last executing test programs: 8.951498767s ago: executing program 3 (id=3996): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 8.3703498s ago: executing program 3 (id=4000): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x18, '\x00', @buffer={"33e3ee7608f84e1f2aefa327ad62a29457acd30cefa08b03bcaf6821fe4802d4", 0x20}, 0x7ff}, {0x3, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x2, @uvalue=0x2}, {0x2, @svalue=0x1}, {0x3, @svalue=0x7}]}, 0x9}, {0x3d, '\x00', @data=0x2, 0x479a}]}) 7.412083654s ago: executing program 3 (id=4005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.441275024s ago: executing program 0 (id=4008): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4006, &(0x7f0000000c00)=0x6, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x9, 0x6, 0x2) 4.430581062s ago: executing program 1 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.184282739s ago: executing program 2 (id=4010): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80284511, 0x0) 3.879642857s ago: executing program 1 (id=4011): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 3.687199742s ago: executing program 2 (id=4012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 3.519177108s ago: executing program 1 (id=4013): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x12, 0x7, 0x0}) 3.369965772s ago: executing program 3 (id=4014): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x7, {0xfffffffe, 0x5, 0x1007, 0x8001}}) 3.359295723s ago: executing program 2 (id=4015): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af83, 0x0) 3.048978146s ago: executing program 0 (id=4016): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 2.969787517s ago: executing program 1 (id=4017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x81, 0x5}, 0x6) 2.833193151s ago: executing program 3 (id=4018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x8927, &(0x7f0000000040)) 2.725018007s ago: executing program 2 (id=4019): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xffffffffffffffff) 2.561711636s ago: executing program 0 (id=4020): r0 = socket$inet(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x38, 0x24014055, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 2.096203453s ago: executing program 2 (id=4021): r0 = socket(0x1000000000000010, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 1.952275908s ago: executing program 0 (id=4022): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1.941489387s ago: executing program 1 (id=4023): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, 0x0) 990.450487ms ago: executing program 0 (id=4024): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) 407.790238ms ago: executing program 3 (id=4025): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 339.495146ms ago: executing program 2 (id=4026): inotify_init1(0x80800) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="1201010200000010fd07040040000102030109026f00030109403f0904000000010100000a2401"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 218.605527ms ago: executing program 1 (id=4027): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 0s ago: executing program 0 (id=4028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): rned -22 [ 323.736312][ T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 323.746309][ T5709] usb 4-1: USB disconnect, device number 71 [ 323.781013][ T25] usbtest 3-1:1.0: Linux user mode ISO test driver [ 323.794977][ T25] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 324.034117][ T5709] usb 3-1: USB disconnect, device number 75 [ 325.957274][T12096] netlink: 'syz.2.3029': attribute type 2 has an invalid length. [ 328.030397][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3040'. [ 328.954477][T12134] netlink: 'syz.1.3045': attribute type 2 has an invalid length. [ 329.681496][T12143] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 335.453411][T12190] netlink: ct_mark mask cannot be 0 [ 335.453658][T12190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.303451][T12202] nfs: Deprecated parameter 'nointr' [ 338.643290][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 338.901373][ T5801] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 339.073746][ T5801] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 339.109124][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.109371][ T5801] usb 2-1: Product: syz [ 339.109594][ T5801] usb 2-1: Manufacturer: syz [ 339.109802][ T5801] usb 2-1: SerialNumber: syz [ 339.153972][ T5801] usb 2-1: config 0 descriptor?? [ 339.197246][ T5801] go7007 2-1:0.0: Sensoray 2250 found [ 339.217629][ T5801] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 339.486116][ T5709] usb 2-1: USB disconnect, device number 74 [ 339.507086][ T5801] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 339.670665][ T5801] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 339.690831][ T5801] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 339.691075][ T5801] usb 4-1: config 0 has no interface number 0 [ 339.691331][ T5801] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 339.691551][ T5801] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.770147][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.772524][ T5801] usb 4-1: Product: syz [ 339.774604][ T5801] usb 4-1: Manufacturer: syz [ 339.774671][ T5801] usb 4-1: SerialNumber: syz [ 339.835921][ T5801] usb 4-1: config 0 descriptor?? [ 339.847053][T12218] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 339.878129][ T5801] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 339.929822][ T5801] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 340.484405][ T5801] usb 4-1: USB disconnect, device number 72 [ 340.553951][ T5801] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 340.582939][ T5801] cyberjack 4-1:0.69: device disconnected [ 341.007338][T12233] netlink: 'syz.0.3093': attribute type 4 has an invalid length. [ 341.204624][T12236] xt_hashlimit: overflow, try lower: 0/0 [ 342.163962][ T5709] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 342.557904][ T5709] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 343.050973][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.103899][ T31] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 343.126534][ T5709] usb 4-1: config 0 descriptor?? [ 343.175839][ T5709] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 343.290218][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.290541][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 343.312541][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 343.312807][ T31] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 343.312949][ T31] usb 3-1: config 1 interface 0 has no altsetting 1 [ 343.367088][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.367339][ T31] usb 3-1: Product: syz [ 343.367595][ T31] usb 3-1: Manufacturer: syz [ 343.367819][ T31] usb 3-1: SerialNumber: syz [ 343.601233][ T31] smsusb:smsusb_probe: board id=8, interface number 0 [ 343.933647][ T5709] gp8psk: usb in 128 operation failed. [ 343.943761][ T5709] gp8psk: usb in 137 operation failed. [ 343.944010][ T5709] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 343.944279][ T5709] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 344.103761][ T5709] usb 4-1: USB disconnect, device number 73 [ 344.127753][ T31] smsusb:smsusb_probe: Device initialized with return code -19 [ 344.980697][ T31] usb 3-1: USB disconnect, device number 76 [ 345.117617][T12253] netlink: 'syz.1.3101': attribute type 17 has an invalid length. [ 347.269130][ C0] sched: DL replenish lagged too much [ 347.510504][T12274] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3113'. [ 350.256323][T12298] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 351.708025][T12313] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 352.551144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.553304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.554636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.556050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.557379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.558674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.560031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.561391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 352.562696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 355.622587][T12336] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 356.713605][ C0] net_ratelimit: 2884 callbacks suppressed [ 356.713664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.715022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.718127][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.721220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.722587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.725660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.729129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.732357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.735320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.738598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 356.846316][T12324] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 357.200781][T12324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.256573][T12324] team0: Port device netdevsim1 added [ 357.589939][T12354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3149'. [ 361.719428][ C0] net_ratelimit: 6092 callbacks suppressed [ 361.719486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.720007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.721107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 361.722176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.722665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.723756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 361.724894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.725398][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.726513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 361.727625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.617328][ T5709] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 364.890079][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 365.036856][ T5709] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 365.224214][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.224462][ T5709] usb 1-1: Product: syz [ 365.224685][ T5709] usb 1-1: Manufacturer: syz [ 365.224893][ T5709] usb 1-1: SerialNumber: syz [ 365.277028][ T5709] usb 1-1: config 0 descriptor?? [ 365.329397][ T5709] gspca_main: spca508-2.14.0 probing 041e:4018 [ 365.803668][ T5709] gspca_spca508: reg_read err -71 [ 365.812099][ T5709] gspca_spca508: reg_read err -71 [ 365.828089][ T5709] gspca_spca508: reg_read err -71 [ 365.943697][ T5709] gspca_spca508: reg_read err -71 [ 366.222990][ T5709] gspca_spca508: reg write: error -71 [ 366.223382][ T5709] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 366.253947][ T5709] usb 1-1: USB disconnect, device number 75 [ 366.725984][ C0] net_ratelimit: 7217 callbacks suppressed [ 366.726042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.726976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 366.727868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.728295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.728691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.729548][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 366.730426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.730820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.731220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.732100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 367.326216][T12429] netlink: 'syz.3.3187': attribute type 21 has an invalid length. [ 367.326449][T12429] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3187'. [ 367.344858][T12429] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3187'. [ 367.375423][T12430] netlink: 'syz.0.3186': attribute type 3 has an invalid length. [ 371.402746][ T31] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 371.732835][ C0] net_ratelimit: 7471 callbacks suppressed [ 371.732902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 371.733777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.734170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.734568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.735430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 371.736447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.736864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.737310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.738206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 371.739160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.197268][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 372.225011][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 372.225260][ T31] usb 1-1: config 0 has no interface number 0 [ 372.225802][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 372.265961][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.266212][ T31] usb 1-1: Product: syz [ 372.266436][ T31] usb 1-1: Manufacturer: syz [ 372.266644][ T31] usb 1-1: SerialNumber: syz [ 372.315697][ T31] usb 1-1: config 0 descriptor?? [ 372.793393][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 372.793854][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 372.841364][ T31] usb 1-1: USB disconnect, device number 76 [ 373.241487][ T5709] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 373.301025][T12482] tmpfs: Bad value for 'mpol' [ 373.412525][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 373.618997][ T5709] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 373.631533][ T5709] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 373.631779][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.632006][ T5709] usb 2-1: config 0 has no interface number 0 [ 373.632252][ T5709] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 373.632471][ T5709] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 373.632707][ T5709] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.632929][ T5709] usb 2-1: config 0 interface 52 has no altsetting 0 [ 373.791139][T12484] vivid-000: ================= START STATUS ================= [ 373.791543][T12484] vivid-000: ================== END STATUS ================== [ 373.823987][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 373.824233][ T5709] usb 2-1: Product: syz [ 373.824452][ T5709] usb 2-1: SerialNumber: syz [ 373.888016][ T5709] usb 2-1: config 0 descriptor?? [ 374.187162][ T5709] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 374.187739][ T5709] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 374.381898][ T4937] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 374.421213][ T5709] usb 2-1: USB disconnect, device number 75 [ 374.451509][T12490] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3213'. [ 376.739571][ C0] net_ratelimit: 7158 callbacks suppressed [ 376.739625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 376.740487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.741273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 376.741702][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.742657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 376.743557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.744016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 376.744430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.745333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 376.746245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.104047][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 378.382532][T12514] netlink: 'syz.2.3223': attribute type 23 has an invalid length. [ 378.546068][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563323][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.665590][T12518] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3225'. [ 378.787727][ T5801] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 378.947574][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 379.008598][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.008867][ T5801] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 379.036065][ T5801] usb 2-1: config 165 has an invalid interface number: 162 but max is 0 [ 379.036307][ T5801] usb 2-1: config 165 has no interface number 0 [ 379.036556][ T5801] usb 2-1: config 165 interface 162 has no altsetting 0 [ 379.075831][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.076087][ T5801] usb 2-1: Product: syz [ 379.076309][ T5801] usb 2-1: Manufacturer: syz [ 379.076526][ T5801] usb 2-1: SerialNumber: syz [ 379.086337][ T10] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 379.471984][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 379.542460][ T10] usb 4-1: can't read configurations, error -71 [ 379.619043][T12524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3227'. [ 379.761606][ T5801] usb 2-1: USB disconnect, device number 76 [ 381.745734][ C0] net_ratelimit: 7293 callbacks suppressed [ 381.745799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.746713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 381.747658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.748099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.748534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.749516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 381.750456][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.750903][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.751331][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.752260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 383.664685][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 383.775205][ T5801] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 383.877076][T12559] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3243'. [ 383.945833][ T5801] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 383.959103][ T5801] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 383.959339][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.959564][ T5801] usb 3-1: config 0 has no interface number 0 [ 384.035353][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.035596][ T5801] usb 3-1: Product: syz [ 384.035830][ T5801] usb 3-1: Manufacturer: syz [ 384.036046][ T5801] usb 3-1: SerialNumber: syz [ 384.085814][ T5801] usb 3-1: config 0 descriptor?? [ 384.399078][T12557] hsr_slave_0 (unregistering): left promiscuous mode [ 384.462040][ T5801] usb 3-1: USB disconnect, device number 77 [ 386.384740][T12576] syz.2.3251: vmalloc error: size 68719476738, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.385861][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.2.3251 Not tainted syzkaller #0 PREEMPT(full) [ 386.385890][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.385913][T12576] Call Trace: [ 386.385927][T12576] [ 386.385937][T12576] dump_stack_lvl+0xe8/0x150 [ 386.386072][T12576] warn_alloc+0x24d/0x270 [ 386.386144][T12576] ? __pfx_warn_alloc+0x10/0x10 [ 386.386187][T12576] ? __mutex_trylock_common+0x15f/0x270 [ 386.386245][T12576] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 386.386324][T12576] __vmalloc_node_range_noprof+0x127/0x1540 [ 386.386355][T12576] ? rcu_is_watching+0x16/0xb0 [ 386.386391][T12576] ? trace_contention_end+0x3d/0x140 [ 386.386419][T12576] ? __mutex_lock+0x30b/0x1550 [ 386.386536][T12576] ? tomoyo_path_number_perm+0x219/0x5f0 [ 386.386648][T12576] ? tomoyo_path_number_perm+0x219/0x5f0 [ 386.386678][T12576] ? dvb_dvr_do_ioctl+0x76/0x220 [ 386.386719][T12576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.386759][T12576] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 386.386794][T12576] vmalloc_noprof+0xb2/0xe0 [ 386.386823][T12576] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 386.386861][T12576] dvb_dvr_do_ioctl+0x12b/0x220 [ 386.386904][T12576] dvb_usercopy+0x199/0x2e0 [ 386.386936][T12576] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 386.386971][T12576] ? __pfx_dvb_usercopy+0x10/0x10 [ 386.387024][T12576] ? __fget_files+0x3a2/0x420 [ 386.387067][T12576] ? __fget_files+0x2a/0x420 [ 386.387098][T12576] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 386.387134][T12576] dvb_dvr_ioctl+0x29/0x40 [ 386.387170][T12576] __se_sys_ioctl+0xfc/0x170 [ 386.387207][T12576] do_syscall_64+0x166/0x520 [ 386.387274][T12576] ? trace_irq_disable+0x3b/0x140 [ 386.387331][T12576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.387377][T12576] ? clear_bhb_loop+0x70/0xc0 [ 386.387406][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.387430][T12576] RIP: 0033:0x7f484d99e0d9 [ 386.387453][T12576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.387474][T12576] RSP: 002b:00007f484e933028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.387499][T12576] RAX: ffffffffffffffda RBX: 00007f484dc25fa0 RCX: 00007f484d99e0d9 [ 386.387517][T12576] RDX: 0000001000000002 RSI: 0000000000006f2d RDI: 0000000000000003 [ 386.387532][T12576] RBP: 00007f484da35024 R08: 0000000000000000 R09: 0000000000000000 [ 386.387547][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.387561][T12576] R13: 00007f484dc26038 R14: 00007f484dc25fa0 R15: 00007ffde1a860e8 [ 386.387597][T12576] [ 386.744654][T12576] Mem-Info: [ 386.744882][T12576] active_anon:6004 inactive_anon:0 isolated_anon:0 [ 386.744882][T12576] active_file:256 inactive_file:54178 isolated_file:0 [ 386.744882][T12576] unevictable:0 dirty:290 writeback:0 [ 386.744882][T12576] slab_reclaimable:10130 slab_unreclaimable:94818 [ 386.744882][T12576] mapped:25131 shmem:522 pagetables:1173 [ 386.744882][T12576] sec_pagetables:0 bounce:0 [ 386.744882][T12576] kernel_misc_reclaimable:0 [ 386.744882][T12576] free:1329674 free_pcp:10144 free_cma:0 [ 386.745143][T12576] Node 0 active_anon:24016kB inactive_anon:0kB active_file:1024kB inactive_file:216448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100524kB dirty:1156kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11592kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.745395][T12576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.745658][T12576] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.746106][T12576] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 386.747461][T12576] Node 0 DMA32 free:1353580kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24016kB inactive_anon:0kB active_file:1024kB inactive_file:216448kB unevictable:0kB writepending:1156kB zspages:0kB present:3129332kB managed:2542440kB mlocked:0kB bounce:0kB free_pcp:40324kB local_pcp:21236kB free_cma:0kB [ 386.747951][T12576] lowmem_reserve[]: 0 0 1 1 1 [ 386.749342][T12576] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.749792][T12576] lowmem_reserve[]: 0 0 0 0 0 [ 386.751164][T12576] Node 1 Normal free:3949756kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 386.751621][T12576] lowmem_reserve[]: 0 0 0 0 [ 386.752583][ C0] net_ratelimit: 7162 callbacks suppressed [ 386.752606][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.752904][T12576] 0 [ 386.753218][T12576] Node 0 DMA: [ 386.753502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 386.753617][T12576] 0*4kB 0*8kB 0*16kB 0*32kB [ 386.754399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.754414][T12576] 0*64kB 0*128kB [ 386.754807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.754813][T12576] 0*256kB [ 386.755012][T12576] 0*512kB 1*1024kB [ 386.755234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.755417][T12576] (U) 1*2048kB (M) 3*4096kB (M) [ 386.756204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 386.756404][T12576] = 15360kB [ 386.756631][T12576] Node 0 DMA32: 160*4kB [ 386.757140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.757218][T12576] (UM) 381*8kB [ 386.757550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.757619][T12576] (UME) 262*16kB [ 386.757974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.758025][T12576] (UME) 291*32kB (UME) 133*64kB (UME) [ 