usb 3-1: Manufacturer: syz [ 233.294054][ T6011] usb 3-1: SerialNumber: syz [ 233.381605][ T6011] usb 3-1: config 0 descriptor?? [ 233.604961][ T6011] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 009 [ 233.930613][ T6011] (null): failure reading functionality [ 234.032496][ T6011] i2c i2c-1: failure reading functionality [ 234.210451][ T1912] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.409192][ T6011] i2c i2c-1: connected i2c-tiny-usb device [ 234.426613][ T6011] usb 3-1: USB disconnect, device number 9 [ 234.480383][ T1912] usb 1-1: Using ep0 maxpacket: 32 [ 234.483790][ T1912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.483819][ T1912] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.487164][ T1912] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.487203][ T1912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.487223][ T1912] usb 1-1: Product: syz [ 234.487237][ T1912] usb 1-1: Manufacturer: syz [ 234.487250][ T1912] usb 1-1: SerialNumber: syz [ 234.735855][ T1912] usb 1-1: config 0 descriptor?? [ 235.037947][ T814] usb 1-1: USB disconnect, device number 10 [ 235.451726][ T9482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1679'. [ 235.576073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.576461][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.577238][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.577629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.578082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.578475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.578873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.579284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.579690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.580082][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.453576][ T9503] program syz.2.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.453853][ T9503] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 240.580393][ C1] net_ratelimit: 6991 callbacks suppressed [ 240.580417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.582032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.582513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.582919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.583329][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.583730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.584171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.584573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.584963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.585371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.098626][ T9559] Invalid ELF header magic: != ELF [ 244.144495][ T9571] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1718'. [ 245.102789][ T5881] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 245.590384][ C1] net_ratelimit: 8468 callbacks suppressed [ 245.590409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.590813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.591201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.591609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.591994][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.592400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.592795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.593249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.593650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.594047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.808202][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.808242][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 245.808271][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 245.906877][ T5881] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 245.906914][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.906936][ T5881] usb 5-1: Product: syz [ 245.906952][ T5881] usb 5-1: Manufacturer: syz [ 245.906968][ T5881] usb 5-1: SerialNumber: syz [ 246.112248][ T5881] usb 5-1: config 0 descriptor?? [ 246.113540][ T9581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.119861][ T9581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.266523][ T5881] usb 5-1: ucan: probing device on interface #0 [ 246.770477][ T5881] usb 5-1: ucan: device reported invalid tx-fifo size [ 246.770504][ T5881] usb 5-1: ucan: probe failed; try to update the device firmware [ 247.046577][ T5881] usb 5-1: USB disconnect, device number 11 [ 247.710632][ T6094] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 248.128174][ T6094] usb 4-1: config 0 has an invalid interface number: 121 but max is 0 [ 248.128209][ T6094] usb 4-1: config 0 has no interface number 0 [ 248.128273][ T6094] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.128299][ T6094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.291518][ T6094] usb 4-1: config 0 descriptor?? [ 248.306603][ T6094] cp210x 4-1:0.121: cp210x converter detected [ 248.510531][ T9613] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 248.936829][ T6094] cp210x 4-1:0.121: failed to get vendor val 0x000e size 3: -71 [ 249.077999][ T6094] usb 4-1: cp210x converter now attached to ttyUSB0 [ 249.168186][ T6094] usb 4-1: USB disconnect, device number 11 [ 249.220969][ T6094] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.100588][ T6094] cp210x 4-1:0.121: device disconnected [ 250.600693][ C1] net_ratelimit: 10327 callbacks suppressed [ 250.600717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.601113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.601508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.601926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.602340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.602733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.603210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.603595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.603979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.604365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.679526][ T9628] x_tables: ip_tables: udp match: only valid for protocol 17 [ 254.955840][ T9670] tipc: Started in network mode [ 254.955876][ T9670] tipc: Node identity 2e000000000000004000000000000001, cluster identity 4711 [ 254.955936][ T9670] tipc: Enabling of bearer rejected, failed to enable media [ 255.585417][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1766'. [ 255.611973][ C0] net_ratelimit: 9173 callbacks suppressed [ 255.612007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.612399][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 255.614390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.614810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.615187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.615601][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.621380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.621810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 255.622936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.623347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.085340][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.085423][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.620655][ C1] net_ratelimit: 13165 callbacks suppressed [ 260.620680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.621071][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.621429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.621468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.621876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.621971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 260.622291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.622659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.623057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.623456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.149402][ T9725] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 264.049397][ T9745] macvlan2: entered promiscuous mode [ 264.049438][ T9745] macvlan2: entered allmulticast mode [ 264.049454][ T9745] veth0_virt_wifi: entered allmulticast mode [ 265.630522][ C1] net_ratelimit: 11822 callbacks suppressed [ 265.630548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.630954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.631336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.631759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.632150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.632554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.632955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.633358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.633751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.634176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.644987][ C0] net_ratelimit: 12567 callbacks suppressed [ 270.645012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.645418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 270.647485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.657642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 270.667568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.668063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.668507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.668884][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.669254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.669635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.102864][ T1912] IPVS: starting estimator thread 0... [ 273.214088][ T9820] IPVS: using max 6 ests per chain, 14400 per kthread [ 275.441765][ T9835] tipc: Enabling of bearer rejected, failed to enable media [ 275.650295][ C1] net_ratelimit: 12400 callbacks suppressed [ 