last executing test programs: 3m27.88375078s ago: executing program 1 (id=17157): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441d3e189e87fe30600000000000f000200", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x2) 3m27.859249986s ago: executing program 1 (id=17158): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x159b, &(0x7f0000000140)={0x0, 0x9e3e, 0x400, 0x80000, 0x199}, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m27.828465865s ago: executing program 1 (id=17159): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) 3m27.743917846s ago: executing program 1 (id=17160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 3m27.743626157s ago: executing program 1 (id=17161): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa2280, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) close(r0) 3m27.275022644s ago: executing program 1 (id=17172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3m27.230102727s ago: executing program 32 (id=17172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2m43.342425998s ago: executing program 3 (id=18588): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) 2m43.290742179s ago: executing program 3 (id=18591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m42.366788742s ago: executing program 3 (id=18595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000340)=0x8082000) 2m42.23609497s ago: executing program 3 (id=18603): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) move_mount(r0, 0x0, r0, 0x0, 0x65) 2m42.159544271s ago: executing program 3 (id=18607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 2m42.154924238s ago: executing program 3 (id=18610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2m29.016164049s ago: executing program 2 (id=18998): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 2m28.942505507s ago: executing program 2 (id=18999): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000140)='./file2\x00') 2m28.942125242s ago: executing program 2 (id=19000): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0xca7}}, 0x1006) 2m28.887543709s ago: executing program 2 (id=19002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m28.878768004s ago: executing program 2 (id=19004): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 2m28.801009188s ago: executing program 2 (id=19006): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) 2m26.086556198s ago: executing program 33 (id=18610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2m12.71936223s ago: executing program 34 (id=19006): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) 1m13.120136503s ago: executing program 6 (id=20411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r1, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 1m13.059304376s ago: executing program 6 (id=20414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r0, 0x4, r0}, 0x7) 1m13.058151148s ago: executing program 6 (id=20415): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 1m12.997656788s ago: executing program 6 (id=20418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m12.946161842s ago: executing program 6 (id=20420): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 1m11.386372016s ago: executing program 6 (id=20461): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400001c140000fe"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 1m11.30445965s ago: executing program 35 (id=20461): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400001c140000fe"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 1.134506284s ago: executing program 0 (id=21495): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0xffffffffffffffff, 0x0, 0x0}) 1.060061052s ago: executing program 0 (id=21497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 1.043180126s ago: executing program 0 (id=21500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)='3', 0x1, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x61}, 0x14) 1.029315684s ago: executing program 5 (id=21501): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0x800a9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7f, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x10, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0xb, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x7f67, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1935, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x5c, 0x30b1d693, 0xa, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 957.532136ms ago: executing program 0 (id=21502): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 957.287871ms ago: executing program 5 (id=21503): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$1(0x1, &(0x7f0000000080)='ext4\x00') 768.600862ms ago: executing program 5 (id=21509): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 692.210835ms ago: executing program 5 (id=21512): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) 636.996147ms ago: executing program 5 (id=21513): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014001a80100004800c00"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 636.661093ms ago: executing program 5 (id=21515): capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) clock_nanosleep(0x2, 0x3f, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 273.02747ms ago: executing program 4 (id=21523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 166.908583ms ago: executing program 7 (id=21524): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000004640), 0x40000000000021d, 0x4048044) 165.468116ms ago: executing program 4 (id=21525): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x50, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x3c, 0x1, [@m_mirred={0x38, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x9, 0x6, "040000004c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x0) 159.824472ms ago: executing program 7 (id=21526): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 125.549223ms ago: executing program 4 (id=21527): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 121.772496ms ago: executing program 7 (id=21528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0xa, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) 113.337884ms ago: executing program 4 (id=21529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}]}]}, 0x38}}, 0x4000) 64.803972ms ago: executing program 0 (id=21530): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x2) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x3, 0x0) 64.104839ms ago: executing program 4 (id=21531): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xe503, 0x0) 55.714575ms ago: executing program 7 (id=21538): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, 0x0, 0x8004) 3.61283ms ago: executing program 4 (id=21532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x44}}, 0x0) 3.145347ms ago: executing program 7 (id=21533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x40, r0, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}]}]}, 0x40}}, 0x4004880) 2.960397ms ago: executing program 0 (id=21534): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000004640), 0x40000000000021d, 0x4048044) 0s ago: executing program 7 (id=21535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): omm="syz.0.19024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 391.727637][ T40] audit: type=1326 audit(370.740:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.0.19024" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 391.816881][T13408] veth0: entered promiscuous mode [ 391.818850][T13407] veth0: left promiscuous mode [ 391.904052][T13417] loop4: detected capacity change from 0 to 128 [ 392.132195][T13431] tipc: Enabling of bearer rejected, media not registered [ 392.551757][T13463] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 392.635425][T13471] sctp: [Deprecated]: syz.4.19059 (pid 13471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.635425][T13471] Use struct sctp_sack_info instead [ 392.735288][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19068'. [ 392.972938][T13495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19067'. [ 393.001832][T13497] xt_limit: Overflow, try lower: 271964/0 [ 393.057390][T13501] [U] [ 393.058572][T13501] [U] [ 393.059452][T13501] [U] [ 393.060597][T13501] [U] [ 393.061616][T13501] [U] [ 393.062500][T13501] [U] [ 393.063616][T13501] [U] [ 393.064533][T13501] [U] [ 393.065669][T13501] [U] [ 393.066582][T13501] [U] [ 393.067559][T13501] [U] [ 393.068455][T13501] [U] [ 393.069363][T13501] [U] [ 393.070332][T13501] [U] [ 393.071396][T13501] [U] [ 393.072269][T13501] [U] [ 393.073267][T13501] [U] [ 393.074142][T13501] [U] [ 393.075020][T13501] [U] [ 393.075933][T13501] [U] [ 393.077089][T13501] [U] [ 393.077972][T13501] [U] [ 393.078858][T13501] [U] [ 393.079746][T13501] [U] [ 393.080713][T13501] [U] [ 393.081583][T13501] [U] [ 393.082459][T13501] [U] [ 393.083332][T13501] [U] [ 393.084335][T13501] [U] [ 393.085206][T13501] [U] [ 393.086161][T13501] [U] [ 393.087062][T13501] [U] [ 393.088665][T13501] [U] [ 393.089659][T13501] [U] [ 393.090568][T13501] [U] [ 393.091460][T13501] [U] [ 393.092350][T13501] [U] [ 393.093236][T13501] [U] [ 393.094134][T13501] [U] [ 393.095038][T13501] [U] [ 393.096277][T13501] [U] [ 393.097229][T13501] [U] [ 393.098119][T13501] [U] [ 393.099017][T13501] [U] [ 393.108198][T13501] [U] [ 393.109159][T13501] [U] [ 393.110029][T13501] [U] [ 393.110921][T13501] [U] [ 393.111887][T13501] [U] [ 393.112783][T13501] [U] [ 393.113800][T13501] [U] [ 393.114752][T13501] [U] [ 393.115827][T13501] [U] [ 393.116753][T13501] [U] [ 393.117650][T13501] [U] [ 393.118558][T13501] [U] [ 393.119583][T13501] [U] [ 393.120481][T13501] [U] [ 393.121383][T13501] [U] [ 393.122263][T13501] [U] [ 393.123191][T13501] [U] [ 393.124049][T13501] [U] [ 393.124928][T13501] [U] [ 393.125808][T13501] [U] [ 393.126766][T13501] [U] [ 393.127669][T13501] [U] [ 393.128565][T13501] [U] [ 393.129456][T13501] [U] [ 393.130669][T13501] [U] [ 393.131563][T13501] [U] [ 393.132462][T13501] [U] [ 393.133355][T13501] [U] [ 393.134319][T13501] [U] [ 393.135232][T13501] [U] [ 393.136143][T13501] [U] [ 393.137029][T13501] [U] [ 393.137992][T13501] [U] [ 393.138898][T13501] [U] [ 393.139790][T13501] [U] [ 393.140665][T13501] [U] [ 393.141681][T13501] [U] [ 393.142578][T13501] [U] [ 393.143471][T13501] [U] [ 393.144357][T13501] [U] [ 393.145305][T13501] [U] [ 393.146225][T13501] [U] [ 393.147128][T13501] [U] [ 393.148008][T13501] [U] [ 393.148965][T13501] [U] [ 393.149853][T13501] [U] [ 393.150775][T13501] [U] [ 393.151662][T13501] [U] [ 393.153445][T13501] [U] [ 393.154461][T13501] [U] [ 393.155391][T13501] [U] [ 393.156221][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19074'. [ 393.156283][T13501] [U] [ 393.160579][T13501] [U] [ 393.161552][T13501] [U] [ 393.162443][T13501] [U] [ 393.163351][T13501] [U] [ 393.164847][T13501] [U] [ 393.165770][T13501] [U] [ 393.166675][T13501] [U] [ 393.167559][T13501] [U] [ 393.168786][T13501] [U] [ 393.169712][T13501] [U] [ 393.170627][T13501] [U] [ 393.171526][T13501] [U] [ 393.174134][T13501] [U] [ 393.175037][T13501] [U] [ 393.176020][T13501] [U] [ 393.176950][T13501] [U] [ 393.177910][T13501] [U] [ 393.178813][T13501] [U] [ 393.179720][T13501] [U] [ 393.180602][T13501] [U] [ 393.182988][T13501] [U] [ 393.183900][T13501] [U] [ 393.184788][T13501] [U] [ 393.185700][T13501] [U] [ 393.186606][T13501] [U] [ 393.187485][T13501] [U] [ 393.188374][T13501] [U] [ 393.189258][T13501] [U] [ 393.190185][T13501] [U] [ 393.191109][T13501] [U] [ 393.191990][T13501] [U] [ 393.206206][T13500] [U] [ 394.124219][ T5306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.129192][ T5306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.132119][ T5306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.138694][ T5306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.141129][ T5306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.165162][T13569] wg2 speed is unknown, defaulting to 1000 [ 394.409769][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19113'. [ 394.412609][ T54] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 394.513593][T13569] wg1 speed is unknown, defaulting to 1000 [ 394.584997][ T54] usb 9-1: Using ep0 maxpacket: 16 [ 394.587978][ T54] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 394.591564][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 70, changing to 10 [ 394.596000][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 49765, setting to 1024 [ 394.599457][ T54] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.603614][ T54] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 394.606545][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.610903][ T54] usb 9-1: config 0 descriptor?? [ 394.617049][ T54] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input61 [ 394.937638][ T6241] usb 9-1: USB disconnect, device number 3 [ 395.058864][ T1189] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 395.065102][ T1189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.068809][ T1189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.133492][ T841] wg1 speed is unknown, defaulting to 1000 [ 395.135533][ T841] syz0: Port: 1 Link DOWN [ 395.137549][ T29] wg2 speed is unknown, defaulting to 1000 [ 395.139581][ T29] syz2: Port: 1 Link