386.758845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 386.759009][T12576] 116*128kB (UME) 99*256kB (M) 15*512kB (M) 10*1024kB (M) 12*2048kB (UME) 304*4096kB (UM) = 1353576kB [ 386.761584][T12576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.264087][T12576] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 5*16kB (U) 8*32kB (U) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 963*4096kB (M) = 3949756kB [ 387.264282][T12576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.264301][T12576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.264320][T12576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.264339][T12576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.264358][T12576] 54952 total pagecache pages [ 387.264380][T12576] 0 pages in swap cache [ 387.264389][T12576] Free swap = 124996kB [ 387.264399][T12576] Total swap = 124996kB [ 387.264409][T12576] 2097051 pages RAM [ 387.264418][T12576] 0 pages HighMem/MovableOnly [ 387.264426][T12576] 429397 pages reserved [ 387.264434][T12576] 0 pages cma reserved [ 391.759256][ C0] net_ratelimit: 7197 callbacks suppressed [ 391.759315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.759683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.760521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 391.762471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.763380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.764288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.766619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 391.767590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.768045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.768456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.065750][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'. [ 392.334970][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3272'. [ 393.452080][T12626] netlink: 600 bytes leftover after parsing attributes in process `syz.0.3277'. [ 394.787625][T12630] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 396.766221][ C0] net_ratelimit: 7490 callbacks suppressed [ 396.766273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.766693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.767636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 396.768545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.769224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.770351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.772617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 396.774676][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.775677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.776817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.055658][ T31] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 398.225533][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 398.244035][ T31] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 398.273971][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.274211][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.775534][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.775777][ T31] usb 1-1: Product: syz [ 398.776007][ T31] usb 1-1: Manufacturer: syz [ 398.776216][ T31] usb 1-1: SerialNumber: syz [ 400.991525][ T31] usb 1-1: USB disconnect, device number 77 [ 401.204829][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.772992][ C0] net_ratelimit: 7402 callbacks suppressed [ 401.773054][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.776911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.779113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 401.781443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.782491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.783777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.785982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 401.788203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.789326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.790338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.188305][T12691] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 403.562193][T12701] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.923424][ T5801] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 405.081157][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 405.087493][ T5801] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 405.109364][ T5801] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 405.109637][ T5801] usb 3-1: config 251 has no interface number 0 [ 405.109923][ T5801] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 405.110171][ T5801] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 405.110414][ T5801] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 405.110666][ T5801] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 405.110930][ T5801] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.111202][ T5801] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.111452][ T5801] usb 3-1: config 251 interface 202 has no altsetting 0 [ 405.880898][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.881155][ T5801] usb 3-1: Product: syz [ 405.881379][ T5801] usb 3-1: Manufacturer: syz [ 405.881587][ T5801] usb 3-1: SerialNumber: syz [ 406.010911][T12709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 406.313959][ T5801] cxacru 3-1:251.202: cxacru_bind: interface has incorrect endpoints [ 406.314363][ T5801] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 406.402396][ T5801] usb 3-1: USB disconnect, device number 78 [ 406.780654][ C0] net_ratelimit: 7186 callbacks suppressed [ 406.780713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.781085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.781467][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.782240][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 406.783072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.783487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.783853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.784817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 406.785715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.786114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.572506][T12720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.591702][T12739] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 409.664129][T12753] tmpfs: Bad value for 'mpol' [ 411.787749][ C0] net_ratelimit: 7589 callbacks suppressed [ 411.787804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 411.788998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.789523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.790820][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.793520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 411.796283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.797650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.798910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.807192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 411.808474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.087636][T12761] echo interval is out of bounds [ 412.087636][T12761] [ 412.088062][T12761] CIFS: VFS: echo interval is out of bounds [ 412.346115][T12765] overlay: Bad value for 'workdir' [ 412.451654][T12768] overlayfs: conflicting options: userxattr,metacopy=on [ 413.570099][T12783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3349'. [ 415.265021][T12805] netlink: 'syz.1.3361': attribute type 3 has an invalid length. [ 415.265285][T12805] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 415.265506][T12805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3361'. [ 415.265733][T12805] NCSI netlink: No device for ifindex 511 [ 416.794721][ C0] net_ratelimit: 7431 callbacks suppressed [ 416.794793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.795202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.795619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.796551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 416.797405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.797797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.798206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.799090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 416.799987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.800378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.743496][ T5801] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 417.906585][ T5801] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 417.924479][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.945611][ T5801] usb 3-1: config 0 descriptor?? [ 418.009095][ T5801] cp210x 3-1:0.0: cp210x converter detected [ 418.282237][ T5801] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 418.290088][ T5801] cp210x 3-1:0.0: querying part number failed [ 418.346172][ T5801] usb 3-1: cp210x converter now attached to ttyUSB0 [ 418.365897][ T5801] usb 3-1: USB disconnect, device number 79 [ 418.387446][ T5801] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.399119][ T5801] cp210x 3-1:0.0: device disconnected [ 419.842284][ T5801] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 420.075041][ T5801] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 420.097983][ T5801] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 420.098230][ T5801] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 420.098461][ T5801] usb 2-1: config 0 has no interface number 0 [ 420.098677][ T5801] usb 2-1: config 0 has no interface number 1 [ 420.098918][ T5801] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 420.099149][ T5801] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 420.099372][ T5801] usb 2-1: config 0 interface 255 has no altsetting 0 [ 420.201056][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.201294][ T5801] usb 2-1: Product: syz [ 420.201504][ T5801] usb 2-1: Manufacturer: syz [ 420.201721][ T5801] usb 2-1: SerialNumber: syz [ 420.255193][ T5801] usb 2-1: config 0 descriptor?? [ 420.330821][ T5801] usb 2-1: selecting invalid altsetting 0 [ 420.359058][ T5801] usb 2-1: Could not set interface, error -22 [ 420.574135][ T5801] usb 2-1: USB disconnect, device number 77 [ 421.801607][ C0] net_ratelimit: 7237 callbacks suppressed [ 421.801668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 421.802529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.802963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.803377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.804238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 421.805097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.805496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.805907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.806788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 421.807654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.992978][T12844] netlink: 'syz.0.3379': attribute type 4 has an invalid length. [ 424.129867][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 424.769592][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 425.866038][T12883] /dev/sg0: Can't lookup blockdev [ 426.808399][ C0] net_ratelimit: 7374 callbacks suppressed [ 426.808464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 426.809381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.809792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.810282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.811987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 426.814201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.815221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.816229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.818437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 426.820932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.896104][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 429.772319][T12914] netlink: 'syz.3.3412': attribute type 6 has an invalid length. [ 429.772575][T12914] netlink: 'syz.3.3412': attribute type 6 has an invalid