275.650319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.650715][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.650728][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.651129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.651129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 275.651525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.651960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.652346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.652630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.652746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.134308][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1836'. [ 280.661224][ C1] net_ratelimit: 11970 callbacks suppressed [ 280.661244][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.661599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.661941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.662268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.662634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.662960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.663388][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 280.664013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.664454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.664878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.970407][ T5881] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 282.370382][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 282.465595][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 282.550705][ T5881] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 282.550742][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 282.550784][ T5881] usb 1-1: Product: syz [ 282.550800][ T5881] usb 1-1: Manufacturer: syz [ 282.550826][ T5881] usb 1-1: SerialNumber: syz [ 282.636960][ T5881] usb 1-1: config 0 descriptor?? [ 282.638059][ T9892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.649506][ T5881] hub 1-1:0.0: bad descriptor, ignoring hub [ 282.649546][ T5881] hub 1-1:0.0: probe with driver hub failed with error -5 [ 284.511801][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1866'. [ 285.062135][ T5881] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 285.084818][ T9914] IPv6: sit2: Disabled Multicast RS [ 285.086157][ T9914] sit2: entered allmulticast mode [ 285.671011][ C0] net_ratelimit: 8824 callbacks suppressed [ 285.671035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.671458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 285.672356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.672763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.677436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.677848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.678515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.678914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.679578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.679970][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.051865][ T5881] usb 1-1: USB disconnect, device number 11 [ 290.680383][ C1] net_ratelimit: 9663 callbacks suppressed [ 290.680406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.680951][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.681289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.681922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.682286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.682860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.683223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.683843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.684171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.684728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.690408][ C1] net_ratelimit: 10242 callbacks suppressed [ 295.690434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.691159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.691566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.692384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.692900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.693550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.693966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.694211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.694616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 295.694623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.890758][ T9986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1896'. [ 295.891442][ T9986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1896'. [ 300.700736][ C1] net_ratelimit: 9018 callbacks suppressed [ 300.700761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.701417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.701821][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.702142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.702430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.702560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 300.702830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.703439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.703815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.704696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.480111][T10075] macsec1: entered promiscuous mode [ 303.480149][T10075] macsec1: entered allmulticast mode [ 303.964493][T10087] IPVS: Error connecting to the multicast addr [ 305.710793][ C1] net_ratelimit: 8775 callbacks suppressed [ 305.710818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.711229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.711947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.712386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.713025][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.713439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.714076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.714497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.715121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.715527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.368632][T10122] tipc: Started in network mode [ 307.368669][T10122] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 307.368729][T10122] tipc: Enabling of bearer rejected, failed to enable media [ 309.182411][T10139] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1965'. [ 309.182442][T10139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1965'. [ 309.182463][T10139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1965'. [ 309.310972][ T1912] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.472332][ T1912] usb 4-1: Using ep0 maxpacket: 32 [ 309.525789][ T1912] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 309.525826][ T1912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.583068][ T1912] usb 4-1: config 0 descriptor?? [ 309.647075][ T1912] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 310.714851][ T1912] gspca_nw80x: reg_w err -71 [ 310.714964][ T1912] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 310.732444][ C1] net_ratelimit: 8804 callbacks suppressed [ 310.732463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.732910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.733505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.733851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.744616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.745030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.745657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.746083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.746660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.747042][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.915378][ T1912] usb 4-1: USB disconnect, device number 12 [ 315.740716][ C1] net_ratelimit: 10466 callbacks suppressed [ 315.740742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.741170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.741478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.741809][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.741923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 315.742287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.742957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.743359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.743721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.743971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.500453][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.500523][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.750757][ C1] net_ratelimit: 10118 callbacks suppressed [ 320.750784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.751246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.751763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.752114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.752201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 320.752560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.753291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.753845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.753855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.754281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 325.760638][ C1] net_ratelimit: 10229 callbacks suppressed [ 325.760663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.761166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.761566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 325.762169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.763076][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.763483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 325.764960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.765340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 325.766843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.767164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.663307][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2016'. [ 