DOWN [ 395.143298][ T29] wg2 speed is unknown, defaulting to 1000 [ 395.407610][ T1189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.410857][ T1189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.463104][T13569] chnl_net:caif_netlink_parms(): no params data found [ 395.697385][ T1189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.700609][ T1189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.760723][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.763639][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.766555][T13569] bridge_slave_0: entered allmulticast mode [ 395.782954][T13569] bridge_slave_0: entered promiscuous mode [ 395.792074][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.795010][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.797366][T13569] bridge_slave_1: entered allmulticast mode [ 395.800689][T13569] bridge_slave_1: entered promiscuous mode [ 396.043988][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.049601][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.073676][T13569] team0: Port device team_slave_0 added [ 396.077429][T13569] team0: Port device team_slave_1 added [ 396.100959][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.103577][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.122547][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.127027][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.129190][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.139129][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.169275][T13569] hsr_slave_0: entered promiscuous mode [ 396.171643][T13569] hsr_slave_1: entered promiscuous mode [ 396.173788][T13569] debugfs: 'hsr0' already exists in 'hsr' [ 396.175631][T13569] Cannot create hsr debugfs directory [ 396.180188][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19150'. [ 396.336423][ T6143] Bluetooth: hci4: command tx timeout [ 397.950939][ T1189] dvmrp9 (unregistering): left allmulticast mode [ 398.380469][T13764] blktrace: Concurrent blktraces are not allowed on sg0 [ 398.488605][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19198'. [ 398.529443][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 398.529459][ T40] audit: type=1326 audit(377.110:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.541164][ T40] audit: type=1326 audit(377.120:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.552564][ T40] audit: type=1326 audit(377.129:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.562842][ T40] audit: type=1326 audit(377.129:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.571659][ T6143] Bluetooth: hci4: command tx timeout [ 398.574209][ T40] audit: type=1326 audit(377.129:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.583568][ T40] audit: type=1326 audit(377.129:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.592372][ T40] audit: type=1326 audit(377.129:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.4.19199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 398.687320][T13776] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.073357][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19209'. [ 399.278006][ T1189] bond1 (unregistering): Released all slaves [ 399.284837][ T1189] bond2 (unregistering): Released all slaves [ 399.297816][ T1189] bond3 (unregistering): Released all slaves [ 399.309252][ T1189] bond0 (unregistering): Released all slaves [ 399.323161][ T1189] bond4 (unregistering): Released all slaves [ 399.340803][ T1189] bond5 (unregistering): Released all slaves [ 399.483688][ T1189] : left promiscuous mode [ 399.616540][T13569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.643710][T13569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.710631][ T1189] : left promiscuous mode [ 399.821680][T13569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.877249][T13569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.939613][ T1189] tipc: Disabling bearer [ 399.976112][ T1189] tipc: Left network mode [ 400.017551][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.034058][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.040969][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.043340][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.074104][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.076264][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.208146][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.487698][T13569] veth0_vlan: entered promiscuous mode [ 400.492603][T13569] veth1_vlan: entered promiscuous mode [ 400.591264][T13569] veth0_macvtap: entered promiscuous mode [ 400.595254][T13569] veth1_macvtap: entered promiscuous mode [ 400.604415][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.614436][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.621229][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.626530][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.655643][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.667376][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.783071][ T6143] Bluetooth: hci4: command tx timeout [ 400.869060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.873068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.876986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.880912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.884819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.888706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.892650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.896528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.900444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 400.904332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 401.075807][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.078614][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.994862][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.001629][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.017281][ T6143] Bluetooth: hci4: command tx timeout [ 403.172789][T13926] netlink: 'syz.5.19249': attribute type 4 has an invalid length. [ 403.175623][T13926] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19249'. [ 403.981924][T13963] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 404.051090][T13972] smc: net device wlan1 erased user defined pnetid SYZ1 [ 404.055657][T13972] smc: net device bond0 erased user defined pnetid SYZ0 [ 404.055917][T13972] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 404.179428][ T1189] hsr_slave_0: left promiscuous mode [ 404.221968][ T1189] hsr_slave_1: left promiscuous mode [ 404.224763][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.232166][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.264728][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.267444][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.364235][ T1189] batadv_slave_1: left promiscuous mode [ 404.385395][ T1189] veth1_macvtap: left promiscuous mode [ 404.387323][ T1189] veth0_macvtap: left promiscuous mode [ 404.730228][T14027] CIFS mount error: No usable UNC path provided in device string! [ 404.730228][T14027] [ 404.748770][T14027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 404.987898][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.223937][ C1] net_ratelimit: 34910 callbacks suppressed [ 406.223950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 406.229746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.233605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 406.237531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.241416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 406.245334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.249285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 406.253139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.257013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 406.260854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.509461][ T5306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.520969][ T5306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.532439][ T5306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.536694][ T5306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.550131][ T5306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.050258][ T5003] smc: removing ib device syz2 [ 409.763246][ T5306] Bluetooth: hci3: command tx timeout [ 410.382497][T14065] xt_bpf: check failed: parse error [ 410.603915][T14042] chnl_net:caif_netlink_parms(): no params data found [ 410.838913][T14042] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.841317][T14042] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.848750][T14042] bridge_slave_0: entered allmulticast mode [ 410.861861][T14042] bridge_slave_0: entered promiscuous mode [ 410.866517][T14042] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.868825][T14042] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.871231][T14042] bridge_slave_1: entered allmulticast mode [ 410.882404][T14042] bridge_slave_1: entered promiscuous mode [ 410.932787][T14042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.937649][T14042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.967313][T14042] team0: Port device team_slave_0 added [ 410.971412][T14042] team0: Port device team_slave_1 added [ 410.987650][T14042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.989913][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.999042][T14042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.003527][T14042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.007066][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.015446][T14042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.039719][T14042] hsr_slave_0: entered promiscuous mode [ 411.042288][T14042] hsr_slave_1: entered promiscuous mode [ 411.044547][T14042] debugfs: 'hsr0' already exists in 'hsr' [ 411.046520][T14042] Cannot create hsr debugfs directory [ 411.516778][T14139] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19347'. [ 411.519772][T14139] netlink: 'syz.5.19347': attribute type 6 has an invalid length. [ 411.527232][T14139] netlink: 'syz.5.19347': attribute type 5 has an invalid length. [ 411.529705][T14139] netlink: 'syz.5.19347': attribute type 4 has an invalid length. [ 411.579274][ C1] net_ratelimit: 37198 callbacks suppressed [ 411.579287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 411.585470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.589451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 411.593437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.597451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 411.601394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.605357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 411.609368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.613418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 411.617375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.688981][T14042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.748394][ T1189] IPVS: stop unused estimator thread 0... [ 411.751827][T14042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.839212][T14042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.989385][ T5306] Bluetooth: hci3: command tx timeout [ 412.090313][T14042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.418101][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19370'. [ 412.920736][ T1189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.982137][T14042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.025025][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19389'. [ 413.228252][ T1189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.283019][T14042] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.288002][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.290304][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.311277][ T5003] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.314221][ T5003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.556293][ T1189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.607807][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19408'. [ 413.668125][T14299] netlink: 'syz.4.19407': attribute type 11 has an invalid length. [ 413.671259][T14299] netlink: 'syz.4.19407': attribute type 11 has an invalid length. [ 413.699449][T14299] netlink: 204 bytes leftover after parsing attributes in process `syz.4.19407'. [ 413.801153][T14312] overlayfs: regular lower layers cannot follow data lower layers [ 414.014170][ T1189] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.080123][T14042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.208839][ T5306] Bluetooth: hci3: command tx timeout [ 414.341648][T14351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19428'. [ 415.472972][T14367] tmpfs: Cannot disable swap on remount [ 415.493548][T14042] veth0_vlan: entered promiscuous mode [ 415.500707][T14042] veth1_vlan: entered promiscuous mode [ 415.609454][T14379] 9pnet_virtio: no channels available for device 3$~VP [ 415.864806][ T40] audit: type=1326 audit(393.323:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.872053][ T40] audit: type=1326 audit(393.332:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.880952][ T40] audit: type=1326 