length. [ 431.776633][ T5709] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 431.816028][ C0] net_ratelimit: 7302 callbacks suppressed [ 431.816084][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 431.817442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.818426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.819394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.821513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 431.823428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.824393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.825458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.828856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 431.831009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.285164][ T5709] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 432.541281][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 432.541535][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 432.541769][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 432.930635][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.930884][ T5709] usb 1-1: Product: syz [ 432.931127][ T5709] usb 1-1: Manufacturer: syz [ 432.931336][ T5709] usb 1-1: SerialNumber: syz [ 433.056282][ T5709] usb 1-1: config 0 descriptor?? [ 433.065390][T12937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.065749][T12937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.083140][ T5709] usb 1-1: ucan: probing device on interface #0 [ 433.845108][ T5709] usb 1-1: ucan: failed to retrieve device info [ 433.845376][ T5709] usb 1-1: ucan: probe failed; try to update the device firmware [ 433.919200][ T5709] usb 1-1: USB disconnect, device number 78 [ 434.393888][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 434.594972][ T25] usb 2-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.00 [ 434.625279][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.625553][ T25] usb 2-1: Product: syz [ 434.625776][ T25] usb 2-1: Manufacturer: syz [ 434.625985][ T25] usb 2-1: SerialNumber: syz [ 435.501179][T12959] binder: 12957:12959 ioctl 400c620e 200000000140 returned -22 [ 436.489751][T12968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3440'. [ 436.822753][ C0] net_ratelimit: 7541 callbacks suppressed [ 436.822817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.825021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 436.827172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.828169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.828872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.831033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 436.833331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.834289][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.835269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.837442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 437.518252][ T25] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 437.959815][ T25] usb 2-1: USB disconnect, device number 78 [ 438.079802][T12976] netlink: 495 bytes leftover after parsing attributes in process `syz.3.3443'. [ 439.537993][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.545284][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.549899][ T5801] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 441.706175][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.727620][ T5801] usb 2-1: not running at top speed; connect to a high speed hub [ 441.727875][ T5801] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 441.830255][ C0] net_ratelimit: 7267 callbacks suppressed [ 441.830341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 441.832650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.833698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.834821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.837109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 441.839763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.840943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.842069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.844942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 441.847358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.877866][ T5801] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 441.877898][ T5801] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 441.877920][ T5801] usb 2-1: config 5 has no interface number 0 [ 441.877971][ T5801] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 25309, setting to 64 [ 441.878000][ T5801] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.878031][ T5801] usb 2-1: config 5 interface 246 has no altsetting 0 [ 442.008890][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.008922][ T5801] usb 2-1: Product: syz [ 442.008939][ T5801] usb 2-1: Manufacturer: syz [ 442.008956][ T5801] usb 2-1: SerialNumber: syz [ 442.072008][T13010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 443.927387][ T5801] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 444.015300][ T40] usb 2-1: Failed to submit usb control message: -71 [ 444.065999][ T40] usb 2-1: unable to send the bmi data to the device: -71 [ 444.076511][ T5801] usb 2-1: USB disconnect, device number 79 [ 444.085148][ T40] usb 2-1: unable to get target info from device [ 444.092241][ T40] usb 2-1: could not get target info (-71) [ 444.099089][ T40] usb 2-1: could not probe fw (-71) [ 444.205905][T13029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3462'. [ 445.425010][T13037] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.3465'. [ 446.118258][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 446.664684][ T10] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 446.756200][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.778322][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 446.799737][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.837048][ C0] net_ratelimit: 7100 callbacks suppressed [ 446.837103][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.837521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.838393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 446.839826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.840803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.841895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.844091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 446.845851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.846938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.847943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.973861][ T10] usb 3-1: config 0 descriptor?? [ 448.023362][ T10] Bluetooth: Can't get state to change to load configuration err [ 448.049888][ T10] Bluetooth: Loading sysconfig file failed [ 448.074546][ T10] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 448.143404][ T10] usb 3-1: USB disconnect, device number 80 [ 451.844725][ C0] net_ratelimit: 7301 callbacks suppressed [ 451.844799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.845492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.846423][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.848613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 451.851971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.853210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.854520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.857041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 451.859596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.861008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.909320][T13110] ubi0: attaching mtd0 [ 453.032154][T13110] ubi0: scanning is finished [ 453.041150][T13110] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 456.129739][T13110] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 456.476860][T13127] netlink: 'syz.1.3500': attribute type 27 has an invalid length. [ 456.485050][T13127] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3500'. [ 456.627307][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 456.844885][T13131] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 456.853561][ C0] net_ratelimit: 7361 callbacks suppressed [ 456.853626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 456.854423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.854809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.855576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.858219][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 456.860759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.862006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.863252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.865890][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 456.868534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.341163][T13141] netlink: 'syz.0.3506': attribute type 1 has an invalid length. [ 458.390662][T13141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3506'. [ 458.430530][T13141] nbd: illegal input index 2147483646 [ 461.858612][ C0] net_ratelimit: 7183 callbacks suppressed [ 461.858680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.859022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 461.859372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.860514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 461.862552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.863480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 461.864402][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.868165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 461.870680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.871743][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.269358][T13171] netlink: 'syz.1.3516': attribute type 8 has an invalid length. [ 462.822255][T13180] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 462.913796][ T31] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 463.074768][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 463.083575][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 463.099967][ T31] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 463.125498][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 463.138032][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 463.138310][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 463.187326][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.187587][ T31] usb 2-1: Product: syz [ 463.187812][ T31] usb 2-1: Manufacturer: syz [ 463.188092][ T31] usb 2-1: SerialNumber: syz [ 463.236039][ T31] usb 2-1: config 0 descriptor?? [ 463.475521][ T31] appledisplay: Apple Cinema Display connected [ 463.738249][ T31] usb 2-1: USB disconnect, device number 80 [ 463.738325][ C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 463.795423][ T31] appledisplay: Apple Cinema Display disconnected [ 464.431851][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3526'. [ 464.432085][T13196] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3526'. [ 466.866397][ C0] net_ratelimit: 7375 callbacks suppressed [ 466.866452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.866881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.867753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 466.868714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.869130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.869536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.870414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 466.871317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.871733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.872143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.219568][ T5283] veth0_vlan: left promiscuous mode [ 468.288871][ T31] veth0_vlan: entered promiscuous mode [ 471.873881][ C0] net_ratelimit: 7324 callbacks suppressed [ 471.873946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 471.874818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.875227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.875687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.877257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 