329.251600][T10266] mmap: syz.2.2018 (10266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 330.550474][ T5796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 330.770397][ C1] net_ratelimit: 9678 callbacks suppressed [ 330.770421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.771105][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.771538][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.771991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.772163][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.772551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.773192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.773590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.773942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 330.774194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.870391][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 331.477503][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 331.477545][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 331.477594][ T5796] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 331.477619][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.760893][ T5796] usb 3-1: config 0 descriptor?? [ 331.761839][T10279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.055180][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.055228][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.055264][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.055292][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.055319][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.055346][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.064069][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.064108][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.064133][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 333.064157][ T5796] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 335.780925][ C1] net_ratelimit: 9154 callbacks suppressed [ 335.780951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.781720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.782097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.782295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 335.782625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.783364][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.783833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.784228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.784629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.784711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 336.543567][ T5796] saitek 0003:06A3:0CCD.0001: hidraw0: USB HID v0.08 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 336.621205][ T5796] usb 3-1: USB disconnect, device number 10 [ 340.209367][T10313] fido_id[10313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 340.790592][ C1] net_ratelimit: 10023 callbacks suppressed [ 340.790617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.790674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 340.791401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.791816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.792327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.792485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.792889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 340.792910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.793634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.794057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.480039][T10363] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2062'. [ 345.802790][ C0] net_ratelimit: 10308 callbacks suppressed [ 345.802813][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.803238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 345.804839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.805267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 345.806970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.807385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 345.809006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.809462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 345.811556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.811868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.989183][T10372] netlink: 'syz.4.2066': attribute type 29 has an invalid length. [ 347.015532][T10372] netlink: 'syz.4.2066': attribute type 29 has an invalid length. [ 350.080717][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 350.810289][ C1] net_ratelimit: 10739 callbacks suppressed [ 350.810314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.810948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.811341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.811441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.812015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.812470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.813460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 350.814280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.814680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.814898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.726594][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.726662][ T5881] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 351.726688][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.336574][ T5881] usb 3-1: config 0 descriptor?? [ 353.296339][ T5881] ath6kl: Failed to read usb control message: -71 [ 353.296402][ T5881] ath6kl: Unable to read the bmi data from the device: -71 [ 353.296420][ T5881] ath6kl: unable to read target info byte count: -71 [ 353.299658][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 354.537218][ T37] audit: type=1326 audit(1776600108.586:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.537279][ T37] audit: type=1326 audit(1776600108.596:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.608569][ T37] audit: type=1326 audit(1776600108.666:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.608627][ T37] audit: type=1326 audit(1776600108.666:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.608967][ T37] audit: type=1326 audit(1776600108.666:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.688968][ T37] audit: type=1326 audit(1776600108.746:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 354.689019][ T37] audit: type=1326 audit(1776600108.746:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f396950c582 code=0x7ffc0000 [ 354.702376][ T5881] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 355.696194][ T37] audit: type=1326 audit(1776600109.746:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10408 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39694cd04e code=0x7ffc0000 [ 355.696259][ T37] audit: type=1326 audit(1776600109.746:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 355.696310][ T37] audit: type=1326 audit(1776600109.746:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10404 comm="syz.2.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396950c819 code=0x7ffc0000 [ 355.820670][ C1] net_ratelimit: 9389 callbacks suppressed [ 355.820693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.821063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.821647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.822018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.822610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.823156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.824232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.824638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.905229][ T5881] usb 3-1: USB disconnect, device number 11 [ 360.830411][ C0] net_ratelimit: 8912 callbacks suppressed [ 360.830435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.830686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.831077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.831480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.831858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 360.831876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.832523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.832917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.833312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.833492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.840571][ C1] net_ratelimit: 12180 callbacks suppressed [ 365.840597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.840990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.841005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.841622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.842071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.842325][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 365.842457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.842893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.843506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.843897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.850707][ C1] net_ratelimit: 11221 callbacks suppressed [ 370.850732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.851132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.851552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.851936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.852578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.852886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 370.852968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.853356][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.853748][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.854382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.940103][T10501] netlink: 