audit(393.332:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.888333][ T40] audit: type=1326 audit(393.332:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.894898][ T40] audit: type=1326 audit(393.332:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.903872][ T40] audit: type=1326 audit(393.332:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.911174][ T40] audit: type=1326 audit(393.342:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.943222][ T40] audit: type=1326 audit(393.342:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.958859][ T40] audit: type=1326 audit(393.342:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=99 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 415.967128][ T40] audit: type=1326 audit(393.342:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.4.19451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 416.432133][ T5306] Bluetooth: hci3: command tx timeout [ 416.934452][ C1] net_ratelimit: 36991 callbacks suppressed [ 416.934464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.940276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 416.944206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.948226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 416.952209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.956208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 416.960133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.964076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 416.967982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.971980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 419.126262][ T1189] bond0 (unregistering): Released all slaves [ 419.136342][ T1189] bond1 (unregistering): Released all slaves [ 419.143263][ T1189] bond2 (unregistering): Released all slaves [ 419.150621][ T1189] bond3 (unregistering): Released all slaves [ 419.159135][ T1189] bond4 (unregistering): Released all slaves [ 419.969032][ T1189] bond5 (unregistering): Released all slaves [ 420.744598][ T1189] bond6 (unregistering): Released all slaves [ 420.755759][ T1189] bond7 (unregistering): Released all slaves [ 420.817111][T14042] veth0_macvtap: entered promiscuous mode [ 420.837180][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19455'. [ 420.878235][ T1189] : left promiscuous mode [ 421.090632][T14042] veth1_macvtap: entered promiscuous mode [ 421.137322][T14042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.151029][T14042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.165150][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.169704][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.172798][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.268813][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.276028][ T1189] tipc: Disabling bearer [ 421.354567][ T1189] tipc: Left network mode [ 421.583480][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.593859][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.612270][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.614985][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.651888][ T1189] IPVS: stopping master sync thread 6828 ... [ 421.680698][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 421.851531][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 421.856041][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 421.859117][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 421.875948][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 421.879058][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 421.895510][ T10] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 421.898552][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.905688][ T10] usb 10-1: Product: syz [ 421.907190][ T10] usb 10-1: Manufacturer: syz [ 421.908741][ T10] usb 10-1: SerialNumber: syz [ 421.917673][ T10] usb 10-1: config 0 descriptor?? [ 422.029699][T14478] loop6: detected capacity change from 0 to 524288000 [ 422.160119][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input62 [ 422.178748][ T5340] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 422.289787][ C1] net_ratelimit: 36817 callbacks suppressed [ 422.289799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 422.295604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.299480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 422.303325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.307244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 422.311225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.315140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 422.319005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.322883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 422.326793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.368324][T14444] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 422.438719][ T5340] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 422.478773][ T9593] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 422.485700][ T9] usb 10-1: USB disconnect, device number 2 [ 423.478301][T14529] netlink: 'syz.4.19498': attribute type 10 has an invalid length. [ 424.191871][T14569] tipc: Started in network mode [ 424.193853][T14569] tipc: Node identity ac1414aa, cluster identity 4711 [ 424.198164][T14569] tipc: Enabled bearer , priority 10 [ 424.436124][ T1189] hsr_slave_0: left promiscuous mode [ 424.520889][ T1189] 0: left promiscuous mode [ 424.533705][T14615] vivid-000: disconnect [ 424.538173][T14613] vivid-000: reconnect [ 424.615709][ T1189] veth0_macvtap: left allmulticast mode [ 424.617704][ T1189] veth0_macvtap: left promiscuous mode [ 424.621944][ T1189] veth1_vlan: left promiscuous mode [ 424.623840][ T1189] veth0_vlan: left promiscuous mode [ 427.645220][ C1] net_ratelimit: 36246 callbacks suppressed [ 427.645232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 427.651005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.654839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 427.658768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.662632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 427.666615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.670473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 427.674309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.678303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 427.682136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.817671][T14614] tipc: Cannot configure node identity twice [ 429.878649][ T6235] tipc: Node number set to 2886997162 [ 430.007015][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 430.007027][ T40] audit: type=1800 audit(406.551:432): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19543" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 430.324553][T14661] netlink: 'syz.0.19553': attribute type 3 has an invalid length. [ 431.841362][T14726] IPVS: persistence engine module ip_vs_pe_s not found [ 432.380527][T14767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19603'. [ 432.488292][T14778] netlink: 256 bytes leftover after parsing attributes in process `syz.4.19608'. [ 433.000518][ C1] net_ratelimit: 24984 callbacks suppressed [ 433.000532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 433.007015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.012383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 433.016654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.021259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 433.025685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.030669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 433.034955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.039943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 433.044154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.202742][T14815] mkiss: ax0: crc mode is auto. [ 433.474890][T14822] pimreg: entered allmulticast mode [ 433.524480][ T40] audit: type=1326 audit(409.844:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.5.19632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.533324][ T40] audit: type=1326 audit(409.844:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.5.19632" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.546477][ T40] audit: type=1326 audit(409.854:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.5.19632" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.556291][ T40] audit: type=1326 audit(409.854:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.562409][ T40] audit: type=1326 audit(409.854:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.572816][ T40] audit: type=1326 audit(409.854:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.579784][ T40] audit: type=1326 audit(409.854:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.586038][ T40] audit: type=1326 audit(409.854:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 433.875053][ T40] audit: type=1326 audit(410.172:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14853 comm="syz.5.19643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 434.104602][T14861] netlink: 'syz.6.19646': attribute type 11 has an invalid length. [ 434.107938][T14861] netlink: 'syz.6.19646': attribute type 4 has an invalid length. [ 434.110476][T14861] netlink: 199768 bytes leftover after parsing attributes in process `syz.6.19646'. [ 434.170807][T14866] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 435.444261][T14920] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 435.447078][T14920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.451244][T14920] vhci_hcd vhci_hcd.0: Device attached [ 435.455263][T14921] vhci_hcd: connection closed [ 435.455497][ T1061] vhci_hcd: stop threads [ 435.458774][ T1061] vhci_hcd: release socket [ 435.462689][ T1061] vhci_hcd: disconnect device [ 436.292876][ T54] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 436.342413][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19678'. [ 436.454721][ T54] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.457868][ T54] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 436.460442][ T54] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 436.463020][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.475634][ T54] usb 11-1: config 0 descriptor?? [ 436.486005][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 436.487959][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 436.496727][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 436.499666][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 436.501687][ T54] usb 11-1: media controller created [ 436.507555][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.519763][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 436.523064][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 436.527135][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input63 [ 436.533392][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 436.536334][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 436.701450][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 436.707543][T14929] dvb-usb: bulk message failed: -22 (2/0) [ 436.709408][ T54] dvb-usb: error while querying for an remote control event. [ 436.731462][ T54] usb 11-1: USB disconnect, device number 2 [ 436.865046][ T54] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 437.169363][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19693'. [ 437.175251][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19693'. [ 437.331459][T14993] IPVS: stopping master sync thread 11966 ... [ 437.336176][T14993] IPVS: stopping master sync thread 11965 ... [ 437.339175][T14993] IPVS: stopping master sync thread 11964 ... [ 437.341907][T14993] IPVS: stopping master sync thread 11963 ... [ 437.685412][T14445] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.691775][T14445] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.714531][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.731868][ T1189] IPVS: stop unused estimator thread 0... [ 437.957007][T15036] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 438.355919][ C1] net_ratelimit: 13046 callbacks suppressed [ 438.355932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 438.362007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.366628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 438.370768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.375363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 438.379588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.384176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 438.388378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.392817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 438.397995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.413240][ T54] IPVS: starting estimator thread 0... [ 438.426621][T15066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 438.580384][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.584450][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.676917][T15063] IPVS: using max 47 ests per chain, 112800 per kthread [ 438.766174][ T9] hid_parser_main: 8 callbacks suppressed [ 438.766186][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 438.772829][ T9] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 