471.878142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.878558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.879639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.881871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 471.884226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.719171][T13280] netlink: 'syz.0.3557': attribute type 27 has an invalid length. [ 473.892240][ T31] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 474.054071][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 474.082247][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 474.098717][ T31] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.110809][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.122264][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 474.133550][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 474.153927][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.154175][ T31] usb 3-1: Product: syz [ 474.154445][ T31] usb 3-1: Manufacturer: syz [ 474.154654][ T31] usb 3-1: SerialNumber: syz [ 474.200132][ T31] usb 3-1: config 0 descriptor?? [ 474.216826][T13277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.511051][T13277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.665753][ T31] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 474.824801][ T31] usb 3-1: USB disconnect, device number 81 [ 474.824878][ C1] synaptics_usb 3-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 476.161763][T13306] random: crng reseeded on system resumption [ 476.881200][ C0] net_ratelimit: 7363 callbacks suppressed [ 476.881280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.881732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 476.882143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.883015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 476.883892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.884300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 476.884699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.885562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 476.886487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.887551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.179612][T13349] netdevsim netdevsim2: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 481.888022][ C0] net_ratelimit: 7429 callbacks suppressed [ 481.888087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 481.890368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.891389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.892542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.894263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 481.895133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.895568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.895970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.896816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 481.899384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.857175][ T25] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 483.549534][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.549838][ T25] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 483.572182][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 483.595099][ T25] usb 2-1: string descriptor 0 read error: -22 [ 483.595466][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.647314][T13356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 483.683507][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.895799][ T31] usb 2-1: USB disconnect, device number 81 [ 486.895425][ C0] net_ratelimit: 7536 callbacks suppressed [ 486.895490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.896598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.899030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 486.901403][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.901844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.902268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.903222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 486.904153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.905279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.906448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.173851][T13396] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3602'. [ 488.437311][ T31] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 488.624492][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 488.660366][ T31] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 488.660642][ T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.660888][ T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.829980][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.830427][ T31] usb 2-1: Product: syz [ 488.830654][ T31] usb 2-1: Manufacturer: syz [ 488.830862][ T31] usb 2-1: SerialNumber: syz [ 488.875509][ T5709] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 488.915202][ T31] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 489.038038][ T5709] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 489.084628][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 489.084878][ T5709] usb 1-1: Product: syz [ 489.085133][ T5709] usb 1-1: Manufacturer: syz [ 489.085352][ T5709] usb 1-1: SerialNumber: syz [ 489.151945][ T31] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 489.223671][ T5709] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 489.654379][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 489.666566][ T5709] vp7045: USB control message 'in' went wrong. [ 489.666886][ T5709] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 489.667146][ T5709] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 489.831524][ T5709] usb 1-1: USB disconnect, device number 79 [ 489.941793][ T31] usb 2-1: USB disconnect, device number 82 [ 490.465266][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.902507][ C0] net_ratelimit: 7480 callbacks suppressed [ 491.902572][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 491.904239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.905142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.906189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.908129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 491.909349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.910273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.911186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.913287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 491.915498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.539316][T13432] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 492.539550][T13432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3617'. [ 492.947504][T13432] .`: renamed from bond0 (while UP) [ 494.493239][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 496.910025][ C0] net_ratelimit: 7567 callbacks suppressed [ 496.910091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 496.911310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.911803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 496.912295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.913413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 496.914473][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.914993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 496.915476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.920612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 496.921638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.625409][ T31] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 500.788113][ T31] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 500.812056][ T31] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 500.812320][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.837854][ T31] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 500.838146][ T31] usb 3-1: Manufacturer: syz [ 500.859511][ T31] usb 3-1: config 0 descriptor?? [ 500.932197][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.939399][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.917829][ C0] net_ratelimit: 7354 callbacks suppressed [ 501.917893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 501.918872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.919927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 501.920888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.923018][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 501.924983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.925856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 501.926841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.929124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 501.931188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.611251][ T31] rc_core: IR keymap rc-hauppauge not found [ 502.611484][ T31] Registered IR keymap rc-empty [ 502.632012][ T31] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 502.674138][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input41 [ 502.720834][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 502.785451][ T31] usb 3-1: USB disconnect, device number 82 [ 505.064646][T13540] usb usb8: usbfs: process 13540 (syz.3.3655) did not claim interface 0 before use [ 505.299428][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3659'. [ 505.299752][T13542] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 506.924607][ C0] net_ratelimit: 7490 callbacks suppressed [ 506.924665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 506.925808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.926316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 506.926830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.927923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 506.929426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.930687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 506.931901][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.934717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 506.943998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.525669][T13616] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 511.932226][ C0] net_ratelimit: 7375 callbacks suppressed [ 511.932282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.932736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.933171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.934197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 511.936635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.937860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.938953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.941159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 511.943682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.944798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 516.266239][T13635] usb usb9: usbfs: process 13635 (syz.0.3693) did not claim interface 0 before use [ 516.657214][T13639] netlink: 'syz.3.3695': attribute type 11 has an invalid length. [ 516.667868][T13639] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3695'. [ 516.939494][ C0] net_ratelimit: 7674 callbacks suppressed [ 516.939552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.940734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 516.941781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.944051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 516.946110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.947150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 516.948156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.950585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 516.952891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.953924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.946911][ C0] net_ratelimit: 7686 callbacks suppressed [ 