'syz.4.2121': attribute type 8 has an invalid length. [ 375.860730][ C1] net_ratelimit: 10727 callbacks suppressed [ 375.860755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.860918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 375.861146][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.861544][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.862192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.862299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.862597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.862983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.863386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.863556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 377.573479][T10511] rdma_op ffff88804d5e9270 conn xmit_rdma 0000000000000000 [ 377.575768][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 378.936813][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.936896][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.989209][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.045659][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.051152][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.057049][ T5125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.057960][ T5125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.645333][T10512] syz.3.2127 (10512) used greatest stack depth: 18088 bytes left [ 380.683840][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 380.870562][ C1] net_ratelimit: 9670 callbacks suppressed [ 380.870593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.870964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.871340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.871737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.872370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.872766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.873147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.873513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.874148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.874531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.664425][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 381.664458][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.664481][ T31] usb 3-1: Product: syz [ 381.664498][ T31] usb 3-1: Manufacturer: syz [ 381.664513][ T31] usb 3-1: SerialNumber: syz [ 382.291420][ T5809] Bluetooth: hci5: command tx timeout [ 383.803348][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 383.803951][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 383.810045][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 384.370331][ T5809] Bluetooth: hci5: command tx timeout [ 384.600447][ T5796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 384.685006][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 385.696180][ T31] usb 3-1: USB disconnect, device number 12 [ 385.880242][ C1] net_ratelimit: 10716 callbacks suppressed [ 385.880266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.880703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.881397][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.881858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.882245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.882648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.883312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.883943][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.884332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.884777][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.450400][ T5809] Bluetooth: hci5: command tx timeout [ 387.141160][ T5796] usb 5-1: device descriptor read/all, error -71 [ 387.768073][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 387.980378][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 387.983076][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.983113][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.988180][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 387.988214][ T31] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 387.988237][ T31] usb 3-1: Product: syz [ 387.988253][ T31] usb 3-1: Manufacturer: syz [ 388.077957][ T31] hub 3-1:4.0: USB hub found [ 388.310826][ T31] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 388.530471][ T5809] Bluetooth: hci5: command tx timeout [ 389.172878][T10522] lo speed is unknown, defaulting to 1000 [ 389.265263][ T31] usb 3-1: USB disconnect, device number 13 [ 390.890699][ C0] net_ratelimit: 8301 callbacks suppressed [ 390.890727][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.891858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.893331][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 390.894034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.894970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.896210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 390.896874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.897736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.898800][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 390.899687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 394.690857][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2176'. [ 395.900274][ C0] net_ratelimit: 10549 callbacks suppressed [ 395.900298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.901448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.902861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 395.903746][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.904896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.906349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 395.907178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.908089][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.908342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.908993][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.776394][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.910595][ C1] net_ratelimit: 10057 callbacks suppressed [ 400.910620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.911284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.911312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.911675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.912066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.912176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 400.912471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.913085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.913129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 400.913483][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.395979][T10657] program syz.3.2190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.130605][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.920332][ C0] net_ratelimit: 12286 callbacks suppressed [ 405.920360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.920571][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.921112][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 405.921194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.921580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.921972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.921979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 405.922365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.922810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.922982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.984005][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.930417][ C1] net_ratelimit: 11028 callbacks suppressed [ 410.930442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.930567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 410.931074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.931355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.931453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.931836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.932234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.932393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.932850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.933565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 412.654519][T10694] pim6reg: entered allmulticast mode [ 412.672376][T10697] pim6reg: left allmulticast mode [ 415.941263][ C0] net_ratelimit: 12810 callbacks suppressed [ 415.941287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.941443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.941836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.942150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 415.942232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.942925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.943185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 415.943310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.943698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.944042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.609667][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.585944][T10522] chnl_net:caif_netlink_parms(): no params data found [ 420.950671][ C1] net_ratelimit: 12079 callbacks suppressed [ 420.950697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.950815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 420.951099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.951500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.951584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.951895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.952510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.952572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.952921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.953304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.960362][ C1] net_ratelimit: 12631 callbacks suppressed [ 425.960388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.960838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.961243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.961628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.962284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.962671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.963062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.963436][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.964146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.964552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.032248][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 427.032270][ T37] audit: type=1326 audit(1776600181.066:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.032325][ T37] audit: type=1326 audit(1776600181.096:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.098520][ T37] audit: type=1326 audit(1776600181.156:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.098578][ T37] audit: type=1326 audit(1776600181.156:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.098626][ T37] audit: type=1326 audit(1776600181.156:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.098673][ T37] audit: type=1326 audit(1776600181.156:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.121914][ T37] audit: type=1326 audit(1776600181.166:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.201264][ T37] audit: type=1326 audit(1776600181.186:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.201324][ T37] audit: type=1326 audit(1776600181.266:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 427.201374][ T37] audit: type=1326 audit(1776600181.266:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f0aebf2c819 code=0x7ffc0000 [ 428.474166][T10522] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.474311][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.474559][T10522] bridge_slave_0: entered allmulticast mode [ 428.507163][T10522] bridge_slave_0: entered promiscuous mode [ 429.119725][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.119876][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.120141][T10522] bridge_slave_1: entered allmulticast mode [ 429.139838][T10522] bridge_slave_1: entered promiscuous mode [ 430.971639][ C0] net_ratelimit: 12697 callbacks suppressed [ 430.971665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 430.972377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.972657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 430.972781][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.973164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.973523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.973840][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.974226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.974604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.974641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.098221][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.187293][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.980360][ C0] net_ratelimit: 13007 callbacks suppressed [ 435.980386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.980421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.980949][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.981387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.981394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.981898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.982161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 435.982591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.983037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.983153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 440.378604][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.378687][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.998324][ C1] net_ratelimit: 11282 callbacks suppressed [ 440.998349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.998748][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.999340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.002459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 441.003525][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 441.012294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.013793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.014535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 441.015411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 441.016148][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.015009][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.068622][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.090074][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.121315][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.166695][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.000639][ C0] net_ratelimit: 12034 callbacks suppressed [ 446.000665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 446.000739][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.001272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.001644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:64:17:38:07:84, vlan:0) [ 446.001990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.002417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.002671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.002847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.003270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.003795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.370367][ T5125] Bluetooth: hci2: command tx timeout [ 448.832398][ T5125] Bluetooth: hci2: command tx timeout [ 450.990359][ T5125] Bluetooth: hci2: command tx timeout [ 451.010978][ C1] net_ratelimit: 11766 callbacks suppressed [ 451.011002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.011399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.011789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.012180][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.012811][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.013200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.013592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.013967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.014684][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.015073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.453882][ T13] veth1_to_bridge: left allmulticast mode [ 451.454085][ T13] veth1_to_bridge: left promiscuous mode [ 451.455971][ T13] bridge0: port 3(veth1_to_bridge) entered disabled state [ 452.365670][T10891] vivid-006: disconnect [ 452.382689][T10890] vivid-006: reconnect [ 453.012131][ T5125] Bluetooth: hci2: command tx timeout [ 453.113031][ T1912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 455.200392][ T13] bridge_slave_1: left allmulticast mode [ 455.200425][ T13] bridge_slave_1: left promiscuous mode [ 455.398937][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.483549][ T1912] usb 5-1: Using ep0 maxpacket: 8 [ 456.567619][ T1912] usb 5-1: device descriptor read/all, error -71 [ 458.624625][ T13] bridge_slave_0: left allmulticast mode [ 458.624659][ T13] bridge_slave_0: left promiscuous mode [ 458.624926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.764536][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.816923][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.860047][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.870069][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.907736][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 468.050678][ T5125] Bluetooth: hci5: command tx timeout [ 470.130675][ T5125] Bluetooth: hci5: command tx timeout [ 472.220727][ T5125] Bluetooth: hci5: command tx timeout [ 474.292640][ T5125] Bluetooth: hci5: command tx timeout [ 480.546323][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 480.646487][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.210866][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.223721][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.228935][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.430426][ T5125] Bluetooth: hci6: command tx timeout [ 485.490279][ T5125] Bluetooth: hci6: command tx timeout [ 487.570671][ T5125] Bluetooth: hci6: command tx timeout [ 488.188645][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.233478][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.245372][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.282512][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.283484][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 489.651196][ T5809] Bluetooth: hci6: command tx timeout [ 490.555109][ T5809] Bluetooth: hci7: command tx timeout [ 492.610308][ T5809] Bluetooth: hci7: command tx timeout [ 494.690288][ T5809] Bluetooth: hci7: command tx timeout [ 496.770293][ T5809] Bluetooth: hci7: command tx timeout [ 501.881605][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.881685][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.938842][ T5125] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 502.981205][ T5125] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 502.983832][ T5125] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 502.986148][ T5125] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 502.993633][ T5125] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 505.304003][ T5809] Bluetooth: hci8: command tx timeout [ 507.330355][ T5809] Bluetooth: hci8: command tx timeout [ 509.535960][ T5809] Bluetooth: hci8: command tx timeout [ 511.577253][ T5809] Bluetooth: hci8: command tx timeout [ 523.259605][T11109] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 