439.051938][T15103] fido_id[15103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 439.208006][ T9] libceph: connect (1)[c::]:6789 error -101 [ 439.210535][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 439.491682][ T9] libceph: connect (1)[c::]:6789 error -101 [ 439.494359][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 440.047544][ T9] libceph: connect (1)[c::]:6789 error -101 [ 440.049530][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 440.084446][T15133] ceph: No mds server is up or the cluster is laggy [ 440.315076][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 440.315088][ T40] audit: type=1326 audit(416.206:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15164 comm="syz.4.19780" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 440.900987][T15196] Bluetooth: MGMT ver 1.23 [ 441.833251][T15236] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 441.833251][T15236] program syz.6.19813 not setting count and/or reply_len properly [ 442.086352][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 442.892552][T15290] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.19836'. [ 443.711351][ C1] net_ratelimit: 13299 callbacks suppressed [ 443.711364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 443.717320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.721964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 443.725936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.730293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 443.734269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.738687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 443.742795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.747331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 443.751237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.441856][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19865'. [ 444.445908][T15349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19865'. [ 444.449023][T15349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19865'. [ 444.477838][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 444.533588][T15357] comedi comedi3: pcl816: I/O port conflict (0x101,16) [ 444.645950][ T7692] kernel write not supported for file /adsp1 (pid: 7692 comm: kworker/0:6) [ 444.652530][ T24] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 444.656223][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.658999][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.670400][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.683005][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.693407][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.707792][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.716360][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.719356][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.722741][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.738234][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.741944][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.745387][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.756491][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.763144][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.769425][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.773048][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.775914][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.779427][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.785979][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.788838][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.792442][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.795773][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.798606][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.803729][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 444.807476][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 444.810278][ T24] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 444.816639][ T24] usb 10-1: Product: syz [ 444.817985][ T24] usb 10-1: Manufacturer: syz [ 444.819451][ T24] usb 10-1: SerialNumber: syz [ 444.835498][ T24] usb 10-1: config 0 descriptor?? [ 444.842660][ T24] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 445.107476][T15390] bond1: invalid ARP target 0.0.0.0 specified for addition [ 445.109832][T15390] bond1: option arp_ip_target: invalid value (0) [ 445.174280][T15390] bond1 (unregistering): Released all slaves [ 445.843728][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19891'. [ 446.240066][T15421] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 446.357362][T15427] Invalid source name [ 446.359175][T15427] UBIFS error (pid: 15427): cannot open "usrquota", error -22 [ 446.506648][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19902'. [ 446.516669][T15434] ipvlan2: entered promiscuous mode [ 446.518414][T15434] ipvlan2: entered allmulticast mode [ 446.520102][T15434] dummy0: entered allmulticast mode [ 446.684323][T15446] CIFS: Unable to determine destination address [ 447.217246][ C2] usb 10-1: yurex_control_callback - control failed: -2 [ 447.222406][ T24] usb 10-1: USB disconnect, device number 3 [ 447.228873][ T24] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 447.882041][T15467] xt_l2tp: wrong L2TP version: 0 [ 448.886194][T15526] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.19947'. [ 449.066410][ C1] net_ratelimit: 13969 callbacks suppressed [ 449.066425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.072715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 449.076635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.081253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 449.086127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.092014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 449.096867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.102187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 449.107012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.111399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 449.414698][T15557] devtmpfs: Too few inodes for current use [ 449.565965][T15569] MTD: Couldn't look up 'mountinfo': -2 [ 449.593099][ T40] audit: type=1326 audit(424.887:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15572 comm="syz.5.19970" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f33579 code=0x0 [ 450.372002][T15611] nbd: must specify a size in bytes for the device [ 450.569625][T15629] tmpfs: Invalid gid '0x00000000ffffffff' [ 450.751871][T15643] rtc_cmos 00:05: Alarms can be up to one day in the future [ 450.757421][T15646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20004'. [ 450.764544][T15646] netlink: 6 bytes leftover after parsing attributes in process `syz.4.20004'. [ 451.408389][ T54] rtc_cmos 00:05: Alarms can be up to one day in the future [ 451.411578][ T54] rtc_cmos 00:05: Alarms can be up to one day in the future [ 451.414545][ T54] rtc_cmos 00:05: Alarms can be up to one day in the future [ 451.426039][ T54] rtc_cmos 00:05: Alarms can be up to one day in the future [ 451.428448][ T54] rtc rtc0: __rtc_set_alarm: err=-22 [ 451.492928][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.558339][T15688] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 451.879331][T15710] sp0: Synchronizing with TNC [ 451.994212][T15712] tc_dump_action: action bad kind [ 452.166702][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 452.248954][T15739] PKCS8: Unsupported PKCS#8 version [ 453.707842][T15778] tipc: Started in network mode [ 453.709553][T15778] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 453.712447][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 453.993318][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20075'. [ 454.421913][ C1] net_ratelimit: 13949 callbacks suppressed [ 454.421925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 454.427902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.432289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 454.436140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.440566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 454.444318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.448694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 454.452579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.456858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 454.460697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.522940][T15853] nbd: must specify an index to disconnect [ 454.754621][ T54] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 454.932969][ T54] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 454.936779][ T54] usb 9-1: config 1 has no interface number 0 [ 454.938716][ T54] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 454.942267][ T54] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 454.947895][ T54] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.953793][ T54] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 454.956803][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.959282][ T54] usb 9-1: Product: syz [ 454.960590][ T54] usb 9-1: Manufacturer: syz [ 454.962048][ T54] usb 9-1: SerialNumber: syz [ 454.966202][T15850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.067866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 455.076557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 455.085693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 455.094478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 455.106226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #141!!! [ 455.131786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 455.171303][ T24] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 455.193207][T15850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.343118][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 455.345788][ T24] usb 5-1: config 0 has no interface number 0 [ 455.347932][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.351437][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 455.354855][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 455.358893][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 455.362448][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 455.365849][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.369881][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 455.372719][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.377021][ T24] usb 5-1: config 0 descriptor?? [ 455.379410][T15875] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 455.381733][T15875] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 455.387703][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 455.436002][ T54] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 455.617817][ T10] usb 5-1: USB disconnect, device number 16 [ 455.622675][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 455.644036][ T54] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 455.646345][ T54] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 455.649145][ T54] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 455.651434][ T54] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 455.655707][ T54] usb 9-1: USB disconnect, device number 4 [ 455.658874][ T54] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 455.908716][T15891] sp0: Synchronizing with TNC [ 455.919399][T15891] sp0: Found TNC [ 456.320984][T15903] use of bytesused == 0 is deprecated and will be removed in the future, [ 456.333550][T15903] use the actual size instead. [ 456.614190][ T54] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 458.562973][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20142'. [ 458.696888][T15963] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20144'. [ 459.246603][T16003] sp0: Synchronizing with TNC [ 459.271950][T16003] [U] [ 459.280301][T16005] vivid-008: disconnect [ 459.282721][T16004] vivid-008: reconnect [ 459.777840][ C1] net_ratelimit: 14418 callbacks suppressed [ 459.777855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 459.783479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.787711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 459.791605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.795887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 459.799799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.804015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 459.807852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.812157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 459.816004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.810528][T16075] netlink: 'syz.4.20198': attribute type 4 has an invalid length. [ 460.863795][T16080] netlink: 348 bytes leftover after parsing attributes in process `syz.4.20200'. [ 460.931168][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20201'. [ 461.396124][T16117] loop9: detected capacity change from 0 to 7 [ 461.401868][T16117] buffer_io_error: 10 callbacks suppressed [ 461.401879][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.407538][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.410187][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.416961][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.419663][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.422196][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.429033][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.431690][T16117] ldm_validate_partition_table(): Disk