521.946966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.947406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.947805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.948858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 521.951009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.951984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.952947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.954990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 521.957355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.958342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.248986][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 523.685315][T13701] tmpfs: Bad value for 'mpol' [ 526.954285][ C0] net_ratelimit: 7430 callbacks suppressed [ 526.954360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.954823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.955231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.956739][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 526.957736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.958167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.958597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.959538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 526.960529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.960972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.203661][ T5709] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 528.366603][ T5709] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 528.378767][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.390813][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.424338][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 528.432531][ T5709] usb 4-1: SerialNumber: syz [ 528.585742][ T5709] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 528.588722][ T5709] usb-storage 4-1:1.0: USB Mass Storage device detected [ 528.729515][ T5709] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 528.816512][ T5709] scsi host1: usb-storage 4-1:1.0 [ 530.640406][ T5709] usb 4-1: USB disconnect, device number 76 [ 531.962161][ C0] net_ratelimit: 7581 callbacks suppressed [ 531.962238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 531.964585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.965657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.966673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.969997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 531.972434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.973567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.974632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.977185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 531.979401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.206972][T13764] tmpfs: Bad value for 'nr_inodes' [ 534.559297][T13788] CacheFiles: Empty tag specified [ 536.969355][ C0] net_ratelimit: 7604 callbacks suppressed [ 536.969428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.970558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.972766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 536.975896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.976297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.976708][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.977561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 536.978398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.978776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.979275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.413000][T13808] netlink: 'syz.2.3774': attribute type 22 has an invalid length. [ 539.269003][T13828] netlink: 'syz.3.3784': attribute type 10 has an invalid length. [ 539.281752][T13828] batman_adv: batadv0: Adding interface: dummy0 [ 539.290741][T13828] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.290907][T13828] batman_adv: batadv0: Interface activated: dummy0 [ 539.328116][ T5709] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 539.559527][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 539.559791][ T5709] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 539.582274][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 539.618752][ T5709] usb 1-1: string descriptor 0 read error: -22 [ 539.619100][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.649668][T13823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 539.665971][ T5709] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.187953][ T5709] usb 1-1: USB disconnect, device number 80 [ 540.325158][T13836] udevd[13836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.759786][T13843] comedi comedi0: 8255: I/O port conflict (0xfffffffc,4) [ 541.977210][ C0] net_ratelimit: 7526 callbacks suppressed [ 541.977267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.977663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.978100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.978932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 541.979762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.980233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.980623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.981442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 541.982319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.982713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.749433][T13852] netlink: 'syz.2.3793': attribute type 21 has an invalid length. [ 542.763933][T13852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3793'. [ 544.914989][T13869] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 545.007045][T13869] overlayfs: missing 'lowerdir' [ 545.013114][T13874] No source specified [ 545.631740][T13882] trusted_key: encrypted_key: master key parameter is missing [ 546.983902][ C0] net_ratelimit: 7431 callbacks suppressed [ 546.983979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.984426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.985352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 546.986220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.986627][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.987152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.989444][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 546.991693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.992665][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.993666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.963827][ T31] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 548.134086][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 548.144762][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 548.156681][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 548.168285][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.180250][ T31] usb 1-1: config 0 descriptor?? [ 548.440467][ T31] ath6kl: Failed to submit usb control message: -71 [ 548.447509][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 548.454731][ T31] ath6kl: Unable to send get target info: -71 [ 548.471656][ T31] ath6kl: Failed to init ath6kl core: -71 [ 548.488231][ T31] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 548.507474][ T31] usb 1-1: USB disconnect, device number 81 [ 550.501720][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3828'. [ 550.664902][ T31] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 550.834265][ T31] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 550.883324][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.883570][ T31] usb 2-1: Product: syz [ 550.883793][ T31] usb 2-1: Manufacturer: syz [ 550.884000][ T31] usb 2-1: SerialNumber: syz [ 551.158819][T13933] netlink: 'syz.3.3830': attribute type 21 has an invalid length. [ 551.159152][T13933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3830'. [ 551.495221][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 551.662512][ T31] usb 2-1: USB disconnect, device number 83 [ 551.909111][T13625] udevd[13625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.991401][ C0] net_ratelimit: 7490 callbacks suppressed [ 551.991458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.991865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.992724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 551.993622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.994479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.995836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.997990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 551.999870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.000738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.001878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.066209][T13970] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 556.999558][ C0] net_ratelimit: 7468 callbacks suppressed [ 556.999635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 557.002052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.003117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.004169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.005853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 557.006757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.007170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.007585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.009284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 557.011592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.630791][T13984] libceph: resolve ' [ 557.630791][T13984] -&fYǝa2i [ 557.630791][T13984] .?&*&' (ret=-3): failed [ 559.637922][ T5709] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 560.204866][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.205142][ T5709] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 560.226646][ T5709] usb 1-1: config 1 has an invalid interface number: 97 but max is 1 [ 560.226893][ T5709] usb 1-1: config 1 has no interface number 1 [ 560.227169][ T5709] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 560.227434][ T5709] usb 1-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 560.227665][ T5709] usb 1-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 560.227885][ T5709] usb 1-1: config 1 interface 0 has no altsetting 0 [ 560.228103][ T5709] usb 1-1: config 1 interface 97 has no altsetting 0 [ 560.329213][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.329454][ T5709] usb 1-1: Product: syz [ 560.329675][ T5709] usb 1-1: Manufacturer: syz [ 560.329892][ T5709] usb 1-1: SerialNumber: syz [ 560.416815][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 560.417050][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 560.539152][T14006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3864'. [ 560.658916][ T5709] smsusb:smsusb_probe: board id=8, interface number 0 [ 560.723217][ T5709] smsusb:smsusb_probe: board id=8, interface number 97 [ 560.764654][ T5709] usb 1-1: USB disconnect, device number 82 [ 560.981425][T14009] blktrace: Concurrent blktraces are not allowed on loop5 [ 562.006372][ C0] net_ratelimit: 5391 callbacks suppressed [ 562.006438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.007594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.008703][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.011125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 562.015954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.017313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.018490][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.020866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 562.025883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.026985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.360776][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.367440][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.813360][T14053] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3888'. [ 567.015400][ C0] net_ratelimit: 5446 callbacks suppressed [ 567.015474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.016461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 567.017507][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.019703][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 