523.319247][T11109] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 523.343855][T11109] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 523.375258][T11109] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 523.376758][T11109] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 525.570324][T11109] Bluetooth: hci9: command tx timeout [ 527.650398][T11109] Bluetooth: hci9: command tx timeout [ 529.910270][T11109] Bluetooth: hci9: command tx timeout [ 531.970262][T11109] Bluetooth: hci9: command tx timeout [ 541.799230][ T5125] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 541.845862][ T5125] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 541.874971][ T5125] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 541.888235][ T5125] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 541.917367][ T5125] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 544.050417][T11109] Bluetooth: hci10: command tx timeout [ 546.130283][T11109] Bluetooth: hci10: command tx timeout [ 548.211940][T11109] Bluetooth: hci10: command tx timeout [ 548.357747][ T5125] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 548.580558][ T5125] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 548.586020][ T5125] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 548.631430][ T5125] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 548.980405][ T5125] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 550.290331][ T5125] Bluetooth: hci10: command tx timeout [ 551.250644][ T5125] Bluetooth: hci11: command tx timeout [ 553.340312][ T5125] Bluetooth: hci11: command tx timeout [ 555.410298][ T5125] Bluetooth: hci11: command tx timeout [ 557.490522][ T5125] Bluetooth: hci11: command tx timeout [ 563.271780][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.271864][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.179868][T11109] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 565.446484][T11109] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 565.448887][T11109] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 565.476077][T11109] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 565.478603][T11109] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 567.650615][T11109] Bluetooth: hci12: command tx timeout [ 569.730267][T11109] Bluetooth: hci12: command tx timeout [ 570.770886][T11109] Bluetooth: hci2: command 0x0406 tx timeout [ 571.820030][ T5125] Bluetooth: hci12: command tx timeout [ 573.890268][ T5125] Bluetooth: hci12: command tx timeout [ 583.058599][T11109] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 583.135947][T11109] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 583.174121][T11109] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 583.193621][T11109] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 583.194606][T11109] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 585.330331][T11109] Bluetooth: hci13: command tx timeout [ 587.410310][T11109] Bluetooth: hci13: command tx timeout [ 589.498513][T11109] Bluetooth: hci13: command tx timeout [ 590.930334][T11109] Bluetooth: hci5: command 0x0406 tx timeout [ 591.585175][T11109] Bluetooth: hci13: command tx timeout [ 600.370396][ T38] INFO: task kworker/u8:15:3528 blocked for more than 143 seconds. [ 600.370430][ T38] Not tainted syzkaller #0 [ 600.370444][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.370455][ T38] task:kworker/u8:15 state:D stack:19624 pid:3528 tgid:3528 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 600.370528][ T38] Workqueue: events_unbound linkwatch_event [ 600.370563][ T38] Call Trace: [ 600.370572][ T38] [ 600.370588][ T38] __schedule+0x1681/0x54c0 [ 600.370666][ T38] ? __pfx___schedule+0x10/0x10 [ 600.370693][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 600.370747][ T38] rt_mutex_schedule+0x76/0xf0 [ 600.370782][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 600.370832][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 600.370873][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 600.370897][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 600.370921][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 600.370957][ T38] ? linkwatch_event+0xe/0x60 [ 600.370998][ T38] ? linkwatch_event+0xe/0x60 [ 600.371022][ T38] mutex_lock_nested+0x168/0x1d0 [ 600.371059][ T38] ? process_scheduled_works+0xa70/0x1860 [ 600.371098][ T38] linkwatch_event+0xe/0x60 [ 600.371122][ T38] process_scheduled_works+0xb5d/0x1860 [ 600.371193][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.371236][ T38] ? assign_work+0x3d5/0x5e0 [ 600.371276][ T38] worker_thread+0xa53/0xfc0 [ 600.371330][ T38] kthread+0x388/0x470 [ 600.371359][ T38] ? __pfx_worker_thread+0x10/0x10 [ 600.371379][ T38] ? __pfx_kthread+0x10/0x10 [ 600.371410][ T38] ret_from_fork+0x514/0xb70 [ 600.371450][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 600.371486][ T38] ? __switch_to+0xc79/0x1410 [ 600.371521][ T38] ? __pfx_kthread+0x10/0x10 [ 600.371551][ T38] ret_from_fork_asm+0x1a/0x30 [ 600.371596][ T38] [ 600.371651][ T38] INFO: task kworker/1:6:6011 blocked for more than 143 seconds. [ 600.371670][ T38] Not tainted syzkaller #0 [ 600.371681][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.371690][ T38] task:kworker/1:6 state:D stack:21552 pid:6011 tgid:6011 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.371756][ T38] Workqueue: events switchdev_deferred_process_work [ 600.371788][ T38] Call Trace: [ 600.371796][ T38] [ 600.371810][ T38] __schedule+0x1681/0x54c0 [ 600.371836][ [ 600.371836][ T38] ? wg_packet_tx_worker+0x1c8/0x7c0 [ 600.371901][ T38] ? __pfx___schedule+0x10/0x10 [ 600.371960][ T38] rt_mutex_schedule+0x76/0xf0 [ 600.371992][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 600.372050][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 600.372076][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 600.372100][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 600.372136][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 600.372181][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 600.372209][ T38] mutex_lock_nested+0x168/0x1d0 [ 600.372246][ T38] ? process_scheduled_works+0xa70/0x1860 [ 600.372282][ T38] switchdev_deferred_process_work+0xe/0x20 [ 600.372311][ T38] process_scheduled_works+0xb5d/0x1860 [ 600.372382][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.372426][ T38] ? assign_work+0x3d5/0x5e0 [ 600.372467][ T38] worker_thread+0xa53/0xfc0 [ 600.372519][ T38] kthread+0x388/0x470 [ 600.372548][ T38] ? __pfx_worker_thread+0x10/0x10 [ 600.372569][ T38] ? __pfx_kthread+0x10/0x10 [ 600.372599][ T38] ret_from_fork+0x514/0xb70 [ 600.372638][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 600.372683][ T38] ? __switch_to+0xc79/0x1410 [ 600.372717][ T38] ? __pfx_kthread+0x10/0x10 [ 600.372746][ T38] ret_from_fork_asm+0x1a/0x30 [ 600.372791][ T38] [ 600.372802][ T38] INFO: task syz-executor:10522 blocked for more than 143 seconds. [ 600.372818][ T38] Not tainted syzkaller #0 [ 600.372829][ T38] Blocked by coredump. [ 600.372836][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.372846][ T38] task:syz-executor state:D stack:18416 pid:10522 tgid:10522 ppid:1 task_flags:0x40054c flags:0x00080003 [ 600.372902][ T38] Call Trace: [ 600.372910][ T38] [ 600.372924][ T38] __schedule+0x1681/0x54c0 [ 600.372986][ T38] ? __pfx___schedule+0x10/0x10 [ 600.373031][ T38] rt_mutex_schedule+0x76/0xf0 [ 600.373063][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 600.373120][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 600.373146][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 600.373170][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 600.373211][ T38] ? tun_chr_close+0x41/0x1c0 [ 600.373243][ T38] ? tun_chr_close+0x41/0x1c0 [ 600.373265][ T38] mutex_lock_nested+0x168/0x1d0 [ 600.373303][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 600.373329][ T38] tun_chr_close+0x41/0x1c0 [ 600.373362][ T38] __fput+0x461/0xa70 [ 600.373404][ T38] task_work_run+0x1d9/0x270 [ 600.373438][ T38] ? __pfx_task_work_run+0x10/0x10 [ 600.373468][ T38] ? do_exit+0x70a/0x22c0 [ 600.373494][ T38] ? kmem_cache_free+0x187/0x6c0 [ 600.373517][ T38] ? put_net+0x191/0x260 [ 600.373548][ T38] ? do_exit+0x70a/0x22c0 [ 600.373580][ T38] do_exit+0x70f/0x22c0 [ 600.373611][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.373654][ T38] ? __pfx_do_exit+0x10/0x10 [ 600.373679][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 600.373702][ T38] ? reacquire_held_locks+0x104/0x190 [ 600.373733][ T38] ? rt_spin_lock+0x1e0/0x400 [ 600.373769][ T38] do_group_exit+0x21b/0x2d0 [ 600.373798][ T38] ? rt_spin_unlock+0x160/0x200 [ 600.373824][ T38] get_signal+0x125c/0x1310 [ 600.373884][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 600.373920][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.373973][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.373999][ T38] exit_to_user_mode_loop+0x86/0x480 [ 600.374023][ T38] ? rcu_is_watching+0x15/0xb0 [ 600.374055][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.374080][ T38] do_syscall_64+0x33e/0xf80 [ 600.374119][ T38] ? trace_irq_disable+0x3b/0x140 [ 600.374143][ T38] ? clear_bhb_loop+0x40/0x90 [ 600.374172][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.374198][ T38] RIP: 0033:0x7fc6f1e3d04e [ 600.374219][ T38] RSP: 002b:00007ffc0cd89668 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 600.374243][ T38] RAX: 0000000000000088 RBX: 000055556071d500 RCX: 00007fc6f1e3d04e [ 600.374260][ T38] RDX: 0000000000000088 RSI: 00007fc6f2c24670 RDI: 0000000000000003 [ 600.374275][ T38] RBP: 0000000000000001 R08: 00007ffc0cd896e4 R09: 000000000000000c [ 600.374290][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 600.374304][ T38] R13: 0000000000000000 R14: 00007fc6f2c24670 R15: 