read failed. [ 461.433955][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.436643][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.439271][T16117] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.441890][T16117] Dev loop9: unable to read RDB block 0 [ 461.443901][T16117] loop9: unable to read partition table [ 461.448068][T16117] loop9: partition table beyond EOD, truncated [ 461.450158][T16117] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 461.450158][T16117] ) failed (rc=-5) [ 461.530089][T16124] netlink: 256 bytes leftover after parsing attributes in process `syz.4.20220'. [ 461.536993][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20220'. [ 462.115391][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20246'. [ 462.119133][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20246'. [ 462.325572][T16195] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 462.806269][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20277'. [ 462.870528][T16247] netlink: 'syz.0.20281': attribute type 2 has an invalid length. [ 462.877826][T16247] netlink: 244 bytes leftover after parsing attributes in process `syz.0.20281'. [ 462.927853][T16253] dummy0: entered allmulticast mode [ 462.929827][T16253] dummy0: left allmulticast mode [ 463.383386][T16285] support for cryptoloop has been removed. Use dm-crypt instead. [ 463.616265][ T40] audit: type=1326 audit(438.999:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.635201][ T40] audit: type=1326 audit(438.999:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.645557][ T40] audit: type=1326 audit(438.999:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.663024][ T40] audit: type=1326 audit(438.999:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.672043][ T40] audit: type=1326 audit(438.999:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.679091][ T40] audit: type=1326 audit(438.999:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.686383][ T40] audit: type=1326 audit(438.999:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.693262][ T40] audit: type=1326 audit(438.999:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.0.20307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 463.711356][T16317] team_slave_0: entered promiscuous mode [ 463.713521][T16317] team_slave_1: entered promiscuous mode [ 463.717126][T16317] team0: Device vlan2 is already an upper device of the team interface [ 463.720563][T16317] team_slave_0: left promiscuous mode [ 463.722457][T16317] team_slave_1: left promiscuous mode [ 463.878107][ T40] audit: type=1326 audit(439.242:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.0.20318" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 464.305645][T16353] IPv6: NLM_F_REPLACE set, but no existing node found! [ 464.557101][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20339'. [ 465.045044][T16410] netlink: 'syz.6.20357': attribute type 2 has an invalid length. [ 465.133532][ C1] net_ratelimit: 13867 callbacks suppressed [ 465.133546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.139872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 465.143723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.148084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 465.152174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.157014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 465.160945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.165264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 465.169156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.173437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 465.422614][T16430] netlink: 'syz.5.20367': attribute type 4 has an invalid length. [ 465.576148][T16436] tipc: Enabled bearer , priority 10 [ 466.465440][T16484] qrtr: Invalid version 0 [ 466.584471][T16488] program syz.5.20396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.640863][ T7692] tipc: Node number set to 4278190081 [ 467.089860][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 467.113480][T16536] comedi comedi3: comedi_parport: I/O port conflict (0x2,3) [ 467.276913][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 467.280114][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.285367][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 467.288312][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 467.292355][ T24] usb 5-1: Manufacturer: syz [ 467.298782][ T24] usb 5-1: config 0 descriptor?? [ 467.357141][ T24] rc_core: IR keymap rc-hauppauge not found [ 467.359642][ T24] Registered IR keymap rc-empty [ 467.363032][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 467.373279][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input65 [ 467.582117][ T24] usb 5-1: USB disconnect, device number 17 [ 468.207714][T16602] 9pnet_rdma: rdma_create_trans (16602): problem binding to privport: 13 [ 468.569790][T16618] bond_slave_0: entered promiscuous mode [ 468.571923][T16618] bond_slave_1: entered promiscuous mode [ 468.578454][T16618] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 468.682306][T16618] bond_slave_0: left promiscuous mode [ 468.684123][T16618] bond_slave_1: left promiscuous mode [ 468.896942][ T6143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.901104][ T6143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.904630][ T6143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.907710][ T6143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.910208][ T6143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.015246][ T40] audit: type=1326 audit(444.050:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.20449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7fc00000 [ 469.227712][T16629] chnl_net:caif_netlink_parms(): no params data found [ 469.315355][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.317807][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.320267][T16629] bridge_slave_0: entered allmulticast mode [ 469.323095][T16629] bridge_slave_0: entered promiscuous mode [ 469.327987][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.330470][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.332898][T16629] bridge_slave_1: entered allmulticast mode [ 469.335745][T16629] bridge_slave_1: entered promiscuous mode [ 469.353156][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.358013][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.376357][T16629] team0: Port device team_slave_0 added [ 469.381120][T16629] team0: Port device team_slave_1 added [ 469.396167][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.398453][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.406748][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.411421][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.413696][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.421836][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.449249][T16629] hsr_slave_0: entered promiscuous mode [ 469.451602][T16629] hsr_slave_1: entered promiscuous mode [ 469.453837][T16629] debugfs: 'hsr0' already exists in 'hsr' [ 469.455724][T16629] Cannot create hsr debugfs directory [ 469.560361][T16629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 469.605683][T16629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 469.658562][T16629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.707590][T16629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.753128][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.755381][T16629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.757764][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.760145][T16629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.794354][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.965734][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.976356][ T54] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 470.084010][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.136946][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 470.137073][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.142816][ T54] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 470.145599][ T54] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 470.149003][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.153809][ T54] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.156680][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.159414][ T54] usb 5-1: Product: syz [ 470.160913][ T54] usb 5-1: Manufacturer: syz [ 470.162404][ T54] usb 5-1: SerialNumber: syz [ 470.394879][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.398138][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.423943][ T54] usb 5-1: 0:2 : does not exist [ 470.432129][ T54] usb 5-1: USB disconnect, device number 18 [ 470.446343][T16567] udevd[16567]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.489623][ C3] net_ratelimit: 24574 callbacks suppressed [ 470.489636][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.489654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.492180][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.495528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.499716][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.503544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.507162][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.510479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.515362][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.519128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 470.664616][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.676991][T14445] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.778561][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.783603][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.785921][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.791336][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.793645][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.921536][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.077546][ T6143] Bluetooth: hci0: command tx timeout [ 471.154184][T16629] veth0_vlan: entered promiscuous mode [ 471.159045][T16629] veth1_vlan: entered promiscuous mode [ 471.170539][T16629] veth0_macvtap: entered promiscuous mode [ 471.280449][T16629] veth1_macvtap: entered promiscuous mode [ 471.295797][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.301565][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.309510][ T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.315215][ T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.370469][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.377582][ T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.513654][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.520238][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.536968][ T5003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.539736][ T5003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.599471][ T40] audit: type=1326 audit(446.464:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16667 comm="syz.4.20475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7fc00000 [ 471.692072][T16700] fuseblk: block size(5120) > page size(4096) not supported by filesystem [ 471.761775][ T54] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 471.882471][T14445] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.941908][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 471.945334][T16708] syz.4.20488 (16708) used obsolete PPPIOCDETACH ioctl [ 471.948700][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.954951][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.967502][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.979098][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.990992][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 471.995874][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 472.005600][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.011419][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 472.017027][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 472.022335][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 472.024845][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 472.028264][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.032100][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 472.035674][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 472.042965][ T54] usb 10-1: string descriptor 0 read error: -22 [ 472.045589][ T54] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 472.049261][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.062288][ T54] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 473.301204][ T5306] Bluetooth: hci0: command tx timeout [ 473.482017][T16765] tipc: Enabling of bearer rejected, failed to enable media [ 473.782693][T14445] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.897300][T16782] mkiss: ax0: crc mode is auto. [ 474.012849][T16786] input: syz1 as /devices/virtual/input/input66 [ 474.499057][ T24] usb 10-1: USB disconnect, device number 4 [ 474.894507][T16821] Invalid logical block size (1536) [ 474.955264][T16827] Bluetooth: MGMT ver 1.23 [ 