567.024042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.025183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 567.026153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.028446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 567.032934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.033679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.025769][ T5709] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 568.034498][ T31] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 568.507840][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 568.516340][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 568.552332][ T31] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 568.552578][ T31] usb 1-1: config 0 has no interface number 0 [ 568.552816][ T31] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 568.552912][ T31] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.553169][ T31] usb 1-1: config 0 interface 85 has no altsetting 0 [ 568.747739][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.755767][ T5709] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=73.7c [ 568.767610][ T5709] usb 2-1: config 1 has an invalid interface number: 130 but max is 0 [ 568.767858][ T5709] usb 2-1: config 1 has no interface number 0 [ 568.768089][ T5709] usb 2-1: config 1 interface 130 has no altsetting 0 [ 568.792871][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.793121][ T5709] usb 2-1: Product: syz [ 568.793352][ T5709] usb 2-1: Manufacturer: syz [ 568.793565][ T5709] usb 2-1: SerialNumber: syz [ 568.911826][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.912077][ T31] usb 1-1: Product: syz [ 568.912297][ T31] usb 1-1: Manufacturer: syz [ 568.912518][ T31] usb 1-1: SerialNumber: syz [ 568.958989][ T31] usb 1-1: config 0 descriptor?? [ 569.299105][ T5709] upd78f0730 2-1:1.130: upd78f0730 converter detected [ 569.351814][ T5709] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 569.454581][ T5709] usb 2-1: USB disconnect, device number 84 [ 569.553750][ T5709] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 569.554986][ T5709] upd78f0730 2-1:1.130: device disconnected [ 569.752388][ T31] appletouch 1-1:0.85: Failed to request geyser raw mode [ 569.759961][ T31] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 570.101165][ T31] usb 1-1: USB disconnect, device number 83 [ 571.737091][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 572.021794][ C0] net_ratelimit: 5330 callbacks suppressed [ 572.021854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 572.024824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.025866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 572.026741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.028633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 572.033011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.033895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 572.034943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.036961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 572.041578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.328702][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 572.381838][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 572.491951][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 572.513672][ T10] usb 3-1: config 0 has no interface number 0 [ 572.534646][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.558055][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 572.581353][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 572.606515][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 572.629560][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 572.654129][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.736706][ T10] usb 3-1: config 0 descriptor?? [ 572.997740][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 573.139488][T14086] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 573.304556][ T10] usb 3-1: USB disconnect, device number 83 [ 573.340580][ T31] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 573.482222][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 573.501747][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 573.509458][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 573.530019][ T31] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 573.546706][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.546943][ T31] usb 2-1: Product: syz [ 573.547173][ T31] usb 2-1: Manufacturer: syz [ 573.547381][ T31] usb 2-1: SerialNumber: syz [ 573.591242][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 573.591488][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 573.638600][ T5702] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 574.115997][ T31] r8152-cfgselector 2-1: USB disconnect, device number 85 [ 574.372758][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 574.521425][ T5702] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 576.222129][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.244049][ T5702] usb 4-1: Product: syz [ 576.339734][ T5702] usb 4-1: can't set config #1, error -71 [ 576.684267][ T5702] usb 4-1: USB disconnect, device number 77 [ 577.030558][ C0] net_ratelimit: 5047 callbacks suppressed [ 577.030620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.031096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.031557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.032611][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 577.034684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.035556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.036044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.037076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 577.039148][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.039577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.327220][T14126] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3920'. [ 579.452550][T14150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3932'. [ 580.637968][T14162] netlink: 'syz.0.3938': attribute type 21 has an invalid length. [ 580.638201][T14162] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3938'. [ 580.638494][T14162] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3938'. [ 582.036430][ C0] net_ratelimit: 5420 callbacks suppressed [ 582.036492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.037439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 582.039449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.039888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.040358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.041342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 582.043295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.043733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.044164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.045122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 583.933200][T14193] netlink: 'syz.1.3950': attribute type 1 has an invalid length. [ 584.185846][T14187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 584.243540][T14187] block device autoloading is deprecated and will be removed. [ 587.044314][ C0] net_ratelimit: 5496 callbacks suppressed [ 587.044376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.045438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.046468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.048618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 587.053017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.054146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.055161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.057296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 587.062070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.062724][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.610562][T14217] netlink: 'syz.2.3962': attribute type 11 has an invalid length. [ 590.601868][ T31] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 590.771744][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 590.777503][ T5801] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 590.789140][ T31] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 590.809111][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.809351][ T31] usb 2-1: Product: syz [ 590.809572][ T31] usb 2-1: Manufacturer: syz [ 590.809789][ T31] usb 2-1: SerialNumber: syz [ 590.857502][ T31] usb 2-1: config 0 descriptor?? [ 590.904264][ T31] gspca_main: sq930x-2.14.0 probing 2770:930c [ 590.943879][ T5801] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.975118][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.992200][ T5801] usb 3-1: config 0 descriptor?? [ 591.011190][ T5801] cp210x 3-1:0.0: cp210x converter detected [ 591.423311][ T31] gspca_sq930x: reg_r 001f failed -110 [ 591.423635][ T31] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 592.052547][ C0] net_ratelimit: 5446 callbacks suppressed [ 592.052621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.053025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.053431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.054381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 592.056232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.056626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.057016][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.057889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 592.059673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.060063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.483649][ T5801] usb 3-1: cp210x converter now attached to ttyUSB0 [ 592.515726][ T5801] usb 3-1: USB disconnect, device number 84 [ 592.563433][ T5801] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 592.582761][ T5801] cp210x 3-1:0.0: device disconnected [ 593.583068][ T31] usb 2-1: USB disconnect, device number 86 [ 596.458880][ T5801] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 596.643416][ T5801] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 596.656403][ T5801] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 596.656645][ T5801] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 596.656881][ T5801] usb 2-1: config 1 interface 0 has no altsetting 0 [ 596.740543][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.740782][ T5801] usb 2-1: Product: syz [ 596.741005][ T5801] usb 2-1: Manufacturer: syz [ 596.741220][ T5801] usb 2-1: SerialNumber: syz [ 596.778960][T14298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.779304][T14298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.058737][ C0] net_ratelimit: 5381 callbacks suppressed [ 597.058798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 597.062977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.064924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.066110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.068278][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 597.072794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.073760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.074744][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.076856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 597.078760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.278110][ T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 598.927867][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 599.011543][ T31] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 599.248566][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.280997][ T5801] rtl8150 2-1:1.0: couldn't reset the device [ 599.281607][ T5801] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 599.308402][ T31] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 599.382920][ T5801] usb 2-1: USB disconnect, device number 87 [ 599.744155][ T31] gspca_nw80x: reg_r err -71 [ 599.744463][ T31] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 599.776068][ T31] usb 4-1: USB disconnect, device number 78 [ 602.067202][ C0] net_ratelimit: 5427 callbacks suppressed [ 602.067268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.067693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.068146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.069067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 602.071720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.072899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.073930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.076351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:50:a5:f6:e8, vlan:0) [ 602.080251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.081297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.283091][T14342] netlink: 'syz.2.4021': attribute type 20 has an invalid length. [ 604.453137][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 604.557091][T14354] ================================================================== [ 604.557113][T14354] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 604.557226][T14354] Read of size 1 at addr ffff8880795b4758 by task syz.1.4027/14354 [ 604.557247][T14354] [ 604.557263][T14354] CPU: 1 UID: 0 PID: 14354 Comm: syz.1.4027 Not tainted syzkaller #0 PREEMPT(full) [ 604.557308][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.557324][T14354] Call Trace: [ 604.557334][T14354] [ 604.557345][T14354] dump_stack_lvl+0xe8/0x150 [ 604.557378][T14354] print_address_description+0x55/0x1e0 [ 604.557425][T14354] ? string+0x216/0x2d0 [ 604.557451][T14354] print_report+0x58/0x70 [ 604.557480][T14354] kasan_report+0x117/0x150 [ 604.557514][T14354] ? string+0x216/0x2d0 [ 604.557546][T14354] string+0x216/0x2d0 [ 604.557577][T14354] vsnprintf+0x74a/0xef0 [ 604.557612][T14354] seq_printf+0x188/0x290 [ 604.557652][T14354] ? __kmalloc_noprof+0x38c/0x720 [ 604.557686][T14354] ? __pfx_seq_printf+0x10/0x10 [ 604.557728][T14354] ? __asan_memcpy+0x40/0x70 [ 604.557763][T14354] input_devices_seq_show+0x10f/0x640 [ 604.557832][T14354] seq_read_iter+0x8d5/0xca0 [ 604.557875][T14354] seq_read+0x367/0x480 [ 604.557915][T14354] ? __pfx_seq_read+0x10/0x10 [ 604.557948][T14354] ? __mutex_trylock_common+0x15f/0x270 [ 604.557980][T14354] ? common_file_perm+0x20e/0x2b0 [ 604.558062][T14354] ? __pfx_seq_read+0x10/0x10 [ 604.558094][T14354] proc_reg_read+0x1e9/0x2e0 [ 604.558194][T14354] ? __pfx_proc_reg_read+0x10/0x10 [ 604.558229][T14354] vfs_read+0x213/0xa80 [ 604.558273][T14354] ? __pfx___mutex_lock+0x10/0x10 [ 604.558297][T14354] ? __pfx_vfs_read+0x10/0x10 [ 604.558326][T14354] ? __fget_files+0x2a/0x420 [ 604.558355][T14354] ? __fget_files+0x3a2/0x420 [ 604.558381][T14354] ? __fget_files+0x2a/0x420 [ 604.558411][T14354] ksys_read+0x150/0x270 [ 604.558441][T14354] ? __pfx_ksys_read+0x10/0x10 [ 604.558479][T14354] do_syscall_64+0x166/0x520 [ 604.558500][T14354] ? trace_irq_disable+0x3b/0x140 [ 604.558534][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.558559][T14354] ? clear_bhb_loop+0x70/0xc0 [ 604.558586][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.558609][T14354] RIP: 0033:0x7f9eb799e0d9 [ 604.558631][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.558652][T14354] RSP: 002b:00007f9eb8871028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.558678][T14354] RAX: ffffffffffffffda RBX: 00007f9eb7c25fa0 RCX: 00007f9eb799e0d9 [ 604.558696][T14354] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 0000000000000003 [ 604.558713][T14354] RBP: 00007f9eb7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 604.558729][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.558743][T14354] R13: 00007f9eb7c26038 R14: 00007f9eb7c25fa0 R15: 00007ffce92cd7e8 [ 604.558771][T14354] [ 604.558780][T14354] [ 604.558793][T14354] Allocated by task 5626: [ 604.558806][T14354] kasan_save_track+0x3e/0x80 [ 604.558847][T14354] __kasan_kmalloc+0x93/0xb0 [ 604.558880][T14354] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 604.558913][T14354] __alloc_skb+0x2c1/0x7a0 [ 604.558965][T14354] netlink_sendmsg+0x5d4/0xb40 [ 604.559016][T14354] sock_sendmsg_nosec+0x13a/0x180 [ 604.559065][T14354] ____sys_sendmsg+0x54e/0x850 [ 604.559091][T14354] ___sys_sendmsg+0x2a5/0x360 [ 604.559116][T14354] __x64_sys_sendmsg+0x1b1/0x290 [ 604.559143][T14354] do_syscall_64+0x166/0x520 [ 604.559162][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.559184][T14354] [ 604.559190][T14354] Freed by task 5626: [ 604.559202][T14354] kasan_save_track+0x3e/0x80 [ 604.559232][T14354] kasan_save_free_info+0x40/0x50 [ 604.559258][T14354] __kasan_slab_free+0x5c/0x80 [ 604.559290][T14354] kfree+0x1c5/0x650 [ 604.559313][T14354] skb_release_data+0x85e/0xab0 [ 604.559340][T14354] __kfree_skb+0x5d/0x210 [ 604.559363][T14354] netlink_unicast+0x7c5/0x940 [ 604.559388][T14354] netlink_sendmsg+0x813/0xb40 [ 604.559417][T14354] sock_sendmsg_nosec+0x13a/0x180 [ 604.559449][T14354] ____sys_sendmsg+0x54e/0x850 [ 604.559473][T14354] ___sys_sendmsg+0x2a5/0x360 [ 604.559499][T14354] __x64_sys_sendmsg+0x1b1/0x290 [ 604.559525][T14354] do_syscall_64+0x166/0x520 [ 604.559543][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.559565][T14354] [ 604.559577][T14354] The buggy address belongs to the object at ffff8880795b4000 [ 604.559577][T14354] which belongs to the cache kmalloc-2k of size 2048 [ 604.559598][T14354] The buggy address is located 1880 bytes inside of [ 604.559598][T14354] freed 2048-byte region [ffff8880795b4000, ffff8880795b4800) [ 604.559621][T14354] [ 604.559628][T14354] The buggy address belongs to the physical page: [ 604.559647][T14354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880795b3000 pfn:0x795b0 [ 604.559671][T14354] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 604.559689][T14354] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 604.559712][T14354] page_type: f5(slab) [ 604.559739][T14354] raw: 00fff00000000240 ffff88813ff16000 ffffea0000adfc10 ffffea0000a50610 [ 604.559760][T14354] raw: ffff8880795b3000 0000000000080002 00000000f5000000 0000000000000000 [ 604.559783][T14354] head: 00fff00000000240 ffff88813ff16000 ffffea0000adfc10 ffffea0000a50610 [ 604.559804][T14354] head: ffff8880795b3000 0000000000080002 00000000f5000000 0000000000000000 [ 604.559833][T14354] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 604.559854][T14354] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 604.559867][T14354] page dumped because: kasan: bad access detected [ 604.559883][T14354] page_owner tracks the page as allocated [ 604.559892][T14354] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 84685852478 [ 604.559928][T14354] post_alloc_hook+0x1f9/0x250 [ 604.559957][T14354] get_page_from_freelist+0x2209/0x2280 [ 604.559988][T14354] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 604.560020][T14354] allocate_slab+0x7d/0x620 [ 604.560042][T14354] refill_objects+0x2d5/0x350 [ 604.560064][T14354] __pcs_replace_empty_main+0x2c8/0x6c0 [ 604.560086][T14354] __kmalloc_cache_noprof+0x39b/0x600 [ 604.560115][T14354] rtnl_newlink+0x143/0x1c30 [ 604.560152][T14354] rtnetlink_rcv_msg+0x802/0xc00 [ 604.560175][T14354] netlink_rcv_skb+0x226/0x4a0 [ 604.560203][T14354] netlink_unicast+0x7bd/0x940 [ 604.560228][T14354] netlink_sendmsg+0x813/0xb40 [ 604.560257][T14354] sock_sendmsg_nosec+0x13a/0x180 [ 604.560288][T14354] __sys_sendto+0x408/0x5a0 [ 604.560311][T14354] __x64_sys_sendto+0xde/0x100 [ 604.560334][T14354] do_syscall_64+0x166/0x520 [ 604.560352][T14354] page last free pid 5622 tgid 5622 ts 84564993813 stack trace: [ 604.560369][T14354] __free_frozen_pages+0xc93/0xd90 [ 604.560396][T14354] __slab_free+0x274/0x2c0 [ 604.560425][T14354] qlist_free_all+0x99/0x100 [ 604.560453][T14354] kasan_quarantine_reduce+0x148/0x160 [ 604.560483][T14354] __kasan_slab_alloc+0x22/0x80 [ 604.560515][T14354] __kmalloc_cache_noprof+0x29f/0x600 [ 604.560544][T14354] register_netdevice+0x57e/0x1eb0 [ 604.560572][T14354] veth_newlink+0x6a2/0xdd0 [ 604.560625][T14354] rtnl_newlink_create+0x305/0x7b0 [ 604.560652][T14354] rtnl_newlink+0x166d/0x1c30 [ 604.560676][T14354] rtnetlink_rcv_msg+0x802/0xc00 [ 604.560698][T14354] netlink_rcv_skb+0x226/0x4a0 [ 604.560726][T14354] netlink_unicast+0x7bd/0x940 [ 604.560750][T14354] netlink_sendmsg+0x813/0xb40 [ 604.560779][T14354] sock_sendmsg_nosec+0x13a/0x180 [ 604.560811][T14354] __sys_sendto+0x408/0x5a0 [ 604.560842][T14354] [ 604.560849][T14354] Memory state around the buggy address: [ 604.560862][T14354] ffff8880795b4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.560878][T14354] ffff8880795b4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.560894][T14354] >ffff8880795b4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.560906][T14354] ^ [ 604.560918][T14354] ffff8880795b4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.560932][T14354] ffff8880795b4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 604.560945][T14354] ================================================================== [ 604.964287][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 605.080182][T14354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.435563][T14354] CPU: 1 UID: 0 PID: 14354 Comm: syz.1.4027 Not tainted syzkaller #0 PREEMPT(full) [ 605.444971][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.455091][T14354] Call Trace: [ 605.458408][T14354] [ 605.461377][T14354] vpanic+0x56d/0xa60 [ 605.465429][T14354] ? __pfx_vpanic+0x10/0x10 [ 605.469984][T14354] ? __pfx___schedule+0x10/0x10 [ 605.474969][T14354] panic+0xc5/0xd0 [ 605.478741][T14354] ? __pfx_panic+0x10/0x10 [ 605.483206][T14354] ? preempt_schedule_thunk+0x16/0x40 [ 605.488638][T14354] ? string+0x216/0x2d0 [ 605.492846][T14354] check_panic_on_warn+0x89/0xb0 [ 605.497878][T14354] ? string+0x216/0x2d0 [ 605.502080][T14354] end_report+0x73/0x170 [ 605.506367][T14354] ? string+0x216/0x2d0 [ 605.510588][T14354] kasan_report+0x128/0x150 [ 605.515129][T14354] ? string+0x216/0x2d0 [ 605.519331][T14354] string+0x216/0x2d0 [ 605.523357][T14354] vsnprintf+0x74a/0xef0 [ 605.527645][T14354] seq_printf+0x188/0x290 [ 605.532037][T14354] ? __kmalloc_noprof+0x38c/0x720 [ 605.537122][T14354] ? __pfx_seq_printf+0x10/0x10 [ 605.542025][T14354] ? __asan_memcpy+0x40/0x70 [ 605.546664][T14354] input_devices_seq_show+0x10f/0x640 [ 605.552099][T14354] seq_read_iter+0x8d5/0xca0 [ 605.556785][T14354] seq_read+0x367/0x480 [ 605.561011][T14354] ? __pfx_seq_read+0x10/0x10 [ 605.565755][T14354] ? __mutex_trylock_common+0x15f/0x270 [ 605.571365][T14354] ? common_file_perm+0x20e/0x2b0 [ 605.576456][T14354] ? __pfx_seq_read+0x10/0x10 [ 605.581189][T14354] proc_reg_read+0x1e9/0x2e0 [ 605.585831][T14354] ? __pfx_proc_reg_read+0x10/0x10 [ 605.590993][T14354] vfs_read+0x213/0xa80 [ 605.595200][T14354] ? __pfx___mutex_lock+0x10/0x10 [ 605.600269][T14354] ? __pfx_vfs_read+0x10/0x10 [ 605.604992][T14354] ? __fget_files+0x2a/0x420 [ 605.609624][T14354] ? __fget_files+0x3a2/0x420 [ 605.614349][T14354] ? __fget_files+0x2a/0x420 [ 605.618991][T14354] ksys_read+0x150/0x270 [ 605.623280][T14354] ? __pfx_ksys_read+0x10/0x10 [ 605.628093][T14354] do_syscall_64+0x166/0x520 [ 605.632748][T14354] ? trace_irq_disable+0x3b/0x140 [ 605.637821][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.643924][T14354] ? clear_bhb_loop+0x70/0xc0 [ 605.648665][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.654597][T14354] RIP: 0033:0x7f9eb799e0d9 [ 605.659049][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.678696][T14354] RSP: 002b:00007f9eb8871028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.687162][T14354] RAX: ffffffffffffffda RBX: 00007f9eb7c25fa0 RCX: 00007f9eb799e0d9 [ 605.695181][T14354] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 0000000000000003 [ 605.703209][T14354] RBP: 00007f9eb7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 605.711225][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.719255][T14354] R13: 00007f9eb7c26038 R14: 00007f9eb7c25fa0 R15: 00007ffce92cd7e8 [ 605.727305][T14354] [ 605.730532][T14354] Kernel Offset: disabled [ 605.734892][T14354] Rebooting in 86400 seconds..