0000000000000000 [ 600.374340][ T38] [ 600.374353][ T38] INFO: task syz-executor:10838 blocked for more than 143 seconds. [ 600.374370][ T38] Not tainted syzkaller #0 [ 600.374381][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.374391][ T38] task:syz-executor state:D stack:25752 pid:10838 tgid:10838 ppid:1 task_flags:0x400140 flags:0x00080002 [ 600.374458][ T38] Call Trace: [ 600.374465][ T38] [ 600.374479][ T38] __schedule+0x1681/0x54c0 [ 600.374542][ T38] ? __pfx___schedule+0x10/0x10 [ 600.374586][ T38] rt_mutex_schedule+0x76/0xf0 [ 600.374619][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 600.374838][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 600.374881][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 600.374906][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 600.374943][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 600.374982][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 600.375022][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 600.375053][ T38] mutex_lock_nested+0x168/0x1d0 [ 600.375095][ T38] inet_rtm_newaddr+0x404/0x1ad0 [ 600.375128][ T38] ? __kernel_text_address+0xd/0x30 [ 600.375171][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 600.375223][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 600.375257][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 600.375290][ T38] ? kasan_save_track+0x3e/0x80 [ 600.375322][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 600.375360][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 600.375393][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.375428][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 600.375470][ T38] netlink_rcv_skb+0x232/0x4b0 [ 600.375508][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.375544][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.375594][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.375623][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.375657][ T38] netlink_unicast+0x780/0x920 [ 600.375703][ T38] netlink_sendmsg+0x813/0xb40 [ 600.375735][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.375768][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.375801][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.375826][ T38] __sys_sendto+0x67f/0x710 [ 600.375874][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 600.375927][ T38] ? exc_page_fault+0x6a/0xc0 [ 600.375961][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 600.376003][ T38] __x64_sys_sendto+0xde/0x100 [ 600.376027][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.376054][ T38] do_syscall_64+0x15f/0xf80 [ 600.376082][ T38] ? trace_irq_disable+0x3b/0x140 [ 600.376105][ T38] ? clear_bhb_loop+0x40/0x90 [ 600.376135][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.376159][ T38] RIP: 0033:0x7f126e16d04e [ 600.376181][ T38] RSP: 002b:00007ffc03d23e08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 600.376209][ T38] RAX: ffffffffffffffda RBX: 00005555712d9500 RCX: 00007f126e16d04e [ 600.376226][ T38] RDX: 0000000000000028 RSI: 00007f126ef54670 RDI: 0000000000000003 [ 600.376241][ T38] RBP: 0000000000000001 R08: 00007ffc03d23e84 R09: 000000000000000c [ 600.376256][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 600.376270][ T38] R13: 0000000000000000 R14: 00007f126ef54670 R15: 0000000000000000 [ 600.376305][ T38] [ 600.376318][ T38] INFO: task syz.2.2272:10849 blocked for more than 143 seconds. [ 600.376336][ T38] Not tainted syzkaller #0 [ 600.376348][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.376359][ T38] task:syz.2.2272 state:D stack:27200 pid:10849 tgid:10847 ppid:5811 task_flags:0x400040 flags:0x00080002 [ 600.376430][ T38] Call Trace: [ 600.376438][ T38] [ 600.376453][ T38] __schedule+0x1681/0x54c0 [ 600.376491][ T38] ? kernel_text_address+0xa5/0xe0 [ 600.376523][ T38] ? __kernel_text_address+0xd/0x30 [ 600.376570][ T38] ? __pfx___schedule+0x10/0x10 [ 600.376615][ T38] rt_mutex_schedule+0x76/0xf0 [ 600.376649][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 600.376706][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 600.376732][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 600.376757][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 600.376793][ T38] ? rtnl_dumpit+0x92/0x200 [ 600.376839][ T38] ? rtnl_dumpit+0x92/0x200 [ 600.376879][ T38] mutex_lock_nested+0x168/0x1d0 [ 600.376915][ T38] ? __pfx_rtnl_dump_all+0x10/0x10 [ 600.376949][ T38] rtnl_dumpit+0x92/0x200 [ 600.376986][ T38] netlink_dump+0x702/0xe10 [ 600.377033][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 600.377094][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.377136][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 600.377180][ T38] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 600.377217][ T38] ? __pfx_rtnl_dump_all+0x10/0x10 [ 600.377249][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 600.377283][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.377314][ T38] ? ref_tracker_free+0x673/0x820 [ 600.377341][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 600.377374][ T38] ? __pfx_rtnl_dump_all+0x10/0x10 [ 600.377407][ T38] ? __asan_memcpy+0x40/0x70 [ 600.377453][ T38] ? __skb_clone+0x63/0x7a0 [ 600.377488][ T38] netlink_rcv_skb+0x232/0x4b0 [ 600.377525][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.377558][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.377606][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.377640][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.377680][ T38] netlink_unicast+0x780/0x920 [ 600.377723][ T38] netlink_sendmsg+0x813/0xb40 [ 600.377755][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.377787][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.377824][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 600.377864][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.377901][ T38] ? import_iovec+0x73/0xa0 [ 600.377935][ T38] ___sys_sendmsg+0x2a5/0x360 [ 600.377959][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 600.377993][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.378026][ T38] ? futex_wait+0x2a2/0x390 [ 600.378088][ T38] ? __fget_files+0x2a/0x420 [ 600.378122][ T38] ? __fget_files+0x3a6/0x420 [ 600.378164][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 600.378193][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.378229][ T38] ? rcu_is_watching+0x15/0xb0 [ 600.378272][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.378299][ T38] do_syscall_64+0x15f/0xf80 [ 600.378328][ T38] ? trace_irq_disable+0x3b/0x140 [ 600.378352][ T38] ? clear_bhb_loop+0x40/0x90 [ 600.378381][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.378405][ T38] RIP: 0033:0x7f396950c819 [ 600.378425][ T38] RSP: 002b:00007f396775e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.378450][ T38] RAX: ffffffffffffffda RBX: 00007f3969785fa0 RCX: 00007f396950c819 [ 600.378467][ T38] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 600.378482][ T38] RBP: 00007f39695a2c91 R08: 0000000000000000 R09: 0000000000000000 [ 600.378503][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.378524][ T38] R13: 00007f3969786038 R14: 00007f3969785fa0 R15: 00007ffe7dc3e718 [ 600.378563][ T38] [ 600.378582][ T38] [ 600.378582][ T38] Showing all locks held in the system: [ 600.378593][ T38] 5 locks held by kworker/u8:1/13: [ 600.378606][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 600.378676][ T38] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 600.378741][ T38] #2: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 600.378807][ T38] #3: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 600.378878][ T38] #4: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 600.378943][ T38] 5 locks held by rcuc/1/28: [ 600.378956][ T38] 1 lock held by khungtaskd/38: [ 600.378969][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 600.379030][ T38] 3 locks held by kworker/u8:3/56: [ 600.379043][ T38] #0: ffff888032012138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 600.379107][ T38] #1: ffffc9000122fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 600.379175][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 600.379253][ T38] 3 locks held by kworker/u8:15/3528: [ 600.379266][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 600.379331][ T38] #1: ffffc9000e1d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 600.379395][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 600.379459][ T38] 1 lock held by dhcpcd/5470: [ 600.379472][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 600.379531][ T38] 2 locks held by getty/5571: [ 600.379544][ T38] #0: ffff8880373c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 600.379602][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 600.379656][ T38] 9 locks held by syz-executor/5806: [ 600.379678][ T38] 3 locks held by kworker/1:6/6011: [ 600.379690][ T38] #0: ffff88801a04b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 600.379756][ T38] #1: ffffc900057bfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 600.379820][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 600.379894][ T38] 5 locks held by kworker/u8:4/10389: [ 600.379908][ T38] 1 lock held by syz-executor/10522: [ 600.379920][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 600.379977][ T38] 8 locks held by kworker/u8:6/10635: [ 600.379990][ T38] 1 lock held by syz-executor/10838: [ 600.380003][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.380066][ T38] 2 locks held by syz.2.2272/10849: [ 600.380078][ T38] #0: ffff888024e02928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 600.725733][ T38] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 600.725802][ T38] 1 lock held by syz.3.2306/10935: [ 600.725818][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 