475.095954][T16829] batadv_slave_1: entered promiscuous mode [ 475.524817][ T5306] Bluetooth: hci0: command 0x040f tx timeout [ 475.653933][T14445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.845849][ C1] net_ratelimit: 23702 callbacks suppressed [ 475.845863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.845949][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.848349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.852679][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.856656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.860232][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.863542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.867691][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.871790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 475.875536][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 477.316304][T14445] bridge_slave_1: left allmulticast mode [ 477.318116][T14445] bridge_slave_1: left promiscuous mode [ 477.320071][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.402175][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20591'. [ 477.469382][T14445] bridge_slave_0: left allmulticast mode [ 477.480187][T14445] bridge_slave_0: left promiscuous mode [ 477.482240][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.759094][ T5306] Bluetooth: hci0: command 0x040f tx timeout [ 479.821484][T14445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.908717][T14445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.948452][T14445] bond0 (unregistering): Released all slaves [ 479.972143][ T5306] Bluetooth: hci0: command 0x040f tx timeout [ 480.965248][T17087] sg_write: data in/out 124/12 bytes for SCSI command 0x1c-- guessing data in; [ 480.965248][T17087] program syz.0.20653 not setting count and/or reply_len properly [ 481.033140][T17093] binder: 17091:17093 unknown command 48 [ 481.035431][T17093] binder: 17091:17093 ioctl c0306201 80000080 returned -22 [ 481.096802][T17100] usb usb8: usbfs: process 17100 (syz.5.20659) did not claim interface 0 before use [ 481.158313][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20661'. [ 481.161380][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20661'. [ 481.164262][T17104] netlink: 'syz.5.20661': attribute type 11 has an invalid length. [ 481.201641][ C1] net_ratelimit: 23229 callbacks suppressed [ 481.201653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.201849][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.203971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.209004][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.212397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.216412][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.219679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.223761][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.226850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.231236][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 481.339864][T17111] program syz.5.20664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.477913][T14445] tipc: Disabling bearer [ 481.481692][T14445] tipc: Left network mode [ 481.611234][T17123] netlink: 'syz.5.20671': attribute type 1 has an invalid length. [ 482.654939][ T40] audit: type=1326 audit(456.800:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.663106][ T40] audit: type=1326 audit(456.800:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.669844][ T40] audit: type=1326 audit(456.809:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.676438][ T40] audit: type=1326 audit(456.809:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.686792][ T40] audit: type=1326 audit(456.809:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.693720][ T40] audit: type=1326 audit(456.809:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.700792][ T40] audit: type=1326 audit(456.828:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.4.20699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 482.860863][T17202] xt_socket: unknown flags 0xd0 [ 484.088692][T17247] netlink: 'syz.7.20726': attribute type 11 has an invalid length. [ 484.091346][T17247] netlink: 56 bytes leftover after parsing attributes in process `syz.7.20726'. [ 484.879174][T14445] hsr_slave_0: left promiscuous mode [ 484.930275][T14445] hsr_slave_1: left promiscuous mode [ 484.943647][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.946751][T14445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.983395][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.986916][T14445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.074105][T14445] veth1_macvtap: left promiscuous mode [ 485.076044][T14445] veth0_macvtap: left promiscuous mode [ 485.077893][T14445] veth1_vlan: left promiscuous mode [ 485.079768][T14445] veth0_vlan: left promiscuous mode [ 486.557473][ C1] net_ratelimit: 23844 callbacks suppressed [ 486.557488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.557503][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.559637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.564153][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.567318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.571587][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.575314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.579183][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.582062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.586588][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 486.805823][T17302] syz.4.20752 (17302) used greatest stack depth: 18904 bytes left [ 488.130233][T14445] team0 (unregistering): Port device team_slave_1 removed [ 488.360961][T14445] team0 (unregistering): Port device team_slave_0 removed [ 491.335102][ T40] audit: type=1326 audit(464.919:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17355 comm="syz.0.20772" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 491.913435][ C1] net_ratelimit: 23829 callbacks suppressed [ 491.913449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.913496][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.915848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.919941][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.923103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.927600][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.930920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.935068][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.938454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 491.942476][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 492.354652][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20787'. [ 492.609443][T17401] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 493.358559][T17441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20803'. [ 493.988979][T17496] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.323591][T17510] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 494.326398][T17510] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 494.346227][T17510] vhci_hcd vhci_hcd.0: Device attached [ 494.465673][T17511] vhci_hcd: connection closed [ 494.468669][T14217] vhci_hcd: stop threads [ 494.471676][T14217] vhci_hcd: release socket [ 494.474572][T14217] vhci_hcd: disconnect device [ 494.535110][ T6235] vhci_hcd: vhci_device speed not set [ 495.298633][ T5948] kernel read not supported for file /vga_arbiter (pid: 5948 comm: kworker/2:3) [ 496.202746][ T40] audit: type=1800 audit(469.484:473): pid=17563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20856" name="memory.events" dev="tmpfs" ino=26435 res=0 errno=0 [ 496.225940][ T40] audit: type=1804 audit(469.484:474): pid=17563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.20856" name="/newroot/5252/memory.events" dev="tmpfs" ino=26435 res=1 errno=0 [ 497.269465][ C1] net_ratelimit: 32394 callbacks suppressed [ 497.269477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.269503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.270945][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.271560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.273660][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.273872][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20879'. [ 497.275714][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.276063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.277793][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.279965][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 497.280555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.158266][T17636] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 498.167764][T17636] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 498.485393][T17644] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 499.704174][T17677] CUSE: DEVNAME unspecified [ 499.871196][T17688] overlayfs: conflicting lowerdir path [ 500.319744][T17698] [U] R5JCҰ~V6|7KXVZZGR $ [ 500.518934][T17713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20926'. [ 501.445202][T17726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20932'. [ 501.468834][T17726] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.472938][T17726] bridge_slave_1: left allmulticast mode [ 501.474867][T17726] bridge_slave_1: left promiscuous mode [ 501.476784][T17726] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.625478][ C0] net_ratelimit: 54962 callbacks suppressed [ 502.625484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.625492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.625644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.626521][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 502.627140][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 502.627759][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 502.628370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.628589][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 502.629205][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 502.629886][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 503.471980][T17745] ptrace attach of "/syz-executor exec"[17746] was attempted by "/syz-executor exec"[17745] [ 506.096013][T17785] sp0: Synchronizing with TNC [ 506.115738][T17784] [U] ` [ 506.716603][T17792] netlink: 'syz.4.20957': attribute type 10 has an invalid length. [ 506.808066][T17792] team0: Port device dummy0 added [ 506.811146][T17793] netlink: 'syz.4.20957': attribute type 10 has an invalid length. [ 507.273934][T17793] team0: Port device dummy0 removed [ 507.285659][T17793] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.436010][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20959'. [ 507.596814][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.981408][ C1] net_ratelimit: 73079 callbacks suppressed [ 507.981422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 507.981475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.982223][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.982975][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.983650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 507.983661][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.984581][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.985272][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.985980][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 507.986685][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 509.685837][ T76] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 510.115969][ T76] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 510.129970][ T76] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 510.170441][ T76] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.308579][ T76] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.322863][ T76] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.325454][ T76] usb 12-1: Product: syz [ 510.326817][ T76] usb 12-1: Manufacturer: syz [ 510.328313][ T76] usb 12-1: SerialNumber: syz [ 510.398002][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20982'. [ 510.426431][ T76] hub 12-1:1.0: bad descriptor, ignoring hub [ 510.428361][ T76] hub 12-1:1.0: probe with driver hub failed with error -5 [ 510.523279][T17863] vlan2: entered promiscuous mode [ 510.524981][T17863] bond0: entered promiscuous mode [ 510.527653][T17863] bond_slave_0: entered promiscuous mode [ 510.529574][T17863] bond_slave_1: entered promiscuous mode [ 510.841144][ T76] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 510.943145][ T6235] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 511.094901][ T63] usb 12-1: USB disconnect, device number 2 [ 511.101191][ T63] usblp0: removed [ 511.103832][ T6235] usb 10-1: Using ep0 maxpacket: 32 [ 511.108914][ T6235] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.111524][ T6235] usb 10-1: config 0 has no interface number 0 [ 511.128281][ T6235] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 511.131264][ T6235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.139958][ T6235] usb 10-1: Product: syz [ 511.142885][ T6235] usb 10-1: Manufacturer: syz [ 511.146762][ T6235] usb 10-1: SerialNumber: syz [ 511.156782][ T6235] usb 10-1: config 0 descriptor?? [ 511.160858][ T6235] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 511.163708][ T6235] usb 