600.725929][ T38] 1 lock held by syz-executor/10940: [ 600.725943][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726009][ T38] 2 locks held by syz.4.2319/10964: [ 600.726023][ T38] #0: ffffffff8f3d7680 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 600.726078][ T38] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_set_features+0x228/0xca0 [ 600.726141][ T38] 1 lock held by syz-executor/10993: [ 600.726154][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726218][ T38] 1 lock held by syz-executor/11021: [ 600.726231][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726295][ T38] 1 lock held by syz-executor/11065: [ 600.726308][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726369][ T38] 1 lock held by syz-executor/11103: [ 600.726382][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726445][ T38] 1 lock held by syz-executor/11147: [ 600.726458][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726521][ T38] 1 lock held by syz-executor/11169: [ 600.726534][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726598][ T38] 1 lock held by syz-executor/11204: [ 600.726611][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726662][ T38] 1 lock held by syz-executor/11255: [ 600.726672][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 600.726730][ T38] [ 600.726736][ T38] ============================================= [ 600.726736][ T38] [ 600.726746][ T38] NMI backtrace for cpu 1 [ 600.726764][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.726790][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.726804][ T38] Call Trace: [ 600.726813][ T38] [ 600.726824][ T38] dump_stack_lvl+0xe8/0x150 [ 600.726861][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 600.726907][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.726944][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 600.726983][ T38] sys_info+0x135/0x170 [ 600.727014][ T38] watchdog+0xfd3/0x1030 [ 600.727045][ T38] ? watchdog+0x1c9/0x1030 [ 600.727073][ T38] kthread+0x388/0x470 [ 600.727101][ T38] ? __pfx_watchdog+0x10/0x10 [ 600.727121][ T38] ? __pfx_kthread+0x10/0x10 [ 600.727148][ T38] ret_from_fork+0x514/0xb70 [ 600.727187][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 600.727222][ T38] ? __switch_to+0xc79/0x1410 [ 600.727255][ T38] ? __pfx_kthread+0x10/0x10 [ 600.727283][ T38] ret_from_fork_asm+0x1a/0x30 [ 600.727325][ T38] [ 600.727334][ T38] Sending NMI from CPU 1 to CPUs 0: [ 600.727374][ C0] NMI backtrace for cpu 0 [ 600.727392][ C0] CPU: 0 UID: 0 PID: 10635 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.727412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.727424][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 600.727446][ C0] RIP: 0010:check_preemption_disabled+0x5/0xe0 [ 600.727471][ C0] Code: 48 c7 c6 40 30 a7 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 <53> 65 8b 05 a7 af 46 07 65 8b 0d 9c af 46 07 f7 c1 ff ff ff 7f 74 [ 600.727486][ C0] RSP: 0018:ffffc900049767d8 EFLAGS: 00000283 [ 600.727501][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 600.727512][ C0] RDX: 0000000000000000 RSI: ffffffff8ba73040 RDI: ffffffff8ba73000 [ 600.727524][ C0] RBP: ffffffff81770226 R08: 0000000000000000 R09: 0000000000000000 [ 600.727536][ C0] R10: ffffc900049769d8 R11: ffffffff81afbb00 R12: 0000000000000002 [ 600.727547][ C0] R13: ffffffff8dfc80c0 R14: 0000000000000000 R15: 0000000000000000 [ 600.727559][ C0] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 600.727572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.727585][ C0] CR2: 00007f4aef6b6038 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 600.727603][ C0] Call Trace: [ 600.727609][ C0] [ 600.727617][ C0] ? unwind_next_frame+0xa6/0x2550 [ 600.727670][ C0] rcu_is_watching+0x15/0xb0 [ 600.727694][ C0] lock_acquire+0x5f/0x350 [ 600.727716][ C0] ? unwind_next_frame+0xa6/0x2550 [ 600.727733][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 600.727753][ C0] ? unwind_next_frame+0xa6/0x2550 [ 600.727770][ C0] unwind_next_frame+0xc3/0x2550 [ 600.727787][ C0] ? unwind_next_frame+0xa6/0x2550 [ 600.727808][ C0] ? unwind_next_frame+0xa6/0x2550 [ 600.727826][ C0] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 600.727844][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 600.727863][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.727889][ C0] arch_stack_walk+0x11b/0x150 [ 600.727910][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 600.727931][ C0] stack_trace_save+0xa9/0x100 [ 600.727947][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 600.727962][ C0] ? kfree+0x1c5/0x6c0 [ 600.727985][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 600.728002][ C0] ? nft_do_chain+0x467/0x19f0 [ 600.728021][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 600.728039][ C0] ? nf_hook_slow+0xc5/0x220 [ 600.728058][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 600.728076][ C0] kasan_save_track+0x3e/0x80 [ 600.728099][ C0] ? kasan_save_track+0x3e/0x80 [ 600.728119][ C0] ? kasan_save_free_info+0x46/0x50 [ 600.728137][ C0] ? __kasan_slab_free+0x5c/0x80 [ 600.728159][ C0] ? kmem_cache_free+0x187/0x6c0 [ 600.728173][ C0] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 600.728190][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 600.728230][ C0] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 600.728248][ C0] kasan_save_free_info+0x46/0x50 [ 600.728267][ C0] __kasan_slab_free+0x5c/0x80 [ 600.728291][ C0] kmem_cache_free+0x187/0x6c0 [ 600.728306][ C0] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 600.728327][ C0] nft_synproxy_eval_v4+0x352/0x4e0 [ 600.728349][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 600.728369][ C0] ? nf_ip_checksum+0x13c/0x510 [ 600.728391][ C0] nft_synproxy_do_eval+0x305/0x580 [ 600.728413][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 600.728435][ C0] ? ktime_get+0x45/0x220 [ 600.728454][ C0] nft_do_chain+0x467/0x19f0 [ 600.728476][ C0] ? nft_do_chain+0x1745/0x19f0 [ 600.728500][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 600.728534][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 600.728555][ C0] nft_do_chain_inet+0x360/0x4b0 [ 600.728576][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 600.728600][ C0] ? NF_HOOK+0x9e/0x3c0 [ 600.728627][ C0] ? NF_HOOK+0x9e/0x3c0 [ 600.728646][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 600.728667][ C0] nf_hook_slow+0xc5/0x220 [ 600.728686][ C0] NF_HOOK+0x21f/0x3c0 [ 600.728706][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 600.728726][ C0] ? NF_HOOK+0x9e/0x3c0 [ 600.728744][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 600.728762][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 600.728784][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 600.728806][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 600.728828][ C0] NF_HOOK+0x336/0x3c0 [ 600.728845][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.728868][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 600.728887][ C0] ? NF_HOOK+0x9e/0x3c0 [ 600.728905][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 600.728926][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 600.728948][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 600.728967][ C0] ? process_backlog+0x271/0xc60 [ 600.728989][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 600.729009][ C0] process_backlog+0x569/0xc60 [ 600.729040][ C0] __napi_poll+0xab/0x550 [ 600.729063][ C0] net_rx_action+0x696/0xe00 [ 600.729093][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 600.729114][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 600.729138][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 600.729160][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.729187][ C0] handle_softirqs+0x1de/0x6d0 [ 600.729216][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 600.729240][ C0] ? __alloc_skb+0x186/0x7d0 [ 600.729265][ C0] __alloc_skb+0x1aa/0x7d0 [ 600.729291][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 600.729323][ C0] ? process_scheduled_works+0xa70/0x1860 [ 600.729349][ C0] process_scheduled_works+0xb5d/0x1860 [ 600.729386][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.729414][ C0] ? assign_work+0x3d5/0x5e0 [ 600.729440][ C0] worker_thread+0xa53/0xfc0 [ 600.729468][ C0] kthread+0x388/0x470 [ 600.729487][ C0] ? __pfx_worker_thread+0x10/0x10 [ 600.729501][ C0] ? __pfx_kthread+0x10/0x10 [ 600.729521][ C0] ret_from_fork+0x514/0xb70 [ 600.729547][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 600.729571][ C0] ? __switch_to+0xc79/0x1410 [ 600.729594][ C0] ? __pfx_kthread+0x10/0x10 [ 600.729613][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.729644][ C0] [ 600.754491][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 600.754518][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.754560][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.754581][ T38] Call Trace: [ 600.754591][ T38] [ 600.754601][ T38] vpanic+0x56c/0xa60 [ 600.754630][ T38] ? __pfx___schedule+0x10/0x10 [ 600.754660][ T38] ? __pfx_vpanic+0x10/0x10 [ 600.754694][ T38] panic+0xc5/0xd0 [ 600.754717][ T38] ? __pfx_panic+0x10/0x10 [ 600.754741][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 600.754778][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 600.754818][ T38] watchdog+0x102c/0x1030 [ 600.754849][ T38] ? watchdog+0x1c9/0x1030 [ 600.754877][ T38] kthread+0x388/0x470 [ 600.754905][ T38] ? __pfx_watchdog+0x10/0x10 [ 600.754924][ T38] ? __pfx_kthread+0x10/0x10 [ 600.754953][ T38] ret_from_fork+0x514/0xb70 [ 600.754992][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 600.755027][ T38] ? __switch_to+0xc79/0x1410 [ 600.755060][ T38] ? __pfx_kthread+0x10/0x10 [ 600.755089][ T38] ret_from_fork_asm+0x1a/0x30 [ 600.755129][ T38] [ 600.755671][ T38] Kernel Offset: disabled