10-1: selecting invalid altsetting 1 [ 511.165611][ T6235] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 511.182892][ T6235] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.190110][ T6235] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 511.196327][ T6235] usb 10-1: media controller created [ 511.208889][ T6235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.166990][T17892] tun0: tun_chr_ioctl cmd 1074025676 [ 512.168840][T17892] tun0: owner set to 0 [ 512.398060][ T6235] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 512.404323][ T6235] zl10353_read_register: readreg error (reg=127, ret==-110) [ 512.419912][T17868] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 512.434829][ T6235] usb 10-1: USB disconnect, device number 5 [ 513.337405][ C0] net_ratelimit: 72899 callbacks suppressed [ 513.337419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 513.337789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.337891][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.338509][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.339132][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.339493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 513.339743][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.340565][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.341179][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 513.341908][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 514.368731][ T6235] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 514.568601][ T6235] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 514.571388][ T6235] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 514.578876][ T6235] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 514.581685][ T6235] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 514.585769][ T6235] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 514.590578][ T6235] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 514.598903][ T6235] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 514.601634][ T6235] usb 10-1: Product: syz [ 514.603214][ T6235] usb 10-1: Manufacturer: syz [ 514.616464][ T6235] cdc_wdm 10-1:1.0: skipping garbage [ 514.619168][ T6235] cdc_wdm 10-1:1.0: skipping garbage [ 514.634039][ T6235] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 514.636012][ T6235] cdc_wdm 10-1:1.0: Unknown control protocol [ 515.065991][ T6235] usb 10-1: USB disconnect, device number 6 [ 517.075784][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21028'. [ 517.160017][T17971] : renamed from vlan0 (while UP) [ 518.693468][ C0] net_ratelimit: 73811 callbacks suppressed [ 518.693482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 518.693598][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 518.693719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 518.693842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.694110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.694367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 518.694476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.694736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.694986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:43:cd:eb:4e:73, vlan:0) [ 518.695109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.870314][T17988] input: syz1 as /devices/virtual/input/input67 [ 519.954992][ T6235] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 519.979798][T17990] kvm_intel: kvm [17989]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 520.127875][ T6235] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 520.130576][ T6235] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 520.133242][ T6235] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 520.136258][ T6235] usb 9-1: config 1 has no interface number 0 [ 520.139916][ T6235] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 520.143431][ T6235] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 520.147524][ T6235] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 520.150449][ T6235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.162374][ T6235] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 520.792533][ T6235] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 521.021211][ T6235] usb 9-1: USB disconnect, device number 5 [ 521.023817][ T6235] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 521.662079][T18003] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 521.688240][T18003] bond1 (unregistering): Released all slaves [ 521.708837][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21047'. [ 521.712171][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21047'. [ 522.514551][T18068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21076'. [ 524.466368][ T6235] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 524.627013][ T6235] usb 10-1: Using ep0 maxpacket: 16 [ 524.630833][ T6235] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.634250][ T6235] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 524.638678][ T6235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 524.642173][ T6235] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.647962][ T6235] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 524.650971][ T6235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.653854][ T6235] usb 10-1: Product: syz [ 524.655227][ T6235] usb 10-1: Manufacturer: syz [ 524.656735][ T6235] usb 10-1: SerialNumber: syz [ 524.662875][ T6235] usb 10-1: config 0 descriptor?? [ 524.684676][T18228] netlink: 'syz.0.21149': attribute type 8 has an invalid length. [ 524.723086][ T6235] rc_core: IR keymap rc-xbox-dvd not found [ 524.725021][ T6235] Registered IR keymap rc-empty [ 524.727173][ T6235] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 524.731369][ T6235] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input68 [ 524.800224][T18237] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 524.809327][ T5003] Bluetooth: hci3: Frame reassembly failed (-84) [ 524.883400][ T6132] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 524.889235][ T6235] usb 10-1: USB disconnect, device number 7 [ 524.891235][ C2] xbox_remote 10-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 525.043837][ T6132] usb 9-1: Using ep0 maxpacket: 8 [ 525.047001][ T6132] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.050033][ T6132] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.053064][ T6132] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.056244][ T6132] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.060328][ T6132] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.063169][ T6132] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.288044][ T6132] usb 9-1: GET_CAPABILITIES returned 0 [ 525.289973][ T6132] usbtmc 9-1:16.0: can't read capabilities [ 525.507190][ T6235] usb 9-1: USB disconnect, device number 6 [ 526.242815][T18256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.245322][T18256] IPv6: NLM_F_CREATE should be set when creating new route [ 526.247638][T18256] IPv6: NLM_F_CREATE should be set when creating new route [ 526.250040][T18256] IPv6: NLM_F_CREATE should be set when creating new route [ 526.311164][T18260] binder: 18259:18260 ioctl 4018620d 0 returned -22 [ 526.669846][T18268] kvm: apic: phys broadcast and lowest prio [ 527.009219][ T40] audit: type=1800 audit(498.294:475): pid=18280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.21173" name="file0" dev="9p" ino=78119107 res=0 errno=0 [ 527.016642][T16630] Bluetooth: hci3: command 0x1003 tx timeout [ 527.020724][ T6143] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 527.533794][ T40] audit: type=1326 audit(498.781:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000 [ 527.541137][ T40] audit: type=1326 audit(498.781:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000 [ 527.547684][ T40] audit: type=1326 audit(498.781:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000 [ 527.554116][ T40] audit: type=1326 audit(498.781:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000 [ 527.561835][ T40] audit: type=1326 audit(498.781:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 527.568794][ T40] audit: type=1326 audit(498.781:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 527.575258][ T40] audit: type=1326 audit(498.781:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000 [ 527.582738][ T40] audit: type=1326 audit(498.781:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 527.589309][ T40] audit: type=1326 audit(498.781:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18309 comm="syz.7.21187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 527.734617][T18334] input: syz1 as /devices/virtual/input/input69 [ 527.776591][T18339] net_ratelimit: 41242 callbacks suppressed [ 527.776606][T18339] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 528.445380][T18360] input: syz1 as /devices/virtual/input/input70 [ 528.691215][T18375] serio: Serial port ptm0 [ 529.507541][T18441] netem: incorrect gi model size [ 529.509755][T18441] netem: change failed [ 529.567905][T18446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.21247'. [ 529.605385][T18450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21249'. [ 529.856000][T18465] loop6: detected capacity change from 0 to 524287999 [ 529.858535][T18465] buffer_io_error: 9 callbacks suppressed [ 529.858544][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.863314][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.866111][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.868727][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.871279][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.873872][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.877167][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.879695][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.882196][T18465] ldm_validate_partition_table(): Disk read failed. [ 529.884295][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.886986][T18465] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.889566][T18465] Dev loop6: unable to read RDB block 0 [ 529.891545][T18465] loop6: unable to read partition table [ 529.894903][T18465] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 529.959578][T18469] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 531.212478][T18470] Bluetooth: hci0: command 0x040f tx timeout [ 531.236834][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21270'. [ 531.274619][T18509] batadv_slave_1: entered promiscuous mode [ 531.278993][T18509] batadv_slave_1: left promiscuous mode [ 531.295251][T18511] (syz.7.21275,18511,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 531.769036][T18542] sctp: [Deprecated]: syz.4.21290 (pid 18542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.769036][T18542] Use struct sctp_sack_info instead [ 531.853642][ T7692] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 532.026225][ T7692] usb 5-1: config 0 has no interfaces? [ 532.028107][ T7692] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.031067][ T7692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.036131][ T7692] usb 5-1: config 0 descriptor?? [ 532.142266][ T6143] Bluetooth: hci3: command 0x1003 tx timeout [ 532.146470][T16630] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 532.256652][ T56] usb 5-1: USB disconnect, device number 19 [ 532.540137][T18562] bond1 (unregistering): Released all slaves [ 533.548563][T18653] netlink: 'syz.7.21342': attribute type 17 has an invalid length. [ 533.551288][T18653] netlink: 'syz.7.21342': attribute type 16 has an invalid length. [ 533.553985][T18653] netlink: 152 bytes leftover after parsing attributes in process `syz.7.21342'. [ 533.803277][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 533.803289][ T40] audit: type=1326 audit(504.655:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 533.829024][ T40] audit: type=1326 audit(504.655:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 533.835272][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21354'. [ 533.841075][ T40] audit: type=1326 audit(504.655:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 533.848438][ T40] audit: type=1326 audit(504.655:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 533.865459][ T40] audit: type=1326 audit(504.655:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 533.872543][ T40] audit: type=1326 audit(504.655:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 533.880103][ T40] audit: type=1326 audit(504.655:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 533.890879][ T40] audit: type=1326 audit(504.655:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 533.906168][ T40] audit: type=1326 audit(504.655:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 533.912833][ T40] audit: type=1326 audit(504.655:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18663 comm="syz.5.21347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 534.201213][T18711] netlink: 'syz.4.21368': attribute type 14 has an invalid length. [ 534.676443][T18745] mkiss: ax0: crc mode is auto. [ 534.941539][T18760] comedi comedi3: pcl816: I/O port conflict (0x101,16) [ 535.119644][ T6143] Bluetooth: hci0: link tx timeout [ 535.122606][ T6143] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.127309][T16630] Bluetooth: hci0: link tx timeout [ 535.129488][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.151106][T16630] Bluetooth: hci0: link tx timeout [ 535.152736][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.178642][ T7692] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 535.190988][T16630] Bluetooth: hci0: link tx timeout [ 535.192628][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.253280][ T6235] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 535.349845][T16630] Bluetooth: hci0: link tx timeout [ 535.352210][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.356990][ T7692] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 535.370755][ T7692] usb 5-1: config 0 has no interface number 0 [ 535.374400][ T7692] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 535.377298][ T7692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.379917][ T7692] usb 5-1: Product: syz [ 535.381270][ T7692] usb 5-1: Manufacturer: syz [ 535.382801][ T7692] usb 5-1: SerialNumber: syz [ 535.392771][ T7692] usb 5-1: config 0 descriptor?? [ 535.395997][ T7692] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 535.399406][ T7692] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 535.413603][ T6235] usb 12-1: Using ep0 maxpacket: 16 [ 535.422791][T18770] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 535.426119][ T6235] usb 12-1: unable to get BOS descriptor or descriptor too short [ 535.428581][ T6235] usb 12-1: no configurations [ 535.430098][ T6235] usb 12-1: can't read configurations, error -22 [ 535.646679][ T56] usb 5-1: USB disconnect, device number 20 [ 535.684892][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21407'. [ 535.921548][T16630] Bluetooth: hci0: link tx timeout [ 535.923879][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 536.172928][T16630] Bluetooth: hci0: link tx timeout [ 536.174809][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 536.543181][T16630] Bluetooth: hci0: link tx timeout [ 536.545121][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 536.551530][T18864] bad cache= option: nonestsize : 16 [ 536.551530][T18864] [ 536.551530][T18864] name : authenc(michael_mic [ 536.551530][T18864] [ 536.556416][T18864] CIFS: VFS: bad cache= option: nonestsize : 16 [ 536.556416][T18864] [ 536.556416][T18864] name : authenc(michael_mic [ 536.784285][T16630] Bluetooth: hci0: link tx timeout [ 536.786414][T16630] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 536.861530][T18898] Bluetooth: hci1: too big key_count value 11787 [ 537.273779][T16630] Bluetooth: hci0: command 0x040f tx timeout [ 537.397878][T18925] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.659962][T18925] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.959566][T18925] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.105059][T18966] bond1: (slave vxcan0): Device is not bonding slave [ 538.107747][T18966] bond1: option active_slave: invalid value (vxcan0) [ 538.162092][T18966] bond1 (unregistering): Released all slaves [ 538.182742][ T7692] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 538.355284][ T7692] usb 9-1: Using ep0 maxpacket: 8 [ 538.359549][ T7692] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.365071][ T7692] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.373674][ T7692] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.378360][ T7692] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.383762][ T7692] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.388574][ T7692] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.398254][T18925] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.592941][ T61] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.603246][T17582] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.612601][ T7692] usb 9-1: GET_CAPABILITIES returned 0 [ 538.614386][ T61] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.616995][ T7692] usbtmc 9-1:16.0: can't read capabilities [ 538.623317][T17582] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.667958][T18991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input71 [ 538.829883][ T7692] usb 9-1: USB disconnect, device number 7 [ 539.514143][T19046] netlink: 292 bytes leftover after parsing attributes in process `syz.7.21516'. [ 539.865504][T19065] netlink: 'syz.4.21525': attribute type 9 has an invalid length. [ 539.867998][T19065] netlink: 'syz.4.21525': attribute type 6 has an invalid length. [ 539.873418][T19065] netlink: 'syz.4.21525': attribute type 7 has an invalid length. [ 539.876773][T19065] netlink: 'syz.4.21525': attribute type 8 has an invalid length. [ 540.054571][T19084] ------------[ cut here ]------------ [ 540.056980][T19084] workqueue: cannot queue hci_tx_work on wq hci0 [ 540.059055][T19084] WARNING: kernel/workqueue.c:2251 at 0x0, CPU#0: syz.0.21534/19084 [ 540.061608][T19084] Modules linked in: [ 540.063438][T19084] CPU: 0 UID: 0 PID: 19084 Comm: syz.0.21534 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.067115][T19084] Tainted: [L]=SOFTLOCKUP [ 540.068499][T19084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.071899][T19084] RIP: 0010:__queue_work+0xca1/0x10e0 [ 540.073614][T19084] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d e3 95 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 30 cf 39 00 90 0f 0b 90 e9 15 f6 [ 540.079756][T19084] RSP: 0018:ffffc9000d64f6e0 EFLAGS: 00010046 [ 540.081774][T19084] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100a88118d [ 540.084298][T19084] RDX: ffff88802ad42178 RSI: ffffffff8a5b2b20 RDI: ffffffff908a72f0 [ 540.086887][T19084] RBP: ffff888054408c50 R08: 0000000000000005 R09: 0000000000000000 [ 540.089417][T19084] R10: 0000000000000000 R11: 00000000349e759b R12: 0000000000000008 [ 540.091916][T19084] R13: ffff88802ad42000 R14: 0000000000000000 R15: ffff88802ad42000 [ 540.094427][T19084] FS: 0000000000000000(0000) GS:ffff88809775b000(0063) knlGS:00000000f53edb40 [ 540.097250][T19084] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 540.099379][T19084] CR2: 000000008000501c CR3: 000000004c8b8000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 540.101910][T19084] Call Trace: [ 540.103095][T19084] [ 540.104053][T19084] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 540.106021][T19084] ? __hci_send_to_channel+0x1d4/0x2a0 [ 540.107752][T19084] queue_work_on+0x1a4/0x1f0 [ 540.109263][T19084] l2cap_chan_send+0xce5/0x2c50 [ 540.110839][T19084] ? l2cap_sock_sendmsg+0x3b4/0x490 [ 540.112507][T19084] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 540.114443][T19084] ? __pfx___mutex_lock+0x10/0x10 [ 540.116055][T19084] ? __pfx_l2cap_chan_send+0x10/0x10 [ 540.117748][T19084] ? l2cap_sock_sendmsg+0x2d9/0x490 [ 540.119417][T19084] ? rcu_is_watching+0x12/0xc0 [ 540.120939][T19084] l2cap_sock_sendmsg+0x3c7/0x490 [ 540.122539][T19084] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 540.124324][T19084] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 540.126254][T19084] ____sys_sendmsg+0xa5d/0xc30 [ 540.127791][T19084] ? rmw_rbio+0x2954/0x3710 [ 540.129275][T19084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.130980][T19084] ? get_compat_msghdr+0x11a/0x170 [ 540.132598][T19084] ___sys_sendmsg+0x134/0x1d0 [ 540.134124][T19084] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.135815][T19084] ? __pfx___up_read+0x10/0x10 [ 540.137358][T19084] ? do_user_addr_fault+0x366/0xda0 [ 540.139020][T19084] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.140689][T19084] ? irqentry_exit+0x1dd/0x8c0 [ 540.142238][T19084] ? __pfx___might_resched+0x10/0x10 [ 540.143924][T19084] ? __sys_sendmmsg+0x30d/0x420 [ 540.145491][T19084] __sys_sendmmsg+0x2f9/0x420 [ 540.146980][T19084] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.148584][T19084] ? __pfx_do_futex+0x10/0x10 [ 540.150084][T19084] ? fput+0x70/0xf0 [ 540.151279][T19084] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 540.153148][T19084] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 540.154945][T19084] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.156603][T19084] __do_fast_syscall_32+0xe8/0x680 [ 540.158252][T19084] do_fast_syscall_32+0x32/0x80 [ 540.159802][T19084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.161790][T19084] RIP: 0023:0xf6ffd579 [ 540.163105][T19084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.169175][T19084] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 540.171841][T19084] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004640 [ 540.174358][T19084] RDX: 000000000000021d RSI: 0000000004048044 RDI: 0000000000000000 [ 540.176845][T19084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.179343][T19084] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 540.181958][T19084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.184546][T19084] [ 540.185578][T19084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 540.187928][T19084] CPU: 0 UID: 0 PID: 19084 Comm: syz.0.21534 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.191490][T19084] Tainted: [L]=SOFTLOCKUP [ 540.192920][T19084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.196361][T19084] Call Trace: [ 540.197506][T19084] [ 540.198488][T19084] dump_stack_lvl+0x3d/0x1f0 [ 540.200023][T19084] vpanic+0x640/0x6f0 [ 540.201364][T19084] panic+0xca/0xd0 [ 540.202597][T19084] ? __pfx_panic+0x10/0x10 [ 540.204048][T19084] check_panic_on_warn+0xab/0xb0 [ 540.205679][T19084] __warn+0x108/0x3c0 [ 540.206992][T19084] __report_bug+0x2a0/0x520 [ 540.208471][T19084] ? __pfx___report_bug+0x10/0x10 [ 540.210252][T19084] ? __pfx_hci_tx_work+0x10/0x10 [ 540.211921][T19084] ? __lock_acquire+0x433/0x22f0 [ 540.213521][T19084] report_bug_entry+0xb2/0x220 [ 540.215076][T19084] ? __queue_work+0xca1/0x10e0 [ 540.216597][T19084] handle_bug+0x18a/0x260 [ 540.218008][T19084] exc_invalid_op+0x17/0x50 [ 540.219419][T19084] asm_exc_invalid_op+0x1a/0x20 [ 540.221018][T19084] RIP: 0010:__queue_work+0xca1/0x10e0 [ 540.222750][T19084] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d e3 95 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 30 cf 39 00 90 0f 0b 90 e9 15 f6 [ 540.229000][T19084] RSP: 0018:ffffc9000d64f6e0 EFLAGS: 00010046 [ 540.231008][T19084] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100a88118d [ 540.233546][T19084] RDX: ffff88802ad42178 RSI: ffffffff8a5b2b20 RDI: ffffffff908a72f0 [ 540.236089][T19084] RBP: ffff888054408c50 R08: 0000000000000005 R09: 0000000000000000 [ 540.238616][T19084] R10: 0000000000000000 R11: 00000000349e759b R12: 0000000000000008 [ 540.241148][T19084] R13: ffff88802ad42000 R14: 0000000000000000 R15: ffff88802ad42000 [ 540.243681][T19084] ? __pfx_hci_tx_work+0x10/0x10 [ 540.245323][T19084] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 540.247277][T19084] ? __hci_send_to_channel+0x1d4/0x2a0 [ 540.249017][T19084] queue_work_on+0x1a4/0x1f0 [ 540.250547][T19084] l2cap_chan_send+0xce5/0x2c50 [ 540.252099][T19084] ? l2cap_sock_sendmsg+0x3b4/0x490 [ 540.253783][T19084] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 540.255623][T19084] ? __pfx___mutex_lock+0x10/0x10 [ 540.257238][T19084] ? __pfx_l2cap_chan_send+0x10/0x10 [ 540.258934][T19084] ? l2cap_sock_sendmsg+0x2d9/0x490 [ 540.260939][T19084] ? rcu_is_watching+0x12/0xc0 [ 540.262608][T19084] l2cap_sock_sendmsg+0x3c7/0x490 [ 540.264230][T19084] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 540.266044][T19084] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 540.268046][T19084] ____sys_sendmsg+0xa5d/0xc30 [ 540.269634][T19084] ? rmw_rbio+0x2954/0x3710 [ 540.271335][T19084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.273021][T19084] ? get_compat_msghdr+0x11a/0x170 [ 540.274675][T19084] ___sys_sendmsg+0x134/0x1d0 [ 540.276175][T19084] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.277850][T19084] ? __pfx___up_read+0x10/0x10 [ 540.279331][T19084] ? do_user_addr_fault+0x366/0xda0 [ 540.281016][T19084] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.282703][T19084] ? irqentry_exit+0x1dd/0x8c0 [ 540.284213][T19084] ? __pfx___might_resched+0x10/0x10 [ 540.285931][T19084] ? __sys_sendmmsg+0x30d/0x420 [ 540.287494][T19084] __sys_sendmmsg+0x2f9/0x420 [ 540.289010][T19084] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.290703][T19084] ? __pfx_do_futex+0x10/0x10 [ 540.292212][T19084] ? fput+0x70/0xf0 [ 540.293398][T19084] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 540.295269][T19084] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 540.297050][T19084] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.298730][T19084] __do_fast_syscall_32+0xe8/0x680 [ 540.300371][T19084] do_fast_syscall_32+0x32/0x80 [ 540.301929][T19084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.303922][T19084] RIP: 0023:0xf6ffd579 [ 540.305265][T19084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.311035][T19084] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 540.313662][T19084] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004640 [ 540.316161][T19084] RDX: 000000000000021d RSI: 0000000004048044 RDI: 0000000000000000 [ 540.318667][T19084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.321110][T19084] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 540.323599][T19084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.326141][T19084] [ 540.327854][T19084] Kernel Offset: disabled [ 540.329269][T19084] Rebooting in 86400 seconds..